VIRY.CZ

Zdravim, posledni dobou jsem měl spomaleny PC a ted odpoledne, kdyz jsem ho spustil se po přihlášení cca do 2min. objeví modrá smrt, kde je uveden soubor aswsp.sys. Děkuji za kontrolu


Logfile of random's system information tool 1.08 (written by random/random)
Run by Uživatel at 2011-01-11 15:35:34
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 447 MB (1%) free of 30 GB
Total RAM: 2047 MB (85% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:35:41, on 11.1.2011
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
J:\ZALOHA\kuk\RSIT.exe
C:\Program Files\trend micro\Uživatel.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - D:\PROGRA~1\FlashGet\jccatch.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MDS_Menu] "C:\Program Files\Olympus\ib\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Olympus\ib" UpdateWithCreateOnce "Software\OLYMPUS\ib\1.0"
O4 - HKLM\..\Run: [wuaucldt] c:\windows\system32\wuaucldt.exe
O4 - HKLM\..\Run: [Regedit32] C:\WINDOWS\system32\regedit.exe
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear
O4 - HKCU\..\Run: [OscarEditor] "C:\Program Files\OSCAR Editor\OscarEditor.exe" Minimum
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Olympus ib] "C:\Program Files\Olympus\ib\olycamdetect.exe" /Startup
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [wuaucldt] c:\documents and settings\uživatel\wuaucldt.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Akcelerátor spuštění AutoCADu.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart17.exe
O4 - Global Startup: Photo Loader supervisory.lnk = C:\Program Files\CASIO\Photo Loader\Plauto.exe
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: Download All by FlashGet - D:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - D:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Betway.com Poker - {4CBB5C71-1BA0-49ca-93CD-159AF8AA0CC9} - D:\Program Files\Betway\Poker\MPPoker.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O18 - Protocol: bw+0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: offline-8876480 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PostgreSQL Database Server 8.3 (pgsql-8.3) - PostgreSQL Global Development Group - C:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
O23 - Service: Viewpoint Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

--
End of file - 21844 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Google Software Updater.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-329068152-1417001333-725345543-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-329068152-1417001333-725345543-1003UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2009-02-27 61816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2F364306-AA45-47B5-9F9D-39A8B94E7EF7}]
IeCatch5 Class - D:\PROGRA~1\FlashGet\jccatch.dll [2006-05-16 81920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2006-10-17 2120768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-04-29 668656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-17 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-03-17 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetIM Toolbar Helper - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2009-10-19 1345336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{E0E899AB-F487-11D5-8D29-0050BA6940E3} - FlashGet Bar - D:\PROGRA~1\FlashGet\fgiebar.dll [2005-06-07 86016]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2006-10-17 2120768]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2008-06-12 958712]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetIM Toolbar for Internet Explorer - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2009-10-19 1345336]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-10-04 8491008]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2007-10-04 81920]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-03-12 17531392]
"SweetIM"=C:\Program Files\SweetIM\Messenger\SweetIM.exe [2009-10-20 111928]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2010-03-17 149280]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2010-03-17 421888]
"MDS_Menu"=C:\Program Files\Olympus\ib\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]
"wuaucldt"=c:\windows\system32\wuaucldt.exe [2011-01-10 33280]
"Regedit32"=C:\WINDOWS\system32\regedit.exe []
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-12-31 3395600]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"NVIDIA nTune"=C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe [2007-09-04 81920]
"OscarEditor"=C:\Program Files\OSCAR Editor\OscarEditor.exe [2018-11-02 2820096]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-04-29 39408]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"Olympus ib"=C:\Program Files\Olympus\ib\olycamdetect.exe [2009-10-30 93376]
"Google Update"=C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2011-01-10 136176]
"wuaucldt"=c:\documents and settings\uživatel\wuaucldt.exe [2011-01-10 33280]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Akcelerátor spuštění AutoCADu.lnk - C:\Program Files\Common Files\Autodesk Shared\acstart17.exe
Photo Loader supervisory.lnk - C:\Program Files\CASIO\Photo Loader\Plauto.exe

C:\Documents and Settings\Uživatel\Nabídka Start\Programy\Po spuštění
OpenOffice.org 2.0.lnk - C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Xfire\Xfire.exe"="C:\Program Files\Xfire\Xfire.exe:*:Disabled:Xfire"
"C:\Program Files\BitComet\BitComet.exe"="C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"D:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe"="D:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe:*:Disabled:CoD2MP_s"
"C:\BROOD\starcraft.exe"="C:\BROOD\starcraft.exe:*:Enabled:Starcraft"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\mIRC\mirc.exe"="C:\Program Files\mIRC\mirc.exe:*:Disabled:mIRC"
"D:\Teamspeak2_RC2\server_windows.exe"="D:\Teamspeak2_RC2\server_windows.exe:*:Enabled:Server"
"C:\Program Files\Starcraft\StarCraft.exe"="C:\Program Files\Starcraft\StarCraft.exe:*:Enabled:Starcraft"
"D:\Steam\steamapps\krtek3\counter-strike\hl.exe"="D:\Steam\steamapps\krtek3\counter-strike\hl.exe:*:Enabled:Half-Life Launcher"
"D:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe"="D:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe:*:Enabled:TmNationsESWC"
"D:\SIERRA\Half-Life\hl.exe"="D:\SIERRA\Half-Life\hl.exe:*:Enabled:Half-Life Launcher"
"D:\Program Files\Hasbro Interactive\RollerCoaster Tycoon\rct.exe"="D:\Program Files\Hasbro Interactive\RollerCoaster Tycoon\rct.exe:*:Disabled:rct"
"C:\Program Files\Sierra On-Line\SIGSPat.exe"="C:\Program Files\Sierra On-Line\SIGSPat.exe:*:Disabled:SIGSPat"
"D:\Program Files\World of Warcraft\Repair.exe"="D:\Program Files\World of Warcraft\Repair.exe:*:Enabled:Blizzard Repair Utility"
"D:\Program Files\World of Warcraft\WoW-1.12.x-to-2.0.1-enGB-patch-downloader.exe"="D:\Program Files\World of Warcraft\WoW-1.12.x-to-2.0.1-enGB-patch-downloader.exe:*:Enabled:Blizzard Downloader"
"D:\Program Files\World of Warcraft\WoW-2.0.3-enGB-downloader.exe"="D:\Program Files\World of Warcraft\WoW-2.0.3-enGB-downloader.exe:*:Enabled:Blizzard Downloader"
"D:\Program Files\World of Warcraft\BackgroundDownloader.exe"="D:\Program Files\World of Warcraft\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\Hamachi\hamachi.exe"="C:\Program Files\Hamachi\hamachi.exe:*:Enabled:Hamachi Client"
"D:\Soldat\Soldat.exe"="D:\Soldat\Soldat.exe:*:Enabled:Soldat"
"D:\Program Files\Warcraft III\Warcraft III.exe"="D:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III"
"D:\Program Files\Warcraft III\War3.exe"="D:\Program Files\Warcraft III\War3.exe:*:Enabled:Warcraft III"
"D:\Steam\steamapps\krtek3\counter-strike source\hl2.exe"="D:\Steam\steamapps\krtek3\counter-strike source\hl2.exe:*:Enabled:hl2"
"D:\Steam\steam.exe"="D:\Steam\steam.exe:*:Enabled:Steam"
"D:\Steam\steamapps\krtek3\half-life deathmatch source\hl2.exe"="D:\Steam\steamapps\krtek3\half-life deathmatch source\hl2.exe:*:Enabled:hl2"
"D:\Steam\steamapps\krtek3\half-life 2 deathmatch\hl2.exe"="D:\Steam\steamapps\krtek3\half-life 2 deathmatch\hl2.exe:*:Enabled:hl2"
"C:\Program Files\HLSW\hlsw.exe"="C:\Program Files\HLSW\hlsw.exe:*:Enabled:hlsw"
"D:\Steam\steamapps\krtek3\dedicated server\hltv.exe"="D:\Steam\steamapps\krtek3\dedicated server\hltv.exe:*:Enabled:HLTV Launcher"
"C:\Program Files\Miranda IM\miranda32.exe"="C:\Program Files\Miranda IM\miranda32.exe:*:Enabled:Miranda IM"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Disabled:Logitech Desktop Messenger"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"D:\Steam\steamapps\ruza_\counter-strike\hl.exe"="D:\Steam\steamapps\ruza_\counter-strike\hl.exe:*:Enabled:Half-Life Launcher"
"D:\Program Files\EA SPORTS\UEFA EURO 2008\EURO08.exe"="D:\Program Files\EA SPORTS\UEFA EURO 2008\EURO08.exe:*:Enabled:EURO08"
"D:\Steam\steamapps\ruza_\dedicated server\hltv.exe"="D:\Steam\steamapps\ruza_\dedicated server\hltv.exe:*:Enabled:HLTV Launcher"
"C:\Documents and Settings\All Users\Dokumenty\CS1.6\hl.exe"="C:\Documents and Settings\All Users\Dokumenty\CS1.6\hl.exe:*:Enabled:Half-Life Launcher"
"D:\CS1.6{47}\cstrike.exe"="D:\CS1.6{47}\cstrike.exe:*:Enabled:Counter-Strike Launcher"
"C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Dyyno Receiver\DPPM.exe"="C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Dyyno Receiver\DPPM.exe:*:Enabled:Dyyno Plugin Receiver"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"D:\Steam\steamapps\ruza_\dedicated server\hlds.exe"="D:\Steam\steamapps\ruza_\dedicated server\hlds.exe:*:Enabled:Dedicated Server"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"

======File associations======

.scr - open - "" "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2011-01-11 14:04:27 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2011-01-11 14:04:27 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2011-01-11 14:04:25 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2011-01-11 14:04:14 ----A---- C:\WINDOWS\system32\aswBoot.exe
2011-01-10 20:46:08 ----A---- C:\WINDOWS\system32\wuaucldt.exe
2011-01-10 19:24:00 ----N---- C:\SafeSurf ABUSE README.txt
2011-01-10 19:22:30 ----D---- C:\Program Files\SafeSurf
2011-01-10 18:07:14 ----D---- C:\Documents and Settings\Uživatel\Data aplikací\WebSurf.ru

======List of files/folders modified in the last 1 months======

2011-01-11 15:35:41 ----AC---- C:\WINDOWS\ntbtlog.txt
2011-01-11 15:35:36 ----D---- C:\Program Files\Trend Micro
2011-01-11 15:31:59 ----SD---- C:\WINDOWS\Tasks
2011-01-11 15:31:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google Updater
2011-01-11 15:31:40 ----D---- C:\WINDOWS\Temp
2011-01-11 15:28:58 ----D---- C:\Documents and Settings\Uživatel\Data aplikací\OpenOffice.org2
2011-01-11 14:04:27 ----D---- C:\WINDOWS\system32\drivers
2011-01-11 14:04:15 ----D---- C:\WINDOWS
2011-01-11 14:04:14 ----D---- C:\WINDOWS\system32
2011-01-11 14:03:55 ----D---- C:\Program Files\Alwil Software
2011-01-11 14:03:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2011-01-11 03:35:59 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-01-10 22:14:14 ----D---- C:\WINDOWS\Prefetch
2011-01-10 19:22:30 ----RD---- C:\Program Files
2011-01-08 22:22:11 ----D---- C:\WINDOWS\system32\CatRoot2
2011-01-06 15:57:17 ----D---- C:\Program Files\PokerStars
2010-12-25 23:01:42 ----D---- C:\Program Files\SpeedFan
2010-12-25 19:22:20 ----HD---- C:\Program Files\InstallShield Installation Information
2010-12-25 19:15:06 ----SHD---- C:\WINDOWS\Installer
2010-12-18 20:45:32 ----D---- C:\Program Files\Opera
2010-12-17 19:00:16 ----D---- C:\Documents and Settings\Uživatel\Data aplikací\ICQ
2010-12-17 17:42:11 ----SD---- C:\Documents and Settings\Uživatel\Data aplikací\Microsoft
2010-12-14 22:38:36 ----D---- C:\Program Files\Mozilla Firefox

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; C:\WINDOWS\system32\giveio.sys [1996-04-03 5248]
R0 nvata;nvata; C:\WINDOWS\system32\DRIVERS\nvata.sys [2006-03-16 99840]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS\System32\DRIVERS\ohci1394.sys [2004-08-03 61056]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2005-08-10 50688]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2005-05-16 6656]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\WINDOWS\System32\drivers\sfvfs02.sys [2005-11-03 63488]
R0 speedfan;speedfan; C:\WINDOWS\system32\speedfan.sys [2006-09-24 5248]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2006-09-20 642560]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 ACEDRV05;ACEDRV05; \??\C:\WINDOWS\system32\drivers\ACEDRV05.sys []
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-17 14848]
R1 SbFw;SbFw; C:\WINDOWS\system32\drivers\SbFw.sys [2008-10-31 270888]
R3 dtscsi;dtscsi; C:\WINDOWS\System32\Drivers\dtscsi.sys [2006-09-20 223128]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-12-31 29264]
S1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-12-31 23632]
S1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-12-31 293968]
S1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-12-31 47440]
S1 cdfss;cdfss; \??\C:\DOCUME~1\UIVATE~1\LOCALS~1\Temp\cdfss []
S1 sbhips;Sunbelt HIPS Driver; C:\WINDOWS\system32\drivers\sbhips.sys [2008-06-21 66600]
S1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2002-09-23 12032]
S2 AMON;AMON; \??\C:\WINDOWS\system32\drivers\amon.sys []
S2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-12-31 17744]
S2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-12-31 100176]
S2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2004-08-03 88448]
S2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2002-09-23 63232]
S2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2002-09-23 55936]
S2 PStrip;PStrip; C:\WINDOWS\system32\drivers\pstrip.sys [2007-07-15 27992]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2004-08-03 60800]
S3 Bridge;Most MAC; C:\WINDOWS\system32\DRIVERS\bridge.sys [2004-08-03 71552]
S3 BridgeMP;Miniport mostu MAC; C:\WINDOWS\system32\DRIVERS\bridge.sys [2004-08-03 71552]
S3 catchme;catchme; \??\C:\DOCUME~1\UIVATE~1\LOCALS~1\Temp\catchme.sys []
S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys []
S3 ewdmaudn;ewdmaudn; \??\C:\DOCUME~1\UIVATE~1\LOCALS~1\Temp\ewdmaudn.sys []
S3 GVCplDrv;GVCplDrv; C:\WINDOWS\system32\drivers\GVCplDrv.sys [2004-05-02 23040]
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2007-03-22 17480]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-03-12 5051904]
S3 k750bus;Sony Ericsson 750 driver (WDM); C:\WINDOWS\system32\DRIVERS\k750bus.sys [2005-02-11 55216]
S3 k750mdfl;Sony Ericsson 750 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\k750mdfl.sys [2005-02-11 6576]
S3 k750mdm;Sony Ericsson 750 USB WMC Modem Drivers; C:\WINDOWS\system32\DRIVERS\k750mdm.sys [2005-02-11 89872]
S3 k750mgmt;Sony Ericsson 750 USB WMC Device Management Drivers; C:\WINDOWS\system32\DRIVERS\k750mgmt.sys [2005-02-11 81728]
S3 k750obex;Sony Ericsson 750 USB WMC OBEX Interface Drivers; C:\WINDOWS\system32\DRIVERS\k750obex.sys [2005-02-11 79488]
S3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys [2008-09-26 20240]
S3 L8042mou;Logitech SetPoint PS/2 Mouse Filter Driver; C:\WINDOWS\System32\Drivers\L8042mou.sys [2004-12-10 52992]
S3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys [2008-09-26 35472]
S3 LHidKe;Logitech SetPoint HID Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidKE.Sys [2004-12-10 24704]
S3 LHidUsbK;Logitech SetPoint USB Receiver device driver; C:\WINDOWS\System32\Drivers\LHidUsbK.Sys [2004-12-10 36480]
S3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys [2008-09-26 37392]
S3 LMouKE;Logitech SetPoint Mouse Filter Driver; C:\WINDOWS\System32\Drivers\LMouKE.sys [2004-12-10 68992]
S3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\WINDOWS\System32\Drivers\LUsbFilt.Sys [2008-09-26 28816]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2004-08-03 61824]
S3 nm;Ovladač programu Sledování sítě; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2004-08-03 40320]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-10-04 6854464]
S3 NVR0Dev;NVR0Dev; \??\C:\WINDOWS\nvoclock.sys []
S3 QV2KUX;Casio Digital Camera; C:\WINDOWS\system32\DRIVERS\qv2kux.sys [2001-08-17 3328]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2002-09-23 5888]
S3 rtl8029;Realtek RTL8029(AS)-based PCI Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8029.SYS [2001-08-17 19017]
S3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-06-05 142336]
S3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport; C:\WINDOWS\system32\DRIVERS\sbfwim.sys [2008-06-21 65576]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-12-31 40384]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-29 183280]
S2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2008-06-10 222456]
S2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-03-17 153376]
S2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2006-07-10 507904]
S2 nTuneService;nTune Service; C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe [2007-09-04 131072]
S2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-10-04 155716]
S2 NwSapAgent;Agent SAP; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
S2 pgsql-8.3;PostgreSQL Database Server 8.3; C:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe [2008-09-19 65536]
S2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-09-24 75064]
S2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2010-09-24 214520]
S2 SbPF.Launcher;SbPF.Launcher; C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [2008-10-31 95528]
S2 SPF4;Sunbelt Personal Firewall 4; C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [2008-10-31 1365288]
S2 Viewpoint Service;Viewpoint Service; C:\Program Files\Viewpoint\Common\ViewpointService.exe [2008-04-04 30152]
S2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2009-03-15 72704]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Zdravim a pekny den preji

V prve rade tam mate furu haveti

Za druhe, ten soubor patri k Avastu

Dale tam vidim NOD32, ten mate legalni = zakoupena licence

Pokud NOD neni legalni, tak jej odinstalujte, dochazi ke kolizi s Avastem

vyosek píše:Zdravim a pekny den preji

V prve rade tam mate furu haveti

Za druhe, ten soubor patri k Avastu

Dale tam vidim NOD32, ten mate legalni = zakoupena licence

Pokud NOD neni legalni, tak jej odinstalujte, dochazi ke kolizi s Avastem

To jsem si myslel

Avast jsem nainstaloval ted, protože jsem myslel, že NOD už tam nemam...

Domníval jsem se, že NOD32 tam již není, odinstaluji.

Prosim necitujte mou odpoved, je to zbytecne, staci kliknout na Odpovedet

Pokud Vam NOD nepujde dobrovolne, tak pouzijte Odinstalator - bod c.2 v tomto clanku http://www.viry.cz/forum/viewtopic.php?p=889437#p889437

Pote se prihlaste do nouzoveho rezimu (restart PC, mackat F8, zvolit Stav nouze s praci v siti)

Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com

• Pokud ho havet blokuje, pouzijte jeden z nasledujicich

  motji píše: Rkill EXE:
  http://download.bleepingcomputer.com/grinler/rkill.exe
  
  Rkill SCR:
  http://download.bleepingcomputer.com/grinler/rkill.scr
  
  Rkill PIF:
  http://download.bleepingcomputer.com/grinler/rkill.pif

• Ulozte nejlepena plochu a ukoncete vsechny aplikace (jinak to udela RKill za Vas)
• Spustte tradicne dvojklikem - program probehne temer okamzite a ukonci i svou cinnost
• RKill ukonci vsechny ne-systemove procesy - tedy i procesy, pod kterymi bezi havet
• V zadnem pripade ted nerestartujte PC - prisli byste o ucinek RKillu

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

• Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
• Pokud mate Win XP spustte pod uctem Spravce\Administratora
• Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
• Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
• Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
• Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
• Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
• Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
• Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

ComboFix 11-01-10.08 - Uživatel 11.01.2011 17:04:39.3.1 - x86 NETWORK
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.2047.1700 [GMT 1:00]
Spuštěný z: c:\documents and settings\Uživatel\Plocha\ComboFix.exe
AV: avast! Antivirus *Enabled/Outdated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: Sunbelt Personal Firewall *Enabled* {82B1150E-9B37-49FC-83EB-D52197D900D0}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\ICQ6.5\ICQLRun.exe
c:\windows\system32\wuaucldt.exe

Nakažená kopie c:\windows\system32\drivers\ndis.sys byla nalezena a vyléčena.
Obnovena kopie z - c:\windows\ServicePackFiles\i386\ndis.sys
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_CDFSS
-------\Service_cdfss


((((((((((((((((((((((((( Soubory vytvořené od 2010-12-11 do 2011-01-11 )))))))))))))))))))))))))))))))
.

2011-01-10 19:46 . 2011-01-10 19:46 33280 ----a-w- c:\documents and settings\Uživatel\wuaucldt.exe
2011-01-10 18:22 . 2011-01-10 21:14 -------- d-----w- c:\program files\SafeSurf
2011-01-10 17:07 . 2011-01-10 17:07 -------- d-----w- c:\documents and settings\Uživatel\Data aplikací\WebSurf.ru

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
.

