VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

prosím o kontrolu

https://forum.viry.cz:443/viewtopic.php?t=108350

Stránka 1 z 2

prosím o kontrolu

Napsal: 09 led 2011 22:13
od _misa_
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:11:53, on 9.1.2011
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16700)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lexmark 3600-4600 Series\lxdxmon.exe
C:\Program Files (x86)\Lexmark 3600-4600 Series\ezprint.exe
C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files (x86)\Opera\opera.exe
C:\Program Files\VLCPortable\VLCPortable.exe
C:\Program Files\VLCPortable\App\VLC\vlc.exe
C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat.exe
C:\Program Files (x86)\ICQ7.2\ICQ.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office12\GR469A~1.DLL
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [lxdxmon.exe] "C:\Program Files (x86) (x86)\Lexmark 3600-4600 Series\lxdxmon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files (x86) (x86)\Lexmark 3600-4600 Series\ezprint.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ICQ] "C:\Program Files (x86)\ICQ7.2\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Připojit k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~2\Office12\GRA32A~1.DLL
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe
O23 - Service: JMB36X - Unknown owner - C:\Windows\SysWOW64\XSrvSetup.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: lxdxCATSCustConnectService - Lexmark International, Inc. - C:\Windows\system32\spool\DRIVERS\x64\3\\lxdxserv.exe
O23 - Service: lxdx_device - - C:\Windows\system32\lxdxcoms.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10583 bytes

Re: prosím o kontrolu

Napsal: 09 led 2011 22:15
od vyosek
Zdravim a pekny vecer preji :)

:arrow: HJT jiz delsi dobu nepouzivame, jedeme na RSITu - je podrobnejsi, ale ja mam na 64bit OS radeji OTL, proto Vas poprosim o sken pomoci nej - navod nize

:arrow: Jsou s PC nejake problemy :???:

:arrow: Stahnete OTL (viz muj podpis) a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
  • Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
  • Zaskrtnete okenko Pro vsechny uzivatele
  • Zaskrtnete okenko Kontrola na havet "LOP"
  • Zaskrtnete okenko Kontrola na havet "Purity"
  • Stari souboru zmente z 30 dnu na 7 dnu
  • Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

  • Kód: Vybrat vše

    netsvcs
drivers32
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
c:\windows\*.* /U
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
symmpi.sys
adp3132.sys
mv61xx.sys
nvraid.sys
ndis.sys
winlogon.exe
explorer.exe
userinit.exe
lsass.exe
svchost.exe
smss.exe
hal.dll
ws2_32.dll
tcpip.sys
cryptsvc.dll
Changer.sys
JakNDis.sys
isapnp.sys
cdrom.sys
autochk.exe
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
CREATERESTOREPOINT
  • Kliknete na tlacitko Prohledat
  • Po dokonceni skenu (cca 5 az 10 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte

Re: prosím o kontrolu

Napsal: 09 led 2011 23:01
od _misa_
PC se mi zdá pomalejší, ale možná je to jen zdání... přikládám logy:

OTL Extras logfile created on: 9.1.2011 22:44:28 - Run 1
OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\misa\Desktop
64bit- An unknown product (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 56,00% Memory free
8,00 Gb Paging File | 6,00 Gb Available in Paging File | 75,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 931,41 Gb Total Space | 544,34 Gb Free Space | 58,44% Space Free | Partition Type: NTFS
Drive D: | 629,86 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: MISA-PC | User Name: misa | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software)
.url[@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software)
.url [@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found
http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [Browse with &IrfanView] -- "C:\Program Files (x86)\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [JpegResamplerDir] -- "C:\Program Files (x86)\JPEG Resampler\JpegResampler.exe" "%1" (David Macek)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Browse with &IrfanView] -- "C:\Program Files (x86)\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [JpegResamplerDir] -- "C:\Program Files (x86)\JPEG Resampler\JpegResampler.exe" "%1" (David Macek)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{790E02A1-145A-3843-8C13-A4F41C9B48B7}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0405-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Czech) 2007
"{A324DC11-FF02-3CE8-9D6F-67EBC006D970}" = Microsoft .NET Framework 4 Extended CSY Language Pack
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Ovladač 3D Vision 260.99
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Ovládací panel NVIDIA 260.99
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Ovladače grafiky 260.99
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Systémový software PhysX 9.10.0514
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA Ovladač HD audia 1.1.9.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Lexmark 3600-4600 Series" = Lexmark 3600-4600 Series
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended CSY Language Pack" = Microsoft .NET Framework 4 Extended CSY Language Pack
"WinRAR archiver" = WinRAR

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{34BDC9DA-9320-491C-AA40-B0D98A0EBA9C}" = aerosoft's - Mega Airport Frankfurt - FS2004
"{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = Gigabyte Raid Configurer
"{46464A5D-7D14-41E3-9C26-E3C186F37D84}" = aerosoft's - German Airports 2 - Cologne-Bonn - FS2004
"{46559469-7C15-49F4-BB76-21480BE1BEF4}" = Real Environment Xtreme FS2004
"{51D199F4-5593-4BC9-B2A5-BB1CDE0C894A}" = aerosoft's - Mega Airport Paris CDG
"{555C7DA8-8A43-4A5B-A5FB-137C07AA81D0}" = aerosoft's - Approaching Innsbruck 2004
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}" = ICQ7.2
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows 7
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2007
"{97679567-0095-464E-B5F2-E218A1CF3421}" = PMDG747_400 Queen of the Skies
"{97C0EA4A-1A0B-4C53-ACEB-49984DA79C90}" = Google Earth
"{9FA69AFA-B57D-4CAE-BD14-3D28F9C76812}" = Overland - Incheon International Airport (RKSI)
"{A9B9F552-FE23-40A5-9763-E61BA9A3E026}" = aerosoft's - German Airports 2 - Hannover - FS2004
"{AC76BA86-1029-4770-7760-000000000004}" = Adobe Acrobat 9 Pro - Czech, Hungarian, Polish, Slovak
"{AC76BA86-1029-4770-7760-000000000004}{AC76BA86-1029-4770-7760-000000000004}" = Adobe Acrobat 9 Pro - Czech, Hungarian, Polish, Slovak
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
"{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars
"{D234EAC0-7D49-492F-97EC-8FA09FD7C1C4}" = aerosoft's - German Airports 3 - Hamburg
"{D41CAD6D-DB4C-4D7C-BABA-D1A4B1599741}" = aerosoft's - German Airports 3-Berlin Tegel
"{D4FB2856-E6EB-4864-A241-4587ED21A11B}" = aerosoft's - Brussels 2007
"{D7BF9739-8A68-4335-BBEE-37752AD9E86B}" = NEC Electronics USB 3.0 Host Controller Driver
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.1
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"737 Pilot in Command" = 737 Pilot in Command
"763v2" = Level-D Simulations 767-300
"763v21" = Level-D Simulations 767-300 Update
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Airbus Series Vol.1 Deluxe (FS2004)" = Airbus Series Vol.1 Deluxe (FS2004)
"Antalya 2010" = Antalya 2010
"avast5" = avast! Free Antivirus
"Boeing 737 Fuel Planner 1.5a" = Boeing 737 Fuel Planner 1.5a
"Boeing 757 Professional 20061.1" = Boeing 757 Professional 2006
"Carenado C 152 II" = Carenado C 152 II
"Carenado Cessna Skylane 182 RG II" = Carenado Cessna Skylane 182 RG II
"Carenado Mooney M20J" = Carenado Mooney M20J
"CARENADO PA-34 200T SENECA II FS9" = CARENADO PA-34 200T SENECA II FS9
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Flight Simulator 9.0" = Microsoft Flight Simulator 2004 A Century of Flight
"FS Global 2010" = FS Global 2010
"FSDreamTeam Geneva FS9_is1" = FSDreamTeam Geneva FS9 1.1
"FSDreamTeam Honolulu International FS9_is1" = FSDreamTeam Honolulu International FS9 1.0.3
"FSDreamTeam Zurich9_is1" = FSDreamTeam Zurich9 1.3.1
"FSFDT FSCopilot" = FSFDT FSCopilot
"FSFDT FSInn" = FSFDT FSInn
"FSFDT VIP Standard 2004" = FSFDT VIP Standard 2004
"Ground Environment Professional" = Ground Environment Professional
"ICQToolbar" = ICQ Toolbar
"InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}" = NEC Electronics USB 3.0 Host Controller Driver
"IrfanView" = IrfanView (remove only)
"IvAe_is1" = IvAe v1.0.4 (b322)
"IvAp_is1" = IvAp v1.3.8 (b2150)
"JPEG Resampler_is1" = JPEG Resampler Vs 5.0
"Mega Scenery Zvartnots - Armenia 2008 for FS2004 1.00" = Mega Scenery Zvartnots - Armenia 2008 for FS2004 1.00
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Opera 11.00.1156" = Opera 11.00
"PIPER PA-28RT 201 ARROW IV FS2004" = PIPER PA-28RT 201 ARROW IV FS2004
"PSS - Boeing 757 Pro. v1.3" = PSS - Boeing 757 Pro. v1.3
"skAI Traffic v2.3" = skAI Traffic v2.3
"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2
"TSS Boeing 757 Rolls Royce RB211 sound" = TSS Boeing 757 Rolls Royce RB211 sound
"Ultimate Terrain - Europe" = Ultimate Terrain - Europe
"UltraISO_is1" = UltraISO Premium V9.35
"uTorrent" = µTorrent
"VDrift" = VDrift (remove only)
"Xilisoft Video Converter Ultimate" = Xilisoft Video Converter Ultimate 6
"X-treme King Air B200v.2.0.1" = X-treme King Air B200 v.2.0.1

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-2061425564-3327918732-4186191661-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"035173a7f2a224dd" = vroute.info
"Aerosoft Mega Airport Munich" = Aerosoft Mega Airport Munich
"Carenado's C172N Skyhawk II FS2004" = Carenado's C172N Skyhawk II FS2004
"PA-28-181 ARCHER II FS9" = PA-28-181 ARCHER II FS9

