Prosím o kontrolu

Zpráva

mikeav · #1 Příspěvek od **mikeav** » 05 srp 2010 20:33

Předem děkuji za odpověď

Logfile of random's system information tool 1.06 (written by random/random)
Run by Michael at 2010-08-05 21:32:02
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 104 GB (45%) free of 230 GB
Total RAM: 2046 MB (54% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:32:04, on 5.8.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18928)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Program Files\Packard Bell\FIJI\ABoard.exe
C:\Program Files\HP\HP UT\bin\hppusg.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Windows\PixArt\Pac207\Monitor.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\opwareSE2.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Users\Michael\Program Files\DNA\btdna.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Packard Bell\FIJI\AOSD.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\conime.exe
C:\Users\Michael\Desktop\RSIT.exe
C:\Program Files\trend micro\Michael.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.findeer.it
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: XTTBPos00 Class - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Program Files\Packard Bell\FIJI\aboard.exe
O4 - HKLM\..\Run: [HPUsageTracking] C:\Program Files\HP\HP UT\bin\hppusg.exe "C:\Program Files\HP\HP UT\"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [Monitor] C:\Windows\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Users\Michael\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: GamersFirst LIVE!.lnk = C:\Program Files\GamersFirst\LIVE!\Live.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Free YouTube Download - C:\Users\Michael\AppData\Roaming\DVDVideoSoftIEHelpers\youtubedownload.htm
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Michael\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: QIP 2005 - {1EF681F7-A04B-4D6D-9012-A307CCA55610} - C:\Program Files\QIP\qip.exe (file missing) (HKCU)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GoogleDesktopNetwork3.dll C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Desktop Manager 5.9.911.3589 (GoogleDesktopManager-110309-193829) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Update Service (gupdate1c98ca02a73add0) (gupdate1c98ca02a73add0) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe

--
End of file - 9609 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Google Software Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\User_Feed_Synchronization-{3866C7F1-A167-4755-AB27-F7B74917F24F}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055FD26D-3A88-4e15-963D-DC8493744B1D}]
XTTBPos00 Class - C:\PROGRA~1\ICQTOO~1\toolbaru.dll [2006-12-25 701952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll [2009-09-23 761840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CA6319C0-31B7-401E-A518-A07C3DB8F777}]
CBrowserHelperObject Object - C:\Program Files\Google\Google_BAE\BAE.dll [2006-11-09 98304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-03-01 4390912]
"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2010-03-20 30192]
"toolbar_eula_launcher"=C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe [2007-02-20 28672]
"ACTIVBOARD"=C:\Program Files\Packard Bell\FIJI\aboard.exe [2007-01-18 79416]
"HPUsageTracking"=C:\Program Files\HP\HP UT\bin\hppusg.exe [2007-05-04 36864]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-02-05 81000]
"AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [2010-04-13 47392]
"Monitor"=C:\Windows\PixArt\PAC207\Monitor.exe [2006-11-03 319488]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-03-17 421888]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-04-28 142120]
"OpwareSE2"=C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe [2003-05-08 49152]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
"ISUSPM"=C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [2007-08-30 205480]
"BitTorrent DNA"=C:\Users\Michael\Program Files\DNA\btdna.exe [2010-05-24 323392]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxWatchTray]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
[]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
GamersFirst LIVE!.lnk - C:\Program Files\GamersFirst\LIVE!\Live.exe

C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe
PowerReg Scheduler.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\Google\GOOGLE~3\GoogleDesktopNetwork3.dll C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=
"NoDrives"=
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e69a3f9b-27cc-11df-97a9-001c2551eec5}]
shell\AutoRun\command - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL D:\presentazione_lumen_def.mov

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2010-08-03 09:38:03 ----AC---- C:\Windows\system32\shell32.dll

======List of files/folders modified in the last 1 months======

2010-08-05 21:32:03 ----DC---- C:\Windows\Temp
2010-08-05 21:32:03 ----ADC---- C:\Program Files\trend micro
2010-08-05 21:24:27 ----DC---- C:\Users\Michael\AppData\Roaming\DNA
2010-08-05 20:57:36 ----DC---- C:\Windows\system32\inetsrv
2010-08-05 20:55:37 ----DC---- C:\ProgramData\NVIDIA
2010-08-05 18:48:33 ----DC---- C:\Windows\Minidump
2010-08-05 18:48:29 ----DC---- C:\Windows
2010-08-05 18:14:30 ----SHD---- C:\System Volume Information
2010-08-04 23:56:17 ----DC---- C:\Users\Michael\AppData\Roaming\vlc
2010-08-04 23:49:44 ----DC---- C:\Windows\tracing
2010-08-04 20:56:34 ----DC---- C:\Windows\system32\drivers
2010-08-04 19:47:02 ----DC---- C:\Users\Michael\AppData\Roaming\dvdcss
2010-08-04 15:56:05 ----ADC---- C:\Windows\System32
2010-08-04 02:04:50 ----D---- C:\Windows\winsxs
2010-08-03 09:47:30 ----DC---- C:\Users\Michael\AppData\Roaming\Skype
2010-08-03 09:36:49 ----DC---- C:\Windows\system32\catroot
2010-08-03 09:31:54 ----ADC---- C:\Users\Michael\AppData\Roaming\skypePM
2010-07-28 15:08:07 ----DC---- C:\Windows\inf
2010-07-28 15:08:07 ----AC---- C:\Windows\system32\PerfStringBackup.INI
2010-07-24 23:41:23 ----DC---- C:\Windows\system32\catroot2
2010-07-23 16:18:41 ----DC---- C:\Program Files\Common Files\DVDVideoSoft
2010-07-23 16:18:33 ----DC---- C:\Program Files\DVDVideoSoft
2010-07-22 21:11:00 ----DC---- C:\Windows\prefetch
2010-07-19 11:34:19 ----DC---- C:\Windows\Debug
2010-07-16 11:55:48 ----DC---- C:\Program Files\Windows Mail
2010-07-09 13:33:08 ----DC---- C:\ProgramData\Roxio
2010-07-09 12:22:00 ----ADC---- C:\Adobe
2010-07-09 08:51:50 ----SHDC---- C:\Config.Msi
2010-07-09 08:50:24 ----SHDC---- C:\Windows\Installer
2010-07-08 21:13:10 ----DC---- C:\Users\Michael\AppData\Roaming\Adobe
2010-07-08 21:12:05 ----DC---- C:\Program Files\Common Files\Adobe
2010-07-08 21:12:04 ----DC---- C:\ProgramData\Adobe
2010-07-08 21:04:18 ----DC---- C:\Program Files\Mozilla Firefox
2010-07-08 21:04:18 ----DC---- C:\Program Files\Adobe
2010-07-08 21:04:18 ----ADC---- C:\Windows\system32\Adobe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2009-02-05 23152]
R1 aswSP;avast! Self Protection; C:\Windows\system32\drivers\aswSP.sys [2009-02-05 114768]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2009-02-05 51376]
R2 Aspi32;Aspi32; C:\Windows\system32\drivers\Aspi32.sys [1997-12-23 23936]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\DRIVERS\aswMonFlt.sys [2009-02-05 51792]
R2 RMCAST;Ovladač protokolu RMCAST (Pgm); C:\Windows\system32\DRIVERS\RMCAST.sys [2009-04-11 113664]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\System32\Drivers\GEARAspiWDM.sys [2009-05-18 26600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-03-01 1744928]
R3 MQAC;@mqutil.dll,-6101; C:\Windows\system32\drivers\mqac.sys [2008-01-19 126976]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2010-01-12 11586280]
R3 PAC207;Webcam 1200; C:\Windows\system32\DRIVERS\PFC027.SYS [2007-06-29 611584]
R3 RTL8023xp;Realtek 10/100 NIC Family NDIS x86 Driver; C:\Windows\system32\DRIVERS\Rtnicxp.sys [2006-11-02 47104]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
S3 BT;Bluetooth PAN Network Adapter; C:\Windows\system32\DRIVERS\btnetdrv.sys []
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\Windows\System32\Drivers\btcusb.sys []
S3 btnetBUs;Bluetooth PAN Bus Service; C:\Windows\System32\Drivers\btnetBus.sys [2008-12-07 30088]
S3 cpuz132;cpuz132; \??\C:\Users\Michael\AppData\Local\Temp\cpuz132\cpuz132_x32.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 EagleNT;EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2009-08-05 54632]
S3 IvtBtBUs;IVT Bluetooth Bus Service; C:\Windows\System32\Drivers\IvtBtBus.sys []
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2009-02-09 17664]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2009-02-09 22016]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2009-02-09 7808]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2010-04-16 41472]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-04-11 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2009-02-09 7808]
S3 VComm;Virtual Serial port driver; C:\Windows\system32\DRIVERS\VComm.sys []
S3 VcommMgr;Bluetooth VComm Manager Service; C:\Windows\System32\Drivers\VcommMgr.sys []
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2008-03-11 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-04-16 144672]
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-04-08 345376]
R2 CISVC;@%systemroot%\system32\CISVC.EXE,-1; C:\Windows\system32\CISVC.EXE [2008-01-19 11264]
R2 IISADMIN;@%windir%\system32\inetsrv\iisres.dll,-30007; C:\Windows\system32\inetsrv\inetinfo.exe [2008-01-19 13824]
R2 LPDSVC;@%systemroot%\system32\lpdsvc.dll,-500; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 MSMQ;@mqutil.dll,-6102; C:\Windows\system32\mqsvc.exe [2006-11-02 8704]
R2 MSMQTriggers;@mqutil.dll,-6203; C:\Windows\system32\mqtgsvc.exe [2009-04-11 125952]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-02-18 129880]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-02-18 129880]
R2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-02-18 129880]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-01-11 129640]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2009-11-15 75064]
R2 PnkBstrB;PnkBstrB; C:\Windows\system32\PnkBstrB.exe [2009-11-15 189248]
R2 RoxWatch9;Roxio Hard Drive Watcher 9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe [2007-01-11 166648]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 simptcp;@%SystemRoot%\system32\simptcp.dll,-200; C:\Windows\System32\tcpsvcs.exe [2009-08-14 9728]
R2 SNMP;@%SystemRoot%\system32\snmp.exe,-3; C:\Windows\System32\snmp.exe [2009-04-11 47616]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-01-11 240232]
R2 TeamViewer5;TeamViewer 5; C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2010-03-18 172328]
R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-04-28 545576]
R3 RoxMediaDB9;RoxMediaDB9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2007-01-11 887544]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S2 gupdate1c98ca02a73add0;Google Update Service (gupdate1c98ca02a73add0); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-02-12 133104]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe []
S3 aspnet_state;@%windir%\system32\inetsrv\iisres.dll,-30009; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-03-30 31048]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S3 fsssvc;Služba Windows Live Zabezpečení rodiny; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-08-05 704864]
S3 GoogleDesktopManager-110309-193829;Google Desktop Manager 5.9.911.3589; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2010-03-20 30192]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 NtmsSvc;@%SystemRoot%\system32\ntmssvc.dll,-2; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-06-02 637952]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2010-06-26 395048]
S3 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2006-09-14 73728]
S3 WMSvc;@%windir%\system32\inetsrv\iisres.dll,-20001; C:\Windows\system32\inetsrv\wmsvc.exe [2008-01-19 11264]
S4 TlntSvr;@%SystemRoot%\system32\tlntsvr.exe,-119; C:\Windows\System32\tlntsvr.exe [2009-04-11 71168]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 05 srp 2010 20:50

Zdravim a pekny vecer preji

Doporucuji odinstalovat (pokud nepouzivate) toolbary (listy prohlizecu) v Přidat nebo odebrat programy

Zapojte do PC vsechny USB klice (flashky, ext. disky apod.)

Stahne a ulozte na plochu UsbFix http://www.viry.cz/forum/viewtopic.php?f=24&t=102308
Spustte a kliknete na Deletion
Po dokonceni sem vlozte log, pokud na Vas nevyskoci, najdete jej zde C:\UsbFix.txt

Stahnete OTL (viz muj podpis) a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
Zaskrtnete okenko Pro vsechny uzivatele
Zaskrtnete okenko Kontrola na havet "LOP"
Zaskrtnete okenko Kontrola na havet "Purity"
Stari souboru zmente z 30 dnu na 7 dnu
Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

Kód: Vybrat vše

netsvcs
drivers32
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
c:\windows\*.* /U
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
symmpi.sys
adp3132.sys
mv61xx.sys
nvraid.sys
ndis.sys
winlogon.exe
explorer.exe
userinit.exe
lsass.exe
svchost.exe
smss.exe
hal.dll
ws2_32.dll
tcpip.sys
cryptsvc.dll
Changer.sys
JakNDis.sys
isapnp.sys
cdrom.sys
autochk.exe
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
CREATERESTOREPOINT

Kliknete na tlacitko Prohledat
Po dokonceni skenu (cca 5min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte

Jsou s PC nejake problemy

mikeav · #3 Příspěvek od **mikeav** » 05 srp 2010 21:29

Dnes při sledování jednoho videa na youtube se mi z ničeho nic počítač sek a následně vypl (stalo se mi to poprvé).
Zde jsou logy:

UsbFix:
############################## | UsbFix 7.019 | [Deletion]

User: Michael (Administrator) # MICHAEL-PC [Packard Bell BV iMedia 2423]
Updated 03/08/10 by El Desaparecido / C_XX
Started at 22:01:14 | 05/08/2010
Website: http://pagesperso-orange.fr/NosTools/index.html
Contact: FindyKill.Contact@gmail.com

CPU: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
CPU 2: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
Microsoft® Windows Vista™ Home Premium (6.0.6002 32-Bit) # Service Pack 2
Internet Explorer 8.0.6001.18928

Windows Firewall: Enabled
RAM -> 2046 Mb
C:\ (%systemdrive%) -> Fixed drive # 225 Gb (101 Mb free - 45%) [HDD] # NTFS
H:\ -> CD-ROM

################## | Files # Infected Folders |

################## | Registry |

Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
Deleted ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives

################## | Mountpoints2 |

Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{e69a3f9b-27cc-11df-97a9-001c2551eec5}

################## | Listing |

[05/08/2010 - 22:02:51 | SHDC ] C:\$RECYCLE.BIN
[09/07/2010 - 12:22:00 | ADC ] C:\Adobe
[28/02/2010 - 12:28:13 | AC | 24] C:\autoexec.bat
[19/12/2009 - 20:44:56 | DC ] C:\boot
[11/04/2009 - 08:36:36 | RASH | 333257] C:\bootmgr
[09/07/2010 - 08:51:50 | SHDC ] C:\Config.Msi
[18/09/2006 - 23:43:37 | AC | 10] C:\config.sys
[02/11/2006 - 15:02:03 | SHD ] C:\Documents and Settings
[11/03/2008 - 07:24:34 | DC ] C:\drivers
[13/12/2008 - 21:02:51 | ADC ] C:\inetpub
[01/07/2008 - 15:20:36 | RASHC | 0] C:\IO.SYS
[27/02/2010 - 14:08:36 | RSHC | 111] C:\IO32.IDX
[08/08/2008 - 13:33:53 | ADC ] C:\KPCMS
[01/07/2008 - 15:20:36 | RASHC | 0] C:\MSDOS.SYS
[20/03/2010 - 17:22:12 | DC ] C:\NVIDIA
[05/08/2010 - 20:55:16 | ASH | 2459709440] C:\pagefile.sys
[28/01/2009 - 11:10:25 | ADC ] C:\perflogs
[05/07/2010 - 19:52:25 | RDC ] C:\Program Files
[05/07/2010 - 19:52:23 | DC ] C:\ProgramData
[20/02/2010 - 13:24:39 | DC ] C:\rsit
[28/02/2010 - 12:28:14 | DC ] C:\sdd
[05/08/2010 - 18:14:30 | SHD ] C:\System Volume Information
[05/08/2010 - 22:02:51 | DC ] C:\UsbFix
[05/08/2010 - 22:01:14 | AC | 2281] C:\UsbFix.txt
[28/03/2010 - 19:56:57 | RDC ] C:\Users
[01/07/2008 - 12:04:44 | DC ] C:\WAUUPGRD
[05/08/2010 - 18:48:29 | DC ] C:\Windows

################## | Vaccin |

C:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)

################## | E.O.F |

OTL:

OTL Extras logfile created on: 5.8.2010 22:05:30 - Run 1
OTL by OldTimer - Version 3.2.9.1 Folder = C:\Users\Michael\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18928)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 50,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 77,00% Paging File free
Paging file location(s): ?:\pagefile.sys

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 224,88 Gb Total Space | 101,42 Gb Free Space | 45,10% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: MICHAEL-PC
Current User Name: Michael
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 7 Days
Output = Standard

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = Reg Error: Value error.] -- Reg Error: Key error. File not found

[HKEY_USERS\S-1-5-21-3175424738-3105269781-473552097-1002\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
https [open] -- Reg Error: Value error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-3175424738-3105269781-473552097-1002]
"EnableNotificationsRef" = 2