((((((((((((((((((((((((((((( SnapShot@2010-04-02_19.59.57 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-01-11 16:11 . 2011-01-11 16:11 16384 c:\windows\temp\Perflib_Perfdata_45c.dat
+ 2011-01-11 16:11 . 2011-01-11 16:11 16384 c:\windows\temp\Perflib_Perfdata_440.dat
- 2010-03-26 19:00 . 2010-03-26 19:00 41872 c:\windows\system32\xfcodec.dll
+ 2010-07-09 19:04 . 2010-07-09 19:04 41872 c:\windows\system32\xfcodec.dll
- 2007-01-29 08:58 . 2010-01-23 08:11 46080 c:\windows\system32\tzchange.exe
+ 2007-01-29 08:58 . 2010-04-21 13:28 46080 c:\windows\system32\tzchange.exe
- 2007-04-14 14:54 . 2008-07-08 12:59 18296 c:\windows\system32\spmsg.dll
+ 2007-04-14 14:54 . 2009-05-26 11:40 18296 c:\windows\system32\spmsg.dll
+ 2010-03-30 22:16 . 2010-03-30 22:16 99176 c:\windows\system32\PresentationHostProxy.dll
+ 2007-04-05 16:42 . 2010-09-24 13:30 75064 c:\windows\system32\PnkBstrA.exe
+ 2002-09-23 12:00 . 2010-04-16 15:38 39424 c:\windows\system32\pngfilt.dll
- 2002-09-23 12:00 . 2010-02-26 06:12 39424 c:\windows\system32\pngfilt.dll
+ 2002-09-23 12:00 . 2010-10-31 10:07 71846 c:\windows\system32\perfc009.dat
+ 2002-09-23 12:00 . 2010-10-31 10:07 83652 c:\windows\system32\perfc005.dat
+ 2009-11-06 23:07 . 2009-11-06 23:07 49488 c:\windows\system32\netfxperf.dll
+ 2009-11-05 20:17 . 2009-11-05 20:17 11600 c:\windows\system32\mui\0409\mscorees.dll
+ 2008-12-03 11:54 . 2010-05-09 23:13 84507 c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
+ 2002-09-23 12:00 . 2010-04-16 15:38 16384 c:\windows\system32\jsproxy.dll
- 2002-09-23 12:00 . 2010-02-26 06:12 16384 c:\windows\system32\jsproxy.dll
+ 2002-09-23 12:00 . 2010-04-16 15:38 96768 c:\windows\system32\inseng.dll
- 2002-09-23 12:00 . 2010-02-26 06:12 96768 c:\windows\system32\inseng.dll
+ 2006-07-10 10:03 . 2010-04-16 15:38 81920 c:\windows\system32\ieencode.dll
- 2006-07-10 10:03 . 2010-02-26 06:12 81920 c:\windows\system32\ieencode.dll
+ 2006-07-10 10:03 . 2010-04-16 15:38 55808 c:\windows\system32\extmgr.dll
- 2006-07-10 10:03 . 2010-02-26 06:12 55808 c:\windows\system32\extmgr.dll
+ 2010-09-29 20:47 . 2010-04-29 13:39 38224 c:\windows\system32\drivers\mbamswissarmy.sys
+ 2010-09-29 20:47 . 2010-04-29 13:39 20952 c:\windows\system32\drivers\mbam.sys
+ 2006-07-10 09:51 . 2004-08-17 13:49 41472 c:\windows\system32\dllcache\wmipsess.dll
+ 2006-07-10 09:51 . 2004-08-17 13:49 62976 c:\windows\system32\dllcache\wmipjobj.dll
+ 2006-07-10 09:51 . 2004-08-17 13:49 62464 c:\windows\system32\dllcache\wmipiprt.dll
+ 2006-07-10 09:51 . 2004-08-17 13:49 60928 c:\windows\system32\dllcache\wmicookr.dll
+ 2002-09-23 12:00 . 2004-08-17 13:49 42496 c:\windows\system32\dllcache\wbemperf.dll
+ 2006-07-10 10:03 . 2004-08-03 20:29 25471 c:\windows\system32\dllcache\watv10nt.sys
+ 2006-07-10 10:03 . 2004-08-03 20:29 22271 c:\windows\system32\dllcache\watv06nt.sys
+ 2006-07-10 10:03 . 2004-08-03 20:29 11935 c:\windows\system32\dllcache\wadv11nt.sys
+ 2006-07-10 10:03 . 2004-08-03 20:29 11871 c:\windows\system32\dllcache\wadv09nt.sys
+ 2006-07-10 10:03 . 2004-08-03 20:29 11295 c:\windows\system32\dllcache\wadv08nt.sys
+ 2006-07-10 10:03 . 2004-08-03 20:29 11807 c:\windows\system32\dllcache\wadv07nt.sys
+ 2006-07-10 10:03 . 2004-08-03 21:04 13568 c:\windows\system32\dllcache\wacompen.sys
+ 2006-07-10 09:52 . 2004-08-17 13:49 30208 c:\windows\system32\dllcache\wabmig.exe
+ 2006-07-10 09:52 . 2004-08-17 13:49 32768 c:\windows\system32\dllcache\wabfind.dll
+ 2006-07-10 10:03 . 2004-08-03 21:07 42240 c:\windows\system32\dllcache\viaagp.sys
+ 2006-07-10 10:03 . 2004-08-17 13:49 11325 c:\windows\system32\dllcache\vchnt5.dll
+ 2001-08-17 22:02 . 2002-09-23 12:00 58112 c:\windows\system32\dllcache\vdmindvd.sys
+ 2006-07-10 10:03 . 2004-08-03 21:10 78464 c:\windows\system32\dllcache\usbvideo.sys
+ 2002-08-29 01:32 . 2004-08-03 21:08 16000 c:\windows\system32\dllcache\usbintel.sys
+ 2001-08-17 22:03 . 2002-09-23 12:00 23936 c:\windows\system32\dllcache\usbcamd2.sys
+ 2001-08-17 22:03 . 2002-09-23 12:00 23808 c:\windows\system32\dllcache\usbcamd.sys
+ 2006-07-10 10:03 . 2004-08-03 21:04 12672 c:\windows\system32\dllcache\usb8023x.sys
+ 2002-09-23 12:00 . 2004-08-03 21:04 12672 c:\windows\system32\dllcache\usb8023.sys
+ 2002-09-23 12:00 . 2004-08-03 21:00 66176 c:\windows\system32\dllcache\udfs.sys
+ 2006-07-10 10:03 . 2004-08-03 21:07 44672 c:\windows\system32\dllcache\uagp35.sys
+ 2002-08-29 01:35 . 2004-08-03 21:03 12416 c:\windows\system32\dllcache\tunmp.sys
+ 2001-08-17 22:06 . 2002-09-23 12:00 21376 c:\windows\system32\dllcache\tsbvcap.sys
+ 2001-08-17 22:01 . 2002-09-23 12:00 51712 c:\windows\system32\dllcache\tosdvd.sys
+ 2006-07-10 09:51 . 2004-08-17 13:49 21896 c:\windows\system32\dllcache\tdtcp.sys
+ 2006-07-10 09:51 . 2004-08-17 13:49 12040 c:\windows\system32\dllcache\tdpipe.sys
+ 2002-09-23 12:00 . 2004-08-03 21:00 14976 c:\windows\system32\dllcache\tape.sys
+ 2006-07-10 09:51 . 2004-08-17 13:49 86528 c:\windows\system32\dllcache\stdprov.dll
+ 2002-09-23 12:00 . 2004-08-17 13:49 33280 c:\windows\system32\dllcache\sstub.dll
+ 2002-09-23 12:00 . 2004-08-17 13:48 62976 c:\windows\system32\dllcache\spgrmr.dll
+ 2002-08-29 01:33 . 2004-08-03 21:09 25472 c:\windows\system32\dllcache\sonydcam.sys
+ 2002-09-23 12:00 . 2004-08-17 13:49 34816 c:\windows\system32\dllcache\sniffpol.dll
+ 2006-07-10 10:03 . 2004-08-03 20:41 13240 c:\windows\system32\dllcache\slwdmsup.sys
+ 2006-07-10 10:03 . 2004-08-03 20:41 95424 c:\windows\system32\dllcache\slnthal.sys
+ 2006-07-10 10:03 . 2004-08-03 21:07 41088 c:\windows\system32\dllcache\sisagp.sys
+ 2006-07-10 10:03 . 2004-08-03 20:59 10240 c:\windows\system32\dllcache\sffp_sd.sys
+ 2006-07-10 10:03 . 2004-08-03 20:59 11136 c:\windows\system32\dllcache\sffdisk.sys
+ 2006-07-10 09:52 . 2004-08-17 13:49 73728 c:\windows\system32\dllcache\setup50.exe
+ 2006-07-10 10:03 . 2004-08-03 21:07 67584 c:\windows\system32\dllcache\sdbus.sys
+ 2006-07-10 09:51 . 2004-08-17 13:49 36864 c:\windows\system32\dllcache\scrcons.exe
+ 2006-07-10 09:52 . 2004-08-17 13:49 61440 c:\windows\system32\dllcache\rrcm.dll
+ 2006-07-10 10:03 . 2004-08-03 21:04 30080 c:\windows\system32\dllcache\rndismpx.sys
+ 2002-09-23 12:00 . 2004-08-03 21:04 30080 c:\windows\system32\dllcache\rndismp.sys
+ 2001-08-17 21:24 . 2002-09-23 12:00 12032 c:\windows\system32\dllcache\riodrv.sys
+ 2001-08-17 21:24 . 2002-09-23 12:00 12032 c:\windows\system32\dllcache\rio8drv.sys
+ 2006-07-10 10:03 . 2004-08-03 21:10 59648 c:\windows\system32\dllcache\rfcomm.sys
+ 2006-07-10 10:03 . 2004-08-03 20:41 13776 c:\windows\system32\dllcache\recagent.sys
+ 2006-07-10 09:51 . 2004-08-17 13:49 92672 c:\windows\system32\dllcache\policman.dll
+ 2006-05-10 05:25 . 2010-04-16 15:38 39424 c:\windows\system32\dllcache\pngfilt.dll
- 2006-05-10 05:25 . 2010-02-26 06:12 39424 c:\windows\system32\dllcache\pngfilt.dll
+ 2002-09-20 17:15 . 2004-08-17 13:43 46336 c:\windows\system32\dllcache\p3.sys
+ 2006-07-10 09:52 . 2004-08-17 13:49 51712 c:\windows\system32\dllcache\oobebaln.exe
+ 2006-07-10 09:52 . 2004-08-17 13:49 69632 c:\windows\system32\dllcache\oledb32r.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 35328 c:\windows\system32\dllcache\oemiglib.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 60416 c:\windows\system32\dllcache\oemig50.exe
+ 2006-07-10 09:52 . 2004-08-17 13:49 10240 c:\windows\system32\dllcache\npwmsdrm.dll
+ 2002-09-23 12:00 . 2004-08-17 13:49 15360 c:\windows\system32\dllcache\nppagent.exe
+ 2006-07-10 09:52 . 2004-08-17 13:49 81920 c:\windows\system32\dllcache\nmchat.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 77824 c:\windows\system32\dllcache\nmcom.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 28672 c:\windows\system32\dllcache\nmasnt.dll
+ 2001-08-17 21:24 . 2002-09-23 12:00 12032 c:\windows\system32\dllcache\nikedrv.sys
+ 2002-09-23 12:00 . 2004-08-17 13:49 57344 c:\windows\system32\dllcache\ndisnpp.dll
+ 2006-07-10 10:03 . 2004-08-03 21:04 12672 c:\windows\system32\dllcache\mutohpen.sys
+ 2006-07-10 09:52 . 2004-08-17 13:49 24576 c:\windows\system32\dllcache\msxactps.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 57344 c:\windows\system32\dllcache\mst123.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 18944 c:\windows\system32\dllcache\msobweb.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 31232 c:\windows\system32\dllcache\msobshel.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 16384 c:\windows\system32\dllcache\msobdl.dll
+ 2002-09-23 12:00 . 2004-08-17 13:49 39936 c:\windows\system32\dllcache\mslwvtts.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 36864 c:\windows\system32\dllcache\msdfmap.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 20480 c:\windows\system32\dllcache\msdatt.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 94208 c:\windows\system32\dllcache\msdatl3.dll
+ 2006-07-10 09:52 . 2004-08-17 13:48 16384 c:\windows\system32\dllcache\msdasqlr.dll
+ 2006-07-10 09:52 . 2004-08-17 13:48 16384 c:\windows\system32\dllcache\msdaremr.dll
+ 2006-07-10 09:52 . 2004-08-17 13:48 16384 c:\windows\system32\dllcache\msdaprsr.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 77824 c:\windows\system32\dllcache\msdaosp.dll
+ 2006-07-10 09:52 . 2004-08-17 13:48 16384 c:\windows\system32\dllcache\msdaorar.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 57344 c:\windows\system32\dllcache\msadrh15.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 57344 c:\windows\system32\dllcache\msador15.dll
+ 2006-07-10 09:52 . 2004-08-17 13:48 28672 c:\windows\system32\dllcache\msader15.dll
+ 2006-07-10 09:52 . 2004-08-17 13:48 24576 c:\windows\system32\dllcache\msaddsr.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 53248 c:\windows\system32\dllcache\msadcs.dll
+ 2006-07-10 09:52 . 2004-08-17 13:48 16384 c:\windows\system32\dllcache\msadcor.dll
+ 2006-07-10 09:52 . 2004-08-17 13:48 16384 c:\windows\system32\dllcache\msadcfr.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 61440 c:\windows\system32\dllcache\msadcf.dll
+ 2006-07-10 09:52 . 2004-08-17 13:48 20480 c:\windows\system32\dllcache\msadcer.dll
+ 2006-07-10 09:51 . 2004-08-17 13:49 16896 c:\windows\system32\dllcache\mofcomp.exe
+ 2006-07-10 17:51 . 2004-08-17 13:43 69008 c:\windows\system32\dllcache\mmsystem.dll
+ 2001-08-17 21:58 . 2004-08-03 21:07 63744 c:\windows\system32\dllcache\mf.sys
+ 2002-09-23 12:00 . 2004-08-17 13:49 19968 c:\windows\system32\dllcache\log.dll
+ 2006-07-10 09:51 . 2004-08-17 13:49 24576 c:\windows\system32\dllcache\krnlprov.dll
- 2006-05-10 05:25 . 2010-02-26 06:12 16384 c:\windows\system32\dllcache\jsproxy.dll
+ 2006-05-10 05:25 . 2010-04-16 15:38 16384 c:\windows\system32\dllcache\jsproxy.dll
+ 2006-07-10 10:03 . 2004-08-03 21:08 40832 c:\windows\system32\dllcache\irbus.sys
+ 2006-07-10 10:03 . 2004-08-17 13:44 39936 c:\windows\system32\dllcache\intelppm.sys
- 2006-05-10 05:25 . 2010-02-26 06:12 96768 c:\windows\system32\dllcache\inseng.dll
+ 2006-05-10 05:25 . 2010-04-16 15:38 96768 c:\windows\system32\dllcache\inseng.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 20480 c:\windows\system32\dllcache\inetwiz.exe
+ 2009-02-20 08:32 . 2010-04-16 15:38 81920 c:\windows\system32\dllcache\ieencode.dll
- 2009-02-20 08:32 . 2010-02-26 06:12 81920 c:\windows\system32\dllcache\ieencode.dll
+ 2006-07-10 10:03 . 2010-04-16 13:36 18432 c:\windows\system32\dllcache\iedw.exe
- 2006-07-10 10:03 . 2010-02-25 10:53 18432 c:\windows\system32\dllcache\iedw.exe
+ 2006-07-10 09:52 . 2004-08-17 13:49 49152 c:\windows\system32\dllcache\icwutil.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 24576 c:\windows\system32\dllcache\icwrmind.exe
+ 2006-07-10 09:52 . 2004-08-17 13:49 32768 c:\windows\system32\dllcache\icwdl.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 86016 c:\windows\system32\dllcache\icwconn2.exe
+ 2006-07-10 09:52 . 2004-08-17 13:49 61440 c:\windows\system32\dllcache\icwconn.dll
+ 2006-07-10 10:03 . 2004-08-17 13:49 15423 c:\windows\system32\dllcache\ch7xxnt5.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 18944 c:\windows\system32\dllcache\hscupd.exe
+ 2006-07-10 09:52 . 2004-08-17 13:49 38912 c:\windows\system32\dllcache\hmmapi.dll
+ 2006-07-10 10:03 . 2004-08-03 21:08 15104 c:\windows\system32\dllcache\hidir.sys
+ 2006-07-10 10:03 . 2004-08-17 13:44 25600 c:\windows\system32\dllcache\hidbth.sys
+ 2006-07-10 09:52 . 2004-08-17 13:49 57344 c:\windows\system32\dllcache\h323cc.dll
+ 2006-07-10 10:03 . 2004-08-03 21:07 46464 c:\windows\system32\dllcache\gagp30kx.sys
+ 2001-10-24 11:55 . 2002-09-23 12:00 12160 c:\windows\system32\dllcache\fsvga.sys
- 2006-05-10 05:25 . 2010-02-26 06:12 55808 c:\windows\system32\dllcache\extmgr.dll
+ 2006-05-10 05:25 . 2010-04-16 15:38 55808 c:\windows\system32\dllcache\extmgr.dll
+ 2002-09-23 12:00 . 2004-08-17 13:49 45568 c:\windows\system32\dllcache\evtgprov.dll
+ 2002-09-23 12:00 . 2004-08-17 13:49 22016 c:\windows\system32\dllcache\evntrprv.dll
+ 2002-09-23 12:00 . 2004-08-03 20:59 14208 c:\windows\system32\dllcache\diskdump.sys
+ 2006-07-10 09:52 . 2004-08-17 13:49 40960 c:\windows\system32\dllcache\dcap32.dll
+ 2002-09-20 17:21 . 2004-08-17 13:44 40320 c:\windows\system32\dllcache\crusoe.sys
+ 2001-08-17 21:24 . 2002-09-23 12:00 11776 c:\windows\system32\dllcache\cpqdap01.sys
+ 2006-07-10 09:52 . 2004-08-17 13:49 45056 c:\windows\system32\dllcache\confmrsl.dll
+ 2002-09-23 12:00 . 2002-09-23 12:00 13952 c:\windows\system32\dllcache\cbidf2k.sys
+ 2010-01-13 14:10 . 2010-01-13 14:10 85504 c:\windows\system32\dllcache\cabview.dll
+ 2006-07-10 10:03 . 2004-08-03 21:10 18944 c:\windows\system32\dllcache\bthusb.sys
+ 2006-07-10 10:03 . 2004-08-03 21:10 35456 c:\windows\system32\dllcache\bthprint.sys
+ 2006-07-10 10:03 . 2004-08-03 21:10 38016 c:\windows\system32\dllcache\bthmodem.sys
+ 2006-07-10 10:03 . 2004-08-03 21:10 17024 c:\windows\system32\dllcache\bthenum.sys
+ 2006-07-10 10:03 . 2004-08-17 13:49 17279 c:\windows\system32\dllcache\atv10nt5.dll
+ 2006-07-10 10:03 . 2004-08-17 13:49 14143 c:\windows\system32\dllcache\atv06nt5.dll
+ 2006-07-10 10:03 . 2004-08-17 13:49 25471 c:\windows\system32\dllcache\atv04nt5.dll
+ 2006-07-10 10:03 . 2004-08-17 13:49 11359 c:\windows\system32\dllcache\atv02nt5.dll
+ 2006-07-10 10:03 . 2004-08-17 13:49 21183 c:\windows\system32\dllcache\atv01nt5.dll
+ 2002-09-23 12:00 . 2004-08-03 20:58 55936 c:\windows\system32\dllcache\atmlane.sys
+ 2006-07-10 10:03 . 2004-08-03 20:29 63488 c:\windows\system32\dllcache\atinxsxx.sys
+ 2006-07-10 10:03 . 2004-08-03 20:29 31744 c:\windows\system32\dllcache\atinxbxx.sys
+ 2006-07-10 10:03 . 2004-08-03 20:29 73216 c:\windows\system32\dllcache\atintuxx.sys
+ 2006-07-10 10:03 . 2004-08-03 20:29 13824 c:\windows\system32\dllcache\atinttxx.sys
+ 2006-07-10 10:03 . 2004-08-03 20:29 28672 c:\windows\system32\dllcache\atinsnxx.sys
+ 2006-07-10 10:03 . 2004-08-03 20:29 52224 c:\windows\system32\dllcache\atinraxx.sys
+ 2006-07-10 10:03 . 2004-08-03 20:29 14336 c:\windows\system32\dllcache\atinpdxx.sys
+ 2006-07-10 10:03 . 2004-08-03 20:29 13824 c:\windows\system32\dllcache\atinmdxx.sys
+ 2006-07-10 10:03 . 2004-08-03 20:29 57856 c:\windows\system32\dllcache\atinbtxx.sys
+ 2006-07-10 10:03 . 2004-08-03 20:29 34735 c:\windows\system32\dllcache\ati1xsxx.sys
+ 2006-07-10 10:03 . 2004-08-03 20:29 29455 c:\windows\system32\dllcache\ati1xbxx.sys
+ 2006-07-10 10:03 . 2004-08-03 20:29 36463 c:\windows\system32\dllcache\ati1tuxx.sys
+ 2006-07-10 10:03 . 2004-08-03 20:29 21343 c:\windows\system32\dllcache\ati1ttxx.sys
+ 2006-07-10 10:03 . 2004-08-03 20:29 26367 c:\windows\system32\dllcache\ati1snxx.sys
+ 2006-07-10 10:03 . 2004-08-03 20:29 63663 c:\windows\system32\dllcache\ati1rvxx.sys
+ 2006-07-10 10:03 . 2004-08-03 20:29 30671 c:\windows\system32\dllcache\ati1raxx.sys
+ 2006-07-10 10:03 . 2004-08-03 20:29 12047 c:\windows\system32\dllcache\ati1pdxx.sys
+ 2006-07-10 10:03 . 2004-08-03 20:29 11615 c:\windows\system32\dllcache\ati1mdxx.sys
+ 2006-07-10 10:03 . 2004-08-03 20:29 56623 c:\windows\system32\dllcache\ati1btxx.sys
+ 2010-03-05 14:57 . 2010-03-05 14:57 65536 c:\windows\system32\dllcache\asycfilt.dll
+ 2002-09-20 17:15 . 2004-08-17 13:43 41216 c:\windows\system32\dllcache\amdk7.sys
+ 2002-09-20 17:15 . 2004-08-17 13:43 40832 c:\windows\system32\dllcache\amdk6.sys
+ 2006-07-10 10:03 . 2004-08-03 21:07 43008 c:\windows\system32\dllcache\amdagp.sys
+ 2006-07-10 10:03 . 2004-08-03 21:07 42752 c:\windows\system32\dllcache\alim1541.sys
+ 2002-09-23 12:00 . 2004-08-17 13:49 24064 c:\windows\system32\dllcache\agtintl.dll
+ 2006-07-10 10:03 . 2004-08-03 21:07 44928 c:\windows\system32\dllcache\agpcpq.sys
+ 2006-07-10 10:03 . 2004-08-03 21:07 42368 c:\windows\system32\dllcache\agp440.sys
+ 2002-09-23 12:00 . 2004-08-17 13:49 44032 c:\windows\system32\dllcache\agentsr.dll
+ 2002-09-23 12:00 . 2004-08-17 13:49 24064 c:\windows\system32\dllcache\agentpsh.dll
+ 2002-09-23 12:00 . 2004-08-17 13:49 49152 c:\windows\system32\dllcache\agentmpx.dll
+ 2002-09-23 12:00 . 2004-08-17 13:49 24064 c:\windows\system32\dllcache\agentanm.dll
+ 2002-09-23 12:00 . 2002-09-23 12:00 11776 c:\windows\system32\dllcache\acpiec.sys
+ 2002-09-23 12:00 . 2010-01-13 14:10 85504 c:\windows\system32\cabview.dll
+ 2002-09-23 12:00 . 2010-03-05 14:57 65536 c:\windows\system32\asycfilt.dll
- 2008-07-29 17:16 . 2008-07-29 17:16 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
+ 2010-04-07 21:48 . 2010-04-07 21:48 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
+ 2010-03-23 03:31 . 2010-03-23 03:31 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2010-04-01 09:42 . 2010-04-01 09:42 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
- 2008-05-27 22:49 . 2008-05-27 22:49 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2010-03-31 12:51 . 2010-03-31 12:51 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2010-03-31 12:51 . 2010-03-31 12:51 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
- 2008-05-27 22:49 . 2008-05-27 22:49 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2010-03-31 12:51 . 2010-03-31 12:51 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
- 2008-05-27 22:49 . 2008-05-27 22:49 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
+ 2010-03-31 13:32 . 2010-03-31 13:32 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
- 2008-05-27 23:30 . 2008-05-27 23:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2010-03-31 13:32 . 2010-03-31 13:32 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
- 2003-02-20 19:19 . 2003-02-20 19:19 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\SharedReg12.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp10.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13664 c:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13688 c:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13664 c:\windows\Microsoft.NET\Framework\sbs_system.data.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13696 c:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13672 c:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13664 c:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 86864 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
+ 2010-11-01 16:25 . 2010-11-01 16:25 38400 c:\windows\Installer\ce5b88.msi
+ 2010-05-15 09:10 . 2010-05-15 09:10 25214 c:\windows\Installer\{F7B0939E-58DF-11DF-B3A6-005056806466}\UNINST_Uninstall_G_F6A848FB884248E6A4CDCBDCF41F6A74_1.exe
+ 2010-11-01 16:25 . 2010-11-01 16:25 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2010-05-11 12:05 . 2010-05-11 12:05 44288 c:\windows\Installer\{89A43E80-AC6C-4DA8-9800-F4B30ED577C0}\ARPPRODUCTICON.exe
+ 2010-04-20 12:29 . 2010-04-20 12:29 27136 c:\windows\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe
+ 2010-09-26 01:15 . 2010-09-26 01:15 25214 c:\windows\Installer\{4286E640-B5FB-11DF-AC4B-005056C00008}\UNINST_Uninstall_G_F6A848FB884248E6A4CDCBDCF41F6A74_1.exe
+ 2010-04-16 19:10 . 2010-04-16 19:10 25214 c:\windows\Installer\{08C0729E-3E50-11DF-9D81-005056806466}\UNINST_Uninstall_G_F6A848FB884248E6A4CDCBDCF41F6A74_1.exe
+ 2010-06-10 01:26 . 2010-06-10 01:26 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_1d8e6ada\System.Drawing.Design.dll
+ 2010-06-10 01:26 . 2010-06-10 01:26 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_b5763be6\CustomMarshalers.dll
+ 2010-06-23 13:02 . 2010-06-23 13:02 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\ea1b4fbde0e772748c6ac42d627cf684\UIAutomationProvider.ni.dll
+ 2010-06-23 14:10 . 2010-06-23 14:10 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\f46915dfc57bc7e49c5402e9b8f7ec18\System.Windows.Presentation.ni.dll
+ 2010-06-10 21:16 . 2010-06-10 21:16 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\1c1629f536fa9874ef08d09fb19ab0f0\System.Windows.Presentation.ni.dll
+ 2010-06-10 21:05 . 2010-06-10 21:05 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\1464c662c302ea6372a885161b983732\System.Web.DynamicData.Design.ni.dll
+ 2010-06-10 21:03 . 2010-06-10 21:03 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\5d535ecadf77ac2d9278a1661beb2855\System.ComponentModel.DataAnnotations.ni.dll
+ 2010-06-10 01:27 . 2010-06-10 01:27 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\e67992626a30603458b0df22841c2423\PresentationFontCache.ni.exe
+ 2010-06-23 13:00 . 2010-06-23 13:00 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\18729514178d458aa1225dd068718d4e\PresentationFontCache.ni.exe
+ 2010-06-10 01:24 . 2010-06-10 01:24 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\6be27d744e6e2bfc4b0e25bd2998ef7c\PresentationCFFRasterizer.ni.dll
+ 2010-06-23 13:00 . 2010-06-23 13:00 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\0375dfa28e2f6ef7e89df9edede4b83d\PresentationCFFRasterizer.ni.dll
+ 2010-06-10 21:04 . 2010-06-10 21:04 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\4a52287444c36c89310856b38ff52fe0\Microsoft.Vsa.ni.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2010-06-23 11:38 . 2010-06-23 11:38 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2010-06-10 01:20 . 2010-06-10 01:20 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
- 2009-09-05 01:09 . 2009-09-05 01:09 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
+ 2010-06-23 11:38 . 2010-06-23 11:38 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2010-06-23 11:38 . 2010-06-23 11:38 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2010-06-23 11:38 . 2010-06-23 11:38 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2010-06-23 11:38 . 2010-06-23 11:38 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2010-06-23 11:38 . 2010-06-23 11:38 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2010-06-23 11:38 . 2010-06-23 11:38 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2010-06-23 11:38 . 2010-06-23 11:38 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2010-06-10 01:25 . 2010-06-10 01:25 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-06-10 01:04 . 2010-02-26 06:12 39424 c:\windows\$NtUninstallKB982381$\pngfilt.dll
+ 2010-06-10 01:04 . 2010-02-26 06:12 16384 c:\windows\$NtUninstallKB982381$\jsproxy.dll
+ 2010-06-10 01:04 . 2010-02-26 06:12 96768 c:\windows\$NtUninstallKB982381$\inseng.dll
+ 2010-06-10 01:04 . 2010-02-26 06:12 81920 c:\windows\$NtUninstallKB982381$\ieencode.dll
+ 2010-06-10 01:04 . 2010-02-25 10:53 18432 c:\windows\$NtUninstallKB982381$\iedw.exe
+ 2010-06-10 01:04 . 2010-02-26 06:12 55808 c:\windows\$NtUninstallKB982381$\extmgr.dll
+ 2010-05-27 00:06 . 2010-01-23 08:11 46080 c:\windows\$NtUninstallKB981793$\tzchange.exe
+ 2010-05-27 00:06 . 2010-04-22 22:24 16896 c:\windows\$NtUninstallKB981793$\spuninst\tzchange.dll
+ 2010-06-10 01:22 . 2004-08-17 13:49 65024 c:\windows\$NtUninstallKB979482$\asycfilt.dll
+ 2010-04-14 23:29 . 2004-08-17 13:49 84480 c:\windows\$NtUninstallKB979309$\cabview.dll
+ 2010-06-10 01:04 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB982381\update\spcustom.dll
+ 2010-06-10 01:04 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB982381\spmsg.dll
+ 2010-04-16 16:01 . 2010-04-16 16:01 81920 c:\windows\$hf_mig$\KB982381\SP3QFE\ieencode.dll
+ 2010-04-16 16:08 . 2010-04-16 16:08 81920 c:\windows\$hf_mig$\KB982381\SP3GDR\ieencode.dll
+ 2010-04-16 15:22 . 2010-04-16 15:22 39424 c:\windows\$hf_mig$\KB982381\SP2QFE\pngfilt.dll
+ 2010-04-16 15:22 . 2010-04-16 15:22 16384 c:\windows\$hf_mig$\KB982381\SP2QFE\jsproxy.dll
+ 2010-04-16 15:22 . 2010-04-16 15:22 96768 c:\windows\$hf_mig$\KB982381\SP2QFE\inseng.dll
+ 2010-04-16 15:22 . 2010-04-16 15:22 81920 c:\windows\$hf_mig$\KB982381\SP2QFE\ieencode.dll
+ 2010-04-16 13:29 . 2010-04-16 13:29 18432 c:\windows\$hf_mig$\KB982381\SP2QFE\iedw.exe
+ 2010-04-16 15:22 . 2010-04-16 15:22 55808 c:\windows\$hf_mig$\KB982381\SP2QFE\extmgr.dll
+ 2010-04-15 23:56 . 2007-03-06 01:07 22752 c:\windows\$hf_mig$\KB981350\update\spcustom.dll
+ 2010-04-15 23:56 . 2007-03-06 01:07 15072 c:\windows\$hf_mig$\KB981350\spmsg.dll
+ 2010-04-15 23:56 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB980232\update\spcustom.dll
+ 2010-04-15 23:56 . 2009-05-26 09:01 18296 c:\windows\$hf_mig$\KB980232\spmsg.dll
+ 2010-06-10 01:27 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB980218\update\spcustom.dll
+ 2010-06-10 01:27 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB980218\spmsg.dll
+ 2010-06-10 01:26 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB980195\update\spcustom.dll
+ 2010-06-10 01:26 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB980195\spmsg.dll
+ 2010-04-15 23:56 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB979683\update\spcustom.dll
+ 2010-04-15 11:06 . 2010-03-05 14:54 16896 c:\windows\$hf_mig$\KB979683\update\mpsyschk.dll
+ 2010-04-15 23:56 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB979683\spmsg.dll
+ 2010-06-10 01:23 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB979559\update\spcustom.dll
+ 2010-06-10 01:23 . 2009-05-26 09:01 18296 c:\windows\$hf_mig$\KB979559\spmsg.dll
+ 2010-06-10 01:22 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB979482\update\spcustom.dll
+ 2010-06-10 01:22 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB979482\spmsg.dll
+ 2010-03-05 14:53 . 2010-03-05 14:53 65536 c:\windows\$hf_mig$\KB979482\SP3QFE\asycfilt.dll
+ 2010-03-05 14:42 . 2010-03-05 14:42 65536 c:\windows\$hf_mig$\KB979482\SP3GDR\asycfilt.dll
+ 2010-03-05 14:50 . 2010-03-05 14:50 65536 c:\windows\$hf_mig$\KB979482\SP2QFE\asycfilt.dll
+ 2010-04-14 23:29 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB979309\update\spcustom.dll
+ 2010-04-14 23:29 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB979309\spmsg.dll
+ 2010-01-13 13:49 . 2010-01-13 13:49 86016 c:\windows\$hf_mig$\KB979309\SP3QFE\cabview.dll
+ 2010-01-13 14:02 . 2010-01-13 14:02 86016 c:\windows\$hf_mig$\KB979309\SP3GDR\cabview.dll
+ 2010-01-13 13:59 . 2010-01-13 13:59 85504 c:\windows\$hf_mig$\KB979309\SP2QFE\cabview.dll
+ 2010-04-14 23:29 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB978601\update\spcustom.dll
+ 2010-04-14 23:29 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB978601\spmsg.dll
+ 2010-05-14 00:16 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978542\update\spcustom.dll
+ 2010-05-14 00:16 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB978542\spmsg.dll
+ 2010-04-15 23:55 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978338\update\spcustom.dll
+ 2010-04-15 23:55 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB978338\spmsg.dll
+ 2010-04-15 23:55 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB977816\update\spcustom.dll
+ 2010-04-15 23:55 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB977816\spmsg.dll
+ 2010-06-10 01:21 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB975562\update\spcustom.dll
+ 2010-06-10 01:21 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB975562\spmsg.dll
+ 2010-07-16 14:31 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2229593\update\spcustom.dll
+ 2010-07-16 14:31 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB2229593\spmsg.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2010-06-23 11:38 . 2010-06-23 11:38 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2006-07-10 10:03 . 2004-08-17 13:49 5632 c:\windows\system32\dllcache\wmm2res2.dll
+ 2006-07-10 10:03 . 2004-08-17 13:49 4096 c:\windows\system32\dllcache\wmm2eres.dll
+ 2006-07-10 10:03 . 2004-08-03 21:07 6016 c:\windows\system32\dllcache\smbali.sys
+ 2006-07-10 10:03 . 2004-08-17 13:49 3901 c:\windows\system32\dllcache\siint5.dll
+ 2002-09-23 12:00 . 2002-09-23 12:00 3456 c:\windows\system32\dllcache\oprghdlr.sys
+ 2006-07-10 09:52 . 2004-08-17 13:49 4096 c:\windows\system32\dllcache\msdaurl.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 4096 c:\windows\system32\dllcache\msdasc.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 4096 c:\windows\system32\dllcache\msdaer.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 4096 c:\windows\system32\dllcache\msdaenum.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 4096 c:\windows\system32\dllcache\msdadc.dll
+ 2006-07-10 17:51 . 2001-08-17 21:46 6400 c:\windows\system32\dllcache\enum1394.sys
+ 2006-07-10 09:51 . 2004-08-17 13:49 9728 c:\windows\system32\dllcache\comrepl.exe
+ 2006-07-10 10:03 . 2004-08-17 13:49 3775 c:\windows\system32\dllcache\adv11nt5.dll
+ 2006-07-10 10:03 . 2004-08-17 13:49 3711 c:\windows\system32\dllcache\adv09nt5.dll
+ 2006-07-10 10:03 . 2004-08-17 13:49 3135 c:\windows\system32\dllcache\adv08nt5.dll
+ 2006-07-10 10:03 . 2004-08-17 13:49 3647 c:\windows\system32\dllcache\adv07nt5.dll
+ 2006-07-10 10:03 . 2004-08-17 13:49 3615 c:\windows\system32\dllcache\adv05nt5.dll
+ 2006-07-10 10:03 . 2004-08-17 13:49 3967 c:\windows\system32\dllcache\adv02nt5.dll
+ 2006-07-10 10:03 . 2004-08-17 13:49 4255 c:\windows\system32\dllcache\adv01nt5.dll
+ 2010-06-23 11:38 . 2010-06-23 11:38 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2010-06-23 11:38 . 2010-06-23 11:38 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2010-06-23 11:38 . 2010-06-23 11:38 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2009-07-11 23:12 . 2009-07-11 23:12 632656 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll
+ 2009-07-11 23:09 . 2009-07-11 23:09 554832 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcp80.dll
+ 2009-07-11 23:08 . 2009-07-11 23:08 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcm80.dll
- 2006-05-11 08:57 . 2010-02-26 00:58 360448 c:\windows\system32\xpsp3res.dll
+ 2006-05-11 08:57 . 2010-04-16 13:47 360448 c:\windows\system32\xpsp3res.dll
+ 2002-09-23 12:00 . 2009-12-24 07:07 177664 c:\windows\system32\wintrust.dll
+ 2002-09-23 12:00 . 2010-04-16 15:38 663040 c:\windows\system32\wininet.dll
- 2002-09-23 12:00 . 2010-02-26 06:12 663040 c:\windows\system32\wininet.dll
- 2002-09-23 12:00 . 2007-12-18 14:43 417792 c:\windows\system32\vbscript.dll
+ 2002-09-23 12:00 . 2010-03-10 08:07 417792 c:\windows\system32\vbscript.dll
- 2002-09-23 12:00 . 2010-02-26 06:12 625152 c:\windows\system32\urlmon.dll
+ 2002-09-23 12:00 . 2010-04-16 15:38 625152 c:\windows\system32\urlmon.dll
+ 2002-09-23 12:00 . 2010-04-16 15:38 474112 c:\windows\system32\shlwapi.dll
- 2002-09-23 12:00 . 2010-02-26 06:12 474112 c:\windows\system32\shlwapi.dll
+ 2010-03-30 22:10 . 2010-03-30 22:10 295264 c:\windows\system32\PresentationHost.exe
+ 2007-04-05 16:42 . 2010-09-24 14:14 214520 c:\windows\system32\PnkBstrB.exe
+ 2002-09-23 12:00 . 2010-10-31 10:07 443588 c:\windows\system32\perfh009.dat
+ 2002-09-23 12:00 . 2010-10-31 10:07 440316 c:\windows\system32\perfh005.dat
+ 2002-09-23 12:00 . 2010-04-16 15:38 532480 c:\windows\system32\mstime.dll
- 2002-09-23 12:00 . 2010-02-26 06:12 532480 c:\windows\system32\mstime.dll
+ 2002-09-23 12:00 . 2010-04-16 15:38 146432 c:\windows\system32\msrating.dll
- 2002-09-23 12:00 . 2010-02-26 06:12 146432 c:\windows\system32\msrating.dll
+ 2002-09-23 12:00 . 2010-04-16 15:38 449024 c:\windows\system32\mshtmled.dll
- 2002-09-23 12:00 . 2010-02-26 06:12 449024 c:\windows\system32\mshtmled.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 297808 c:\windows\system32\mscoree.dll
+ 2010-01-27 00:58 . 2010-01-27 00:58 256280 c:\windows\system32\Macromed\Flash\FlashUtil10e.exe
+ 2006-07-10 09:52 . 2010-01-29 15:07 683520 c:\windows\system32\inetcomm.dll
- 2006-07-10 09:52 . 2008-04-11 18:51 683520 c:\windows\system32\inetcomm.dll
- 2002-09-23 12:00 . 2010-02-26 06:12 251392 c:\windows\system32\iepeers.dll
+ 2002-09-23 12:00 . 2010-04-16 15:38 251392 c:\windows\system32\iepeers.dll
+ 2006-07-10 17:50 . 2010-12-02 09:49 364912 c:\windows\system32\FNTCACHE.DAT
- 2002-09-23 12:00 . 2010-02-26 06:12 205312 c:\windows\system32\dxtrans.dll
+ 2002-09-23 12:00 . 2010-04-16 15:38 205312 c:\windows\system32\dxtrans.dll
- 2002-09-23 12:00 . 2010-02-26 06:12 357888 c:\windows\system32\dxtmsft.dll
+ 2002-09-23 12:00 . 2010-04-16 15:38 357888 c:\windows\system32\dxtmsft.dll
+ 2002-09-23 12:00 . 2010-02-11 12:01 226880 c:\windows\system32\drivers\tcpip6.sys
+ 2007-04-05 16:42 . 2010-09-24 13:30 137464 c:\windows\system32\drivers\PnkBstrK.sys
+ 2002-09-23 12:00 . 2004-08-03 21:14 182912 c:\windows\system32\drivers\ndis.sys
+ 2002-09-23 12:00 . 2010-02-24 12:31 454016 c:\windows\system32\drivers\mrxsmb.sys
+ 2006-07-10 10:03 . 2004-08-17 13:49 221184 c:\windows\system32\dllcache\wmpns.dll
+ 2006-07-10 10:03 . 2004-08-17 13:49 325632 c:\windows\system32\dllcache\wmm2fxb.dll
+ 2006-07-10 10:03 . 2004-08-17 13:49 502272 c:\windows\system32\dllcache\wmm2fxa.dll
+ 2006-07-10 10:03 . 2004-08-17 13:49 167936 c:\windows\system32\dllcache\wmm2ae.dll
+ 2006-07-10 09:51 . 2004-08-17 13:49 132096 c:\windows\system32\dllcache\wmipdskq.dll
+ 2006-07-10 09:51 . 2004-08-17 13:49 140800 c:\windows\system32\dllcache\wmidcprv.dll
+ 2006-07-10 09:51 . 2004-08-17 13:49 361472 c:\windows\system32\dllcache\wmic.exe
+ 2009-12-24 07:07 . 2009-12-24 07:07 177664 c:\windows\system32\dllcache\wintrust.dll
+ 2006-07-10 17:51 . 2004-08-17 13:49 146944 c:\windows\system32\dllcache\winspool.drv
+ 2006-05-10 05:25 . 2010-04-16 15:38 663040 c:\windows\system32\dllcache\wininet.dll
- 2006-05-10 05:25 . 2010-02-26 06:12 663040 c:\windows\system32\dllcache\wininet.dll
+ 2006-07-10 09:51 . 2004-08-17 13:49 197120 c:\windows\system32\dllcache\wbemupgd.dll
+ 2006-07-10 09:51 . 2004-08-17 13:49 117760 c:\windows\system32\dllcache\wbemtest.exe
+ 2006-07-10 09:51 . 2004-08-17 13:49 198144 c:\windows\system32\dllcache\wbemcntl.dll
+ 2006-07-10 09:52 . 2004-08-17 13:48 249856 c:\windows\system32\dllcache\wab32res.dll
+ 2006-07-10 09:51 . 2004-08-17 13:49 131584 c:\windows\system32\dllcache\viewprov.dll
+ 2007-12-18 14:43 . 2010-03-10 08:07 417792 c:\windows\system32\dllcache\vbscript.dll
- 2007-12-18 14:43 . 2007-12-18 14:43 417792 c:\windows\system32\dllcache\vbscript.dll
- 2006-05-10 05:25 . 2010-02-26 06:12 625152 c:\windows\system32\dllcache\urlmon.dll
+ 2006-05-10 05:25 . 2010-04-16 15:38 625152 c:\windows\system32\dllcache\urlmon.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 150528 c:\windows\system32\dllcache\uploadm.exe
+ 2002-09-23 12:00 . 2004-08-17 13:49 279040 c:\windows\system32\dllcache\tshoot.dll
+ 2006-08-16 09:37 . 2010-02-11 12:01 226880 c:\windows\system32\dllcache\tcpip6.sys
+ 2002-09-23 12:00 . 2004-08-17 13:49 156160 c:\windows\system32\dllcache\sysmod_a.dll
+ 2002-09-23 12:00 . 2004-08-17 13:49 169472 c:\windows\system32\dllcache\sysmod.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 217088 c:\windows\system32\dllcache\sqlxmlx.dll
+ 2006-07-10 10:03 . 2004-08-17 13:49 110592 c:\windows\system32\dllcache\sqlse20.dll
+ 2006-07-10 10:03 . 2004-08-17 13:49 462848 c:\windows\system32\dllcache\sqlqp20.dll
+ 2006-07-10 10:03 . 2004-08-17 13:49 151552 c:\windows\system32\dllcache\sqldb20.dll
+ 2002-09-23 12:00 . 2004-08-17 13:49 130048 c:\windows\system32\dllcache\softkbd.dll
+ 2006-07-10 10:03 . 2004-08-03 20:41 404990 c:\windows\system32\dllcache\slntamr.sys
+ 2006-07-10 10:03 . 2004-08-03 20:41 129535 c:\windows\system32\dllcache\slnt7554.sys
+ 2006-05-10 05:25 . 2010-04-16 15:38 474112 c:\windows\system32\dllcache\shlwapi.dll
- 2006-05-10 05:25 . 2010-02-26 06:12 474112 c:\windows\system32\dllcache\shlwapi.dll
+ 2002-09-23 12:00 . 2004-08-17 13:49 188928 c:\windows\system32\dllcache\script_a.dll
+ 2002-09-23 12:00 . 2004-08-17 13:49 203776 c:\windows\system32\dllcache\script.dll
+ 2006-07-10 17:51 . 2004-08-17 13:49 741376 c:\windows\system32\dllcache\sapi.dll
+ 2006-07-10 10:03 . 2004-08-03 20:29 166912 c:\windows\system32\dllcache\s3gnbm.sys
+ 2006-07-10 09:51 . 2004-08-17 13:49 237056 c:\windows\system32\dllcache\provthrd.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 102400 c:\windows\system32\dllcache\pchshell.dll
+ 2002-09-23 12:00 . 2004-08-17 13:43 119808 c:\windows\system32\dllcache\pcmcia.sys
+ 2006-07-10 09:52 . 2004-08-17 13:49 487424 c:\windows\system32\dllcache\oledb32.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 104448 c:\windows\system32\dllcache\oeimport.dll
+ 2006-07-10 10:03 . 2004-08-03 20:41 180360 c:\windows\system32\dllcache\ntmtlfax.sys
+ 2006-07-10 09:51 . 2004-08-17 13:49 212992 c:\windows\system32\dllcache\ntevt.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 226816 c:\windows\system32\dllcache\npdrmv2.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 167936 c:\windows\system32\dllcache\nmoldwb.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 151552 c:\windows\system32\dllcache\nmft.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 229376 c:\windows\system32\dllcache\nmas.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 221184 c:\windows\system32\dllcache\nac.dll
+ 2006-07-10 10:03 . 2004-08-03 20:29 452736 c:\windows\system32\dllcache\mtxparhm.sys
+ 2006-07-10 10:03 . 2004-08-03 20:41 126686 c:\windows\system32\dllcache\mtlmnt5.sys
- 2006-05-10 05:25 . 2010-02-26 06:12 532480 c:\windows\system32\dllcache\mstime.dll
+ 2006-05-10 05:25 . 2010-04-16 15:38 532480 c:\windows\system32\dllcache\mstime.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 274432 c:\windows\system32\dllcache\mst120.dll
- 2006-05-10 05:25 . 2010-02-26 06:12 146432 c:\windows\system32\dllcache\msrating.dll
+ 2006-05-10 05:25 . 2010-04-16 15:38 146432 c:\windows\system32\dllcache\msrating.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 562176 c:\windows\system32\dllcache\msobmain.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 122368 c:\windows\system32\dllcache\msobcomm.dll
+ 2006-05-10 05:25 . 2010-04-16 15:38 449024 c:\windows\system32\dllcache\mshtmled.dll
- 2006-05-10 05:25 . 2010-02-26 06:12 449024 c:\windows\system32\dllcache\mshtmled.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 315392 c:\windows\system32\dllcache\msdasql.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 118784 c:\windows\system32\dllcache\msdarem.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 204800 c:\windows\system32\dllcache\msdaps.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 200704 c:\windows\system32\dllcache\msdaprst.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 233472 c:\windows\system32\dllcache\msdaora.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 159232 c:\windows\system32\dllcache\msconfig.exe
+ 2002-09-23 12:00 . 2004-08-17 13:49 220160 c:\windows\system32\dllcache\mscandui.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 155648 c:\windows\system32\dllcache\msadds.dll
+ 2006-05-05 09:41 . 2010-02-24 12:31 454016 c:\windows\system32\dllcache\mrxsmb.sys
+ 2002-09-23 12:00 . 2004-08-17 13:49 235520 c:\windows\system32\dllcache\migwiz_a.exe
+ 2002-09-23 12:00 . 2004-08-17 13:49 103424 c:\windows\system32\dllcache\migload.exe
+ 2002-09-23 12:00 . 2004-08-17 13:49 192512 c:\windows\system32\dllcache\migism_a.dll
+ 2002-09-23 12:00 . 2004-08-17 13:49 201216 c:\windows\system32\dllcache\migism.dll
+ 2006-07-27 13:26 . 2010-01-29 15:07 683520 c:\windows\system32\dllcache\inetcomm.dll
- 2006-07-27 13:26 . 2008-04-11 18:51 683520 c:\windows\system32\dllcache\inetcomm.dll
+ 2006-05-10 05:25 . 2010-04-16 15:38 251392 c:\windows\system32\dllcache\iepeers.dll
- 2006-05-10 05:25 . 2010-02-26 06:12 251392 c:\windows\system32\dllcache\iepeers.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 172032 c:\windows\system32\dllcache\icwhelp.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 215552 c:\windows\system32\dllcache\icwconn1.exe
+ 2006-07-10 10:03 . 2004-08-03 20:41 685056 c:\windows\system32\dllcache\hsfcxts2.sys
+ 2006-07-10 10:03 . 2004-08-03 20:41 220032 c:\windows\system32\dllcache\hsfbs2s2.sys
+ 2010-07-16 08:13 . 2010-06-14 14:30 743936 c:\windows\system32\dllcache\helpsvc.exe
+ 2006-07-10 09:52 . 2004-08-17 13:49 768512 c:\windows\system32\dllcache\helpctr.exe
+ 2002-09-23 12:00 . 2004-08-17 13:49 108544 c:\windows\system32\dllcache\guitrn_a.dll
+ 2002-09-23 12:00 . 2004-08-17 13:49 124416 c:\windows\system32\dllcache\guitrn.dll
+ 2006-07-10 09:54 . 2004-08-17 13:49 618605 c:\windows\system32\dllcache\fp4autl.dll
- 2006-05-10 05:25 . 2010-02-26 06:12 205312 c:\windows\system32\dllcache\dxtrans.dll
+ 2006-05-10 05:25 . 2010-04-16 15:38 205312 c:\windows\system32\dllcache\dxtrans.dll
- 2006-05-10 05:25 . 2010-02-26 06:12 357888 c:\windows\system32\dllcache\dxtmsft.dll
+ 2006-05-10 05:25 . 2010-04-16 15:38 357888 c:\windows\system32\dllcache\dxtmsft.dll
+ 2006-07-10 09:51 . 2004-08-17 13:49 543232 c:\windows\system32\dllcache\dialer.exe
+ 2001-10-24 11:53 . 2002-09-23 12:00 262528 c:\windows\system32\dllcache\cinemst2.sys
- 2006-05-10 05:25 . 2010-02-26 06:12 151552 c:\windows\system32\dllcache\cdfview.dll
+ 2006-05-10 05:25 . 2010-04-16 15:38 151552 c:\windows\system32\dllcache\cdfview.dll
+ 2006-07-10 09:52 . 2004-08-17 13:49 385024 c:\windows\system32\dllcache\callcont.dll
+ 2006-07-10 10:03 . 2004-08-03 20:58 100992 c:\windows\system32\dllcache\bthpan.sys
+ 2010-04-20 05:48 . 2010-04-20 05:48 285696 c:\windows\system32\dllcache\atmfd.dll
+ 2006-07-10 10:03 . 2004-08-03 20:29 104960 c:\windows\system32\dllcache\atinrvxx.sys
+ 2006-07-10 10:03 . 2004-08-17 13:43 701440 c:\windows\system32\dllcache\ati2mtag.sys
+ 2006-07-10 10:03 . 2004-08-17 13:43 326912 c:\windows\system32\dllcache\ati2mtaa.sys
+ 2002-09-23 12:00 . 2004-08-17 13:49 214016 c:\windows\system32\dllcache\agentctl.dll
+ 2006-08-16 11:59 . 2010-02-12 04:47 100864 c:\windows\system32\dllcache\6to4svc.dll
- 2002-09-23 12:00 . 2010-02-26 06:12 151552 c:\windows\system32\cdfview.dll
+ 2002-09-23 12:00 . 2010-04-16 15:38 151552 c:\windows\system32\cdfview.dll
+ 2010-04-13 08:25 . 2010-02-12 10:03 293376 c:\windows\system32\browserchoice.exe
+ 2002-09-23 12:00 . 2010-04-20 05:48 285696 c:\windows\system32\atmfd.dll
- 2002-09-23 12:00 . 2004-08-17 13:48 285696 c:\windows\system32\atmfd.dll
+ 2002-09-23 12:00 . 2010-02-12 04:47 100864 c:\windows\system32\6to4svc.dll
+ 2006-07-10 09:52 . 2010-06-14 14:30 743936 c:\windows\PCHealth\HelpCtr\Binaries\helpsvc.exe
- 2006-07-10 09:52 . 2004-08-17 13:49 743936 c:\windows\PCHealth\HelpCtr\Binaries\helpsvc.exe
+ 2010-03-30 22:16 . 2010-03-30 22:16 130408 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
+ 2010-04-07 21:48 . 2010-04-07 21:48 970752 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
+ 2010-04-07 21:48 . 2010-04-07 21:48 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
- 2008-07-29 17:16 . 2008-07-29 17:16 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
+ 2010-03-23 03:31 . 2010-03-23 03:31 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2010-02-09 10:22 . 2010-02-09 10:22 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
- 2008-07-25 09:17 . 2008-07-25 09:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2010-03-31 12:51 . 2010-03-31 12:51 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
- 2008-05-27 22:49 . 2008-05-27 22:49 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2010-03-31 12:49 . 2010-03-31 12:49 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
- 2008-05-27 22:48 . 2008-05-27 22:48 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
- 2008-05-27 23:30 . 2008-05-27 23:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2010-03-31 13:32 . 2010-03-31 13:32 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2010-07-30 09:02 . 2010-07-30 09:02 451072 c:\windows\M Exe Editor\uninstall.exe
+ 2010-12-01 17:06 . 2010-12-01 17:06 473600 c:\windows\Logo Design Studio Trial\uninstall.exe
+ 2010-04-20 12:29 . 2010-04-20 12:29 791552 c:\windows\Installer\8d13f2.msi
+ 2010-05-11 12:00 . 2010-05-11 12:00 213504 c:\windows\Installer\4f2092e.msi
+ 2010-02-24 22:14 . 2010-02-24 22:14 543232 c:\windows\Installer\1d8face.msp
+ 2006-05-05 09:41 . 2010-02-24 12:31 454016 c:\windows\Driver Cache\i386\mrxsmb.sys
+ 2010-06-10 01:26 . 2010-06-10 01:26 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_a7a69f80\System.Drawing.dll
+ 2010-06-10 01:27 . 2010-06-10 01:27 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_06fc3b36\System.Drawing.Design.dll
+ 2010-06-10 01:27 . 2010-06-10 01:27 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_1e9aa815\CustomMarshalers.dll
+ 2010-06-10 11:29 . 2010-06-10 11:29 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\4d07b1ccecca66f320c1a0971dd614d1\WsatConfig.ni.exe
+ 2010-06-23 13:02 . 2010-06-23 13:02 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\b3a9fac9aea3ad913781fafbdcbb0cae\WindowsFormsIntegration.ni.dll

+ 2010-06-10 01:30 . 2010-06-10 01:30 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\a7c702f75d47bf841b9587e582c2d0b2\WindowsFormsIntegration.ni.dll
+ 2010-06-23 13:02 . 2010-06-23 13:02 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\4131a3627fec69291dbaed236f30dc65\UIAutomationClient.ni.dll
+ 2010-06-10 01:30 . 2010-06-10 01:30 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\3a78043c85333d5af49a0d958912ae4a\UIAutomationClient.ni.dll
+ 2010-06-10 21:16 . 2010-06-10 21:16 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\747e84d81d1de2041661f0f71b04734a\System.Xml.Linq.ni.dll
+ 2010-06-10 21:05 . 2010-06-10 21:05 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\d51dfbd8d5431eb89181baaa24863e15\System.Web.Routing.ni.dll
+ 2010-06-10 21:15 . 2010-06-10 21:15 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\436dde9611932489da3dc8a1be170843\System.Web.RegularExpressions.ni.dll
+ 2010-06-10 21:15 . 2010-06-10 21:15 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\e8ef769b3e899e62b26daadee50b97ed\System.Web.Extensions.Design.ni.dll
+ 2010-06-10 21:05 . 2010-06-10 21:05 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\ce3b446b7bee5c47949c994ec89b1649\System.Web.Entity.ni.dll
+ 2010-06-10 21:05 . 2010-06-10 21:05 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\ad04fe1182e55e7c01066b62a4bee6b5\System.Web.Entity.Design.ni.dll
+ 2010-06-10 21:05 . 2010-06-10 21:05 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\20ba0d4d182a1a9c1f54c00d3bc29a68\System.Web.DynamicData.ni.dll
+ 2010-06-10 21:05 . 2010-06-10 21:05 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\c97ecf9250c2f0794262534f27f98b72\System.Web.Abstractions.ni.dll
+ 2010-06-10 21:05 . 2010-06-10 21:05 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\9c56656c88979cf18de6cbcb6587ba8f\System.Transactions.ni.dll
+ 2010-06-10 21:04 . 2010-06-10 21:04 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\5adb0f89d469632511aed9d88cfe05c4\System.ServiceProcess.ni.dll
+ 2010-06-10 20:40 . 2010-06-10 20:40 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\42b2ffb594dbd5652a576a0dce28722c\System.Security.ni.dll
+ 2010-06-10 21:04 . 2010-06-10 21:04 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\3231473e2ec4451c8f218930fda80d19\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2010-06-10 21:04 . 2010-06-10 21:04 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\f90965b9d9a6a6604c9a66f57c37c026\System.Net.ni.dll
+ 2010-06-10 21:04 . 2010-06-10 21:04 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\16670b6870746e5a8dc4a73a76a90bed\System.Management.ni.dll
+ 2010-06-10 21:04 . 2010-06-10 21:04 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\e6bd59fec415e273c173170c6508180a\System.Management.Instrumentation.ni.dll
+ 2010-06-10 11:19 . 2010-06-10 11:19 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\e3eb86170cba4c80e6e22ca33c63c218\System.IO.Log.ni.dll
+ 2010-06-10 20:40 . 2010-06-10 20:40 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\cfa48936affc9a5fb89f0bf66cc52a47\System.IdentityModel.Selectors.ni.dll
+ 2010-06-10 21:04 . 2010-06-10 21:04 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\e9edc5cd12ebb513b4a3c53cb4640771\System.EnterpriseServices.Wrapper.dll
+ 2010-06-10 21:04 . 2010-06-10 21:04 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\e9edc5cd12ebb513b4a3c53cb4640771\System.EnterpriseServices.ni.dll
+ 2010-06-10 01:29 . 2010-06-10 01:29 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\aeba6820f20655dec7fe0fe05aaeb818\System.Drawing.Design.ni.dll
+ 2010-06-10 21:04 . 2010-06-10 21:04 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\9ef70079beca3a9982a3aa76ebc0ddd8\System.DirectoryServices.Protocols.ni.dll
+ 2010-06-10 21:04 . 2010-06-10 21:04 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\277619716d9136216065bea970365c65\System.DirectoryServices.AccountManagement.ni.dll
+ 2010-06-10 21:04 . 2010-06-10 21:04 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\90b67e13866b176ae6cbdb23144f724d\System.Data.Services.Client.ni.dll
+ 2010-06-10 21:04 . 2010-06-10 21:04 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\131a477d41a8669b15696128b94c2636\System.Data.Services.Design.ni.dll
+ 2010-06-10 21:04 . 2010-06-10 21:04 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\d4990681ce373d81a52b231ee4c4afea\System.Data.Entity.Design.ni.dll
+ 2010-06-10 21:03 . 2010-06-10 21:03 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\9e9d66a3a0e16fceead505c25af569eb\System.Data.DataSetExtensions.ni.dll
+ 2010-06-10 20:40 . 2010-06-10 20:40 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\631b3eba1ba5bd3c3f027f34011cadeb\System.Configuration.ni.dll
+ 2010-06-10 21:04 . 2010-06-10 21:04 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\39e4f9a276fb12125d8a1444d8b65a84\System.Configuration.Install.ni.dll
+ 2010-06-10 21:03 . 2010-06-10 21:03 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\849916c5cb3ff7763d15a3976766c2f6\System.AddIn.ni.dll
+ 2010-06-10 11:29 . 2010-06-10 11:29 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\f38a426b90e6c526dcb2c435c7380450\SMSvcHost.ni.exe
+ 2010-06-10 11:29 . 2010-06-10 11:29 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\6cabc7d1700c224e8b41ff2f96a3087c\SMDiagnostics.ni.dll
+ 2010-06-10 11:29 . 2010-06-10 11:29 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\5c8f5ca36498f43980d64820d8186c8a\ServiceModelReg.ni.exe
+ 2010-06-10 01:28 . 2010-06-10 01:28 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\ae733e4062edba3a33bb0a632bef66bf\PresentationFramework.Royale.ni.dll
+ 2010-06-23 13:01 . 2010-06-23 13:01 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a10c2c7e38291c3ada631ad13e762818\PresentationFramework.Aero.ni.dll
+ 2010-06-23 13:01 . 2010-06-23 13:01 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\7579c76fa81eb309d3170b62467be58d\PresentationFramework.Luna.ni.dll
+ 2010-06-10 01:28 . 2010-06-10 01:28 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\3ffad524016f0aba7b11a8aa33301a65\PresentationFramework.Aero.ni.dll
+ 2010-06-23 13:01 . 2010-06-23 13:01 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\3bef0992fb684e71dbfab5c0a99316af\PresentationFramework.Classic.ni.dll
+ 2010-06-23 13:01 . 2010-06-23 13:01 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2f6687d394813d760496f60acf046384\PresentationFramework.Royale.ni.dll
+ 2010-06-10 01:28 . 2010-06-10 01:28 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\201968d038a23a4688310fed1eeaddaa\PresentationFramework.Classic.ni.dll
+ 2010-06-10 01:28 . 2010-06-10 01:28 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\1ead87ca8eb84c595c77c70e3b2df88d\PresentationFramework.Luna.ni.dll
+ 2010-06-10 20:40 . 2010-06-10 20:40 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\7700963610c1af364aa934c3c824b7b4\MSBuild.ni.exe
+ 2010-06-10 11:28 . 2010-06-10 11:28 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\c74d4c69c49992dfb23ba512081dc3de\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2010-06-10 20:40 . 2010-06-10 20:40 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\a6a9f24b1a8984eaafbabb1ee968e359\Microsoft.Build.Utilities.ni.dll
+ 2010-06-10 20:40 . 2010-06-10 20:40 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\2fa81d363cb1496be2427d848a867409\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2010-06-10 20:40 . 2010-06-10 20:40 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\c4c360df9c1024ebc3f0de77f5cf8b1c\Microsoft.Build.Engine.ni.dll
+ 2010-06-10 20:40 . 2010-06-10 20:40 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\c9386dcd89c2518a74115f3bfd861830\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2010-06-10 11:28 . 2010-06-10 11:28 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\abb62e3ed74c974f0282bc7ea5d3f1c1\ComSvcConfig.ni.exe
+ 2010-06-10 20:40 . 2010-06-10 20:40 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\6d34f00b6a782d15bec70d6cdb00b5e8\AspNetMMCExt.ni.dll
+ 2010-06-23 11:38 . 2010-06-23 11:38 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2010-06-23 11:38 . 2010-06-23 11:38 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2010-06-23 11:38 . 2010-06-23 11:38 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-06-10 01:20 . 2010-06-10 01:20 970752 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2010-06-10 01:20 . 2010-06-10 01:20 438272 c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2010-06-23 11:38 . 2010-06-23 11:38 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2010-06-10 01:20 . 2010-06-10 01:20 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
- 2009-09-05 01:09 . 2009-09-05 01:09 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
+ 2010-06-23 11:38 . 2010-06-23 11:38 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2010-06-23 11:38 . 2010-06-23 11:38 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2010-06-23 11:38 . 2010-06-23 11:38 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2010-06-23 11:38 . 2010-06-23 11:38 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2010-06-10 01:04 . 2010-02-26 00:58 360448 c:\windows\$NtUninstallKB982381$\xpsp3res.dll
+ 2010-06-10 01:04 . 2010-02-26 06:12 663040 c:\windows\$NtUninstallKB982381$\wininet.dll
+ 2010-06-10 01:04 . 2010-02-26 06:12 625152 c:\windows\$NtUninstallKB982381$\urlmon.dll
+ 2010-06-10 01:04 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB982381$\spuninst\updspapi.dll
+ 2010-06-10 01:04 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB982381$\spuninst\spuninst.exe
+ 2010-06-10 01:04 . 2010-02-26 06:12 474112 c:\windows\$NtUninstallKB982381$\shlwapi.dll
+ 2010-06-10 01:04 . 2010-02-26 06:12 532480 c:\windows\$NtUninstallKB982381$\mstime.dll
+ 2010-06-10 01:04 . 2010-02-26 06:12 146432 c:\windows\$NtUninstallKB982381$\msrating.dll
+ 2010-06-10 01:04 . 2010-02-26 06:12 449024 c:\windows\$NtUninstallKB982381$\mshtmled.dll
+ 2010-06-10 01:04 . 2010-02-26 06:12 251392 c:\windows\$NtUninstallKB982381$\iepeers.dll
+ 2010-06-10 01:04 . 2010-02-26 06:12 205312 c:\windows\$NtUninstallKB982381$\dxtrans.dll
+ 2010-06-10 01:04 . 2010-02-26 06:12 357888 c:\windows\$NtUninstallKB982381$\dxtmsft.dll
+ 2010-06-10 01:04 . 2010-02-26 06:12 151552 c:\windows\$NtUninstallKB982381$\cdfview.dll
+ 2010-05-27 00:06 . 2009-05-26 09:01 391032 c:\windows\$NtUninstallKB981793$\spuninst\updspapi.dll
+ 2010-05-27 00:06 . 2009-05-26 09:01 233848 c:\windows\$NtUninstallKB981793$\spuninst\spuninst.exe
+ 2010-04-15 23:56 . 2007-12-18 14:43 417792 c:\windows\$NtUninstallKB981350$\vbscript.dll
+ 2010-04-15 23:56 . 2007-03-06 01:08 379616 c:\windows\$NtUninstallKB981350$\spuninst\updspapi.dll
+ 2010-04-15 23:56 . 2007-03-06 01:07 215776 c:\windows\$NtUninstallKB981350$\spuninst\spuninst.exe
+ 2010-04-15 23:56 . 2009-05-26 09:01 391032 c:\windows\$NtUninstallKB980232$\spuninst\updspapi.dll
+ 2010-04-15 23:56 . 2009-05-26 09:01 233848 c:\windows\$NtUninstallKB980232$\spuninst\spuninst.exe
+ 2010-04-15 23:56 . 2009-12-04 14:41 453760 c:\windows\$NtUninstallKB980232$\mrxsmb.sys
+ 2010-06-10 01:27 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB980218$\spuninst\updspapi.dll
+ 2010-06-10 01:27 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB980218$\spuninst\spuninst.exe
+ 2010-06-10 01:27 . 2004-08-17 13:48 285696 c:\windows\$NtUninstallKB980218$\atmfd.dll
+ 2010-06-10 01:26 . 2008-07-08 12:59 391032 c:\windows\$NtUninstallKB980195$\spuninst\updspapi.dll
+ 2010-06-10 01:26 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB980195$\spuninst\spuninst.exe
+ 2010-04-15 23:56 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB979683$\spuninst\updspapi.dll
+ 2010-04-15 23:56 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB979683$\spuninst\spuninst.exe
+ 2010-06-10 01:23 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB979559$\spuninst\updspapi.dll
+ 2010-06-10 01:23 . 2009-05-26 09:01 233848 c:\windows\$NtUninstallKB979559$\spuninst\spuninst.exe
+ 2010-06-10 01:22 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB979482$\spuninst\updspapi.dll
+ 2010-06-10 01:22 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB979482$\spuninst\spuninst.exe
+ 2010-04-14 23:29 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB979309$\spuninst\updspapi.dll
+ 2010-04-14 23:29 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB979309$\spuninst\spuninst.exe
+ 2010-06-10 01:22 . 2007-07-27 21:11 382840 c:\windows\$NtUninstallKB978695_WM9$\spuninst\updspapi.dll
+ 2010-06-10 01:22 . 2007-07-27 18:47 233848 c:\windows\$NtUninstallKB978695_WM9$\spuninst\spuninst.exe
+ 2010-04-14 23:29 . 2004-08-17 13:49 176640 c:\windows\$NtUninstallKB978601$\wintrust.dll
+ 2010-04-14 23:29 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB978601$\spuninst\updspapi.dll
+ 2010-04-14 23:29 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB978601$\spuninst\spuninst.exe
+ 2010-05-14 00:16 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB978542$\spuninst\updspapi.dll
+ 2010-05-14 00:16 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB978542$\spuninst\spuninst.exe
+ 2010-05-14 00:16 . 2008-04-11 18:51 683520 c:\windows\$NtUninstallKB978542$\inetcomm.dll
+ 2010-04-15 23:55 . 2008-06-20 09:52 225920 c:\windows\$NtUninstallKB978338$\tcpip6.sys
+ 2010-04-15 23:55 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB978338$\spuninst\updspapi.dll
+ 2010-04-15 23:55 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB978338$\spuninst\spuninst.exe
+ 2010-04-15 23:55 . 2006-08-16 11:59 100352 c:\windows\$NtUninstallKB978338$\6to4svc.dll
+ 2010-04-15 23:55 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB977816$\spuninst\updspapi.dll
+ 2010-04-15 23:55 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB977816$\spuninst\spuninst.exe
+ 2010-06-10 01:21 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB975562$\spuninst\updspapi.dll
+ 2010-06-10 01:21 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB975562$\spuninst\spuninst.exe
+ 2010-07-16 14:31 . 2010-02-22 17:51 391032 c:\windows\$NtUninstallKB2229593$\spuninst\updspapi.dll
+ 2010-07-16 14:31 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB2229593$\spuninst\spuninst.exe
+ 2010-07-16 14:31 . 2004-08-17 13:49 743936 c:\windows\$NtUninstallKB2229593$\helpsvc.exe
+ 2010-06-10 01:04 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB982381\update\updspapi.dll
+ 2010-06-10 01:04 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB982381\update\update.exe
+ 2010-06-10 01:04 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB982381\spuninst.exe
+ 2010-04-16 16:01 . 2010-04-16 16:01 669696 c:\windows\$hf_mig$\KB982381\SP3QFE\wininet.dll
+ 2010-04-16 16:01 . 2010-04-16 16:01 628224 c:\windows\$hf_mig$\KB982381\SP3QFE\urlmon.dll
+ 2010-04-16 16:01 . 2010-04-16 16:01 251904 c:\windows\$hf_mig$\KB982381\SP3QFE\iepeers.dll
+ 2010-04-16 16:08 . 2010-04-16 16:08 668160 c:\windows\$hf_mig$\KB982381\SP3GDR\wininet.dll
+ 2010-04-16 16:08 . 2010-04-16 16:08 627200 c:\windows\$hf_mig$\KB982381\SP3GDR\urlmon.dll
+ 2010-04-16 16:08 . 2010-04-16 16:08 251904 c:\windows\$hf_mig$\KB982381\SP3GDR\iepeers.dll
+ 2010-04-16 15:22 . 2010-04-16 15:22 669696 c:\windows\$hf_mig$\KB982381\SP2QFE\wininet.dll
+ 2010-04-16 15:22 . 2010-04-16 15:22 628736 c:\windows\$hf_mig$\KB982381\SP2QFE\urlmon.dll
+ 2010-04-16 13:47 . 2010-04-16 13:47 360448 c:\windows\$hf_mig$\KB982381\SP2QFE\spru0405.dll
+ 2010-04-16 15:22 . 2010-04-16 15:22 474112 c:\windows\$hf_mig$\KB982381\SP2QFE\shlwapi.dll
+ 2010-04-16 15:22 . 2010-04-16 15:22 532480 c:\windows\$hf_mig$\KB982381\SP2QFE\mstime.dll
+ 2010-04-16 15:22 . 2010-04-16 15:22 146432 c:\windows\$hf_mig$\KB982381\SP2QFE\msrating.dll
+ 2010-04-16 15:22 . 2010-04-16 15:22 449024 c:\windows\$hf_mig$\KB982381\SP2QFE\mshtmled.dll
+ 2010-04-16 15:22 . 2010-04-16 15:22 251904 c:\windows\$hf_mig$\KB982381\SP2QFE\iepeers.dll
+ 2010-04-16 15:22 . 2010-04-16 15:22 205312 c:\windows\$hf_mig$\KB982381\SP2QFE\dxtrans.dll
+ 2010-04-16 15:22 . 2010-04-16 15:22 357888 c:\windows\$hf_mig$\KB982381\SP2QFE\dxtmsft.dll
+ 2010-04-16 15:22 . 2010-04-16 15:22 151552 c:\windows\$hf_mig$\KB982381\SP2QFE\cdfview.dll
+ 2010-04-15 23:56 . 2007-03-06 01:08 379616 c:\windows\$hf_mig$\KB981350\update\updspapi.dll
+ 2010-04-15 23:56 . 2007-03-06 01:07 720096 c:\windows\$hf_mig$\KB981350\update\update.exe
+ 2010-04-15 23:56 . 2007-03-06 01:07 215776 c:\windows\$hf_mig$\KB981350\spuninst.exe
+ 2010-03-10 08:08 . 2010-03-10 08:08 417792 c:\windows\$hf_mig$\KB981350\SP2QFE\vbscript.dll
+ 2010-04-15 23:56 . 2009-05-26 09:01 391032 c:\windows\$hf_mig$\KB980232\update\updspapi.dll
+ 2010-04-15 23:56 . 2009-05-26 09:01 759160 c:\windows\$hf_mig$\KB980232\update\update.exe
+ 2010-04-15 23:56 . 2009-05-26 09:01 233848 c:\windows\$hf_mig$\KB980232\spuninst.exe
+ 2010-04-15 11:05 . 2010-02-24 11:57 457216 c:\windows\$hf_mig$\KB980232\SP3QFE\mrxsmb.sys
+ 2010-04-15 11:05 . 2010-02-24 13:11 455680 c:\windows\$hf_mig$\KB980232\SP3GDR\mrxsmb.sys
+ 2010-04-15 11:05 . 2010-02-24 12:48 457216 c:\windows\$hf_mig$\KB980232\SP2QFE\mrxsmb.sys
+ 2010-06-10 01:27 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB980218\update\updspapi.dll
+ 2010-06-10 01:27 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB980218\update\update.exe
+ 2010-06-10 01:27 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB980218\spuninst.exe
+ 2010-04-20 05:38 . 2010-04-20 05:38 285824 c:\windows\$hf_mig$\KB980218\SP3QFE\atmfd.dll
+ 2010-04-20 05:32 . 2010-04-20 05:32 285696 c:\windows\$hf_mig$\KB980218\SP3GDR\atmfd.dll
+ 2010-04-20 05:45 . 2010-04-20 05:45 285824 c:\windows\$hf_mig$\KB980218\SP2QFE\atmfd.dll
+ 2010-06-10 01:26 . 2008-07-08 12:59 391032 c:\windows\$hf_mig$\KB980195\update\updspapi.dll
+ 2010-06-10 01:26 . 2008-07-08 12:59 759160 c:\windows\$hf_mig$\KB980195\update\update.exe
+ 2010-06-10 01:26 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB980195\spuninst.exe
+ 2010-04-15 23:56 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB979683\update\updspapi.dll
+ 2010-04-15 23:56 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB979683\update\update.exe
+ 2010-04-15 23:56 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB979683\spuninst.exe
+ 2010-06-10 01:23 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB979559\update\updspapi.dll
+ 2010-06-10 01:23 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB979559\update\update.exe
+ 2010-06-10 01:23 . 2009-05-26 09:01 233848 c:\windows\$hf_mig$\KB979559\spuninst.exe
+ 2010-06-10 01:22 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB979482\update\updspapi.dll
+ 2010-06-10 01:22 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB979482\update\update.exe
+ 2010-06-10 01:22 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB979482\spuninst.exe
+ 2010-04-14 23:29 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB979309\update\updspapi.dll
+ 2010-04-14 23:29 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB979309\update\update.exe
+ 2010-04-14 23:29 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB979309\spuninst.exe
+ 2010-04-14 23:29 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB978601\update\updspapi.dll
+ 2010-04-14 23:29 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB978601\update\update.exe
+ 2010-04-14 23:29 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB978601\spuninst.exe
+ 2009-12-24 06:43 . 2009-12-24 06:43 178176 c:\windows\$hf_mig$\KB978601\SP3QFE\wintrust.dll
+ 2009-12-24 07:04 . 2009-12-24 07:04 177664 c:\windows\$hf_mig$\KB978601\SP3GDR\wintrust.dll
+ 2009-12-24 06:49 . 2009-12-24 06:49 178176 c:\windows\$hf_mig$\KB978601\SP2QFE\wintrust.dll
+ 2010-05-14 00:16 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB978542\update\updspapi.dll
+ 2010-05-14 00:16 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB978542\update\update.exe
+ 2010-05-14 00:16 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB978542\spuninst.exe
+ 2010-01-29 14:54 . 2010-01-29 14:54 691712 c:\windows\$hf_mig$\KB978542\SP3QFE\inetcomm.dll
+ 2010-01-29 15:01 . 2010-01-29 15:01 691712 c:\windows\$hf_mig$\KB978542\SP3GDR\inetcomm.dll
+ 2010-01-29 14:49 . 2010-01-29 14:49 683520 c:\windows\$hf_mig$\KB978542\SP2QFE\inetcomm.dll
+ 2010-04-15 23:55 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB978338\update\updspapi.dll
+ 2010-04-15 23:55 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB978338\update\update.exe
+ 2010-04-15 23:55 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB978338\spuninst.exe
+ 2010-02-11 11:36 . 2010-02-11 11:36 226880 c:\windows\$hf_mig$\KB978338\SP3QFE\tcpip6.sys
+ 2010-02-12 04:29 . 2010-02-12 04:29 100864 c:\windows\$hf_mig$\KB978338\SP3QFE\6to4svc.dll
+ 2010-02-11 12:02 . 2010-02-11 12:02 226880 c:\windows\$hf_mig$\KB978338\SP3GDR\tcpip6.sys
+ 2010-02-12 04:35 . 2010-02-12 04:35 100864 c:\windows\$hf_mig$\KB978338\SP3GDR\6to4svc.dll
+ 2010-02-11 11:08 . 2010-02-11 11:08 226880 c:\windows\$hf_mig$\KB978338\SP2QFE\tcpip6.sys
+ 2010-02-12 04:36 . 2010-02-12 04:36 100864 c:\windows\$hf_mig$\KB978338\SP2QFE\6to4svc.dll
+ 2010-04-15 23:55 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB977816\update\updspapi.dll
+ 2010-04-15 23:55 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB977816\update\update.exe
+ 2010-04-15 23:55 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB977816\spuninst.exe
+ 2010-06-10 01:21 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB975562\update\updspapi.dll
+ 2010-06-10 01:21 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB975562\update\update.exe
+ 2010-06-10 01:21 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB975562\spuninst.exe
+ 2010-07-16 14:31 . 2010-02-22 17:51 391032 c:\windows\$hf_mig$\KB2229593\update\updspapi.dll
+ 2010-07-16 14:31 . 2010-02-22 14:20 759160 c:\windows\$hf_mig$\KB2229593\update\update.exe
+ 2010-07-16 14:31 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB2229593\spuninst.exe
+ 2010-07-16 08:13 . 2010-06-14 14:38 744448 c:\windows\$hf_mig$\KB2229593\SP3QFE\helpsvc.exe
+ 2010-07-16 08:13 . 2010-06-14 14:31 744448 c:\windows\$hf_mig$\KB2229593\SP3GDR\helpsvc.exe
+ 2010-07-16 08:13 . 2010-06-14 15:13 744448 c:\windows\$hf_mig$\KB2229593\SP2QFE\helpsvc.exe
+ 2002-09-23 12:00 . 2010-04-06 02:52 2462720 c:\windows\system32\WMVCore.dll
+ 2002-09-23 12:00 . 2010-05-02 08:27 1850880 c:\windows\system32\win32k.sys
+ 2002-09-23 12:00 . 2010-04-16 15:38 1506816 c:\windows\system32\shdocvw.dll
- 2002-09-23 12:00 . 2010-03-10 05:23 1506816 c:\windows\system32\shdocvw.dll
+ 2002-09-23 12:00 . 2010-02-05 18:40 1293824 c:\windows\system32\quartz.dll
- 2002-09-23 12:00 . 2009-11-27 17:35 1293824 c:\windows\system32\quartz.dll
+ 2002-09-23 12:00 . 2010-02-16 19:34 2183552 c:\windows\system32\ntoskrnl.exe
+ 2002-09-20 17:12 . 2010-02-16 19:34 2060544 c:\windows\system32\ntkrnlpa.exe
+ 2002-09-23 12:00 . 2010-04-16 15:38 3086336 c:\windows\system32\mshtml.dll
- 2002-09-23 12:00 . 2010-02-26 06:12 3086336 c:\windows\system32\mshtml.dll
+ 2002-09-23 12:00 . 2010-04-06 02:52 2462720 c:\windows\system32\dllcache\WMVCore.dll
+ 2007-03-08 15:36 . 2010-05-02 08:27 1850880 c:\windows\system32\dllcache\win32k.sys
+ 2006-07-10 10:03 . 2004-08-17 13:49 2134528 c:\windows\system32\dllcache\smtpsnap.dll
+ 2006-05-29 15:32 . 2010-04-16 15:38 1506816 c:\windows\system32\dllcache\shdocvw.dll
- 2006-05-29 15:32 . 2010-03-10 05:23 1506816 c:\windows\system32\dllcache\shdocvw.dll
- 2007-10-29 22:44 . 2009-11-27 17:35 1293824 c:\windows\system32\dllcache\quartz.dll
+ 2007-10-29 22:44 . 2010-02-05 18:40 1293824 c:\windows\system32\dllcache\quartz.dll
+ 2006-12-19 18:24 . 2010-02-16 19:34 2183552 c:\windows\system32\dllcache\ntoskrnl.exe
+ 2006-12-19 18:24 . 2010-02-16 19:34 2018816 c:\windows\system32\dllcache\ntkrpamp.exe
+ 2006-12-19 18:24 . 2010-02-16 19:34 2060544 c:\windows\system32\dllcache\ntkrnlpa.exe
+ 2006-12-19 18:24 . 2010-02-16 19:34 2139136 c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2006-07-10 10:03 . 2004-08-03 20:41 1309184 c:\windows\system32\dllcache\mtlstrm.sys
+ 2006-07-10 09:52 . 2004-08-17 13:48 2482176 c:\windows\system32\dllcache\msoeres.dll
+ 2006-11-08 05:07 . 2010-01-29 15:07 1315840 c:\windows\system32\dllcache\msoe.dll
+ 2006-05-19 15:10 . 2010-04-16 15:38 3086336 c:\windows\system32\dllcache\mshtml.dll
- 2006-05-19 15:10 . 2010-02-26 06:12 3086336 c:\windows\system32\dllcache\mshtml.dll
+ 2006-07-10 09:53 . 2004-08-17 13:49 3166208 c:\windows\system32\dllcache\msgr3en.dll
+ 2006-07-10 10:03 . 2004-08-03 20:41 1041536 c:\windows\system32\dllcache\hsfdpsp2.sys
- 2006-05-10 05:25 . 2010-02-26 06:12 1055232 c:\windows\system32\dllcache\danim.dll
+ 2006-05-10 05:25 . 2010-04-16 15:38 1055232 c:\windows\system32\dllcache\danim.dll
- 2006-05-10 05:25 . 2010-03-10 05:23 1023488 c:\windows\system32\dllcache\browseui.dll
+ 2006-05-10 05:25 . 2010-04-16 15:38 1023488 c:\windows\system32\dllcache\browseui.dll
+ 2009-11-06 23:06 . 2009-11-06 23:06 1130824 c:\windows\system32\dfshim.dll
+ 2002-09-23 12:00 . 2010-04-16 15:38 1055232 c:\windows\system32\danim.dll
- 2002-09-23 12:00 . 2010-02-26 06:12 1055232 c:\windows\system32\danim.dll
+ 2002-09-23 12:00 . 2010-04-16 15:38 1023488 c:\windows\system32\browseui.dll
- 2002-09-23 12:00 . 2010-03-10 05:23 1023488 c:\windows\system32\browseui.dll
+ 2010-04-07 21:48 . 2010-04-07 21:48 5967872 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll
+ 2010-03-23 03:32 . 2010-03-23 03:32 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
- 2008-11-25 02:59 . 2008-11-25 02:59 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2010-03-23 03:32 . 2010-03-23 03:32 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
- 2008-05-27 23:35 . 2008-05-27 23:35 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
+ 2010-04-01 09:42 . 2010-04-01 09:42 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
+ 2010-04-01 09:42 . 2010-04-01 09:42 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
- 2008-05-27 23:35 . 2008-05-27 23:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
+ 2010-03-31 12:50 . 2010-03-31 12:50 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
- 2008-05-27 22:48 . 2008-05-27 22:48 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2010-03-31 12:50 . 2010-03-31 12:50 2527232 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
- 2008-05-27 22:43 . 2008-05-27 22:43 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2010-04-01 09:42 . 2010-04-01 09:42 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2010-12-18 19:45 . 2010-12-18 19:45 2587136 c:\windows\Installer\9a1ea7.msi
+ 2010-04-20 12:30 . 2010-04-20 12:30 9472000 c:\windows\Installer\8d13f6.msi
+ 2010-04-20 12:29 . 2010-04-20 12:29 1549312 c:\windows\Installer\8d13ec.msi
+ 2010-05-11 12:05 . 2010-05-11 12:05 2555904 c:\windows\Installer\4f20936.msi
+ 2009-11-08 22:25 . 2009-11-08 22:25 1935360 c:\windows\Installer\3b27d4.msp
+ 2010-04-11 20:17 . 2010-04-11 20:17 2607104 c:\windows\Installer\1d8fadb.msp
+ 2010-04-11 20:17 . 2010-04-11 20:17 4210688 c:\windows\Installer\1d8fada.msp
+ 2005-03-02 18:09 . 2010-02-16 19:34 2183552 c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2005-03-02 18:08 . 2010-02-16 19:34 2018816 c:\windows\Driver Cache\i386\ntkrpamp.exe
+ 2005-03-02 18:08 . 2010-02-16 19:34 2060544 c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2005-03-02 18:08 . 2010-02-16 19:34 2139136 c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2010-06-10 01:26 . 2010-06-10 01:26 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_29ca71e3\System.dll
+ 2010-06-10 01:27 . 2010-06-10 01:27 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_1668d6ac\System.dll
+ 2010-06-10 01:27 . 2010-06-10 01:27 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_c534256c\System.Xml.dll
+ 2010-06-10 01:26 . 2010-06-10 01:26 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_62c9ccbe\System.Xml.dll
+ 2010-06-10 01:27 . 2010-06-10 01:27 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_7c237f9c\System.Windows.Forms.dll
+ 2010-06-10 01:26 . 2010-06-10 01:26 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_11136f97\System.Windows.Forms.dll
+ 2010-06-10 01:27 . 2010-06-10 01:27 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_737da42e\System.Drawing.dll
+ 2010-06-10 01:27 . 2010-06-10 01:27 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_9a3440f2\System.Design.dll
+ 2010-06-10 01:26 . 2010-06-10 01:26 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_3152117f\System.Design.dll
+ 2010-06-10 01:26 . 2010-06-10 01:26 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_fc529eed\mscorlib.dll
+ 2010-06-10 01:27 . 2010-06-10 01:27 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_3e544abf\mscorlib.dll
+ 2010-06-10 01:26 . 2010-06-10 01:27 3313664 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\f231461883859922a040002dddfb7b12\WindowsBase.ni.dll
+ 2010-06-23 13:00 . 2010-06-23 13:00 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\d63164ac4ed5adabc6a1b0fdf07eee05\WindowsBase.ni.dll
+ 2010-06-23 13:02 . 2010-06-23 13:02 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\d8549ce90b26cdc3071224ab6f020189\UIAutomationClientsideProviders.ni.dll
+ 2010-06-10 01:30 . 2010-06-10 01:30 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\48b66876f72f472db62de48ae4369406\UIAutomationClientsideProviders.ni.dll
+ 2010-06-10 01:24 . 2010-06-10 01:24 7949824 c:\windows\assembly\NativeImages_v2.0.50727_32\System\37217abe2c5164e59aba251860f4c79e\System.ni.dll
+ 2010-06-10 01:30 . 2010-06-10 01:30 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\563a54b98adb70fae862974042298348\System.Xml.ni.dll
+ 2010-06-10 21:16 . 2010-06-10 21:16 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\016b75f60a18535c8d6b3e5d861ab559\System.WorkflowServices.ni.dll
+ 2010-06-10 21:16 . 2010-06-10 21:16 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\6dacae37d337004345518976fb57099e\System.Workflow.Runtime.ni.dll
+ 2010-06-10 21:16 . 2010-06-10 21:16 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\c7b832bbc5bb11c6c7f128c801ce90d7\System.Workflow.ComponentModel.ni.dll
+ 2010-06-10 21:16 . 2010-06-10 21:16 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\b9ea6ea910293cd6f13f765775867ebd\System.Workflow.Activities.ni.dll
+ 2010-06-10 21:16 . 2010-06-10 21:16 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\8ef8d556899a4a10b7f288a80925489f\System.Web.Services.ni.dll
+ 2010-06-10 21:15 . 2010-06-10 21:15 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\5dfda43f1991ee6ba345d62b2be4801c\System.Web.Mobile.ni.dll
+ 2010-06-10 21:05 . 2010-06-10 21:05 2403328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\f08b3b8cdf548e3dfe61f342536175eb\System.Web.Extensions.ni.dll
+ 2010-06-10 01:29 . 2010-06-10 01:29 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\2d6a5dbee4506bf643b853e41668afa3\System.Speech.ni.dll
+ 2010-06-10 21:04 . 2010-06-10 21:04 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\169fe0ad9d59982a2a6b89779c09885b\System.ServiceModel.Web.ni.dll
+ 2010-06-10 11:20 . 2010-06-10 11:20 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\8b2710a63ecd363315ef16b257588b95\System.Runtime.Serialization.ni.dll
+ 2010-06-23 13:02 . 2010-06-23 13:02 1035264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\af217ef58e5558991f331d482c2bdba6\System.Printing.ni.dll
+ 2010-06-10 01:29 . 2010-06-10 01:29 1035264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\161b423dc4e86e569af019e838d39de5\System.Printing.ni.dll
+ 2010-06-10 11:19 . 2010-06-10 11:19 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\ad4fb86064d7a1ebcb9ee997e7208ac1\System.IdentityModel.ni.dll
+ 2010-06-10 01:29 . 2010-06-10 01:29 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\f3440ea00eb3c40dc073b2fe03843638\System.Drawing.ni.dll
+ 2010-06-10 21:04 . 2010-06-10 21:04 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\7deab2494d53763cd83c567e71e0d8e0\System.DirectoryServices.ni.dll
+ 2010-06-10 21:04 . 2010-06-10 21:04 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\b81efadfee7702624b713c6d86f7e369\System.Deployment.ni.dll
+ 2010-06-10 01:29 . 2010-06-10 01:29 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\50130ef751b98a4a11bd4ab73af7cab5\System.Data.ni.dll
+ 2010-06-10 20:40 . 2010-06-10 20:40 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\f71abf392c5ca05a4e46a5d1c4c72856\System.Data.SqlXml.ni.dll
+ 2010-06-10 21:04 . 2010-06-10 21:04 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\5e6311aff5ada83d0f854922fa62faf6\System.Data.Services.ni.dll
+ 2010-06-10 01:29 . 2010-06-10 01:29 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\c3ba3367d03779ad6e76c5d4cdfe572a\System.Data.Linq.ni.dll
+ 2010-06-10 21:04 . 2010-06-10 21:04 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\6abf820d8ec57a0561c3367727d274df\System.Data.Entity.ni.dll
+ 2010-06-10 01:28 . 2010-06-10 01:28 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\e98726349766935ec0e9b980f19a046a\System.Core.ni.dll
+ 2010-06-10 01:28 . 2010-06-10 01:28 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\fc373f0a8dbd173c63b6b95551b1c673\ReachFramework.ni.dll
+ 2010-06-23 13:01 . 2010-06-23 13:01 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\57abb757c1f38586390dcc63bf056322\ReachFramework.ni.dll
+ 2010-06-10 01:28 . 2010-06-10 01:28 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\ead93b6a4f0101cb99d09f3e3fc6491c\PresentationUI.ni.dll
+ 2010-06-23 13:01 . 2010-06-23 13:01 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\0095ba60255d4addaf5b8ebee697a027\PresentationUI.ni.dll
+ 2010-06-10 01:24 . 2010-06-10 01:24 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\20ef773b20f6ce721ae60e5c2c2e8f80\PresentationBuildTasks.ni.dll
+ 2010-06-10 20:40 . 2010-06-10 20:40 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\935b855860088a86bb65d37a19f059cc\Microsoft.VisualBasic.ni.dll
+ 2010-06-10 11:28 . 2010-06-10 11:28 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\7a266de493d30eed21cb60ebe300be53\Microsoft.Transactions.Bridge.ni.dll
+ 2010-06-10 21:04 . 2010-06-10 21:04 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\9db8f9f7fe63ca4451bb5316a3ebb009\Microsoft.JScript.ni.dll
+ 2010-06-10 20:40 . 2010-06-10 20:40 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\c96be82d6cb00367db4e3553272165ef\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2010-06-10 20:40 . 2010-06-10 20:40 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\3815de5b052187b5d9375681a6784255\Microsoft.Build.Tasks.ni.dll
+ 2010-06-10 20:40 . 2010-06-10 20:40 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\43fc6723d08e9ce88701c29653efd224\Microsoft.Build.Engine.ni.dll
+ 2010-06-23 11:40 . 2010-06-23 11:40 1249280 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2010-06-23 11:38 . 2010-06-23 11:38 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2010-06-10 01:20 . 2010-06-10 01:20 5967872 c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2010-06-23 11:38 . 2010-06-23 11:38 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2010-06-23 11:40 . 2010-06-23 11:40 5279744 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2010-06-23 11:38 . 2010-06-23 11:38 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2009-09-05 01:09 . 2009-09-05 01:09 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2010-06-23 11:40 . 2010-06-23 11:40 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2010-06-23 11:39 . 2010-06-23 11:39 4546560 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2009-10-15 00:13 . 2009-10-15 00:13 4546560 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2010-06-10 01:25 . 2010-06-10 01:25 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
- 2009-10-15 00:09 . 2009-10-15 00:09 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2010-06-10 01:25 . 2010-06-10 01:25 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
- 2009-10-15 00:09 . 2009-10-15 00:09 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2010-06-10 01:04 . 2010-03-10 05:23 1506816 c:\windows\$NtUninstallKB982381$\shdocvw.dll
+ 2010-06-10 01:04 . 2010-02-26 06:12 3086336 c:\windows\$NtUninstallKB982381$\mshtml.dll
+ 2010-06-10 01:04 . 2010-02-26 06:12 1055232 c:\windows\$NtUninstallKB982381$\danim.dll
+ 2010-06-10 01:04 . 2010-03-10 05:23 1023488 c:\windows\$NtUninstallKB982381$\browseui.dll
+ 2010-04-15 23:56 . 2009-12-09 10:28 2182528 c:\windows\$NtUninstallKB979683$\ntoskrnl.exe
+ 2010-04-15 23:56 . 2009-12-09 10:28 2017792 c:\windows\$NtUninstallKB979683$\ntkrpamp.exe
+ 2010-04-15 23:56 . 2009-12-09 10:28 2059904 c:\windows\$NtUninstallKB979683$\ntkrnlpa.exe
+ 2010-04-15 23:56 . 2009-12-09 10:28 2138112 c:\windows\$NtUninstallKB979683$\ntkrnlmp.exe
+ 2010-06-10 01:23 . 2009-08-14 15:23 1850112 c:\windows\$NtUninstallKB979559$\win32k.sys
+ 2010-06-10 01:22 . 2009-05-20 02:56 2458112 c:\windows\$NtUninstallKB978695_WM9$\wmvcore.dll
+ 2010-05-14 00:16 . 2009-07-10 13:42 1315328 c:\windows\$NtUninstallKB978542$\msoe.dll
+ 2010-06-10 01:21 . 2009-11-27 17:35 1293824 c:\windows\$NtUninstallKB975562$\quartz.dll
+ 2010-04-16 16:01 . 2010-04-16 16:01 1510400 c:\windows\$hf_mig$\KB982381\SP3QFE\shdocvw.dll
+ 2010-04-16 16:01 . 2010-04-16 16:01 3094528 c:\windows\$hf_mig$\KB982381\SP3QFE\mshtml.dll
+ 2010-04-16 16:01 . 2010-04-16 16:01 1025024 c:\windows\$hf_mig$\KB982381\SP3QFE\browseui.dll
+ 2010-04-16 16:08 . 2010-04-16 16:08 1510400 c:\windows\$hf_mig$\KB982381\SP3GDR\shdocvw.dll
+ 2010-04-16 16:08 . 2010-04-16 16:08 3094016 c:\windows\$hf_mig$\KB982381\SP3GDR\mshtml.dll
+ 2010-04-16 16:08 . 2010-04-16 16:08 1025024 c:\windows\$hf_mig$\KB982381\SP3GDR\browseui.dll
+ 2010-04-16 15:22 . 2010-04-16 15:22 1510400 c:\windows\$hf_mig$\KB982381\SP2QFE\shdocvw.dll
+ 2010-04-16 15:22 . 2010-04-16 15:22 3094016 c:\windows\$hf_mig$\KB982381\SP2QFE\mshtml.dll
+ 2010-04-16 15:22 . 2010-04-16 15:22 1055232 c:\windows\$hf_mig$\KB982381\SP2QFE\danim.dll
+ 2010-04-16 15:22 . 2010-04-16 15:22 1024000 c:\windows\$hf_mig$\KB982381\SP2QFE\browseui.dll
+ 2010-04-15 11:06 . 2010-02-16 19:02 2192256 c:\windows\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe
+ 2010-04-15 11:06 . 2010-02-16 19:02 2026496 c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrpamp.exe
+ 2010-04-15 11:06 . 2010-02-16 19:02 2069120 c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe
+ 2010-04-15 11:06 . 2010-02-16 19:02 2148352 c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlmp.exe
+ 2010-02-17 12:09 . 2010-02-17 12:09 2192128 c:\windows\$hf_mig$\KB979683\SP3GDR\ntoskrnl.exe
+ 2010-04-15 11:06 . 2010-02-16 19:08 2026496 c:\windows\$hf_mig$\KB979683\SP3GDR\ntkrpamp.exe
+ 2010-04-15 11:06 . 2010-02-16 19:09 2068992 c:\windows\$hf_mig$\KB979683\SP3GDR\ntkrnlpa.exe
+ 2010-04-15 11:06 . 2010-02-16 19:08 2148352 c:\windows\$hf_mig$\KB979683\SP3GDR\ntkrnlmp.exe
+ 2010-04-15 11:06 . 2010-02-16 19:26 2189056 c:\windows\$hf_mig$\KB979683\SP2QFE\ntoskrnl.exe
+ 2010-04-15 11:06 . 2010-02-16 19:26 2023936 c:\windows\$hf_mig$\KB979683\SP2QFE\ntkrpamp.exe
+ 2010-02-17 12:26 . 2010-02-17 12:26 2065920 c:\windows\$hf_mig$\KB979683\SP2QFE\ntkrnlpa.exe
+ 2010-04-15 11:06 . 2010-02-16 19:26 2145792 c:\windows\$hf_mig$\KB979683\SP2QFE\ntkrnlmp.exe
+ 2010-05-02 08:03 . 2010-05-02 08:03 1860352 c:\windows\$hf_mig$\KB979559\SP3QFE\win32k.sys
+ 2010-05-02 08:09 . 2010-05-02 08:09 1851264 c:\windows\$hf_mig$\KB979559\SP3GDR\win32k.sys
+ 2010-05-02 07:58 . 2010-05-02 07:58 1859968 c:\windows\$hf_mig$\KB979559\SP2QFE\win32k.sys
+ 2010-01-29 14:54 . 2010-01-29 14:54 1315328 c:\windows\$hf_mig$\KB978542\SP3QFE\msoe.dll
+ 2010-01-29 15:01 . 2010-01-29 15:01 1315328 c:\windows\$hf_mig$\KB978542\SP3GDR\msoe.dll
+ 2010-01-29 14:49 . 2010-01-29 14:49 1315840 c:\windows\$hf_mig$\KB978542\SP2QFE\msoe.dll
+ 2010-02-05 18:29 . 2010-02-05 18:29 1294336 c:\windows\$hf_mig$\KB975562\SP3QFE\quartz.dll
+ 2010-02-05 18:27 . 2010-02-05 18:27 1294336 c:\windows\$hf_mig$\KB975562\SP3GDR\quartz.dll
+ 2010-02-05 18:24 . 2010-02-05 18:24 1294336 c:\windows\$hf_mig$\KB975562\SP2QFE\quartz.dll
+ 2010-04-02 17:29 . 2010-04-02 17:29 11413504 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M979906\M979906Uninstall.msp
+ 2010-11-01 16:25 . 2010-11-01 16:25 20303872 c:\windows\Installer\ce5b8f.msp
+ 2010-03-30 23:23 . 2010-03-30 23:23 15638528 c:\windows\Installer\3b27e1.msp
+ 2010-04-02 10:30 . 2010-04-02 10:30 17456640 c:\windows\Installer\1d8fb09.msp
+ 2010-04-11 20:17 . 2010-04-11 20:17 14599680 c:\windows\Installer\1d8faea.msp
+ 2010-06-10 01:30 . 2010-06-10 01:30 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\2dfe045e4b1577fdea9a2f456db0afc2\System.Windows.Forms.ni.dll
+ 2010-06-10 21:05 . 2010-06-10 21:05 11797504 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\d987cf1de4ba688da92e212a374232c2\System.Web.ni.dll
+ 2010-06-10 11:28 . 2010-06-10 11:28 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\8b74f2fe3f3632f95ff4ddb8c4839a1e\System.ServiceModel.ni.dll
+ 2010-06-10 01:29 . 2010-06-10 01:29 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\f352c5cb50bee105e4c873ca050f9f46\System.Design.ni.dll
+ 2010-06-10 01:28 . 2010-06-10 01:28 14327808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\ca898d942e4d85af4c3d5f14a77c359a\PresentationFramework.ni.dll
+ 2010-06-23 13:01 . 2010-06-23 13:01 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\560662ada034afb6ec78a152bd9a47b5\PresentationFramework.ni.dll
+ 2010-06-10 01:27 . 2010-06-10 01:27 12216320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\ba8f917fd89d7afa8885c2a326379f03\PresentationCore.ni.dll
+ 2010-06-23 13:00 . 2010-06-23 13:00 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\9f5dff344ac6ac923b5ade8ba1ab9382\PresentationCore.ni.dll
.
-- Snímek resetován k současnému datu --
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{EEE6C35D-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll" [2009-10-19 187192]

[HKEY_CLASSES_ROOT\clsid\{eee6c35d-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
2009-10-19 15:15 1345336 ----a-w- c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2009-10-19 1345336]

[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2009-10-19 1345336]

[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVIDIA nTune"="c:\program files\NVIDIA Corporation\nTune\nTuneCmd.exe" [2007-09-04 81920]
"OscarEditor"="c:\program files\OSCAR Editor\OscarEditor.exe" [2018-11-01 2820096]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-04-29 39408]
"Olympus ib"="c:\program files\Olympus\ib\olycamdetect.exe" [2009-10-30 93376]
"Google Update"="c:\documents and settings\Uživatel\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" [2011-01-10 136176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-10-04 8491008]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"nwiz"="nwiz.exe" [2007-10-04 1626112]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-10-04 81920]
"RTHDCPL"="RTHDCPL.EXE" [2009-03-12 17531392]
"SweetIM"="c:\program files\SweetIM\Messenger\SweetIM.exe" [2009-10-20 111928]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2010-03-17 149280]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-03-17 421888]
"MDS_Menu"="c:\program files\Olympus\ib\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2004-08-17 15360]

c:\documents and settings\U§ivatel\Nabˇdka Start\Programy\Po spuçtŘnˇ\
OpenOffice.org 2.0.lnk - c:\program files\OpenOffice.org 2.0\program\quickstart.exe [2006-6-27 393216]
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Akceler tor spuçtŘnˇ AutoCADu.lnk - c:\program files\Common Files\Autodesk Shared\acstart17.exe [2006-3-5 11000]
Photo Loader supervisory.lnk - c:\program files\CASIO\Photo Loader\Plauto.exe [2009-1-23 229376]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\BitComet\\BitComet.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\BROOD\\starcraft.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\mIRC\\mirc.exe"=
"d:\\Teamspeak2_RC2\\server_windows.exe"=
"c:\\Program Files\\Starcraft\\StarCraft.exe"=
"d:\\Steam\\steamapps\\krtek3\\counter-strike\\hl.exe"=
"d:\\Program Files\\TrackMania Nations ESWC\\TmNationsESWC.exe"=
"d:\\SIERRA\\Half-Life\\hl.exe"=
"c:\\Program Files\\Sierra On-Line\\SIGSPat.exe"=
"c:\\Program Files\\Hamachi\\hamachi.exe"=
"d:\\Program Files\\Warcraft III\\Warcraft III.exe"=
"d:\\Program Files\\Warcraft III\\War3.exe"=
"d:\\Steam\\steamapps\\krtek3\\counter-strike source\\hl2.exe"=
"d:\\Steam\\steam.exe"=
"d:\\Steam\\steamapps\\krtek3\\half-life deathmatch source\\hl2.exe"=
"d:\\Steam\\steamapps\\krtek3\\half-life 2 deathmatch\\hl2.exe"=
"c:\\Program Files\\HLSW\\hlsw.exe"=
"d:\\Steam\\steamapps\\krtek3\\dedicated server\\hltv.exe"=
"c:\\Program Files\\Miranda IM\\miranda32.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"d:\\Steam\\steamapps\\ruza_\\counter-strike\\hl.exe"=
"d:\\Program Files\\EA SPORTS\\UEFA EURO 2008\\EURO08.exe"=
"d:\\Steam\\steamapps\\ruza_\\dedicated server\\hltv.exe"=
"c:\\Documents and Settings\\All Users\\Dokumenty\\CS1.6\\hl.exe"=
"d:\\CS1.6{47}\\cstrike.exe"=
"c:\\Documents and Settings\\Uživatel\\Local Settings\\Data aplikací\\Dyyno Receiver\\DPPM.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"d:\\Steam\\steamapps\\ruza_\\dedicated server\\hlds.exe"=

R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [20.9.2006 16:30 642560]
R1 SbFw;SbFw;c:\windows\system32\drivers\SbFw.sys [4.2.2009 0:59 270888]
R1 sbhips;Sunbelt HIPS Driver;c:\windows\system32\drivers\sbhips.sys [21.6.2008 4:54 66600]
R2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [19.11.2008 15:10 222456]
R2 pgsql-8.3;PostgreSQL Database Server 8.3;c:\program files\PostgreSQL\8.3\bin\pg_ctl.exe [19.9.2008 3:03 65536]
R2 PStrip;PStrip;c:\windows\system32\drivers\pstrip.sys [15.7.2007 3:37 27992]
R2 SbPF.Launcher;SbPF.Launcher;c:\program files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [31.10.2008 7:24 95528]
R2 SPF4;Sunbelt Personal Firewall 4;c:\program files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [31.10.2008 7:24 1365288]
R2 Viewpoint Service;Viewpoint Service;c:\program files\Viewpoint\Common\ViewpointService.exe [28.2.2009 20:19 30152]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport;c:\windows\system32\drivers\SbFwIm.sys [4.2.2009 0:59 65576]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [31.12.2001 23:18 1684736]
S3 ewdmaudn;ewdmaudn;\??\c:\docume~1\UIVATE~1\LOCALS~1\Temp\ewdmaudn.sys --> c:\docume~1\UIVATE~1\LOCALS~1\Temp\ewdmaudn.sys [?]
.
Obsah adresáře 'Naplánované úlohy'

2011-01-11 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-29 14:20]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = local
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
IE: &ICQ Toolbar Search - c:\program files\ICQToolbar\toolbaru.dll/SEARCH.HTML
IE: Download All by FlashGet - d:\program files\FlashGet\jc_all.htm
IE: Download using FlashGet - d:\program files\FlashGet\jc_link.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{4CBB5C71-1BA0-49ca-93CD-159AF8AA0CC9} - d:\program files\Betway\Poker\MPPoker.exe
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\s2udvhpm.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
FF - Ext: ICQ Toolbar: {800b5000-a755-47e1-992b-48a1c1357f07} - c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
FF - Ext: Simple Dyyno Launcher: NPDyyno@dyyno.com - %profile%\extensions\NPDyyno@dyyno.com
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: SweetIM Toolbar for Firefox: {EEE6C361-6118-11DC-9C72-001320C79847} - %profile%\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
FF - Ext: ICQ Toolbar: {800b5000-a755-47e1-992b-48a1c1357f07} - %profile%\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
.
.
------- Asociace souborů -------
.
.scr=AutoCADScriptFile
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

AddRemove-Expekt Poker - c:\poker\Expekt Poker\_SetupCasino_706598.exe
AddRemove-ParadiseCasino - c:\casino\PARADI~1\UNWISE.EXE
AddRemove-PKR - c:\program files\PKR\uninstall-pkr.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-01-11 17:12
Windows 5.1.2600 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Cryptography\RNG*]
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG10.00.00.01WORKSTATION"="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"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'explorer.exe'(3840)
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\NVIDIA Corporation\nTune\nTuneService.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\PnkBstrB.exe
c:\program files\PostgreSQL\8.3\bin\postgres.exe
c:\program files\PostgreSQL\8.3\bin\postgres.exe
c:\program files\PostgreSQL\8.3\bin\postgres.exe
c:\program files\PostgreSQL\8.3\bin\postgres.exe
c:\program files\PostgreSQL\8.3\bin\postgres.exe
c:\program files\PostgreSQL\8.3\bin\postgres.exe
c:\program files\Sunbelt Software\Personal Firewall\SbPFCl.exe
c:\windows\system32\RUNDLL32.EXE
c:\windows\RTHDCPL.EXE
c:\program files\OpenOffice.org 2.0\program\soffice.exe
c:\program files\OpenOffice.org 2.0\program\soffice.BIN
.
**************************************************************************
.
Celkový čas: 2011-01-11 17:18:15 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-01-11 16:18
ComboFix2.txt 2010-04-02 20:03
ComboFix3.txt 2010-04-02 10:40

Před spuštěním: 481 587 200
Po spuštění: 2 717 290 496

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn

- - End Of File - - 9A7D67D2F95AC1DD230D05F2AC012607

Pokud nemate, tak presunte Combofix na plochu

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  KillAll::
  
  File::
  c:\documents and settings\Uživatel\wuaucldt.exe
  c:\docume~1\UIVATE~1\LOCALS~1\Temp\ewdmaudn.sys
  C:\WINDOWS\tasks\Google Software Updater.job
  C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-329068152-1417001333-725345543-1003Core.job
  C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-329068152-1417001333-725345543-1003UA.job
  
  Registry::
  [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2F364306-AA45-47B5-9F9D-39A8B94E7EF7}]
  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
  "{EEE6C35D-6118-11DC-9C72-001320C79847}"=-
  "{855F3B16-6D32-4fe6-8A56-BBB695989046}"=-
  [-HKEY_CLASSES_ROOT\clsid\{eee6c35d-6118-11dc-9c72-001320c79847}]
  [-HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook.1]
  [-HKEY_CLASSES_ROOT\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}]
  [-HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook]
  [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
  "{EEE6C35B-6118-11DC-9C72-001320C79847}"=-
  "{855F3B16-6D32-4fe6-8A56-BBB695989046}"=-
  "{E0E899AB-F487-11D5-8D29-0050BA6940E3}"=-
  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
  "{EEE6C35B-6118-11DC-9C72-001320C79847}"=-
  "{855F3B16-6D32-4fe6-8A56-BBB695989046}"=-
  "{E0E899AB-F487-11D5-8D29-0050BA6940E3}"=-
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "swg"=-
  "Google Update"=-
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "Adobe Reader Speed Launcher"=-
  "SweetIM"=-
  "SunJavaUpdateSched"=-
  "QuickTime Task"=-
  [HKEY_LOCAL_MACHINE\software\microsoft\security center]
  "AntiVirusOverride"=dword:00000000
  
  Collect::
  c:\docume~1\UIVATE~1\LOCALS~1\Temp\ewdmaudn.sys
  c:\documents and settings\Uživatel\wuaucldt.exe
  
  Driver::
  ICQ Service
  ewdmaudn
  
  Suspect::
  c:\docume~1\UIVATE~1\LOCALS~1\Temp\ewdmaudn.sys
  c:\documents and settings\Uživatel\wuaucldt.exe
  
  Folder::
  c:\program files\SweetIM
  C:\Program Files\ICQ6Toolbar
  D:\PROGRA~1\FlashGet
  
  DDS::
  uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
  IE: &ICQ Toolbar Search - c:\program files\ICQToolbar\toolbaru.dll/SEARCH.HTML
  IE: Download All by FlashGet - d:\program files\FlashGet\jc_all.htm
  IE: Download using FlashGet - d:\program files\FlashGet\jc_link.htm
  
  Firefox::
  FF - ProfilePath - c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\s2udvhpm.default\
  FF - prefs.js: browser.search.selectedEngine - ICQ Search
  FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
  FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_result ... id=afex&q=
  FF - Ext: ICQ Toolbar: {800b5000-a755-47e1-992b-48a1c1357f07} - c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
  FF - Ext: SweetIM Toolbar for Firefox: {EEE6C361-6118-11DC-9C72-001320C79847} - %profile%\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
  FF - Ext: ICQ Toolbar: {800b5000-a755-47e1-992b-48a1c1357f07} - %profile%\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
  
  RegLock::
  [HKEY_LOCAL_MACHINE\software\Microsoft\Cryptography\RNG*]
  [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]

• Ulozte vytvoreny TXT jako CFScript.txt
• Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
  
• Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

ComboFix 11-01-10.08 - Uživatel 11.01.2011 18:05:24.4.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.2047.1468 [GMT 1:00]
Spuštěný z: c:\documents and settings\Uživatel\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Uživatel\Plocha\CFScript.txt
FW: Sunbelt Personal Firewall *Enabled* {82B1150E-9B37-49FC-83EB-D52197D900D0}
* Vytvořen nový Bod Obnovení

FILE ::
"c:\docume~1\UIVATE~1\LOCALS~1\Temp\ewdmaudn.sys"
"c:\documents and settings\Uživatel\wuaucldt.exe"
"c:\windows\tasks\Google Software Updater.job"
"c:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-329068152-1417001333-725345543-1003Core.job"
"c:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-329068152-1417001333-725345543-1003UA.job"

file zipped: c:\documents and settings\Uživatel\wuaucldt.exe
file zipped: c:\documents and settings\Uživatel\wuaucldt.exe
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\s2udvhpm.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\s2udvhpm.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components\ITB_History.js
c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\s2udvhpm.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences\prefs.js
c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\s2udvhpm.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences\user.js
c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\s2udvhpm.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome.manifest
c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\s2udvhpm.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\icqtoolbar.jar
c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\s2udvhpm.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\install.rdf
c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\s2udvhpm.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\manifest.mf
c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\s2udvhpm.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\zigbert.rsa
c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\s2udvhpm.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\zigbert.sf
c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\s2udvhpm.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.gif
c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\s2udvhpm.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.src
c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\s2udvhpm.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.xml
c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\s2udvhpm.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\s2udvhpm.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\components\SIMAutoCompleteSearch.js
c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\s2udvhpm.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome.manifest
c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\s2udvhpm.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar.jar
c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\s2udvhpm.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\install.rdf
c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\s2udvhpm.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\META-INF\manifest.mf
c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\s2udvhpm.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\META-INF\zigbert.rsa
c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\s2udvhpm.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\META-INF\zigbert.sf
c:\program files\ICQ6Toolbar
c:\program files\ICQ6Toolbar\Icons.bmp
c:\program files\ICQ6Toolbar\ICQ Service.exe
c:\program files\ICQ6Toolbar\icq6Toolbar.ico
c:\program files\ICQ6Toolbar\ICQToolBar.dll
c:\program files\ICQ6Toolbar\ICQUnToolbar.exe
c:\program files\ICQ6Toolbar\logo_small.gif
c:\program files\ICQ6Toolbar\ServiceStarter.exe
c:\program files\ICQ6Toolbar\short.wav
c:\program files\ICQ6Toolbar\Version.txt
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components\ITB_History.js
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences\prefs.js
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences\user.js
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome.manifest
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\icqtoolbar.jar
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\install.rdf
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\manifest.mf
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\zigbert.rsa
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\zigbert.sf
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.gif
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.src
c:\program files\SweetIM
c:\program files\SweetIM\Messenger\default.xml
c:\program files\SweetIM\Messenger\mgAdaptersProxy.dll
c:\program files\SweetIM\Messenger\mgAIMAuto.dll
c:\program files\SweetIM\Messenger\mgAIMMessengerAdapter.dll
c:\program files\SweetIM\Messenger\mgArchive.dll
c:\program files\SweetIM\Messenger\mgcommon.dll
c:\program files\SweetIM\Messenger\mgcommunication.dll
c:\program files\SweetIM\Messenger\mgconfig.dll
c:\program files\SweetIM\Messenger\mgFlashPlayer.dll
c:\program files\SweetIM\Messenger\mghooking.dll
c:\program files\SweetIM\Messenger\mgICQAuto.dll
c:\program files\SweetIM\Messenger\mgICQMessengerAdapter.dll
c:\program files\SweetIM\Messenger\mgIEPlayer.dll
c:\program files\SweetIM\Messenger\mglogger.dll
c:\program files\SweetIM\Messenger\mgMediaPlayer.dll
c:\program files\SweetIM\Messenger\mgMsnAuto.dll
c:\program files\SweetIM\Messenger\mgMsnMessengerAdapter.dll
c:\program files\SweetIM\Messenger\mgsimcommon.dll
c:\program files\SweetIM\Messenger\mgSweetIM.dll
c:\program files\SweetIM\Messenger\mgUpdateSupport.dll
c:\program files\SweetIM\Messenger\mgxml_wrapper.dll
c:\program files\SweetIM\Messenger\mgYahooAuto.dll
c:\program files\SweetIM\Messenger\mgYahooMessengerAdapter.dll
c:\program files\SweetIM\Messenger\msvcp71.dll
c:\program files\SweetIM\Messenger\msvcr71.dll
c:\program files\SweetIM\Messenger\resources\images\AudibleButton.png
c:\program files\SweetIM\Messenger\resources\images\DisplayPicturesButton.png
c:\program files\SweetIM\Messenger\resources\images\EmoticonButton.png
c:\program files\SweetIM\Messenger\resources\images\GamesButton.png
c:\program files\SweetIM\Messenger\resources\images\NudgeButton.png
c:\program files\SweetIM\Messenger\resources\images\SoundFxButton.png
c:\program files\SweetIM\Messenger\resources\images\WinksButton.png
c:\program files\SweetIM\Messenger\SweetIM.exe
c:\program files\SweetIM\Toolbars\Internet Explorer\ClearHist.exe
c:\program files\SweetIM\Toolbars\Internet Explorer\conf\logger.xml
c:\program files\SweetIM\Toolbars\Internet Explorer\default.xml
c:\program files\SweetIM\Toolbars\Internet Explorer\mgcommon.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mgconfig.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mghooking.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mglogger.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mgsimcommon.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mgxml_wrapper.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\about.html
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\affid.dat
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\basis.xml
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\bing.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\clear-history.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\content-notifier-anim-over.gif
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\content-notifier-anim.gif
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\content-notifier.js
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\dating.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\dictionary.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\e_cards.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\eye_icon.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\eye_icon_over.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\find.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\free_stuff.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\games.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\glitter.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\google.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\help.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\highlight.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\locales.xml
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\logo_16x16.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\logo_21x18.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\logo_32x32.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\logo_about.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\more-search-providers.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\music.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\news.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\options.html
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\photos.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\search-current-site.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\shopping.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\SmileySmile.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\SmileyWink.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\sweetim_text.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\toolbar.xml
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\version.txt
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\video.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\web-search.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\yahoo.png
c:\windows\tasks\Google Software Updater.job
d:\progra~1\FlashGet
d:\progra~1\FlashGet\Default.bk1
d:\progra~1\FlashGet\Default.bk2
d:\progra~1\FlashGet\Default.bk3
d:\progra~1\FlashGet\Default.jcd
d:\progra~1\FlashGet\Default.jcd.bak
d:\progra~1\FlashGet\default1.GIF
d:\progra~1\FlashGet\fgiebar.dll
d:\progra~1\FlashGet\flashget.exe
d:\progra~1\FlashGet\flashget.exe.manifest
d:\progra~1\FlashGet\flashget.chm
d:\progra~1\FlashGet\gtapi.dll
d:\progra~1\FlashGet\INSTALL.LOG
d:\progra~1\FlashGet\jc_all.htm
d:\progra~1\FlashGet\jc_link.htm
d:\progra~1\FlashGet\Jccatch.dll
d:\progra~1\FlashGet\language\jcbul.ini
d:\progra~1\FlashGet\language\jccat.ini
d:\progra~1\FlashGet\language\jccze.ini
d:\progra~1\FlashGet\language\jcdax.ini
d:\progra~1\FlashGet\language\jcdeu.ini
d:\progra~1\FlashGet\language\jcell.ini
d:\progra~1\FlashGet\language\jceng.ini
d:\progra~1\FlashGet\language\jcesp.ini
d:\progra~1\FlashGet\language\jcfin.ini
d:\progra~1\FlashGet\language\jcfra.ini
d:\progra~1\FlashGet\language\jcchs.ini
d:\progra~1\FlashGet\language\jccht.ini
d:\progra~1\FlashGet\language\jcita.ini
d:\progra~1\FlashGet\language\jcjpn.ini
d:\progra~1\FlashGet\language\jckor.ini
d:\progra~1\FlashGet\language\jclat.ini
d:\progra~1\FlashGet\language\jcltu.ini
d:\progra~1\FlashGet\language\jcnld.ini
d:\progra~1\FlashGet\language\jcnor.ini
d:\progra~1\FlashGet\language\jcpls.ini
d:\progra~1\FlashGet\language\jcpob.ini
d:\progra~1\FlashGet\language\jcptp.ini
d:\progra~1\FlashGet\language\jcrom.ini
d:\progra~1\FlashGet\language\jcrus.ini
d:\progra~1\FlashGet\language\jcslo.ini
d:\progra~1\FlashGet\language\jcsrl.ini
d:\progra~1\FlashGet\language\jcsvk.ini
d:\progra~1\FlashGet\language\jcswe.ini
d:\progra~1\FlashGet\language\jcthi.ini
d:\progra~1\FlashGet\language\jctur.ini
d:\progra~1\FlashGet\language\jcukr.ini
d:\progra~1\FlashGet\language\jcheb.ini
d:\progra~1\FlashGet\language\jchun.ini
d:\progra~1\FlashGet\License.txt
d:\progra~1\FlashGet\mirrors.lst
d:\progra~1\FlashGet\mymirror.lst
d:\progra~1\FlashGet\Normal.jcs
d:\progra~1\FlashGet\Readme.txt
d:\progra~1\FlashGet\Skin\ImageBk.ini
d:\progra~1\FlashGet\Skin\Leftback.jpg
d:\progra~1\FlashGet\Skin\logo_bg.gif
d:\progra~1\FlashGet\Skin\Normal.ini
d:\progra~1\FlashGet\Skin\Sky(Gradient).ini
d:\progra~1\FlashGet\Skin\TestBk.jpg
d:\progra~1\FlashGet\Skin\XP_Luna(Gradient).ini
d:\progra~1\FlashGet\Skin\XP_Luna.ini
d:\progra~1\FlashGet\sounds\added.wav
d:\progra~1\FlashGet\sounds\all_done.wav
d:\progra~1\FlashGet\sounds\done.wav
d:\progra~1\FlashGet\sounds\error.wav
d:\progra~1\FlashGet\Table.jcs
d:\progra~1\FlashGet\unreg.inf
d:\progra~1\FlashGet\UNWISE.EXE
d:\progra~1\FlashGet\whatsnew.txt
d:\program files\FlashGet\jc_all.htm
d:\program files\FlashGet\jc_link.htm

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_EWDMAUDN
-------\Legacy_ICQ_SERVICE
-------\Service_ewdmaudn
-------\Service_ICQ Service


((((((((((((((((((((((((( Soubory vytvořené od 2010-12-11 do 2011-01-11 )))))))))))))))))))))))))))))))
.

2011-01-10 19:46 . 2011-01-10 19:46 33280 ----a-w- c:\documents and settings\Uživatel\wuaucldt.exe
2011-01-10 18:22 . 2011-01-10 21:14 -------- d-----w- c:\program files\SafeSurf
2011-01-10 17:07 . 2011-01-10 17:07 -------- d-----w- c:\documents and settings\Uživatel\Data aplikací\WebSurf.ru

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
.

((((((((((((((((((((((((((((( SnapShot_2011-01-11_16.12.35 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-01-11 17:21 . 2011-01-11 17:21 16384 c:\windows\temp\Perflib_Perfdata_41c.dat
+ 2011-01-11 17:21 . 2011-01-11 17:21 16384 c:\windows\temp\Perflib_Perfdata_3f8.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVIDIA nTune"="c:\program files\NVIDIA Corporation\nTune\nTuneCmd.exe" [2007-09-04 81920]
"OscarEditor"="c:\program files\OSCAR Editor\OscarEditor.exe" [2018-11-01 2820096]
"Olympus ib"="c:\program files\Olympus\ib\olycamdetect.exe" [2009-10-30 93376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-10-04 8491008]
"nwiz"="nwiz.exe" [2007-10-04 1626112]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-10-04 81920]
"RTHDCPL"="RTHDCPL.EXE" [2009-03-12 17531392]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"MDS_Menu"="c:\program files\Olympus\ib\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2004-08-17 15360]

c:\documents and settings\U§ivatel\Nabˇdka Start\Programy\Po spuçtŘnˇ\
OpenOffice.org 2.0.lnk - c:\program files\OpenOffice.org 2.0\program\quickstart.exe [2006-6-27 393216]
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Akceler tor spuçtŘnˇ AutoCADu.lnk - c:\program files\Common Files\Autodesk Shared\acstart17.exe [2006-3-5 11000]
Photo Loader supervisory.lnk - c:\program files\CASIO\Photo Loader\Plauto.exe [2009-1-23 229376]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\BitComet\\BitComet.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\BROOD\\starcraft.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\mIRC\\mirc.exe"=
"d:\\Teamspeak2_RC2\\server_windows.exe"=
"c:\\Program Files\\Starcraft\\StarCraft.exe"=
"d:\\Steam\\steamapps\\krtek3\\counter-strike\\hl.exe"=
"d:\\Program Files\\TrackMania Nations ESWC\\TmNationsESWC.exe"=
"d:\\SIERRA\\Half-Life\\hl.exe"=
"c:\\Program Files\\Sierra On-Line\\SIGSPat.exe"=
"c:\\Program Files\\Hamachi\\hamachi.exe"=
"d:\\Program Files\\Warcraft III\\Warcraft III.exe"=
"d:\\Program Files\\Warcraft III\\War3.exe"=
"d:\\Steam\\steamapps\\krtek3\\counter-strike source\\hl2.exe"=
"d:\\Steam\\steam.exe"=
"d:\\Steam\\steamapps\\krtek3\\half-life deathmatch source\\hl2.exe"=
"d:\\Steam\\steamapps\\krtek3\\half-life 2 deathmatch\\hl2.exe"=
"c:\\Program Files\\HLSW\\hlsw.exe"=
"d:\\Steam\\steamapps\\krtek3\\dedicated server\\hltv.exe"=
"c:\\Program Files\\Miranda IM\\miranda32.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"d:\\Steam\\steamapps\\ruza_\\counter-strike\\hl.exe"=
"d:\\Program Files\\EA SPORTS\\UEFA EURO 2008\\EURO08.exe"=
"d:\\Steam\\steamapps\\ruza_\\dedicated server\\hltv.exe"=
"c:\\Documents and Settings\\All Users\\Dokumenty\\CS1.6\\hl.exe"=
"d:\\CS1.6{47}\\cstrike.exe"=
"c:\\Documents and Settings\\Uživatel\\Local Settings\\Data aplikací\\Dyyno Receiver\\DPPM.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"d:\\Steam\\steamapps\\ruza_\\dedicated server\\hlds.exe"=

R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [20.9.2006 16:30 642560]
R1 SbFw;SbFw;c:\windows\system32\drivers\SbFw.sys [4.2.2009 0:59 270888]
R1 sbhips;Sunbelt HIPS Driver;c:\windows\system32\drivers\sbhips.sys [21.6.2008 4:54 66600]
R2 pgsql-8.3;PostgreSQL Database Server 8.3;c:\program files\PostgreSQL\8.3\bin\pg_ctl.exe [19.9.2008 3:03 65536]
R2 PStrip;PStrip;c:\windows\system32\drivers\pstrip.sys [15.7.2007 3:37 27992]
R2 SbPF.Launcher;SbPF.Launcher;c:\program files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [31.10.2008 7:24 95528]
R2 SPF4;Sunbelt Personal Firewall 4;c:\program files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [31.10.2008 7:24 1365288]
R2 Viewpoint Service;Viewpoint Service;c:\program files\Viewpoint\Common\ViewpointService.exe [28.2.2009 20:19 30152]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport;c:\windows\system32\drivers\SbFwIm.sys [4.2.2009 0:59 65576]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [31.12.2001 23:18 1684736]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = local
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{4CBB5C71-1BA0-49ca-93CD-159AF8AA0CC9} - d:\program files\Betway\Poker\MPPoker.exe
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\s2udvhpm.default\
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
FF - Ext: Simple Dyyno Launcher: NPDyyno@dyyno.com - %profile%\extensions\NPDyyno@dyyno.com
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

AddRemove-FlashGet(JetCar) - d:\progra~1\FlashGet\UNWISE.EXE
AddRemove-ICQToolbar - c:\program files\ICQ6Toolbar\ICQUnToolbar.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-01-11 18:21
Windows 5.1.2600 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Cryptography\RNG*]
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG10.00.00.01WORKSTATION"="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"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'explorer.exe'(1952)
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\NVIDIA Corporation\nTune\nTuneService.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\PostgreSQL\8.3\bin\postgres.exe
c:\program files\PostgreSQL\8.3\bin\postgres.exe
c:\program files\PostgreSQL\8.3\bin\postgres.exe
c:\program files\PostgreSQL\8.3\bin\postgres.exe
c:\program files\PostgreSQL\8.3\bin\postgres.exe
c:\program files\PostgreSQL\8.3\bin\postgres.exe
c:\windows\system32\PnkBstrB.exe
c:\program files\Sunbelt Software\Personal Firewall\SbPFCl.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\RUNDLL32.EXE
c:\windows\RTHDCPL.EXE
c:\program files\OpenOffice.org 2.0\program\soffice.exe
c:\program files\OpenOffice.org 2.0\program\soffice.BIN
.
**************************************************************************
.
Celkový čas: 2011-01-11 18:26:46 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-01-11 17:26
ComboFix2.txt 2011-01-11 16:18
ComboFix3.txt 2010-04-02 20:03
ComboFix4.txt 2010-04-02 10:40

Před spuštěním: 2 682 101 760
Po spuštění: 2 653 634 560

- - End Of File - - E80CB9247BE8996E2EA677658AE206A3

Na plose byste mel mit soubor Submit(datum_cas).zip, je tomu tak

Stahnete OTM (viz muj podpis)

• Pokud pouzivate Win Vista ci W7, kliknete na OTM pravym a dejte Run As Administrator ci Spustit jako spravce
• Do leveho okna Paste Instructions for Items to be Moved (pod zlutou caru) vlozte obsah, ktery mate nize

• Kód: Vybrat vše

  :files
  c:\documents and settings\Uživatel\wuaucldt.exe
  %windir%\system32\*.tmp.dll /s
  %windir%\system32\SET*.tmp /s
  %windir%\*.tmp /s
  
  :commands
  [RESETHOSTS]
  [EMPTYTEMP]
  [EMPTYFLASH]

• Kliknete na cervene tlacitko MoveIt!
• Budete vyzvani na restart, dejte Yes, log pote najdete C:\_OTM\MovedFiles, obsah sem vlozte

Bohužel tento soubor se na ploše nenachází.

All processes killed
========== FILES ==========
c:\documents and settings\Uživatel\wuaucldt.exe moved successfully.
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
C:\WINDOWS\system32\SET745.tmp moved successfully.
C:\WINDOWS\system32\SET74A.tmp moved successfully.
C:\WINDOWS\system32\SET751.tmp moved successfully.
C:\WINDOWS\002179_.tmp moved successfully.
C:\WINDOWS\DXT6E.tmp moved successfully.
C:\WINDOWS\DXT6F.tmp moved successfully.
C:\WINDOWS\DXT70.tmp moved successfully.
C:\WINDOWS\DXT71.tmp moved successfully.
C:\WINDOWS\DXT72.tmp moved successfully.
C:\WINDOWS\DXTDEA.tmp moved successfully.
C:\WINDOWS\DXTDEB.tmp moved successfully.
C:\WINDOWS\DXTDEC.tmp moved successfully.
C:\WINDOWS\DXTDED.tmp moved successfully.
C:\WINDOWS\DXTDEE.tmp moved successfully.
C:\WINDOWS\DXTDEF.tmp moved successfully.
C:\WINDOWS\DXTDF0.tmp moved successfully.
C:\WINDOWS\DXTDF1.tmp moved successfully.
C:\WINDOWS\DXTDF2.tmp moved successfully.
C:\WINDOWS\DXTE8F.tmp moved successfully.
C:\WINDOWS\NV19241984.TMP folder moved successfully.
C:\WINDOWS\SET3.tmp moved successfully.
C:\WINDOWS\SETA.tmp moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP12F5.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP12FD.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP21FF.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP48B9.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5D87.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5E5D.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP6552.tmp folder moved successfully.
C:\WINDOWS\Installer\MSI378.tmp moved successfully.
C:\WINDOWS\Installer\MSI37F.tmp moved successfully.
C:\WINDOWS\Installer\MSI408.tmp moved successfully.
C:\WINDOWS\Installer\MSI410.tmp moved successfully.
C:\WINDOWS\system32\CONFIG.TMP moved successfully.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 41 bytes

User: holdemmanager
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32835 bytes
->Flash cache emptied: 348 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32835 bytes
->Flash cache emptied: 913 bytes

User: postgres
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: postgres.RADEK
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: postgrespass
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: postgreuser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Uživatel
->Temp folder emptied: 166724 bytes
->Temporary Internet Files folder emptied: 329274 bytes
->Java cache emptied: 104464033 bytes
->FireFox cache emptied: 86742846 bytes
->Google Chrome cache emptied: 12857067 bytes
->Opera cache emptied: 2638645 bytes
->Flash cache emptied: 4698346 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 202,00 mb


OTM by OldTimer - Version 3.1.17.2 log created on 01112011_185934

Files moved on Reboot...

Registry entries deleted on Reboot...

Nevadi, takze jinak...zabalte mi prosim slozku c:\_OTM do raru ci zipu a uploadnete mi ji na http://vyosek.ic.cz/havet/uploader.php - bude slouzit k dalsimu zkoumani haveti

Jak se chova PC

Zřejmě máte na mysli složku [4]-Submit_2011-01-11_18.04.48.zip, která je na disku C: tu Vám tam zabalím taky.

Jinak PC se chová mnohem lépe než předtím. Děkuji moc za pomoc.

Ha tak sUBS to predelal, uz to je na Cecku a ne na plose, takze staci ten Submit, tam je co potrebuju

Tak uz vidim ze to tam mam, super, diky za pomoc A jdeme pokracovat

Odinstalujte Combofix

• Start - Spustit (nebo pouzijte klavesobou zkratku Win+R)
• Napiste ComboFix /Uninstall
• Stisknete Enter
• Tohle smaze Combofix a jeho slozky

T-Cleaner http://sweb.cz/Marinus/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner (viz muj podpis)
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za 14 dni

Dejte novy log z RSIT a napiste jak se chova PC

Jak jsem již řekl, PC se chová mnohem lépe než předtím. 16% volného místa na C: disku místo 1% je opravdu znát


Logfile of random's system information tool 1.08 (written by random/random)
Run by Uživatel at 2011-01-11 20:13:54
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 5 GB (16%) free of 30 GB
Total RAM: 2047 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:13:58, on 11.1.2011
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\OSCAR Editor\OscarEditor.exe
C:\Program Files\Olympus\ib\olycamdetect.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\CASIO\Photo Loader\Plauto.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
C:\Program Files\OSCAR Editor\OscarData\Tools\MyShowMessage.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
C:\Program Files\Opera\opera.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
D:\Steam\steam.exe
J:\ZALOHA\kuk\RSIT.exe
C:\Program Files\trend micro\Uživatel.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [MDS_Menu] "C:\Program Files\Olympus\ib\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Olympus\ib" UpdateWithCreateOnce "Software\OLYMPUS\ib\1.0"
O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear
O4 - HKCU\..\Run: [OscarEditor] "C:\Program Files\OSCAR Editor\OscarEditor.exe" Minimum
O4 - HKCU\..\Run: [Olympus ib] "C:\Program Files\Olympus\ib\olycamdetect.exe" /Startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-329068152-1417001333-725345543-1011\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'postgreuser')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Akcelerátor spuštění AutoCADu.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart17.exe
O4 - Global Startup: Photo Loader supervisory.lnk = C:\Program Files\CASIO\Photo Loader\Plauto.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Betway.com Poker - {4CBB5C71-1BA0-49ca-93CD-159AF8AA0CC9} - D:\Program Files\Betway\Poker\MPPoker.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe (file missing)
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe (file missing)
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O18 - Protocol: bw+0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: offline-8876480 - {5E56CC67-E732-445F-ADAC-C8F64BB99F5E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PostgreSQL Database Server 8.3 (pgsql-8.3) - PostgreSQL Global Development Group - C:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
O23 - Service: Viewpoint Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

--
End of file - 20840 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Google Software Updater.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2009-02-27 61816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2006-10-17 2120768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-04-29 668656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-17 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-03-17 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2006-10-17 2120768]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-10-04 8491008]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2007-10-04 81920]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-03-12 17531392]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"MDS_Menu"=C:\Program Files\Olympus\ib\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"NVIDIA nTune"=C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe [2007-09-04 81920]
"OscarEditor"=C:\Program Files\OSCAR Editor\OscarEditor.exe [2018-11-02 2820096]
"Olympus ib"=C:\Program Files\Olympus\ib\olycamdetect.exe [2009-10-30 93376]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Akcelerátor spuštění AutoCADu.lnk - C:\Program Files\Common Files\Autodesk Shared\acstart17.exe
Photo Loader supervisory.lnk - C:\Program Files\CASIO\Photo Loader\Plauto.exe

C:\Documents and Settings\Uživatel\Nabídka Start\Programy\Po spuštění
OpenOffice.org 2.0.lnk - C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\BitComet\BitComet.exe"="C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\BROOD\starcraft.exe"="C:\BROOD\starcraft.exe:*:Enabled:Starcraft"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\mIRC\mirc.exe"="C:\Program Files\mIRC\mirc.exe:*:Disabled:mIRC"
"D:\Teamspeak2_RC2\server_windows.exe"="D:\Teamspeak2_RC2\server_windows.exe:*:Enabled:Server"
"C:\Program Files\Starcraft\StarCraft.exe"="C:\Program Files\Starcraft\StarCraft.exe:*:Enabled:Starcraft"
"D:\Steam\steamapps\krtek3\counter-strike\hl.exe"="D:\Steam\steamapps\krtek3\counter-strike\hl.exe:*:Enabled:Half-Life Launcher"
"D:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe"="D:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe:*:Enabled:TmNationsESWC"
"D:\SIERRA\Half-Life\hl.exe"="D:\SIERRA\Half-Life\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Sierra On-Line\SIGSPat.exe"="C:\Program Files\Sierra On-Line\SIGSPat.exe:*:Disabled:SIGSPat"
"C:\Program Files\Hamachi\hamachi.exe"="C:\Program Files\Hamachi\hamachi.exe:*:Enabled:Hamachi Client"
"D:\Program Files\Warcraft III\Warcraft III.exe"="D:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III"
"D:\Program Files\Warcraft III\War3.exe"="D:\Program Files\Warcraft III\War3.exe:*:Enabled:Warcraft III"
"D:\Steam\steamapps\krtek3\counter-strike source\hl2.exe"="D:\Steam\steamapps\krtek3\counter-strike source\hl2.exe:*:Enabled:hl2"
"D:\Steam\steam.exe"="D:\Steam\steam.exe:*:Enabled:Steam"
"D:\Steam\steamapps\krtek3\half-life deathmatch source\hl2.exe"="D:\Steam\steamapps\krtek3\half-life deathmatch source\hl2.exe:*:Enabled:hl2"
"D:\Steam\steamapps\krtek3\half-life 2 deathmatch\hl2.exe"="D:\Steam\steamapps\krtek3\half-life 2 deathmatch\hl2.exe:*:Enabled:hl2"
"C:\Program Files\HLSW\hlsw.exe"="C:\Program Files\HLSW\hlsw.exe:*:Enabled:hlsw"
"D:\Steam\steamapps\krtek3\dedicated server\hltv.exe"="D:\Steam\steamapps\krtek3\dedicated server\hltv.exe:*:Enabled:HLTV Launcher"
"C:\Program Files\Miranda IM\miranda32.exe"="C:\Program Files\Miranda IM\miranda32.exe:*:Enabled:Miranda IM"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Disabled:Logitech Desktop Messenger"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"D:\Steam\steamapps\ruza_\counter-strike\hl.exe"="D:\Steam\steamapps\ruza_\counter-strike\hl.exe:*:Enabled:Half-Life Launcher"
"D:\Program Files\EA SPORTS\UEFA EURO 2008\EURO08.exe"="D:\Program Files\EA SPORTS\UEFA EURO 2008\EURO08.exe:*:Enabled:EURO08"
"D:\Steam\steamapps\ruza_\dedicated server\hltv.exe"="D:\Steam\steamapps\ruza_\dedicated server\hltv.exe:*:Enabled:HLTV Launcher"
"C:\Documents and Settings\All Users\Dokumenty\CS1.6\hl.exe"="C:\Documents and Settings\All Users\Dokumenty\CS1.6\hl.exe:*:Enabled:Half-Life Launcher"
"D:\CS1.6{47}\cstrike.exe"="D:\CS1.6{47}\cstrike.exe:*:Enabled:Counter-Strike Launcher"
"C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Dyyno Receiver\DPPM.exe"="C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Dyyno Receiver\DPPM.exe:*:Enabled:Dyyno Plugin Receiver"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"D:\Steam\steamapps\ruza_\dedicated server\hlds.exe"="D:\Steam\steamapps\ruza_\dedicated server\hlds.exe:*:Enabled:Dedicated Server"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"

======File associations======

.scr - open - "" "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2011-01-11 20:13:54 ----D---- C:\rsit
2011-01-11 20:05:16 ----D---- C:\Program Files\CCleaner
2011-01-11 18:29:14 ----SHD---- C:\RECYCLER
2011-01-11 18:18:34 ----D---- C:\WINDOWS\temp
2011-01-11 17:02:13 ----RASHD---- C:\cmdcons
2011-01-11 16:37:54 ----D---- C:\WINDOWS\CSC
2011-01-10 19:24:00 ----N---- C:\SafeSurf ABUSE README.txt
2011-01-10 19:22:30 ----D---- C:\Program Files\SafeSurf
2011-01-10 18:07:14 ----D---- C:\Documents and Settings\Uživatel\Data aplikací\WebSurf.ru

======List of files/folders modified in the last 1 months======

2011-01-11 20:13:58 ----D---- C:\Program Files\Trend Micro
2011-01-11 20:12:59 ----D---- C:\Program Files\QIP
2011-01-11 20:12:42 ----RD---- C:\Program Files
2011-01-11 20:12:06 ----D---- C:\Program Files\Ganymede
2011-01-11 20:10:55 ----D---- C:\WINDOWS\system32\CatRoot2
2011-01-11 20:06:28 ----D---- C:\WINDOWS\Debug
2011-01-11 20:06:28 ----D---- C:\WINDOWS
2011-01-11 19:59:59 ----SD---- C:\WINDOWS\Tasks
2011-01-11 19:59:57 ----D---- C:\Documents and Settings\Uživatel\Data aplikací\OpenOffice.org2
2011-01-11 19:58:21 ----N---- C:\WINDOWS\SchedLgU.Txt
2011-01-11 19:41:28 ----D---- C:\WINDOWS\Minidump
2011-01-11 19:41:05 ----D---- C:\WINDOWS\Prefetch
2011-01-11 19:39:54 ----SHD---- C:\System Volume Information
2011-01-11 18:59:36 ----D---- C:\WINDOWS\system32\drivers\etc
2011-01-11 18:59:36 ----D---- C:\WINDOWS\system32
2011-01-11 18:59:35 ----SHD---- C:\WINDOWS\Installer
2011-01-11 18:27:19 ----D---- C:\WINDOWS\system32\drivers
2011-01-11 18:22:20 ----A---- C:\WINDOWS\system.ini
2011-01-11 18:19:10 ----D---- C:\WINDOWS\system32\config
2011-01-11 18:11:10 ----D---- C:\WINDOWS\AppPatch
2011-01-11 18:11:08 ----D---- C:\Program Files\Common Files
2011-01-11 17:08:39 ----D---- C:\Program Files\ICQ6.5
2011-01-11 17:02:29 ----RASH---- C:\boot.ini
2011-01-11 16:57:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2011-01-11 16:24:52 ----D---- C:\Program Files\ESET
2011-01-11 15:31:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google Updater
2011-01-11 14:03:55 ----D---- C:\Program Files\Alwil Software
2011-01-06 15:57:17 ----D---- C:\Program Files\PokerStars
2010-12-25 23:01:42 ----D---- C:\Program Files\SpeedFan
2010-12-25 19:22:20 ----HD---- C:\Program Files\InstallShield Installation Information
2010-12-18 20:45:32 ----D---- C:\Program Files\Opera
2010-12-17 19:00:16 ----D---- C:\Documents and Settings\Uživatel\Data aplikací\ICQ
2010-12-17 17:42:11 ----SD---- C:\Documents and Settings\Uživatel\Data aplikací\Microsoft
2010-12-14 22:38:36 ----D---- C:\Program Files\Mozilla Firefox

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; C:\WINDOWS\system32\giveio.sys [1996-04-03 5248]
R0 nvata;nvata; C:\WINDOWS\system32\DRIVERS\nvata.sys [2006-03-16 99840]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS\System32\DRIVERS\ohci1394.sys [2004-08-03 61056]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2005-08-10 50688]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2005-05-16 6656]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\WINDOWS\System32\drivers\sfvfs02.sys [2005-11-03 63488]
R0 speedfan;speedfan; C:\WINDOWS\system32\speedfan.sys [2006-09-24 5248]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2006-09-20 642560]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 ACEDRV05;ACEDRV05; \??\C:\WINDOWS\system32\drivers\ACEDRV05.sys []
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-17 14848]
R1 SbFw;SbFw; C:\WINDOWS\system32\drivers\SbFw.sys [2008-10-31 270888]
R1 sbhips;Sunbelt HIPS Driver; C:\WINDOWS\system32\drivers\sbhips.sys [2008-06-21 66600]
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2004-08-03 88448]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2002-09-23 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2002-09-23 55936]
R2 PStrip;PStrip; C:\WINDOWS\system32\drivers\pstrip.sys [2007-07-15 27992]
R3 dtscsi;dtscsi; C:\WINDOWS\System32\Drivers\dtscsi.sys [2006-09-20 223128]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-03-12 5051904]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-10-04 6854464]
R3 NVR0Dev;NVR0Dev; \??\C:\WINDOWS\nvoclock.sys []
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2002-09-23 5888]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-06-05 142336]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport; C:\WINDOWS\system32\DRIVERS\sbfwim.sys [2008-06-21 65576]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2004-08-03 60800]
S3 Bridge;Most MAC; C:\WINDOWS\system32\DRIVERS\bridge.sys [2004-08-03 71552]
S3 BridgeMP;Miniport mostu MAC; C:\WINDOWS\system32\DRIVERS\bridge.sys [2004-08-03 71552]
S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys []
S3 GVCplDrv;GVCplDrv; C:\WINDOWS\system32\drivers\GVCplDrv.sys [2004-05-02 23040]
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2007-03-22 17480]
S3 k750bus;Sony Ericsson 750 driver (WDM); C:\WINDOWS\system32\DRIVERS\k750bus.sys [2005-02-11 55216]
S3 k750mdfl;Sony Ericsson 750 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\k750mdfl.sys [2005-02-11 6576]
S3 k750mdm;Sony Ericsson 750 USB WMC Modem Drivers; C:\WINDOWS\system32\DRIVERS\k750mdm.sys [2005-02-11 89872]
S3 k750mgmt;Sony Ericsson 750 USB WMC Device Management Drivers; C:\WINDOWS\system32\DRIVERS\k750mgmt.sys [2005-02-11 81728]
S3 k750obex;Sony Ericsson 750 USB WMC OBEX Interface Drivers; C:\WINDOWS\system32\DRIVERS\k750obex.sys [2005-02-11 79488]
S3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys [2008-09-26 20240]
S3 L8042mou;Logitech SetPoint PS/2 Mouse Filter Driver; C:\WINDOWS\System32\Drivers\L8042mou.sys [2004-12-10 52992]
S3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys [2008-09-26 35472]
S3 LHidKe;Logitech SetPoint HID Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidKE.Sys [2004-12-10 24704]
S3 LHidUsbK;Logitech SetPoint USB Receiver device driver; C:\WINDOWS\System32\Drivers\LHidUsbK.Sys [2004-12-10 36480]
S3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys [2008-09-26 37392]
S3 LMouKE;Logitech SetPoint Mouse Filter Driver; C:\WINDOWS\System32\Drivers\LMouKE.sys [2004-12-10 68992]
S3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\WINDOWS\System32\Drivers\LUsbFilt.Sys [2008-09-26 28816]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2004-08-03 61824]
S3 nm;Ovladač programu Sledování sítě; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2004-08-03 40320]
S3 QV2KUX;Casio Digital Camera; C:\WINDOWS\system32\DRIVERS\qv2kux.sys [2001-08-17 3328]
S3 rtl8029;Realtek RTL8029(AS)-based PCI Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8029.SYS [2001-08-17 19017]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2002-09-23 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-03-17 153376]
R2 nTuneService;nTune Service; C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe [2007-09-04 131072]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-10-04 155716]
R2 NwSapAgent;Agent SAP; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
R2 pgsql-8.3;PostgreSQL Database Server 8.3; C:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe [2008-09-19 65536]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-09-24 75064]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2010-09-24 214520]
R2 SbPF.Launcher;SbPF.Launcher; C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [2008-10-31 95528]
R2 SPF4;Sunbelt Personal Firewall 4; C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [2008-10-31 1365288]
R2 Viewpoint Service;Viewpoint Service; C:\Program Files\Viewpoint\Common\ViewpointService.exe [2008-04-04 30152]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-29 183280]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2009-03-15 72704]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------