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 9.1.2011 9:44:37 | Computer Name = misa-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: fs9.exe, verze: 9.1.0.40901, časové razítko:
0x4135a208 Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód
výjimky: 0xc0000096 Posun chyby: 0x04246c8c ID chybujícího procesu: 0xdd4 Čas spuštění
chybující aplikace: 0x01cbb0010a7fd01a Cesta k chybující aplikaci: C:\Program Files
(x86)\Microsoft Games\Flight Simulator 9\fs9.exe Cesta k chybujícímu modulu: unknown
ID
zprávy: 99585019-1bf6-11e0-b076-1c6f653ce7c0

Error - 9.1.2011 9:44:37 | Computer Name = misa-PC | Source = Application Error | ID = 1005
Description = Systém Windows nemůže získat přístup k souboru z jednoho z těchto
důvodů: došlo k problému s připojením k síti, s diskem, na kterém je soubor uložen,
nebo s ovladači ukládání nainstalovanými v tomto počítači; nebo disk chybí. Systém
Windows kvůli této chybě ukončil program Microsoft Flight Simulator. Program: Microsoft
Flight Simulator Soubor: Hodnota chyby je uvedena v části Další údaje. Akce uživatele
1.
Otevřete soubor znovu. Může se jednat o dočasný problém, který se při novém spuštění
programu nebude opakovat. 2. Pokud k souboru stále nelze získat přístup a: - Nachází
se v síti, měl by správce sítě ověřit, zda nedošlo k problému se sítí a zda lze
server kontaktovat. - Je na vyměnitelném disku (například disketě nebo disku CD-ROM),
ověřte, zda je disk správně vložen do počítače. 3. Zkontrolujte a opravte systém
souborů pomocí nástroje CHKDSK. Ten lze spustit tak, že kliknete na tlačítko Start
a příkaz Spustit, zadáte příkaz CMD a kliknete na tlačítko OK. Do příkazového řádku
zadejte příkaz CHKDSK /F a stiskněte klávesu ENTER. 4. Pokud potíže potrvají, obnovte
soubor ze záložní kopie. 5. Zjistěte, zda lze otevřít jiné soubory na stejném disku.
Pokud ne, může být disk poškozen. Jedná-li se o pevný disk, obraťte se na správce
nebo na dodavatele počítačového hardwaru se žádostí o pomoc. Další údaje Hodnota chyby:
00000000 Typ disku: 0

Error - 9.1.2011 9:44:39 | Computer Name = misa-PC | Source = | ID = 0
Description =

Error - 9.1.2011 9:44:39 | Computer Name = misa-PC | Source = | ID = 0
Description =

Error - 9.1.2011 10:02:35 | Computer Name = misa-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: fs9.exe, verze: 9.1.0.40901, časové razítko:
0x4135a208 Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód
výjimky: 0xc0000005 Posun chyby: 0x04246c81 ID chybujícího procesu: 0xd9c Čas spuštění
chybující aplikace: 0x01cbb0035e56ca2f Cesta k chybující aplikaci: C:\Program Files
(x86)\Microsoft Games\Flight Simulator 9\fs9.exe Cesta k chybujícímu modulu: unknown
ID
zprávy: 1bcf2ce7-1bf9-11e0-b076-1c6f653ce7c0

Error - 9.1.2011 10:02:37 | Computer Name = misa-PC | Source = | ID = 0
Description =

Error - 9.1.2011 10:02:37 | Computer Name = misa-PC | Source = | ID = 0
Description =

Error - 9.1.2011 10:16:31 | Computer Name = misa-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: fs9.exe, verze: 9.1.0.40901, časové razítko:
0x4135a208 Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód
výjimky: 0xc0000005 Posun chyby: 0x04246c81 ID chybujícího procesu: 0x8e4 Čas spuštění
chybující aplikace: 0x01cbb005de49a2f0 Cesta k chybující aplikaci: C:\Program Files
(x86)\Microsoft Games\Flight Simulator 9\fs9.exe Cesta k chybujícímu modulu: unknown
ID
zprávy: 0e16c62f-1bfb-11e0-b076-1c6f653ce7c0

Error - 9.1.2011 10:16:33 | Computer Name = misa-PC | Source = | ID = 0
Description =

Error - 9.1.2011 10:16:33 | Computer Name = misa-PC | Source = | ID = 0
Description =

[ System Events ]
Error - 8.1.2011 10:01:08 | Computer Name = misa-PC | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 8.1.2011 10:01:30 | Computer Name = misa-PC | Source = DCOM | ID = 10010
Description =

Error - 8.1.2011 10:01:35 | Computer Name = misa-PC | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 8.1.2011 10:01:44 | Computer Name = misa-PC | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 8.1.2011 10:01:53 | Computer Name = misa-PC | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 8.1.2011 10:02:02 | Computer Name = misa-PC | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 8.1.2011 10:02:11 | Computer Name = misa-PC | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 8.1.2011 10:02:20 | Computer Name = misa-PC | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 9.1.2011 8:54:15 | Computer Name = misa-PC | Source = Service Control Manager | ID = 7009
Description = Při čekání na připojení služby lxdxCATSCustConnectService bylo dosaženo
časového limitu (30000 ms).

Error - 9.1.2011 8:54:15 | Computer Name = misa-PC | Source = Service Control Manager | ID = 7000
Description = Služba lxdxCATSCustConnectService neuspěla při spuštění v důsledku
následující chyby: %%1053


< End of report >

Re: prosím o kontrolu

Napsal: 09 led 2011 23:03
od _misa_
OTL logfile created on: 9.1.2011 22:44:28 - Run 1
OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\misa\Desktop
64bit- An unknown product (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 56,00% Memory free
8,00 Gb Paging File | 6,00 Gb Available in Paging File | 75,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 931,41 Gb Total Space | 544,34 Gb Free Space | 58,44% Space Free | Partition Type: NTFS
Drive D: | 629,86 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: MISA-PC | User Name: misa | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011.01.09 22:42:42 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\misa\Desktop\OTL.exe
PRC - [2011.01.05 09:18:50 | 000,133,432 | ---- | M] (ICQ, LLC.) -- C:\Program Files (x86)\ICQ7.2\ICQ.exe
PRC - [2010.12.25 16:50:32 | 000,651,720 | ---- | M] (Macrovision Europe Ltd.) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
PRC - [2010.12.22 20:20:47 | 000,944,496 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.exe
PRC - [2010.10.16 11:46:40 | 000,369,256 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2010.09.07 17:12:02 | 002,838,912 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2010.09.07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2010.09.06 18:56:38 | 000,247,096 | ---- | M] () -- C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe
PRC - [2010.02.04 01:28:07 | 000,107,176 | ---- | M] (Lexmark International Inc.) -- C:\Program Files (x86)\Lexmark 3600-4600 Series\ezprint.exe
PRC - [2010.01.19 03:31:26 | 000,072,304 | R--- | M] () -- C:\Windows\SysWOW64\XSrvSetup.exe
PRC - [2009.11.20 12:17:54 | 000,106,496 | ---- | M] (NEC Electronics Corporation) -- C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
PRC - [2009.10.30 12:28:54 | 000,135,592 | ---- | M] () -- C:\Program Files\VLCPortable\App\VLC\vlc.exe
PRC - [2009.09.22 21:57:48 | 000,071,341 | ---- | M] (PortableAppZ.blogspot.com) -- C:\Program Files\VLCPortable\VLCPortable.exe
PRC - [2008.06.12 02:25:18 | 000,353,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat.exe
PRC - [2008.06.11 22:43:26 | 000,640,376 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
PRC - [2008.03.20 07:25:42 | 000,668,328 | ---- | M] () -- C:\Program Files (x86)\Lexmark 3600-4600 Series\lxdxmon.exe


========== Modules (SafeList) ==========

MOD - [2011.01.09 22:42:42 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\misa\Desktop\OTL.exe
MOD - [2010.08.21 06:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2010.09.07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner)
SRV:64bit: - [2010.09.07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner)
SRV:64bit: - [2010.09.07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2009.07.14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009.07.14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:64bit: - [2008.02.28 01:53:31 | 001,044,648 | ---- | M] ( ) [Auto | Running] -- C:\Windows\SysNative\lxdxcoms.exe -- (lxdx_device)
SRV:64bit: - [2008.02.28 01:53:29 | 000,033,960 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysNative\spool\DRIVERS\x64\3\\lxdxserv.exe -- (lxdxCATSCustConnectService)
SRV - [2010.12.25 16:50:32 | 000,651,720 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010.10.16 11:46:40 | 000,369,256 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2010.09.06 18:56:38 | 000,247,096 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe -- (ICQ Service)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.01.19 03:31:26 | 000,072,304 | R--- | M] () [Auto | Running] -- C:\Windows\SysWOW64\XSrvSetup.exe -- (JMB36X)
SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008.02.28 01:53:25 | 000,594,600 | ---- | M] ( ) [Auto | Running] -- C:\Windows\SysWow64\lxdxcoms.exe -- (lxdx_device)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2010.09.07 21:08:55 | 000,155,752 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2010.09.07 16:47:33 | 000,061,008 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2010.03.04 14:43:00 | 000,346,144 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2010.01.27 09:58:38 | 000,115,312 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\jraid.sys -- (JRAID)
DRV:64bit: - [2009.11.20 12:16:02 | 000,177,152 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV:64bit: - [2009.11.20 12:15:58 | 000,075,776 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)
DRV:64bit: - [2009.07.14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009.07.14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 21:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2009.02.10 17:23:10 | 000,115,600 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys -- (ISODrive)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-2061425564-3327918732-4186191661-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
IE - HKU\S-1-5-21-2061425564-3327918732-4186191661-1000\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-2061425564-3327918732-4186191661-1000\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKU\S-1-5-21-2061425564-3327918732-4186191661-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKU\S-1-5-21-2061425564-3327918732-4186191661-1000\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [EzPrint] C:\Program Files (x86)\Lexmark 3600-4600 Series\ezprint.exe (Lexmark International Inc.)
O4:64bit: - HKLM..\Run: [lxdxmon.exe] C:\Program Files (x86)\Lexmark 3600-4600 Series\lxdxmon.exe ()
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [EzPrint] C:\Program Files (x86) (x86)\Lexmark 3600-4600 Series\ezprint.exe File not found
O4 - HKLM..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe ()
O4 - HKLM..\Run: [lxdxmon.exe] C:\Program Files (x86) (x86)\Lexmark 3600-4600 Series\lxdxmon.exe File not found
O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (NEC Electronics Corporation)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2061425564-3327918732-4186191661-1000..\Run: [ICQ] C:\Program Files (x86)\ICQ7.2\ICQ.exe (ICQ, LLC.)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\S-1-5-21-2061425564-3327918732-4186191661-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8:64bit: - Extra context menu item: Převést cíl vazby do Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Převést do Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Připojit cíl vazby k existujícímu PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Připojit k existujícímu PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Převést do Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Připojit k existujícímu PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/pub/s ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18:64bit: - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2003.05.27 05:45:29 | 000,000,042 | R--- | M] () - D:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{a9fecdc2-0dfa-11e0-9e79-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{a9fecdc2-0dfa-11e0-9e79-806e6f6e6963}\Shell\AutoRun\command - "" = D:\STUB.EXE -- [2003.02.17 21:10:16 | 000,024,576 | R--- | M] ()
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lhacm - C:\Windows\SysWow64\lhacm.acm (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011.01.09 22:42:42 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\misa\Desktop\OTL.exe
[2011.01.09 22:11:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Trend Micro
[2011.01.09 21:08:27 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\skypePM
[2011.01.09 21:07:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2011.01.09 21:07:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2011.01.09 21:07:07 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2011.01.09 21:07:06 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Skype
[2011.01.09 21:07:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2011.01.09 15:41:10 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\vlc
[2011.01.08 14:44:27 | 000,000,000 | ---D | C] -- C:\Users\misa\Desktop\MTA
[2011.01.08 02:58:30 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM
[2011.01.08 02:58:12 | 002,578,576 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll
[2011.01.08 02:58:12 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
[2011.01.08 02:58:12 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
[2011.01.08 02:58:12 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
[2011.01.08 02:58:12 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
[2011.01.08 02:58:11 | 002,828,904 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll
[2011.01.08 02:58:11 | 002,328,168 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll
[2011.01.08 02:58:11 | 002,197,264 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ.dll
[2011.01.08 02:58:11 | 001,868,944 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek.dll
[2011.01.08 02:58:11 | 001,718,616 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEP64A.dll
[2011.01.08 02:58:11 | 001,247,848 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll
[2011.01.08 02:58:11 | 001,146,984 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl
[2011.01.08 02:58:11 | 000,626,792 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll
[2011.01.08 02:58:11 | 000,608,768 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoRes64.dat
[2011.01.08 02:58:11 | 000,421,720 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EED64A.dll
[2011.01.08 02:58:11 | 000,375,128 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll
[2011.01.08 02:58:11 | 000,341,336 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO30.dll
[2011.01.08 02:58:11 | 000,334,680 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVolumeSDAPO.dll
[2011.01.08 02:58:11 | 000,332,392 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtlCPAPI64.dll
[2011.01.08 02:58:11 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
[2011.01.08 02:58:11 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll
[2011.01.08 02:58:11 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll
[2011.01.08 02:58:11 | 000,220,496 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFNHK64.dll
[2011.01.08 02:58:11 | 000,204,120 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll
[2011.01.08 02:58:11 | 000,149,608 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll
[2011.01.08 02:58:11 | 000,127,832 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEL64A.dll
[2011.01.08 02:58:11 | 000,121,744 | ---- | C] (Sony Corporation) -- C:\Windows\SysNative\SFSS_APO.dll
[2011.01.08 02:58:11 | 000,108,888 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEA64A.dll
[2011.01.08 02:58:11 | 000,101,208 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll
[2011.01.08 02:58:11 | 000,083,048 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInst64.dll
[2011.01.08 02:58:11 | 000,081,232 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFCOM64.dll
[2011.01.08 02:58:11 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll
[2011.01.08 02:58:11 | 000,078,160 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFAPO64.dll
[2011.01.08 02:58:11 | 000,074,584 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEG64A.dll
[2011.01.08 02:58:11 | 000,074,064 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysWow64\SFCOM.dll
[2011.01.08 02:58:10 | 001,937,312 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
[2011.01.08 02:58:10 | 001,327,208 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2SpeakerDLL64.dll
[2011.01.08 02:58:10 | 001,179,752 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll
[2011.01.08 02:58:10 | 000,491,112 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSSymmetryDLL64.dll
[2011.01.08 02:58:10 | 000,475,752 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSVoiceClarityDLL64.dll
[2011.01.08 02:58:10 | 000,317,032 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSNeoPCDLL64.dll
[2011.01.08 02:58:10 | 000,269,928 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLimiterDLL64.dll
[2011.01.08 02:58:10 | 000,266,856 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGainCompensatorDLL64.dll
[2011.01.08 02:58:10 | 000,126,056 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLFXAPO64.dll
[2011.01.08 02:58:10 | 000,125,544 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPO64.dll
[2011.01.08 02:58:10 | 000,125,032 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPONS64.dll
[2011.01.08 02:58:09 | 001,111,656 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBoostDLL64.dll
[2011.01.08 02:58:09 | 000,504,936 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBassEnhancementDLL64.dll
[2011.01.08 02:58:09 | 000,200,800 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll
[2011.01.08 02:58:09 | 000,108,960 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAR64.dll
[2011.01.08 02:58:07 | 001,251,944 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll
[2011.01.08 00:43:53 | 000,000,000 | ---D | C] -- C:\Users\misa\My Documents
[2011.01.08 00:42:27 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VDrift
[2011.01.08 00:42:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VDrift
[2011.01.08 00:40:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VDrift
[2011.01.07 18:15:35 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Jpeg Resampler
[2011.01.07 18:09:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JPEG Resampler
[2011.01.07 18:09:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\JPEG Resampler
[2011.01.07 17:45:25 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
[2011.01.07 17:45:15 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\IrfanView
[2011.01.07 17:45:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IrfanView
[2011.01.07 17:34:48 | 000,000,000 | ---D | C] -- C:\Users\misa\Documents\Phone
[2011.01.07 12:23:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0
[2011.01.06 22:32:08 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Xilisoft
[2011.01.06 22:31:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft
[2011.01.06 22:31:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Xilisoft
[2011.01.06 22:08:39 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\dvdcss
[2011.01.06 22:01:28 | 000,000,000 | ---D | C] -- C:\Program Files\VLCPortable
[2011.01.06 14:14:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 6.0 Sprint
[2011.01.06 14:13:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ABBYY FineReader 6.0 Sprint
[2011.01.06 14:05:25 | 001,462,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lxdxg.dll
[2011.01.06 14:03:27 | 000,110,592 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysNative\lxdxwupd.dll
[2011.01.06 14:03:27 | 000,016,040 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysNative\lxdxwupd.exe
[2011.01.06 14:03:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lexmark 3600-4600 Series
[2011.01.06 14:03:24 | 000,364,544 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxinpa.dll
[2011.01.06 14:03:24 | 000,339,968 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxiesc.dll
[2011.01.06 14:03:24 | 000,126,976 | ---- | C] (Lexmark International Inc.) -- C:\Windows\SysWow64\lxdxlnks.dll
[2011.01.06 14:03:23 | 000,983,121 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\lxdxgf.dll
[2011.01.06 14:03:23 | 000,647,168 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxpmui.dll
[2011.01.06 14:03:23 | 000,524,288 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysWow64\lxdxutil.dll
[2011.01.06 14:03:23 | 000,200,704 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysWow64\lxdxinsb.dll
[2011.01.06 14:03:23 | 000,176,128 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysWow64\lxdxins.dll
[2011.01.06 14:03:23 | 000,036,864 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysWow64\lxdxcur.dll
[2011.01.06 14:03:22 | 001,105,920 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxserv.dll
[2011.01.06 14:03:22 | 000,843,776 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxusb1.dll
[2011.01.06 14:03:22 | 000,090,112 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysWow64\lxdxcub.dll
[2011.01.06 14:03:22 | 000,077,824 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysWow64\lxdxcu.dll
[2011.01.06 14:03:21 | 000,663,552 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxhbn3.dll
[2011.01.06 14:03:21 | 000,569,344 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxlmpm.dll
[2011.01.06 14:03:21 | 000,320,168 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxih.exe
[2011.01.06 14:03:21 | 000,053,248 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxprox.dll
[2011.01.06 14:03:20 | 000,851,968 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxcomc.dll
[2011.01.06 14:03:20 | 000,594,600 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxcoms.exe
[2011.01.06 14:03:20 | 000,376,832 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxcomm.dll
[2011.01.06 14:03:20 | 000,365,224 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdxcfg.exe
[2011.01.06 14:03:20 | 000,077,906 | ---- | C] (Lexmark International) -- C:\Windows\SysWow64\LXDXcfg.dll
[2011.01.06 14:03:09 | 000,675,328 | ---- | C] ( ) -- C:\Windows\SysNative\LXDXhcp.dll
[2011.01.06 14:03:08 | 001,319,936 | ---- | C] ( ) -- C:\Windows\SysNative\lxdxusb1.dll
[2011.01.06 14:03:08 | 000,742,400 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysNative\lxdxutil.dll
[2011.01.06 14:03:08 | 000,545,792 | ---- | C] ( ) -- C:\Windows\SysNative\lxdxinpa.dll
[2011.01.06 14:03:08 | 000,509,952 | ---- | C] ( ) -- C:\Windows\SysNative\lxdxiesc.dll
[2011.01.06 14:03:07 | 001,734,144 | ---- | C] ( ) -- C:\Windows\SysNative\lxdxserv.dll
[2011.01.06 14:03:07 | 000,977,920 | ---- | C] ( ) -- C:\Windows\SysNative\lxdxpmui.dll
[2011.01.06 14:03:07 | 000,884,736 | ---- | C] ( ) -- C:\Windows\SysNative\lxdxlmpm.dll
[2011.01.06 14:03:07 | 000,047,104 | ---- | C] ( ) -- C:\Windows\SysNative\lxdxprox.dll
[2011.01.06 14:03:06 | 000,518,824 | ---- | C] ( ) -- C:\Windows\SysNative\lxdxih.exe
[2011.01.06 14:03:06 | 000,235,520 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysNative\lxdxins.dll
[2011.01.06 14:03:06 | 000,183,296 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysNative\lxdxinsb.dll
[2011.01.06 14:03:05 | 001,069,056 | ---- | C] ( ) -- C:\Windows\SysNative\lxdxhbn3.dll
[2011.01.06 14:03:05 | 000,983,121 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lxdxgf.dll
[2011.01.06 14:03:04 | 001,472,512 | ---- | C] ( ) -- C:\Windows\SysNative\lxdxcomc.dll
[2011.01.06 14:03:04 | 001,044,648 | ---- | C] ( ) -- C:\Windows\SysNative\lxdxcoms.exe
[2011.01.06 14:03:04 | 000,578,560 | ---- | C] ( ) -- C:\Windows\SysNative\lxdxcomm.dll
[2011.01.06 14:03:04 | 000,102,400 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysNative\lxdxcu.dll
[2011.01.06 14:03:04 | 000,073,216 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysNative\lxdxcub.dll
[2011.01.06 14:03:04 | 000,022,528 | ---- | C] (Lexmark International, Inc.) -- C:\Windows\SysNative\lxdxcur.dll
[2011.01.06 14:03:03 | 000,603,304 | ---- | C] ( ) -- C:\Windows\SysNative\lxdxcfg.exe
[2011.01.06 14:03:03 | 000,065,536 | ---- | C] (Lexmark International) -- C:\Windows\SysNative\LXDXcfg.dll
[2011.01.06 14:03:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Lexmark 3600-4600 Series
[2011.01.06 14:02:55 | 000,000,000 | ---D | C] -- C:\Program Files\Lexmark 3600-4600 Series
[2011.01.06 13:48:49 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Lexmark Productivity Studio
[2011.01.02 20:07:58 | 000,000,000 | ---D | C] -- C:\Users\misa\Desktop\ltiste
[2010.12.31 12:23:18 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Local\ElevatedDiagnostics
[2010.12.29 13:46:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Ezprint
[2010.12.29 13:46:01 | 000,000,000 | ---D | C] -- C:\drivers
[2010.12.29 13:21:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Lx_cats
[2010.12.29 13:20:39 | 000,000,000 | ---D | C] -- C:\logs
[2010.12.29 13:19:25 | 000,065,536 | ---- | C] (Lexmark International) -- C:\Windows\SysNative\lxdxcfg64.dll
[2010.12.29 13:19:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Lexmark Toolbar
[2010.12.28 14:34:59 | 000,000,000 | ---D | C] -- C:\Users\misa\Documents\LETADLA A VSE OKOLO
[2010.12.28 01:01:32 | 000,000,000 | ---D | C] -- C:\temp
[2010.12.28 00:50:56 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\skAI Traffic v2.3
[2010.12.28 00:50:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\skAI Traffic v2.3
[2010.12.27 21:46:52 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Google
[2010.12.27 21:46:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2010.12.27 21:46:30 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Local\Google
[2010.12.27 21:46:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2010.12.27 18:53:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SS CFM56-7B 700_800
[2010.12.27 13:38:30 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FsPassengers
[2010.12.26 23:25:16 | 000,000,000 | R--D | C] -- C:\Users\misa\Documents\Notes
[2010.12.26 15:21:51 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MPP Aircraft Package
[2010.12.26 15:21:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPP Aircraft Package
[2010.12.26 12:59:07 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP
[2010.12.26 03:36:39 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Antalya 2010
[2010.12.26 03:36:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Antalya 2010
[2010.12.26 03:35:40 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FlyTampa-Dubai
[2010.12.26 03:35:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlyTampa-Dubai
[2010.12.26 03:34:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Overland
[2010.12.26 03:34:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Esellerate
[2010.12.26 03:34:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Overland
[2010.12.26 03:26:35 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FlyTampa
[2010.12.26 03:26:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlyTampa
[2010.12.25 16:52:36 | 000,000,000 | ---D | C] -- C:\ProgramData\FLEXnet
[2010.12.25 16:50:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Macrovision Shared
[2010.12.25 16:50:31 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Local\Adobe
[2010.12.25 16:50:17 | 000,024,416 | R--- | C] (Adobe Systems Inc.) -- C:\Windows\SysNative\AdobePDFUI.dll
[2010.12.25 16:48:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2010.12.25 16:48:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2010.12.25 16:48:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2010.12.25 00:06:01 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr71.dll
[2010.12.25 00:06:01 | 000,143,360 | ---- | C] (Info-ZIP) -- C:\Windows\SysWow64\Unzip32.dll
[2010.12.25 00:06:01 | 000,124,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSWINSCK.OCX
[2010.12.25 00:06:01 | 000,057,344 | ---- | C] (CodeGuru) -- C:\Windows\SysWow64\CGZipLibrary.dll
[2010.12.25 00:06:01 | 000,049,152 | ---- | C] (Donia Software) -- C:\Windows\SysWow64\DSPing.dll
[2010.12.25 00:06:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IVAO
[2010.12.25 00:05:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IVAO
[2010.12.24 16:11:50 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\teamspeak2
[2010.12.24 16:11:45 | 000,034,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\lhacm.acm
[2010.12.24 16:11:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Teamspeak2 RC2
[2010.12.24 16:11:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Teamspeak2_RC2
[2010.12.23 20:22:22 | 000,000,000 | ---D | C] -- C:\Users\misa\Documents\Navody
[2010.12.23 20:01:01 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\vroute
[2010.12.23 20:00:51 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Local\Deployment
[2010.12.23 20:00:51 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Local\Apps
[2010.12.23 16:48:09 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TSS Boeing 757 Rolls Royce RB211 sound
[2010.12.23 16:47:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TSS Boeing 757 Rolls Royce RB211 sound
[2010.12.23 16:45:57 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PSS - Boeing 757 Pro. 2006 v1.3
[2010.12.23 16:45:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PSS - Boeing 757 Pro. 2006 v1.3
[2010.12.23 16:44:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Boeing 757 Professional 2006
[2010.12.23 16:40:39 | 000,000,000 | ---D | C] -- C:\Windows\Boeing 757 Professional 2006
[2010.12.23 16:38:30 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Carenado Mooney M20J
[2010.12.23 15:40:59 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\InstallShield
[2010.12.23 15:23:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aerosoft
[2010.12.23 15:06:06 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Carenado C 152 II
[2010.12.23 15:03:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CARENADO PA-34 200T SENECA II FS9
[2010.12.23 15:02:46 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Carenado Cessna Skylane 182 RG II
[2010.12.23 15:02:25 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Carenado's C172N Skyhawk II FS2004
[2010.12.23 15:02:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Carenado C 152 II
[2010.12.23 15:01:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\X-treme King Air B200 v.2.0.1
[2010.12.23 14:51:18 | 000,737,280 | ---- | C] (Indigo Rose Corporation) -- C:\Windows\iun6002.exe
[2010.12.23 14:33:02 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wilco Publishing
[2010.12.23 14:27:38 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PMDG Simulations
[2010.12.23 14:27:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PMDG Simulations
[2010.12.23 14:23:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wilco Publishing
[2010.12.23 14:00:48 | 000,000,000 | ---D | C] -- C:\Users\misa\Documents\Konverzace
[2010.12.23 13:52:41 | 000,000,000 | ---D | C] -- C:\Users\misa\Documents\Multicrew comunication
[2010.12.23 13:51:52 | 000,000,000 | R--D | C] -- C:\Users\misa\Desktop\Hudba
[2010.12.23 13:19:04 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flight One Software
[2010.12.23 12:27:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2010.12.23 12:26:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Works
[2010.12.23 12:26:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio
[2010.12.23 12:26:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
[2010.12.23 12:26:02 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2010.12.23 12:26:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2010.12.23 12:25:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FsPassengers
[2010.12.23 12:24:29 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2010.12.23 12:24:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 8
[2010.12.23 12:23:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2010.12.23 12:23:58 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Local\Microsoft Help
[2010.12.23 12:23:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2010.12.23 12:23:36 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2010.12.23 11:56:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Boeing737FPL
[2010.12.23 11:56:24 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Boeing 737 Fuel Planner
[2010.12.23 11:56:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Boeing 737 Fuel Planner
[2010.12.23 11:52:05 | 000,000,000 | R--D | C] -- C:\Users\misa\Desktop\CSAv
[2010.12.23 11:51:23 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Local\Czech_Airlines_Virtual
[2010.12.23 11:43:12 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VIP Standard
[2010.12.23 11:43:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VIP Standard
[2010.12.23 11:02:12 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Local\Real_Environment_Simulati
[2010.12.23 11:00:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Real Environment Xtreme FS2004
[2010.12.23 11:00:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Real Environment Xtreme FS2004
[2010.12.23 02:51:33 | 000,282,624 | ---- | C] (Jin Hui E-mail: jinhui@jcomsoft.com Web: http://www.jcomsoft.com) -- C:\Windows\SysWow64\AniGIF.ocx
[2010.12.23 02:33:43 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FSFDT
[2010.12.23 02:33:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FSFDT
[2010.12.23 02:33:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FSFDT
[2010.12.23 01:15:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flight One Software
[2010.12.23 00:14:47 | 000,000,000 | ---D | C] -- C:\Users\misa\Documents\hry
[2010.12.23 00:06:08 | 000,000,000 | ---D | C] -- C:\Users\misa\Documents\ICQ
[2010.12.22 23:59:33 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PILOT'S Software
[2010.12.22 23:59:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PILOT'S Software
[2010.12.22 22:46:14 | 000,000,000 | ---D | C] -- C:\FSG2010
[2010.12.22 22:41:22 | 000,000,000 | ---D | C] -- C:\Users\misa\Documents\FS2004
[2010.12.22 22:24:19 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat
[2010.12.22 22:24:17 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat
[2010.12.22 22:11:21 | 001,942,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfshim.dll
[2010.12.22 22:11:21 | 001,130,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfshim.dll
[2010.12.22 22:11:21 | 000,320,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHost.exe
[2010.12.22 22:11:21 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHost.exe
[2010.12.22 22:11:21 | 000,109,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHostProxy.dll
[2010.12.22 22:11:21 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHostProxy.dll
[2010.12.22 22:11:21 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netfxperf.dll
[2010.12.22 22:11:21 | 000,048,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netfxperf.dll
[2010.12.22 22:11:08 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browserchoice.exe
[2010.12.22 22:07:07 | 001,975,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertEnroll.dll
[2010.12.22 22:07:07 | 001,320,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertEnroll.dll
[2010.12.22 22:07:04 | 001,446,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2010.12.22 22:06:54 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40.dll
[2010.12.22 22:06:54 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40u.dll
[2010.12.22 22:06:53 | 001,169,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskschd.dll
[2010.12.22 22:06:53 | 000,524,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmicmiplugin.dll
[2010.12.22 22:06:53 | 000,496,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskschd.dll
[2010.12.22 22:06:53 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskcomp.dll
[2010.12.22 22:06:53 | 000,464,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskeng.exe
[2010.12.22 22:06:53 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskcomp.dll
[2010.12.22 22:06:53 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\schtasks.exe
[2010.12.22 22:06:53 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\schtasks.exe
[2010.12.22 22:06:52 | 002,870,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2010.12.22 22:06:52 | 002,614,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe
[2010.12.22 22:06:52 | 001,572,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll
[2010.12.22 22:06:52 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll
[2010.12.22 22:06:52 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe
[2010.12.22 22:06:51 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\avifil32.dll
[2010.12.22 22:06:51 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciavi32.dll
[2010.12.22 22:06:50 | 002,085,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll
[2010.12.22 22:06:49 | 000,367,104 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2010.12.22 22:06:49 | 000,294,400 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2010.12.22 22:06:49 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2010.12.22 22:06:49 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2010.12.22 22:06:48 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll
[2010.12.22 22:06:48 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll
[2010.12.22 22:06:47 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll
[2010.12.22 22:06:47 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll
[2010.12.22 22:06:46 | 001,024,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll
[2010.12.22 22:06:46 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpmde.dll
[2010.12.22 22:06:46 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll
[2010.12.22 22:06:45 | 000,612,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2010.12.22 22:06:44 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StructuredQuery.dll
[2010.12.22 22:06:44 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msasn1.dll
[2010.12.22 22:06:43 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll
[2010.12.22 22:06:42 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wintrust.dll
[2010.12.22 22:06:35 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2010.12.22 22:06:34 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll
[2010.12.22 22:06:34 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2010.12.22 22:06:34 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2010.12.22 22:06:34 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2010.12.22 22:06:34 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2010.12.22 22:06:34 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2010.12.22 22:06:34 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll

Re: prosím o kontrolu

Napsal: 09 led 2011 23:03
od _misa_
[2010.12.22 22:06:34 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2010.12.22 22:06:34 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2010.12.22 22:06:34 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2010.12.22 22:06:34 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2010.12.22 22:06:34 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2010.12.22 22:06:34 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2010.12.22 22:06:33 | 005,507,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2010.12.22 22:06:32 | 003,955,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2010.12.22 22:06:32 | 003,899,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2010.12.22 22:06:30 | 000,852,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2010.12.22 22:06:30 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2010.12.22 22:06:30 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll
[2010.12.22 22:06:28 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll
[2010.12.22 22:06:28 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cabview.dll
[2010.12.22 22:06:28 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cabview.dll
[2010.12.22 22:06:28 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll
[2010.12.22 22:06:28 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\SysWow64\iccvid.dll
[2010.12.22 22:06:28 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rtutils.dll
[2010.12.22 22:06:27 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rtutils.dll
[2010.12.22 22:06:08 | 014,627,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll
[2010.12.22 22:06:06 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL
[2010.12.22 22:06:06 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL
[2010.12.22 22:06:06 | 011,406,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
[2010.12.22 22:04:33 | 000,112,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe
[2010.12.22 22:04:32 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sscore.dll
[2010.12.22 21:54:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games
[2010.12.22 21:42:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Games
[2010.12.22 21:34:20 | 000,000,000 | ---D | C] -- C:\Users\misa\Documents\Flight Simulator Files
[2010.12.22 21:33:35 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
[2010.12.22 21:12:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\uTorrent
[2010.12.22 21:11:41 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\uTorrent
[2010.12.22 20:58:03 | 000,020,048 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2010.12.22 20:58:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[2010.12.22 20:58:02 | 000,121,936 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2010.12.22 20:57:57 | 000,028,752 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr.sys
[2010.12.22 20:57:50 | 000,051,280 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2010.12.22 20:57:39 | 000,061,008 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2010.12.22 20:55:20 | 000,167,592 | ---- | C] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
[2010.12.22 20:55:20 | 000,038,848 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2010.12.22 20:55:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Alwil Software
[2010.12.22 20:55:18 | 000,000,000 | ---D | C] -- C:\Program Files\Alwil Software
[2010.12.22 20:53:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraISO
[2010.12.22 20:53:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\EZB Systems
[2010.12.22 20:53:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\UltraISO
[2010.12.22 20:53:25 | 000,000,000 | ---D | C] -- C:\Users\misa\Documents\My ISO Files
[2010.12.22 20:52:22 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2010.12.22 20:52:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2010.12.22 20:51:05 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2010.12.22 20:50:08 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\WinRAR
[2010.12.22 20:35:00 | 000,000,000 | ---D | C] -- C:\Users\misa\Documents\filmy + videa
[2010.12.22 20:34:48 | 000,000,000 | ---D | C] -- C:\Users\misa\Documents\demence SP2
[2010.12.22 20:33:06 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Macromedia
[2010.12.22 20:33:06 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Adobe
[2010.12.22 20:33:04 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
[2010.12.22 20:30:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2010.12.22 20:30:09 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2010.12.22 20:29:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
[2010.12.22 20:29:28 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2010.12.22 20:29:18 | 020,284,008 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
[2010.12.22 20:29:18 | 014,899,816 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
[2010.12.22 20:29:18 | 012,788,840 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
[2010.12.22 20:29:18 | 010,023,528 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll
[2010.12.22 20:29:18 | 007,491,688 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll
[2010.12.22 20:29:18 | 006,471,784 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
[2010.12.22 20:29:18 | 005,473,896 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll
[2010.12.22 20:29:18 | 004,837,480 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
[2010.12.22 20:29:18 | 003,112,552 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
[2010.12.22 20:29:18 | 002,934,888 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll
[2010.12.22 20:29:18 | 002,912,360 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
[2010.12.22 20:29:18 | 002,666,600 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll
[2010.12.22 20:29:18 | 001,500,264 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco642050.dll
[2010.12.22 20:29:18 | 001,308,776 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvgenco642030.dll
[2010.12.22 20:29:18 | 001,308,776 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvgenco64.dll
[2010.12.22 20:29:18 | 000,386,152 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdecodemft.dll
[2010.12.22 20:29:18 | 000,319,080 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvdecodemft.dll
[2010.12.22 20:29:18 | 000,155,752 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvhda64v.sys
[2010.12.22 20:29:18 | 000,067,176 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2010.12.22 20:29:18 | 000,057,960 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2010.12.22 20:29:18 | 000,029,288 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhdap64.dll
[2010.12.22 20:29:17 | 018,597,480 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
[2010.12.22 20:29:17 | 013,019,752 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
[2010.12.22 20:29:17 | 002,161,256 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll
[2010.12.22 20:29:17 | 001,719,912 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll
[2010.12.22 20:29:17 | 000,011,240 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvBridge.kmd
[2010.12.22 20:29:09 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2010.12.22 20:28:57 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2010.12.22 20:25:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ICQ7.2
[2010.12.22 20:25:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ICQ6Toolbar
[2010.12.22 20:25:11 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Mozilla
[2010.12.22 20:25:11 | 000,000,000 | ---D | C] -- C:\ProgramData\ICQ
[2010.12.22 20:25:02 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\ICQ
[2010.12.22 20:25:01 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Local\AOL
[2010.12.22 20:25:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ICQ7.2
[2010.12.22 20:20:48 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Opera
[2010.12.22 20:20:48 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Local\Opera
[2010.12.22 20:20:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Opera
[2010.12.22 20:07:54 | 000,000,000 | R--D | C] -- C:\Users\misa\Documents\Obrázky, fotky
[2010.12.22 20:07:50 | 000,000,000 | ---D | C] -- C:\Users\misa\Documents\Opera zalozky
[2010.12.22 20:07:47 | 000,000,000 | ---D | C] -- C:\Users\misa\Documents\Srandicky
[2010.12.22 20:07:23 | 000,000,000 | ---D | C] -- C:\Users\misa\Documents\prace
[2010.12.22 20:06:54 | 000,000,000 | ---D | C] -- C:\Users\misa\Documents\soft
[2010.12.22 19:58:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NEC Electronics
[2010.12.22 19:58:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NEC Electronics
[2010.12.22 19:57:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gigabyte Technology Corp
[2010.12.22 19:57:54 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2010.12.22 19:57:52 | 000,158,320 | R--- | C] (JMicron Technology Corp.) -- C:\Windows\SysWow64\xRaidAPI.dll
[2010.12.22 19:57:48 | 001,976,944 | R--- | C] (Gigabyte Technology Corp.) -- C:\Windows\SysWow64\xRaidSetup.exe
[2010.12.22 19:57:47 | 000,000,000 | ---D | C] -- C:\RaidTool
[2010.12.22 19:57:33 | 000,115,312 | ---- | C] (JMicron Technology Corp.) -- C:\Windows\SysNative\drivers\jraid.sys
[2010.12.22 19:57:32 | 000,000,000 | ---D | C] -- C:\Windows\RaidTool
[2010.12.22 19:57:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Marvell
[2010.12.22 19:56:51 | 000,346,144 | ---- | C] (Realtek ) -- C:\Windows\SysNative\drivers\Rt64win7.sys
[2010.12.22 19:56:51 | 000,107,552 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\SysNative\RTNUninst64.dll
[2010.12.22 19:56:39 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2010.12.22 19:55:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
[2010.12.22 19:55:51 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp
[2010.12.22 19:55:51 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2010.12.22 19:55:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2010.12.22 19:52:51 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2010.12.22 19:52:43 | 000,000,000 | R--D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2010.12.22 19:52:43 | 000,000,000 | R--D | C] -- C:\Users\misa\Searches
[2010.12.22 19:52:43 | 000,000,000 | R--D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2010.12.22 19:52:36 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Identities
[2010.12.22 19:52:35 | 000,000,000 | R--D | C] -- C:\Users\misa\Contacts
[2010.12.22 19:52:34 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Local\VirtualStore
[2010.12.22 19:52:27 | 000,000,000 | --SD | C] -- C:\Users\misa\AppData\Roaming\Microsoft
[2010.12.22 19:52:27 | 000,000,000 | R--D | C] -- C:\Users\misa\Videos
[2010.12.22 19:52:27 | 000,000,000 | R--D | C] -- C:\Users\misa\Saved Games
[2010.12.22 19:52:27 | 000,000,000 | R--D | C] -- C:\Users\misa\Pictures
[2010.12.22 19:52:27 | 000,000,000 | R--D | C] -- C:\Users\misa\Music
[2010.12.22 19:52:27 | 000,000,000 | R--D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2010.12.22 19:52:27 | 000,000,000 | R--D | C] -- C:\Users\misa\Links
[2010.12.22 19:52:27 | 000,000,000 | R--D | C] -- C:\Users\misa\Favorites
[2010.12.22 19:52:27 | 000,000,000 | R--D | C] -- C:\Users\misa\Downloads
[2010.12.22 19:52:27 | 000,000,000 | R--D | C] -- C:\Users\misa\Dokumenty
[2010.12.22 19:52:27 | 000,000,000 | R--D | C] -- C:\Users\misa\Desktop
[2010.12.22 19:52:27 | 000,000,000 | R--D | C] -- C:\Users\misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2010.12.22 19:52:27 | 000,000,000 | -HSD | C] -- C:\Users\misa\AppData\Local\Temporary Internet Files
[2010.12.22 19:52:27 | 000,000,000 | -HSD | C] -- C:\Users\misa\Šablony
[2010.12.22 19:52:27 | 000,000,000 | -HSD | C] -- C:\Users\misa\Soubory cookie
[2010.12.22 19:52:27 | 000,000,000 | -HSD | C] -- C:\Users\misa\SendTo
[2010.12.22 19:52:27 | 000,000,000 | -HSD | C] -- C:\Users\misa\Poslední
[2010.12.22 19:52:27 | 000,000,000 | -HSD | C] -- C:\Users\misa\Okolní tiskárny
[2010.12.22 19:52:27 | 000,000,000 | -HSD | C] -- C:\Users\misa\Okolní síť
[2010.12.22 19:52:27 | 000,000,000 | -HSD | C] -- C:\Users\misa\Documents\Obrázky
[2010.12.22 19:52:27 | 000,000,000 | -HSD | C] -- C:\Users\misa\Nabídka Start
[2010.12.22 19:52:27 | 000,000,000 | -HSD | C] -- C:\Users\misa\Local Settings
[2010.12.22 19:52:27 | 000,000,000 | -HSD | C] -- C:\Users\misa\Documents\Hudba
[2010.12.22 19:52:27 | 000,000,000 | -HSD | C] -- C:\Users\misa\AppData\Local\History
[2010.12.22 19:52:27 | 000,000,000 | -HSD | C] -- C:\Users\misa\Documents\Filmy
[2010.12.22 19:52:27 | 000,000,000 | -HSD | C] -- C:\Users\misa\Dokumenty
[2010.12.22 19:52:27 | 000,000,000 | -HSD | C] -- C:\Users\misa\Data aplikací
[2010.12.22 19:52:27 | 000,000,000 | -HSD | C] -- C:\Users\misa\AppData\Local\Data aplikací
[2010.12.22 19:52:27 | 000,000,000 | -H-D | C] -- C:\Users\misa\AppData
[2010.12.22 19:52:27 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Local\Temp
[2010.12.22 19:52:27 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Local\Microsoft
[2010.12.22 19:52:27 | 000,000,000 | ---D | C] -- C:\Users\misa\AppData\Roaming\Media Center Programs
[2010.12.22 19:52:19 | 000,000,000 | -HSD | C] -- C:\ProgramData\Šablony
[2010.12.22 19:52:19 | 000,000,000 | -HSD | C] -- C:\Recovery
[2010.12.22 19:52:19 | 000,000,000 | -HSD | C] -- C:\ProgramData\Plocha
[2010.12.22 19:52:19 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Obrázky
[2010.12.22 19:52:19 | 000,000,000 | -HSD | C] -- C:\ProgramData\Oblíbené položky
[2010.12.22 19:52:19 | 000,000,000 | -HSD | C] -- C:\ProgramData\Nabídka Start
[2010.12.22 19:52:19 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Hudba
[2010.12.22 19:52:19 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Filmy
[2010.12.22 19:52:19 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty
[2010.12.22 19:52:19 | 000,000,000 | -HSD | C] -- C:\ProgramData\Data aplikací
[2010.12.22 19:38:58 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2010.12.22 19:38:31 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2010.12.22 19:37:43 | 000,000,000 | ---D | C] -- C:\Windows\Panther

========== Files - Modified Within 30 Days ==========

[2011.01.09 22:42:42 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\misa\Desktop\OTL.exe
[2011.01.09 22:04:13 | 003,162,877 | ---- | M] () -- C:\Users\misa\Desktop\snímek 022.jpg
[2011.01.09 21:08:30 | 000,000,056 | -H-- | M] () -- C:\Windows\SysWow64\ezsidmv.dat
[2011.01.09 21:07:08 | 000,002,533 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2011.01.09 18:29:41 | 007,221,439 | ---- | M] () -- C:\Users\misa\Documents\09-01-2011 18;29;37.rtf
[2011.01.09 14:22:00 | 009,465,208 | ---- | M] () -- C:\Users\misa\Desktop\Suzi Quatro - If you cant give me love.mp3
[2011.01.09 14:01:21 | 000,015,040 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.01.09 14:01:21 | 000,015,040 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.01.09 14:00:10 | 001,585,702 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.01.09 14:00:10 | 000,669,606 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2011.01.09 14:00:10 | 000,655,000 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.01.09 14:00:10 | 000,141,238 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2011.01.09 14:00:10 | 000,121,872 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.01.09 13:53:55 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.01.09 13:53:52 | 3219,988,480 | -HS- | M] () -- C:\hiberfil.sys
[2011.01.08 19:35:29 | 000,004,608 | ---- | M] () -- C:\Users\misa\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.01.07 18:09:10 | 000,001,002 | ---- | M] () -- C:\Users\misa\Desktop\JPEG Resampler.lnk
[2011.01.07 17:37:33 | 000,002,200 | ---- | M] () -- C:\Users\Public\Desktop\Xilisoft Video Converter Ultimate 6.lnk
[2011.01.07 17:22:23 | 000,000,010 | ---- | M] () -- C:\Windows\GSetup.ini
[2011.01.07 12:21:57 | 001,550,368 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011.01.06 21:53:07 | 000,007,598 | ---- | M] () -- C:\Users\misa\AppData\Local\Resmon.ResmonCfg
[2011.01.06 14:10:00 | 000,021,313 | ---- | M] () -- C:\Windows\SysNative\LexFiles.ulf
[2010.12.29 14:30:48 | 002,828,904 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll
[2010.12.29 13:46:43 | 000,019,731 | ---- | M] () -- C:\Windows\SysWow64\LexFiles.ulf
[2010.12.28 15:51:32 | 000,608,768 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoRes64.dat
[2010.12.27 21:46:32 | 000,002,111 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2010.12.26 21:31:33 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2010.12.25 23:32:41 | 000,421,472 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010.12.25 16:50:01 | 000,002,021 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Acrobat 9 Pro.lnk
[2010.12.25 00:06:01 | 000,001,054 | ---- | M] () -- C:\Users\misa\Desktop\IvAe - The Eye of IVAO.lnk
[2010.12.24 16:11:45 | 000,034,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\lhacm.acm
[2010.12.24 16:11:42 | 000,000,982 | ---- | M] () -- C:\Users\misa\Desktop\Teamspeak 2 RC2.lnk
[2010.12.23 20:03:03 | 000,000,296 | ---- | M] () -- C:\Users\misa\Desktop\vroute.info.appref-ms
[2010.12.23 15:00:27 | 000,737,280 | ---- | M] (Indigo Rose Corporation) -- C:\Windows\iun6002.exe
[2010.12.23 14:53:16 | 000,002,048 | ---- | M] () -- C:\Windows\lvld67.lic
[2010.12.23 14:51:19 | 000,002,568 | ---- | M] () -- C:\Users\misa\Desktop\767-300 Repaint Manager.lnk
[2010.12.23 14:51:18 | 000,002,610 | ---- | M] () -- C:\Users\misa\Desktop\767-300 Configuration Manager.lnk
[2010.12.23 14:05:08 | 000,001,749 | ---- | M] () -- C:\Users\misa\Desktop\Ground Environment Professional.lnk
[2010.12.23 11:58:22 | 000,000,061 | -HS- | M] () -- C:\Windows\cnerolf.dat
[2010.12.23 11:56:25 | 000,001,032 | ---- | M] () -- C:\Users\misa\Desktop\B737 Fuel Planner.lnk
[2010.12.23 11:01:54 | 000,002,056 | ---- | M] () -- C:\Users\Public\Desktop\Real Environment Xtreme FS2004.lnk
[2010.12.23 11:01:53 | 000,002,105 | ---- | M] () -- C:\Users\Public\Desktop\REX Weather Engine FS2004.lnk
[2010.12.22 21:54:12 | 000,002,150 | ---- | M] () -- C:\Users\Public\Desktop\Microsoft Flight Simulator 2004.lnk
[2010.12.22 21:12:06 | 000,000,947 | ---- | M] () -- C:\Users\Public\Desktop\µTorrent.lnk
[2010.12.22 20:58:03 | 000,001,852 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2010.12.22 20:57:39 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2010.12.22 20:53:26 | 000,001,889 | ---- | M] () -- C:\Users\misa\Desktop\UltraISO.lnk
[2010.12.22 20:25:19 | 000,001,828 | ---- | M] () -- C:\Users\Public\Desktop\ICQ7.2.lnk
[2010.12.22 20:20:47 | 000,001,833 | ---- | M] () -- C:\Users\Public\Desktop\Opera.lnk
[2010.12.22 19:41:37 | 000,062,544 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2010.12.22 19:41:37 | 000,062,544 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2010.12.22 11:28:34 | 002,328,168 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll

========== Files Created - No Company Name ==========

[2011.01.09 22:16:23 | 003,162,877 | ---- | C] () -- C:\Users\misa\Desktop\snímek 022.jpg
[2011.01.09 21:08:30 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
[2011.01.09 21:07:08 | 000,002,533 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2011.01.09 18:29:41 | 007,221,439 | ---- | C] () -- C:\Users\misa\Documents\09-01-2011 18;29;37.rtf
[2011.01.09 14:21:42 | 009,465,208 | ---- | C] () -- C:\Users\misa\Desktop\Suzi Quatro - If you cant give me love.mp3
[2011.01.07 18:22:46 | 000,004,608 | ---- | C] () -- C:\Users\misa\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.01.07 18:09:10 | 000,001,002 | ---- | C] () -- C:\Users\misa\Desktop\JPEG Resampler.lnk
[2011.01.06 22:31:57 | 000,002,200 | ---- | C] () -- C:\Users\Public\Desktop\Xilisoft Video Converter Ultimate 6.lnk
[2011.01.06 14:05:26 | 000,064,450 | ---- | C] () -- C:\Windows\SysNative\lxdxprpr.chm
[2011.01.06 14:05:25 | 000,617,984 | ---- | C] () -- C:\Windows\SysNative\lxdxcoin.dll
[2011.01.06 14:04:49 | 000,109,056 | ---- | C] () -- C:\Windows\SysNative\lxdxvs.dll
[2011.01.06 14:03:35 | 000,000,044 | ---- | C] () -- C:\Windows\SysNative\lxdxrwrd.ini
[2011.01.06 14:03:24 | 000,348,160 | ---- | C] () -- C:\Windows\SysWow64\LXDXinst.dll
[2011.01.06 14:03:24 | 000,335,872 | ---- | C] () -- C:\Windows\SysWow64\lxdxcomx.dll
[2011.01.06 14:03:23 | 000,147,456 | ---- | C] () -- C:\Windows\SysWow64\lxdxjswr.dll
[2011.01.06 14:03:23 | 000,106,496 | ---- | C] () -- C:\Windows\SysWow64\lxdxinsr.dll
[2011.01.06 14:03:20 | 000,001,875 | ---- | C] () -- C:\Windows\SysWow64\lxdx.loc
[2011.01.06 14:03:09 | 000,530,432 | ---- | C] () -- C:\Windows\SysNative\LXDXinst.dll
[2011.01.06 14:03:09 | 000,021,313 | ---- | C] () -- C:\Windows\SysNative\LexFiles.ulf
[2011.01.06 14:03:06 | 000,131,584 | ---- | C] () -- C:\Windows\SysNative\lxdxjswr.dll
[2011.01.06 14:03:06 | 000,090,624 | ---- | C] () -- C:\Windows\SysNative\lxdxinsr.dll
[2011.01.06 14:03:05 | 000,299,520 | ---- | C] () -- C:\Windows\SysNative\lxdxgrd.dll
[2011.01.06 14:03:03 | 000,001,875 | ---- | C] () -- C:\Windows\SysNative\lxdx.loc
[2010.12.29 14:21:03 | 000,000,931 | ---- | C] () -- C:\ProgramData\lxdx.log
[2010.12.29 13:46:42 | 000,000,252 | ---- | C] () -- C:\ProgramData\FastPics.log
[2010.12.29 13:46:32 | 000,019,731 | ---- | C] () -- C:\Windows\SysWow64\LexFiles.ulf
[2010.12.29 13:19:25 | 001,036,800 | ---- | C] () -- C:\Windows\SysNative\lxdxdrs64.dll
[2010.12.29 13:19:25 | 000,782,336 | ---- | C] () -- C:\Windows\SysWow64\lxdxdrs.dll
[2010.12.29 13:19:25 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\lxdxcaps.dll
[2010.12.29 13:19:25 | 000,069,632 | ---- | C] () -- C:\Windows\SysWow64\lxdxcnv4.dll
[2010.12.29 13:19:25 | 000,054,784 | ---- | C] () -- C:\Windows\SysNative\lxdxcnv464.dll
[2010.12.29 13:19:25 | 000,025,600 | ---- | C] () -- C:\Windows\SysNative\lxdxcaps64.dll
[2010.12.27 21:46:32 | 000,002,111 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2010.12.26 21:31:33 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2010.12.25 20:06:58 | 001,550,368 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010.12.25 16:50:01 | 000,002,021 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Acrobat 9 Pro.lnk
[2010.12.25 00:06:01 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\zlib1i.dll
[2010.12.25 00:06:01 | 000,001,054 | ---- | C] () -- C:\Users\misa\Desktop\IvAe - The Eye of IVAO.lnk
[2010.12.24 18:14:41 | 000,007,598 | ---- | C] () -- C:\Users\misa\AppData\Local\Resmon.ResmonCfg
[2010.12.24 16:11:42 | 000,000,982 | ---- | C] () -- C:\Users\misa\Desktop\Teamspeak 2 RC2.lnk
[2010.12.23 20:03:03 | 000,000,296 | ---- | C] () -- C:\Users\misa\Desktop\vroute.info.appref-ms
[2010.12.23 16:33:19 | 000,301,661 | ---- | C] () -- C:\Users\misa\Desktop\fs9CPU_8CPU.exe
[2010.12.23 14:52:33 | 000,002,048 | ---- | C] () -- C:\Windows\lvld67.lic
[2010.12.23 14:51:19 | 000,002,568 | ---- | C] () -- C:\Users\misa\Desktop\767-300 Repaint Manager.lnk
[2010.12.23 14:51:18 | 000,002,610 | ---- | C] () -- C:\Users\misa\Desktop\767-300 Configuration Manager.lnk
[2010.12.23 14:05:08 | 000,001,749 | ---- | C] () -- C:\Users\misa\Desktop\Ground Environment Professional.lnk
[2010.12.23 11:58:22 | 000,000,061 | -HS- | C] () -- C:\Windows\cnerolf.dat
[2010.12.23 11:56:25 | 000,001,032 | ---- | C] () -- C:\Users\misa\Desktop\B737 Fuel Planner.lnk
[2010.12.23 11:56:09 | 000,110,592 | ---- | C] () -- C:\Users\misa\Desktop\TPC.exe
[2010.12.23 11:01:54 | 000,002,056 | ---- | C] () -- C:\Users\Public\Desktop\Real Environment Xtreme FS2004.lnk
[2010.12.23 11:01:53 | 000,002,105 | ---- | C] () -- C:\Users\Public\Desktop\REX Weather Engine FS2004.lnk
[2010.12.23 02:51:33 | 000,000,075 | ---- | C] () -- C:\Windows\SysWow64\AniGIF2.lic
[2010.12.22 21:54:12 | 000,002,150 | ---- | C] () -- C:\Users\Public\Desktop\Microsoft Flight Simulator 2004.lnk
[2010.12.22 21:12:06 | 000,000,947 | ---- | C] () -- C:\Users\Public\Desktop\µTorrent.lnk
[2010.12.22 20:58:03 | 000,001,852 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2010.12.22 20:57:39 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\config.nt
[2010.12.22 20:53:26 | 000,001,889 | ---- | C] () -- C:\Users\misa\Desktop\UltraISO.lnk
[2010.12.22 20:29:18 | 000,007,877 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb
[2010.12.22 20:25:19 | 000,001,828 | ---- | C] () -- C:\Users\Public\Desktop\ICQ7.2.lnk
[2010.12.22 20:20:47 | 000,001,833 | ---- | C] () -- C:\Users\Public\Desktop\Opera.lnk
[2010.12.22 19:57:47 | 000,072,304 | R--- | C] () -- C:\Windows\SysWow64\XSrvSetup.exe
[2010.12.22 19:56:51 | 000,074,272 | ---- | C] () -- C:\Windows\SysNative\RtNicProp64.dll
[2010.12.22 19:55:18 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini
[2010.12.22 19:38:31 | 3219,988,480 | -HS- | C] () -- C:\hiberfil.sys
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2005.02.25 01:59:49 | 000,318,014 | ---- | C] () -- C:\Windows\SysWow64\flt1chk4.dll
[2002.03.14 00:46:46 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\zlib.dll

========== LOP Check ==========

[2011.01.09 13:57:25 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\ICQ
[2011.01.07 17:45:15 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\IrfanView
[2011.01.07 18:15:40 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\Jpeg Resampler
[2011.01.06 13:48:49 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\Lexmark Productivity Studio
[2010.12.22 20:20:48 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\Opera
[2010.12.28 01:03:28 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\uTorrent
[2011.01.06 22:32:08 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\Xilisoft
[2009.07.14 06:08:49 | 000,007,742 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========


< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"Sidebar" = C:\Program Files\Windows Sidebar\sidebar.exe /autoRun -- [2009.07.14 02:39:41 | 001,475,072 | ---- | M] (Microsoft Corporation)
"ICQ" = "C:\Program Files (x86)\ICQ7.2\ICQ.exe" silent loginmode=4 -- [2011.01.05 09:18:50 | 000,133,432 | ---- | M] (ICQ, LLC.)
"Skype" = "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized -- [2011.01.03 15:44:14 | 015,028,104 | R--- | M] (Skype Technologies S.A.)

< c:\windows\*.* /U >

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2010.12.25 16:56:27 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\Adobe
[2011.01.08 19:36:35 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\dvdcss
[2010.12.27 21:46:52 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\Google
[2011.01.09 13:57:25 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\ICQ
[2010.12.22 19:52:36 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\Identities
[2010.12.23 15:40:59 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\InstallShield
[2011.01.07 17:45:15 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\IrfanView
[2011.01.07 18:15:40 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\Jpeg Resampler
[2011.01.06 13:48:49 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\Lexmark Productivity Studio
[2010.12.22 20:33:06 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\Macromedia
[2009.07.14 16:36:58 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\Media Center Programs
[2011.01.02 18:42:07 | 000,000,000 | --SD | M] -- C:\Users\misa\AppData\Roaming\Microsoft
[2010.12.22 20:25:11 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\Mozilla
[2010.12.22 20:20:48 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\Opera
[2011.01.09 21:32:04 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\Skype
[2011.01.09 21:08:27 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\skypePM
[2010.12.25 23:34:41 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\teamspeak2
[2010.12.28 01:03:28 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\uTorrent
[2011.01.09 15:41:10 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\vlc
[2010.12.22 20:50:08 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\WinRAR
[2011.01.06 22:32:08 | 000,000,000 | ---D | M] -- C:\Users\misa\AppData\Roaming\Xilisoft

< %APPDATA%\*.exe /s >


< MD5 for: AGP440.SYS >
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysWow64\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysWow64\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2009.07.14 02:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\SysWOW64\autochk.exe
[2009.07.14 02:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\SysWOW64\autochk.exe
[2009.07.14 02:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2009.07.14 02:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_3de8def0db722996\autochk.exe

< MD5 for: CDROM.SYS >
[2009.07.14 00:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\SysWow64\DriverStore\FileRepository\cdrom.inf_amd64_neutral_8363d00ecae4322d\cdrom.sys
[2009.07.14 00:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys

< MD5 for: CNGAUDIT.DLL >
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009.07.14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll

< MD5 for: CRYPTSVC.DLL >
[2009.07.14 02:40:24 | 000,175,104 | ---- | M] (Microsoft Corporation) MD5=8C57411B66282C01533CB776F98AD384 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_d1f48b0bb4805490\cryptsvc.dll
[2009.07.14 02:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\SysWOW64\cryptsvc.dll
[2009.07.14 02:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\SysWOW64\cryptsvc.dll
[2009.07.14 02:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_75d5ef87fc22e35a\cryptsvc.dll

< MD5 for: EXPLORER.EXE >
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\SysWOW64\explorer.exe
[2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\SysWOW64\explorer.exe
[2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2009.08.03 07:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2009.10.31 07:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\explorer.exe
[2009.10.31 07:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009.08.03 06:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2009.10.31 07:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009.08.03 06:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009.07.14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009.10.31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2009.08.03 07:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe

< MD5 for: HAL.DLL >
[2009.07.14 02:47:48 | 000,263,232 | ---- | M] (Microsoft Corporation) MD5=C0A6F6E05E14FBCAEDE7796C8590B7AC -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_071de44b735b3dfc\hal.dll

< MD5 for: IASTORV.SYS >
[2009.07.14 02:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\SysWow64\DriverStore\FileRepository\iastorv.inf_amd64_neutral_18cccb83b34e1453\iaStorV.sys
[2009.07.14 02:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys

< MD5 for: ISAPNP.SYS >
[2009.07.14 02:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\SysWow64\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\isapnp.sys
[2009.07.14 02:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\isapnp.sys

< MD5 for: LSASS.EXE >
[2009.07.14 02:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16385_none_023f7c69767c3edd\lsass.exe
[2009.07.14 02:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16484_none_023e7e05767d22ad\lsass.exe
[2009.07.14 02:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.20594_none_02bd4ae48fa2de68\lsass.exe

< MD5 for: NDIS.SYS >
[2009.07.14 02:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys

< MD5 for: NETLOGON.DLL >
[2009.07.14 02:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\SysWOW64\netlogon.dll
[2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\SysWOW64\netlogon.dll
[2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll

< MD5 for: NVRAID.SYS >
[2009.07.14 02:48:27 | 000,149,056 | ---- | M] (NVIDIA Corporation) MD5=3E38712941E9BB4DDBEE00AFFE3FED3D -- C:\Windows\SysWow64\DriverStore\FileRepository\nvraid.inf_amd64_neutral_5bde3fe2945bce9e\nvraid.sys
[2009.07.14 02:48:27 | 000,149,056 | ---- | M] (NVIDIA Corporation) MD5=3E38712941E9BB4DDBEE00AFFE3FED3D -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvraid.sys

< MD5 for: NVSTOR.SYS >
[2009.07.14 02:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\SysWow64\DriverStore\FileRepository\nvraid.inf_amd64_neutral_5bde3fe2945bce9e\nvstor.sys
[2009.07.14 02:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys

< MD5 for: SCECLI.DLL >
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 02:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll

< MD5 for: SMSS.EXE >
[2009.07.14 02:39:41 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=1911A3356FA3F77CCC825CCBAC038C2A -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_082f99a432e2a661\smss.exe

< MD5 for: SVCHOST.EXE >
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009.07.14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2010.06.14 07:39:16 | 001,889,152 | ---- | M] (Microsoft Corporation) MD5=542C6767C68C9D6AAACA59436B0D15C2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20733_none_0fd0b57e990e2079\tcpip.sys
[2010.06.14 07:37:36 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=90A2D722CF64D911879D6C4A4F802A4D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16610_none_0f59b7ad7fe2fcc8\tcpip.sys
[2009.07.14 02:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys

< MD5 for: USERINIT.EXE >
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe

< MD5 for: WINLOGON.EXE >
[2009.07.14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2009.10.28 08:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2009.10.28 07:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

< MD5 for: WS2_32.DLL >
[2009.07.14 02:41:58 | 000,296,448 | ---- | M] (Microsoft Corporation) MD5=7083F463788CB34FCC42F565D56F89E8 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_4eaca269e8070c6b\ws2_32.dll
[2009.07.14 02:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\SysWOW64\ws2_32.dll
[2009.07.14 02:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\SysWOW64\ws2_32.dll
[2009.07.14 02:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_f28e06e62fa99b35\ws2_32.dll

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[2010.09.01 05:29:28 | 011,406,848 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\SysWOW64\wmp.dll

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >
[2010.09.01 05:29:28 | 011,406,848 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\SysWOW64\wmp.dll

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2011.01.09 21:08:30 | 000,000,056 | -H-- | M] () -- C:\Windows\SysWOW64\ezsidmv.dat
[2011.01.07 12:21:57 | 001,550,368 | ---- | M] () -- C:\Windows\SysWOW64\PerfStringBackup.INI

========== Alternate Data Streams ==========

@Alternate Data Stream - 113 bytes -> C:\ProgramData\TEMP:A1D5C6AA

< End of report >

Re: prosím o kontrolu

Napsal: 09 led 2011 23:11
od _misa_
Log sem dávám hlavně kvůli podezření na vir, který u všech přehrávačů způsobuje jiné načasování hlasu a přehrávání filmu.

Re: prosím o kontrolu

Napsal: 09 led 2011 23:18
od vyosek
:arrow: Problem co popisujete, by mohl souviset spise s kodeky, mate je spravne naistalovany

:arrow: Spustte znovu OTL
  • Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

  • Kód: Vybrat vše

    :otl
IE - HKU\S-1-5-21-2061425564-3327918732-4186191661-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
IE - HKU\S-1-5-21-2061425564-3327918732-4186191661-1000\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-2061425564-3327918732-4186191661-1000\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O4 - HKLM..\Run: [] File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O18:64bit: - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O33 - MountPoints2\{a9fecdc2-0dfa-11e0-9e79-806e6f6e6963}\Shell - "" = AutoRun
@Alternate Data Stream - 113 bytes -> C:\ProgramData\TEMP:A1D5C6AA

:services
ICQ Service

:files
C:\Program Files (x86)\ICQ6Toolbar
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp /s

:commands
[RESETHOSTS]
[EMPTYTEMP]
[EMPTYFLASH]
  • Nasledne kliknete na Opravit
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Re: prosím o kontrolu

Napsal: 10 led 2011 00:18
od _misa_
vyčištěno, díky :) video se pořád přehrává jinak než zvuk... kodeky mám nainstalované se systémem. Pokud víte o nějakých lepších pro WIn 7 64 bit budu rád za každou radu :)

Re: prosím o kontrolu

Napsal: 10 led 2011 10:09
od vyosek
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner (viz muj podpis)
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za 14 dni

:arrow: Zkuste tyto http://www.stahuj.centrum.cz/multimedia ... odec-pack/

Re: prosím o kontrolu

Napsal: 10 led 2011 21:40
od _misa_
Vše jsem udělal... i nainstaloval nové kodeky, ale obraz jde pořád jinak než zvuk. Stalo se to z ničeho nic... není to sice žádný extrém, ale patrné to je.

Re: prosím o kontrolu

Napsal: 10 led 2011 21:42
od vyosek
:arrow: Je problem ve vsech prehravacich? i pri prehravani videii napr na youtube :???:

Re: prosím o kontrolu

Napsal: 10 led 2011 21:45
od _misa_
Ano, teď jsem zjistil, že to jde jinak i na youtube... zkoušel jsem jeěte VLC a také nejde.

Re: prosím o kontrolu

Napsal: 10 led 2011 21:47
od vyosek
:arrow: Zkusil bych preinstalovat ovladac graficke karty na nejnovejsi a taktez ovladac zvukove karty...

Re: prosím o kontrolu

Napsal: 11 led 2011 15:50
od _misa_
Ovladače GK i zvukovky jsem přeinstaloval a dělá to pořád jen v menší míře... mám Nvidii a používám ty nejnovějsí 260.99 možná by stálo za zkusit nějaké starší.

Re: prosím o kontrolu

Napsal: 11 led 2011 15:52
od vyosek
:arrow: Zkusit to muzete, bohuzel tohle je jen na styl pokus-omyl az najdete vhodny...
Všechny časy jsou v UTC+01:00
Stránka 1 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz