Prosím si o kontrolu logu

[Thooty]

Znovu zdravím,
Prosil bych o kontrolu logu kvůli vysoké latency(pingu) ve hrách i zasekávání PC.
Předem děkuji.

Logfile of random's system information tool 1.08 (written by random/random)
Run by ToRTeEn at 2010-09-27 15:54:38
Microsoft Windows 7 Ultimate Service Pack 3
System drive C: has 9 GB (12%) free of 76 GB
Total RAM: 1023 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:55:12, on 27.9.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\Explorer.EXE
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\ToRTeEn\Desktop\RSIT.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\trend micro\ToRTeEn.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.battlefieldheroes.com/en/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=;ftp=;https=;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: (no name) - {074C1DC5-9320-4A9A-947D-C042949C6216} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SoftGate.DownloadManager.IE.DownloadManagerPlugin - {a1acb83b-3713-4784-b2b3-64c6d06565e9} - mscoree.dll (file missing)
O2 - BHO: FlashGetBHO - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - (no file)
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {bb7f932c-881f-4b88-837d-cf84adff062b} - mscoree.dll (file missing)
O9 - Extra 'Tools' menuitem: Nova Stahovák - {bb7f932c-881f-4b88-837d-cf84adff062b} - mscoree.dll (file missing)
O15 - Trusted Zone: http://software.kuaiche.com
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: {DLL_Str}
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

--
End of file - 5449 bytes

======Scheduled tasks folder======

C:\Windows\tasks\AWC Startup.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3595803208-3766525656-3816774015-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3595803208-3766525656-3816774015-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{074C1DC5-9320-4A9A-947D-C042949C6216}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-06-16 341600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a1acb83b-3713-4784-b2b3-64c6d06565e9}]
SoftGate.DownloadManager.IE.DownloadManagerPlugin - C:\Windows\system32\mscoree.dll [2009-11-25 297808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-05-26 1385864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-17 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-05-26 1385864]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-04-07 2145000]
"AdobeAAMUpdater-1.0"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
"AdobeCS5ServiceManager"=C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-07-22 402432]
"SwitchBoard"=C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2010-04-29 1090952]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-07-22 402432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EvtMgr6]
C:\Program Files\Logitech\SetPointP\SetPoint.exe [2010-05-18 1311312]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FlashGet 3]
C:\Program Files\FlashGet 3\Flashget3.exe -minimize []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files\ICQ7.2\ICQ.exe [2010-08-22 133432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2009-11-11 1451520]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerSuite]
C:\Program Files\Uniblue\PowerSuite\launcher.exe [2010-06-01 46440]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2010-09-02 13351304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files\Steam\Steam.exe [2010-09-17 1242448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^ToRTeEn^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Logitech . Registrace produktu.lnk]
C:\PROGRA~1\COMMON~1\LogiShrd\eReg\SetPoint\eReg.exe [2009-11-16 517384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="{DLL_Str}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2010-05-06 64592]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2010-09-27 15:54:38 ----D---- C:\rsit
2010-09-26 20:52:56 ----D---- C:\Program Files\Call of duty Modern Warfare 2
2010-09-24 22:47:38 ----A---- C:\win32.sys
2010-09-19 12:31:21 ----D---- C:\Windows\8A809006C25A4A3A9DAB94659BCDB107.TMP
2010-09-18 20:55:44 ----A---- C:\Windows\system32\RtNicProp32.dll
2010-09-18 20:55:44 ----A---- C:\Windows\system32\drivers\Rt86win7.sys
2010-09-18 12:32:00 ----D---- C:\Program Files\Counter Strike 1.6
2010-09-15 21:33:20 ----D---- C:\Program Files\Rockstar Games
2010-09-15 21:04:51 ----D---- C:\Program Files\GTA San Andreas
2010-09-14 20:43:21 ----A---- C:\Windows\system32\iertutil.dll
2010-09-14 20:40:30 ----A---- C:\Windows\system32\spoolsv.exe

======List of files/folders modified in the last 1 months======

2010-09-27 15:55:13 ----D---- C:\Windows\temp
2010-09-27 15:54:41 ----D---- C:\Program Files\trend micro
2010-09-27 15:53:29 ----D---- C:\Windows\system32\Tasks
2010-09-27 15:53:18 ----D---- C:\ProgramData\NVIDIA
2010-09-27 10:15:56 ----D---- C:\Windows\system32\config
2010-09-26 20:58:22 ----SHD---- C:\System Volume Information
2010-09-26 20:53:05 ----D---- C:\Program Files
2010-09-26 20:07:17 ----D---- C:\Users\ToRTeEn\AppData\Roaming\uTorrent
2010-09-24 20:48:13 ----D---- C:\Windows\System32
2010-09-24 20:44:46 ----D---- C:\Program Files\Common Files\Steam
2010-09-24 20:44:13 ----D---- C:\Program Files\Steam
2010-09-24 16:19:23 ----D---- C:\Windows\system32\catroot2
2010-09-24 15:31:59 ----D---- C:\Users\ToRTeEn\AppData\Roaming\Skype
2010-09-24 15:31:09 ----D---- C:\Users\ToRTeEn\AppData\Roaming\skypePM
2010-09-22 05:25:58 ----D---- C:\Windows
2010-09-21 10:06:08 ----D---- C:\Users\ToRTeEn\AppData\Roaming\esmska
2010-09-20 11:20:41 ----SHD---- C:\Windows\Installer
2010-09-19 17:20:24 ----SD---- C:\ProgramData\Microsoft
2010-09-19 17:17:23 ----SD---- C:\Users\ToRTeEn\AppData\Roaming\Microsoft
2010-09-19 12:31:25 ----D---- C:\Windows\system32\drivers
2010-09-19 12:30:44 ----D---- C:\Windows\inf
2010-09-19 12:30:44 ----D---- C:\Program Files\NVIDIA Corporation
2010-09-19 12:30:32 ----D---- C:\Config.Msi
2010-09-19 12:30:02 ----D---- C:\Windows\Help
2010-09-19 12:29:13 ----D---- C:\ProgramData\NVIDIA Corporation
2010-09-19 12:26:31 ----D---- C:\Windows\system32\catroot
2010-09-19 12:26:30 ----D---- C:\Windows\system32\DriverStore
2010-09-19 10:36:11 ----D---- C:\Program Files\Google
2010-09-18 21:31:03 ----D---- C:\Windows\Downloaded Program Files
2010-09-18 21:18:40 ----D---- C:\Users\ToRTeEn\AppData\Roaming\IObit
2010-09-18 21:18:40 ----D---- C:\Program Files\IObit
2010-09-18 20:55:44 ----A---- C:\Windows\system32\RTNUninst32.dll
2010-09-18 20:43:14 ----D---- C:\Windows\Prefetch
2010-09-17 19:14:46 ----RSD---- C:\Windows\assembly
2010-09-15 19:56:45 ----D---- C:\Windows\debug
2010-09-15 19:55:00 ----D---- C:\Program Files\CCleaner
2010-09-15 16:21:04 ----D---- C:\Users\ToRTeEn\AppData\Roaming\ICQ
2010-09-14 20:58:44 ----D---- C:\Windows\winsxs
2010-09-14 20:58:17 ----D---- C:\Program Files\Microsoft Silverlight
2010-09-14 20:50:32 ----D---- C:\ProgramData\Microsoft Help
2010-09-14 20:43:40 ----A---- C:\Windows\system32\MRT.exe
2010-09-14 19:46:51 ----D---- C:\Windows\AppPatch
2010-09-14 17:49:59 ----D---- C:\Program Files\ICQ7.2

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amdxata;amdxata; C:\Windows\system32\DRIVERS\amdxata.sys [2009-07-14 23616]
R0 CLFS;@%SystemRoot%\system32\clfs.sys,-100; C:\Windows\System32\CLFS.sys [2009-07-14 249408]
R0 CNG;CNG; C:\Windows\System32\Drivers\cng.sys [2009-07-14 369568]
R0 FileInfo;@%SystemRoot%\system32\drivers\fileinfo.sys,-100; C:\Windows\system32\drivers\fileinfo.sys [2009-07-14 58448]
R0 fvevol;@%SystemRoot%\system32\drivers\fvevol.sys,-100; C:\Windows\System32\DRIVERS\fvevol.sys [2009-09-26 194488]
R0 hwpolicy;@%systemroot%\system32\drivers\hwpolicy.sys,-101; C:\Windows\System32\drivers\hwpolicy.sys [2009-07-14 13904]
R0 KSecPkg;KSecPkg; C:\Windows\System32\Drivers\ksecpkg.sys [2009-12-11 133720]
R0 msisadrv;msisadrv; C:\Windows\system32\DRIVERS\msisadrv.sys [2009-07-14 13888]
R0 pcw;Performance Counters for Windows Driver; C:\Windows\System32\drivers\pcw.sys [2009-07-14 43088]
R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2009-07-09 45200]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 spldr;Security Processor Loader Driver; C:\Windows\system32\drivers\spldr.sys [2009-07-14 17472]
R0 storflt;@%SystemRoot%\system32\vmstorfltres.dll,-1000; C:\Windows\system32\DRIVERS\vmstorfl.sys [2009-07-14 40896]
R0 vdrvroot;Ovladač rozpoznávacího modulu virtuální jednotky společnosti Microsoft; C:\Windows\system32\DRIVERS\vdrvroot.sys [2009-07-14 32832]
R0 volmgr;Ovladač správce svazků; C:\Windows\system32\DRIVERS\volmgr.sys [2009-07-14 53312]
R0 volmgrx;@%SystemRoot%\system32\drivers\volmgrx.sys,-100; C:\Windows\System32\drivers\volmgrx.sys [2009-07-14 297040]
R0 Wdf01000;Kernel Mode Driver Frameworks service; C:\Windows\system32\drivers\Wdf01000.sys [2009-07-14 445008]
R1 blbdrive;blbdrive; C:\Windows\system32\DRIVERS\blbdrive.sys [2009-07-14 35328]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 DfsC;@%systemroot%\system32\drivers\dfsc.sys,-101; C:\Windows\System32\Drivers\dfsc.sys [2009-07-14 78336]
R1 discache;@%systemroot%\system32\drivers\discache.sys,-102; C:\Windows\System32\drivers\discache.sys [2009-07-14 32256]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-04-07 114984]
R1 nsiproxy;@%SystemRoot%\system32\drivers\nsiproxy.sys,-2; C:\Windows\system32\drivers\nsiproxy.sys [2009-07-14 16896]
R1 RDPENCDD;@%systemroot%\system32\drivers\RDPENCDD.sys,-101; C:\Windows\system32\drivers\rdpencdd.sys [2009-07-14 6656]
R1 RDPREFMP;@%systemroot%\system32\drivers\RdpRefMp.sys,-101; C:\Windows\system32\drivers\rdprefmp.sys [2009-07-14 7168]
R1 tdx;@%SystemRoot%\system32\tcpipcfg.dll,-50004; C:\Windows\system32\DRIVERS\tdx.sys [2009-07-14 74240]
R1 Wanarpv6;@%systemroot%\system32\rascfg.dll,-32012; C:\Windows\system32\DRIVERS\wanarp.sys [2009-07-14 63488]
R1 WfpLwf;WFP Lightweight Filter; C:\Windows\system32\DRIVERS\wfplwf.sys [2009-07-14 9728]
R2 cpuz133;cpuz133; \??\C:\Windows\system32\drivers\cpuz133_x32.sys [2010-03-30 20968]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-04-07 133512]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-04-07 134488]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-04-07 41312]
R2 lltdio;Link-Layer Topology Discovery Mapper I/O Driver; C:\Windows\system32\DRIVERS\lltdio.sys [2009-07-14 48128]
R2 luafv;@%systemroot%\system32\drivers\luafv.sys,-100; C:\Windows\system32\drivers\luafv.sys [2009-07-14 86528]
R2 PEAUTH;PEAUTH; C:\Windows\system32\drivers\peauth.sys [2009-07-14 586752]
R2 RMCAST;@%SystemRoot%\system32\wshrm.dll,-102; C:\Windows\system32\DRIVERS\RMCAST.sys [2009-07-14 117248]
R2 rspndr;Link-Layer Topology Discovery Responder; C:\Windows\system32\DRIVERS\rspndr.sys [2009-07-14 60928]
R2 tcpipreg;TCP/IP Registry Compatibility; C:\Windows\System32\drivers\tcpipreg.sys [2009-07-14 34816]
R3 bowser;@%systemroot%\system32\browser.dll,-102; C:\Windows\system32\DRIVERS\bowser.sys [2009-07-14 69632]
R3 CompositeBus;Ovladač rozpoznávacího modulu složené sběrnice; C:\Windows\system32\DRIVERS\CompositeBus.sys [2009-07-14 31232]
R3 DXGKrnl;LDDM Graphics Subsystem; C:\Windows\System32\drivers\dxgkrnl.sys [2009-10-02 728648]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-04-07 32584]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-07-14 304128]
R3 HDAudBus;Ovladač sběrnice Microsoft UAA pro zvuk High Definition Audio; C:\Windows\system32\DRIVERS\HDAudBus.sys [2009-07-14 108544]
R3 HidUsb;Ovladač třídy standardu HID Microsoft; C:\Windows\system32\DRIVERS\hidusb.sys [2009-07-14 24064]
R3 intelppm;Ovladač procesoru Intel; C:\Windows\system32\DRIVERS\intelppm.sys [2009-07-14 53760]
R3 kbdhid;Ovladač klávesnice standardu HID; C:\Windows\system32\DRIVERS\kbdhid.sys [2009-07-14 28160]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2010-03-18 38864]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2010-03-18 37328]
R3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\Windows\System32\Drivers\LUsbFilt.Sys [2010-03-18 28624]
R3 monitor;Služba ovladače funkce třídy monitorů Microsoft; C:\Windows\system32\DRIVERS\monitor.sys [2009-07-14 23552]
R3 mouhid;Ovladač myši standardu HID; C:\Windows\system32\DRIVERS\mouhid.sys [2009-07-14 26112]
R3 mpsdrv;@%SystemRoot%\system32\FirewallAPI.dll,-23092; C:\Windows\System32\drivers\mpsdrv.sys [2009-07-14 60416]
R3 mrxsmb10;@%systemroot%\system32\wkssvc.dll,-1004; C:\Windows\system32\DRIVERS\mrxsmb10.sys [2010-02-27 221696]
R3 mrxsmb20;@%systemroot%\system32\wkssvc.dll,-1006; C:\Windows\system32\DRIVERS\mrxsmb20.sys [2010-02-27 95744]
R3 NativeWifiP;NativeWiFi Filter; C:\Windows\system32\DRIVERS\nwifi.sys [2009-07-14 267264]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2010-06-22 105576]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2010-07-10 11008040]
R3 RasAgileVpn;WAN Miniport (IKEv2); C:\Windows\system32\DRIVERS\AgileVpn.sys [2009-07-14 49152]
R3 RasSstp;@%systemroot%\system32\sstpsvc.dll,-202; C:\Windows\system32\DRIVERS\rassstp.sys [2009-07-14 75264]
R3 rdpbus;Remote Desktop Device Redirector Bus Driver; C:\Windows\system32\DRIVERS\rdpbus.sys [2009-07-14 18944]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2010-09-18 267880]
R3 srv2;@%systemroot%\system32\srvsvc.dll,-104; C:\Windows\System32\DRIVERS\srv2.sys [2010-06-22 307200]
R3 srvnet;srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [2010-06-22 113664]
R3 umbus;Ovladač sběrnice UMBus Enumerator; C:\Windows\system32\DRIVERS\umbus.sys [2009-07-14 39936]
R3 usbuhci;Ovladač miniportu univerzálního hostitelského řadiče Microsoft USB; C:\Windows\system32\DRIVERS\usbuhci.sys [2009-07-14 24064]
R3 WudfPf;User Mode Driver Frameworks Platform Driver; C:\Windows\system32\drivers\WudfPf.sys [2009-07-14 92672]
S3 1394ohci;1394 OHCI Compliant Host Controller; C:\Windows\system32\DRIVERS\1394ohci.sys [2009-07-14 163328]
S3 AcpiPmi;ACPI Power Meter Driver; C:\Windows\system32\DRIVERS\acpipmi.sys [2009-07-14 9728]
S3 adp94xx;adp94xx; C:\Windows\system32\DRIVERS\adp94xx.sys [2009-07-14 422976]
S3 adpahci;adpahci; C:\Windows\system32\DRIVERS\adpahci.sys [2009-07-14 297552]
S3 adpu320;adpu320; C:\Windows\system32\DRIVERS\adpu320.sys [2009-07-14 146512]
S3 agp440;Intel AGP Bus Filter; C:\Windows\system32\DRIVERS\agp440.sys [2009-07-14 53312]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 amdide;amdide; C:\Windows\system32\DRIVERS\amdide.sys [2009-07-14 14912]
S3 AmdK8;AMD K8 Processor Driver; C:\Windows\system32\DRIVERS\amdk8.sys [2009-07-14 55296]
S3 AmdPPM;AMD Processor Driver; C:\Windows\system32\DRIVERS\amdppm.sys [2009-07-14 52736]
S3 amdsata;amdsata; C:\Windows\system32\DRIVERS\amdsata.sys [2009-07-14 79952]
S3 amdsbs;amdsbs; C:\Windows\system32\DRIVERS\amdsbs.sys [2009-07-14 159312]
S3 AppID;@%systemroot%\system32\appidsvc.dll,-102; C:\Windows\system32\drivers\appid.sys [2009-07-14 50176]
S3 arc;arc; C:\Windows\system32\DRIVERS\arc.sys [2009-07-14 76368]
S3 arcsas;arcsas; C:\Windows\system32\DRIVERS\arcsas.sys [2009-07-14 86608]
S3 b06bdrv;Broadcom NetXtreme II VBD; C:\Windows\system32\DRIVERS\bxvbdx.sys [2009-07-14 430080]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BrFiltLo;Brother USB Mass-Storage Lower Filter Driver; C:\Windows\system32\DRIVERS\BrFiltLo.sys [2009-07-14 13568]
S3 BrFiltUp;Brother USB Mass-Storage Upper Filter Driver; C:\Windows\system32\DRIVERS\BrFiltUp.sys [2009-07-14 5248]
S3 Brserid;Brother MFC Serial Port Interface Driver (WDM); C:\Windows\System32\Drivers\Brserid.sys [2009-07-14 272128]
S3 BrSerWdm;Brother WDM Serial driver; C:\Windows\System32\Drivers\BrSerWdm.sys [2009-07-14 62336]
S3 BrUsbMdm;Brother MFC USB Fax Only Modem; C:\Windows\System32\Drivers\BrUsbMdm.sys [2009-07-14 12160]
S3 BrUsbSer;Brother MFC USB Serial WDM Driver; C:\Windows\System32\Drivers\BrUsbSer.sys [2009-07-14 11904]
S3 BTHMODEM;Bluetooth Serial Communications Driver; C:\Windows\system32\DRIVERS\bthmodem.sys [2009-07-14 56320]
S3 catchme;catchme; \??\C:\Users\ToRTeEn\AppData\Local\Temp\catchme.sys []
S3 circlass;Consumer IR Devices; C:\Windows\system32\DRIVERS\circlass.sys [2009-07-14 37888]
S3 cpuz132;cpuz132; \??\C:\Users\ToRTeEn\AppData\Local\Temp\cpuz132\cpuz132_x32.sys []
S3 DrvAgent32;DrvAgent32; \??\C:\Windows\system32\Drivers\DrvAgent32.sys [2010-06-25 23456]
S3 ebdrv;Broadcom NetXtreme II 10 GigE VBD; C:\Windows\system32\DRIVERS\evbdx.sys [2009-07-14 3100160]
S3 elxstor;elxstor; C:\Windows\system32\DRIVERS\elxstor.sys [2009-07-14 453712]
S3 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\DRIVERS\errdev.sys [2009-07-14 7168]
S3 exfat;exFAT File System Driver; C:\Windows\system32\drivers\exfat.sys [2009-07-14 142336]
S3 Filetrace;@%SystemRoot%\system32\drivers\filetrace.sys,-10001; C:\Windows\system32\drivers\filetrace.sys [2009-07-14 28160]
S3 FsDepends;@%SystemRoot%\system32\drivers\fsdepends.sys,-10001; C:\Windows\System32\drivers\FsDepends.sys [2009-07-14 46160]
S3 gagp30kx;Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms; C:\Windows\system32\DRIVERS\gagp30kx.sys [2009-07-14 57936]
S3 hcw85cir;Hauppauge Consumer Infrared Receiver; C:\Windows\system32\drivers\hcw85cir.sys [2009-07-14 26624]
S3 HidBatt;HID UPS Battery Driver; C:\Windows\system32\DRIVERS\HidBatt.sys [2009-07-14 21504]
S3 HidBth;Microsoft Bluetooth HID Miniport; C:\Windows\system32\DRIVERS\hidbth.sys [2009-07-14 91136]
S3 HidIr;Microsoft Infrared HID Driver; C:\Windows\system32\DRIVERS\hidir.sys [2009-07-14 37888]
S3 HpSAMD;HpSAMD; C:\Windows\system32\DRIVERS\HpSAMD.sys [2009-07-14 67152]
S3 iaStorV;iaStorV; C:\Windows\system32\DRIVERS\iaStorV.sys [2009-07-14 332352]
S3 iirsp;iirsp; C:\Windows\system32\DRIVERS\iirsp.sys [2009-07-14 41040]
S3 IPMIDRV;IPMIDRV; C:\Windows\system32\DRIVERS\IPMIDrv.sys [2009-07-14 65536]
S3 iScsiPrt;iScsiPort Driver; C:\Windows\system32\DRIVERS\msiscsi.sys [2009-07-14 186960]
S3 LSI_FC;LSI_FC; C:\Windows\system32\DRIVERS\lsi_fc.sys [2009-07-14 95824]
S3 LSI_SAS;LSI_SAS; C:\Windows\system32\DRIVERS\lsi_sas.sys [2009-07-14 89168]
S3 LSI_SAS2;LSI_SAS2; C:\Windows\system32\DRIVERS\lsi_sas2.sys [2009-07-14 54864]
S3 LSI_SCSI;LSI_SCSI; C:\Windows\system32\DRIVERS\lsi_scsi.sys [2009-07-14 96848]
S3 megasas;megasas; C:\Windows\system32\DRIVERS\megasas.sys [2009-07-14 30800]
S3 MegaSR;MegaSR; C:\Windows\system32\DRIVERS\MegaSR.sys [2009-07-14 235584]
S3 mpio;mpio; C:\Windows\system32\DRIVERS\mpio.sys [2009-07-14 130624]
S3 msahci;msahci; C:\Windows\system32\DRIVERS\msahci.sys [2009-07-14 27712]
S3 msdsm;msdsm; C:\Windows\system32\DRIVERS\msdsm.sys [2009-07-14 115792]
S3 mshidkmdf;@%SystemRoot%\system32\drivers\mshidkmdf.sys,-100; C:\Windows\System32\drivers\mshidkmdf.sys [2009-07-14 4096]
S3 MsRPC;MsRPC; C:\Windows\system32\drivers\MsRPC.sys [2009-07-14 162896]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2009-07-14 6144]
S3 MTConfig;Microsoft Input Configuration Driver; C:\Windows\system32\DRIVERS\MTConfig.sys [2009-07-14 12288]
S3 NdisCap;NDIS Capture LightWeight Filter; C:\Windows\system32\DRIVERS\ndiscap.sys [2009-07-14 27136]
S3 nfrd960;nfrd960; C:\Windows\system32\DRIVERS\nfrd960.sys [2009-07-14 44624]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2010-02-26 18176]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2010-02-26 22528]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsu.sys [2010-02-26 137344]
S3 nmwcdnsuc;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsuc.sys [2010-02-26 8320]
S3 nv_agp;NVIDIA nForce AGP Bus Filter; C:\Windows\system32\DRIVERS\nv_agp.sys [2009-07-14 105024]
S3 nvraid;nvraid; C:\Windows\system32\DRIVERS\nvraid.sys [2009-07-14 117312]
S3 nvstor;nvstor; C:\Windows\system32\DRIVERS\nvstor.sys [2009-07-14 142416]
S3 ohci1394;1394 OHCI Compliant Host Controller (Legacy); C:\Windows\system32\DRIVERS\ohci1394.sys [2009-07-14 62464]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 ql2300;ql2300; C:\Windows\system32\DRIVERS\ql2300.sys [2009-07-14 1383488]
S3 ql40xx;ql40xx; C:\Windows\system32\DRIVERS\ql40xx.sys [2009-07-14 106064]
S3 QWAVEdrv;@%SystemRoot%\system32\drivers\qwavedrv.sys,-1; C:\Windows\system32\drivers\qwavedrv.sys [2009-07-14 31744]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sbp2port;sbp2port; C:\Windows\system32\DRIVERS\sbp2port.sys [2009-07-14 85568]
S3 scfilter;@%SystemRoot%\System32\drivers\scfilter.sys,-11; C:\Windows\System32\DRIVERS\scfilter.sys [2009-07-14 26624]
S3 sermouse;Serial Mouse Driver; C:\Windows\system32\DRIVERS\sermouse.sys [2009-07-14 19968]
S3 sffdisk;Ovladač třídy úložiště SFF; C:\Windows\system32\DRIVERS\sffdisk.sys [2009-07-14 11264]
S3 sffp_mmc;Ovladač protokolu úložiště SFF pro konzolu MMC; C:\Windows\system32\DRIVERS\sffp_mmc.sys [2009-07-14 12288]
S3 sffp_sd;Ovladač protokolu úložiště SFF pro paměť sběrnici SDBus; C:\Windows\system32\DRIVERS\sffp_sd.sys [2009-10-10 12800]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 SiSRaid2;SiSRaid2; C:\Windows\system32\DRIVERS\SiSRaid2.sys [2009-07-14 40016]
S3 SiSRaid4;SiSRaid4; C:\Windows\system32\DRIVERS\sisraid4.sys [2009-07-14 77888]
S3 Smb;@%SystemRoot%\system32\tcpipcfg.dll,-50005; C:\Windows\system32\DRIVERS\smb.sys [2009-07-14 71168]
S3 stexstor;stexstor; C:\Windows\system32\DRIVERS\stexstor.sys [2009-07-14 21072]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 TCPIP6;Microsoft IPv6 Protocol Driver; C:\Windows\system32\DRIVERS\tcpip.sys [2010-06-14 1286016]
S3 tssecsrv;@%SystemRoot%\System32\DRIVERS\tssecsrv.sys,-101; C:\Windows\System32\DRIVERS\tssecsrv.sys [2009-07-14 30208]
S3 tunnel;Microsoft Tunnel Miniport Adapter Driver; C:\Windows\system32\DRIVERS\tunnel.sys [2009-07-14 108544]
S3 uagp35;Microsoft AGPv3.5 Filter; C:\Windows\system32\DRIVERS\uagp35.sys [2009-07-14 55888]
S3 uliagpkx;Uli AGP Bus Filter; C:\Windows\system32\DRIVERS\uliagpkx.sys [2009-07-14 57424]
S3 UmPass;Microsoft UMPass Driver; C:\Windows\system32\DRIVERS\umpass.sys [2009-07-14 8192]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2010-02-26 8192]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\Windows\system32\DRIVERS\usbccgp.sys [2009-07-14 75264]
S3 usbcir;eHome Infrared Receiver (USBCIR); C:\Windows\system32\DRIVERS\usbcir.sys [2009-07-14 86016]
S3 usbprint;Microsoft USB PRINTER Class; C:\Windows\system32\DRIVERS\usbprint.sys [2009-07-14 19968]
S3 usbser;USB Modem Driver; C:\Windows\system32\DRIVERS\usbser.sys [2009-07-14 27648]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\Windows\system32\DRIVERS\USBSTOR.SYS [2009-07-14 74752]
S3 vga;vga; C:\Windows\system32\DRIVERS\vgapnp.sys [2009-07-14 26112]
S3 vhdmp;vhdmp; C:\Windows\system32\DRIVERS\vhdmp.sys [2009-07-14 159824]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 vsmraid;vsmraid; C:\Windows\system32\DRIVERS\vsmraid.sys [2009-07-14 141904]
S3 vwifibus;@%SystemRoot%\System32\drivers\vwifibus.sys,-257; C:\Windows\System32\drivers\vwifibus.sys [2009-07-14 19968]
S3 WacomPen;Wacom Serial Pen HID Driver; C:\Windows\system32\DRIVERS\wacompen.sys [2009-07-14 21632]
S3 Wd;Wd; C:\Windows\system32\DRIVERS\wd.sys [2009-07-14 19024]
S3 WIMMount;WIMMount; C:\Windows\system32\drivers\wimmount.sys [2009-07-14 19008]
S3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2009-07-14 11264]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2009-07-14 132224]
S4 crcdisk;Crcdisk Filter Driver; C:\Windows\system32\DRIVERS\crcdisk.sys [2009-07-14 22096]
S4 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-06-30 691696]
S4 ws2ifsl;@%systemroot%\System32\drivers\ws2ifsl.sys,-1000; C:\Windows\system32\drivers\ws2ifsl.sys [2009-07-14 16384]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AudioEndpointBuilder;@%SystemRoot%\system32\audiosrv.dll,-204; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 BFE;@%SystemRoot%\system32\bfe.dll,-1001; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 DPS;@%systemroot%\system32\dps.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-04-07 810120]
R2 fdPHost;@%systemroot%\system32\fdPHost.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 gpsvc;@gpapi.dll,-112; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 IKEEXT;@%SystemRoot%\system32\ikeext.dll,-501; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 MMCSS;@%systemroot%\system32\mmcss.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 MpsSvc;@%SystemRoot%\system32\FirewallAPI.dll,-23090; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 netprofm;@%SystemRoot%\system32\netprofm.dll,-202; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 NlaSvc;@%SystemRoot%\System32\nlasvc.dll,-1; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 nsi;@%SystemRoot%\system32\nsisvc.dll,-200; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-07-09 129640]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2010-07-18 75064]
R2 Power;@%SystemRoot%\system32\umpo.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 ProfSvc;@%systemroot%\system32\profsvc.dll,-300; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 RpcEptMapper;@%windir%\system32\RpcEpMap.dll,-1001; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-07-09 248936]
R2 SysMain;@%SystemRoot%\system32\sysmain.dll,-1000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 WinDefend;@%ProgramFiles%\Windows Defender\MsMpRes.dll,-103; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 WSearch;Windows Search; C:\Windows\system32\SearchIndexer.exe [2009-07-14 428032]
R2 wudfsvc;@%SystemRoot%\system32\wudfsvc.dll,-1000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 AeLookupSvc;@%SystemRoot%\system32\aelupsvc.dll,-1; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 Appinfo;@%systemroot%\system32\appinfo.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 KeyIso;@keyiso.dll,-100; C:\Windows\system32\lsass.exe [2009-07-14 22528]
R3 PcaSvc;@%SystemRoot%\system32\pcasvc.dll,-1; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 SstpSvc;@%SystemRoot%\system32\sstpsvc.dll,-200; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 WdiServiceHost;@%systemroot%\system32\wdi.dll,-502; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 Wlansvc;@%SystemRoot%\System32\wlansvc.dll,-257; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-06-15 136176]
S2 HomeGroupProvider;@%SystemRoot%\System32\provsvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S2 sppsvc;@%SystemRoot%\system32\sppsvc.exe,-101; C:\Windows\system32\sppsvc.exe [2009-07-14 3179520]
S2 UxSms;@%SystemRoot%\system32\dwm.exe,-2000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 AppIDSvc;@%systemroot%\system32\appidsvc.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 AxInstSV;@%SystemRoot%\system32\AxInstSV.dll,-103; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 BDESVC;@%SystemRoot%\system32\bdesvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 bthserv;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 defragsvc;@%SystemRoot%\system32\defragsvc.dll,-101; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 EFS;@%SystemRoot%\system32\efssvc.dll,-100; C:\Windows\System32\lsass.exe [2009-07-14 22528]
S3 ehRecvr;@%SystemRoot%\ehome\ehrecvr.exe,-101; C:\Windows\ehome\ehRecvr.exe [2010-05-09 556032]
S3 ehSched;@%SystemRoot%\ehome\ehsched.exe,-101; C:\Windows\ehome\ehsched.exe [2009-07-14 94720]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-04-07 33560]
S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; C:\Windows\system32\fxssvc.exe [2009-07-14 522752]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2009-06-10 42856]
S3 HomeGroupListener;@%SystemRoot%\System32\ListSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 idsvc;@%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8193; C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2009-06-10 878416]
S3 IPBusEnum;@%systemroot%\system32\IPBusEnum.dll,-102; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 KtmRm;@comres.dll,-2946; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2010-05-06 293456]
S3 lltdsvc;@%SystemRoot%\system32\lltdres.dll,-1; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 MatSvc;@%ProgramFiles%\Microsoft Fix it Center\MatsRes.dll,-9000; C:\Program Files\Microsoft Fix it Center\Matsvc.exe [2010-04-10 266544]
S3 MSiSCSI;@%SystemRoot%\system32\iscsidsc.dll,-5000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 p2pimsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8004; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 p2psvc;@%SystemRoot%\system32\p2psvc.dll,-8006; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 pla;@%systemroot%\system32\pla.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PNRPAutoReg;@%SystemRoot%\system32\pnrpauto.dll,-8002; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PNRPsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 QWAVE;@%SystemRoot%\system32\qwave.dll,-1; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SDRSVC;@%SystemRoot%\system32\sdrsvc.dll,-107; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SensrSvc;@%SystemRoot%\System32\sensrsvc.dll,-1000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-04-27 611840]
S3 SessionEnv;@%SystemRoot%\System32\SessEnv.dll,-1026; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 sppuinotify;@%SystemRoot%\system32\sppuinotify.dll,-103; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2010-09-17 411432]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 TabletInputService;@%SystemRoot%\system32\TabSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 TBS;@%SystemRoot%\system32\tbssvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 THREADORDER;@%systemroot%\system32\mmcss.dll,-102; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 TrustedInstaller;@%SystemRoot%\servicing\TrustedInstaller.exe,-100; C:\Windows\servicing\TrustedInstaller.exe [2009-07-14 204800]
S3 UI0Detect;@%SystemRoot%\system32\ui0detect.exe,-101; C:\Windows\system32\UI0Detect.exe [2009-07-14 35840]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 VaultSvc;@%SystemRoot%\system32\vaultsvc.dll,-1003; C:\Windows\system32\lsass.exe [2009-07-14 22528]
S3 vds;@%SystemRoot%\system32\vds.exe,-100; C:\Windows\System32\vds.exe [2009-07-14 452608]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-05-19 1343400]
S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; C:\Windows\system32\wbengine.exe [2009-07-14 1202688]
S3 WbioSrvc;@%systemroot%\system32\wbiosrvc.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 wcncsvc;@%SystemRoot%\system32\wcncsvc.dll,-3; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WcsPlugInService;@%SystemRoot%\system32\WcsPlugInService.dll,-200; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 WdiSystemHost;@%systemroot%\system32\wdi.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 Wecsvc;@%SystemRoot%\system32\wecsvc.dll,-200; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 wercplsupport;@%SystemRoot%\System32\wercplsupport.dll,-101; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\wmpnetwk.exe [2009-07-14 1121280]
S3 WPCSvc;@%SystemRoot%\system32\wpcsvc.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 WwanSvc;@%SystemRoot%\System32\wwansvc.dll,-257; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 CertPropSvc;@%SystemRoot%\System32\certprop.dll,-11; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 clr_optimization_v2.0.50727_32;Microsoft .NET Framework NGEN v2.0.50727_X86; C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2009-06-10 66384]
S4 FDResPub;@%systemroot%\system32\fdrespub.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 iphlpsvc;@%SystemRoot%\system32\iphlpsvc.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 Mcx2Svc;@%SystemRoot%\ehome\ehres.dll,-15501; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpPortSharing;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8201; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 SCPolicySvc;@%SystemRoot%\System32\certprop.dll,-13; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 SNMPTRAP;@%SystemRoot%\system32\snmptrap.exe,-3; C:\Windows\System32\snmptrap.exe [2009-07-14 12800]
S4 WerSvc;@%SystemRoot%\System32\wersvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 WinHttpAutoProxySvc;@%SystemRoot%\system32\winhttp.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 WinRM;@%Systemroot%\system32\wsmsvc.dll,-101; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 WPDBusEnum;@%SystemRoot%\system32\wpdbusenum.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]

-----------------EOF-----------------

[vyosek]

Zdravim a pekny den preji

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

• Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
• Vložte do PC vsechny USB klice (flash disky, ext.disky apod.)
• Pokud mate Win XP spustte pod uctem Spravce\Administratora
• Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
• Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
• Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
• Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
• Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
• Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
• Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

[Thooty]

Omlouvám se že odepisuji tak pozdě, zde je log:

ComboFix 10-09-26.04 - ToRTeEn 27.09.2010 20:11:33.3.1 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.1023.575 [GMT 2:00]
Spuštěný z: c:\users\ToRTeEn\Desktop\ComboFix.exe
* Vytvořen nový Bod Obnovení
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\users\ToRTeEn\AppData\Roaming\BITS
c:\users\ToRTeEn\AppData\Roaming\BITS\BITS.ini
c:\windows\libem.INI

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-08-27 do 2010-09-27 )))))))))))))))))))))))))))))))
.

2010-09-27 18:23 . 2010-09-27 18:24 -------- d-----w- c:\users\ToRTeEn\AppData\Local\temp
2010-09-27 18:23 . 2010-09-27 18:23 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-09-27 18:23 . 2010-09-27 18:23 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-09-27 13:54 . 2010-09-27 13:55 -------- d-----w- C:\rsit
2010-09-26 18:52 . 2010-09-27 09:36 -------- d-----w- c:\program files\Call of duty Modern Warfare 2
2010-09-24 20:47 . 2010-09-25 09:35 480 ----a-w- C:\win32.sys
2010-09-19 10:31 . 2010-09-19 10:31 -------- d-----w- c:\windows\8A809006C25A4A3A9DAB94659BCDB107.TMP
2010-09-18 18:55 . 2010-09-18 18:55 267880 ----a-w- c:\windows\system32\drivers\Rt86win7.sys
2010-09-18 18:55 . 2010-09-18 18:55 80416 ----a-w- c:\windows\system32\RtNicProp32.dll
2010-09-18 10:32 . 2010-09-25 12:48 -------- d-----w- c:\program files\Counter Strike 1.6
2010-09-15 19:33 . 2010-09-15 19:33 -------- d-----w- c:\program files\Rockstar Games
2010-09-15 19:04 . 2010-09-15 19:20 -------- d-----w- c:\program files\GTA San Andreas
2010-09-14 18:40 . 2010-08-21 05:32 316928 ----a-w- c:\windows\system32\spoolsv.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-27 13:54 . 2010-06-25 09:25 -------- d-----w- c:\program files\trend micro
2010-09-27 13:53 . 2010-05-04 18:03 -------- d-----w- c:\programdata\NVIDIA
2010-09-26 18:07 . 2010-07-29 21:14 -------- d-----w- c:\users\ToRTeEn\AppData\Roaming\uTorrent
2010-09-24 18:44 . 2010-05-09 22:06 -------- d-----w- c:\program files\Common Files\Steam
2010-09-24 18:44 . 2010-05-09 22:05 -------- d-----w- c:\program files\Steam
2010-09-24 13:31 . 2010-05-04 19:18 -------- d-----w- c:\users\ToRTeEn\AppData\Roaming\Skype
2010-09-24 13:31 . 2010-05-04 19:19 -------- d-----w- c:\users\ToRTeEn\AppData\Roaming\skypePM
2010-09-21 08:06 . 2010-05-26 20:17 -------- d-----w- c:\users\ToRTeEn\AppData\Roaming\esmska
2010-09-19 10:30 . 2010-05-04 17:59 -------- d-----w- c:\program files\NVIDIA Corporation
2010-09-19 10:29 . 2010-05-28 14:57 -------- d-----w- c:\programdata\NVIDIA Corporation
2010-09-19 08:36 . 2010-07-25 10:29 -------- d-----w- c:\program files\Google
2010-09-18 19:18 . 2010-05-10 12:00 -------- d-----w- c:\users\ToRTeEn\AppData\Roaming\IObit
2010-09-18 19:18 . 2010-05-10 12:00 -------- d-----w- c:\program files\IObit
2010-09-18 18:55 . 2010-02-03 10:24 94208 ----a-w- c:\windows\system32\RTNUninst32.dll
2010-09-15 17:55 . 2010-05-07 16:00 -------- d-----w- c:\program files\CCleaner
2010-09-15 14:21 . 2010-06-13 12:05 -------- d-----w- c:\users\ToRTeEn\AppData\Roaming\ICQ
2010-09-14 18:58 . 2010-05-04 22:10 -------- d-----w- c:\program files\Microsoft Silverlight
2010-09-14 18:50 . 2010-05-05 12:31 -------- d-----w- c:\programdata\Microsoft Help
2010-09-14 17:18 . 2010-09-14 17:18 34164 ----a-w- c:\program files\C.jpg
2010-09-14 17:16 . 2010-09-14 17:16 27620 ----a-w- c:\program files\C.png
2010-09-14 15:49 . 2010-06-13 12:04 -------- d-----w- c:\program files\ICQ7.2
2010-08-14 15:04 . 2010-06-20 10:10 138184 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-08-14 15:03 . 2010-06-26 00:17 215016 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-08-12 16:59 . 2010-08-12 16:59 -------- d-----w- c:\users\ToRTeEn\AppData\Roaming\Sytexis Software
2010-08-12 16:59 . 2010-08-12 16:59 -------- d-----w- c:\program files\Sytexis Software
2010-08-10 18:37 . 2010-08-10 17:54 -------- d-----w- c:\program files\AutoHideIP
2010-08-10 12:39 . 2010-08-10 12:39 -------- d-----w- c:\users\ToRTeEn\AppData\Roaming\NVIDIA
2010-08-10 07:31 . 2010-08-11 16:14 1328504 ----a-w- c:\users\ToRTeEn\AppData\Roaming\Mozilla\Firefox\Profiles\iabqznf3.default\extensions\battlefieldheroespatcher@ea.com\platform\WINNT_x86-msvc\plugins\BFHUpdater.exe
2010-08-10 07:31 . 2010-08-11 16:14 724992 ----a-w- c:\users\ToRTeEn\AppData\Roaming\Mozilla\Firefox\Profiles\iabqznf3.default\extensions\battlefieldheroespatcher@ea.com\platform\WINNT_x86-msvc\plugins\npBFHUpdater.dll
2010-08-09 23:18 . 2010-06-17 20:22 -------- d-----w- c:\program files\Electronic Arts
2010-08-08 18:08 . 2010-08-08 18:08 -------- d-----w- c:\program files\Common Files\Java
2010-08-08 18:07 . 2010-05-14 20:40 -------- d-----w- c:\program files\Java
2010-08-08 14:23 . 2010-08-08 14:23 -------- d-----w- c:\programdata\IsolatedStorage
2010-08-03 15:40 . 2010-08-03 15:40 230912 ----a-w- c:\windows\system32\tambvcm.dll
2010-08-02 07:37 . 2010-08-02 07:37 50536 ----a-w- c:\windows\UTP.exe
2010-08-01 21:09 . 2009-07-13 23:40 249856 ----a-w- c:\windows\system32\uxtheme.dll
2010-08-01 21:09 . 2009-07-13 23:39 2755072 ----a-w- c:\windows\system32\themeui.dll
2010-08-01 21:09 . 2009-07-13 23:39 37376 ----a-w- c:\windows\system32\themeservice.dll
2010-08-01 14:30 . 2010-07-16 08:37 16400 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
2010-07-30 21:21 . 2010-06-25 22:36 -------- d-----w- c:\program files\Activision
2010-07-30 21:20 . 2010-05-04 22:44 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-07-30 11:50 . 2010-05-06 21:28 -------- d-----w- c:\users\ToRTeEn\AppData\Roaming\HLSW
2010-07-29 21:16 . 2010-07-29 21:16 -------- d-----w- c:\program files\Ask.com
2010-07-29 21:05 . 2010-06-20 10:10 22328 ----a-w- c:\users\ToRTeEn\AppData\Roaming\PnkBstrK.sys
2010-07-29 21:05 . 2010-06-20 10:10 22328 ----a-w- c:\users\ToRTeEn\AppData\Roaming\PnkBstrK.sys
2010-07-29 21:05 . 2010-06-20 10:10 682280 ----a-w- c:\windows\system32\pbsvc.exe
2010-07-29 06:30 . 2010-08-10 18:13 197632 ----a-w- c:\windows\system32\ir32_32.dll
2010-07-29 06:30 . 2010-08-10 18:13 82944 ----a-w- c:\windows\system32\iccvid.dll
2010-07-21 17:45 . 2010-07-18 16:48 2427248 ----a-w- c:\windows\system32\pbsvc_heroes.exe
2010-07-18 16:48 . 2010-06-20 10:10 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-07-17 03:00 . 2010-05-05 20:04 423656 ----a-w- c:\windows\system32\deployJava1.dll
2010-07-16 08:38 . 2010-07-16 08:38 53248 ----a-r- c:\users\ToRTeEn\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
2010-07-09 14:37 . 2010-07-09 14:37 66664 ----a-w- c:\windows\system32\nvshext.dll
2010-07-09 14:37 . 2010-07-09 14:37 1469544 ----a-w- c:\windows\system32\nvsvc.dll
2010-07-09 14:37 . 2010-07-09 14:37 13939816 ----a-w- c:\windows\system32\nvcpl.dll
2010-07-09 14:37 . 2010-07-09 14:37 129640 ----a-w- c:\windows\system32\nvvsvc.exe
2010-07-09 14:37 . 2010-07-09 14:37 110696 ----a-w- c:\windows\system32\nvmctray.dll
2010-07-07 09:05 . 2010-07-07 09:05 4286 ----a-r- c:\users\ToRTeEn\AppData\Roaming\Microsoft\Installer\{D6615307-A73A-49C5-B90F-D97E027F034A}\_6FEFF9B68218417F98F549.exe
2010-07-06 15:58 . 2010-07-06 15:56 205984 ----a-w- c:\programdata\Microsoft\VBExpress\10.0\1033\ResourceCache.dll
2010-07-06 15:52 . 2009-07-14 08:44 674400 ----a-w- c:\windows\system32\perfh005.dat
2010-07-06 15:52 . 2009-07-14 08:44 144354 ----a-w- c:\windows\system32\perfc005.dat
2010-07-01 17:05 . 2010-05-04 18:14 88640 ----a-w- c:\users\ToRTeEn\AppData\Local\GDIPFONTCACHEV1.DAT
2010-07-01 09:14 . 2010-07-01 09:14 95 ----a-w- c:\users\ToRTeEn\AppData\Local\fusioncache.dat
2010-06-30 10:47 . 2010-05-07 14:21 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-06-30 06:25 . 2010-08-10 18:12 978432 ----a-w- c:\windows\system32\wininet.dll
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.

((((((((((((((((((((((((((((( SnapShot@2010-07-27_20.09.10 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-08-10 18:13 . 2010-07-29 06:17 82944 c:\windows\winsxs\x86_microsoft-windows-vcm-core-codecs_31bf3856ad364e35_6.1.7600.20767_none_6d1a5a1e52cef174\iccvid.dll
+ 2010-08-10 18:13 . 2010-07-29 06:30 82944 c:\windows\winsxs\x86_microsoft-windows-vcm-core-codecs_31bf3856ad364e35_6.1.7600.16646_none_6ca55ce139a20071\iccvid.dll
+ 2010-08-10 18:12 . 2010-06-19 06:27 37376 c:\windows\winsxs\x86_microsoft-windows-rasrtutils_31bf3856ad364e35_6.1.7600.20738_none_0dae9d2b64c07c9d\rtutils.dll
+ 2010-08-10 18:12 . 2010-06-19 06:23 37376 c:\windows\winsxs\x86_microsoft-windows-rasrtutils_31bf3856ad364e35_6.1.7600.16617_none_0d399fee4b938b9a\rtutils.dll
+ 2010-08-10 18:11 . 2010-06-23 07:48 16896 c:\windows\winsxs\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.7600.20741_none_bc3106d6224073e6\iecompat.dll
+ 2010-08-10 18:11 . 2010-06-23 07:48 16896 c:\windows\winsxs\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.7600.16620_none_bbbc0999091382e3\iecompat.dll
+ 2010-08-10 18:12 . 2010-06-30 06:12 12800 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.7600.20745_none_17936e91cc14b92e\msfeedssync.exe
+ 2010-08-10 18:12 . 2010-06-30 06:15 64512 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.7600.20745_none_17936e91cc14b92e\msfeedsbs.dll
+ 2010-08-10 18:12 . 2010-06-30 06:19 12800 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.7600.16625_none_171f719eb2e6e182\msfeedssync.exe
+ 2010-08-10 18:12 . 2010-06-30 06:22 64512 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.7600.16625_none_171f719eb2e6e182\msfeedsbs.dll
+ 2010-08-10 18:12 . 2010-06-30 06:18 68608 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.20745_none_1d2e73059325c74f\WininetPlugin.dll
+ 2010-08-10 18:12 . 2010-06-30 06:15 48128 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.20745_none_1d2e73059325c74f\jsproxy.dll
+ 2010-08-10 18:12 . 2010-06-30 06:25 68608 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.16625_none_1cba761279f7efa3\WininetPlugin.dll
+ 2010-08-10 18:12 . 2010-06-30 06:21 48128 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.16625_none_1cba761279f7efa3\jsproxy.dll
+ 2010-08-06 10:36 . 2010-09-21 07:26 82060 c:\windows\System32\wdi\SuspendPerformanceDiagnostics_SystemData_S4.bin
+ 2010-05-04 19:59 . 2010-09-27 06:05 36996 c:\windows\System32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 04:55 . 2010-09-27 07:39 37646 c:\windows\System32\wdi\BootPerformanceDiagnostics_SystemData.bin
- 2009-07-13 23:54 . 2009-07-14 01:16 37376 c:\windows\System32\rtutils.dll
+ 2010-08-10 18:12 . 2010-06-19 06:23 37376 c:\windows\System32\rtutils.dll
+ 2010-07-28 14:56 . 2010-07-09 22:37 56936 c:\windows\System32\OpenCL.dll
- 2010-07-06 15:23 . 2010-06-24 11:17 56936 c:\windows\System32\OpenCL.dll
- 2010-07-06 15:28 . 2010-03-10 01:47 26216 c:\windows\System32\nvhdap32.dll
+ 2010-07-28 15:02 . 2010-06-21 22:07 26216 c:\windows\System32\nvhdap32.dll
- 2009-07-13 23:42 . 2009-07-14 01:14 12800 c:\windows\System32\msfeedssync.exe
+ 2010-08-10 18:12 . 2010-06-30 06:19 12800 c:\windows\System32\msfeedssync.exe
+ 2010-08-10 18:12 . 2010-06-30 06:22 64512 c:\windows\System32\msfeedsbs.dll
- 2010-06-09 09:54 . 2010-05-06 12:41 64512 c:\windows\System32\msfeedsbs.dll
- 2010-06-09 09:54 . 2010-05-21 05:18 68608 c:\windows\System32\migration\WininetPlugin.dll
+ 2010-08-10 18:12 . 2010-06-30 06:25 68608 c:\windows\System32\migration\WininetPlugin.dll
+ 2010-08-10 18:12 . 2010-06-30 06:21 48128 c:\windows\System32\jsproxy.dll
- 2010-06-09 09:54 . 2010-05-21 05:14 48128 c:\windows\System32\jsproxy.dll
+ 2010-06-15 01:47 . 2010-06-15 01:47 86016 c:\windows\System32\frapsvid.dll
- 2010-03-31 05:15 . 2010-03-31 05:15 86016 c:\windows\System32\frapsvid.dll
+ 2009-07-14 04:50 . 2010-09-19 10:26 86016 c:\windows\System32\DriverStore\infpub.dat
- 2009-07-14 04:50 . 2010-07-16 08:37 86016 c:\windows\System32\DriverStore\infpub.dat
+ 2010-09-18 18:55 . 2010-09-18 18:55 94208 c:\windows\System32\DriverStore\FileRepository\rt86win7.inf_x86_neutral_d7c2a3ff16fd5d46\RTNUninst32.dll
+ 2010-09-18 18:55 . 2010-09-18 18:55 80416 c:\windows\System32\DriverStore\FileRepository\rt86win7.inf_x86_neutral_d7c2a3ff16fd5d46\RtNicProp32.dll
+ 2010-07-28 15:02 . 2010-06-21 22:07 26216 c:\windows\System32\DriverStore\FileRepository\nvhda.inf_x86_neutral_b2c3349c4ab68ade\nvhdap32.dll
+ 2010-07-28 15:02 . 2010-06-21 22:07 91496 c:\windows\System32\DriverStore\FileRepository\nvhda.inf_x86_neutral_b2c3349c4ab68ade\nvhda32.sys
+ 2010-07-28 15:02 . 2010-06-21 22:07 64104 c:\windows\System32\DriverStore\FileRepository\nvhda.inf_x86_neutral_b2c3349c4ab68ade\nvapo32v.dll
+ 2010-07-28 14:56 . 2010-07-09 22:37 56936 c:\windows\System32\DriverStore\FileRepository\nv_disp.inf_x86_neutral_c04de2a289110631\OpenCL.dll
- 2010-05-04 17:19 . 2010-07-27 19:59 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-05-04 17:19 . 2010-09-27 07:40 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-05-04 17:19 . 2010-07-27 19:59 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2010-05-04 17:19 . 2010-09-27 07:40 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:41 . 2010-09-27 07:40 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:41 . 2010-07-27 19:59 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:34 . 2010-09-19 15:07 73256 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
+ 2010-05-04 18:15 . 2010-09-27 18:12 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-05-04 18:15 . 2010-07-27 20:06 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-05-07 22:05 . 2010-07-26 15:02 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\Temporary Internet Files\Content.IE5\index.dat
+ 2010-05-07 22:05 . 2010-09-25 22:13 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\Temporary Internet Files\Content.IE5\index.dat
+ 2010-05-07 22:05 . 2010-09-25 22:13 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\History\History.IE5\index.dat
- 2010-05-07 22:05 . 2010-07-26 15:02 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\History\History.IE5\index.dat
+ 2010-05-07 22:05 . 2010-09-25 22:13 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\Cookies\index.dat
- 2010-05-07 22:05 . 2010-07-26 15:02 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\Cookies\index.dat
+ 2010-05-04 18:15 . 2010-09-27 18:12 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-05-04 18:15 . 2010-07-27 20:06 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2010-05-04 18:15 . 2010-09-27 18:12 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2010-05-04 18:15 . 2010-07-27 20:06 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2010-07-06 15:27 . 2010-07-06 15:27 10134 c:\windows\Installer\{DA97BDF9-BC72-46FD-8E76-427F2BB951EE}\ARPPRODUCTICON.exe
+ 2010-09-19 10:30 . 2010-09-19 10:30 10134 c:\windows\Installer\{DA97BDF9-BC72-46FD-8E76-427F2BB951EE}\ARPPRODUCTICON.exe
+ 2010-05-05 12:39 . 2010-09-14 18:50 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
- 2010-05-05 12:39 . 2010-07-14 06:21 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
+ 2010-05-05 12:39 . 2010-09-14 18:50 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
- 2010-05-05 12:39 . 2010-07-14 06:21 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
+ 2010-05-05 12:39 . 2010-09-14 18:50 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
- 2010-05-05 12:39 . 2010-07-14 06:21 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
+ 2010-05-04 22:10 . 2010-09-14 17:46 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
- 2010-05-04 22:10 . 2010-06-04 12:06 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2010-09-19 08:36 . 2010-09-19 08:36 25214 c:\windows\Installer\{171E6C1E-B5FC-11DF-B115-005056C00008}\UNINST_Uninstall_G_F6A848FB884248E6A4CDCBDCF41F6A74_1.exe
+ 2010-09-19 08:36 . 2010-09-19 08:36 25214 c:\windows\Installer\{171E6C1E-B5FC-11DF-B115-005056C00008}\ARPPRODUCTICON.exe
+ 2010-08-10 18:27 . 2010-08-10 18:27 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\a06f86c78df5896fab27ef63a467f757\UIAutomationProvider.ni.dll
+ 2010-08-10 19:13 . 2010-08-10 19:13 98816 c:\windows\assembly\NativeImages_v2.0.50727_32\TlbImp\09acb80818184f448c801c8b223901e9\TlbImp.ni.exe
+ 2010-08-10 19:13 . 2010-08-10 19:13 86528 c:\windows\assembly\NativeImages_v2.0.50727_32\TlbExp\0ccf01500d15350f859a07d9257f68c3\TlbExp.ni.exe
+ 2010-08-10 19:28 . 2010-08-10 19:28 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\101740bb080b93dcd57cca0b49561b5b\System.Windows.Presentation.ni.dll
+ 2010-08-10 19:27 . 2010-08-10 19:27 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\55d21368f4ac5f01a2b5b3c2a06ef811\System.Web.DynamicData.Design.ni.dll
+ 2010-08-10 19:17 . 2010-08-10 19:17 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\4f643751eda6cafe890f0884a6ec7392\System.ComponentModel.DataAnnotations.ni.dll
+ 2010-08-10 19:17 . 2010-08-10 19:17 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\89a9ddc116df21673f60cc7d1ed63e4b\System.AddIn.Contract.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 44032 c:\windows\assembly\NativeImages_v2.0.50727_32\stdole\c8cbbb46f91df94c6661f0f426b0ebf4\stdole.ni.dll
+ 2010-08-10 19:12 . 2010-08-10 19:12 64512 c:\windows\assembly\NativeImages_v2.0.50727_32\sgen\589528be1cc00df1348d638e1a705e36\sgen.ni.exe
+ 2010-08-10 19:12 . 2010-08-10 19:12 84480 c:\windows\assembly\NativeImages_v2.0.50727_32\ResGen\113916c9159732219351af127992c7b7\ResGen.ni.exe
+ 2010-08-10 19:17 . 2010-08-10 19:17 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\cda6307ec359333afe51ed90f61db564\PresentationFontCache.ni.exe
+ 2010-08-10 18:27 . 2010-08-10 18:27 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\e117973434189b11c49b65513d458a41\PresentationCFFRasterizer.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 79872 c:\windows\assembly\NativeImages_v2.0.50727_32\napcrypt\80feaa74c880469ddc54e7708b2e8d7e\napcrypt.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\70c3c3c19342043f2cc3a206aa74e37a\Microsoft.WSMan.Runtime.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 25088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\9b6716c352f7004b86f4c35b4513a13f\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 23040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\976de9ec4c99b0ef317a57d76f3a1fbc\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 86016 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\82d40129a13601e4838e17aca1db8ec0\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\6bdeaf57d38696f68d160e90cdb6beaa\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 21504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\4b6134d905d751a3042b7518fa25bc21\Microsoft.Windows.Diagnosis.SDEngine.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 27136 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\327d654b6c42b863acc07646977bf20a\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 32256 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\00a681c820369841bd03932d449cb706\Microsoft.Windows.Diagnosis.SDHost.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\246d74010afa232d3853e4f49c7a38eb\Microsoft.Vsa.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\dfd7d3f1be9d55bb0891025d2ae4a3e0\Microsoft.VisualStudio.Shell.Interop.9.0.ni.dll
+ 2010-08-10 19:12 . 2010-08-10 19:12 23040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\c5b287c1aed9f356b534d2f006ce6c62\Microsoft.VisualStudio.VSHelp80.ni.dll
+ 2010-08-10 18:26 . 2010-08-10 18:26 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\190adbaf753e7744782406a71e7dcd7e\Microsoft.VisualC.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 66048 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\e5327be90e6da2f851fab46adea0b2ed\Microsoft.SqlServer.WmiEnum.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 41472 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\e4db596302056a53b14a46abbc0a3e16\Microsoft.SqlServer.SqlTDiagM.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 35840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\d4979239a435067d659923ce1c380b06\Microsoft.SqlServer.PolicyEnum.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 73216 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\6dbfac48a6cca7c101e129c6b58d5ee4\Microsoft.SqlServer.BatchParserClient.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 26112 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\4cb6aca7f0e0708c7183d3aa082f15f6\Microsoft.SqlServer.SqlClrProvider.ni.dll
+ 2010-08-10 19:13 . 2010-08-10 19:13 43008 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\1d17ddd69cfe8fc494be67adb45c9922\Microsoft.SqlServer.ServiceBrokerEnum.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 42496 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\12d1d7ab81f16e20e910a1e83a80e671\Microsoft.SqlServer.SString.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 39936 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\e6619ce4e08b438c7caaf39f49be7e96\Microsoft.Security.ApplicationId.PolicyManagement.XmlHelper.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 21504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\17022567749e35fb5d6b77df4de5c1db\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 95232 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\5cd3613c86a19852e91eb066f36bafe2\Microsoft.MediaCenter.ITVVM.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 36352 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\380c330cdccc21935d6a4800ed5acf8b\Microsoft.MediaCenter.iTv.Hosting.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\37320799550691a787e6574b6899d0ee\Microsoft.Build.Framework.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\27dbf2aba276101442ddbe86a8665057\Microsoft.Build.Framework.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 54784 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft-Windows-H#\b2f01992897f528b3317cc6604594244\Microsoft-Windows-HomeGroupDiagnostic.NetListMgr.Interop.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 23552 c:\windows\assembly\NativeImages_v2.0.50727_32\LoadMxf\217c55606e2aaa5d8654a6535702e5ce\LoadMxf.ni.exe
+ 2010-08-10 19:12 . 2010-08-10 19:12 51712 c:\windows\assembly\NativeImages_v2.0.50727_32\lc\dde5ba433c7d3cf68c59bbc1db130784\lc.ni.exe
+ 2010-08-10 19:14 . 2010-08-10 19:14 31232 c:\windows\assembly\NativeImages_v2.0.50727_32\EnvDTE90a\d680175e37889322472eae44c26e14f4\EnvDTE90a.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 46080 c:\windows\assembly\NativeImages_v2.0.50727_32\EnvDTE90\d86ce12ae7637df14d3686707d9954f5\EnvDTE90.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 31232 c:\windows\assembly\NativeImages_v2.0.50727_32\EnvDTE100\076a26b7706123d9ff7acce75c149d9b\EnvDTE100.ni.dll
+ 2010-08-10 19:13 . 2010-08-10 19:13 60416 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\ef5fbf785736915b65eb5ce54e301b4d\ehiUserXp.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 18432 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiUPnP\fddbfe6c3475fe8642eaf22d8a41f146\ehiUPnP.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 61440 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiTVMSMusic\d633e90dafd83c1230be7aa2482a2bfc\ehiTVMSMusic.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 82432 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiiTv\a2869c539b5d125e3b84e911bf97fd0a\ehiiTv.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 33792 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiBmlDataCarousel\2afc39edbeea505de69abb56de685162\ehiBmlDataCarousel.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 47616 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiActivScp\9ceec962f1810f63c173bdd9a8dec128\ehiActivScp.ni.dll
+ 2010-08-10 19:13 . 2010-08-10 19:13 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\a0fb35ff977ffedbdb27f7262c979d3e\dfsvc.ni.exe
+ 2010-08-10 19:12 . 2010-08-10 19:12 69120 c:\windows\assembly\NativeImages_v2.0.50727_32\AxImp\98fa3536116100cbf4aca97bd5ef1cea\AxImp.ni.exe
+ 2010-08-10 19:12 . 2010-08-10 19:12 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\AuditPolicyGPManage#\9f333ba813d7225dfb064e1b90f0b857\AuditPolicyGPManagedStubs.Interop.ni.dll
+ 2010-08-10 18:27 . 2010-08-10 18:27 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\b2e6d33df15f6ca262db09558982e0f2\Accessibility.ni.dll
- 2010-07-02 04:42 . 2010-07-02 04:42 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
+ 2010-09-17 17:14 . 2010-09-17 17:14 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
- 2010-07-02 04:42 . 2010-07-02 04:42 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
+ 2010-09-17 17:14 . 2010-09-17 17:14 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
+ 2009-07-14 00:19 . 2009-07-14 01:07 2048 c:\windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.1.7600.20728_none_891219a11113f34b\msxml3r.dll
+ 2009-07-14 00:19 . 2009-07-14 01:07 2048 c:\windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.1.7600.16605_none_889b1bcff7e8cf9a\msxml3r.dll
+ 2009-07-13 23:26 . 2009-07-14 01:03 2560 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.1.7600.20749_none_0cb171a26c998e15\AcRes.dll
+ 2009-07-13 23:26 . 2009-07-14 01:03 2560 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.1.7600.16629_none_0c3d74af536bb669\AcRes.dll
+ 2010-05-04 18:05 . 2010-09-27 07:39 9650 c:\windows\System32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3595803208-3766525656-3816774015-1000_UserData.bin
+ 2010-09-14 13:49 . 2010-09-14 13:49 9560 c:\windows\System32\NetworkList\Icons\{D571E20E-0A8D-4BA2-8E8D-74A9F552E4EC}_48.bin
+ 2010-09-14 13:49 . 2010-09-14 13:49 4280 c:\windows\System32\NetworkList\Icons\{D571E20E-0A8D-4BA2-8E8D-74A9F552E4EC}_32.bin
+ 2010-09-14 13:49 . 2010-09-14 13:49 2456 c:\windows\System32\NetworkList\Icons\{D571E20E-0A8D-4BA2-8E8D-74A9F552E4EC}_24.bin
+ 2010-09-27 06:03 . 2010-09-27 07:37 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2010-07-27 19:54 . 2010-07-27 19:54 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2010-09-27 06:03 . 2010-09-27 07:37 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2010-07-27 19:54 . 2010-07-27 19:54 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2010-08-10 18:12 . 2010-05-20 22:43 388936 c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.1.7600.20717_none_d1a2369ed0d2b389\SOS.dll
+ 2010-08-10 18:12 . 2010-05-20 22:49 388936 c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.1.7600.16597_none_e877dfd2b7241dea\SOS.dll
+ 2010-08-10 18:12 . 2010-05-20 22:43 995672 c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.1.7600.20717_none_e8d3eedddcddd774\mscordacwks.dll
+ 2010-08-10 18:12 . 2010-05-20 22:49 995160 c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.1.7600.16597_none_ffa99811c32f41d5\mscordacwks.dll
+ 2010-08-10 18:13 . 2010-07-29 06:17 197632 c:\windows\winsxs\x86_microsoft-windows-vcm-core-codecs_31bf3856ad364e35_6.1.7600.20767_none_6d1a5a1e52cef174\ir32_32.dll
+ 2010-08-10 18:13 . 2010-07-29 06:30 197632 c:\windows\winsxs\x86_microsoft-windows-vcm-core-codecs_31bf3856ad364e35_6.1.7600.16646_none_6ca55ce139a20071\ir32_32.dll
+ 2009-07-13 23:12 . 2009-07-14 01:20 187472 c:\windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20733_none_b3b219fae0b0af43\FWPKCLNT.SYS
+ 2009-07-13 23:12 . 2009-07-14 01:20 187472 c:\windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16610_none_b33b1c29c7858b92\FWPKCLNT.SYS
+ 2010-08-10 18:11 . 2010-06-22 02:45 307200 c:\windows\winsxs\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.1.7600.20740_none_da72d04d70d0f1ff\srv2.sys
+ 2010-08-10 18:11 . 2010-06-22 02:47 307200 c:\windows\winsxs\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.1.7600.16619_none_da12a5e05792e271\srv2.sys
+ 2010-08-10 18:11 . 2010-06-22 02:45 311296 c:\windows\winsxs\x86_microsoft-windows-smbserver-v1_31bf3856ad364e35_6.1.7600.20740_none_da7da03970c8d60e\srv.sys
+ 2010-08-10 18:11 . 2010-06-22 02:47 310784 c:\windows\winsxs\x86_microsoft-windows-smbserver-v1_31bf3856ad364e35_6.1.7600.16619_none_da1d75cc578ac680\srv.sys
+ 2010-08-10 18:11 . 2010-06-22 02:44 113664 c:\windows\winsxs\x86_microsoft-windows-smbserver-common_31bf3856ad364e35_6.1.7600.20740_none_045c65128a7c54f0\srvnet.sys
+ 2010-08-10 18:11 . 2010-06-22 02:47 113664 c:\windows\winsxs\x86_microsoft-windows-smbserver-common_31bf3856ad364e35_6.1.7600.16619_none_03fc3aa5713e4562\srvnet.sys
+ 2010-08-10 18:12 . 2010-06-16 05:58 224256 c:\windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7600.20735_none_22ac534acf8b77bc\schannel.dll
+ 2010-08-10 18:12 . 2010-06-16 05:48 224256 c:\windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7600.16612_none_22355579b660540b\schannel.dll
+ 2010-09-14 18:40 . 2010-08-20 04:25 316928 c:\windows\winsxs\x86_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7600.20785_none_d6ab9bc23bf9f1c6\spoolsv.exe
+ 2010-09-14 18:40 . 2010-08-21 05:32 316928 c:\windows\winsxs\x86_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7600.16661_none_d6339da722cfb4be\spoolsv.exe
+ 2010-08-10 18:12 . 2010-06-30 06:14 176640 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.7600.20745_none_7fe7ec279f71beb2\ieui.dll
+ 2010-08-10 18:12 . 2010-06-30 06:21 176640 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.7600.16625_none_7f73ef348643e706\ieui.dll
+ 2009-07-13 23:27 . 2009-07-14 01:16 189440 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.20791_none_62af191d7e030c05\sqmapi.dll
+ 2009-07-13 23:27 . 2009-07-14 01:16 189440 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.16666_none_624aed8864c8971b\sqmapi.dll
+ 2010-08-10 18:12 . 2010-06-30 06:14 163328 c:\windows\winsxs\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.7600.20745_none_ab7463e73be351ce\ieproxy.dll
+ 2010-08-10 18:12 . 2010-06-30 06:21 163328 c:\windows\winsxs\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.7600.16625_none_ab0066f422b57a22\ieproxy.dll
+ 2010-08-10 18:12 . 2010-06-30 06:14 859648 c:\windows\winsxs\x86_microsoft-windows-ie-devtools_31bf3856ad364e35_8.0.7600.20745_none_56ea8c5831291390\iedvtool.dll
+ 2010-08-10 18:12 . 2010-06-30 06:21 859648 c:\windows\winsxs\x86_microsoft-windows-ie-devtools_31bf3856ad364e35_8.0.7600.16625_none_56768f6517fb3be4\iedvtool.dll
+ 2010-08-10 18:12 . 2010-06-30 06:14 186368 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_8.0.7600.20745_none_58090436e3608fb1\iepeers.dll
+ 2010-08-10 18:12 . 2010-06-30 06:21 185856 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_8.0.7600.16625_none_57950743ca32b805\iepeers.dll
+ 2010-08-10 18:12 . 2010-06-30 06:14 381440 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_8.0.7600.20745_none_8f95ec0148cfe816\iedkcs32.dll
+ 2010-08-10 18:12 . 2010-06-30 06:21 381440 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_8.0.7600.16625_none_8f21ef0e2fa2106a\iedkcs32.dll
+ 2010-08-10 18:12 . 2010-06-30 06:18 980480 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.20745_none_1d2e73059325c74f\wininet.dll
+ 2010-08-10 18:12 . 2010-06-30 06:25 978432 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.16625_none_1cba761279f7efa3\wininet.dll
+ 2010-08-10 18:12 . 2010-06-30 06:15 606208 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_8.0.7600.20745_none_fc0b262c6dc5602b\mstime.dll
+ 2010-08-10 18:12 . 2010-06-30 06:22 606208 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_8.0.7600.16625_none_fb9729395497887f\mstime.dll
+ 2009-07-13 23:26 . 2009-07-14 01:14 211968 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.1.7600.20749_none_0cb572ca6c95f371\AcXtrnal.dll
+ 2009-07-13 23:27 . 2009-07-14 01:14 559616 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.1.7600.20749_none_0cb572ca6c95f371\AcLayers.dll
+ 2009-07-13 23:26 . 2009-07-14 01:14 211968 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.1.7600.16629_none_0c4175d753681bc5\AcXtrnal.dll
+ 2009-07-13 23:27 . 2009-07-14 01:14 559616 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.1.7600.16629_none_0c4175d753681bc5\AcLayers.dll
+ 2009-07-14 08:43 . 2009-07-14 08:43 303104 c:\windows\winsxs\msil_mscorlib.resources_b77a5c561934e089_6.1.7600.20717_cs-cz_f4bebde853767e72\mscorlib.resources.dll
+ 2009-07-14 08:43 . 2009-07-14 08:43 303104 c:\windows\winsxs\msil_mscorlib.resources_b77a5c561934e089_6.1.7600.16597_cs-cz_0b94671c39c7e8d3\mscorlib.resources.dll
+ 2010-08-10 18:12 . 2010-06-16 05:48 224256 c:\windows\System32\schannel.dll
+ 2010-08-02 07:37 . 2009-07-14 01:16 859648 c:\windows\System32\OobeFldr_backup_wti.dll
+ 2010-07-28 14:56 . 2010-07-09 22:37 314984 c:\windows\System32\nvdecodemft.dll
+ 2010-03-18 17:32 . 2010-06-21 22:07 232040 c:\windows\System32\nvcohda.dll
+ 2010-07-28 14:56 . 2010-07-09 22:37 236136 c:\windows\System32\nvcod1922.dll
+ 2010-07-28 14:56 . 2010-07-09 22:37 236136 c:\windows\System32\nvcod.dll
- 2010-06-09 09:54 . 2010-05-06 12:41 606208 c:\windows\System32\mstime.dll
+ 2010-08-10 18:12 . 2010-06-30 06:22 606208 c:\windows\System32\mstime.dll
+ 2010-08-08 18:07 . 2010-07-17 03:00 153376 c:\windows\System32\javaws.exe
- 2010-05-14 20:41 . 2010-05-14 20:41 153376 c:\windows\System32\javaws.exe
- 2010-05-14 20:41 . 2010-05-14 20:41 145184 c:\windows\System32\javaw.exe
+ 2010-08-08 18:07 . 2010-07-17 03:00 145184 c:\windows\System32\javaw.exe
+ 2010-08-08 18:07 . 2010-07-17 03:00 145184 c:\windows\System32\java.exe
- 2010-05-14 20:41 . 2010-05-14 20:41 145184 c:\windows\System32\java.exe
+ 2010-08-10 18:12 . 2010-06-30 06:21 176640 c:\windows\System32\ieui.dll
- 2009-07-13 23:26 . 2009-07-14 01:15 176640 c:\windows\System32\ieui.dll
+ 2010-08-10 18:12 . 2010-06-30 06:21 185856 c:\windows\System32\iepeers.dll
+ 2010-08-10 18:12 . 2010-06-30 06:21 381440 c:\windows\System32\iedkcs32.dll
- 2010-06-09 09:54 . 2010-05-06 12:41 381440 c:\windows\System32\iedkcs32.dll
+ 2009-07-14 04:50 . 2010-09-19 10:26 143360 c:\windows\System32\DriverStore\infstrng.dat
- 2009-07-14 04:50 . 2010-07-16 08:37 143360 c:\windows\System32\DriverStore\infstrng.dat
+ 2009-07-14 04:50 . 2010-09-19 10:26 143360 c:\windows\System32\DriverStore\infstor.dat
- 2009-07-14 04:50 . 2010-07-16 08:37 143360 c:\windows\System32\DriverStore\infstor.dat
+ 2010-09-18 18:55 . 2010-09-18 18:55 267880 c:\windows\System32\DriverStore\FileRepository\rt86win7.inf_x86_neutral_d7c2a3ff16fd5d46\Rt86win7.sys
+ 2010-07-28 15:02 . 2010-06-21 22:07 600680 c:\windows\System32\DriverStore\FileRepository\nvhda.inf_x86_neutral_b2c3349c4ab68ade\nvuhda.exe
+ 2010-07-28 15:02 . 2010-06-21 22:07 105576 c:\windows\System32\DriverStore\FileRepository\nvhda.inf_x86_neutral_b2c3349c4ab68ade\nvhda32v.sys
+ 2010-07-28 15:02 . 2010-06-21 22:07 232040 c:\windows\System32\DriverStore\FileRepository\nvhda.inf_x86_neutral_b2c3349c4ab68ade\nvcohda.dll
+ 2010-07-28 14:56 . 2010-07-09 22:37 604776 c:\windows\System32\DriverStore\FileRepository\nv_disp.inf_x86_neutral_c04de2a289110631\nvudisp.exe
+ 2010-07-28 14:56 . 2010-07-09 22:37 261268 c:\windows\System32\DriverStore\FileRepository\nv_disp.inf_x86_neutral_c04de2a289110631\nvdrsdb.bin
+ 2010-07-28 14:56 . 2010-07-09 22:37 314984 c:\windows\System32\DriverStore\FileRepository\nv_disp.inf_x86_neutral_c04de2a289110631\nvdecodemft.dll
+ 2010-07-28 14:56 . 2010-07-09 22:37 236136 c:\windows\System32\DriverStore\FileRepository\nv_disp.inf_x86_neutral_c04de2a289110631\nvcod.dll
+ 2010-07-28 14:56 . 2010-07-09 22:37 795104 c:\windows\System32\DriverStore\FileRepository\nv_disp.inf_x86_neutral_c04de2a289110631\dpinst.exe
+ 2010-07-28 14:56 . 2010-07-09 22:37 156264 c:\windows\System32\DriverStore\FileRepository\nv_disp.inf_x86_neutral_c04de2a289110631\dbInstaller.exe
- 2010-05-04 19:44 . 2009-12-08 08:05 113664 c:\windows\System32\drivers\srvnet.sys
+ 2010-08-10 18:11 . 2010-06-22 02:47 113664 c:\windows\System32\drivers\srvnet.sys
+ 2010-08-10 18:11 . 2010-06-22 02:47 307200 c:\windows\System32\drivers\srv2.sys
+ 2010-08-10 18:11 . 2010-06-22 02:47 310784 c:\windows\System32\drivers\srv.sys
- 2010-05-04 19:44 . 2009-12-08 08:05 310784 c:\windows\System32\drivers\srv.sys
+ 2010-07-28 15:02 . 2010-06-21 22:07 105576 c:\windows\System32\drivers\nvhda32v.sys
+ 2010-05-04 17:24 . 2010-09-22 03:36 262144 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
- 2009-07-14 04:47 . 2010-07-06 21:44 424348 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 04:47 . 2010-09-24 22:09 424348 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2010-08-02 07:42 . 2009-10-31 08:37 349184 c:\windows\Resources\Themes\clsSharp\Shell\NormalColor\shellstyle.dll
+ 2010-08-10 18:12 . 2010-05-20 22:49 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
- 2009-07-13 20:46 . 2009-06-10 21:23 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
- 2009-07-13 20:46 . 2009-06-10 21:23 995160 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2010-08-10 18:12 . 2010-05-20 22:49 995160 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2010-09-01 19:07 . 2010-09-01 19:07 874872 c:\windows\Installer\52560.msi
+ 2010-08-04 13:13 . 2010-08-04 13:13 686080 c:\windows\Installer\3e1417.msp
+ 2010-08-08 18:07 . 2010-08-08 18:07 183808 c:\windows\Installer\1d5b7d3.msi
+ 2010-09-16 15:56 . 2010-09-16 15:56 371272 c:\windows\Installer\{D103C4BA-F905-437A-8049-DB24763BBE36}\SkypeIcon.exe
- 2010-06-05 11:14 . 2010-06-05 11:14 371272 c:\windows\Installer\{D103C4BA-F905-437A-8049-DB24763BBE36}\SkypeIcon.exe
- 2010-05-05 12:39 . 2010-07-14 06:21 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
+ 2010-05-05 12:39 . 2010-09-14 18:50 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
- 2010-05-05 12:39 . 2010-07-14 06:21 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
+ 2010-05-05 12:39 . 2010-09-14 18:50 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
+ 2010-05-05 12:39 . 2010-09-14 18:50 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
- 2010-05-05 12:39 . 2010-07-14 06:21 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
- 2010-05-05 12:39 . 2010-07-14 06:21 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
+ 2010-05-05 12:39 . 2010-09-14 18:50 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
+ 2010-05-05 12:39 . 2010-09-14 18:50 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
- 2010-05-05 12:39 . 2010-07-14 06:21 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
+ 2010-05-05 12:39 . 2010-09-14 18:50 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
- 2010-05-05 12:39 . 2010-07-14 06:21 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
+ 2010-05-05 12:39 . 2010-09-14 18:50 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
- 2010-05-05 12:39 . 2010-07-14 06:21 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
+ 2010-07-29 21:16 . 2010-07-29 21:16 102400 c:\windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}\ARPPRODUCTICON.exe

[Thooty]

+ 2010-08-10 19:13 . 2010-08-10 19:13 126976 c:\windows\assembly\NativeImages_v2.0.50727_32\xsd\30dae440503bd5d2b21934279c806e8f\xsd.ni.exe
+ 2010-08-10 19:13 . 2010-08-10 19:13 145408 c:\windows\assembly\NativeImages_v2.0.50727_32\wsdl\9c5be42ec1104b5262ea8dc1fd56e81e\wsdl.ni.exe
+ 2010-08-10 19:28 . 2010-08-10 19:28 321024 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\1eab6ceaf2bc688df423255ff9490d60\WsatConfig.ni.exe
+ 2010-08-10 19:28 . 2010-08-10 19:28 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\d3ab00af09cebaa9eeef352712b6f6bf\WindowsFormsIntegration.ni.dll
+ 2010-08-10 18:27 . 2010-08-10 18:27 185344 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\f050ef6d97c0102333ded4d8d58ffa4e\UIAutomationTypes.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 452096 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\b3fbd794181d7b93b807a5e74991b0f9\UIAutomationClient.ni.dll
+ 2010-08-10 19:28 . 2010-08-10 19:28 245248 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\3118353bd1e1ba3f065418d837bd479e\TaskScheduler.ni.dll
+ 2010-08-10 19:27 . 2010-08-10 19:27 401408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\cc523d58068d01f874b18e665d49eb67\System.Xml.Linq.ni.dll
+ 2010-08-10 19:27 . 2010-08-10 19:27 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\2f84c918be2ff7e390120c18237443c9\System.Web.Routing.ni.dll
+ 2010-08-10 18:30 . 2010-08-10 18:30 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\be061062b2a6666ead57322f7fb7206f\System.Web.RegularExpressions.ni.dll
+ 2010-08-10 19:28 . 2010-08-10 19:28 860160 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\601a34c1001a27c2da41d78b6b5b40a3\System.Web.Extensions.Design.ni.dll
+ 2010-08-10 19:27 . 2010-08-10 19:27 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\19fefac6b36bd2522901f7703e001fce\System.Web.Entity.ni.dll
+ 2010-08-10 19:27 . 2010-08-10 19:27 301568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\62d687b818bd0195618e632016c7dbf7\System.Web.Entity.Design.ni.dll
+ 2010-08-10 19:27 . 2010-08-10 19:27 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\ca2575f5c34b0abf8e8e23b7f390e611\System.Web.DynamicData.ni.dll
+ 2010-08-10 19:27 . 2010-08-10 19:27 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\8b4af536857e71fca6a33bc24b8b89d2\System.Web.Abstractions.ni.dll
+ 2010-08-10 18:29 . 2010-08-10 18:29 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\c744f0f95227e75796b8689801740d4b\System.Transactions.ni.dll
+ 2010-08-10 18:30 . 2010-08-10 18:30 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\6b8b76b26be7d7f4c3d1cb644811a2ef\System.ServiceProcess.ni.dll
+ 2010-08-10 18:27 . 2010-08-10 18:27 680960 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\5025c0c5e7134226b2fc0c4bdabf67ef\System.Security.ni.dll
+ 2010-08-10 18:27 . 2010-08-10 18:27 310784 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\d35d360c6e410684be7ea9fd0a8e6b53\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2010-08-10 18:29 . 2010-08-10 18:29 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\6728ef6a4c4b41eec6af6f48a7109457\System.Runtime.Remoting.ni.dll
+ 2010-08-10 19:27 . 2010-08-10 19:27 624128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\c9c7532609177f639fac55991c882d1f\System.Net.ni.dll
+ 2010-08-10 19:13 . 2010-08-10 19:13 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\50583e3d9a03c78b8107b826068f4541\System.Messaging.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 997888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\758e0ce53c80a7ad7cf76a4910d27762\System.Management.ni.dll
+ 2010-08-10 19:27 . 2010-08-10 19:27 330240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\9d42bf7e1d49e083bf8ca3dc44ee2b19\System.Management.Instrumentation.ni.dll
+ 2010-08-10 19:27 . 2010-08-10 19:27 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\8dd494a51a34de9bb8dc459287fe01bc\System.IO.Log.ni.dll
+ 2010-08-10 19:13 . 2010-08-10 19:13 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\1a8dbe792bff04609faff69f9327630f\System.IdentityModel.Selectors.ni.dll
+ 2010-08-10 18:29 . 2010-08-10 18:29 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\7e94064464380c8a5d7315c8b5d312aa\System.EnterpriseServices.Wrapper.dll
+ 2010-08-10 18:29 . 2010-08-10 18:29 628224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\7e94064464380c8a5d7315c8b5d312aa\System.EnterpriseServices.ni.dll
+ 2010-08-10 18:29 . 2010-08-10 18:29 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\0964202aa721ad3fc6f4d3d9d93dbf52\System.Drawing.Design.ni.dll
+ 2010-08-10 19:27 . 2010-08-10 19:27 887808 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\cd5561592e50ed277e3b1a45d529c1a4\System.DirectoryServices.AccountManagement.ni.dll
+ 2010-08-10 18:30 . 2010-08-10 18:30 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\689d9df56dfa4978b2593c43d4e94cdd\System.DirectoryServices.Protocols.ni.dll
+ 2010-08-10 19:27 . 2010-08-10 19:27 356864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\d1d2e67b4b6908a0119966021363b7dc\System.Data.Services.Design.ni.dll
+ 2010-08-10 19:27 . 2010-08-10 19:27 946176 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\b7d5d32033299d1e34180f80aeb71748\System.Data.Services.Client.ni.dll
+ 2010-08-10 19:27 . 2010-08-10 19:27 762880 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\f9230f56cf1a71f9af2e9b4e8f823d1a\System.Data.Entity.Design.ni.dll
+ 2010-08-10 19:17 . 2010-08-10 19:17 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\b35e8ee9e538de0ce43719f73aca5833\System.Data.DataSetExtensions.ni.dll
+ 2010-08-10 18:26 . 2010-08-10 18:26 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\4be2653d1c9804d2ff6e6b66d22764e1\System.Configuration.ni.dll
+ 2010-08-10 18:30 . 2010-08-10 18:30 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\69cfb623bd8b1bc7dbad276f82019dcb\System.Configuration.Install.ni.dll
+ 2010-08-10 19:17 . 2010-08-10 19:17 633344 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\85b263ee17ce8086d74c45fed21c1180\System.AddIn.ni.dll
+ 2010-08-10 19:27 . 2010-08-10 19:27 232448 c:\windows\assembly\NativeImages_v2.0.50727_32\sysglobl\999b0b3c1e99cdf46f6afbb7daf1ae49\sysglobl.ni.dll
+ 2010-08-10 19:12 . 2010-08-10 19:12 925696 c:\windows\assembly\NativeImages_v2.0.50727_32\SqlMetal\61a0ede67b9666bb3c2f342c7f121126\SqlMetal.ni.exe
+ 2010-08-10 19:17 . 2010-08-10 19:17 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\cb96e1d6de2c7a0c2d518761d6d139b2\SMSvcHost.ni.exe
+ 2010-08-10 19:13 . 2010-08-10 19:13 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\9de488bf62eebca425759ea94d9a70e8\SMDiagnostics.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 295424 c:\windows\assembly\NativeImages_v2.0.50727_32\SecurityAuditPolici#\b22968de990db604cf987f597aac524f\SecurityAuditPoliciesSnapIn.ni.dll
+ 2010-08-10 18:30 . 2010-08-10 18:30 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\caa7dd69e03dada6747085a5f2d4fb0c\PresentationFramework.Aero.ni.dll
+ 2010-08-10 18:30 . 2010-08-10 18:30 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\9da2c4ccbf8dead2507879555e600ab7\PresentationFramework.Classic.ni.dll
+ 2010-08-10 18:30 . 2010-08-10 18:30 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\645eac5513e6a5587dd3f334d9fab4c2\PresentationFramework.Royale.ni.dll
+ 2010-08-10 18:30 . 2010-08-10 18:30 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\0aa86db18e6c85f0b6144ca8b6de9b52\PresentationFramework.Luna.ni.dll
+ 2010-08-10 19:17 . 2010-08-10 19:17 723456 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\c26b8bd37831c8ec8e74365a91492fc5\napsnap.ni.dll
+ 2010-08-10 19:17 . 2010-08-10 19:17 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\31d4aa4ab7644c761f3282fef4dbc5e7\napinit.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 114176 c:\windows\assembly\NativeImages_v2.0.50727_32\naphlpr\05238736304f9b2c5f451607ab71ae18\naphlpr.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\b6e1a1590a2fcf08ed4145fb92357391\MSBuild.ni.exe
+ 2010-08-10 19:14 . 2010-08-10 19:14 287232 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\02600010d899e4abfd49e6dd18b94738\MMCFxCommon.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 531456 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\ea8b88af652eb8082578cdca393a4bcf\Microsoft.WSMan.Management.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 163840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\ee39004502159958b569ff4048434c0b\Microsoft.VisualStudio.Shell.Interop.10.0.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\528fb7c1f755e446a1ed500d1b58ebd4\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 137728 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\f124db61e5e0431ca441a5d0e014dcc2\Microsoft.SqlServer.ConnectionInfoExtended.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 252416 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\abe59c2d791a17ec9892fad93255c240\Microsoft.SqlServer.SqlWmiManagement.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 532480 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\8822af11469021473fd1f0fe6c785ccb\Microsoft.SqlServer.Diagnostics.STrace.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 640000 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\3c22d3f82714d879a5599d72c92079db\Microsoft.SqlServer.BatchParser.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 272896 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\26910d4530cdbe4957ae718f89b6f190\Microsoft.SqlServer.ConnectionInfo.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 404992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\0d4f831b6d2d70ab1732295910eaec45\Microsoft.SqlServer.SmoExtended.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 128000 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\03638c2871d827b61fa3b19f9e0464c7\Microsoft.SqlServer.RegSvrEnum.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 837120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\e9ca451725c058a979a37b4308b7d2ce\Microsoft.Security.ApplicationId.Wizards.AutomaticRuleGenerationWizard.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 157184 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\b45fa2234d221f9bb7c55a384f1cdb82\Microsoft.Security.ApplicationId.PolicyManagement.PolicyModel.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 187392 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\9ca8aced3602f7862c36210108c54edc\Microsoft.Security.ApplicationId.PolicyManagement.PolicyManager.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 210944 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\4409b5849787db4963bf7e7aa63db009\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 291328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\f6348b0de59c9de42d5d6ae71d511763\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 729088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\c16b32cadfcc2b5caf6259693655a740\Microsoft.PowerShell.GraphicalHost.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 515584 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\b9a59377784c8283d217f4ca65b3ac9b\Microsoft.PowerShell.ConsoleHost.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 167424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\b83901768935aa231c768dd1a72dcdb7\Microsoft.PowerShell.Security.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 786432 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\2f2d57e89dbdc62cffb0e7a0e15bf58b\Microsoft.PowerShell.Commands.Management.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 849920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\e6f9e2231f38135bca640268cb97bbf1\Microsoft.MediaCenter.Shell.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 740864 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\bcb5dd83610f0529b940f33563b96f0f\Microsoft.MediaCenter.TV.Tuners.Interop.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 326144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\b0d222cd6486fe42a37c40d8c545b674\Microsoft.MediaCenter.Playback.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 229888 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\a9af9bb9c0a753244770d35085613341\Microsoft.MediaCenter.iTv.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 142848 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\8afecd0f80ba53c117b540e682df3cec\Microsoft.MediaCenter.iTv.Media.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 105472 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\3f77b7a25454bea3881ba1e01f5dffdb\Microsoft.MediaCenter.Mheg.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 355840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\3d79f49402afb52ffec9478cfc4fc733\Microsoft.MediaCenter.Interop.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 705024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\2812c9f9721dce7adfa4e8ff5c93c06a\Microsoft.MediaCenter.Sports.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 561664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\117653722679370f9b5da66807886739\Microsoft.ManagementConsole.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 286208 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.GroupPoli#\340d7608310f04d472cdf49db6b10fec\Microsoft.GroupPolicy.Interop.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 455168 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.GroupPoli#\21c923e0332038ee12e3d8504ac37b16\Microsoft.GroupPolicy.AdmTmplEditor.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\757d1a493508c965f98e23807e226f72\Microsoft.Build.Utilities.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\6466be199d39a2af445708e711095775\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\8f3a62f35106a0a83f7b1be20142f5b6\Microsoft.Build.Engine.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\0f63bf412ade976b62296fe9b9bec6f4\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 316928 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Applicati#\d0afb1b00eeb64c2789a9ba31ead05d2\Microsoft.ApplicationId.Framework.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 587264 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Applicati#\b866336e70f648e81968c22e3feb1410\Microsoft.ApplicationId.RuleWizard.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 250880 c:\windows\assembly\NativeImages_v2.0.50727_32\Mcx2Dvcs\1f8f66772bddf57999819178e765fe94\Mcx2Dvcs.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 380928 c:\windows\assembly\NativeImages_v2.0.50727_32\mcupdate\9261114d00ee997da8867f4d41043dbf\mcupdate.ni.exe
+ 2010-08-10 19:14 . 2010-08-10 19:14 364032 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstoredb\8db5f1bdfd98e7697887a3d9e46e593c\mcstoredb.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 371712 c:\windows\assembly\NativeImages_v2.0.50727_32\mcplayerinterop\47703804d2a510901a050f6dca204326\mcplayerinterop.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 515584 c:\windows\assembly\NativeImages_v2.0.50727_32\mcGlidHostObj\b0aecf70489f5b5ae91225265323c9fb\mcGlidHostObj.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 107520 c:\windows\assembly\NativeImages_v2.0.50727_32\MCESidebarCtrl\ed36972cdaf4ff2a66a76b67f5282044\MCESidebarCtrl.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 553472 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\a19346462fbc57a1f768822f8a426509\EventViewer.ni.dll
+ 2010-08-10 19:12 . 2010-08-10 19:12 276480 c:\windows\assembly\NativeImages_v2.0.50727_32\EnvDTE80\41301464cc158c2077ad81b055f5f66a\EnvDTE80.ni.dll
+ 2010-08-10 19:12 . 2010-08-10 19:12 573440 c:\windows\assembly\NativeImages_v2.0.50727_32\EnvDTE\ef274848eeeb9c16431eee06cfbd8cd8\EnvDTE.ni.dll
+ 2010-08-10 19:13 . 2010-08-10 19:13 693248 c:\windows\assembly\NativeImages_v2.0.50727_32\ehRecObj\547cffc5ba398241f6ee02bee82e21c8\ehRecObj.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 202752 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiWUapi\383bac4c0ccf08b1d29cee81bed3ceac\ehiWUapi.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 340480 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiwmp\57ac449b151cd332165d5b6bfd74c0ad\ehiwmp.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 875520 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiVidCtl\ca267364d86864d13ec6e78ebfe4bff9\ehiVidCtl.ni.dll
+ 2010-08-10 19:13 . 2010-08-10 19:13 442880 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiProxy\ada5e4f7f382d574dd0b1ebdd1dcd8b6\ehiProxy.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiExtens\1cdffc23520c3688e9ac6fafdf18f0ae\ehiExtens.ni.dll
+ 2010-08-10 19:13 . 2010-08-10 19:13 257536 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost\118280a4259f58ab46f2583c0563bff6\ehExtHost.ni.exe
+ 2010-08-10 19:13 . 2010-08-10 19:13 223744 c:\windows\assembly\NativeImages_v2.0.50727_32\ehCIR\9f4a441b157b4ee850a46392791d6cdc\ehCIR.ni.dll
+ 2010-08-10 19:13 . 2010-08-10 19:13 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\149c74602e3720d5e12fd34691793f45\CustomMarshalers.ni.dll
+ 2010-08-10 19:13 . 2010-08-10 19:13 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\0026d2a5ef652dd0f2ffafc5c6be0e5a\ComSvcConfig.ni.exe
+ 2010-08-10 19:12 . 2010-08-10 19:12 621568 c:\windows\assembly\NativeImages_v2.0.50727_32\BDATunePIA\f5a64e44170e235bc89a46b4129deaad\BDATunePIA.ni.dll
+ 2010-08-10 19:12 . 2010-08-10 19:12 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\9950d80cbdcff8521c7a46d5da53a68b\AspNetMMCExt.ni.dll
+ 2010-09-17 17:14 . 2010-09-17 17:14 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
- 2010-07-02 04:42 . 2010-07-02 04:42 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
- 2010-07-02 04:42 . 2010-07-02 04:42 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
+ 2010-09-17 17:14 . 2010-09-17 17:14 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
+ 2010-09-17 17:14 . 2010-09-17 17:14 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
- 2010-07-02 04:42 . 2010-07-02 04:42 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
+ 2010-09-17 17:14 . 2010-09-17 17:14 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
- 2010-07-02 04:42 . 2010-07-02 04:42 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
+ 2010-09-17 17:14 . 2010-09-17 17:14 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
- 2010-07-02 04:42 . 2010-07-02 04:42 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
+ 2010-09-17 17:14 . 2010-09-17 17:14 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2010-07-02 04:42 . 2010-07-02 04:42 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2010-07-02 04:42 . 2010-07-02 04:42 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2010-09-17 17:14 . 2010-09-17 17:14 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2010-07-02 04:42 . 2010-07-02 04:42 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2010-09-17 17:14 . 2010-09-17 17:14 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2010-07-02 04:42 . 2010-07-02 04:42 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2010-09-17 17:14 . 2010-09-17 17:14 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2010-07-02 04:42 . 2010-07-02 04:42 577024 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2010-09-17 17:14 . 2010-09-17 17:14 577024 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2010-07-02 04:42 . 2010-07-02 04:42 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2010-09-17 17:14 . 2010-09-17 17:14 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2010-07-02 04:42 . 2010-07-02 04:42 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2010-09-17 17:14 . 2010-09-17 17:14 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2010-09-17 17:14 . 2010-09-17 17:14 563712 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2010-07-02 04:42 . 2010-07-02 04:42 563712 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2010-09-17 17:14 . 2010-09-17 17:14 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
- 2010-07-02 04:42 . 2010-07-02 04:42 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
+ 2010-09-19 10:31 . 2010-09-19 10:31 200704 c:\windows\8A809006C25A4A3A9DAB94659BCDB107.TMP\WiseCustomCalla.dll
+ 2010-08-10 18:13 . 2010-05-20 22:43 5822800 c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.1.7600.20717_none_f00fcbf704dccba1\mscorwks.dll
+ 2010-08-10 18:13 . 2010-05-20 22:49 5816656 c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.1.7600.16597_none_06e5752aeb2e3602\mscorwks.dll
+ 2010-08-10 18:12 . 2010-05-20 22:43 4550656 c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7600.20717_none_8568fd099755671c\mscorlib.dll
+ 2010-08-10 18:12 . 2010-05-20 22:49 4550656 c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7600.16597_none_9c3ea63d7da6d17d\mscorlib.dll
+ 2010-08-10 18:11 . 2010-06-19 04:13 2327552 c:\windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.1.7600.20738_none_b98c82d514ccb6c0\win32k.sys
+ 2010-08-10 18:11 . 2010-06-19 04:07 2326016 c:\windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.1.7600.16617_none_b9178597fb9fc5bd\win32k.sys
+ 2010-08-10 18:12 . 2010-06-14 06:06 1288576 c:\windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20733_none_b3b219fae0b0af43\tcpip.sys
+ 2010-08-10 18:12 . 2010-06-14 06:12 1286016 c:\windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16610_none_b33b1c29c7858b92\tcpip.sys
+ 2010-08-10 18:11 . 2010-06-19 06:37 3909512 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7600.20738_none_6cc96abb2e68ff68\ntoskrnl.exe
+ 2010-08-10 18:11 . 2010-06-19 06:37 3964800 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7600.20738_none_6cc96abb2e68ff68\ntkrnlpa.exe
+ 2010-08-10 18:11 . 2010-06-19 06:33 3899784 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7600.16617_none_6c546d7e153c0e65\ntoskrnl.exe
+ 2010-08-10 18:11 . 2010-06-19 06:33 3955080 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7600.16617_none_6c546d7e153c0e65\ntkrnlpa.exe
+ 2010-08-10 18:12 . 2010-06-08 05:00 1233920 c:\windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.1.7600.20728_none_891219a11113f34b\msxml3.dll
+ 2010-08-10 18:12 . 2010-06-08 06:02 1233920 c:\windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.1.7600.16605_none_889b1bcff7e8cf9a\msxml3.dll
+ 2010-09-14 18:43 . 2010-08-31 04:25 2058752 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.20791_none_62af191d7e030c05\iertutil.dll
+ 2010-09-14 18:43 . 2010-08-31 04:32 2058752 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.16666_none_624aed8864c8971b\iertutil.dll
+ 2010-08-10 18:12 . 2010-06-30 06:15 5972992 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.7600.20745_none_2e889224137c3085\mshtml.dll
+ 2010-08-10 18:12 . 2010-06-30 06:22 5971456 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.7600.16625_none_2e149530fa4e58d9\mshtml.dll
+ 2010-08-10 18:12 . 2010-06-30 06:18 1227264 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_8.0.7600.20745_none_d0289763c81ca0bc\urlmon.dll
+ 2010-08-10 18:12 . 2010-06-30 06:25 1226240 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_8.0.7600.16625_none_cfb49a70aeeec910\urlmon.dll
+ 2010-08-10 18:11 . 2010-06-19 04:07 2326016 c:\windows\System32\win32k.sys
+ 2010-08-10 18:12 . 2010-06-30 06:25 1226240 c:\windows\System32\urlmon.dll
- 2009-07-14 02:03 . 2010-07-27 18:59 7077888 c:\windows\System32\SMI\Store\Machine\SCHEMA.DAT
+ 2009-07-14 02:03 . 2010-09-27 15:29 7077888 c:\windows\System32\SMI\Store\Machine\SCHEMA.DAT
+ 2010-07-28 14:56 . 2010-07-09 22:37 5107816 c:\windows\System32\nvwgf2um.dll
+ 2010-07-28 14:56 . 2010-07-09 22:37 9818728 c:\windows\System32\nvd3dum.dll
+ 2010-07-28 14:56 . 2010-07-09 22:37 2892904 c:\windows\System32\nvcuvid.dll
+ 2010-07-28 14:56 . 2010-07-09 22:37 2506344 c:\windows\System32\nvcuvenc.dll
+ 2010-07-28 14:56 . 2010-07-09 22:37 4553832 c:\windows\System32\nvcuda.dll
+ 2010-07-28 14:56 . 2010-07-09 22:37 1625192 c:\windows\System32\nvapi.dll
+ 2010-08-10 18:11 . 2010-06-19 06:33 3899784 c:\windows\System32\ntoskrnl.exe
+ 2010-08-10 18:11 . 2010-06-19 06:33 3955080 c:\windows\System32\ntkrnlpa.exe
+ 2010-08-10 18:12 . 2010-06-08 06:02 1233920 c:\windows\System32\msxml3.dll
+ 2010-08-10 18:12 . 2010-06-30 06:22 5971456 c:\windows\System32\mshtml.dll
+ 2010-09-14 18:43 . 2010-08-31 04:32 2058752 c:\windows\System32\iertutil.dll
+ 2009-07-14 04:33 . 2010-08-10 18:25 3703696 c:\windows\System32\FNTCACHE.DAT
- 2009-07-14 04:33 . 2010-07-01 16:14 3703696 c:\windows\System32\FNTCACHE.DAT
+ 2010-08-02 07:37 . 2009-07-14 01:15 1495040 c:\windows\System32\ExplorerFrame_backup_wti.dll
+ 2010-07-28 14:56 . 2010-07-09 22:37 5107816 c:\windows\System32\DriverStore\FileRepository\nv_disp.inf_x86_neutral_c04de2a289110631\nvwgf2um.dll
+ 2010-07-28 14:56 . 2010-07-09 22:37 9818728 c:\windows\System32\DriverStore\FileRepository\nv_disp.inf_x86_neutral_c04de2a289110631\nvd3dum.dll
+ 2010-07-28 14:56 . 2010-07-09 22:37 2892904 c:\windows\System32\DriverStore\FileRepository\nv_disp.inf_x86_neutral_c04de2a289110631\nvcuvid.dll
+ 2010-07-28 14:56 . 2010-07-09 22:37 2506344 c:\windows\System32\DriverStore\FileRepository\nv_disp.inf_x86_neutral_c04de2a289110631\nvcuvenc.dll
+ 2010-07-28 14:56 . 2010-07-09 22:37 4553832 c:\windows\System32\DriverStore\FileRepository\nv_disp.inf_x86_neutral_c04de2a289110631\nvcuda.dll
+ 2010-07-28 14:56 . 2010-07-09 22:37 1625192 c:\windows\System32\DriverStore\FileRepository\nv_disp.inf_x86_neutral_c04de2a289110631\nvapi.dll
+ 2010-08-10 18:12 . 2010-06-14 06:12 1286016 c:\windows\System32\drivers\tcpip.sys
- 2009-07-14 04:34 . 2010-07-13 11:36 3607895 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
+ 2009-07-14 04:34 . 2010-09-14 19:00 3607895 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
+ 2010-05-04 19:55 . 2010-09-24 22:10 1911224 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3595803208-3766525656-3816774015-1000-8192.dat
- 2010-05-04 19:55 . 2010-07-06 21:44 1911224 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3595803208-3766525656-3816774015-1000-8192.dat
+ 2010-08-10 18:13 . 2010-05-20 22:49 5816656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2010-08-10 18:12 . 2010-05-20 22:49 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
- 2009-07-13 20:46 . 2009-06-10 21:23 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2010-08-19 15:57 . 2010-08-19 15:57 3395584 c:\windows\Installer\3e1401.msp
+ 2010-07-29 21:16 . 2010-07-29 21:16 2785280 c:\windows\Installer\2e877d6.msi
+ 2010-07-26 14:00 . 2010-07-26 14:00 5010944 c:\windows\Installer\143aa8.msp
+ 2010-07-10 18:14 . 2010-07-10 18:14 2850816 c:\windows\Installer\143a92.msp
+ 2010-05-05 12:39 . 2010-09-14 18:50 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
- 2010-05-05 12:39 . 2010-07-14 06:21 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
- 2010-05-05 12:39 . 2010-07-14 06:21 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
+ 2010-05-05 12:39 . 2010-09-14 18:50 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
+ 2010-08-02 07:37 . 2009-10-31 05:45 2614272 c:\windows\explorer_backup_wti.exe
+ 2010-08-10 18:27 . 2010-08-10 18:27 3325952 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\3c0fbe23fa37ca50fea3dbe200b40f7a\WindowsBase.ni.dll
+ 2010-08-10 19:28 . 2010-08-10 19:28 1047552 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\316d55123fabfb1b92b6364d294ccf65\UIAutomationClientsideProviders.ni.dll
+ 2010-08-10 18:26 . 2010-08-10 18:26 7949312 c:\windows\assembly\NativeImages_v2.0.50727_32\System\500ddd904b1099f95552a81b54223b7f\System.ni.dll
+ 2010-08-10 18:27 . 2010-08-10 18:27 5452800 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\3060dfcdecbeb8ee65077fb29b217c3d\System.Xml.ni.dll
+ 2010-08-10 19:28 . 2010-08-10 19:28 1358336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\db5e1eda18f1fe201916f197f88cf819\System.WorkflowServices.ni.dll
+ 2010-08-10 18:30 . 2010-08-10 18:30 1914880 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\6cbcd0f5f64db318f682ee3be29df125\System.Workflow.Runtime.ni.dll
+ 2010-08-10 18:30 . 2010-08-10 18:30 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\7f793e614c5430e51ed902a5c71c2982\System.Workflow.ComponentModel.ni.dll
+ 2010-08-10 18:30 . 2010-08-10 18:30 2995200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\54c2b168fd76ce84666c0a5241a9d0fa\System.Workflow.Activities.ni.dll
+ 2010-08-10 18:29 . 2010-08-10 18:29 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\ee24fe21a061801bb923bdc23c96388d\System.Web.Services.ni.dll
+ 2010-08-10 19:28 . 2010-08-10 19:28 2209792 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\50766874720f812ab8f37c45940b1640\System.Web.Mobile.ni.dll
+ 2010-08-10 19:27 . 2010-08-10 19:27 2400768 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\0119cf02155b33d89fca6687c3e03705\System.Web.Extensions.ni.dll
+ 2010-08-10 19:27 . 2010-08-10 19:27 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\d9d7b2b31f2139f7f8ec4679a21bcdb0\System.Speech.ni.dll
+ 2010-08-10 19:27 . 2010-08-10 19:27 1705984 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\5f1a3bdc51fdea45f367be500582ab41\System.ServiceModel.Web.ni.dll
+ 2010-08-10 19:13 . 2010-08-10 19:13 2347008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\86d34fbd2a7c582105eb53cbbd55c29e\System.Runtime.Serialization.ni.dll
+ 2010-08-10 18:28 . 2010-08-10 18:28 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\86e1b89eec4df3c10e5ed8bf20b80ebd\System.Printing.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 8871936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\1f989227a5dc6c495b2062f59be3610e\System.Management.Automation.ni.dll
+ 2010-08-10 19:13 . 2010-08-10 19:13 1072128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\1fe7db1174c0c3269ce34d949e201ad0\System.IdentityModel.ni.dll
+ 2010-08-10 18:27 . 2010-08-10 18:27 1586688 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\fdeec42fa02f3d789c42be2e33b130eb\System.Drawing.ni.dll
+ 2010-08-10 18:28 . 2010-08-10 18:28 1117184 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\86d99a77ba6496b2300d9e347373fdd9\System.DirectoryServices.ni.dll
+ 2010-08-10 18:27 . 2010-08-10 18:27 1806848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\17acef277a65333d0cd2003266af184d\System.Deployment.ni.dll
+ 2010-08-10 18:29 . 2010-08-10 18:29 6618624 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\935ac020241e59cab3287d5eb38c592d\System.Data.ni.dll
+ 2010-08-10 18:27 . 2010-08-10 18:27 2508288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\f7e995e1a099c38dacf8f2aac311e14b\System.Data.SqlXml.ni.dll
+ 2010-08-10 19:27 . 2010-08-10 19:27 1328640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\77726e357d83ad9a52bfa585f13b05cb\System.Data.Services.ni.dll
+ 2010-08-10 18:29 . 2010-08-10 18:29 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\bb7f3d86b4b443ee73293fa666a5f7ab\System.Data.OracleClient.ni.dll
+ 2010-08-10 19:27 . 2010-08-10 19:27 2516992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\6e6ded3ee35572638262578c00afd4dc\System.Data.Linq.ni.dll
+ 2010-08-10 19:27 . 2010-08-10 19:27 9921024 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\6e9445f6c035f07b31a86296f4e2be3f\System.Data.Entity.ni.dll
+ 2010-08-10 19:12 . 2010-08-10 19:12 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\b1a619266964bede98b18ef83eb1c559\System.Core.ni.dll
+ 2010-08-10 19:17 . 2010-08-10 19:17 1351168 c:\windows\assembly\NativeImages_v2.0.50727_32\SrpUxSnapIn\8b59d5d58aeeaa4c89e252b559c91a6d\SrpUxSnapIn.ni.dll
+ 2010-08-10 18:28 . 2010-08-10 18:28 2147328 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\05460c4c17dba17e4c3c81ae4a42bf8a\ReachFramework.ni.dll
+ 2010-08-10 18:28 . 2010-08-10 18:28 1658368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\a7cea5d83f3ae698470a1393a30242db\PresentationUI.ni.dll
+ 2010-08-10 19:17 . 2010-08-10 19:17 1449984 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\a3bcad5eb6d5b5dd1942f2ce44a67b5b\PresentationBuildTasks.ni.dll
+ 2010-08-10 19:17 . 2010-08-10 19:17 2623488 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\4295b54ee21bfef1e972e14000ed2039\Narrator.ni.exe
+ 2010-08-10 19:16 . 2010-08-10 19:16 1545216 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\87b1ca611b5c770217555e9d78ff726f\MMCEx.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 6434304 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\9a681a81acd5e696d4315ebfa51a359a\MIGUIControls.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 1670144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\72d87531f055ba39b1fc43d6efbd2a0e\Microsoft.VisualBasic.ni.dll
+ 2010-08-10 19:13 . 2010-08-10 19:13 1092608 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\976f7d50a8d1d8bbe74b11679e784185\Microsoft.Transactions.Bridge.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 6710272 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\6c4b7548e08caf36cfaeb840fd73088d\Microsoft.SqlServer.Smo.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 1575424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\58fe2e3e3a4e27f1be3056d0a024dba1\Microsoft.SqlServer.SqlEnum.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 1391104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\57024915e03104eeb63698cb2c62484c\Microsoft.SqlServer.Management.Sdk.Sfc.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 1681920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\ddabdd83f2727a3d37001ca299cf8a87\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 1705472 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\9b72e5e5525c410c2964199aa4bf4dd0\Microsoft.PowerShell.GPowerShell.ni.dll
+ 2010-08-10 19:16 . 2010-08-10 19:16 3724288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\60fc2cef7a33dd1b62b6c23bb713b942\Microsoft.PowerShell.Editor.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 1125376 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\6e56e6ce312a5b8f3953edb6a34edd96\Microsoft.MediaCenter.Bml.ni.dll
+ 2010-08-10 19:13 . 2010-08-10 19:13 6499840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\65ad4440cc44e031d7f3c3035e47ac4d\Microsoft.MediaCenter.UI.ni.dll
+ 2010-08-10 19:13 . 2010-08-10 19:13 1009664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\049a14f41fb305aa47e5c91d43f0d613\Microsoft.MediaCenter.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 2332672 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\0972a4acf48e3732ede5a7f13745f517\Microsoft.JScript.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 1361408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\5196e176b6eade8e55e30404f6842a48\Microsoft.Ink.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 4071424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.GroupPoli#\4c9171427e1e274dafad232787ad0689\Microsoft.GroupPolicy.Reporting.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\a6e90a53a09e50dda9122b432f48e275\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\0d33e9ce3f1f04cf48bff4c2dfb9f4eb\Microsoft.Build.Tasks.ni.dll
+ 2010-08-10 19:15 . 2010-08-10 19:15 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\ff7ebb17690b1ccc7ee8c6cfa2d107b8\Microsoft.Build.Engine.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 2031104 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstore\b177c57b6d37399f5695495c433f5aee\mcstore.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 3319296 c:\windows\assembly\NativeImages_v2.0.50727_32\mcepg\45f49dabb3d9c8cb8d9c8d365dc6f1f2\mcepg.ni.dll
- 2009-07-13 20:46 . 2009-06-10 21:23 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2010-08-10 18:12 . 2010-05-20 22:49 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2010-09-17 17:14 . 2010-09-17 17:14 2846720 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2010-07-02 04:42 . 2010-07-02 04:42 2846720 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2010-09-17 17:14 . 2010-09-17 17:14 2676224 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2010-07-02 04:42 . 2010-07-02 04:42 2676224 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2010-08-03 06:06 . 2010-07-27 13:59 12869120 c:\windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.1.7600.20765_none_6c9ec3568c5ce28d\shell32.dll
+ 2010-08-03 06:06 . 2010-07-27 14:03 12867584 c:\windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.1.7600.16644_none_6c29c619732ff18a\shell32.dll
+ 2010-08-10 18:12 . 2010-06-30 06:14 10986496 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.7600.20745_none_7fe7ec279f71beb2\ieframe.dll
+ 2010-08-10 18:12 . 2010-06-30 06:21 10985472 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.7600.16625_none_7f73ef348643e706\ieframe.dll
+ 2009-07-14 08:40 . 2010-09-14 18:43 40611921 c:\windows\winsxs\ManifestCache\e4e8be02b8fae2a7_blobs.bin
+ 2010-08-02 07:37 . 2010-02-18 07:34 12867072 c:\windows\System32\shell32_backup_wti.dll
+ 2010-08-03 06:06 . 2010-07-27 14:03 12867584 c:\windows\System32\shell32.dll
+ 2010-07-28 14:56 . 2010-07-09 22:37 14092904 c:\windows\System32\nvoglv32.dll
- 2010-07-06 15:22 . 2010-06-24 11:17 10267240 c:\windows\System32\nvcompiler.dll
+ 2010-07-28 14:56 . 2010-07-09 22:37 10267240 c:\windows\System32\nvcompiler.dll
+ 2010-05-04 19:51 . 2010-09-14 18:43 35552200 c:\windows\System32\MRT.exe
+ 2010-08-10 18:12 . 2010-06-30 06:21 10985472 c:\windows\System32\ieframe.dll
+ 2010-07-28 14:56 . 2010-07-09 22:37 14092904 c:\windows\System32\DriverStore\FileRepository\nv_disp.inf_x86_neutral_c04de2a289110631\nvoglv32.dll
+ 2010-07-28 14:56 . 2010-07-09 22:37 11008040 c:\windows\System32\DriverStore\FileRepository\nv_disp.inf_x86_neutral_c04de2a289110631\nvlddmkm.sys
+ 2010-07-28 14:56 . 2010-07-09 22:37 22792952 c:\windows\System32\DriverStore\FileRepository\nv_disp.inf_x86_neutral_c04de2a289110631\NvCplSetupEng.exe
+ 2010-07-28 14:56 . 2010-07-09 22:37 10267240 c:\windows\System32\DriverStore\FileRepository\nv_disp.inf_x86_neutral_c04de2a289110631\nvcompiler.dll
+ 2010-07-28 14:56 . 2010-07-09 22:37 11008040 c:\windows\System32\drivers\nvlddmkm.sys
+ 2010-07-22 23:04 . 2010-07-22 23:04 11395072 c:\windows\Installer\3e13eb.msp
+ 2010-09-14 17:46 . 2010-09-14 17:46 20303872 c:\windows\Installer\34555.msp
+ 2010-08-13 18:09 . 2010-08-13 18:09 12263936 c:\windows\Installer\3454b.msp
+ 2010-09-16 15:56 . 2010-09-16 15:56 16791040 c:\windows\Installer\2cd5dc.msi
+ 2010-09-01 16:11 . 2010-09-01 16:11 26969088 c:\windows\Installer\2cd5d4.msi
+ 2010-07-10 18:06 . 2010-07-10 18:06 10120192 c:\windows\Installer\143a7c.msp
+ 2010-08-10 18:27 . 2010-08-10 18:27 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\f92c882fd4e7005c005e208daa04c28d\System.Windows.Forms.ni.dll
+ 2010-08-10 18:29 . 2010-08-10 18:29 11804160 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\064483cd86ddba6c78dd32732f6fd351\System.Web.ni.dll
+ 2010-08-10 19:13 . 2010-08-10 19:13 17400320 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\5a355674c42773b646b5238853a2015d\System.ServiceModel.ni.dll
+ 2010-08-10 18:29 . 2010-08-10 18:29 10578432 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\cadfe0acc38aa5a20b52ddf22917688c\System.Design.ni.dll
+ 2010-08-10 18:28 . 2010-08-10 18:28 14322688 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\9e58e5346c3d0c341258f7c276a99121\PresentationFramework.ni.dll
+ 2010-08-10 18:27 . 2010-08-10 18:27 12216320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\74f3fc09a810d9b704a80ee8c18d9d04\PresentationCore.ni.dll
+ 2010-08-10 18:26 . 2010-08-10 18:26 11490304 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\f58ab951b57c8526430486dcf7ee38fd\mscorlib.ni.dll
+ 2010-08-10 19:14 . 2010-08-10 19:14 18684416 c:\windows\assembly\NativeImages_v2.0.50727_32\ehshell\7bee3e2eeda21704a2bda64ee3087316\ehshell.ni.dll
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{a1acb83b-3713-4784-b2b3-64c6d06565e9}]
2009-11-25 10:47 297808 ----a-w- c:\windows\System32\mscoree.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2010-05-26 13:23 1385864 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-05-26 1385864]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-05-26 1385864]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2010-04-07 2145000]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"AdobeCS5ServiceManager"="c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-07-22 402432]
"SwitchBoard"="c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-04-29 1090952]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2010-05-06 09:29 64592 ----a-w- c:\program files\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll

[HKLM\~\startupfolder\C:^Users^ToRTeEn^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Logitech . Registrace produktu.lnk]
backup=c:\windows\pss\Logitech . Registrace produktu.lnk.Startup
backupExtension=.Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
2010-03-06 01:44 500208 ------w- c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
2010-07-22 20:10 402432 ----a-w- c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2010-04-01 09:16 357696 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EvtMgr6]
2010-05-18 20:41 1311312 ----a-w- c:\program files\Logitech\SetPointP\SetPoint.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
2010-08-22 11:02 133432 ----a-w- c:\program files\ICQ7.2\ICQ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
2009-11-11 08:57 1451520 ----a-w- c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerSuite]
2010-06-01 13:58 46440 ----a-w- c:\program files\Uniblue\PowerSuite\Launcher.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2010-09-02 13:15 13351304 ----a-r- c:\program files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
2010-09-17 16:40 1242448 ----a-w- c:\program files\Steam\steam.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
2010-02-19 11:37 517096 ----a-w- c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-06-15 136176]
R3 DrvAgent32;DrvAgent32;c:\windows\system32\Drivers\DrvAgent32.sys [2010-06-25 23456]
R3 MatSvc;Microsoft Automated Troubleshooting Service;c:\program files\Microsoft Fix it Center\Matsvc.exe [2010-04-10 266544]
R3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2010-02-26 137344]
R3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [2010-02-26 8320]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-05-19 1343400]
R4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys [2010-06-30 691696]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-04-07 114984]
S2 cpuz133;cpuz133;c:\windows\system32\drivers\cpuz133_x32.sys [2010-03-30 20968]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-04-07 133512]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [2010-04-07 810120]
S2 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [2010-04-07 41312]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-07-09 248936]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [2010-06-21 105576]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2010-09-18 267880]

.
Obsah adresáře 'Naplánované úlohy'

2010-09-27 c:\windows\Tasks\AWC Startup.job
- c:\program files\IObit\Advanced SystemCare 3\AWC.exe [2010-05-10 13:10]

2010-09-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-07-25 06:39]

2010-09-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-07-25 06:39]

2010-09-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3595803208-3766525656-3816774015-1000Core.job
- c:\users\ToRTeEn\AppData\Local\Google\Update\GoogleUpdate.exe [2010-05-04 18:32]

2010-09-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3595803208-3766525656-3816774015-1000UA.job
- c:\users\ToRTeEn\AppData\Local\Google\Update\GoogleUpdate.exe [2010-05-04 18:32]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.battlefieldheroes.com/en/
uInternet Settings,ProxyServer = http=;ftp=;https=;
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000
IE: Stahnou vse FlashGet3
IE: Stahnout FlashGet3
IE: {{bb7f932c-881f-4b88-837d-cf84adff062b} - {707f6b7e-a2f2-490e-b857-38fcd1a2326b} - mscoree.dll
Trusted Zone: kuaiche.com\software
FF - ProfilePath - c:\users\ToRTeEn\AppData\Roaming\Mozilla\Firefox\Profiles\iabqznf3.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.battlefieldheroes.com/en/
FF - prefs.js: network.proxy.type - 0
FF - component: c:\program files\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}\components\Contribute.dll
FF - component: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordext.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.29\npGoogleOneClick8.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\NVIDIA Corporation\3D Vision\npnv3dv.dll
FF - plugin: c:\program files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
FF - plugin: c:\program files\Opera\program\plugins\nppl3260.dll
FF - plugin: c:\program files\Opera\program\plugins\nprjplug.dll
FF - plugin: c:\program files\Opera\program\plugins\nprpjplug.dll
FF - plugin: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
FF - plugin: c:\users\ToRTeEn\AppData\Local\Google\Update\1.2.183.29\npGoogleOneClick8.dll
FF - plugin: c:\users\ToRTeEn\AppData\Roaming\Mozilla\Firefox\Profiles\iabqznf3.default\extensions\battlefieldheroespatcher@ea.com\platform\WINNT_x86-msvc\plugins\npBFHUpdater.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

MSConfigStartUp-FlashGet 3 - c:\program files\FlashGet 3\Flashget3.exe


.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-3595803208-3766525656-3816774015-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2010-09-27 20:28:42
ComboFix-quarantined-files.txt 2010-09-27 18:28

Před spuštěním: 9 422 057 472
Po spuštění: 9 385 443 328

- - End Of File - - 03557B795513E69E6E971B80F8FCEEEE

[vyosek]

Pokud nemate, tak presunte Combofix na plochu

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Registry::
  [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
  "{D4027C7F-154A-4066-A1AD-4243D8127440}"=-
  [-HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
  [-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
  [-HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
  [-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
  "{D4027C7F-154A-4066-A1AD-4243D8127440}"=-
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "AdobeAAMUpdater-1.0"=-
  "AdobeCS5ServiceManager"=-
  "SwitchBoard"=-
  "Malwarebytes Anti-Malware (reboot)"=-
  "SunJavaUpdateSched"=-
  [-HKLM\~\startupfolder\C:^Users^ToRTeEn^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Logitech . Registrace produktu.lnk]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerSuite]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
  
  Folder::
  c:\program files\Ask.com
  
  File::
  c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
  c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
  c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3595803208-3766525656-3816774015-1000UA.job
  c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3595803208-3766525656-3816774015-1000Core.job
  :\windows\8A809006C25A4A3A9DAB94659BCDB107.TMP
  
  DDS::
  Trusted Zone: kuaiche.com\software
  
  RegLock::
  [HKEY_USERS\S-1-5-21-3595803208-3766525656-3816774015-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
  

• Ulozte vytvoreny TXT jako CFScript.txt
• Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
  
• Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

[Thooty]

ComboFix 10-09-27.01 - ToRTeEn 27.09.2010 21:21:00.4.1 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.1023.537 [GMT 2:00]
Spuštěný z: c:\users\ToRTeEn\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\ToRTeEn\Desktop\CFScript.txt
* Rezidentní štít AV je zapnutý


FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3595803208-3766525656-3816774015-1000Core.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3595803208-3766525656-3816774015-1000UA.job"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\Ask.com
c:\program files\Ask.com\cobrand.ico
c:\program files\Ask.com\config.xml
c:\program files\Ask.com\favicon.ico
c:\program files\Ask.com\fv_3162.ico
c:\program files\Ask.com\GenericAskToolbar.dll
c:\program files\Ask.com\mupcfg.xml
c:\program files\Ask.com\SaUpdate.exe
c:\program files\Ask.com\UpdateTask.exe
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3595803208-3766525656-3816774015-1000Core.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3595803208-3766525656-3816774015-1000UA.job

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-08-27 do 2010-09-27 )))))))))))))))))))))))))))))))
.

2010-09-27 19:33 . 2010-09-27 19:33 -------- d-----w- c:\users\ToRTeEn\AppData\Local\temp
2010-09-27 19:33 . 2010-09-27 19:33 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-09-27 19:33 . 2010-09-27 19:33 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-09-27 13:54 . 2010-09-27 13:55 -------- d-----w- C:\rsit
2010-09-26 18:52 . 2010-09-27 09:36 -------- d-----w- c:\program files\Call of duty Modern Warfare 2
2010-09-24 20:47 . 2010-09-25 09:35 480 ----a-w- C:\win32.sys
2010-09-19 10:31 . 2010-09-19 10:31 -------- d-----w- c:\windows\8A809006C25A4A3A9DAB94659BCDB107.TMP
2010-09-18 18:55 . 2010-09-18 18:55 267880 ----a-w- c:\windows\system32\drivers\Rt86win7.sys
2010-09-18 18:55 . 2010-09-18 18:55 80416 ----a-w- c:\windows\system32\RtNicProp32.dll
2010-09-18 10:32 . 2010-09-25 12:48 -------- d-----w- c:\program files\Counter Strike 1.6
2010-09-15 19:33 . 2010-09-15 19:33 -------- d-----w- c:\program files\Rockstar Games
2010-09-15 19:04 . 2010-09-15 19:20 -------- d-----w- c:\program files\GTA San Andreas
2010-09-14 18:40 . 2010-08-21 05:32 316928 ----a-w- c:\windows\system32\spoolsv.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-27 13:54 . 2010-06-25 09:25 -------- d-----w- c:\program files\trend micro
2010-09-27 13:53 . 2010-05-04 18:03 -------- d-----w- c:\programdata\NVIDIA
2010-09-26 18:07 . 2010-07-29 21:14 -------- d-----w- c:\users\ToRTeEn\AppData\Roaming\uTorrent
2010-09-24 18:44 . 2010-05-09 22:06 -------- d-----w- c:\program files\Common Files\Steam
2010-09-24 18:44 . 2010-05-09 22:05 -------- d-----w- c:\program files\Steam
2010-09-24 13:31 . 2010-05-04 19:18 -------- d-----w- c:\users\ToRTeEn\AppData\Roaming\Skype
2010-09-24 13:31 . 2010-05-04 19:19 -------- d-----w- c:\users\ToRTeEn\AppData\Roaming\skypePM
2010-09-21 08:06 . 2010-05-26 20:17 -------- d-----w- c:\users\ToRTeEn\AppData\Roaming\esmska
2010-09-19 10:30 . 2010-05-04 17:59 -------- d-----w- c:\program files\NVIDIA Corporation
2010-09-19 10:29 . 2010-05-28 14:57 -------- d-----w- c:\programdata\NVIDIA Corporation
2010-09-19 08:36 . 2010-07-25 10:29 -------- d-----w- c:\program files\Google
2010-09-18 19:18 . 2010-05-10 12:00 -------- d-----w- c:\users\ToRTeEn\AppData\Roaming\IObit
2010-09-18 19:18 . 2010-05-10 12:00 -------- d-----w- c:\program files\IObit
2010-09-18 18:55 . 2010-02-03 10:24 94208 ----a-w- c:\windows\system32\RTNUninst32.dll
2010-09-15 17:55 . 2010-05-07 16:00 -------- d-----w- c:\program files\CCleaner
2010-09-15 14:21 . 2010-06-13 12:05 -------- d-----w- c:\users\ToRTeEn\AppData\Roaming\ICQ
2010-09-14 18:58 . 2010-05-04 22:10 -------- d-----w- c:\program files\Microsoft Silverlight
2010-09-14 18:50 . 2010-05-05 12:31 -------- d-----w- c:\programdata\Microsoft Help
2010-09-14 17:18 . 2010-09-14 17:18 34164 ----a-w- c:\program files\C.jpg
2010-09-14 17:16 . 2010-09-14 17:16 27620 ----a-w- c:\program files\C.png
2010-09-14 15:49 . 2010-06-13 12:04 -------- d-----w- c:\program files\ICQ7.2
2010-08-14 15:04 . 2010-06-20 10:10 138184 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-08-14 15:03 . 2010-06-26 00:17 215016 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-08-12 16:59 . 2010-08-12 16:59 -------- d-----w- c:\users\ToRTeEn\AppData\Roaming\Sytexis Software
2010-08-12 16:59 . 2010-08-12 16:59 -------- d-----w- c:\program files\Sytexis Software
2010-08-10 18:37 . 2010-08-10 17:54 -------- d-----w- c:\program files\AutoHideIP
2010-08-10 12:39 . 2010-08-10 12:39 -------- d-----w- c:\users\ToRTeEn\AppData\Roaming\NVIDIA
2010-08-10 07:31 . 2010-08-11 16:14 1328504 ----a-w- c:\users\ToRTeEn\AppData\Roaming\Mozilla\Firefox\Profiles\iabqznf3.default\extensions\battlefieldheroespatcher@ea.com\platform\WINNT_x86-msvc\plugins\BFHUpdater.exe
2010-08-10 07:31 . 2010-08-11 16:14 724992 ----a-w- c:\users\ToRTeEn\AppData\Roaming\Mozilla\Firefox\Profiles\iabqznf3.default\extensions\battlefieldheroespatcher@ea.com\platform\WINNT_x86-msvc\plugins\npBFHUpdater.dll
2010-08-09 23:18 . 2010-06-17 20:22 -------- d-----w- c:\program files\Electronic Arts
2010-08-08 18:08 . 2010-08-08 18:08 -------- d-----w- c:\program files\Common Files\Java
2010-08-08 18:07 . 2010-05-14 20:40 -------- d-----w- c:\program files\Java
2010-08-08 14:23 . 2010-08-08 14:23 -------- d-----w- c:\programdata\IsolatedStorage
2010-08-03 15:40 . 2010-08-03 15:40 230912 ----a-w- c:\windows\system32\tambvcm.dll
2010-08-02 07:37 . 2010-08-02 07:37 50536 ----a-w- c:\windows\UTP.exe
2010-08-01 21:09 . 2009-07-13 23:40 249856 ----a-w- c:\windows\system32\uxtheme.dll
2010-08-01 21:09 . 2009-07-13 23:39 2755072 ----a-w- c:\windows\system32\themeui.dll
2010-08-01 21:09 . 2009-07-13 23:39 37376 ----a-w- c:\windows\system32\themeservice.dll
2010-08-01 14:30 . 2010-07-16 08:37 16400 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
2010-07-30 21:21 . 2010-06-25 22:36 -------- d-----w- c:\program files\Activision
2010-07-30 21:20 . 2010-05-04 22:44 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-07-30 11:50 . 2010-05-06 21:28 -------- d-----w- c:\users\ToRTeEn\AppData\Roaming\HLSW
2010-07-29 21:05 . 2010-06-20 10:10 22328 ----a-w- c:\users\ToRTeEn\AppData\Roaming\PnkBstrK.sys
2010-07-29 21:05 . 2010-06-20 10:10 22328 ----a-w- c:\users\ToRTeEn\AppData\Roaming\PnkBstrK.sys
2010-07-29 21:05 . 2010-06-20 10:10 682280 ----a-w- c:\windows\system32\pbsvc.exe
2010-07-29 06:30 . 2010-08-10 18:13 197632 ----a-w- c:\windows\system32\ir32_32.dll
2010-07-29 06:30 . 2010-08-10 18:13 82944 ----a-w- c:\windows\system32\iccvid.dll
2010-07-21 17:45 . 2010-07-18 16:48 2427248 ----a-w- c:\windows\system32\pbsvc_heroes.exe
2010-07-18 16:48 . 2010-06-20 10:10 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-07-17 03:00 . 2010-05-05 20:04 423656 ----a-w- c:\windows\system32\deployJava1.dll
2010-07-16 08:38 . 2010-07-16 08:38 53248 ----a-r- c:\users\ToRTeEn\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
2010-07-09 14:37 . 2010-07-09 14:37 66664 ----a-w- c:\windows\system32\nvshext.dll
2010-07-09 14:37 . 2010-07-09 14:37 1469544 ----a-w- c:\windows\system32\nvsvc.dll
2010-07-09 14:37 . 2010-07-09 14:37 13939816 ----a-w- c:\windows\system32\nvcpl.dll
2010-07-09 14:37 . 2010-07-09 14:37 129640 ----a-w- c:\windows\system32\nvvsvc.exe
2010-07-09 14:37 . 2010-07-09 14:37 110696 ----a-w- c:\windows\system32\nvmctray.dll
2010-07-07 09:05 . 2010-07-07 09:05 4286 ----a-r- c:\users\ToRTeEn\AppData\Roaming\Microsoft\Installer\{D6615307-A73A-49C5-B90F-D97E027F034A}\_6FEFF9B68218417F98F549.exe
2010-07-06 15:58 . 2010-07-06 15:56 205984 ----a-w- c:\programdata\Microsoft\VBExpress\10.0\1033\ResourceCache.dll
2010-07-06 15:52 . 2009-07-14 08:44 674400 ----a-w- c:\windows\system32\perfh005.dat
2010-07-06 15:52 . 2009-07-14 08:44 144354 ----a-w- c:\windows\system32\perfc005.dat
2010-07-01 17:05 . 2010-05-04 18:14 88640 ----a-w- c:\users\ToRTeEn\AppData\Local\GDIPFONTCACHEV1.DAT
2010-07-01 09:14 . 2010-07-01 09:14 95 ----a-w- c:\users\ToRTeEn\AppData\Local\fusioncache.dat
2010-06-30 10:47 . 2010-05-07 14:21 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-06-30 06:25 . 2010-08-10 18:12 978432 ----a-w- c:\windows\system32\wininet.dll
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.

((((((((((((((((((((((((((((( SnapShot_2010-09-27_18.24.01 )))))))))))))))))))))))))))))))))))))))))
.
- 2010-05-04 18:15 . 2010-09-27 18:12 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-05-04 18:15 . 2010-09-27 19:07 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-05-04 18:15 . 2010-09-27 19:07 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-05-04 18:15 . 2010-09-27 18:12 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2010-05-04 18:15 . 2010-09-27 19:07 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2010-05-04 18:15 . 2010-09-27 18:12 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{a1acb83b-3713-4784-b2b3-64c6d06565e9}]
2009-11-25 10:47 297808 ----a-w- c:\windows\System32\mscoree.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2010-04-07 2145000]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2010-05-06 09:29 64592 ----a-w- c:\program files\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EvtMgr6]
2010-05-18 20:41 1311312 ----a-w- c:\program files\Logitech\SetPointP\SetPoint.exe

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-06-15 136176]
R3 DrvAgent32;DrvAgent32;c:\windows\system32\Drivers\DrvAgent32.sys [2010-06-25 23456]
R3 MatSvc;Microsoft Automated Troubleshooting Service;c:\program files\Microsoft Fix it Center\Matsvc.exe [2010-04-10 266544]
R3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2010-02-26 137344]
R3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [2010-02-26 8320]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-05-19 1343400]
R4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys [2010-06-30 691696]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-04-07 114984]
S2 cpuz133;cpuz133;c:\windows\system32\drivers\cpuz133_x32.sys [2010-03-30 20968]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-04-07 133512]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [2010-04-07 810120]
S2 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [2010-04-07 41312]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-07-09 248936]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [2010-06-21 105576]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2010-09-18 267880]

.
Obsah adresáře 'Naplánované úlohy'

2010-09-27 c:\windows\Tasks\AWC Startup.job
- c:\program files\IObit\Advanced SystemCare 3\AWC.exe [2010-05-10 13:10]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.battlefieldheroes.com/en/
uInternet Settings,ProxyServer = http=;ftp=;https=;
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000
IE: Stahnou vse FlashGet3
IE: Stahnout FlashGet3
IE: {{bb7f932c-881f-4b88-837d-cf84adff062b} - {707f6b7e-a2f2-490e-b857-38fcd1a2326b} - mscoree.dll
FF - ProfilePath - c:\users\ToRTeEn\AppData\Roaming\Mozilla\Firefox\Profiles\iabqznf3.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.battlefieldheroes.com/en/
FF - prefs.js: network.proxy.type - 0
FF - component: c:\program files\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}\components\Contribute.dll
FF - component: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordext.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-3595803208-3766525656-3816774015-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
.
Celkový čas: 2010-09-27 21:38:40
ComboFix-quarantined-files.txt 2010-09-27 19:38
ComboFix2.txt 2010-09-27 18:28

Před spuštěním: 9 311 780 864
Po spuštění: 9 266 561 024

- - End Of File - - 07C31F3CF1E35F239CBCA47132FB5C03

[vyosek]

Jak se chova PC

[Thooty]

V pořádku a mohu se zeptat zda tam byla nějaká závažná havěť nebo jen něco "drobného" ?

[vyosek]

Hlavni haveti byl Ask.com - je to adware - takova mala mrska ale nic vazneho...

Ted neco malo uklidu po smrdutych utilitach
Odinstalujte Combofix

• Start - Spustit (nebo pouzijte klavesobou zkratku Win+R)
• Napiste ComboFix /Uninstall
• Stisknete Enter
• Tohle smaze Combofix a jeho slozky

T-Cleaner http://sweb.cz/Marinus/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

Havet se usadila v bodech obnoveni - smazte je dle navodu kolegy riffa http://www.viry.cz/forum/viewtopic.php?f=11&t=47040

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner (viz muj podpis), pri instalaci dejte fajfku pryc u yahoo toolbaru
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za 14 dni

Vlozte novy log ze RSIT

[Thooty]

Nešel mi spust T-Cleaner, psalo to že není platná aplikace typu Win32
CCleaner a Advanced SystemCare používám tak 1x do týdne na pročištění PC :)
Zde je log z RSIT avšak bez toho pročištění T-Cleanerem

Logfile of random's system information tool 1.08 (written by random/random)
Run by ToRTeEn at 2010-09-27 22:30:47
Microsoft Windows 7 Ultimate Service Pack 3
System drive C: has 10 GB (13%) free of 76 GB
Total RAM: 1023 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:30:55, on 27.9.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\ToRTeEn\Desktop\RSIT.exe
C:\Program Files\trend micro\ToRTeEn.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.battlefieldheroes.com/en/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=;ftp=;https=;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: (no name) - {074C1DC5-9320-4A9A-947D-C042949C6216} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SoftGate.DownloadManager.IE.DownloadManagerPlugin - {a1acb83b-3713-4784-b2b3-64c6d06565e9} - mscoree.dll (file missing)
O2 - BHO: FlashGetBHO - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {bb7f932c-881f-4b88-837d-cf84adff062b} - mscoree.dll (file missing)
O9 - Extra 'Tools' menuitem: Nova Stahovák - {bb7f932c-881f-4b88-837d-cf84adff062b} - mscoree.dll (file missing)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

--
End of file - 4485 bytes

======Scheduled tasks folder======

C:\Windows\tasks\AWC Startup.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{074C1DC5-9320-4A9A-947D-C042949C6216}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-06-16 341600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a1acb83b-3713-4784-b2b3-64c6d06565e9}]
SoftGate.DownloadManager.IE.DownloadManagerPlugin - C:\Windows\system32\mscoree.dll [2009-11-25 297808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-17 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-04-07 2145000]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EvtMgr6]
C:\Program Files\Logitech\SetPointP\SetPoint.exe [2010-05-18 1311312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2010-05-06 64592]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2010-09-27 22:30:47 ----D---- C:\rsit
2010-09-27 21:38:51 ----SHD---- C:\$RECYCLE.BIN
2010-09-26 20:52:56 ----D---- C:\Program Files\Call of duty Modern Warfare 2
2010-09-24 22:47:38 ----A---- C:\win32.sys
2010-09-18 20:55:44 ----A---- C:\Windows\system32\RtNicProp32.dll
2010-09-18 20:55:44 ----A---- C:\Windows\system32\drivers\Rt86win7.sys
2010-09-18 12:32:00 ----D---- C:\Program Files\Counter Strike 1.6
2010-09-15 21:33:20 ----D---- C:\Program Files\Rockstar Games
2010-09-15 21:04:51 ----D---- C:\Program Files\GTA San Andreas
2010-09-14 20:43:21 ----A---- C:\Windows\system32\iertutil.dll
2010-09-14 20:40:30 ----A---- C:\Windows\system32\spoolsv.exe

======List of files/folders modified in the last 1 months======

2010-09-27 22:30:56 ----D---- C:\Windows\temp
2010-09-27 22:30:50 ----D---- C:\Program Files\trend micro
2010-09-27 22:28:16 ----D---- C:\Windows
2010-09-27 22:23:51 ----D---- C:\Windows\system32\config
2010-09-27 22:20:49 ----D---- C:\ProgramData\NVIDIA
2010-09-27 22:03:14 ----D---- C:\Windows\Prefetch
2010-09-27 21:58:10 ----D---- C:\Windows\ERDNT
2010-09-27 21:33:15 ----A---- C:\Windows\system.ini
2010-09-27 21:33:04 ----D---- C:\Windows\system32\drivers\etc
2010-09-27 21:32:00 ----D---- C:\Program Files
2010-09-27 21:31:59 ----D---- C:\Windows\Tasks
2010-09-27 21:28:02 ----D---- C:\Windows\system32\drivers
2010-09-27 21:28:02 ----D---- C:\Windows\System32
2010-09-27 21:28:02 ----D---- C:\Windows\AppPatch
2010-09-27 21:27:59 ----D---- C:\Program Files\Common Files
2010-09-27 20:08:23 ----SHD---- C:\System Volume Information
2010-09-27 15:53:29 ----D---- C:\Windows\system32\Tasks
2010-09-26 20:07:17 ----D---- C:\Users\ToRTeEn\AppData\Roaming\uTorrent
2010-09-24 20:44:46 ----D---- C:\Program Files\Common Files\Steam
2010-09-24 20:44:13 ----D---- C:\Program Files\Steam
2010-09-24 16:19:23 ----D---- C:\Windows\system32\catroot2
2010-09-24 15:31:59 ----D---- C:\Users\ToRTeEn\AppData\Roaming\Skype
2010-09-24 15:31:09 ----D---- C:\Users\ToRTeEn\AppData\Roaming\skypePM
2010-09-21 10:06:08 ----D---- C:\Users\ToRTeEn\AppData\Roaming\esmska
2010-09-20 11:20:41 ----SHD---- C:\Windows\Installer
2010-09-19 17:20:24 ----SD---- C:\ProgramData\Microsoft
2010-09-19 17:17:23 ----SD---- C:\Users\ToRTeEn\AppData\Roaming\Microsoft
2010-09-19 12:30:44 ----D---- C:\Windows\inf
2010-09-19 12:30:44 ----D---- C:\Program Files\NVIDIA Corporation
2010-09-19 12:30:32 ----D---- C:\Config.Msi
2010-09-19 12:30:02 ----D---- C:\Windows\Help
2010-09-19 12:29:13 ----D---- C:\ProgramData\NVIDIA Corporation
2010-09-19 12:26:31 ----D---- C:\Windows\system32\catroot
2010-09-19 12:26:30 ----D---- C:\Windows\system32\DriverStore
2010-09-19 10:36:11 ----D---- C:\Program Files\Google
2010-09-18 21:31:03 ----D---- C:\Windows\Downloaded Program Files
2010-09-18 21:18:40 ----D---- C:\Users\ToRTeEn\AppData\Roaming\IObit
2010-09-18 21:18:40 ----D---- C:\Program Files\IObit
2010-09-18 20:55:44 ----A---- C:\Windows\system32\RTNUninst32.dll
2010-09-17 19:14:46 ----RSD---- C:\Windows\assembly
2010-09-15 19:56:45 ----D---- C:\Windows\debug
2010-09-15 19:55:00 ----D---- C:\Program Files\CCleaner
2010-09-15 16:21:04 ----D---- C:\Users\ToRTeEn\AppData\Roaming\ICQ
2010-09-14 20:58:44 ----D---- C:\Windows\winsxs
2010-09-14 20:58:17 ----D---- C:\Program Files\Microsoft Silverlight
2010-09-14 20:50:32 ----D---- C:\ProgramData\Microsoft Help
2010-09-14 20:43:40 ----A---- C:\Windows\system32\MRT.exe
2010-09-14 17:49:59 ----D---- C:\Program Files\ICQ7.2

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amdxata;amdxata; C:\Windows\system32\DRIVERS\amdxata.sys [2009-07-14 23616]
R0 CLFS;@%SystemRoot%\system32\clfs.sys,-100; C:\Windows\System32\CLFS.sys [2009-07-14 249408]
R0 CNG;CNG; C:\Windows\System32\Drivers\cng.sys [2009-07-14 369568]
R0 FileInfo;@%SystemRoot%\system32\drivers\fileinfo.sys,-100; C:\Windows\system32\drivers\fileinfo.sys [2009-07-14 58448]
R0 fvevol;@%SystemRoot%\system32\drivers\fvevol.sys,-100; C:\Windows\System32\DRIVERS\fvevol.sys [2009-09-26 194488]
R0 hwpolicy;@%systemroot%\system32\drivers\hwpolicy.sys,-101; C:\Windows\System32\drivers\hwpolicy.sys [2009-07-14 13904]
R0 KSecPkg;KSecPkg; C:\Windows\System32\Drivers\ksecpkg.sys [2009-12-11 133720]
R0 msisadrv;msisadrv; C:\Windows\system32\DRIVERS\msisadrv.sys [2009-07-14 13888]
R0 pcw;Performance Counters for Windows Driver; C:\Windows\System32\drivers\pcw.sys [2009-07-14 43088]
R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2009-07-09 45200]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 spldr;Security Processor Loader Driver; C:\Windows\system32\drivers\spldr.sys [2009-07-14 17472]
R0 storflt;@%SystemRoot%\system32\vmstorfltres.dll,-1000; C:\Windows\system32\DRIVERS\vmstorfl.sys [2009-07-14 40896]
R0 vdrvroot;Ovladač rozpoznávacího modulu virtuální jednotky společnosti Microsoft; C:\Windows\system32\DRIVERS\vdrvroot.sys [2009-07-14 32832]
R0 volmgr;Ovladač správce svazků; C:\Windows\system32\DRIVERS\volmgr.sys [2009-07-14 53312]
R0 volmgrx;@%SystemRoot%\system32\drivers\volmgrx.sys,-100; C:\Windows\System32\drivers\volmgrx.sys [2009-07-14 297040]
R0 Wdf01000;Kernel Mode Driver Frameworks service; C:\Windows\system32\drivers\Wdf01000.sys [2009-07-14 445008]
R1 blbdrive;blbdrive; C:\Windows\system32\DRIVERS\blbdrive.sys [2009-07-14 35328]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 DfsC;@%systemroot%\system32\drivers\dfsc.sys,-101; C:\Windows\System32\Drivers\dfsc.sys [2009-07-14 78336]
R1 discache;@%systemroot%\system32\drivers\discache.sys,-102; C:\Windows\System32\drivers\discache.sys [2009-07-14 32256]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-04-07 114984]
R1 nsiproxy;@%SystemRoot%\system32\drivers\nsiproxy.sys,-2; C:\Windows\system32\drivers\nsiproxy.sys [2009-07-14 16896]
R1 RDPENCDD;@%systemroot%\system32\drivers\RDPENCDD.sys,-101; C:\Windows\system32\drivers\rdpencdd.sys [2009-07-14 6656]
R1 RDPREFMP;@%systemroot%\system32\drivers\RdpRefMp.sys,-101; C:\Windows\system32\drivers\rdprefmp.sys [2009-07-14 7168]
R1 tdx;@%SystemRoot%\system32\tcpipcfg.dll,-50004; C:\Windows\system32\DRIVERS\tdx.sys [2009-07-14 74240]
R1 Wanarpv6;@%systemroot%\system32\rascfg.dll,-32012; C:\Windows\system32\DRIVERS\wanarp.sys [2009-07-14 63488]
R1 WfpLwf;WFP Lightweight Filter; C:\Windows\system32\DRIVERS\wfplwf.sys [2009-07-14 9728]
R2 cpuz133;cpuz133; \??\C:\Windows\system32\drivers\cpuz133_x32.sys [2010-03-30 20968]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-04-07 133512]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-04-07 134488]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-04-07 41312]
R2 lltdio;Link-Layer Topology Discovery Mapper I/O Driver; C:\Windows\system32\DRIVERS\lltdio.sys [2009-07-14 48128]
R2 luafv;@%systemroot%\system32\drivers\luafv.sys,-100; C:\Windows\system32\drivers\luafv.sys [2009-07-14 86528]
R2 PEAUTH;PEAUTH; C:\Windows\system32\drivers\peauth.sys [2009-07-14 586752]
R2 RMCAST;@%SystemRoot%\system32\wshrm.dll,-102; C:\Windows\system32\DRIVERS\RMCAST.sys [2009-07-14 117248]
R2 rspndr;Link-Layer Topology Discovery Responder; C:\Windows\system32\DRIVERS\rspndr.sys [2009-07-14 60928]
R2 tcpipreg;TCP/IP Registry Compatibility; C:\Windows\System32\drivers\tcpipreg.sys [2009-07-14 34816]
R3 bowser;@%systemroot%\system32\browser.dll,-102; C:\Windows\system32\DRIVERS\bowser.sys [2009-07-14 69632]
R3 CompositeBus;Ovladač rozpoznávacího modulu složené sběrnice; C:\Windows\system32\DRIVERS\CompositeBus.sys [2009-07-14 31232]
R3 DXGKrnl;LDDM Graphics Subsystem; C:\Windows\System32\drivers\dxgkrnl.sys [2009-10-02 728648]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-04-07 32584]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-07-14 304128]
R3 HDAudBus;Ovladač sběrnice Microsoft UAA pro zvuk High Definition Audio; C:\Windows\system32\DRIVERS\HDAudBus.sys [2009-07-14 108544]
R3 HidUsb;Ovladač třídy standardu HID Microsoft; C:\Windows\system32\DRIVERS\hidusb.sys [2009-07-14 24064]
R3 intelppm;Ovladač procesoru Intel; C:\Windows\system32\DRIVERS\intelppm.sys [2009-07-14 53760]
R3 kbdhid;Ovladač klávesnice standardu HID; C:\Windows\system32\DRIVERS\kbdhid.sys [2009-07-14 28160]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2010-03-18 38864]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2010-03-18 37328]
R3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\Windows\System32\Drivers\LUsbFilt.Sys [2010-03-18 28624]
R3 monitor;Služba ovladače funkce třídy monitorů Microsoft; C:\Windows\system32\DRIVERS\monitor.sys [2009-07-14 23552]
R3 mouhid;Ovladač myši standardu HID; C:\Windows\system32\DRIVERS\mouhid.sys [2009-07-14 26112]
R3 mpsdrv;@%SystemRoot%\system32\FirewallAPI.dll,-23092; C:\Windows\System32\drivers\mpsdrv.sys [2009-07-14 60416]
R3 mrxsmb10;@%systemroot%\system32\wkssvc.dll,-1004; C:\Windows\system32\DRIVERS\mrxsmb10.sys [2010-02-27 221696]
R3 mrxsmb20;@%systemroot%\system32\wkssvc.dll,-1006; C:\Windows\system32\DRIVERS\mrxsmb20.sys [2010-02-27 95744]
R3 NativeWifiP;NativeWiFi Filter; C:\Windows\system32\DRIVERS\nwifi.sys [2009-07-14 267264]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2010-06-22 105576]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2010-07-10 11008040]
R3 RasAgileVpn;WAN Miniport (IKEv2); C:\Windows\system32\DRIVERS\AgileVpn.sys [2009-07-14 49152]
R3 RasSstp;@%systemroot%\system32\sstpsvc.dll,-202; C:\Windows\system32\DRIVERS\rassstp.sys [2009-07-14 75264]
R3 rdpbus;Remote Desktop Device Redirector Bus Driver; C:\Windows\system32\DRIVERS\rdpbus.sys [2009-07-14 18944]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2010-09-18 267880]
R3 srv2;@%systemroot%\system32\srvsvc.dll,-104; C:\Windows\System32\DRIVERS\srv2.sys [2010-06-22 307200]
R3 srvnet;srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [2010-06-22 113664]
R3 umbus;Ovladač sběrnice UMBus Enumerator; C:\Windows\system32\DRIVERS\umbus.sys [2009-07-14 39936]
R3 usbuhci;Ovladač miniportu univerzálního hostitelského řadiče Microsoft USB; C:\Windows\system32\DRIVERS\usbuhci.sys [2009-07-14 24064]
R3 WudfPf;User Mode Driver Frameworks Platform Driver; C:\Windows\system32\drivers\WudfPf.sys [2009-07-14 92672]
S3 1394ohci;1394 OHCI Compliant Host Controller; C:\Windows\system32\DRIVERS\1394ohci.sys [2009-07-14 163328]
S3 AcpiPmi;ACPI Power Meter Driver; C:\Windows\system32\DRIVERS\acpipmi.sys [2009-07-14 9728]
S3 adp94xx;adp94xx; C:\Windows\system32\DRIVERS\adp94xx.sys [2009-07-14 422976]
S3 adpahci;adpahci; C:\Windows\system32\DRIVERS\adpahci.sys [2009-07-14 297552]
S3 adpu320;adpu320; C:\Windows\system32\DRIVERS\adpu320.sys [2009-07-14 146512]
S3 agp440;Intel AGP Bus Filter; C:\Windows\system32\DRIVERS\agp440.sys [2009-07-14 53312]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 amdide;amdide; C:\Windows\system32\DRIVERS\amdide.sys [2009-07-14 14912]
S3 AmdK8;AMD K8 Processor Driver; C:\Windows\system32\DRIVERS\amdk8.sys [2009-07-14 55296]
S3 AmdPPM;AMD Processor Driver; C:\Windows\system32\DRIVERS\amdppm.sys [2009-07-14 52736]
S3 amdsata;amdsata; C:\Windows\system32\DRIVERS\amdsata.sys [2009-07-14 79952]
S3 amdsbs;amdsbs; C:\Windows\system32\DRIVERS\amdsbs.sys [2009-07-14 159312]
S3 AppID;@%systemroot%\system32\appidsvc.dll,-102; C:\Windows\system32\drivers\appid.sys [2009-07-14 50176]
S3 arc;arc; C:\Windows\system32\DRIVERS\arc.sys [2009-07-14 76368]
S3 arcsas;arcsas; C:\Windows\system32\DRIVERS\arcsas.sys [2009-07-14 86608]
S3 b06bdrv;Broadcom NetXtreme II VBD; C:\Windows\system32\DRIVERS\bxvbdx.sys [2009-07-14 430080]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BrFiltLo;Brother USB Mass-Storage Lower Filter Driver; C:\Windows\system32\DRIVERS\BrFiltLo.sys [2009-07-14 13568]
S3 BrFiltUp;Brother USB Mass-Storage Upper Filter Driver; C:\Windows\system32\DRIVERS\BrFiltUp.sys [2009-07-14 5248]
S3 Brserid;Brother MFC Serial Port Interface Driver (WDM); C:\Windows\System32\Drivers\Brserid.sys [2009-07-14 272128]
S3 BrSerWdm;Brother WDM Serial driver; C:\Windows\System32\Drivers\BrSerWdm.sys [2009-07-14 62336]
S3 BrUsbMdm;Brother MFC USB Fax Only Modem; C:\Windows\System32\Drivers\BrUsbMdm.sys [2009-07-14 12160]
S3 BrUsbSer;Brother MFC USB Serial WDM Driver; C:\Windows\System32\Drivers\BrUsbSer.sys [2009-07-14 11904]
S3 BTHMODEM;Bluetooth Serial Communications Driver; C:\Windows\system32\DRIVERS\bthmodem.sys [2009-07-14 56320]
S3 circlass;Consumer IR Devices; C:\Windows\system32\DRIVERS\circlass.sys [2009-07-14 37888]
S3 cpuz132;cpuz132; \??\C:\Users\ToRTeEn\AppData\Local\Temp\cpuz132\cpuz132_x32.sys []
S3 DrvAgent32;DrvAgent32; \??\C:\Windows\system32\Drivers\DrvAgent32.sys [2010-06-25 23456]
S3 ebdrv;Broadcom NetXtreme II 10 GigE VBD; C:\Windows\system32\DRIVERS\evbdx.sys [2009-07-14 3100160]
S3 elxstor;elxstor; C:\Windows\system32\DRIVERS\elxstor.sys [2009-07-14 453712]
S3 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\DRIVERS\errdev.sys [2009-07-14 7168]
S3 exfat;exFAT File System Driver; C:\Windows\system32\drivers\exfat.sys [2009-07-14 142336]
S3 Filetrace;@%SystemRoot%\system32\drivers\filetrace.sys,-10001; C:\Windows\system32\drivers\filetrace.sys [2009-07-14 28160]
S3 FsDepends;@%SystemRoot%\system32\drivers\fsdepends.sys,-10001; C:\Windows\System32\drivers\FsDepends.sys [2009-07-14 46160]
S3 gagp30kx;Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms; C:\Windows\system32\DRIVERS\gagp30kx.sys [2009-07-14 57936]
S3 hcw85cir;Hauppauge Consumer Infrared Receiver; C:\Windows\system32\drivers\hcw85cir.sys [2009-07-14 26624]
S3 HidBatt;HID UPS Battery Driver; C:\Windows\system32\DRIVERS\HidBatt.sys [2009-07-14 21504]
S3 HidBth;Microsoft Bluetooth HID Miniport; C:\Windows\system32\DRIVERS\hidbth.sys [2009-07-14 91136]
S3 HidIr;Microsoft Infrared HID Driver; C:\Windows\system32\DRIVERS\hidir.sys [2009-07-14 37888]
S3 HpSAMD;HpSAMD; C:\Windows\system32\DRIVERS\HpSAMD.sys [2009-07-14 67152]
S3 iaStorV;iaStorV; C:\Windows\system32\DRIVERS\iaStorV.sys [2009-07-14 332352]
S3 iirsp;iirsp; C:\Windows\system32\DRIVERS\iirsp.sys [2009-07-14 41040]
S3 IPMIDRV;IPMIDRV; C:\Windows\system32\DRIVERS\IPMIDrv.sys [2009-07-14 65536]
S3 iScsiPrt;iScsiPort Driver; C:\Windows\system32\DRIVERS\msiscsi.sys [2009-07-14 186960]
S3 LSI_FC;LSI_FC; C:\Windows\system32\DRIVERS\lsi_fc.sys [2009-07-14 95824]
S3 LSI_SAS;LSI_SAS; C:\Windows\system32\DRIVERS\lsi_sas.sys [2009-07-14 89168]
S3 LSI_SAS2;LSI_SAS2; C:\Windows\system32\DRIVERS\lsi_sas2.sys [2009-07-14 54864]
S3 LSI_SCSI;LSI_SCSI; C:\Windows\system32\DRIVERS\lsi_scsi.sys [2009-07-14 96848]
S3 megasas;megasas; C:\Windows\system32\DRIVERS\megasas.sys [2009-07-14 30800]
S3 MegaSR;MegaSR; C:\Windows\system32\DRIVERS\MegaSR.sys [2009-07-14 235584]
S3 mpio;mpio; C:\Windows\system32\DRIVERS\mpio.sys [2009-07-14 130624]
S3 msahci;msahci; C:\Windows\system32\DRIVERS\msahci.sys [2009-07-14 27712]
S3 msdsm;msdsm; C:\Windows\system32\DRIVERS\msdsm.sys [2009-07-14 115792]
S3 mshidkmdf;@%SystemRoot%\system32\drivers\mshidkmdf.sys,-100; C:\Windows\System32\drivers\mshidkmdf.sys [2009-07-14 4096]
S3 MsRPC;MsRPC; C:\Windows\system32\drivers\MsRPC.sys [2009-07-14 162896]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2009-07-14 6144]
S3 MTConfig;Microsoft Input Configuration Driver; C:\Windows\system32\DRIVERS\MTConfig.sys [2009-07-14 12288]
S3 NdisCap;NDIS Capture LightWeight Filter; C:\Windows\system32\DRIVERS\ndiscap.sys [2009-07-14 27136]
S3 nfrd960;nfrd960; C:\Windows\system32\DRIVERS\nfrd960.sys [2009-07-14 44624]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2010-02-26 18176]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2010-02-26 22528]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsu.sys [2010-02-26 137344]
S3 nmwcdnsuc;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsuc.sys [2010-02-26 8320]
S3 nv_agp;NVIDIA nForce AGP Bus Filter; C:\Windows\system32\DRIVERS\nv_agp.sys [2009-07-14 105024]
S3 nvraid;nvraid; C:\Windows\system32\DRIVERS\nvraid.sys [2009-07-14 117312]
S3 nvstor;nvstor; C:\Windows\system32\DRIVERS\nvstor.sys [2009-07-14 142416]
S3 ohci1394;1394 OHCI Compliant Host Controller (Legacy); C:\Windows\system32\DRIVERS\ohci1394.sys [2009-07-14 62464]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 ql2300;ql2300; C:\Windows\system32\DRIVERS\ql2300.sys [2009-07-14 1383488]
S3 ql40xx;ql40xx; C:\Windows\system32\DRIVERS\ql40xx.sys [2009-07-14 106064]
S3 QWAVEdrv;@%SystemRoot%\system32\drivers\qwavedrv.sys,-1; C:\Windows\system32\drivers\qwavedrv.sys [2009-07-14 31744]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sbp2port;sbp2port; C:\Windows\system32\DRIVERS\sbp2port.sys [2009-07-14 85568]
S3 scfilter;@%SystemRoot%\System32\drivers\scfilter.sys,-11; C:\Windows\System32\DRIVERS\scfilter.sys [2009-07-14 26624]
S3 sermouse;Serial Mouse Driver; C:\Windows\system32\DRIVERS\sermouse.sys [2009-07-14 19968]
S3 sffdisk;Ovladač třídy úložiště SFF; C:\Windows\system32\DRIVERS\sffdisk.sys [2009-07-14 11264]
S3 sffp_mmc;Ovladač protokolu úložiště SFF pro konzolu MMC; C:\Windows\system32\DRIVERS\sffp_mmc.sys [2009-07-14 12288]
S3 sffp_sd;Ovladač protokolu úložiště SFF pro paměť sběrnici SDBus; C:\Windows\system32\DRIVERS\sffp_sd.sys [2009-10-10 12800]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 SiSRaid2;SiSRaid2; C:\Windows\system32\DRIVERS\SiSRaid2.sys [2009-07-14 40016]
S3 SiSRaid4;SiSRaid4; C:\Windows\system32\DRIVERS\sisraid4.sys [2009-07-14 77888]
S3 Smb;@%SystemRoot%\system32\tcpipcfg.dll,-50005; C:\Windows\system32\DRIVERS\smb.sys [2009-07-14 71168]
S3 stexstor;stexstor; C:\Windows\system32\DRIVERS\stexstor.sys [2009-07-14 21072]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 TCPIP6;Microsoft IPv6 Protocol Driver; C:\Windows\system32\DRIVERS\tcpip.sys [2010-06-14 1286016]
S3 tssecsrv;@%SystemRoot%\System32\DRIVERS\tssecsrv.sys,-101; C:\Windows\System32\DRIVERS\tssecsrv.sys [2009-07-14 30208]
S3 tunnel;Microsoft Tunnel Miniport Adapter Driver; C:\Windows\system32\DRIVERS\tunnel.sys [2009-07-14 108544]
S3 uagp35;Microsoft AGPv3.5 Filter; C:\Windows\system32\DRIVERS\uagp35.sys [2009-07-14 55888]
S3 uliagpkx;Uli AGP Bus Filter; C:\Windows\system32\DRIVERS\uliagpkx.sys [2009-07-14 57424]
S3 UmPass;Microsoft UMPass Driver; C:\Windows\system32\DRIVERS\umpass.sys [2009-07-14 8192]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2010-02-26 8192]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\Windows\system32\DRIVERS\usbccgp.sys [2009-07-14 75264]
S3 usbcir;eHome Infrared Receiver (USBCIR); C:\Windows\system32\DRIVERS\usbcir.sys [2009-07-14 86016]
S3 usbprint;Microsoft USB PRINTER Class; C:\Windows\system32\DRIVERS\usbprint.sys [2009-07-14 19968]
S3 usbser;USB Modem Driver; C:\Windows\system32\DRIVERS\usbser.sys [2009-07-14 27648]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\Windows\system32\DRIVERS\USBSTOR.SYS [2009-07-14 74752]
S3 vga;vga; C:\Windows\system32\DRIVERS\vgapnp.sys [2009-07-14 26112]
S3 vhdmp;vhdmp; C:\Windows\system32\DRIVERS\vhdmp.sys [2009-07-14 159824]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 vsmraid;vsmraid; C:\Windows\system32\DRIVERS\vsmraid.sys [2009-07-14 141904]
S3 vwifibus;@%SystemRoot%\System32\drivers\vwifibus.sys,-257; C:\Windows\System32\drivers\vwifibus.sys [2009-07-14 19968]
S3 WacomPen;Wacom Serial Pen HID Driver; C:\Windows\system32\DRIVERS\wacompen.sys [2009-07-14 21632]
S3 Wd;Wd; C:\Windows\system32\DRIVERS\wd.sys [2009-07-14 19024]
S3 WIMMount;WIMMount; C:\Windows\system32\drivers\wimmount.sys [2009-07-14 19008]
S3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2009-07-14 11264]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2009-07-14 132224]
S4 crcdisk;Crcdisk Filter Driver; C:\Windows\system32\DRIVERS\crcdisk.sys [2009-07-14 22096]
S4 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-06-30 691696]
S4 ws2ifsl;@%systemroot%\System32\drivers\ws2ifsl.sys,-1000; C:\Windows\system32\drivers\ws2ifsl.sys [2009-07-14 16384]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AudioEndpointBuilder;@%SystemRoot%\system32\audiosrv.dll,-204; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 BFE;@%SystemRoot%\system32\bfe.dll,-1001; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 DPS;@%systemroot%\system32\dps.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-04-07 810120]
R2 fdPHost;@%systemroot%\system32\fdPHost.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 gpsvc;@gpapi.dll,-112; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 IKEEXT;@%SystemRoot%\system32\ikeext.dll,-501; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 MMCSS;@%systemroot%\system32\mmcss.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 MpsSvc;@%SystemRoot%\system32\FirewallAPI.dll,-23090; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 netprofm;@%SystemRoot%\system32\netprofm.dll,-202; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 NlaSvc;@%SystemRoot%\System32\nlasvc.dll,-1; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 nsi;@%SystemRoot%\system32\nsisvc.dll,-200; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-07-09 129640]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2010-07-18 75064]
R2 Power;@%SystemRoot%\system32\umpo.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 ProfSvc;@%systemroot%\system32\profsvc.dll,-300; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 RpcEptMapper;@%windir%\system32\RpcEpMap.dll,-1001; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-07-09 248936]
R2 SysMain;@%SystemRoot%\system32\sysmain.dll,-1000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 UxSms;@%SystemRoot%\system32\dwm.exe,-2000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 WinDefend;@%ProgramFiles%\Windows Defender\MsMpRes.dll,-103; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 WSearch;Windows Search; C:\Windows\system32\SearchIndexer.exe [2009-07-14 428032]
R2 wudfsvc;@%SystemRoot%\system32\wudfsvc.dll,-1000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 AeLookupSvc;@%SystemRoot%\system32\aelupsvc.dll,-1; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 Appinfo;@%systemroot%\system32\appinfo.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 KeyIso;@keyiso.dll,-100; C:\Windows\system32\lsass.exe [2009-07-14 22528]
R3 PcaSvc;@%SystemRoot%\system32\pcasvc.dll,-1; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 SstpSvc;@%SystemRoot%\system32\sstpsvc.dll,-200; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 TrustedInstaller;@%SystemRoot%\servicing\TrustedInstaller.exe,-100; C:\Windows\servicing\TrustedInstaller.exe [2009-07-14 204800]
R3 WdiServiceHost;@%systemroot%\system32\wdi.dll,-502; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 WdiSystemHost;@%systemroot%\system32\wdi.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 Wlansvc;@%SystemRoot%\System32\wlansvc.dll,-257; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-06-15 136176]
S2 HomeGroupProvider;@%SystemRoot%\System32\provsvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S2 sppsvc;@%SystemRoot%\system32\sppsvc.exe,-101; C:\Windows\system32\sppsvc.exe [2009-07-14 3179520]
S3 AppIDSvc;@%systemroot%\system32\appidsvc.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 AxInstSV;@%SystemRoot%\system32\AxInstSV.dll,-103; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 BDESVC;@%SystemRoot%\system32\bdesvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 bthserv;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 defragsvc;@%SystemRoot%\system32\defragsvc.dll,-101; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 EFS;@%SystemRoot%\system32\efssvc.dll,-100; C:\Windows\System32\lsass.exe [2009-07-14 22528]
S3 ehRecvr;@%SystemRoot%\ehome\ehrecvr.exe,-101; C:\Windows\ehome\ehRecvr.exe [2010-05-09 556032]
S3 ehSched;@%SystemRoot%\ehome\ehsched.exe,-101; C:\Windows\ehome\ehsched.exe [2009-07-14 94720]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-04-07 33560]
S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; C:\Windows\system32\fxssvc.exe [2009-07-14 522752]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2009-06-10 42856]
S3 HomeGroupListener;@%SystemRoot%\System32\ListSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 idsvc;@%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8193; C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2009-06-10 878416]
S3 IPBusEnum;@%systemroot%\system32\IPBusEnum.dll,-102; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 KtmRm;@comres.dll,-2946; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2010-05-06 293456]
S3 lltdsvc;@%SystemRoot%\system32\lltdres.dll,-1; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 MatSvc;@%ProgramFiles%\Microsoft Fix it Center\MatsRes.dll,-9000; C:\Program Files\Microsoft Fix it Center\Matsvc.exe [2010-04-10 266544]
S3 MSiSCSI;@%SystemRoot%\system32\iscsidsc.dll,-5000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 p2pimsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8004; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 p2psvc;@%SystemRoot%\system32\p2psvc.dll,-8006; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 pla;@%systemroot%\system32\pla.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PNRPAutoReg;@%SystemRoot%\system32\pnrpauto.dll,-8002; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PNRPsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 QWAVE;@%SystemRoot%\system32\qwave.dll,-1; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SDRSVC;@%SystemRoot%\system32\sdrsvc.dll,-107; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SensrSvc;@%SystemRoot%\System32\sensrsvc.dll,-1000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-04-27 611840]
S3 SessionEnv;@%SystemRoot%\System32\SessEnv.dll,-1026; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 sppuinotify;@%SystemRoot%\system32\sppuinotify.dll,-103; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2010-09-17 411432]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 TabletInputService;@%SystemRoot%\system32\TabSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 TBS;@%SystemRoot%\system32\tbssvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 THREADORDER;@%systemroot%\system32\mmcss.dll,-102; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 UI0Detect;@%SystemRoot%\system32\ui0detect.exe,-101; C:\Windows\system32\UI0Detect.exe [2009-07-14 35840]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 VaultSvc;@%SystemRoot%\system32\vaultsvc.dll,-1003; C:\Windows\system32\lsass.exe [2009-07-14 22528]
S3 vds;@%SystemRoot%\system32\vds.exe,-100; C:\Windows\System32\vds.exe [2009-07-14 452608]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-05-19 1343400]
S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; C:\Windows\system32\wbengine.exe [2009-07-14 1202688]
S3 WbioSrvc;@%systemroot%\system32\wbiosrvc.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 wcncsvc;@%SystemRoot%\system32\wcncsvc.dll,-3; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WcsPlugInService;@%SystemRoot%\system32\WcsPlugInService.dll,-200; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 Wecsvc;@%SystemRoot%\system32\wecsvc.dll,-200; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 wercplsupport;@%SystemRoot%\System32\wercplsupport.dll,-101; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\wmpnetwk.exe [2009-07-14 1121280]
S3 WPCSvc;@%SystemRoot%\system32\wpcsvc.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 WwanSvc;@%SystemRoot%\System32\wwansvc.dll,-257; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 CertPropSvc;@%SystemRoot%\System32\certprop.dll,-11; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 clr_optimization_v2.0.50727_32;Microsoft .NET Framework NGEN v2.0.50727_X86; C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2009-06-10 66384]
S4 FDResPub;@%systemroot%\system32\fdrespub.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 iphlpsvc;@%SystemRoot%\system32\iphlpsvc.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 Mcx2Svc;@%SystemRoot%\ehome\ehres.dll,-15501; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpPortSharing;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8201; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 SCPolicySvc;@%SystemRoot%\System32\certprop.dll,-13; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 SNMPTRAP;@%SystemRoot%\system32\snmptrap.exe,-3; C:\Windows\System32\snmptrap.exe [2009-07-14 12800]
S4 WerSvc;@%SystemRoot%\System32\wersvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 WinHttpAutoProxySvc;@%SystemRoot%\system32\winhttp.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 WinRM;@%Systemroot%\system32\wsmsvc.dll,-101; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 WPDBusEnum;@%SystemRoot%\system32\wpdbusenum.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]

-----------------EOF-----------------

[vyosek]

Advanced SystemCare doporucuji odinstalovat - jedna se o cinsky smejd, navic databazi haveti ukradli spolecnosti MBAM. Na cisteni staci CCleaner.

Otevrete si poznamkovy blok

• Start->spustit->notepad
• Vlozte text nize

• Kód: Vybrat vše

  Windows Registry Editor Version 5.00
  
  [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{074C1DC5-9320-4A9A-947D-C042949C6216}]
  [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0}]
  [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{bb7f932c-881f-4b88-837d-cf84adff062b}]

• Soubor ulozte jako oprava.reg
• Pri ukladani dejte ulozit jako typ Vsechny soubory (nastevni je uvedeno na obrazku nize)
• 
• Zavrit notepad a spustit dvojklikem oprava.reg
• Pripadny dotaz na zmenu registru potvrdte
• Okno jen problikne a opravi regsitry - soubor muzete smazat

Jinak log vypada OK