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{AF189AF3-7FF5-4502-9E2A-291C02D035C3}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{BD73BA05-A855-4CA0-9DB8-0AD9FAA1FADB}" = lport=2869 | protocol=6 | dir=in | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{117DAA51-87B1-4156-BE8C-326B1A8DB56C}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{1259630A-A3AE-4FFD-B5A3-FCD807C7A7DD}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{209BD406-F164-43FB-B423-1122642D58D8}" = protocol=6 | dir=out | app=c:\program files\windows media player\wmplayer.exe |
"{21636AB7-9E08-4D33-95EE-D5B8F74A37F0}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{3278DABD-FEBE-4606-ADDB-B58B0AE7414E}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{3B002971-390A-4F6C-909E-A134813BFC15}" = protocol=17 | dir=out | app=c:\program files\windows media player\wmplayer.exe |
"{3B56C907-B9A4-4254-9B4C-EB6D73A4F03B}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version5\teamviewer.exe |
"{453C39EC-05CB-44B7-B150-406C8B26786B}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{458C8D1D-B219-49A6-9022-44C74BC7E864}" = protocol=17 | dir=in | app=c:\program files\dna\btdna.exe |
"{4B218A8D-20B3-4702-97A2-DE0E3D25DC41}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe |
"{51D3002C-5561-4EFC-A557-35A2FE71B302}" = protocol=17 | dir=in | app=c:\program files\windows media player\wmplayer.exe |
"{6C57F8D3-9C04-48A2-80EE-74CAEE94AFFE}" = protocol=6 | dir=in | app=c:\program files\dna\btdna.exe |
"{6ED0402E-B96A-427C-BD77-28D00EE42701}" = protocol=17 | dir=in | app=c:\program files\steam\steam.exe |
"{86A1B2C7-6B5C-4440-9B7A-8C5474AFAA62}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{8717FC59-68DF-49C7-ABB4-83581E422F04}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version5\teamviewer.exe |
"{968AA9A8-AB9A-49EC-BEEC-3861371B6958}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{A0530A63-D2D1-49B9-9FE6-12AE39E1D67D}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe |
"{A37A24D7-313C-4148-913E-13CC7FBD9760}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{AE0A0FA0-FBE3-4D0F-A731-DFC7796167C6}" = protocol=17 | dir=in | app=c:\program files\ventrilo\ventrilo.exe |
"{C36E6834-FB4F-4168-A752-3A9A8300D813}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{CABBDCCE-DD6C-4357-8AA6-63A852284EA0}" = protocol=6 | dir=in | app=c:\program files\steam\steam.exe |
"{E0F37BB2-2834-4904-AC1E-876A8426D707}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{FCDE29D2-A5BE-49CC-B1BD-79A8EC3348D3}" = protocol=6 | dir=in | app=c:\program files\ventrilo\ventrilo.exe |
"{FDB3D7B1-B0EF-4D23-85B8-DD65A7E0C42B}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe |
"TCP Query User{12D41D7C-F3DE-48AC-9088-421B3CE73F2D}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"TCP Query User{172C3786-8776-4310-A8B3-7988DD0FACD8}C:\program files\icq6.5\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6.5\icq.exe |
"TCP Query User{2BA358A2-94F8-492A-A328-109FF893FB17}C:\program files\electronic arts\dead space\dead space.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\dead space\dead space.exe |
"TCP Query User{3C56FAE1-5AFE-4F0C-B475-A85372C130DA}C:\program files\steam\steamapps\common\left 4 dead 2 demo\left4dead2.exe" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\left 4 dead 2 demo\left4dead2.exe |
"TCP Query User{55957B4D-0E58-4B7A-9797-C14D68DD55B8}C:\program files\eidos\pyro studios\commandos 3 - destination berlin\commandos3.exe" = protocol=6 | dir=in | app=c:\program files\eidos\pyro studios\commandos 3 - destination berlin\commandos3.exe |
"TCP Query User{6B151739-ACFF-435F-B382-54FB0761BF01}C:\users\michael\program files\dna\btdna.exe" = protocol=6 | dir=in | app=c:\users\michael\program files\dna\btdna.exe |
"TCP Query User{7A70C877-E546-402E-B376-ECDA4D92014F}C:\program files\limewire\limewire.exe" = protocol=6 | dir=in | app=c:\program files\limewire\limewire.exe |
"TCP Query User{8562EDA2-3763-48D8-924B-A3328EBCA614}C:\program files\skype\phone\skype.exe" = protocol=6 | dir=in | app=c:\program files\skype\phone\skype.exe |
"TCP Query User{98AFC969-3EEA-4C23-88F7-2620B82CBE2D}C:\program files\xfire\xfire.exe" = protocol=6 | dir=in | app=c:\program files\xfire\xfire.exe |
"TCP Query User{B05C5F3C-3040-49D3-8F1B-BC7999E44B4D}C:\program files\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\java.exe |
"TCP Query User{E8682BB6-B2EA-4E41-A780-E2391B99FD1B}C:\program files\3do\heroes of might and magic iv\heroes4c.exe" = protocol=6 | dir=in | app=c:\program files\3do\heroes of might and magic iv\heroes4c.exe |
"TCP Query User{FAE98D4C-0DE2-42FC-83EB-9E09CD4BDACC}C:\program files\activision\call of duty 2\cod2mp_s.exe" = protocol=6 | dir=in | app=c:\program files\activision\call of duty 2\cod2mp_s.exe |
"UDP Query User{013B8537-F11E-47F3-8DDE-CFB0FAB577EF}C:\program files\activision\call of duty 2\cod2mp_s.exe" = protocol=17 | dir=in | app=c:\program files\activision\call of duty 2\cod2mp_s.exe |
"UDP Query User{31DC0233-BC20-438B-8DEF-75B47A5CC445}C:\program files\electronic arts\dead space\dead space.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\dead space\dead space.exe |
"UDP Query User{52584BDC-CE43-4E3F-8393-199CE886F3D5}C:\program files\limewire\limewire.exe" = protocol=17 | dir=in | app=c:\program files\limewire\limewire.exe |
"UDP Query User{61ACDA14-452C-462D-9BF6-E30C0D3F5C42}C:\program files\eidos\pyro studios\commandos 3 - destination berlin\commandos3.exe" = protocol=17 | dir=in | app=c:\program files\eidos\pyro studios\commandos 3 - destination berlin\commandos3.exe |
"UDP Query User{8708582B-9A0D-4F69-B836-FB13E8221A85}C:\program files\3do\heroes of might and magic iv\heroes4c.exe" = protocol=17 | dir=in | app=c:\program files\3do\heroes of might and magic iv\heroes4c.exe |
"UDP Query User{8B3A40CE-6722-43F8-ACD2-01EEE0FFC8EE}C:\users\michael\program files\dna\btdna.exe" = protocol=17 | dir=in | app=c:\users\michael\program files\dna\btdna.exe |
"UDP Query User{964A3756-1CD1-48DD-8E88-B9886A8E204A}C:\program files\steam\steamapps\common\left 4 dead 2 demo\left4dead2.exe" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\left 4 dead 2 demo\left4dead2.exe |
"UDP Query User{AD80F25C-7C66-49CB-9A31-0F61EE2361E7}C:\program files\xfire\xfire.exe" = protocol=17 | dir=in | app=c:\program files\xfire\xfire.exe |
"UDP Query User{AE2D2316-C8E1-4CF4-8E4F-1D7C5579C467}C:\program files\skype\phone\skype.exe" = protocol=17 | dir=in | app=c:\program files\skype\phone\skype.exe |
"UDP Query User{AF137E54-BB84-43F1-8794-65AEBF011963}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{E755A374-EF6A-4379-966B-F41119301C24}C:\program files\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\java.exe |
"UDP Query User{FDBB5F02-2DD7-41BF-AC77-E3484102B560}C:\program files\icq6.5\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6.5\icq.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02C85EC5-E864-4847-AF55-42730861004C}" = MrvlUsgTracking
"{02DFF6B1-1654-411C-8D7B-FD6052EF016F}" = Apple Software Update
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{068B46A0-8858-4CEB-80BC-A4AE787A05FC}" = Windows Live Sync
"{088A077A-8028-408C-AE7B-4512AE2A65A0}" = Canon CanoScan Toolbox 4.7
"{0C973594-7DDF-4BD0-84ED-3517F7622037}" = PC Connectivity Solution
"{13F00518-807A-4B3A-83B0-A7CD90F3A398}" = MarketResearch
"{14220DB1-DD96-4BCD-B3D5-03A4EA6631C4}" = RemoteCapture 2.7.5
"{192E2132-E977-4D3E-90BA-9DBCE1B57F8C}" = Heroes of Might and Magic® IV
"{1B4AA674-F5CA-4BB5-831A-CD37B4021959}" = ImageMixer for Sony
"{1BDC9633-895B-4842-BCB6-8FA1EC2A3C5A}" = Adobe Shockwave Player
"{1D097338-B4FA-4F29-9C43-8D7A970A007E}" = Windows Live Fotogalerie
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Nástroj pro odesílání služby Windows Live
"{206FD69B-F9FE-4164-81BD-D52552BC9C23}" = GearDrvs
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{2236B741-6631-49AE-B76E-3E14CA01CC87}" = RemoteCapture Task
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{230CCBE9-14B0-4008-97AF-30C10F99E42C}" = PhotoStudio
"{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java(TM) 6 Update 17
"{2722B882-AADE-45AB-93A6-E2DCAEEA8D65}" = Image Data Converter
"{275E6655-7CB0-4B9E-A89D-2EE640B37899}" = Canon Camera TWAIN Driver
"{2767DEDE-EA9D-4FCE-A06A-40F4DD293330}" = hppusgP1000
"{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime
"{2D1C2321-8FDB-49B8-A66B-4008DC0B6B5D}" = File Viewer Utility 1.3.2
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{388E4B09-3E71-4649-8921-F44A3A2954A7}" = Microsoft Visual Studio 2005 Tools for Office Runtime
"{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup
"{3D39E775-DDDA-4327-B747-0BDC5F191331}" = Nokia PC Suite
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{3E62B27C-342F-4B44-9331-CA4BC59A586F}" = Asistent pro přihlášení ke službě Windows Live
"{3EE33958-7381-4E7B-A4F3-6E43098E9E9C}" = Browser Address Error Redirector
"{4677AAF8-8D7A-4EE2-BCE4-0068BB052353}" = ArcSoft Camera Suite
"{479A749B-1684-4881-8266-BF8DD22251E7}" = Windows Live Writer
"{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack
"{4D87DC92-C328-46EC-A7B4-9C88129DC696}" = Dead Space™
"{4E868D3D-6EEB-4273-926C-2287236B5B79}" = 3DVIA player 5.0
"{4E9F688B-E659-46D6-B554-55CA56D28BCD}" = Sony Noise Reduction Plug-In 2.0b
"{52D02A2B-03D2-4E34-A358-DC5D951FD296}" = Nokia Connectivity Cable Driver
"{553255F3-78FD-40F1-A6F8-6882140265FE}" = Apple Application Support
"{564D0000-547B-4ED8-8070-85286CC8C9BF}" = OpenOffice.org 3.0
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{58ECE031-9AAD-4011-B34A-BC78E77527E2}" = hppMSRedist
"{5ECB3A3C-980B-4D12-9724-25DCB07A1F47}" = iTunes
"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5
"{66D475AE-F18B-43A0-8BAF-61AF4403E339}" = Webcam 1200
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6E257F26-57FA-4BC9-AE3B-D50AF937DA7F}" = Windows Live Toolbar
"{71E40B32-5173-4538-8996-5822DD18E8D4}" = Windows Live Messenger
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{789289CA-F73A-4A16-A331-54D498CE069F}" = Ventrilo Client
"{7902E313-FF0F-4493-ACB1-A8147B78DCD0}" = HPSSupply
"{79D5997E-BF79-48BB-8B41-9BE59C15C2D7}" = OmniPage SE 2.0
"{7B4A5C13-069F-4AFE-AE57-C497B4E33C7E}" = Call of Duty(R) 2 Patch 1.3
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A253629-0511-4854-8B4E-46E57E66005C}" = Bonjour
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8AAB4176-A747-493A-A42C-B63CFADFD8E3}" = NVIDIA PhysX
"{92605735-AAFB-47F7-A67D-17ED129EFF9C}" = ACDSee 4.0
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{98613C99-1399-416C-A07C-1EE1C585D872}" = SeaTools for Windows
"{9DE1BE03-AFE2-4CDB-BFEB-D06D736CD01A}" = Apple Mobile Device Support
"{A29EA741-24F7-4C07-9B2C-06CB6491BE4A}" = Camera Window
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1029-7B44-A93000000001}" = Adobe Reader 9.3.3 - Czech
"{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9
"{AC76BA86-7AD7-5760-0000-900000000003}" = Japanese Fonts Support For Adobe Reader 9
"{B0490CEE-D5ED-431A-88EB-772D9DB70C0C}" = Windows Live Movie Maker
"{B7FB0C86-41A4-4402-9A33-912C462042A0}" = Roxio Creator 9 LE
"{BA165460-FCF7-4D6C-A7A2-F2321700720F}" = MobileMe Control Panel
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{C1D76D7A-F3BB-47EA-A746-5B1E2FFC1DF2}" = Canon Utilities ZoomBrowser EX
"{C9D96682-5A4D-45FA-BA3E-DDCB2B0CB868}" = Safari
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D5A9DA4B-E4F9-FB49-017D-769FC540F1F0}" = EA Download Manager UI
"{DB2E15E7-DC29-44D0-9B63-EE8E49160ECE}_is1" = Vzroy právních dokumentů 2008.2
"{DBECFA83-42DC-4585-A970-A764AB01A956}" = Call Of Duty(R) 2
"{DD73CA82-EA82-38AA-863D-9A24A018DC96}" = Microsoft .NET Framework 3.5 Language Pack SP1 - csy
"{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1" = AusLogics Disk Defrag
"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
"{E3F328E4-EB9F-4ABF-8FF3-5AD0472743D8}" = Windows Live Essentials
"{E5A10EF8-DBF3-4251-A9CA-423311DBBFC8}" = Windows Live Mail
"{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform
"{EF7E931D-DC84-471B-8DB6-A83358095474}" = EA Download Manager
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F11A403B-0DE9-4953-B790-7A2F014FBB2B}" = PhotoStitch
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F7B0939E-58DF-11DF-B3A6-005056806466}" = Google Earth
"{F86AD773-5BC0-499B-9F48-4E0D5FED759D}" = Windows Live Zabezpečení rodiny
"{FAF0DAD8-1EA7-4FEF-80E5-8D8D6EBD5A23}" = RAW Image Task
"504244733D18C8F63FF584AEB290E3904E791693" = Balíček ovladače systému Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"6A630DCEC5EEC912115F2FF59D8C2C769798D930" = Balíček ovladače systému Windows - Nokia Modem (10/12/2007 3.6)
"7-Zip" = 7-Zip 4.65
"819D45A9F73817F5B6D7C71A33ADAB88C5DA1765" = Balíček ovladače systému Windows - Nokia Modem (08/03/2007 6.84.0.2)
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Illustrator 7.0.1 CZ" = Adobe Illustrator 7.0.1 CZ
"Adobe Photoshop 7.0 CE" = Adobe Photoshop 7.0 CE
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"AUDIO_REALTEK" = Realtek HD Audio V6.0.1.5377
"avast!" = avast! Antivirus
"CCleaner" = CCleaner (remove only)
"com.ea.Vault.919CACB699904AC5D41B606703500DD39747C02D.1" = EA Download Manager UI
"CREATOR9" = Creator 9
"DVD Shrink_is1" = DVD Shrink 3.2
"EA Download Manager" = EA Download Manager
"FIJI" = Keyboard FIJI
"FirefoxCZ" = Firefox
"Flashplayer" = Flash Player 9 Internet Explorer
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4
"Free Studio_is1" = Free Studio version 4.6
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.7
"GamersFirst LIVE!" = GamersFirst LIVE!
"GamersFirst War Rock" = War Rock
"Google Desktop" = Google Desktop
"Google Updater" = Google Updater
"GoogleBAE" = Google BAE
"GoogleDesktop" = GoogleDesktop
"HijackThis" = HijackThis 2.0.2
"HP LaserJet P1000 series" = HP LaserJet P1000 series
"ImageWriter" = Packard Bell ImageWriter
"Infocentre" = Infocentre Rev. 2.0
"Inkscape" = Inkscape 0.46
"InstallShield_{14220DB1-DD96-4BCD-B3D5-03A4EA6631C4}" = Canon Utilities RemoteCapture 2.7
"InstallShield_{192E2132-E977-4D3E-90BA-9DBCE1B57F8C}" = Heroes of Might and Magic® IV
"InstallShield_{2236B741-6631-49AE-B76E-3E14CA01CC87}" = Canon RemoteCapture Task for ZoomBrowser EX
"InstallShield_{275E6655-7CB0-4B9E-A89D-2EE640B37899}" = Canon Camera TWAIN Driver 6.0
"InstallShield_{2D1C2321-8FDB-49B8-A66B-4008DC0B6B5D}" = Canon Utilities File Viewer Utility 1.3
"InstallShield_{A29EA741-24F7-4C07-9B2C-06CB6491BE4A}" = Canon Camera Window for ZoomBrowser EX
"InstallShield_{F11A403B-0DE9-4953-B790-7A2F014FBB2B}" = Canon Utilities PhotoStitch 3.1
"InstallShield_{FAF0DAD8-1EA7-4FEF-80E5-8D8D6EBD5A23}" = Canon RAW Image Task for ZoomBrowser EX
"iWisoft Free Video Converter_is1" = iWisoft Free Video Converter 1.2
"LCDTest" = Packard Bell LCD Test
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 Language Pack SP1 - csy" = Microsoft .NET Framework 3.5 SP1 – jazyková sada – CSY
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft Visual Studio 2005 Tools for Office Runtime" = Microsoft Visual Studio 2005 Tools for Office Runtime
"Mount&Blade Warband" = Mount&Blade Warband
"Mozilla Firefox (3.6.6)" = Mozilla Firefox (3.6.6)
"Nokia PC Suite" = Nokia PC Suite
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"PBREG" = Packard Bell Registration
"PhotoRecord" = Canon PhotoRecord
"Picasa 3" = Picasa 3
"Picasa_2" = Picasa2
"Power Supply Designer II" = Power Supply Designer II
"PunkBusterSvc" = PunkBuster Services
"SciTech Display Doctor" = SciTech Display Doctor
"SETUPMYPC_CZ" = SetUp My PC
"Shockwave" = Shockwave player 10
"SKYPE" = Skype 3.5.2.239
"Steam App 550" = Left 4 Dead 2
"Steam App 564" = Left 4 Dead 2 Add-on Support
"SystemRequirementsLab" = System Requirements Lab
"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2
"TeamViewer 5" = TeamViewer 5
"Uninstall_is1" = Uninstall 1.0.0.1
"Updator" = Packard Bell Updator
"Usbfix" = Usbfix By C_XX & El Desaparecido
"VIDEO_NVIDIA" = Video NVIDIA v162.22
"VLC media player" = VLC media player 1.0.5
"Voice Manager" = Voice Manager
"WinLiveSuite_Wave3" = Windows Live Essentials
"Xfire" = Xfire (remove only)

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-3175424738-3105269781-473552097-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"BitTorrent DNA" = DNA

========== Last 10 Event Log Errors ==========

[ Antivirus Events ]
Error - 21.4.2010 11:59:24 | Computer Name = Michael-PC | Source = avast! | ID = 33554522
Description = AAVM - chyba při testování: x_AavmCheckFileDirectEx: avfilesScanReal
of C:\Windows\System32\conime.exe failed, 00000005.

Error - 6.5.2010 17:08:15 | Computer Name = Michael-PC | Source = avast! | ID = 33554522
Description = AAVM - chyba při testování: x_AavmCheckFileDirectEx: avfilesScanReal
of C:\Windows\System32\conime.exe failed, 00000005.

Error - 10.5.2010 5:07:06 | Computer Name = Michael-PC | Source = avast! | ID = 33554522
Description = AAVM - chyba při testování: x_AavmCheckFileDirectEx: avfilesScanReal
of C:\Windows\System32\conime.exe failed, 00000005.

Error - 10.5.2010 9:31:52 | Computer Name = Michael-PC | Source = avast! | ID = 33554522
Description = AAVM - chyba při testování: x_AavmCheckFileDirectEx: avfilesScanReal
of C:\Windows\System32\conime.exe failed, 00000005.

Error - 19.5.2010 5:22:25 | Computer Name = Michael-PC | Source = avast! | ID = 33554522
Description = AAVM - chyba při testování: x_AavmCheckFileDirectEx: avfilesScanReal
of C:\Windows\System32\conime.exe failed, 00000005.

Error - 6.7.2010 1:32:09 | Computer Name = Michael-PC | Source = avast! | ID = 33554522
Description = AAVM - chyba při testování: x_AavmCheckFileDirectEx: avfilesScanReal
of C:\Windows\System32\conime.exe failed, 00000005.

Error - 6.7.2010 10:16:21 | Computer Name = Michael-PC | Source = avast! | ID = 33554522
Description = AAVM - chyba při testování: x_AavmCheckFileDirectEx: avfilesScanReal
of C:\Windows\System32\conime.exe failed, 00000005.

Error - 9.7.2010 4:49:07 | Computer Name = Michael-PC | Source = avast! | ID = 33554522
Description = AAVM - chyba při testování: x_AavmCheckFileDirectEx: avfilesScanReal
of C:\Windows\System32\conime.exe failed, 00000005.

Error - 11.7.2010 9:51:28 | Computer Name = Michael-PC | Source = avast! | ID = 33554522
Description = AAVM - chyba při testování: x_AavmCheckFileDirectEx: avfilesScanReal
of C:\Windows\System32\conime.exe failed, 00000005.

Error - 18.7.2010 5:06:36 | Computer Name = Michael-PC | Source = avast! | ID = 33554522
Description = AAVM - chyba při testování: x_AavmCheckFileDirectEx: avfilesScanReal
of C:\Windows\System32\conime.exe failed, 00000005.

[ Application Events ]
Error - 1.8.2010 15:43:45 | Computer Name = Michael-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 2.8.2010 7:02:00 | Computer Name = Michael-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 2.8.2010 9:02:38 | Computer Name = Michael-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 2.8.2010 17:39:52 | Computer Name = Michael-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 3.8.2010 3:31:47 | Computer Name = Michael-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 3.8.2010 3:32:47 | Computer Name = Michael-PC | Source = RasClient | ID = 20227
Description =

Error - 3.8.2010 16:02:21 | Computer Name = Michael-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 4.8.2010 9:57:08 | Computer Name = Michael-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 5.8.2010 11:51:37 | Computer Name = Michael-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 5.8.2010 14:55:52 | Computer Name = Michael-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

[ System Events ]
Error - 5.8.2010 16:01:22 | Computer Name = Michael-PC | Source = Service Control Manager | ID = 7031
Description =

Error - 5.8.2010 16:01:22 | Computer Name = Michael-PC | Source = WAS | ID = 5175
Description =

Error - 5.8.2010 16:01:22 | Computer Name = Michael-PC | Source = WAS | ID = 5175
Description =

Error - 5.8.2010 16:01:23 | Computer Name = Michael-PC | Source = Service Control Manager | ID = 7031
Description =

Error - 5.8.2010 16:01:53 | Computer Name = Michael-PC | Source = Service Control Manager | ID = 7032
Description =

Error - 5.8.2010 16:03:22 | Computer Name = Michael-PC | Source = Service Control Manager | ID = 7032
Description =

Error - 5.8.2010 16:03:22 | Computer Name = Michael-PC | Source = Service Control Manager | ID = 7032
Description =

Error - 5.8.2010 16:03:22 | Computer Name = Michael-PC | Source = Service Control Manager | ID = 7032
Description =

Error - 5.8.2010 16:03:22 | Computer Name = Michael-PC | Source = Service Control Manager | ID = 7032
Description =

Error - 5.8.2010 16:03:22 | Computer Name = Michael-PC | Source = Service Control Manager | ID = 7032
Description =

< End of report >

mikeav · #4 Příspěvek od **mikeav** » 05 srp 2010 21:33

Zde je zbytek:

OTL logfile created on: 5.8.2010 22:05:30 - Run 1
OTL by OldTimer - Version 3.2.9.1 Folder = C:\Users\Michael\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18928)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 50,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 77,00% Paging File free
Paging file location(s): ?:\pagefile.sys

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 224,88 Gb Total Space | 101,42 Gb Free Space | 45,10% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: MICHAEL-PC
Current User Name: Michael
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 7 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010.08.05 22:03:45 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Michael\Desktop\OTL.exe
PRC - [2010.04.16 08:33:40 | 000,144,672 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2009.04.11 08:28:04 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\snmp.exe
PRC - [2009.04.11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009.02.18 20:38:43 | 000,129,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
PRC - [2009.02.18 20:38:43 | 000,129,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
PRC - [2009.02.05 23:08:45 | 000,081,000 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe
PRC - [2009.02.05 23:08:40 | 000,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe
PRC - [2009.02.05 23:08:26 | 000,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
PRC - [2009.02.05 23:06:04 | 000,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2009.02.05 23:01:25 | 000,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
PRC - [2008.01.19 09:33:12 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetsrv\inetinfo.exe
PRC - [2007.09.10 15:12:44 | 000,069,632 | ---- | M] (Software 2000 Limited) -- C:\Windows\System32\spool\drivers\w32x86\3\HP1006MC.EXE

========== Modules (SafeList) ==========

MOD - [2010.08.05 22:03:45 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Michael\Desktop\OTL.exe
MOD - [2010.03.20 14:43:56 | 000,123,392 | ---- | M] (Google) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll
MOD - [2009.04.11 08:21:38 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll
MOD - [2008.01.19 09:33:00 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscript.ocx

========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc)
SRV - [2010.06.26 19:21:46 | 000,395,048 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2010.04.21 19:46:17 | 000,373,760 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\inetsrv\iisw3adm.dll -- (WAS)
SRV - [2010.04.21 19:46:17 | 000,373,760 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\inetsrv\iisw3adm.dll -- (W3SVC)
SRV - [2010.04.16 08:33:40 | 000,144,672 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2010.03.20 14:43:56 | 000,030,192 | ---- | M] (Google) [On_Demand | Stopped] -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe -- (GoogleDesktopManager-110309-193829)
SRV - [2010.03.18 11:26:08 | 000,172,328 | ---- | M] (TeamViewer GmbH) [Auto | Stopped] -- C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe -- (TeamViewer5)
SRV - [2010.01.11 22:00:00 | 000,240,232 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2009.09.25 03:27:04 | 000,793,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\FntCache.dll -- (FontCache)
SRV - [2009.08.14 15:49:20 | 000,009,728 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\System32\TCPSVCS.EXE -- (simptcp)
SRV - [2009.08.05 23:48:42 | 000,704,864 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe -- (fsssvc)
SRV - [2009.06.02 10:10:08 | 000,637,952 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2009.05.19 12:36:18 | 000,240,512 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -- (SeaPort)
SRV - [2009.04.11 08:28:17 | 000,052,224 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\inetsrv\apphostsvc.dll -- (AppHostSvc)
SRV - [2009.04.11 08:28:04 | 000,047,616 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\snmp.exe -- (SNMP)
SRV - [2009.02.18 20:38:43 | 000,129,880 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing)
SRV - [2009.02.18 20:38:43 | 000,129,880 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpActivator)
SRV - [2009.02.18 20:38:43 | 000,129,880 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetPipeActivator)
SRV - [2009.02.18 20:38:43 | 000,129,880 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetMsmqActivator)
SRV - [2009.02.05 23:08:40 | 000,138,680 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus)
SRV - [2009.02.05 23:08:26 | 000,254,040 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner)
SRV - [2009.02.05 23:06:04 | 000,352,920 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner)
SRV - [2009.02.05 23:01:25 | 000,018,752 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv)
SRV - [2008.01.19 09:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2008.01.19 09:34:43 | 000,035,328 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\lpdsvc.dll -- (LPDSVC)
SRV - [2008.01.19 09:33:40 | 000,011,264 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\inetsrv\WMSvc.exe -- (WMSvc)
SRV - [2008.01.19 09:33:12 | 000,013,824 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\inetsrv\inetinfo.exe -- (IISADMIN)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\VcommMgr.sys -- (VcommMgr)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\VComm.sys -- (VComm)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\IvtBtBus.sys -- (IvtBtBUs)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\EagleNT.sys -- (EagleNT)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Michael\AppData\Local\Temp\cpuz132\cpuz132_x32.sys -- (cpuz132)
DRV - File not found [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\BtHidBus.sys -- (BtHidBus)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\btcusb.sys -- (Btcsrusb)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\btnetdrv.sys -- (BT)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive)
DRV - [2010.01.12 06:03:33 | 011,586,280 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2009.08.05 23:48:42 | 000,054,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\fssfltr.sys -- (fssfltr)
DRV - [2009.04.11 06:45:24 | 000,113,664 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rmcast.sys -- (RMCAST) Ovladač protokolu RMCAST (Pgm)
DRV - [2009.02.09 08:37:56 | 000,007,808 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2009.02.09 08:37:48 | 000,007,808 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2009.02.09 08:37:46 | 000,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2009.02.09 08:37:46 | 000,017,664 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2009.02.05 23:07:23 | 000,114,768 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2009.02.05 23:07:12 | 000,020,560 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2009.02.05 23:06:59 | 000,051,792 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2009.02.05 23:06:20 | 000,051,376 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2009.02.05 23:06:10 | 000,023,152 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2008.12.07 12:44:54 | 000,030,088 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\btnetBus.sys -- (btnetBUs)
DRV - [2008.08.26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008.03.11 08:05:43 | 000,019,000 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide)
DRV - [2008.03.11 08:05:43 | 000,017,464 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide)
DRV - [2008.01.19 09:41:25 | 000,020,024 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\viaide.sys -- (viaide)
DRV - [2008.01.19 08:08:49 | 000,126,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mqac.sys -- (MQAC)
DRV - [2007.06.29 17:32:08 | 000,611,584 | ---- | M] (PixArt Imaging Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\PFC027.SYS -- (PAC207)
DRV - [2007.03.01 17:21:10 | 001,744,928 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RTKVHDA.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2006.11.02 11:51:45 | 000,900,712 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300)
DRV - [2006.11.02 11:51:38 | 000,420,968 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx)
DRV - [2006.11.02 11:51:34 | 000,316,520 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor)
DRV - [2006.11.02 11:51:32 | 000,297,576 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci)
DRV - [2006.11.02 11:51:25 | 000,235,112 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci)
DRV - [2006.11.02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV)
DRV - [2006.11.02 11:51:00 | 000,147,048 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320)
DRV - [2006.11.02 11:50:45 | 000,115,816 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2)
DRV - [2006.11.02 11:50:41 | 000,112,232 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid)
DRV - [2006.11.02 11:50:35 | 000,106,088 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx)
DRV - [2006.11.02 11:50:35 | 000,098,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata)
DRV - [2006.11.02 11:50:35 | 000,098,408 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m)
DRV - [2006.11.02 11:50:24 | 000,088,680 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid)
DRV - [2006.11.02 11:50:19 | 000,045,160 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960)
DRV - [2006.11.02 11:50:17 | 000,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp)
DRV - [2006.11.02 11:50:16 | 000,071,784 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4)
DRV - [2006.11.02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor)
DRV - [2006.11.02 11:50:11 | 000,071,272 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx)
DRV - [2006.11.02 11:50:10 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas)
DRV - [2006.11.02 11:50:10 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI)
DRV - [2006.11.02 11:50:10 | 000,038,504 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid2.sys -- (SiSRaid2)
DRV - [2006.11.02 11:50:10 | 000,037,480 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs)
DRV - [2006.11.02 11:50:09 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc)
DRV - [2006.11.02 11:50:09 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid)
DRV - [2006.11.02 11:50:07 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi)
DRV - [2006.11.02 11:50:05 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS)
DRV - [2006.11.02 11:50:05 | 000,035,944 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx)
DRV - [2006.11.02 11:50:04 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC)
DRV - [2006.11.02 11:50:03 | 000,034,920 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3)
DRV - [2006.11.02 11:49:59 | 000,033,384 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x)
DRV - [2006.11.02 11:49:56 | 000,031,848 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi)
DRV - [2006.11.02 11:49:53 | 000,028,776 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas)
DRV - [2006.11.02 10:25:24 | 000,071,808 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM)
DRV - [2006.11.02 10:24:47 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer)
DRV - [2006.11.02 10:24:46 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp)
DRV - [2006.11.02 10:24:45 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo)
DRV - [2006.11.02 10:24:44 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm)
DRV - [2006.11.02 10:24:44 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm)
DRV - [2006.11.02 09:36:50 | 000,020,608 | ---- | M] (N-trig Innovative Technologies) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi)
DRV - [2006.11.02 09:30:56 | 000,047,104 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2006.11.02 09:30:54 | 000,117,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60) Intel(R)
DRV - [1997.12.23 03:02:46 | 000,023,936 | ---- | M] (Adaptec) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\aspi32.sys -- (Aspi32)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-3175424738-3105269781-473552097-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
IE - HKU\S-1-5-21-3175424738-3105269781-473552097-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
IE - HKU\S-1-5-21-3175424738-3105269781-473552097-1002\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-3175424738-3105269781-473552097-1002\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
IE - HKU\S-1-5-21-3175424738-3105269781-473552097-1002\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-3175424738-3105269781-473552097-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3175424738-3105269781-473552097-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

FF - HKLM\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [2009.10.03 15:39:52 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Flock 2.0.2\extensions\\Components: C:\Program Files\Flock\components
FF - HKLM\software\mozilla\Flock 2.0.2\extensions\\Plugins: C:\Program Files\Flock\plugins [2010.07.09 08:50:11 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Flock 2.5.1\extensions\\Components: C:\Program Files\Flock\components
FF - HKLM\software\mozilla\Flock 2.5.1\extensions\\Plugins: C:\Program Files\Flock\plugins [2010.07.09 08:50:11 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.06.28 11:21:46 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.07.09 08:50:11 | 000,000,000 | ---D | M]

[2010.03.15 21:12:09 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Mozilla\Extensions
[2008.11.28 12:46:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Michael\AppData\Roaming\Mozilla\Extensions\{a463f10c-3994-11da-9945-000d60ca027b}
[2009.07.02 14:09:23 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Mozilla\Extensions\mozswing@mozswing.org
[2009.02.08 19:05:41 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Mozilla\Profiles\9fd0ul13.mike\extensions
[2010.08.04 22:35:37 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Mozilla\Profiles\dynymnvd.Mike\extensions
[2010.04.28 19:45:28 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Michael\AppData\Roaming\Mozilla\Profiles\dynymnvd.Mike\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.03.15 21:11:16 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009.02.11 14:29:47 | 000,000,000 | ---D | M] (ToggleEN Toolbar) -- C:\Program Files\Mozilla Firefox\extensions\{038cb5c7-48ea-4af9-94e0-a1646542e62b}
[2009.04.25 14:27:26 | 000,000,000 | ---D | M] (BlueSoleil Extension) -- C:\Program Files\Mozilla Firefox\extensions\{231D7D17-4F1B-4933-AB61-E502DB82FD11}
[2008.03.10 23:33:57 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2009.07.15 12:04:20 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2008.11.11 09:38:54 | 000,663,552 | ---- | M] (BitComet) -- C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll
[2010.01.16 02:50:40 | 000,000,638 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2010.01.16 02:50:40 | 000,001,687 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\mall-cz.xml
[2010.01.16 02:50:40 | 000,001,367 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\seznam-cz.xml
[2010.01.16 02:50:40 | 000,000,654 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2010.01.16 02:50:40 | 000,001,179 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2009.12.19 20:47:01 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (XTTBPos00 Class) - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\Program Files\ICQToolbar\toolbaru.dll (IE Toolbar)
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll (Packard Bell)
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKU\S-1-5-21-3175424738-3105269781-473552097-1002\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O4 - HKLM..\Run: [ACTIVBOARD] C:\Program Files\Packard Bell\FIJI\ABoard.exe (Packard Bell BV)
O4 - HKLM..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe (Apple Inc.)
O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [Google Desktop Search] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
O4 - HKLM..\Run: [HPUsageTracking] C:\Program Files\HP\HP UT\bin\hppusg.exe ( )
O4 - HKLM..\Run: [Monitor] C:\Windows\PixArt\Pac207\Monitor.exe (PixArt Imaging Incorporation)
O4 - HKLM..\Run: [OpwareSE2] C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe (ScanSoft, Inc.)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe ( )
O4 - HKU\.DEFAULT..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (Google Inc.)
O4 - HKU\S-1-5-18..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (Google Inc.)
O4 - HKU\S-1-5-21-3175424738-3105269781-473552097-1002..\Run: [BitTorrent DNA] C:\Users\Michael\Program Files\DNA\btdna.exe (BitTorrent, Inc.)
O4 - HKU\S-1-5-21-3175424738-3105269781-473552097-1002..\Run: [ISUSPM] C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKLM..\RunOnce: [] File not found
O4 - Startup: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O4 - Startup: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PowerReg Scheduler.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-3175424738-3105269781-473552097-1002\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-3175424738-3105269781-473552097-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0
O7 - HKU\S-1-5-21-3175424738-3105269781-473552097-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Free YouTube Download - C:\Users\Michael\AppData\Roaming\DVDVideoSoftIEHelpers\youtubedownload.htm ()
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Michael\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm ()
O9 - Extra Button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/fl ... rashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~3\GoogleDesktopNetwork3.dll) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Michael\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta galerie Windows Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\Michael\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta galerie Windows Fotogalerie.jpg
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.02.28 12:28:13 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2010.08.05 22:02:54 | 000,000,000 | RHSD | M] - C:\Autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: Wmi - C:\Windows\System32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

mikeav · #5 Příspěvek od **mikeav** » 05 srp 2010 21:36

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 7 Days ==========

[2010.08.05 22:03:43 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Users\Michael\Desktop\OTL.exe
[2010.08.05 22:02:54 | 000,000,000 | RHSD | C] -- C:\Autorun.inf
[2010.08.05 22:01:07 | 000,000,000 | ---D | C] -- C:\UsbFix
[2010.08.05 22:00:54 | 001,207,265 | ---- | C] (C_XX & El Desaparecido) -- C:\Users\Michael\Desktop\UsbFix.exe
[2010.08.01 12:13:09 | 000,000,000 | ---D | C] -- C:\Users\Michael\Documents\různé
[2010.07.31 11:19:08 | 000,000,000 | ---D | C] -- C:\Users\Michael\Desktop\zesík aktual
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2010.08.05 22:08:32 | 004,980,736 | -HS- | M] () -- C:\Users\Michael\NTUSER.DAT
[2010.08.05 22:03:45 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Michael\Desktop\OTL.exe
[2010.08.05 22:03:24 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010.08.05 22:03:24 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010.08.05 22:01:00 | 000,000,940 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010.08.05 22:00:56 | 001,207,265 | ---- | M] (C_XX & El Desaparecido) -- C:\Users\Michael\Desktop\UsbFix.exe
[2010.08.05 21:24:28 | 000,070,749 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2010.08.05 21:24:16 | 000,000,936 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010.08.05 20:55:36 | 000,065,536 | ---- | M] () -- C:\Windows\System32\Ikeext.etl
[2010.08.05 20:55:26 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010.08.05 20:55:25 | 000,070,749 | ---- | M] () -- C:\ProgramData\nvModes.001
[2010.08.05 20:55:19 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.08.05 18:48:29 | 2145,968,449 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2010.08.05 02:47:34 | 000,524,288 | -HS- | M] () -- C:\Users\Michael\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms
[2010.08.05 02:47:34 | 000,065,536 | -HS- | M] () -- C:\Users\Michael\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf
[2010.08.05 02:26:24 | 000,000,422 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{3866C7F1-A167-4755-AB27-F7B74917F24F}.job
[2010.08.04 18:56:53 | 000,075,776 | ---- | M] () -- C:\Users\Michael\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.08.04 02:04:07 | 003,489,520 | -H-- | M] () -- C:\Users\Michael\AppData\Local\IconCache.db
[2010.07.31 10:02:00 | 000,000,960 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010.08.05 18:48:29 | 2145,968,449 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2010.07.05 19:25:36 | 000,000,532 | ---- | C] () -- C:\Windows\MAXLINK.INI
[2010.05.11 20:37:10 | 000,041,872 | ---- | C] () -- C:\Windows\System32\xfcodec.dll
[2010.04.05 14:55:20 | 000,758,018 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2010.04.05 14:55:20 | 000,180,224 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2010.03.27 21:44:28 | 000,000,262 | ---- | C] () -- C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2010.02.27 14:32:45 | 000,000,169 | ---- | C] () -- C:\Windows\WININIT.INI
[2010.02.27 14:08:36 | 000,000,148 | ---- | C] () -- C:\Windows\SDDINST.INI
[2009.11.15 21:07:36 | 000,138,056 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2009.10.24 21:32:24 | 000,021,840 | ---- | C] () -- C:\Windows\System32\SIntfNT.dll
[2009.10.24 21:32:24 | 000,017,212 | ---- | C] () -- C:\Windows\System32\SIntf32.dll
[2009.07.26 14:28:43 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009.07.11 22:07:55 | 000,000,324 | ---- | C] () -- C:\Windows\game.ini
[2009.06.18 15:44:42 | 000,000,063 | ---- | C] () -- C:\Windows\SIERRA.INI
[2009.03.07 14:56:22 | 000,000,031 | ---- | C] () -- C:\Windows\System32\Days5.ini
[2008.12.07 12:44:54 | 000,030,088 | ---- | C] () -- C:\Windows\System32\drivers\btnetBus.sys
[2008.11.21 19:08:11 | 000,000,566 | ---- | C] () -- C:\Windows\System32\SP207.INI
[2008.10.07 09:13:30 | 000,197,912 | ---- | C] () -- C:\Windows\System32\physxcudart_20.dll
[2008.10.07 09:13:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll
[2008.08.08 13:33:59 | 000,210,944 | ---- | C] () -- C:\Windows\System32\MSVCRT10.DLL
[2008.08.08 13:33:59 | 000,000,139 | ---- | C] () -- C:\Windows\KPCMS.INI
[2008.07.21 12:11:25 | 000,000,000 | ---- | C] () -- C:\Windows\OODCNT.INI
[2008.07.01 10:32:00 | 000,000,000 | ---- | C] () -- C:\Windows\OpPrintServer.INI
[2008.07.01 10:25:15 | 000,010,240 | ---- | C] () -- C:\Windows\System32\vidx16.dll
[2008.07.01 10:24:58 | 000,000,021 | ---- | C] () -- C:\Windows\CS_setup.ini
[2008.07.01 10:01:40 | 000,000,021 | ---- | C] () -- C:\Windows\PS_setup.ini
[2008.03.10 23:38:28 | 002,115,816 | ---- | C] () -- C:\Windows\System32\NPSWF32.dll
[2007.08.23 10:34:40 | 000,065,536 | ---- | C] () -- C:\Windows\System32\HPPLVS.dll
[2007.07.26 12:01:50 | 000,114,688 | ---- | C] () -- C:\Windows\System32\hppatusg01.dll
[2007.02.13 09:48:38 | 000,000,000 | ---- | C] () -- C:\Windows\System32\px.ini
[2006.11.02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006.11.02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006.01.08 16:53:24 | 000,005,120 | ---- | C] () -- C:\Windows\System32\hash2.dll
[2001.09.21 06:00:38 | 000,040,960 | ---- | C] () -- C:\Windows\System32\InTouchViewer.dll
[2001.09.21 05:59:38 | 000,094,208 | ---- | C] () -- C:\Windows\System32\InTouchCOMClient.dll
[2001.09.17 09:49:22 | 000,421,888 | R--- | C] () -- C:\Windows\System32\XMLParser.dll
[2001.09.17 09:49:20 | 000,573,440 | R--- | C] () -- C:\Windows\System32\dbsock.dll
[2001.09.17 09:49:20 | 000,118,784 | R--- | C] () -- C:\Windows\System32\Transport.dll
[2001.09.17 09:48:54 | 000,503,808 | R--- | C] () -- C:\Windows\System32\lt_xtrans.dll
[2001.09.17 09:48:54 | 000,286,720 | R--- | C] () -- C:\Windows\System32\MrSIDD.dll
[2001.09.17 09:48:54 | 000,163,840 | R--- | C] () -- C:\Windows\System32\lt_common.dll
[2001.09.17 09:48:54 | 000,126,976 | R--- | C] () -- C:\Windows\System32\lt_trans.dll
[2001.09.17 09:48:54 | 000,069,632 | R--- | C] () -- C:\Windows\System32\lt_meta.dll
[2001.09.17 09:48:54 | 000,053,248 | R--- | C] () -- C:\Windows\System32\lt_encrypt.dll
[2001.09.17 09:48:54 | 000,020,480 | R--- | C] () -- C:\Windows\System32\lt_messagetext.dll
[2001.09.17 09:48:52 | 000,006,688 | R--- | C] () -- C:\Windows\System32\Digita.sys
[2001.09.17 09:48:48 | 000,049,152 | R--- | C] () -- C:\Windows\System32\TransportUSB.dll
[2001.09.17 09:48:48 | 000,049,152 | R--- | C] () -- C:\Windows\System32\TransportSerial.dll
[2001.09.17 09:48:48 | 000,049,152 | R--- | C] () -- C:\Windows\System32\TransportIrDA.dll
[2001.09.17 09:48:48 | 000,049,152 | R--- | C] () -- C:\Windows\System32\TransportIrCOMM.dll

========== LOP Check ==========

[2008.07.23 20:07:45 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\ACD Systems
[2009.08.14 21:25:57 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Ashampoo
[2009.08.07 11:13:29 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Auslogics
[2009.07.12 14:37:48 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Bioshock
[2010.07.05 20:09:35 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Canon
[2008.11.28 12:39:38 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2008.07.23 18:07:14 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\CoSoSys
[2010.08.05 21:55:01 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\DNA
[2009.02.02 15:20:10 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\DriverCure
[2010.05.20 18:22:38 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\DVDVideoSoftIEHelpers
[2009.09.05 20:37:30 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Fit3DLive
[2009.08.07 21:14:32 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Flock
[2009.02.24 01:03:06 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\FreeLanguageTranslator
[2010.07.05 19:50:34 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\GetRightToGo
[2009.08.07 19:03:27 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\GlarySoft
[2009.12.21 13:01:26 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Global Graphics
[2009.12.21 13:36:19 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\gtc
[2009.08.16 11:44:24 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\gtk-2.0
[2010.02.19 20:40:35 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\ICQ
[2008.07.01 12:03:41 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\ICQ Toolbar
[2009.04.13 12:49:40 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Inkscape
[2009.02.21 23:59:14 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\IObit
[2008.07.16 16:12:22 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\LANGMaster
[2008.07.07 19:25:20 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\LangSoft
[2010.02.20 15:49:54 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\LimeWire
[2010.06.28 12:11:59 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Mount&Blade Warband
[2009.05.09 13:07:32 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Nokia
[2009.03.22 18:15:27 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\OpenOffice.org
[2008.07.01 11:33:48 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\OpenOffice.org3
[2008.06.30 20:46:05 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Packard Bell
[2009.05.09 18:06:23 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\PC Suite
[2008.11.04 23:20:20 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\PeerNetworking
[2010.06.21 20:25:22 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Plan It Green Files
[2008.12.10 14:07:42 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Scanahand
[2008.07.01 10:03:47 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\ScanSoft
[2010.02.10 13:27:45 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\SuperMP3Download
[2010.02.26 15:52:17 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\TeamViewer
[2009.06.18 14:47:11 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Teeworlds
[2010.08.05 18:49:43 | 000,032,536 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2010.08.05 02:26:24 | 000,000,422 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{3866C7F1-A167-4755-AB27-F7B74917F24F}.job

========== Purity Check ==========

========== Custom Scans ==========

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"ehTray.exe" = C:\Windows\ehome\ehTray.exe -- [2008.01.19 09:33:09 | 000,125,952 | ---- | M] (Microsoft Corporation)
"ISUSPM" = "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler -- [2007.08.30 11:50:42 | 000,205,480 | ---- | M] (Macrovision Corporation)
"BitTorrent DNA" = "C:\Users\Michael\Program Files\DNA\btdna.exe" -- [2010.05.24 14:39:01 | 000,323,392 | ---- | M] (BitTorrent, Inc.)
"WMPNSCFG" = C:\Program Files\Windows Media Player\WMPNSCFG.exe -- [2008.01.19 09:33:39 | 000,202,240 | ---- | M] (Microsoft Corporation)

< c:\windows\*.* /U >
[1 c:\windows\*.tmp files -> c:\windows\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2008.07.23 20:07:45 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\ACD Systems
[2010.07.08 21:13:10 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Adobe
[2008.07.20 19:41:59 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Apple Computer
[2008.09.19 15:36:11 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\ArcSoft
[2009.08.14 21:25:57 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Ashampoo
[2009.08.07 11:13:29 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Auslogics
[2009.07.12 14:37:48 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Bioshock
[2010.07.05 20:09:35 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Canon
[2008.11.28 12:39:38 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2008.07.23 18:07:14 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\CoSoSys
[2010.08.05 21:55:01 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\DNA
[2009.02.02 15:20:10 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\DriverCure
[2010.08.04 19:47:02 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\dvdcss
[2010.05.20 18:22:38 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\DVDVideoSoftIEHelpers
[2009.09.05 20:37:30 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Fit3DLive
[2009.08.07 21:14:32 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Flock
[2009.02.24 01:03:06 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\FreeLanguageTranslator
[2010.07.05 19:50:34 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\GetRightToGo
[2009.08.07 19:03:27 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\GlarySoft
[2009.12.21 13:01:26 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Global Graphics
[2010.02.19 21:27:47 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Google
[2009.12.21 13:36:19 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\gtc
[2009.08.16 11:44:24 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\gtk-2.0
[2010.02.19 20:40:35 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\ICQ
[2008.07.01 12:03:41 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\ICQ Toolbar
[2008.06.30 20:29:28 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Identities
[2009.04.13 12:49:40 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Inkscape
[2008.10.05 20:29:30 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\InstallShield
[2009.02.21 23:59:14 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\IObit
[2008.07.16 16:12:22 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\LANGMaster
[2008.07.07 19:25:20 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\LangSoft
[2010.02.20 15:49:54 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\LimeWire
[2008.06.30 22:47:13 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Macromedia
[2009.04.13 21:32:16 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Malwarebytes
[2006.11.02 14:37:34 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Media Center Programs
[2010.05.23 17:13:03 | 000,000,000 | --SD | M] -- C:\Users\Michael\AppData\Roaming\Microsoft
[2010.06.28 12:11:59 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Mount&Blade Warband
[2009.02.08 19:05:31 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Mozilla
[2010.02.20 12:54:04 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Nero
[2009.05.09 13:07:32 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Nokia
[2009.03.22 18:15:27 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\OpenOffice.org
[2009.03.22 18:10:25 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\OpenOffice.org2
[2008.07.01 11:33:48 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\OpenOffice.org3
[2008.06.30 20:46:05 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Packard Bell
[2009.05.09 18:06:23 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\PC Suite
[2008.11.04 23:20:20 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\PeerNetworking
[2010.06.21 20:25:22 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Plan It Green Files
[2010.04.15 17:01:17 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Real
[2008.11.19 10:44:09 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Roxio
[2008.12.10 14:07:42 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Scanahand
[2008.07.01 10:03:47 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\ScanSoft
[2010.04.26 15:03:33 | 000,000,000 | RH-D | M] -- C:\Users\Michael\AppData\Roaming\SecuROM
[2010.03.21 15:00:01 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Sibelius Software
[2010.08.03 09:47:30 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Skype
[2010.08.03 09:31:54 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\skypePM
[2008.11.18 01:42:32 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Sun
[2009.10.04 18:43:46 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\SUPERAntiSpyware.com
[2010.02.10 13:27:45 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\SuperMP3Download
[2008.06.30 20:35:40 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Talkback
[2009.11.10 20:47:20 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\teamspeak2
[2010.02.26 15:52:17 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\TeamViewer
[2009.06.18 14:47:11 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Teeworlds
[2010.03.27 21:52:29 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Ventrilo
[2010.08.04 23:56:17 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\vlc
[2010.05.19 15:24:32 | 000,000,000 | ---D | M] -- C:\Users\Michael\AppData\Roaming\Xfire

< %APPDATA%\*.exe /s >
[2009.07.02 14:09:20 | 000,163,840 | ---- | M] (Mozilla Foundation) -- C:\Users\Michael\AppData\Roaming\LimeWire\browser\xulrunner\crashreporter.exe
[2009.07.02 14:09:20 | 000,196,608 | ---- | M] (Mozilla Foundation) -- C:\Users\Michael\AppData\Roaming\LimeWire\browser\xulrunner\updater.exe
[2009.07.02 14:09:20 | 000,014,848 | ---- | M] () -- C:\Users\Michael\AppData\Roaming\LimeWire\browser\xulrunner\xpcshell.exe
[2009.07.02 14:09:20 | 000,077,824 | ---- | M] (Mozilla Foundation) -- C:\Users\Michael\AppData\Roaming\LimeWire\browser\xulrunner\xpicleanup.exe
[2009.07.02 14:09:20 | 000,266,240 | ---- | M] (Mozilla Foundation) -- C:\Users\Michael\AppData\Roaming\LimeWire\browser\xulrunner\xpidl.exe
[2009.07.02 14:09:20 | 000,018,432 | ---- | M] () -- C:\Users\Michael\AppData\Roaming\LimeWire\browser\xulrunner\xpt_dump.exe
[2009.07.02 14:09:20 | 000,014,336 | ---- | M] () -- C:\Users\Michael\AppData\Roaming\LimeWire\browser\xulrunner\xpt_link.exe
[2009.07.02 14:09:20 | 000,073,728 | ---- | M] (Mozilla Foundation) -- C:\Users\Michael\AppData\Roaming\LimeWire\browser\xulrunner\xulrunner-stub.exe
[2009.07.02 14:09:20 | 000,102,400 | ---- | M] (Mozilla Foundation) -- C:\Users\Michael\AppData\Roaming\LimeWire\browser\xulrunner\xulrunner.exe
[2010.04.26 15:01:22 | 000,038,784 | ---- | M] () -- C:\Users\Michael\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
[2010.02.28 00:25:30 | 000,256,000 | ---- | M] () -- C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PowerReg Scheduler.exe

< MD5 for: AGP440.SYS >
[2008.01.19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_51b95d75\AGP440.sys
[2008.01.19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys
[2008.01.19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys
[2008.01.19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys
[2006.11.02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\erdnt\cache\AGP440.sys
[2006.11.02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\drivers\AGP440.sys
[2006.11.02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009.04.11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\erdnt\cache\atapi.sys
[2009.04.11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\drivers\atapi.sys
[2009.04.11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys
[2009.04.11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys
[2008.01.19 09:41:30 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys
[2008.01.19 09:41:30 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
[2006.11.02 11:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys
[2008.03.11 08:05:43 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\atapi.sys
[2008.03.11 08:05:43 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\atapi.sys
[2008.03.11 08:05:43 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2009.04.11 08:27:20 | 000,643,072 | ---- | M] (Microsoft Corporation) MD5=10761177A6EBE45843F443E99509F5E7 -- C:\Windows\System32\autochk.exe
[2009.04.11 08:27:20 | 000,643,072 | ---- | M] (Microsoft Corporation) MD5=10761177A6EBE45843F443E99509F5E7 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.0.6002.18005_none_e3df6655bee2ee3b\autochk.exe
[2008.01.19 09:33:01 | 000,642,560 | ---- | M] (Microsoft Corporation) MD5=2FC5BE79B51714B479809358E4908FC3 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.0.6001.18000_none_e1f3ed49c1c122ef\autochk.exe
[2006.11.02 11:44:50 | 000,640,000 | ---- | M] (Microsoft Corporation) MD5=C08D1FE284C3330934E45D6E5F5B768B -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.0.6000.16386_none_dfbd2b4dc4d6121b\autochk.exe

< MD5 for: CDROM.SYS >
[2008.01.19 07:49:51 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=1EC25CEA0DE6AC4718BF89F9E1778B57 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_a29e71c6\cdrom.sys
[2008.01.19 07:49:51 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=1EC25CEA0DE6AC4718BF89F9E1778B57 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.0.6001.18000_none_5fa95be2a3c76a4a\cdrom.sys
[2009.04.11 06:39:17 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=6B4BFFB9BECD728097024276430DB314 -- C:\Windows\System32\drivers\cdrom.sys
[2009.04.11 06:39:17 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=6B4BFFB9BECD728097024276430DB314 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_c949a5b6\cdrom.sys
[2009.04.11 06:39:17 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=6B4BFFB9BECD728097024276430DB314 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.0.6002.18005_none_6194d4eea0e93596\cdrom.sys
[2006.11.02 10:51:44 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=8D1866E61AF096AE8B582454F5E4D303 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_e487f727\cdrom.sys

< MD5 for: CNGAUDIT.DLL >
[2006.11.02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\erdnt\cache\cngaudit.dll
[2006.11.02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\System32\cngaudit.dll
[2006.11.02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll

< MD5 for: CRYPTSVC.DLL >
[2006.11.02 11:46:03 | 000,123,392 | ---- | M] (Microsoft Corporation) MD5=1C26FB097170A2A91066D1E3A24366E3 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.0.6000.16386_none_73c8d7689de43d15\cryptsvc.dll
[2008.01.19 09:34:00 | 000,128,000 | ---- | M] (Microsoft Corporation) MD5=6DE363F9F99334514C46AEC02D3E3678 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.0.6001.18000_none_75ff99649acf4de9\cryptsvc.dll
[2009.04.11 08:28:18 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=FB27772BEAF8E1D28CCD825C09DA939B -- C:\Windows\erdnt\cache\cryptsvc.dll
[2009.04.11 08:28:18 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=FB27772BEAF8E1D28CCD825C09DA939B -- C:\Windows\System32\cryptsvc.dll
[2009.04.11 08:28:18 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=FB27772BEAF8E1D28CCD825C09DA939B -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.0.6002.18005_none_77eb127097f11935\cryptsvc.dll

< MD5 for: EXPLORER.EXE >
[2008.10.29 08:20:29 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_4f83bb287ccdb7e3\explorer.exe
[2008.10.29 08:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_5177ca9879e978e8\explorer.exe
[2008.10.30 05:59:17 | 002,927,616 | ---- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_51e4f8c7931bd1e1\explorer.exe
[2008.03.11 08:01:33 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=6D06CD98D954FE87FB2DB8108793B399 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16549_none_4fac29707cae347a\explorer.exe
[2008.03.11 08:01:33 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=BD06F0BF753BC704B653C3A50F89D362 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20668_none_501f261995dcf2cf\explorer.exe
[2009.04.11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\erdnt\cache\explorer.exe
[2009.04.11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\explorer.exe
[2009.04.11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe
[2008.10.28 04:15:02 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_5033cb5995cd990b\explorer.exe
[2006.11.02 11:45:07 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=FD8C53FB002217F6F888BCF6F5D7084D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16386_none_4f7de5167cd15deb\explorer.exe
[2008.01.19 09:33:10 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe

< MD5 for: HAL.DLL >
[2009.04.11 08:32:46 | 000,177,128 | ---- | M] (Microsoft Corporation) MD5=B8D52005181A15D7D1470CBF2AF214DD -- C:\Windows\System32\hal.dll

< MD5 for: IASTORV.SYS >
[2008.01.19 09:42:51 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_c9df7691\iaStorV.sys
[2008.01.19 09:42:51 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys
[2006.11.02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\drivers\iaStorV.sys
[2006.11.02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys

< MD5 for: ISAPNP.SYS >
[2006.11.02 11:50:24 | 000,047,208 | ---- | M] (Microsoft Corporation) MD5=350FCA7E73CF65BCEF43FAE1E4E91293 -- C:\Windows\System32\drivers\isapnp.sys
[2006.11.02 11:50:24 | 000,047,208 | ---- | M] (Microsoft Corporation) MD5=350FCA7E73CF65BCEF43FAE1E4E91293 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\isapnp.sys
[2008.01.19 09:42:15 | 000,049,720 | ---- | M] (Microsoft Corporation) MD5=6C70698A3E5C4376C6AB5C7C17FB0614 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_51b95d75\isapnp.sys
[2008.01.19 09:42:15 | 000,049,720 | ---- | M] (Microsoft Corporation) MD5=6C70698A3E5C4376C6AB5C7C17FB0614 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\isapnp.sys
[2008.01.19 09:42:15 | 000,049,720 | ---- | M] (Microsoft Corporation) MD5=6C70698A3E5C4376C6AB5C7C17FB0614 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\isapnp.sys
[2008.01.19 09:42:15 | 000,049,720 | ---- | M] (Microsoft Corporation) MD5=6C70698A3E5C4376C6AB5C7C17FB0614 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\isapnp.sys

< MD5 for: LSASS.EXE >
[2009.06.15 14:51:56 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=203D86EBD6D8E4C8501B222421E81506 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.22152_none_a886901f7335e2fc\lsass.exe
[2009.09.10 16:44:14 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=2D3AC5E7AC01E905F3ABD2D745FE3A9B -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.22223_none_a8a80213731ca5a7\lsass.exe
[2009.06.15 14:48:49 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=3978F3540329E16C0AC3BCF677E5669F -- C:\Windows\erdnt\cache\lsass.exe
[2009.06.15 14:48:49 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=3978F3540329E16C0AC3BCF677E5669F -- C:\Windows\System32\lsass.exe
[2009.06.15 14:48:49 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=3978F3540329E16C0AC3BCF677E5669F -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.18051_none_a7fbf30a5a1929db\lsass.exe
[2009.02.13 09:26:04 | 000,007,680 | ---- | M] (Microsoft Corporation) MD5=59DE082968FDD257FFF0D209B9A5B460 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.16820_none_a44eb0105fb4d975\lsass.exe
[2006.11.02 11:45:21 | 000,007,680 | ---- | M] (Microsoft Corporation) MD5=6A0E382E74280E4CC0DF17FE2661D003 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.16386_none_a413c8c65fe02762\lsass.exe
[2009.06.15 15:03:38 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=6F1F23D3599EAE17734451936B7F17C6 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22450_none_a69e1da376115b2a\lsass.exe
[2009.06.15 14:57:59 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=A911ECAC81F94ADEAFBE8E3F7873EDB0 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18272_none_a600dfae5d0228c9\lsass.exe
[2009.02.13 06:58:37 | 000,007,680 | ---- | M] (Microsoft Corporation) MD5=AFF8A58280863629CA4FFA9E0B259F1E -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21010_none_a4e2f4e978ca9090\lsass.exe
[2009.06.15 14:59:08 | 000,007,680 | ---- | M] (Microsoft Corporation) MD5=BA9A67672E025078C77967731BCFC560 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21067_none_a4b3e75378eccda6\lsass.exe
[2009.06.15 15:10:12 | 000,007,680 | ---- | M] (Microsoft Corporation) MD5=C731B1FE449D4E9CEA358C9D55B69BE9 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.16870_none_a418a0745fdd652a\lsass.exe
[2009.09.09 13:09:38 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=CB7E838C140B4087B2DA323F2D4523C5 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22518_none_a6d1618975e9b345\lsass.exe
[2009.09.10 16:47:51 | 000,007,680 | ---- | M] (Microsoft Corporation) MD5=D09A5DA84B7C9CA9B02EBCD7FAE41C8D -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21125_none_a4dd285578ce285b\lsass.exe
[2008.01.19 09:33:14 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=DCF733788C7D088D814E5F80EB4B3E0F -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18000_none_a64a8ac25ccb3836\lsass.exe
[2008.01.19 09:33:14 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=DCF733788C7D088D814E5F80EB4B3E0F -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18215_none_a644c0145ccecd28\lsass.exe
[2008.01.19 09:33:14 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=DCF733788C7D088D814E5F80EB4B3E0F -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.18005_none_a83603ce59ed0382\lsass.exe
[2009.02.13 10:20:29 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=F4C62B07E5BF96F1FDCA9DB393ECED22 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22376_none_a68e7da1761c2def\lsass.exe

< MD5 for: NDIS.SYS >
[2009.04.11 08:32:49 | 000,527,848 | ---- | M] (Microsoft Corporation) MD5=1357274D1883F68300AEADD15D7BBB42 -- C:\Windows\erdnt\cache\ndis.sys
[2009.04.11 08:32:49 | 000,527,848 | ---- | M] (Microsoft Corporation) MD5=1357274D1883F68300AEADD15D7BBB42 -- C:\Windows\System32\drivers\ndis.sys
[2009.04.11 08:32:49 | 000,527,848 | ---- | M] (Microsoft Corporation) MD5=1357274D1883F68300AEADD15D7BBB42 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.0.6002.18005_none_a9b2a4d31930d864\ndis.sys
[2006.11.02 11:51:42 | 000,500,840 | ---- | M] (Microsoft Corporation) MD5=227C11E1E7CF6EF8AFB2A238D209760C -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.0.6000.16386_none_a59069cb1f23fc44\ndis.sys
[2008.01.19 09:43:31 | 000,529,464 | ---- | M] (Microsoft Corporation) MD5=9BDC71790FA08F0A0B5F10462B1BD0B1 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.0.6001.18000_none_a7c72bc71c0f0d18\ndis.sys

< MD5 for: NETLOGON.DLL >
[2006.11.02 11:46:11 | 000,559,616 | ---- | M] (Microsoft Corporation) MD5=889A2C9F2AACCD8F64EF50AC0B3D553B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6000.16386_none_fb80f5473b0ed783\netlogon.dll
[2009.04.11 08:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\erdnt\cache\netlogon.dll
[2009.04.11 08:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\System32\netlogon.dll
[2009.04.11 08:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll
[2008.01.19 09:35:36 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll

< MD5 for: NVRAID.SYS >
[2008.01.19 09:43:01 | 000,102,968 | ---- | M] (NVIDIA Corporation) MD5=2EDF9E7751554B42CBB60116DE727101 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvraid.sys
[2008.01.19 09:43:01 | 000,102,968 | ---- | M] (NVIDIA Corporation) MD5=2EDF9E7751554B42CBB60116DE727101 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvraid.sys
[2006.11.02 11:50:24 | 000,088,680 | ---- | M] (NVIDIA Corporation) MD5=E69E946F80C1C31C53003BFBF50CBB7C -- C:\Windows\System32\drivers\nvraid.sys
[2006.11.02 11:50:24 | 000,088,680 | ---- | M] (NVIDIA Corporation) MD5=E69E946F80C1C31C53003BFBF50CBB7C -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvraid.sys

< MD5 for: NVSTOR.SYS >
[2006.11.02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\drivers\nvstor.sys
[2006.11.02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys
[2008.01.19 09:42:09 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys
[2008.01.19 09:42:09 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys

< MD5 for: SCECLI.DLL >
[2008.01.19 09:36:19 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll
[2006.11.02 11:46:12 | 000,176,640 | ---- | M] (Microsoft Corporation) MD5=80E2839D05CA5970A86D7BE2A08BFF61 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6000.16386_none_35d7205fdc305e3e\scecli.dll
[2009.04.11 08:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\erdnt\cache\scecli.dll
[2009.04.11 08:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\System32\scecli.dll
[2009.04.11 08:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll

< MD5 for: SMSS.EXE >
[2008.01.19 09:33:31 | 000,064,000 | ---- | M] (Microsoft Corporation) MD5=6701DDAF68BEDE6BBEEA9D514D73A35B -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.0.6001.18000_none_ac3aa7fd19319fba\smss.exe
[2009.04.11 08:28:04 | 000,064,000 | ---- | M] (Microsoft Corporation) MD5=98AF15A94CD6AC37248E72E5FE789B35 -- C:\Windows\System32\smss.exe
[2009.04.11 08:28:04 | 000,064,000 | ---- | M] (Microsoft Corporation) MD5=98AF15A94CD6AC37248E72E5FE789B35 -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.0.6002.18005_none_ae26210916536b06\smss.exe
[2006.11.02 11:45:45 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=CAA75757BB3695478C23CB0624342A61 -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.0.6000.16386_none_aa03e6011c468ee6\smss.exe

< MD5 for: SVCHOST.EXE >
[2006.11.02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) MD5=10DA15933D582D2FEDCF705EFE394B09 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.0.6000.16386_none_b38497a50862ad11\svchost.exe
[2008.01.19 09:33:32 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=3794B461C45882E06856F282EEF025AF -- C:\Windows\erdnt\cache\svchost.exe
[2008.01.19 09:33:32 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=3794B461C45882E06856F282EEF025AF -- C:\Windows\System32\svchost.exe
[2008.01.19 09:33:32 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=3794B461C45882E06856F282EEF025AF -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.0.6001.18000_none_b5bb59a1054dbde5\svchost.exe

< MD5 for: TCPIP.SYS >
[2008.04.26 10:08:16 | 000,891,448 | ---- | M] (Microsoft Corporation) MD5=01EC1E92595F839BEE70D439C46796E3 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22167_none_b36dd19b7fae39c7\tcpip.sys
[2008.03.11 08:01:00 | 000,802,816 | ---- | M] (Microsoft Corporation) MD5=028061C7F6D2D03068C72E2A27E4228A -- C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16567_none_5f6577ce925d75a7\tcpip.sys
[2009.04.11 08:33:02 | 000,897,000 | ---- | M] (Microsoft Corporation) MD5=0E6B0885C3D5E4643ED2D043DE3433D8 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.18005_none_b5098b5e63880c42\tcpip.sys
[2009.12.08 22:52:30 | 000,897,624 | ---- | M] (Microsoft Corporation) MD5=1ACBB7A47E78F4CC82D2EFFB72901528 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18377_none_b2d96a966698ad63\tcpip.sys
[2009.08.15 23:30:53 | 000,816,640 | ---- | M] (Microsoft Corporation) MD5=2512B4D1353370D6688B1AF1F5AFA1CF -- C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.21108_none_6030d425ab49af00\tcpip.sys
[2009.08.14 19:01:55 | 000,900,168 | ---- | M] (Microsoft Corporation) MD5=2608E71AAD54564647D4BB984E1925AA -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys
[2010.02.18 13:51:51 | 000,818,688 | ---- | M] (Microsoft Corporation) MD5=2C1F7005AA3B62721BFDB307BD5F5010 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.21226_none_6019359fab5bb15b\tcpip.sys
[2010.02.18 16:49:38 | 000,898,952 | ---- | M] (Microsoft Corporation) MD5=2EAE4500984C2F8DACFB977060300A15 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18427_none_b30f7c1866701ed5\tcpip.sys
[2009.08.14 16:24:47 | 000,813,568 | ---- | M] (Microsoft Corporation) MD5=300208927321066EA53761FDC98747C6 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16908_none_5fa75f38922bdbf4\tcpip.sys
[2008.03.11 08:01:00 | 000,804,352 | ---- | M] (Microsoft Corporation) MD5=43EAE40B50FE3E60D194DD9C97EBB1FD -- C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.20689_none_5fdb7555ab898001\tcpip.sys
[2009.12.08 22:15:00 | 000,907,832 | ---- | M] (Microsoft Corporation) MD5=46E6685F3E92AEC743773ADD4CD54F57 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.22283_none_b53aaa1b7ce8560d\tcpip.sys
[2010.02.18 16:07:16 | 000,904,576 | ---- | M] (Microsoft Corporation) MD5=48CBE6D53632D0067C2D6B20F90D84CA -- C:\Windows\System32\drivers\tcpip.sys
[2010.02.18 16:07:16 | 000,904,576 | ---- | M] (Microsoft Corporation) MD5=48CBE6D53632D0067C2D6B20F90D84CA -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.18209_none_b50d905263846bec\tcpip.sys
[2010.02.18 14:05:37 | 000,815,104 | ---- | M] (Microsoft Corporation) MD5=4A82FA8F0DF67AA354580C3FAAF8BDE3 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.17021_none_5f8a957c924295b7\tcpip.sys
[2008.03.11 08:08:21 | 000,806,400 | ---- | M] (Microsoft Corporation) MD5=52A8BD6294F7D1443C6184C67AE13AF4 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.20752_none_5ff4e4f9ab7777f4\tcpip.sys
[2009.12.08 22:37:09 | 000,900,696 | ---- | M] (Microsoft Corporation) MD5=5653230D480A9C54D169E1B080B72CF5 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22577_none_b36309477fb64a54\tcpip.sys
[2008.03.11 08:08:21 | 000,803,328 | ---- | M] (Microsoft Corporation) MD5=5DF77458AA92FDB36FCE79C60F74AB5D -- C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16627_none_5f90b964923d030a\tcpip.sys
[2009.08.14 18:27:34 | 000,904,776 | ---- | M] (Microsoft Corporation) MD5=65877AA1B6A7CB797488E831698973E9 -- C:\Windows\erdnt\cache\tcpip.sys
[2009.08.14 18:27:34 | 000,904,776 | ---- | M] (Microsoft Corporation) MD5=65877AA1B6A7CB797488E831698973E9 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.18091_none_b4a43aea63d4a25f\tcpip.sys
[2008.04.26 10:26:49 | 000,891,448 | ---- | M] (Microsoft Corporation) MD5=82E266BEE5F0167E41C6ECFDD2A79C02 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18063_none_b2e033a8669434a1\tcpip.sys
[2009.12.08 19:58:13 | 000,813,568 | ---- | M] (Microsoft Corporation) MD5=8734BD051FFDCBF8425CF222141C3741 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16973_none_5f56ae52926920d8\tcpip.sys
[2009.08.14 19:07:56 | 000,897,608 | ---- | M] (Microsoft Corporation) MD5=8A7AD2A214233F684242F289ED83EBC3 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18311_none_b3144862666d6db3\tcpip.sys
[2010.02.18 19:36:50 | 000,902,024 | ---- | M] (Microsoft Corporation) MD5=93A5655CD9CD2F080EF1CB71A3666215 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys
[2009.12.08 19:45:32 | 000,816,640 | ---- | M] (Microsoft Corporation) MD5=CA3A5756672013A66BB9D547A5A62DCA -- C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.21175_none_5fe223d3ab852692\tcpip.sys
[2006.11.02 10:58:38 | 000,802,816 | ---- | M] (Microsoft Corporation) MD5=D944522B048A5FEB7700B5170D3D9423 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16386_none_5f4ed3e0926e99e4\tcpip.sys
[2010.02.18 16:22:11 | 000,910,216 | ---- | M] (Microsoft Corporation) MD5=D9F5DD5BBC8348E8F8220CCBF14C022E -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.22341_none_b563eb1d7cc9b0c2\tcpip.sys
[2009.12.08 22:01:08 | 000,904,776 | ---- | M] (Microsoft Corporation) MD5=DA467E7619AE5F4588E6262C13C8940A -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.18160_none_b4c3ac4a63bd325c\tcpip.sys
[2008.01.19 09:43:39 | 000,891,448 | ---- | M] (Microsoft Corporation) MD5=FC6E2835D667774D409C7C7021EAF9C4 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18000_none_b31e1252666640f6\tcpip.sys
[2009.08.14 18:33:50 | 000,905,784 | ---- | M] (Microsoft Corporation) MD5=FF71856BD4CD6D4367F9FD84BE79A874 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.22200_none_b58e289d7caa2a80\tcpip.sys

< MD5 for: USERINIT.EXE >
[2008.01.19 09:33:33 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\erdnt\cache\userinit.exe
[2008.01.19 09:33:33 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\System32\userinit.exe
[2008.01.19 09:33:33 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe
[2006.11.02 11:45:50 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=22027835939F86C3E47AD8E3FBDE3D11 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6000.16386_none_d9f1f819d4c4e737\userinit.exe

< MD5 for: WINLOGON.EXE >
[2009.04.11 08:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\erdnt\cache\winlogon.exe
[2009.04.11 08:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\System32\winlogon.exe
[2009.04.11 08:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe
[2006.11.02 11:45:57 | 000,308,224 | ---- | M] (Microsoft Corporation) MD5=9F75392B9128A91ABAFB044EA350BAAD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6000.16386_none_6d8c3f1ad8066b21\winlogon.exe
[2008.01.19 09:33:37 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe

< MD5 for: WS2_32.DLL >
[2008.01.19 09:37:09 | 000,179,200 | ---- | M] (Microsoft Corporation) MD5=B304D47D5744BA20FCB99FB8B2C07B0B -- C:\Windows\erdnt\cache\ws2_32.dll
[2006.11.02 11:46:14 | 000,178,688 | ---- | M] (Microsoft Corporation) MD5=D99A071C1018BB3D4ABAAD4B62048AC2 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.0.6000.16386_none_f080eec6d16af4f0\ws2_32.dll
[2008.01.19 09:37:09 | 000,179,200 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\ws2_32.dll
[2008.01.19 09:37:09 | 000,179,200 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.0.6001.18000_none_f2b7b0c2ce5605c4\ws2_32.dll

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[2009.04.11 08:27:47 | 000,241,128 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\rsaenh.dll
[2009.04.11 08:28:23 | 000,228,352 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\SLC.dll
[1 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2006.11.02 12:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV
[2006.11.02 12:34:05 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV
[2006.11.02 12:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV
[2006.11.02 12:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV
[2006.11.02 12:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV

< %systemroot%\system32\*.dll /lockedfiles >
[2009.04.11 08:27:47 | 000,241,128 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\rsaenh.dll
[2009.04.11 08:28:23 | 000,228,352 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\SLC.dll
[1 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2010.08.05 22:03:24 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010.08.05 22:03:24 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010.08.05 20:55:36 | 000,065,536 | ---- | M] () -- C:\Windows\System32\Ikeext.etl
[1 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

mikeav · #6 Příspěvek od **mikeav** » 05 srp 2010 21:37

========== Alternate Data Streams ==========

@Alternate Data Stream - 816 bytes -> C:\Users\Michael\Documents\sleva+na+Beymu.eml:OECustomProperty
@Alternate Data Stream - 76 bytes -> C:\Windows\Webcam1200\PXIINST-32:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Webcam1200:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\twain_32\PA207:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\tracing\kerberos:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\Tasks\WPD:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\Tasks\Microsoft\Windows\Active Directory Rights Management Services Client:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\spool\drivers\w32x86\3\temp:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\msmq:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\LogFiles\HTTPERR:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\inetsrv\MetaBack:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\inetsrv\History:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DRVSTORE\pccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DRVSTORE\GEARAspiWD_4F4AA3475F1B13A1E8212B6D40B351211BC358CE\x86:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DRVSTORE\GEARAspiWD_4F4AA3475F1B13A1E8212B6D40B351211BC358CE:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DRVSTORE:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{f3c4c7a2-1b8d-45b7-9f71-a3b745227476}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{f3c4c7a2-1b8d-45b7-9f71-a3b745227476}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{e3b44c9f-235a-4fa0-b429-338621a9e6a2}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{e3b44c9f-235a-4fa0-b429-338621a9e6a2}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{e29a409a-3e16-4cdc-906d-e3e01ea7da79}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{e29a409a-3e16-4cdc-906d-e3e01ea7da79}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{debf9d95-7e2c-46cf-901a-40b2ee437fe8}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{debf9d95-7e2c-46cf-901a-40b2ee437fe8}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{c3dbde31-d961-4e31-b841-ab044f679546}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{c3dbde31-d961-4e31-b841-ab044f679546}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{bfaff184-4edd-424a-b818-d8a31aa7e2a0}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{bfaff184-4edd-424a-b818-d8a31aa7e2a0}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{a574f16b-af75-49f4-b693-3585c2e0a704}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{a574f16b-af75-49f4-b693-3585c2e0a704}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{8fb808da-3cef-4f5f-b247-3ed20e13f665}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{8fb808da-3cef-4f5f-b247-3ed20e13f665}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{8c018919-38d9-4ecb-9b19-77ba6722cb6e}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{8c018919-38d9-4ecb-9b19-77ba6722cb6e}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{84501fe5-34bf-4d71-8584-64b14b2c778b}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{84501fe5-34bf-4d71-8584-64b14b2c778b}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{7fe4658b-79bf-4f02-8bd3-2bdc616e1963}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{7fe4658b-79bf-4f02-8bd3-2bdc616e1963}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{7d94d4ef-72b5-4fc6-a2ac-d3c0d13c9a76}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{7d94d4ef-72b5-4fc6-a2ac-d3c0d13c9a76}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{5b8acd0f-8c25-4756-b6dc-678b3dc48092}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{5b8acd0f-8c25-4756-b6dc-678b3dc48092}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{539d878e-0917-4907-84c2-ff34087d7a6d}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{539d878e-0917-4907-84c2-ff34087d7a6d}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{4fb58209-499d-4ffe-86f2-5554cc47a3ef}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{4fb58209-499d-4ffe-86f2-5554cc47a3ef}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{475f8f21-3823-40ce-8930-7bd728b65cd6}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{475f8f21-3823-40ce-8930-7bd728b65cd6}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{4487cac9-9ddc-480f-92ee-1f2c08e9fae2}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{4487cac9-9ddc-480f-92ee-1f2c08e9fae2}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{2f59b893-549d-42aa-8d40-3b00e7df2bd0}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{2f59b893-549d-42aa-8d40-3b00e7df2bd0}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{2f051cc6-93b0-4996-882d-1b3b06fac089}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{2f051cc6-93b0-4996-882d-1b3b06fac089}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{2e60b798-4d7d-4cc9-a026-dccd8299cb68}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{2e60b798-4d7d-4cc9-a026-dccd8299cb68}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{227a2327-48d1-47fa-b7b7-be33bd6ad6f5}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{227a2327-48d1-47fa-b7b7-be33bd6ad6f5}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{14198da2-3b5d-47d5-a843-39c113f83cc4}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{14198da2-3b5d-47d5-a843-39c113f83cc4}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{04d47f34-a921-48ee-878a-5706a778f7b8}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{04d47f34-a921-48ee-878a-5706a778f7b8}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\wpdmtphw.inf_65078a3e:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\wpdmtp.inf_2a7adb02:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\prnms001.inf_eecbd9eb:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\prnms001.inf_307fbde5:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\pccswpddriver.inf_b43d96b2:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\pccs_bluetooth.inf_5f8b7288:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\nv_disp.inf_d5e7056e:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\nokia_bluetooth.inf_ee12375f:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\nokbtmdm.inf_7837a5db:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\nmwcdnsuc.inf_545c47c7:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\nmwcdnsu.inf_add8f2b2:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\ccdcmbo.inf_0b649316:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\ccdcmbm.inf_65311714:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\ccdcmbcj.inf_6fbfd776:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\ccdcmb.inf_0c298eaf:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\bthmtpenum.inf_201caa7f:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\Music:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Roaming\TeamViewer:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Roaming\PC Suite\Settings:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Roaming\PC Suite:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Speech\Files\UserLexicons:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Speech\Files:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Speech:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\muffin:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\host:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\6baea4fe-67991d30-n:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\60:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\55:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50\5b902232-3f83e69e-n:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45\4f710eed-458a18ac-n:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\258cea61-1ad8bbe7-n:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\31:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\30:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21\14e5d595-4b2e842e-n:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\19:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-34a271ad-n:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\4e09eacf-77c890f3-n:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Local\Google\Update\Manifest\Initial:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Local\Google\Update\Manifest:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Local\Google\Update:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Local\Google\GBScreensaver:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Local\Google:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET NOD32 Antivirus\Quarantine:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET NOD32 Antivirus:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Local\ESET:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\COLOR:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\Adobe\Shockwave 11\Xtras:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\Adobe\Shockwave 11:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\Adobe\Director:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\Adobe:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System\IOSUBSYS:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\IETldCache:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QAOONEYZ:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I5QPNT6X:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6G0G00NN:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2W4NLPYX:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\PeerNetworking:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Network\Connections\Pbk:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Network\Connections:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Network:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VCN6V9JP:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q0FM323X:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77YV7B3M:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3M03SSHY:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\PixArt\Pac207:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\PixArt:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\26676eb7\92c7e946\hash:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\26676eb7\92c7e946:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\26676eb7:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Logs\WindowsBackup:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Logs\SystemRestore:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\LiveKernelReports\WATCHDOG:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\{AC76BA86-7AD7-5760-0000-900000000003}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\{AC76BA86-7AD7-5464-3428-900000000004}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-A92000000001}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-A91000000001}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\{7902E313-FF0F-4493-ACB1-A8147B78DCD0}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\{564D0000-547B-4ED8-8070-85286CC8C9BF}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\{52D02A2B-03D2-4E34-A358-DC5D951FD296}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\{4E9F688B-E659-46D6-B554-55CA56D28BCD}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\{26A24AE4-039D-4CA4-87B4-2F83216011FF}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\{0C973594-7DDF-4BD0-84ED-3517F7622037}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\{048298C9-A4D3-490B-9FF9-AB023A9238F3}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\$PatchCache$\Managed\BB8472125AD0ED64281A047363CDF972\1.0.1:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\$PatchCache$\Managed\BB8472125AD0ED64281A047363CDF972:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\$PatchCache$\Managed\A76A12931BA584E449447C8141FC0372\1.0.0:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\$PatchCache$\Managed\A76A12931BA584E449447C8141FC0372:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\$PatchCache$\Managed\81500F31A708A3B4380B7ADC093F3A89\90.0.146:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\$PatchCache$\Managed\81500F31A708A3B4380B7ADC093F3A89:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\$PatchCache$\Managed\6714BAA8747AA3944AC26BC3AFFD8D3E\9.9.10:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\$PatchCache$\Managed\6714BAA8747AA3944AC26BC3AFFD8D3E:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\$PatchCache$\Managed\28669D9CD4A5AF54ABE3DDBCB2C08B86\3.525.21:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\$PatchCache$\Managed\28669D9CD4A5AF54ABE3DDBCB2C08B86:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\erdnt:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\894183c0c47bd4772fbfad4c1a7e3b71:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\policy.1.0.cli_uretypes\1.1.0.0__ce2cb7e279207b9e:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\policy.1.0.cli_uretypes:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\policy.1.0.cli_ure\15.0.0.0__ce2cb7e279207b9e:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\policy.1.0.cli_ure:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\policy.1.0.cli_oootypes\1.1.0.0__ce2cb7e279207b9e:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\policy.1.0.cli_oootypes:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\policy.1.0.cli_cppuhelper\15.0.0.0__ce2cb7e279207b9e:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\policy.1.0.cli_cppuhelper:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\policy.1.0.cli_basetypes\12.0.0.0__ce2cb7e279207b9e:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\policy.1.0.cli_basetypes:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\Interop.hpqusg\3.0.0.0__a53cf5803f4c3827:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\Interop.hpqusg:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\cli_uretypes\1.0.1.0__ce2cb7e279207b9e:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\cli_uretypes:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\cli_ure\1.0.15.0__ce2cb7e279207b9e:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\cli_ure:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\cli_oootypes\1.0.1.0__ce2cb7e279207b9e:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\cli_oootypes:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\cli_cppuhelper\1.0.15.0__ce2cb7e279207b9e:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\cli_cppuhelper:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\cli_basetypes\1.0.12.0__ce2cb7e279207b9e:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\cli_basetypes:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\~CDRWSET.T:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Mike\AppData\Roaming\Roxio:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\temp:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\SystemRequirementsLab:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Program Files:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Phone Browser:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Incomplete:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\zajímavosti z politiky:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\wallpaper:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\wallpap:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\vyúčt.cen služeb za rok 2009.jpg:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\vyúčt.cen služeb a náj.za rok2009.jpg:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\VyberParcelu.aspx_soubory:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\velké obrazy:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\translate_soubory:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\tisky:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\tapety:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\SMLOUVY:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\řím09:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\různé:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\různé programy:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\pictures:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\peintures:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\obrazy mistrů:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\My Stationery:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\My Albums:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\Mount&Blade Warband:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\Mount&Blade Warband Savegames:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\Moje moduly Google Gadgets:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\mobile restauro:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\m.havlíčková-beran:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\kuchařské recepty:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\kredenc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\Horny:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\Hlubočepy:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\gymnázium ostrov:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\Family:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\Electronic Arts:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\dveře šárky:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\DVDVideoSoft:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\Bluetooth:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\Aktuální:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\2010-02-27:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\20091130161357208_0001.jpg:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Desktop\zesík aktual:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Desktop\WR Picture:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Desktop\přibil, praha,únor,2008:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Desktop\Hudba a filmy:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\Teeworlds:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\TeamViewer:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\teamspeak2:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\SUPERAntiSpyware.com:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\Sun:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\skypePM:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\Scanahand:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\PeerNetworking:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\PC Suite:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\OpenOffice.org:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\Nokia:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\Nero:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\Malwarebytes:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\IObit:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\GlarySoft:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\GetRightToGo:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\FreeLanguageTranslator:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\Flock:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\Fit3DLive:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\DriverCure:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\Bioshock:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\Ashampoo:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Local\WarRockDF:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Local\Scanahand:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Local\O&O:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Local\NCSoft:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Local\Microsoft Games:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Local\kiwi.software.NET:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Local\Flock:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Local\ESET:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Local\assembly:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Local\ashampoo:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Local\Apps:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\SUPERAntiSpyware.com:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\PC Suite:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\ParetoLogic:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\page:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\NortonInstaller:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\Norton:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\NexonUS:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\Nero:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\Media Center Programs:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\Malwarebytes:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\Lavasoft:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\Installations:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\HPSSUPPLY:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\Hewlett-Packard:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\Google Updater:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\ESET:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\DriverCure:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\ashampoo:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\Winamp:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\Voice Manager:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\trend micro:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\TeamViewer:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\Teamspeak2_RC2:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\SystemRequirementsLab:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\Steam:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\Sonic Foundry:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\Sonic Foundry Setup:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\PX Storage Engine:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\OpenOffice.org 3:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\Nokia:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\MSECache:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\HP:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\Flock:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\DIFX:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\Conduit:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\Common Files\Steam:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\Common Files\ParetoLogic:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\Common Files\GraphBoard 2.50:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\CanonsKener:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\AusLogics Disk Defrag:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\7-Zip:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\perflogs:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\KPCMS:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\inetpub:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Adobe:Roxio EMC Stream
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:DFC5A2B2
< End of report >

mikeav · #7 Příspěvek od **mikeav** » 05 srp 2010 21:39

Omlouvám se zde je ještě jedna část logu.

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codec - C:\Windows\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lhacm - C:\Windows\System32\lhacm.acm (Microsoft Corporation)
Drivers32: msacm.siren - C:\Windows\System32\sirenacm.dll (Microsoft Corporation)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv50 - C:\Windows\System32\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.XFR1 - C:\Windows\System32\xfcodec.dll ()
Drivers32: vidc.XVID - C:\Windows\System32\xvidvfw.dll ()

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

#8 Příspěvek od **vyosek** » 05 srp 2010 22:21

Nasledujici soubory otestujte na VirusTotalu (viz muj podpis)

C:\Windows\System32\ws2_32.dll
C:\Windows\System32\rsaenh.dll
C:\Windows\System32\SLC.dll
Kliknete na Prochazet
Soubor nehledejte, jen vlozte cestu souboru, ktery chci otestovat
Pokud napise Soubor byl jiz testovan, dejte otestovat znovu
Kliknete na Otestovat soubor
Vysledek analyzy sem vlozte (jako odkaz)

#9 Příspěvek od **vyosek** » 08 srp 2010 19:12

Jak to tu vypada

mikeav · #10 Příspěvek od **mikeav** » 10 srp 2010 12:59

Dobrý den, omlouvám se ale byl jsem pár dní pryč.

zde jsou výsledky:
http://www.virustotal.com/file-scan/rep ... 1281441018
http://www.virustotal.com/file-scan/rep ... 1281441391
http://www.virustotal.com/file-scan/rep ... 1281441183

#11 Příspěvek od **vyosek** » 10 srp 2010 15:29

Spustte znovu OTL

Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

Kód: Vybrat vše

:otl
SRV - File not found [Auto | Stopped] -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\VcommMgr.sys -- (VcommMgr)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\VComm.sys -- (VComm)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\IvtBtBus.sys -- (IvtBtBUs)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\EagleNT.sys -- (EagleNT)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Michael\AppData\Local\Temp\cpuz132\cpuz132_x32.sys -- (cpuz132)
DRV - File not found [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\BtHidBus.sys -- (BtHidBus)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\btcusb.sys -- (Btcsrusb)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\btnetdrv.sys -- (BT)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive)
IE - HKU\S-1-5-21-3175424738-3105269781-473552097-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
IE - HKU\S-1-5-21-3175424738-3105269781-473552097-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
IE - HKU\S-1-5-21-3175424738-3105269781-473552097-1002\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-3175424738-3105269781-473552097-1002\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
IE - HKU\S-1-5-21-3175424738-3105269781-473552097-1002\..\URLSearchHook: - Reg Error: Key error. File not found
O4 - HKLM..\RunOnce: [] File not found
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/fl ... rashim.cab (Reg Error: Key error.)
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
@Alternate Data Stream - 816 bytes -> C:\Users\Michael\Documents\sleva+na+Beymu.eml:OECustomProperty
@Alternate Data Stream - 76 bytes -> C:\Windows\Webcam1200\PXIINST-32:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Webcam1200:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\twain_32\PA207:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\tracing\kerberos:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\Tasks\WPD:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\Tasks\Microsoft\Windows\Active Directory Rights Management Services Client:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\spool\drivers\w32x86\3\temp:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\msmq:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\LogFiles\HTTPERR:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\inetsrv\MetaBack:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\inetsrv\History:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DRVSTORE\pccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DRVSTORE\GEARAspiWD_4F4AA3475F1B13A1E8212B6D40B351211BC358CE\x86:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DRVSTORE\GEARAspiWD_4F4AA3475F1B13A1E8212B6D40B351211BC358CE:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DRVSTORE:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{f3c4c7a2-1b8d-45b7-9f71-a3b745227476}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{f3c4c7a2-1b8d-45b7-9f71-a3b745227476}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{e3b44c9f-235a-4fa0-b429-338621a9e6a2}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{e3b44c9f-235a-4fa0-b429-338621a9e6a2}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{e29a409a-3e16-4cdc-906d-e3e01ea7da79}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{e29a409a-3e16-4cdc-906d-e3e01ea7da79}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{debf9d95-7e2c-46cf-901a-40b2ee437fe8}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{debf9d95-7e2c-46cf-901a-40b2ee437fe8}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{c3dbde31-d961-4e31-b841-ab044f679546}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{c3dbde31-d961-4e31-b841-ab044f679546}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{bfaff184-4edd-424a-b818-d8a31aa7e2a0}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{bfaff184-4edd-424a-b818-d8a31aa7e2a0}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{a574f16b-af75-49f4-b693-3585c2e0a704}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{a574f16b-af75-49f4-b693-3585c2e0a704}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{8fb808da-3cef-4f5f-b247-3ed20e13f665}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{8fb808da-3cef-4f5f-b247-3ed20e13f665}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{8c018919-38d9-4ecb-9b19-77ba6722cb6e}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{8c018919-38d9-4ecb-9b19-77ba6722cb6e}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{84501fe5-34bf-4d71-8584-64b14b2c778b}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{84501fe5-34bf-4d71-8584-64b14b2c778b}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{7fe4658b-79bf-4f02-8bd3-2bdc616e1963}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{7fe4658b-79bf-4f02-8bd3-2bdc616e1963}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{7d94d4ef-72b5-4fc6-a2ac-d3c0d13c9a76}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{7d94d4ef-72b5-4fc6-a2ac-d3c0d13c9a76}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{5b8acd0f-8c25-4756-b6dc-678b3dc48092}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{5b8acd0f-8c25-4756-b6dc-678b3dc48092}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{539d878e-0917-4907-84c2-ff34087d7a6d}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{539d878e-0917-4907-84c2-ff34087d7a6d}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{4fb58209-499d-4ffe-86f2-5554cc47a3ef}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{4fb58209-499d-4ffe-86f2-5554cc47a3ef}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{475f8f21-3823-40ce-8930-7bd728b65cd6}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{475f8f21-3823-40ce-8930-7bd728b65cd6}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{4487cac9-9ddc-480f-92ee-1f2c08e9fae2}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{4487cac9-9ddc-480f-92ee-1f2c08e9fae2}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{2f59b893-549d-42aa-8d40-3b00e7df2bd0}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{2f59b893-549d-42aa-8d40-3b00e7df2bd0}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{2f051cc6-93b0-4996-882d-1b3b06fac089}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{2f051cc6-93b0-4996-882d-1b3b06fac089}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{2e60b798-4d7d-4cc9-a026-dccd8299cb68}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{2e60b798-4d7d-4cc9-a026-dccd8299cb68}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{227a2327-48d1-47fa-b7b7-be33bd6ad6f5}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{227a2327-48d1-47fa-b7b7-be33bd6ad6f5}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{14198da2-3b5d-47d5-a843-39c113f83cc4}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{14198da2-3b5d-47d5-a843-39c113f83cc4}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{04d47f34-a921-48ee-878a-5706a778f7b8}\Package:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\Temp\{04d47f34-a921-48ee-878a-5706a778f7b8}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\wpdmtphw.inf_65078a3e:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\wpdmtp.inf_2a7adb02:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\prnms001.inf_eecbd9eb:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\prnms001.inf_307fbde5:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\pccswpddriver.inf_b43d96b2:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\pccs_bluetooth.inf_5f8b7288:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\nv_disp.inf_d5e7056e:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\nokia_bluetooth.inf_ee12375f:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\nokbtmdm.inf_7837a5db:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\nmwcdnsuc.inf_545c47c7:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\nmwcdnsu.inf_add8f2b2:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\ccdcmbo.inf_0b649316:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\ccdcmbm.inf_65311714:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\ccdcmbcj.inf_6fbfd776:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\ccdcmb.inf_0c298eaf:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\DriverStore\FileRepository\bthmtpenum.inf_201caa7f:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\Music:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Roaming\TeamViewer:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Roaming\PC Suite\Settings:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Roaming\PC Suite:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Speech\Files\UserLexicons:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Speech\Files:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Speech:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\muffin:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\host:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\6baea4fe-67991d30-n:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\60:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\55:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50\5b902232-3f83e69e-n:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45\4f710eed-458a18ac-n:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\258cea61-1ad8bbe7-n:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\31:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\30:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21\14e5d595-4b2e842e-n:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\19:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-34a271ad-n:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\4e09eacf-77c890f3-n:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Local\Google\Update\Manifest\Initial:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Local\Google\Update\Manifest:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Local\Google\Update:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Local\Google\GBScreensaver:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Local\Google:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET NOD32 Antivirus\Quarantine:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET NOD32 Antivirus:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\config\systemprofile\AppData\Local\ESET:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\COLOR:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\Adobe\Shockwave 11\Xtras:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\Adobe\Shockwave 11:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\Adobe\Director:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System32\Adobe:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\System\IOSUBSYS:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\IETldCache:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QAOONEYZ:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I5QPNT6X:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6G0G00NN:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2W4NLPYX:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\PeerNetworking:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Network\Connections\Pbk:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Network\Connections:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Network:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VCN6V9JP:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q0FM323X:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77YV7B3M:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3M03SSHY:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\PixArt\Pac207:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\PixArt:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\26676eb7\92c7e946\hash:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\26676eb7\92c7e946:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\26676eb7:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Logs\WindowsBackup:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Logs\SystemRestore:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\LiveKernelReports\WATCHDOG:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\{AC76BA86-7AD7-5760-0000-900000000003}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\{AC76BA86-7AD7-5464-3428-900000000004}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-A92000000001}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-A91000000001}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\{7902E313-FF0F-4493-ACB1-A8147B78DCD0}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\{564D0000-547B-4ED8-8070-85286CC8C9BF}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\{52D02A2B-03D2-4E34-A358-DC5D951FD296}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\{4E9F688B-E659-46D6-B554-55CA56D28BCD}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\{26A24AE4-039D-4CA4-87B4-2F83216011FF}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\{0C973594-7DDF-4BD0-84ED-3517F7622037}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\{048298C9-A4D3-490B-9FF9-AB023A9238F3}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\$PatchCache$\Managed\BB8472125AD0ED64281A047363CDF972\1.0.1:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\$PatchCache$\Managed\BB8472125AD0ED64281A047363CDF972:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\$PatchCache$\Managed\A76A12931BA584E449447C8141FC0372\1.0.0:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\$PatchCache$\Managed\A76A12931BA584E449447C8141FC0372:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\$PatchCache$\Managed\81500F31A708A3B4380B7ADC093F3A89\90.0.146:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\$PatchCache$\Managed\81500F31A708A3B4380B7ADC093F3A89:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\$PatchCache$\Managed\6714BAA8747AA3944AC26BC3AFFD8D3E\9.9.10:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\$PatchCache$\Managed\6714BAA8747AA3944AC26BC3AFFD8D3E:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\$PatchCache$\Managed\28669D9CD4A5AF54ABE3DDBCB2C08B86\3.525.21:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\Installer\$PatchCache$\Managed\28669D9CD4A5AF54ABE3DDBCB2C08B86:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\erdnt:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\894183c0c47bd4772fbfad4c1a7e3b71:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\policy.1.0.cli_uretypes\1.1.0.0__ce2cb7e279207b9e:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\policy.1.0.cli_uretypes:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\policy.1.0.cli_ure\15.0.0.0__ce2cb7e279207b9e:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\policy.1.0.cli_ure:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\policy.1.0.cli_oootypes\1.1.0.0__ce2cb7e279207b9e:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\policy.1.0.cli_oootypes:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\policy.1.0.cli_cppuhelper\15.0.0.0__ce2cb7e279207b9e:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\policy.1.0.cli_cppuhelper:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\policy.1.0.cli_basetypes\12.0.0.0__ce2cb7e279207b9e:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\policy.1.0.cli_basetypes:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\Interop.hpqusg\3.0.0.0__a53cf5803f4c3827:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\Interop.hpqusg:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\cli_uretypes\1.0.1.0__ce2cb7e279207b9e:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\cli_uretypes:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\cli_ure\1.0.15.0__ce2cb7e279207b9e:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\cli_ure:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\cli_oootypes\1.0.1.0__ce2cb7e279207b9e:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\cli_oootypes:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\cli_cppuhelper\1.0.15.0__ce2cb7e279207b9e:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\cli_cppuhelper:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\cli_basetypes\1.0.12.0__ce2cb7e279207b9e:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\assembly\GAC\cli_basetypes:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Windows\~CDRWSET.T:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Mike\AppData\Roaming\Roxio:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\temp:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\SystemRequirementsLab:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Program Files:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Phone Browser:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Incomplete:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\zajímavosti z politiky:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\wallpaper:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\wallpap:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\vyúčt.cen služeb za rok 2009.jpg:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\vyúčt.cen služeb a náj.za rok2009.jpg:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\VyberParcelu.aspx_soubory:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\velké obrazy:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\translate_soubory:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\tisky:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\tapety:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\SMLOUVY:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\řím09:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\různé:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\různé programy:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\pictures:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\peintures:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\obrazy mistrů:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\My Stationery:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\My Albums:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\Mount&Blade Warband:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\Mount&Blade Warband Savegames:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\Moje moduly Google Gadgets:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\mobile restauro:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\m.havlíčková-beran:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\kuchařské recepty:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\kredenc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\Horny:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\Hlubočepy:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\gymnázium ostrov:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\Family:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\Electronic Arts:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\dveře šárky:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\DVDVideoSoft:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\Bluetooth:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\Aktuální:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\2010-02-27:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Documents\20091130161357208_0001.jpg:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Desktop\zesík aktual:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Desktop\WR Picture:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Desktop\přibil, praha,únor,2008:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\Desktop\Hudba a filmy:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\Teeworlds:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\TeamViewer:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\teamspeak2:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\SUPERAntiSpyware.com:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\Sun:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\skypePM:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\Scanahand:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\PeerNetworking:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\PC Suite:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\OpenOffice.org:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\Nokia:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\Nero:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\Malwarebytes:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\IObit:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\GlarySoft:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\GetRightToGo:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\FreeLanguageTranslator:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\Flock:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\Fit3DLive:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\DriverCure:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\Bioshock:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Roaming\Ashampoo:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Local\WarRockDF:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Local\Scanahand:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Local\O&O:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Local\NCSoft:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Local\Microsoft Games:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Local\kiwi.software.NET:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Local\Flock:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Local\ESET:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Local\assembly:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Local\ashampoo:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Michael\AppData\Local\Apps:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\SUPERAntiSpyware.com:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\PC Suite:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\ParetoLogic:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\page:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\NortonInstaller:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\Norton:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\NexonUS:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\Nero:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\Media Center Programs:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\Malwarebytes:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\Lavasoft:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\Installations:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\HPSSUPPLY:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\Hewlett-Packard:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\Google Updater:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\ESET:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\DriverCure:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\ashampoo:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\ProgramData\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\Winamp:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\Voice Manager:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\trend micro:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\TeamViewer:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\Teamspeak2_RC2:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\SystemRequirementsLab:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\Steam:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\Sonic Foundry:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\Sonic Foundry Setup:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\PX Storage Engine:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\OpenOffice.org 3:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\Nokia:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\MSECache:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\HP:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\Flock:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\DIFX:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\Conduit:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\Common Files\Steam:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\Common Files\ParetoLogic:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\Common Files\GraphBoard 2.50:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\CanonsKener:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\AusLogics Disk Defrag:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Program Files\7-Zip:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\perflogs:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\KPCMS:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\inetpub:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Adobe:Roxio EMC Stream
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:DFC5A2B2

:files
C:\WINDOWS\system32\*.tmp.dll /s
C:\WINDOWS\system32\SET*.tmp /s
C:\WINDOWS\*.tmp /s
C:\Windows\System32\ws2_32.dll C:\Windows\erdnt\cache\ws2_32.dll /replace

:commands
[RESETHOSTS]
[EMPTYTEMP]
[EMPTYFLASH]
[CLEARALLRESTOREPOINTS]

Nasledne kliknete na Opravit
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

mikeav · #12 Příspěvek od **mikeav** » 10 srp 2010 21:08

All processes killed
========== OTL ==========
Service gusvc stopped successfully!
Service gusvc deleted successfully!
File C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe not found.
Service VcommMgr stopped successfully!
Service VcommMgr deleted successfully!
File C:\Windows\System32\Drivers\VcommMgr.sys not found.
Service VComm stopped successfully!
Service VComm deleted successfully!
File C:\Windows\System32\DRIVERS\VComm.sys not found.
Service NwlnkFwd stopped successfully!
Service NwlnkFwd deleted successfully!
File C:\Windows\System32\DRIVERS\nwlnkfwd.sys not found.
Service NwlnkFlt stopped successfully!
Service NwlnkFlt deleted successfully!
File C:\Windows\System32\DRIVERS\nwlnkflt.sys not found.
Service IvtBtBUs stopped successfully!
Service IvtBtBUs deleted successfully!
File C:\Windows\System32\Drivers\IvtBtBus.sys not found.
Service IpInIp stopped successfully!
Service IpInIp deleted successfully!
File C:\Windows\System32\DRIVERS\ipinip.sys not found.
Service EagleNT stopped successfully!
Service EagleNT deleted successfully!
File C:\Windows\System32\drivers\EagleNT.sys not found.
Service cpuz132 stopped successfully!
Service cpuz132 deleted successfully!
File C:\Users\Michael\AppData\Local\Temp\cpuz132\cpuz132_x32.sys not found.
Service BtHidBus stopped successfully!
Service BtHidBus deleted successfully!
File C:\Windows\System32\Drivers\BtHidBus.sys not found.
Service Btcsrusb stopped successfully!
Service Btcsrusb deleted successfully!
File C:\Windows\System32\Drivers\btcusb.sys not found.
Service BT stopped successfully!
Service BT deleted successfully!
File C:\Windows\System32\DRIVERS\btnetdrv.sys not found.
Service blbdrive stopped successfully!
Service blbdrive deleted successfully!
File C:\Windows\System32\drivers\blbdrive.sys not found.
HKU\S-1-5-21-3175424738-3105269781-473552097-1002\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Page| /E : value set successfully!
HKU\S-1-5-21-3175424738-3105269781-473552097-1002\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKU\S-1-5-21-3175424738-3105269781-473552097-1002\SOFTWARE\Microsoft\Internet Explorer\Main\\StartPageCache| /E : value set successfully!
HKU\S-1-5-21-3175424738-3105269781-473552097-1002\SOFTWARE\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-3175424738-3105269781-473552097-1002\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ not found.
Starting removal of ActiveX control {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
C:\Windows\Downloaded Program Files\erma.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{AEB6717E-7E19-11d0-97EE-00C04FD91972} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AEB6717E-7E19-11d0-97EE-00C04FD91972}\ not found.
C:\Windows\System32\~GLH0116.TMP deleted successfully.
C:\Windows\msdownld.tmp folder deleted successfully.
ADS C:\Users\Michael\Documents\sleva+na+Beymu.eml:OECustomProperty deleted successfully.
ADS C:\Windows\Webcam1200\PXIINST-32:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Webcam1200:Roxio EMC Stream deleted successfully.
ADS C:\Windows\twain_32\PA207:Roxio EMC Stream deleted successfully.
ADS C:\Windows\tracing\kerberos:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\Tasks\WPD:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\Tasks\Microsoft\Windows\Active Directory Rights Management Services Client:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\spool\drivers\w32x86\3\temp:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\msmq:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\LogFiles\HTTPERR:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\inetsrv\MetaBack:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\inetsrv\History:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\DRVSTORE\pccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\DRVSTORE\GEARAspiWD_4F4AA3475F1B13A1E8212B6D40B351211BC358CE\x86:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\DRVSTORE\GEARAspiWD_4F4AA3475F1B13A1E8212B6D40B351211BC358CE:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\DRVSTORE:Roxio EMC Stream deleted successfully.
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{f3c4c7a2-1b8d-45b7-9f71-a3b745227476}\Package:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{f3c4c7a2-1b8d-45b7-9f71-a3b745227476}:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{e3b44c9f-235a-4fa0-b429-338621a9e6a2}\Package:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{e3b44c9f-235a-4fa0-b429-338621a9e6a2}:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{e29a409a-3e16-4cdc-906d-e3e01ea7da79}\Package:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{e29a409a-3e16-4cdc-906d-e3e01ea7da79}:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{debf9d95-7e2c-46cf-901a-40b2ee437fe8}\Package:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{debf9d95-7e2c-46cf-901a-40b2ee437fe8}:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{c3dbde31-d961-4e31-b841-ab044f679546}\Package:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{c3dbde31-d961-4e31-b841-ab044f679546}:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{bfaff184-4edd-424a-b818-d8a31aa7e2a0}\Package:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{bfaff184-4edd-424a-b818-d8a31aa7e2a0}:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{a574f16b-af75-49f4-b693-3585c2e0a704}\Package:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{a574f16b-af75-49f4-b693-3585c2e0a704}:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{8fb808da-3cef-4f5f-b247-3ed20e13f665}\Package:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{8fb808da-3cef-4f5f-b247-3ed20e13f665}:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{8c018919-38d9-4ecb-9b19-77ba6722cb6e}\Package:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{8c018919-38d9-4ecb-9b19-77ba6722cb6e}:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{84501fe5-34bf-4d71-8584-64b14b2c778b}\Package:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{84501fe5-34bf-4d71-8584-64b14b2c778b}:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{7fe4658b-79bf-4f02-8bd3-2bdc616e1963}\Package:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{7fe4658b-79bf-4f02-8bd3-2bdc616e1963}:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{7d94d4ef-72b5-4fc6-a2ac-d3c0d13c9a76}\Package:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{7d94d4ef-72b5-4fc6-a2ac-d3c0d13c9a76}:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{5b8acd0f-8c25-4756-b6dc-678b3dc48092}\Package:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{5b8acd0f-8c25-4756-b6dc-678b3dc48092}:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{539d878e-0917-4907-84c2-ff34087d7a6d}\Package:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{539d878e-0917-4907-84c2-ff34087d7a6d}:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{4fb58209-499d-4ffe-86f2-5554cc47a3ef}\Package:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{4fb58209-499d-4ffe-86f2-5554cc47a3ef}:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{475f8f21-3823-40ce-8930-7bd728b65cd6}\Package:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{475f8f21-3823-40ce-8930-7bd728b65cd6}:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{4487cac9-9ddc-480f-92ee-1f2c08e9fae2}\Package:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{4487cac9-9ddc-480f-92ee-1f2c08e9fae2}:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{2f59b893-549d-42aa-8d40-3b00e7df2bd0}\Package:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{2f59b893-549d-42aa-8d40-3b00e7df2bd0}:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{2f051cc6-93b0-4996-882d-1b3b06fac089}\Package:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{2f051cc6-93b0-4996-882d-1b3b06fac089}:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{2e60b798-4d7d-4cc9-a026-dccd8299cb68}\Package:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{2e60b798-4d7d-4cc9-a026-dccd8299cb68}:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{227a2327-48d1-47fa-b7b7-be33bd6ad6f5}\Package:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{227a2327-48d1-47fa-b7b7-be33bd6ad6f5}:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{14198da2-3b5d-47d5-a843-39c113f83cc4}\Package:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{14198da2-3b5d-47d5-a843-39c113f83cc4}:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{04d47f34-a921-48ee-878a-5706a778f7b8}\Package:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\Temp\{04d47f34-a921-48ee-878a-5706a778f7b8}:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\FileRepository\wpdmtphw.inf_65078a3e:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\FileRepository\wpdmtp.inf_2a7adb02:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\FileRepository\prnms001.inf_eecbd9eb:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\FileRepository\prnms001.inf_307fbde5:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\FileRepository\pccswpddriver.inf_b43d96b2:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\FileRepository\pccs_bluetooth.inf_5f8b7288:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\FileRepository\nv_disp.inf_d5e7056e:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\FileRepository\nokia_bluetooth.inf_ee12375f:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\FileRepository\nokbtmdm.inf_7837a5db:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\FileRepository\nmwcdnsuc.inf_545c47c7:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\FileRepository\nmwcdnsu.inf_add8f2b2:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\FileRepository\ccdcmbo.inf_0b649316:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\FileRepository\ccdcmbm.inf_65311714:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\FileRepository\ccdcmbcj.inf_6fbfd776:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\FileRepository\ccdcmb.inf_0c298eaf:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\DriverStore\FileRepository\bthmtpenum.inf_201caa7f:Roxio EMC Stream .
Unable to delete ADS C:\Windows\System32\config\systemprofile\Music:Roxio EMC Stream .
ADS C:\Windows\System32\config\systemprofile\AppData\Roaming\TeamViewer:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\Roaming\PC Suite\Settings:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\Roaming\PC Suite:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Speech\Files\UserLexicons:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Speech\Files:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Speech:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\muffin:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\host:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\6baea4fe-67991d30-n:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\60:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\55:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50\5b902232-3f83e69e-n:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45\4f710eed-458a18ac-n:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\258cea61-1ad8bbe7-n:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\31:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\30:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21\14e5d595-4b2e842e-n:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\19:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-34a271ad-n:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\4e09eacf-77c890f3-n:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\Local\Google\Update\Manifest\Initial:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\Local\Google\Update\Manifest:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\Local\Google\Update:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\Local\Google\GBScreensaver:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\Local\Google:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET NOD32 Antivirus\Quarantine:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET NOD32 Antivirus:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\config\systemprofile\AppData\Local\ESET:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\COLOR:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\Adobe\Shockwave 11\Xtras:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\Adobe\Shockwave 11:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\Adobe\Director:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System32\Adobe:Roxio EMC Stream deleted successfully.
ADS C:\Windows\System\IOSUBSYS:Roxio EMC Stream deleted successfully.
ADS C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\IETldCache:Roxio EMC Stream deleted successfully.
ADS C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QAOONEYZ:Roxio EMC Stream deleted successfully.
ADS C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I5QPNT6X:Roxio EMC Stream deleted successfully.
ADS C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6G0G00NN:Roxio EMC Stream deleted successfully.
ADS C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2W4NLPYX:Roxio EMC Stream deleted successfully.
ADS C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5:Roxio EMC Stream deleted successfully.
ADS C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5:Roxio EMC Stream deleted successfully.
ADS C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\PeerNetworking:Roxio EMC Stream deleted successfully.
ADS C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk:Roxio EMC Stream deleted successfully.
ADS C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Network\Connections\Pbk:Roxio EMC Stream deleted successfully.
ADS C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Network\Connections:Roxio EMC Stream deleted successfully.
ADS C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Network:Roxio EMC Stream deleted successfully.
ADS C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VCN6V9JP:Roxio EMC Stream deleted successfully.
ADS C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q0FM323X:Roxio EMC Stream deleted successfully.
ADS C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77YV7B3M:Roxio EMC Stream deleted successfully.
ADS C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3M03SSHY:Roxio EMC Stream deleted successfully.
ADS C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5:Roxio EMC Stream deleted successfully.
ADS C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5:Roxio EMC Stream deleted successfully.
ADS C:\Windows\PixArt\Pac207:Roxio EMC Stream deleted successfully.
ADS C:\Windows\PixArt:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\26676eb7\92c7e946\hash:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\26676eb7\92c7e946:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\26676eb7:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Logs\WindowsBackup:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Logs\SystemRestore:Roxio EMC Stream deleted successfully.
ADS C:\Windows\LiveKernelReports\WATCHDOG:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Installer\{AC76BA86-7AD7-5760-0000-900000000003}:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Installer\{AC76BA86-7AD7-5464-3428-900000000004}:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-A92000000001}:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-A91000000001}:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Installer\{7902E313-FF0F-4493-ACB1-A8147B78DCD0}:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Installer\{564D0000-547B-4ED8-8070-85286CC8C9BF}:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Installer\{52D02A2B-03D2-4E34-A358-DC5D951FD296}:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Installer\{4E9F688B-E659-46D6-B554-55CA56D28BCD}:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Installer\{26A24AE4-039D-4CA4-87B4-2F83216011FF}:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Installer\{0C973594-7DDF-4BD0-84ED-3517F7622037}:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Installer\{048298C9-A4D3-490B-9FF9-AB023A9238F3}:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Installer\$PatchCache$\Managed\BB8472125AD0ED64281A047363CDF972\1.0.1:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Installer\$PatchCache$\Managed\BB8472125AD0ED64281A047363CDF972:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Installer\$PatchCache$\Managed\A76A12931BA584E449447C8141FC0372\1.0.0:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Installer\$PatchCache$\Managed\A76A12931BA584E449447C8141FC0372:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Installer\$PatchCache$\Managed\81500F31A708A3B4380B7ADC093F3A89\90.0.146:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Installer\$PatchCache$\Managed\81500F31A708A3B4380B7ADC093F3A89:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Installer\$PatchCache$\Managed\6714BAA8747AA3944AC26BC3AFFD8D3E\9.9.10:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Installer\$PatchCache$\Managed\6714BAA8747AA3944AC26BC3AFFD8D3E:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Installer\$PatchCache$\Managed\28669D9CD4A5AF54ABE3DDBCB2C08B86\3.525.21:Roxio EMC Stream deleted successfully.
ADS C:\Windows\Installer\$PatchCache$\Managed\28669D9CD4A5AF54ABE3DDBCB2C08B86:Roxio EMC Stream deleted successfully.
ADS C:\Windows\erdnt:Roxio EMC Stream deleted successfully.
ADS C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\894183c0c47bd4772fbfad4c1a7e3b71:Roxio EMC Stream deleted successfully.
ADS C:\Windows\assembly\GAC\policy.1.0.cli_uretypes\1.1.0.0__ce2cb7e279207b9e:Roxio EMC Stream deleted successfully.
ADS C:\Windows\assembly\GAC\policy.1.0.cli_uretypes:Roxio EMC Stream deleted successfully.
ADS C:\Windows\assembly\GAC\policy.1.0.cli_ure\15.0.0.0__ce2cb7e279207b9e:Roxio EMC Stream deleted successfully.
ADS C:\Windows\assembly\GAC\policy.1.0.cli_ure:Roxio EMC Stream deleted successfully.
ADS C:\Windows\assembly\GAC\policy.1.0.cli_oootypes\1.1.0.0__ce2cb7e279207b9e:Roxio EMC Stream deleted successfully.
ADS C:\Windows\assembly\GAC\policy.1.0.cli_oootypes:Roxio EMC Stream deleted successfully.
ADS C:\Windows\assembly\GAC\policy.1.0.cli_cppuhelper\15.0.0.0__ce2cb7e279207b9e:Roxio EMC Stream deleted successfully.
ADS C:\Windows\assembly\GAC\policy.1.0.cli_cppuhelper:Roxio EMC Stream deleted successfully.
ADS C:\Windows\assembly\GAC\policy.1.0.cli_basetypes\12.0.0.0__ce2cb7e279207b9e:Roxio EMC Stream deleted successfully.
ADS C:\Windows\assembly\GAC\policy.1.0.cli_basetypes:Roxio EMC Stream deleted successfully.
ADS C:\Windows\assembly\GAC\Interop.hpqusg\3.0.0.0__a53cf5803f4c3827:Roxio EMC Stream deleted successfully.
ADS C:\Windows\assembly\GAC\Interop.hpqusg:Roxio EMC Stream deleted successfully.
ADS C:\Windows\assembly\GAC\cli_uretypes\1.0.1.0__ce2cb7e279207b9e:Roxio EMC Stream deleted successfully.
ADS C:\Windows\assembly\GAC\cli_uretypes:Roxio EMC Stream deleted successfully.
ADS C:\Windows\assembly\GAC\cli_ure\1.0.15.0__ce2cb7e279207b9e:Roxio EMC Stream deleted successfully.
ADS C:\Windows\assembly\GAC\cli_ure:Roxio EMC Stream deleted successfully.
ADS C:\Windows\assembly\GAC\cli_oootypes\1.0.1.0__ce2cb7e279207b9e:Roxio EMC Stream deleted successfully.
ADS C:\Windows\assembly\GAC\cli_oootypes:Roxio EMC Stream deleted successfully.
ADS C:\Windows\assembly\GAC\cli_cppuhelper\1.0.15.0__ce2cb7e279207b9e:Roxio EMC Stream deleted successfully.
ADS C:\Windows\assembly\GAC\cli_cppuhelper:Roxio EMC Stream deleted successfully.
ADS C:\Windows\assembly\GAC\cli_basetypes\1.0.12.0__ce2cb7e279207b9e:Roxio EMC Stream deleted successfully.
ADS C:\Windows\assembly\GAC\cli_basetypes:Roxio EMC Stream deleted successfully.
ADS C:\Windows\~CDRWSET.T:Roxio EMC Stream deleted successfully.
ADS C:\Users\Mike\AppData\Roaming\Roxio:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\temp:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\SystemRequirementsLab:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Program Files:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Phone Browser:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Incomplete:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\zajímavosti z politiky:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\wallpaper:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\wallpap:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\vyúčt.cen služeb za rok 2009.jpg:Roxio EMC Stream deleted successfully.
Unable to delete ADS C:\Users\Michael\Documents\vyúčt.cen služeb a náj.za rok2009.jpg:Roxio EMC Stream .
ADS C:\Users\Michael\Documents\VyberParcelu.aspx_soubory:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\velké obrazy:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\translate_soubory:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\tisky:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\tapety:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\SMLOUVY:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\řím09:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\různé:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\různé programy:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\pictures:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\peintures:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\obrazy mistrů:Roxio EMC Stream deleted successfully.
Unable to delete ADS C:\Users\Michael\Documents\My Stationery:Roxio EMC Stream .
ADS C:\Users\Michael\Documents\My Albums:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\Mount&Blade Warband:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\Mount&Blade Warband Savegames:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\Moje moduly Google Gadgets:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\mobile restauro:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\m.havlíčková-beran:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\kuchařské recepty:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\kredenc:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\Horny:Roxio EMC Stream deleted successfully.
Unable to delete ADS C:\Users\Michael\Documents\Hlubočepy:Roxio EMC Stream .
ADS C:\Users\Michael\Documents\gymnázium ostrov:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\Family:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\Electronic Arts:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\dveře šárky:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\DVDVideoSoft:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\Bluetooth:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\Aktuální:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\2010-02-27:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Documents\20091130161357208_0001.jpg:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Desktop\zesík aktual:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Desktop\WR Picture:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Desktop\přibil, praha,únor,2008:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\Desktop\Hudba a filmy:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Roaming\Teeworlds:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Roaming\TeamViewer:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Roaming\teamspeak2:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Roaming\SUPERAntiSpyware.com:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Roaming\Sun:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Roaming\skypePM:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Roaming\Scanahand:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Roaming\PeerNetworking:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Roaming\PC Suite:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Roaming\OpenOffice.org:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Roaming\Nokia:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Roaming\Nero:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Roaming\Malwarebytes:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Roaming\IObit:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Roaming\GlarySoft:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Roaming\GetRightToGo:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Roaming\FreeLanguageTranslator:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Roaming\Flock:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Roaming\Fit3DLive:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Roaming\DriverCure:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Roaming\Bioshock:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Roaming\Ashampoo:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Local\WarRockDF:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Local\Scanahand:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Local\O&O:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Local\NCSoft:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Local\Microsoft Games:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Local\kiwi.software.NET:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Local\Flock:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Local\ESET:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Local\assembly:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Local\ashampoo:Roxio EMC Stream deleted successfully.
ADS C:\Users\Michael\AppData\Local\Apps:Roxio EMC Stream deleted successfully.
ADS C:\ProgramData\SUPERAntiSpyware.com:Roxio EMC Stream deleted successfully.
ADS C:\ProgramData\PC Suite:Roxio EMC Stream deleted successfully.
ADS C:\ProgramData\ParetoLogic:Roxio EMC Stream deleted successfully.
ADS C:\ProgramData\page:Roxio EMC Stream deleted successfully.
ADS C:\ProgramData\NortonInstaller:Roxio EMC Stream deleted successfully.
ADS C:\ProgramData\Norton:Roxio EMC Stream deleted successfully.
ADS C:\ProgramData\NexonUS:Roxio EMC Stream deleted successfully.
ADS C:\ProgramData\Nero:Roxio EMC Stream deleted successfully.
ADS C:\ProgramData\Media Center Programs:Roxio EMC Stream deleted successfully.
ADS C:\ProgramData\Malwarebytes:Roxio EMC Stream deleted successfully.
ADS C:\ProgramData\Lavasoft:Roxio EMC Stream deleted successfully.
ADS C:\ProgramData\Installations:Roxio EMC Stream deleted successfully.
ADS C:\ProgramData\HPSSUPPLY:Roxio EMC Stream deleted successfully.
ADS C:\ProgramData\Hewlett-Packard:Roxio EMC Stream deleted successfully.
ADS C:\ProgramData\Google Updater:Roxio EMC Stream deleted successfully.
ADS C:\ProgramData\ESET:Roxio EMC Stream deleted successfully.
ADS C:\ProgramData\DriverCure:Roxio EMC Stream deleted successfully.
ADS C:\ProgramData\ashampoo:Roxio EMC Stream deleted successfully.
ADS C:\ProgramData\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}:Roxio EMC Stream deleted successfully.
ADS C:\Program Files\Winamp:Roxio EMC Stream deleted successfully.
ADS C:\Program Files\Voice Manager:Roxio EMC Stream deleted successfully.
ADS C:\Program Files\trend micro:Roxio EMC Stream deleted successfully.
ADS C:\Program Files\TeamViewer:Roxio EMC Stream deleted successfully.
ADS C:\Program Files\Teamspeak2_RC2:Roxio EMC Stream deleted successfully.
ADS C:\Program Files\SystemRequirementsLab:Roxio EMC Stream deleted successfully.
ADS C:\Program Files\Steam:Roxio EMC Stream deleted successfully.
ADS C:\Program Files\Sonic Foundry:Roxio EMC Stream deleted successfully.
ADS C:\Program Files\Sonic Foundry Setup:Roxio EMC Stream deleted successfully.
ADS C:\Program Files\PX Storage Engine:Roxio EMC Stream deleted successfully.
ADS C:\Program Files\OpenOffice.org 3:Roxio EMC Stream deleted successfully.
ADS C:\Program Files\Nokia:Roxio EMC Stream deleted successfully.
ADS C:\Program Files\MSECache:Roxio EMC Stream deleted successfully.
ADS C:\Program Files\HP:Roxio EMC Stream deleted successfully.
ADS C:\Program Files\Flock:Roxio EMC Stream deleted successfully.
ADS C:\Program Files\DIFX:Roxio EMC Stream deleted successfully.
ADS C:\Program Files\Conduit:Roxio EMC Stream deleted successfully.
ADS C:\Program Files\Common Files\Steam:Roxio EMC Stream deleted successfully.
ADS C:\Program Files\Common Files\ParetoLogic:Roxio EMC Stream deleted successfully.
ADS C:\Program Files\Common Files\GraphBoard 2.50:Roxio EMC Stream deleted successfully.
ADS C:\Program Files\CanonsKener:Roxio EMC Stream deleted successfully.
ADS C:\Program Files\AusLogics Disk Defrag:Roxio EMC Stream deleted successfully.
ADS C:\Program Files\7-Zip:Roxio EMC Stream deleted successfully.
ADS C:\perflogs:Roxio EMC Stream deleted successfully.
ADS C:\KPCMS:Roxio EMC Stream deleted successfully.
ADS C:\inetpub:Roxio EMC Stream deleted successfully.
ADS C:\Adobe:Roxio EMC Stream deleted successfully.
ADS C:\ProgramData\TEMP:DFC5A2B2 deleted successfully.
========== FILES ==========
File\Folder C:\WINDOWS\system32\*.tmp.dll not found.
File\Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2DF2.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP62FD.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP81A.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP88A0.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9717.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE699.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE752.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPEEF0.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPF859.tmp folder moved successfully.
C:\WINDOWS\Installer\MSI19CE.tmp moved successfully.
C:\WINDOWS\Installer\MSI31CF.tmp moved successfully.
C:\WINDOWS\Installer\MSI33F.tmp moved successfully.
C:\WINDOWS\Installer\MSI6A6F.tmp moved successfully.
C:\WINDOWS\SoftwareDistribution\AuthCabs\7971f918-a847-4430-9279-4a52d1efe18d\wlt29F1.tmp moved successfully.
C:\WINDOWS\Temp\GURBB33.tmp moved successfully.
C:\WINDOWS\Temp\JET117D.tmp moved successfully.
C:\WINDOWS\Temp\JET8B9B.tmp moved successfully.
C:\WINDOWS\Temp\JET97EB.tmp moved successfully.
C:\WINDOWS\Temp\JET9B16.tmp moved successfully.
C:\WINDOWS\Temp\JET9CEA.tmp moved successfully.
C:\WINDOWS\Temp\JET9F2B.tmp moved successfully.
C:\WINDOWS\Temp\JET9F79.tmp moved successfully.
File move failed. C:\WINDOWS\Temp\JET9F89.tmp scheduled to be moved on reboot.
C:\WINDOWS\Temp\JETA0E0.tmp moved successfully.
C:\WINDOWS\Temp\JETA2B4.tmp moved successfully.
C:\WINDOWS\Temp\JETA35F.tmp moved successfully.
C:\WINDOWS\Temp\JETA3EC.tmp moved successfully.
C:\WINDOWS\Temp\JETA543.tmp moved successfully.
C:\WINDOWS\Temp\JETA89D.tmp moved successfully.
C:\WINDOWS\Temp\JETA997.tmp moved successfully.
C:\WINDOWS\Temp\JETB54A.tmp moved successfully.
C:\WINDOWS\Temp\JETEBF.tmp moved successfully.
C:\WINDOWS\Temp\JETEFD.tmp moved successfully.
Invalid replace specification: C:\Windows\System32\ws2_32.dll C:\Windows\erdnt\cache\ws2_32.dll
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 41620 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Michael
->Temp folder emptied: 5929248 bytes
->Temporary Internet Files folder emptied: 40878589 bytes
->Java cache emptied: 0 bytes
->Apple Safari cache emptied: 2299904 bytes
->Flash cache emptied: 51968 bytes

User: Mike
->Temp folder emptied: 0 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 14206 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 47,00 mb

[EMPTYFLASH]

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Michael
->Flash cache emptied: 0 bytes

User: Mike

User: Public

Total Flash Files Cleaned = 0,00 mb

OTL by OldTimer - Version 3.2.9.1 log created on 08102010_215717

Files\Folders moved on Reboot...
C:\WINDOWS\Temp\JET9F89.tmp moved successfully.
File move failed. C:\Windows\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot.
C:\Windows\temp\~ROMFN_00000E70 moved successfully.

Registry entries deleted on Reboot...

#13 Příspěvek od **vyosek** » 10 srp 2010 21:10

Jak se chova PC

mikeav · #14 Příspěvek od **mikeav** » 10 srp 2010 21:47

Chová se normálně jen se mi sekl při shlížení videa... logy nejsou v pořádku?

#15 Příspěvek od **vyosek** » 11 srp 2010 15:32

Pri shlizeni videa v jakem slova smyslu - pri prehravani v prehravaci (napr v media playeru) nebo na webu (napr. youtube)

VIRY.CZ

Prosím o kontrolu

Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu