VIRY.CZ

Zdravím,
poslední dobou se mi začalo stávat, že se mi počítač třeba na půl sekundy zasekne, než se zase rozběhne. Ne každý den, ale když začne tak nepomáhá nic jiného než restart. nejdřív se takhle sekne třeba jednou za pár minut a postupně se intervaly zkracují. Po restartu pak zase třeba dva dny jede bez problémů, někdy se ale problém vrátí i pár minut po opětovném najetí systému. Navíc jsem si poslední dobou všiml, že mám období kdy mám značně zpomalený internet. začíná mě sem tam vykopávat online poker z důvodu slabého spojení, což se mi dřív nastávalo. Jedu přes wifi a ikona v rohu ukazuje stále plný signál.

Dříve než se rozhodnu reklamovat počítač, nebo psát stížnosti providerovi, že mě nezásobuje internetem l rychlosti, kterou mi sliboval, bych chtěl poprosit o kontrolu logu, jestli si za své problémy nemůžu třeba sám. Předem děkuji.

Logfile of random's system information tool 1.08 (written by random/random)
Run by Paja&Monika at 2011-05-19 18:40:10
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 99 GB (23%) free of 431 GB
Total RAM: 4091 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:40:18, on 19.5.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
C:\Program Files\Lenovo\Lenovo SlideNav\SlidebarNavigator\SlidebarNavigator.exe
C:\Program Files (x86)\AVG\AVG9\avgtray.exe
C:\Program Files\Lenovo\Lenovo SlideNav\SlidebarNavigator\SlidebarDriverAdapter_550vista.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Lenovo\Lenovo SlideNav\SlidebarNavigator\SlidebarNotifier.exe
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.Exe
C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files (x86)\TC UP\totalcmd.exe
C:\Program Files\trend micro\Paja&Monika.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://qip.ru
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll
R3 - URLSearchHook: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\Paja&Monika\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll
O2 - BHO: QIPBHO - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\Paja&Monika\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll
O3 - Toolbar: @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Lenovo SlideNav] "C:\Program Files\Lenovo\Lenovo SlideNav\SlidebarNavigator\SlidebarNavigator.exe"
O4 - HKLM\..\Run: [OnekeyDM] C:\Program Files (x86)\Lenovo\OnekeyDM\OnekeyDM.exe
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~2\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\windows\SysWOW64\Macromed\Flash\FlashUtil10p_Plugin.exe -update plugin
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2927811871-1221682460-959869790-1006\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'postgres')
O4 - HKUS\S-1-5-21-2927811871-1221682460-959869790-1006\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'postgres')
O4 - HKUS\S-1-5-18\..\RunOnce: [WLStart] "C:\Program Files (x86)\Windows Live\Installer\wlstart.exe" /nosearch /nohomepage (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [WLStart] "C:\Program Files (x86)\Windows Live\Installer\wlstart.exe" /nosearch /nohomepage (User 'Default user')
O4 - Global Startup: AVer HID Receiver.lnk = C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
O4 - Global Startup: AVerQuick.lnk = C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: Canon LBP2900 Status Window.lnk = C:\Windows\System32\spool\drivers\x64\3\CNAB4LAD.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Users\Paja&Monika\Desktop\PartyPoker.lnk
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Users\Paja&Monika\Desktop\PartyPoker.lnk
O9 - Extra button: Odeslat do zařízení Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Odeslat do zařízení &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Zobrazit nebo skrýt HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: QIP Infium - {1EF681F7-A04B-4D6D-9012-A307CCA55610} - C:\Program Files (x86)\QIP Infium\infium.exe (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: AVerRemote - AVerMedia - C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
O23 - Service: AVerScheduleService - Unknown owner - C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files (x86)\AVG\AVG9\Toolbar\ToolbarBroker.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: IGRS - Lenovo Group Limited - C:\Program Files (x86)\Lenovo\ReadyComm\common\IGRS.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Lenovo ReadyComm AppSvc - Lenovo Group Limited - C:\Program Files\Lenovo\ReadyComm\AppSvc.exe
O23 - Service: Lenovo ReadyComm ConnSvc - Lenovo Group Limited - C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: PostgreSQL Database Server 8.3 (pgsql-8.3) - PostgreSQL Global Development Group - C:\Program Files (x86)\PostgreSQL\8.3\bin\pg_ctl.exe
O23 - Service: PnkBstrA - Unknown owner - C:\windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 15981 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
"C:\Program Files (x86)\AVG\AVG9\avgchsva.exe"
"C:\Program Files (x86)\AVG\AVG9\avgrsa.exe"
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
/pipeName=adb15647-0684-4dd7-b617-e5d6224f45de /coreSdkOptions=30 /logConfFile="C:\ProgramData\avg9\temp\76055460-82b7-4a7f-b0cf-8f64d90d6959-204-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG9\" /tempPath="C:\ProgramData\avg9\temp\"
winlogon.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\nvvsvc.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\nvvsvc.exe -session -first
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe"
"C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe"
"C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe"
"C:\Program Files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe"
"C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe"
C:\windows\SysWOW64\svchost.exe -k hpdevmgmt
"C:\Program Files (x86)\Lenovo\ReadyComm\common\IGRS.exe"
C:\windows\System32\svchost.exe -k HPZ12
C:\windows\system32\CNAB4RPD.EXE
"C:\Program Files (x86)\PostgreSQL\8.3\bin\pg_ctl.exe" runservice -w -N "pgsql-8.3" -D "C:\Program Files (x86)\PostgreSQL\8.3\data\"
"C:\Program Files (x86)\AVG\AVG9\avgnsa.exe"
C:\windows\System32\svchost.exe -k HPZ12
C:\windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
"C:/Program Files (x86)/PostgreSQL/8.3/bin/postgres.exe" -D "C:/Program Files (x86)/PostgreSQL/8.3/data"
\??\C:\windows\system32\conhost.exe
"C:/Program Files (x86)/PostgreSQL/8.3/bin/postgres.exe" "--forklog" "876" "872"
"C:/Program Files (x86)/PostgreSQL/8.3/bin/postgres.exe" "--forkboot" "868" "-x3"
"C:/Program Files (x86)/PostgreSQL/8.3/bin/postgres.exe" "--forkboot" "908" "-x4"
"C:/Program Files (x86)/PostgreSQL/8.3/bin/postgres.exe" "--forkavlauncher" "868"
"C:/Program Files (x86)/PostgreSQL/8.3/bin/postgres.exe" "--forkcol" "908"
"C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe"
"c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe"
"c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe"
WLIDSvcM.exe 2216
"taskhost.exe"
C:\windows\system32\svchost.exe -k bthsvcs
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe"
C:\windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe"
"C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe"
"C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe"
"C:\Program Files\Lenovo\Lenovo SlideNav\SlidebarNavigator\SlidebarNavigator.exe"
"C:\Program Files (x86)\Lenovo\OnekeyDM\OnekeyDM.exe"
"C:\Program Files (x86)\AVG\AVG9\avgtray.exe"
"C:\Program Files\Lenovo\Lenovo SlideNav\SlidebarNavigator\SlidebarDriverAdapter_550vista.exe"
"C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe"
"C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe"
"C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files\Lenovo\Lenovo SlideNav\SlidebarNavigator\SlidebarNotifier.exe" -Embedding
"C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.Exe"
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe"
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
C:\windows\System32\svchost.exe -k LocalServicePeerNet
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\windows\system32\svchost.exe -k SDRSVC
C:\windows\System32\svchost.exe -k swprv
totalcmd.exe /i="C:\Program Files (x86)\TC UP\wincmd.ini"
"C:\Users\Paja&Monika\Downloads\RSITx64.exe"
C:\windows\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files (x86)\AVG\AVG9\avgssiea.dll [2010-11-25 2334560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files (x86)\AVG\AVG9\avgssie.dll [2010-11-25 1623392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-09-22 191792]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
AVG Security Toolbar BHO - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll [2011-03-18 2471240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class - C:\Users\Paja&Monika\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll [2010-09-10 149968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar BHO - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll [2010-09-22 612616]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-02-09 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20 509496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - AVG Security Toolbar - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll [2011-03-18 2471240]
{8dcb7100-df86-4384-8842-8fa844297b3f} - @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100 - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll [2010-09-22 612616]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"=C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-08-07 186904]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-07-30 1810728]
"NvCplDaemon"=C:\windows\system32\NvCpl.dll [2009-10-03 16395880]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-12-17 9643040]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\utility.exe [2009-09-29 4366704]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2009-08-19 5825536]
"EPSON Stylus DX3800 Series"=C:\windows\system32\spool\DRIVERS\x64\3\E_FATIACE.EXE /F C:\windows\TEMP\E_SD98C.tmp /EF HKLM []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2011-01-05 1242448]
"SpywareTerminatorUpdate"=C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [2011-05-14 3318784]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"=C:\windows\SysWOW64\Macromed\Flash\FlashUtil10p_Plugin.exe [2011-04-22 235168]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-12-03 35184]
"Lenovo SlideNav"=C:\Program Files\Lenovo\Lenovo SlideNav\SlidebarNavigator\SlidebarNavigator.exe [2009-10-22 845640]
"OnekeyDM"=C:\Program Files (x86)\Lenovo\OnekeyDM\OnekeyDM.exe [2009-03-27 468480]
"UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2008-12-04 218408]
"AVG9_TRAY"=C:\PROGRA~2\AVG\AVG9\avgtray.exe [2011-03-14 2071904]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"hpqSRMon"=C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [2008-07-22 150528]
"DivXUpdate"=C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2011-01-11 1230704]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]
"SpywareTerminator"=C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2011-05-14 2557440]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AVer HID Receiver.lnk - C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
AVerQuick.lnk - C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
Canon LBP2900 Status Window.lnk - C:\Windows\System32\spool\drivers\x64\3\CNAB4LAD.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="avgrssta.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-05-19 18:40:11 ----D---- C:\Program Files\trend micro
2011-05-19 18:40:10 ----D---- C:\rsit
2011-05-14 17:46:09 ----D---- C:\Users\Paja&Monika\AppData\Roaming\Spyware Terminator
2011-05-14 17:46:07 ----D---- C:\ProgramData\Spyware Terminator
2011-05-14 17:46:05 ----D---- C:\Program Files (x86)\Spyware Terminator
2011-05-12 18:47:21 ----D---- C:\Users\Paja&Monika\AppData\Roaming\Mozilla-Cache
2011-05-12 18:45:53 ----D---- C:\Programs
2011-05-11 21:05:01 ----D---- C:\ca5123aa05ce15645d403b
2011-05-11 20:08:27 ----A---- C:\windows\system32\ntoskrnl.exe
2011-05-11 20:08:26 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2011-05-11 20:08:25 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2011-05-11 20:08:20 ----A---- C:\windows\system32\drivers\usbehci.sys
2011-05-11 20:08:19 ----A---- C:\windows\system32\drivers\usbuhci.sys
2011-05-11 20:08:19 ----A---- C:\windows\system32\drivers\usbport.sys
2011-05-11 20:08:19 ----A---- C:\windows\system32\drivers\usbhub.sys
2011-05-11 20:08:19 ----A---- C:\windows\system32\drivers\usbd.sys
2011-05-11 20:08:19 ----A---- C:\windows\system32\drivers\usbccgp.sys
2011-05-07 18:23:29 ----D---- C:\windows\cs
2011-05-07 18:21:43 ----D---- C:\Program Files\Windows Live
2011-05-07 18:21:02 ----D---- C:\Program Files (x86)\MSN Toolbar
2011-05-07 18:20:55 ----D---- C:\Program Files (x86)\Bing Bar Installer
2011-05-07 18:12:46 ----D---- C:\windows\system32\SPReview
2011-05-07 18:12:15 ----D---- C:\windows\system32\EventProviders
2011-05-07 17:21:01 ----A---- C:\windows\system32\netfxperf.dll
2011-05-07 17:21:01 ----A---- C:\windows\system32\dfshim.dll
2011-05-07 17:20:54 ----A---- C:\windows\SYSWOW64\dfshim.dll
2011-05-07 17:20:49 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2011-05-07 17:20:49 ----A---- C:\windows\system32\mstscax.dll
2011-05-07 17:20:49 ----A---- C:\windows\system32\drivers\TsUsbFlt.sys
2011-05-07 17:20:48 ----A---- C:\windows\system32\d3d10warp.dll
2011-05-07 17:20:45 ----A---- C:\windows\SYSWOW64\mstscax.dll
2011-05-07 17:20:43 ----A---- C:\windows\SYSWOW64\mfc40u.dll
2011-05-07 17:20:43 ----A---- C:\windows\SYSWOW64\mfc40.dll
2011-05-07 17:20:43 ----A---- C:\windows\SYSWOW64\d3d10warp.dll
2011-05-07 17:20:43 ----A---- C:\windows\system32\sysmain.dll
2011-05-07 17:20:43 ----A---- C:\windows\system32\drivers\tcpip.sys
2011-05-07 17:20:42 ----A---- C:\windows\system32\shell32.dll
2011-05-07 17:20:41 ----A---- C:\windows\system32\MSVidCtl.dll
2011-05-07 17:20:40 ----A---- C:\windows\system32\wmp.dll
2011-05-07 17:20:40 ----A---- C:\windows\system32\tquery.dll
2011-05-07 17:20:39 ----A---- C:\windows\system32\ntdll.dll
2011-05-07 17:20:39 ----A---- C:\windows\system32\mssrch.dll
2011-05-07 17:20:39 ----A---- C:\windows\system32\mscoree.dll
2011-05-07 17:20:39 ----A---- C:\windows\system32\mmcndmgr.dll
2011-05-07 17:20:37 ----A---- C:\windows\SYSWOW64\secproc_isv.dll
2011-05-07 17:20:37 ----A---- C:\windows\system32\secproc_isv.dll
2011-05-07 17:20:37 ----A---- C:\windows\system32\secproc.dll
2011-05-07 17:20:37 ----A---- C:\windows\system32\RMActivate_isv.exe
2011-05-07 17:20:37 ----A---- C:\windows\system32\RMActivate.exe
2011-05-07 17:20:37 ----A---- C:\windows\system32\mf.dll
2011-05-07 17:20:36 ----A---- C:\windows\system32\xpsservices.dll
2011-05-07 17:20:35 ----A---- C:\windows\SYSWOW64\shell32.dll
2011-05-07 17:20:34 ----A---- C:\windows\SYSWOW64\secproc.dll
2011-05-07 17:20:34 ----A---- C:\windows\SYSWOW64\RMActivate_isv.exe
2011-05-07 17:20:34 ----A---- C:\windows\system32\rpcrt4.dll
2011-05-07 17:20:33 ----A---- C:\windows\SYSWOW64\RMActivate.exe
2011-05-07 17:20:33 ----A---- C:\windows\system32\schedsvc.dll
2011-05-07 17:20:32 ----A---- C:\windows\system32\ole32.dll
2011-05-07 17:20:31 ----A---- C:\windows\SYSWOW64\mscoree.dll
2011-05-07 17:20:31 ----A---- C:\windows\system32\spwizui.dll
2011-05-07 17:20:31 ----A---- C:\windows\system32\iertutil.dll
2011-05-07 17:20:30 ----A---- C:\windows\SYSWOW64\mf.dll
2011-05-07 17:20:30 ----A---- C:\windows\system32\wevtsvc.dll
2011-05-07 17:20:30 ----A---- C:\windows\system32\taskschd.dll
2011-05-07 17:20:30 ----A---- C:\windows\system32\RacEngn.dll
2011-05-07 17:20:30 ----A---- C:\windows\system32\diagperf.dll
2011-05-07 17:20:29 ----A---- C:\windows\SYSWOW64\CertEnroll.dll
2011-05-07 17:20:29 ----A---- C:\windows\system32\vssapi.dll
2011-05-07 17:20:29 ----A---- C:\windows\system32\NaturalLanguage6.dll
2011-05-07 17:20:29 ----A---- C:\windows\system32\msxml3.dll
2011-05-07 17:20:29 ----A---- C:\windows\system32\ExplorerFrame.dll
2011-05-07 17:20:29 ----A---- C:\windows\system32\drivers\msiscsi.sys
2011-05-07 17:20:28 ----A---- C:\windows\SYSWOW64\mssrch.dll
2011-05-07 17:20:28 ----A---- C:\windows\SYSWOW64\iertutil.dll
2011-05-07 17:20:27 ----A---- C:\windows\SYSWOW64\wmp.dll
2011-05-07 17:20:27 ----A---- C:\windows\system32\UIRibbon.dll
2011-05-07 17:20:27 ----A---- C:\windows\system32\mcupdate_GenuineIntel.dll
2011-05-07 17:20:25 ----A---- C:\windows\SYSWOW64\PresentationHostProxy.dll
2011-05-07 17:20:25 ----A---- C:\windows\SYSWOW64\PresentationHost.exe
2011-05-07 17:20:25 ----A---- C:\windows\system32\WsmSvc.dll
2011-05-07 17:20:25 ----A---- C:\windows\system32\WMVCORE.DLL
2011-05-07 17:20:25 ----A---- C:\windows\system32\rdpdd.dll
2011-05-07 17:20:25 ----A---- C:\windows\system32\PresentationHostProxy.dll
2011-05-07 17:20:25 ----A---- C:\windows\system32\PresentationHost.exe
2011-05-07 17:20:24 ----A---- C:\windows\system32\spreview.exe
2011-05-07 17:20:24 ----A---- C:\windows\system32\spinstall.exe
2011-05-07 17:20:24 ----A---- C:\windows\system32\MPSSVC.dll
2011-05-07 17:20:24 ----A---- C:\windows\system32\CertEnroll.dll
2011-05-07 17:20:23 ----A---- C:\windows\SYSWOW64\tquery.dll
2011-05-07 17:20:23 ----A---- C:\windows\system32\WMVDECOD.DLL
2011-05-07 17:20:23 ----A---- C:\windows\system32\WinSAT.exe
2011-05-07 17:20:23 ----A---- C:\windows\system32\d3d9.dll
2011-05-07 17:20:22 ----A---- C:\windows\SYSWOW64\RacEngn.dll
2011-05-07 17:20:22 ----A---- C:\windows\system32\msxml6.dll
2011-05-07 17:20:22 ----A---- C:\windows\system32\IKEEXT.DLL
2011-05-07 17:20:21 ----A---- C:\windows\SYSWOW64\AuthFWSnapin.dll
2011-05-07 17:20:21 ----A---- C:\windows\system32\SearchFolder.dll
2011-05-07 17:20:21 ----A---- C:\windows\system32\kernel32.dll
2011-05-07 17:20:21 ----A---- C:\windows\system32\gpsvc.dll
2011-05-07 17:20:21 ----A---- C:\windows\system32\AuthFWSnapin.dll
2011-05-07 17:20:20 ----A---- C:\windows\system32\VSSVC.exe
2011-05-07 17:20:20 ----A---- C:\windows\system32\dwmcore.dll
2011-05-07 17:20:20 ----A---- C:\windows\system32\dbgeng.dll
2011-05-07 17:20:19 ----A---- C:\windows\system32\mstime.dll
2011-05-07 17:20:19 ----A---- C:\windows\system32\drivers\ndis.sys
2011-05-07 17:20:19 ----A---- C:\windows\system32\drivers\http.sys
2011-05-07 17:20:19 ----A---- C:\windows\system32\crypt32.dll
2011-05-07 17:20:18 ----A---- C:\windows\SYSWOW64\ole32.dll
2011-05-07 17:20:18 ----A---- C:\windows\SYSWOW64\ExplorerFrame.dll
2011-05-07 17:20:18 ----A---- C:\windows\system32\drivers\afd.sys
2011-05-07 17:20:18 ----A---- C:\windows\system32\actxprxy.dll
2011-05-07 17:20:17 ----A---- C:\windows\system32\TSWorkspace.dll
2011-05-07 17:20:17 ----A---- C:\windows\system32\termsrv.dll
2011-05-07 17:20:17 ----A---- C:\windows\system32\sqmapi.dll
2011-05-07 17:20:17 ----A---- C:\windows\system32\schannel.dll
2011-05-07 17:20:17 ----A---- C:\windows\system32\qmgr.dll
2011-05-07 17:20:17 ----A---- C:\windows\system32\mstsc.exe
2011-05-07 17:20:17 ----A---- C:\windows\system32\lsasrv.dll
2011-05-07 17:20:17 ----A---- C:\windows\system32\KernelBase.dll
2011-05-07 17:20:17 ----A---- C:\windows\system32\audiosrv.dll
2011-05-07 17:20:15 ----A---- C:\windows\SYSWOW64\vssapi.dll
2011-05-07 17:20:15 ----A---- C:\windows\SYSWOW64\SearchFolder.dll
2011-05-07 17:20:15 ----A---- C:\windows\SYSWOW64\d3d9.dll
2011-05-07 17:20:15 ----A---- C:\windows\system32\winhttp.dll
2011-05-07 17:20:15 ----A---- C:\windows\system32\setupapi.dll
2011-05-07 17:20:15 ----A---- C:\windows\system32\QAGENTRT.DLL
2011-05-07 17:20:15 ----A---- C:\windows\system32\propsys.dll
2011-05-07 17:20:15 ----A---- C:\windows\system32\netlogon.dll
2011-05-07 17:20:15 ----A---- C:\windows\system32\msv1_0.dll
2011-05-07 17:20:15 ----A---- C:\windows\system32\imapi2fs.dll
2011-05-07 17:20:15 ----A---- C:\windows\system32\d3d11.dll
2011-05-07 17:20:14 ----A---- C:\windows\SYSWOW64\taskschd.dll
2011-05-07 17:20:14 ----A---- C:\windows\system32\wbengine.exe
2011-05-07 17:20:14 ----A---- C:\windows\system32\rpcss.dll
2011-05-07 17:20:13 ----A---- C:\windows\SYSWOW64\mstsc.exe
2011-05-07 17:20:13 ----A---- C:\windows\SYSWOW64\crypt32.dll
2011-05-07 17:20:13 ----A---- C:\windows\system32\WSDApi.dll
2011-05-07 17:20:13 ----A---- C:\windows\system32\werconcpl.dll
2011-05-07 17:20:13 ----A---- C:\windows\system32\user32.dll
2011-05-07 17:20:13 ----A---- C:\windows\system32\taskeng.exe
2011-05-07 17:20:13 ----A---- C:\windows\system32\oleaut32.dll
2011-05-07 17:20:13 ----A---- C:\windows\system32\odbc32.dll
2011-05-07 17:20:13 ----A---- C:\windows\system32\msfeeds.dll
2011-05-07 17:20:13 ----A---- C:\windows\system32\authui.dll
2011-05-07 17:20:12 ----A---- C:\windows\system32\drivers\tdx.sys
2011-05-07 17:20:12 ----A---- C:\windows\system32\drivers\netio.sys
2011-05-07 17:20:12 ----A---- C:\windows\system32\dhcpcore.dll
2011-05-07 17:20:12 ----A---- C:\windows\system32\certmgr.dll
2011-05-07 17:20:11 ----A---- C:\windows\SYSWOW64\wer.dll
2011-05-07 17:20:11 ----A---- C:\windows\SYSWOW64\ntdll.dll
2011-05-07 17:20:11 ----A---- C:\windows\SYSWOW64\msxml6.dll
2011-05-07 17:20:11 ----A---- C:\windows\SYSWOW64\dwmcore.dll
2011-05-07 17:20:11 ----A---- C:\windows\SYSWOW64\certcli.dll
2011-05-07 17:20:11 ----A---- C:\windows\system32\webio.dll
2011-05-07 17:20:11 ----A---- C:\windows\system32\tsmf.dll
2011-05-07 17:20:11 ----A---- C:\windows\system32\shlwapi.dll
2011-05-07 17:20:11 ----A---- C:\windows\system32\scavengeui.dll
2011-05-07 17:20:11 ----A---- C:\windows\system32\PortableDeviceApi.dll
2011-05-07 17:20:11 ----A---- C:\windows\system32\ncsi.dll
2011-05-07 17:20:11 ----A---- C:\windows\system32\msdrm.dll
2011-05-07 17:20:11 ----A---- C:\windows\system32\localspl.dll
2011-05-07 17:20:11 ----A---- C:\windows\system32\drivers\netbt.sys
2011-05-07 17:20:10 ----A---- C:\windows\SYSWOW64\odbc32.dll
2011-05-07 17:20:10 ----A---- C:\windows\system32\umpnpmgr.dll
2011-05-07 17:20:10 ----A---- C:\windows\system32\netshell.dll
2011-05-07 17:20:10 ----A---- C:\windows\system32\msdtctm.dll
2011-05-07 17:20:10 ----A---- C:\windows\system32\framedynos.dll
2011-05-07 17:20:10 ----A---- C:\windows\system32\drivers\cng.sys
2011-05-07 17:20:09 ----A---- C:\windows\SYSWOW64\tcpmonui.dll
2011-05-07 17:20:09 ----A---- C:\windows\SYSWOW64\mstime.dll
2011-05-07 17:20:09 ----A---- C:\windows\system32\ws2_32.dll
2011-05-07 17:20:09 ----A---- C:\windows\system32\winlogon.exe
2011-05-07 17:20:09 ----A---- C:\windows\system32\usp10.dll
2011-05-07 17:20:09 ----A---- C:\windows\system32\quartz.dll
2011-05-07 17:20:09 ----A---- C:\windows\system32\nlasvc.dll
2011-05-07 17:20:09 ----A---- C:\windows\system32\netcfgx.dll
2011-05-07 17:20:09 ----A---- C:\windows\system32\lsm.exe
2011-05-07 17:20:09 ----A---- C:\windows\system32\dxgi.dll
2011-05-07 17:20:09 ----A---- C:\windows\system32\comdlg32.dll
2011-05-07 17:20:08 ----A---- C:\windows\SYSWOW64\quartz.dll
2011-05-07 17:20:08 ----A---- C:\windows\system32\wmpps.dll
2011-05-07 17:20:08 ----A---- C:\windows\system32\apphelp.dll
2011-05-07 17:20:07 ----A---- C:\windows\SYSWOW64\winhttp.dll
2011-05-07 17:20:07 ----A---- C:\windows\SYSWOW64\TSWorkspace.dll
2011-05-07 17:20:07 ----A---- C:\windows\SYSWOW64\tsmf.dll
2011-05-07 17:20:07 ----A---- C:\windows\SYSWOW64\setupapi.dll
2011-05-07 17:20:07 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2011-05-07 17:20:07 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2011-05-07 17:20:07 ----A---- C:\windows\SYSWOW64\dot3api.dll
2011-05-07 17:20:07 ----A---- C:\windows\system32\wpdshext.dll
2011-05-07 17:20:07 ----A---- C:\windows\system32\Query.dll
2011-05-07 17:20:07 ----A---- C:\windows\system32\QAGENT.DLL
2011-05-07 17:20:07 ----A---- C:\windows\system32\mswsock.dll
2011-05-07 17:20:07 ----A---- C:\windows\system32\drivers\rdpwd.sys
2011-05-07 17:20:07 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2011-05-07 17:20:07 ----A---- C:\windows\system32\BFE.DLL
2011-05-07 17:20:07 ----A---- C:\windows\system32\azroles.dll
2011-05-07 17:20:06 ----A---- C:\windows\SYSWOW64\MSVidCtl.dll
2011-05-07 17:20:06 ----A---- C:\windows\SYSWOW64\apphelp.dll
2011-05-07 17:20:06 ----A---- C:\windows\system32\Vault.dll
2011-05-07 17:20:06 ----A---- C:\windows\system32\samsrv.dll
2011-05-07 17:20:06 ----A---- C:\windows\system32\lpksetup.exe
2011-05-07 17:20:06 ----A---- C:\windows\system32\DShowRdpFilter.dll
2011-05-07 17:20:06 ----A---- C:\windows\system32\cmd.exe
2011-05-07 17:20:05 ----A---- C:\windows\SYSWOW64\WindowsCodecs.dll
2011-05-07 17:20:05 ----A---- C:\windows\SYSWOW64\netlogon.dll
2011-05-07 17:20:05 ----A---- C:\windows\SYSWOW64\netcfgx.dll
2011-05-07 17:20:05 ----A---- C:\windows\SYSWOW64\dbgeng.dll
2011-05-07 17:20:05 ----A---- C:\windows\SYSWOW64\d3d11.dll
2011-05-07 17:20:05 ----A---- C:\windows\system32\win32spl.dll
2011-05-07 17:20:05 ----A---- C:\windows\system32\mssvp.dll
2011-05-07 17:20:04 ----A---- C:\windows\SYSWOW64\WMVDECOD.DLL
2011-05-07 17:20:04 ----A---- C:\windows\SYSWOW64\webio.dll
2011-05-07 17:20:04 ----A---- C:\windows\SYSWOW64\Query.dll
2011-05-07 17:20:04 ----A---- C:\windows\system32\WindowsCodecs.dll
2011-05-07 17:20:04 ----A---- C:\windows\system32\WebClnt.dll
2011-05-07 17:20:04 ----A---- C:\windows\system32\sxs.dll
2011-05-07 17:20:04 ----A---- C:\windows\system32\drivers\vhdmp.sys
2011-05-07 17:20:03 ----A---- C:\windows\SYSWOW64\WsmSvc.dll
2011-05-07 17:20:03 ----A---- C:\windows\SYSWOW64\upnp.dll
2011-05-07 17:20:03 ----A---- C:\windows\SYSWOW64\schannel.dll
2011-05-07 17:20:03 ----A---- C:\windows\SYSWOW64\mmcndmgr.dll
2011-05-07 17:20:03 ----A---- C:\windows\SYSWOW64\DShowRdpFilter.dll
2011-05-07 17:20:03 ----A---- C:\windows\SYSWOW64\advapi32.dll
2011-05-07 17:20:03 ----A---- C:\windows\system32\wuaueng.dll
2011-05-07 17:20:03 ----A---- C:\windows\system32\Wldap32.dll
2011-05-07 17:20:03 ----A---- C:\windows\system32\webservices.dll
2011-05-07 17:20:03 ----A---- C:\windows\system32\taskcomp.dll
2011-05-07 17:20:03 ----A---- C:\windows\system32\pnidui.dll
2011-05-07 17:20:03 ----A---- C:\windows\system32\mfds.dll
2011-05-07 17:20:03 ----A---- C:\windows\system32\mcbuilder.exe
2011-05-07 17:20:03 ----A---- C:\windows\system32\ipsmsnap.dll
2011-05-07 17:20:03 ----A---- C:\windows\system32\hgprint.dll
2011-05-07 17:20:02 ----A---- C:\windows\SYSWOW64\netfxperf.dll
2011-05-07 17:20:02 ----A---- C:\windows\SYSWOW64\msv1_0.dll
2011-05-07 17:20:02 ----A---- C:\windows\SYSWOW64\imapi2fs.dll
2011-05-07 17:20:02 ----A---- C:\windows\system32\spoolsv.exe
2011-05-07 17:20:02 ----A---- C:\windows\system32\SessEnv.dll
2011-05-07 17:20:01 ----A---- C:\windows\SYSWOW64\usp10.dll
2011-05-07 17:20:01 ----A---- C:\windows\SYSWOW64\shlwapi.dll
2011-05-07 17:20:01 ----A---- C:\windows\SYSWOW64\SessEnv.dll
2011-05-07 17:20:01 ----A---- C:\windows\SYSWOW64\PortableDeviceApi.dll
2011-05-07 17:20:01 ----A---- C:\windows\SYSWOW64\msdrm.dll
2011-05-07 17:20:01 ----A---- C:\windows\SYSWOW64\authui.dll
2011-05-07 17:20:01 ----A---- C:\windows\system32\winsta.dll
2011-05-07 17:20:01 ----A---- C:\windows\system32\sqlsrv32.dll
2011-05-07 17:20:01 ----A---- C:\windows\system32\iepeers.dll
2011-05-07 17:20:01 ----A---- C:\windows\system32\fveapi.dll
2011-05-07 17:20:01 ----A---- C:\windows\system32\dot3api.dll
2011-05-07 17:20:00 ----A---- C:\windows\SYSWOW64\mcbuilder.exe
2011-05-07 17:20:00 ----A---- C:\windows\system32\prncache.dll
2011-05-07 17:20:00 ----A---- C:\windows\system32\mcmde.dll
2011-05-07 17:20:00 ----A---- C:\windows\system32\gdi32.dll
2011-05-07 17:20:00 ----A---- C:\windows\system32\drivers\volsnap.sys
2011-05-07 17:20:00 ----A---- C:\windows\system32\drivers\msrpc.sys
2011-05-07 17:19:59 ----A---- C:\windows\SYSWOW64\userenv.dll
2011-05-07 17:19:59 ----A---- C:\windows\SYSWOW64\kernel32.dll
2011-05-07 17:19:59 ----A---- C:\windows\SYSWOW64\certmgr.dll
2011-05-07 17:19:59 ----A---- C:\windows\system32\wuapi.dll
2011-05-07 17:19:59 ----A---- C:\windows\system32\WMNetMgr.dll
2011-05-07 17:19:59 ----A---- C:\windows\system32\wlanpref.dll
2011-05-07 17:19:59 ----A---- C:\windows\system32\vpnike.dll
2011-05-07 17:19:59 ----A---- C:\windows\system32\schtasks.exe
2011-05-07 17:19:58 ----A---- C:\windows\SYSWOW64\xpsservices.dll
2011-05-07 17:19:58 ----A---- C:\windows\SYSWOW64\WebClnt.dll
2011-05-07 17:19:58 ----A---- C:\windows\system32\wintrust.dll
2011-05-07 17:19:58 ----A---- C:\windows\system32\userenv.dll
2011-05-07 17:19:58 ----A---- C:\windows\system32\evr.dll
2011-05-07 17:19:58 ----A---- C:\windows\system32\drivers\rdbss.sys
2011-05-07 17:19:58 ----A---- C:\windows\system32\drivers\1394ohci.sys
2011-05-07 17:19:57 ----A---- C:\windows\SYSWOW64\comdlg32.dll
2011-05-07 17:19:57 ----A---- C:\windows\system32\wmpmde.dll
2011-05-07 17:19:57 ----A---- C:\windows\system32\sppobjs.dll
2011-05-07 17:19:57 ----A---- C:\windows\system32\photowiz.dll
2011-05-07 17:19:57 ----A---- C:\windows\system32\IPSECSVC.DLL
2011-05-07 17:19:57 ----A---- C:\windows\system32\FXSSVC.exe
2011-05-07 17:19:57 ----A---- C:\windows\system32\framedyn.dll
2011-05-07 17:19:57 ----A---- C:\windows\system32\AudioSes.dll
2011-05-07 17:19:57 ----A---- C:\windows\system32\aepdu.dll
2011-05-07 17:19:56 ----A---- C:\windows\SYSWOW64\cmd.exe
2011-05-07 17:19:56 ----A---- C:\windows\system32\WMPEncEn.dll
2011-05-07 17:19:56 ----A---- C:\windows\system32\wmpeffects.dll
2011-05-07 17:19:56 ----A---- C:\windows\system32\SyncCenter.dll
2011-05-07 17:19:55 ----A---- C:\windows\SYSWOW64\win32spl.dll
2011-05-07 17:19:55 ----A---- C:\windows\SYSWOW64\propsys.dll
2011-05-07 17:19:55 ----A---- C:\windows\SYSWOW64\framedynos.dll
2011-05-07 17:19:55 ----A---- C:\windows\system32\srvsvc.dll
2011-05-07 17:19:55 ----A---- C:\windows\system32\shsvcs.dll
2011-05-07 17:19:55 ----A---- C:\windows\system32\mfreadwrite.dll
2011-05-07 17:19:55 ----A---- C:\windows\system32\fde.dll
2011-05-07 17:19:55 ----A---- C:\windows\system32\aeinv.dll
2011-05-07 17:19:54 ----A---- C:\windows\SYSWOW64\Wldap32.dll
2011-05-07 17:19:54 ----A---- C:\windows\SYSWOW64\mfds.dll
2011-05-07 17:19:54 ----A---- C:\windows\system32\WinSATAPI.dll
2011-05-07 17:19:54 ----A---- C:\windows\system32\stobject.dll
2011-05-07 17:19:54 ----A---- C:\windows\system32\localsec.dll
2011-05-07 17:19:54 ----A---- C:\windows\system32\imapi2.dll
2011-05-07 17:19:53 ----A---- C:\windows\SYSWOW64\user32.dll
2011-05-07 17:19:53 ----A---- C:\windows\system32\tcpipcfg.dll
2011-05-07 17:19:53 ----A---- C:\windows\system32\QSHVHOST.DLL
2011-05-07 17:19:53 ----A---- C:\windows\system32\netid.dll
2011-05-07 17:19:53 ----A---- C:\windows\system32\netdiagfx.dll
2011-05-07 17:19:53 ----A---- C:\windows\system32\iphlpsvc.dll
2011-05-07 17:19:53 ----A---- C:\windows\system32\inetpp.dll
2011-05-07 17:19:53 ----A---- C:\windows\system32\drivers\udfs.sys
2011-05-07 17:19:53 ----A---- C:\windows\system32\drivers\fltMgr.sys
2011-05-07 17:19:53 ----A---- C:\windows\system32\credui.dll
2011-05-07 17:19:53 ----A---- C:\windows\system32\cdd.dll
2011-05-07 17:19:53 ----A---- C:\windows\system32\bcryptprimitives.dll
2011-05-07 17:19:52 ----A---- C:\windows\SYSWOW64\ncsi.dll
2011-05-07 17:19:52 ----A---- C:\windows\SYSWOW64\azroles.dll
2011-05-07 17:19:52 ----A---- C:\windows\system32\spp.dll
2011-05-07 17:19:52 ----A---- C:\windows\system32\davclnt.dll
2011-05-07 17:19:51 ----A---- C:\windows\SYSWOW64\themeui.dll
2011-05-07 17:19:51 ----A---- C:\windows\SYSWOW64\credui.dll
2011-05-07 17:19:51 ----A---- C:\windows\system32\scansetting.dll
2011-05-07 17:19:51 ----A---- C:\windows\system32\profsvc.dll
2011-05-07 17:19:51 ----A---- C:\windows\system32\printui.dll
2011-05-07 17:19:51 ----A---- C:\windows\system32\pla.dll
2011-05-07 17:19:51 ----A---- C:\windows\system32\mspbda.dll
2011-05-07 17:19:51 ----A---- C:\windows\system32\msinfo32.exe
2011-05-07 17:19:51 ----A---- C:\windows\system32\gameux.dll
2011-05-07 17:19:51 ----A---- C:\windows\system32\conhost.exe
2011-05-07 17:19:51 ----A---- C:\windows\system32\biocpl.dll
2011-05-07 17:19:51 ----A---- C:\windows\splwow64.exe
2011-05-07 17:19:50 ----A---- C:\windows\SYSWOW64\taskeng.exe
2011-05-07 17:19:50 ----A---- C:\windows\SYSWOW64\spp.dll
2011-05-07 17:19:50 ----A---- C:\windows\SYSWOW64\mswsock.dll
2011-05-07 17:19:50 ----A---- C:\windows\SYSWOW64\dhcpcore.dll
2011-05-07 17:19:50 ----A---- C:\windows\system32\wusa.exe
2011-05-07 17:19:50 ----A---- C:\windows\system32\msdri.dll
2011-05-07 17:19:50 ----A---- C:\windows\system32\IPHLPAPI.DLL
2011-05-07 17:19:50 ----A---- C:\windows\system32\aitagent.exe
2011-05-07 17:19:49 ----A---- C:\windows\SYSWOW64\wintrust.dll
2011-05-07 17:19:49 ----A---- C:\windows\SYSWOW64\NaturalLanguage6.dll
2011-05-07 17:19:49 ----A---- C:\windows\SYSWOW64\msxml3.dll
2011-05-07 17:19:49 ----A---- C:\windows\SYSWOW64\mfreadwrite.dll
2011-05-07 17:19:49 ----A---- C:\windows\SYSWOW64\dxgi.dll
2011-05-07 17:19:49 ----A---- C:\windows\SYSWOW64\dbghelp.dll
2011-05-07 17:19:49 ----A---- C:\windows\SYSWOW64\basecsp.dll
2011-05-07 17:19:49 ----A---- C:\windows\system32\XpsRasterService.dll
2011-05-07 17:19:49 ----A---- C:\windows\system32\wisptis.exe
2011-05-07 17:19:49 ----A---- C:\windows\system32\wiaservc.dll
2011-05-07 17:19:49 ----A---- C:\windows\system32\vds.exe
2011-05-07 17:19:49 ----A---- C:\windows\system32\rpchttp.dll
2011-05-07 17:19:49 ----A---- C:\windows\system32\msi.dll
2011-05-07 17:19:49 ----A---- C:\windows\system32\mscms.dll
2011-05-07 17:19:49 ----A---- C:\windows\system32\FirewallControlPanel.dll
2011-05-07 17:19:49 ----A---- C:\windows\system32\drivers\rasl2tp.sys
2011-05-07 17:19:49 ----A---- C:\windows\system32\drivers\pci.sys
2011-05-07 17:19:49 ----A---- C:\windows\system32\cryptsvc.dll
2011-05-07 17:19:48 ----A---- C:\windows\SYSWOW64\WinSATAPI.dll
2011-05-07 17:19:48 ----A---- C:\windows\SYSWOW64\taskcomp.dll
2011-05-07 17:19:48 ----A---- C:\windows\SYSWOW64\evr.dll
2011-05-07 17:19:48 ----A---- C:\windows\system32\sppwinob.dll
2011-05-07 17:19:48 ----A---- C:\windows\system32\ocsetup.exe
2011-05-07 17:19:48 ----A---- C:\windows\system32\drivers\mrxdav.sys
2011-05-07 17:19:47 ----A---- C:\windows\SYSWOW64\sqlsrv32.dll
2011-05-07 17:19:47 ----A---- C:\windows\SYSWOW64\calc.exe
2011-05-07 17:19:47 ----A---- C:\windows\system32\wpdbusenum.dll
2011-05-07 17:19:47 ----A---- C:\windows\system32\wcncsvc.dll
2011-05-07 17:19:47 ----A---- C:\windows\system32\rdpcore.dll
2011-05-07 17:19:47 ----A---- C:\windows\system32\ocsetapi.dll
2011-05-07 17:19:47 ----A---- C:\windows\system32\ntshrui.dll
2011-05-07 17:19:47 ----A---- C:\windows\system32\eapp3hst.dll
2011-05-07 17:19:47 ----A---- C:\windows\system32\DXP.dll
2011-05-07 17:19:47 ----A---- C:\windows\system32\drivers\volmgr.sys
2011-05-07 17:19:47 ----A---- C:\windows\system32\drivers\msdsm.sys
2011-05-07 17:19:47 ----A---- C:\windows\system32\ci.dll
2011-05-07 17:19:47 ----A---- C:\windows\system32\cfgmgr32.dll
2011-05-07 17:19:46 ----A---- C:\windows\SYSWOW64\UIRibbon.dll
2011-05-07 17:19:46 ----A---- C:\windows\system32\upnp.dll
2011-05-07 17:19:46 ----A---- C:\windows\system32\t2embed.dll
2011-05-07 17:19:46 ----A---- C:\windows\system32\Robocopy.exe
2011-05-07 17:19:46 ----A---- C:\windows\system32\mprapi.dll
2011-05-07 17:19:46 ----A---- C:\windows\system32\eapphost.dll
2011-05-07 17:19:45 ----A---- C:\windows\SYSWOW64\ws2_32.dll
2011-05-07 17:19:45 ----A---- C:\windows\SYSWOW64\sxs.dll
2011-05-07 17:19:45 ----A---- C:\windows\SYSWOW64\stobject.dll
2011-05-07 17:19:45 ----A---- C:\windows\SYSWOW64\netshell.dll
2011-05-07 17:19:45 ----A---- C:\windows\SYSWOW64\ie4uinit.exe
2011-05-07 17:19:45 ----A---- C:\windows\SYSWOW64\gdi32.dll
2011-05-07 17:19:45 ----A---- C:\windows\SYSWOW64\cryptsvc.dll
2011-05-07 17:19:45 ----A---- C:\windows\SYSWOW64\comctl32.dll
2011-05-07 17:19:45 ----A---- C:\windows\system32\thumbcache.dll
2011-05-07 17:19:45 ----A---- C:\windows\system32\scecli.dll
2011-05-07 17:19:45 ----A---- C:\windows\system32\PerfCenterCPL.dll
2011-05-07 17:19:45 ----A---- C:\windows\system32\MSMPEG2ENC.DLL
2011-05-07 17:19:45 ----A---- C:\windows\system32\msasn1.dll
2011-05-07 17:19:45 ----A---- C:\windows\system32\hal.dll
2011-05-07 17:19:45 ----A---- C:\windows\system32\DxpTaskSync.dll
2011-05-07 17:19:45 ----A---- C:\windows\system32\dwmredir.dll
2011-05-07 17:19:45 ----A---- C:\windows\system32\drivers\ksecdd.sys
2011-05-07 17:19:45 ----A---- C:\windows\system32\drivers\HpSAMD.sys
2011-05-07 17:19:45 ----A---- C:\windows\system32\drivers\fvevol.sys
2011-05-07 17:19:45 ----A---- C:\windows\system32\drivers\Classpnp.sys
2011-05-07 17:19:44 ----A---- C:\windows\SYSWOW64\prncache.dll
2011-05-07 17:19:44 ----A---- C:\windows\system32\themeui.dll
2011-05-07 17:19:44 ----A---- C:\windows\system32\sspicli.dll
2011-05-07 17:19:44 ----A---- C:\windows\system32\puiobj.dll
2011-05-07 17:19:44 ----A---- C:\windows\system32\onex.dll
2011-05-07 17:19:44 ----A---- C:\windows\system32\nlaapi.dll
2011-05-07 17:19:44 ----A---- C:\windows\system32\iasrad.dll
2011-05-07 17:19:44 ----A---- C:\windows\system32\DXPTaskRingtone.dll
2011-05-07 17:19:44 ----A---- C:\windows\system32\drivers\ipfltdrv.sys
2011-05-07 17:19:43 ----A---- C:\windows\SYSWOW64\WSDApi.dll
2011-05-07 17:19:43 ----A---- C:\windows\SYSWOW64\wmpeffects.dll
2011-05-07 17:19:43 ----A---- C:\windows\SYSWOW64\scansetting.dll
2011-05-07 17:19:43 ----A---- C:\windows\SYSWOW64\rpchttp.dll
2011-05-07 17:19:43 ----A---- C:\windows\SYSWOW64\printui.dll
2011-05-07 17:19:43 ----A---- C:\windows\SYSWOW64\net1.exe
2011-05-07 17:19:43 ----A---- C:\windows\SYSWOW64\msi.dll
2011-05-07 17:19:43 ----A---- C:\windows\system32\wow64.dll
2011-05-07 17:19:43 ----A---- C:\windows\system32\wdc.dll
2011-05-07 17:19:43 ----A---- C:\windows\system32\iedkcs32.dll
2011-05-07 17:19:43 ----A---- C:\windows\system32\aaclient.dll
2011-05-07 17:19:42 ----A---- C:\windows\system32\wlangpui.dll
2011-05-07 17:19:42 ----A---- C:\windows\system32\StructuredQuery.dll
2011-05-07 17:19:42 ----A---- C:\windows\system32\sdengin2.dll
2011-05-07 17:19:42 ----A---- C:\windows\system32\scesrv.dll
2011-05-07 17:19:42 ----A---- C:\windows\system32\rasmans.dll
2011-05-07 17:19:42 ----A---- C:\windows\system32\msftedit.dll
2011-05-07 17:19:41 ----A---- C:\windows\SYSWOW64\WMVCORE.DLL
2011-05-07 17:19:41 ----A---- C:\windows\SYSWOW64\wlangpui.dll
2011-05-07 17:19:41 ----A---- C:\windows\SYSWOW64\QSHVHOST.DLL
2011-05-07 17:19:41 ----A---- C:\windows\SYSWOW64\pnidui.dll
2011-05-07 17:19:41 ----A---- C:\windows\SYSWOW64\MMDevAPI.dll
2011-05-07 17:19:41 ----A---- C:\windows\SYSWOW64\davclnt.dll
2011-05-07 17:19:41 ----A---- C:\windows\SYSWOW64\aaclient.dll
2011-05-07 17:19:41 ----A---- C:\windows\system32\wucltux.dll
2011-05-07 17:19:41 ----A---- C:\windows\system32\wscapi.dll
2011-05-07 17:19:41 ----A---- C:\windows\system32\wiadefui.dll
2011-05-07 17:19:41 ----A---- C:\windows\system32\VAN.dll
2011-05-07 17:19:41 ----A---- C:\windows\system32\TabSvc.dll
2011-05-07 17:19:41 ----A---- C:\windows\system32\srchadmin.dll
2011-05-07 17:19:41 ----A---- C:\windows\system32\SndVol.exe
2011-05-07 17:19:41 ----A---- C:\windows\system32\samcli.dll
2011-05-07 17:19:41 ----A---- C:\windows\system32\regapi.dll
2011-05-07 17:19:41 ----A---- C:\windows\system32\QUTIL.DLL
2011-05-07 17:19:41 ----A---- C:\windows\system32\netcenter.dll
2011-05-07 17:19:41 ----A---- C:\windows\system32\iasacct.dll
2011-05-07 17:19:41 ----A---- C:\windows\system32\dskquoui.dll
2011-05-07 17:19:41 ----A---- C:\windows\system32\drivers\termdd.sys
2011-05-07 17:19:41 ----A---- C:\windows\system32\drivers\partmgr.sys
2011-05-07 17:19:41 ----A---- C:\windows\system32\drivers\ndiswan.sys
2011-05-07 17:19:41 ----A---- C:\windows\system32\consent.exe
2011-05-07 17:19:40 ----A---- C:\windows\SYSWOW64\wpdshext.dll
2011-05-07 17:19:40 ----A---- C:\windows\SYSWOW64\webservices.dll
2011-05-07 17:19:40 ----A---- C:\windows\SYSWOW64\t2embed.dll
2011-05-07 17:19:40 ----A---- C:\windows\SYSWOW64\fde.dll
2011-05-07 17:19:40 ----A---- C:\windows\system32\WUDFSvc.dll
2011-05-07 17:19:39 ----A---- C:\windows\SYSWOW64\netdiagfx.dll
2011-05-07 17:19:39 ----A---- C:\windows\system32\wksprt.exe
2011-05-07 17:19:39 ----A---- C:\windows\system32\taskhost.exe
2011-05-07 17:19:39 ----A---- C:\windows\system32\setupcl.exe
2011-05-07 17:19:39 ----A---- C:\windows\system32\drivers\msahci.sys
2011-05-07 17:19:36 ----A---- C:\windows\SYSWOW64\SyncCenter.dll
2011-05-07 17:19:36 ----A---- C:\windows\system32\rastls.dll
2011-05-07 17:19:35 ----A---- C:\windows\SYSWOW64\wuapi.dll
2011-05-07 17:19:35 ----A---- C:\windows\SYSWOW64\wscapi.dll
2011-05-07 17:19:35 ----A---- C:\windows\system32\tapisrv.dll
2011-05-07 17:19:35 ----A---- C:\windows\system32\netiohlp.dll
2011-05-07 17:19:35 ----A---- C:\windows\system32\drivers\acpi.sys
2011-05-07 17:19:34 ----A---- C:\windows\SYSWOW64\WinSCard.dll
2011-05-07 17:19:34 ----A---- C:\windows\SYSWOW64\pla.dll
2011-05-07 17:19:34 ----A---- C:\windows\SYSWOW64\msasn1.dll
2011-05-07 17:19:34 ----A---- C:\windows\system32\msconfig.exe
2011-05-07 17:19:34 ----A---- C:\windows\system32\mimefilt.dll
2011-05-07 17:19:34 ----A---- C:\windows\system32\ListSvc.dll
2011-05-07 17:19:34 ----A---- C:\windows\system32\hgcpl.dll
2011-05-07 17:19:34 ----A---- C:\windows\system32\drivers\raspptp.sys
2011-05-07 17:19:33 ----A---- C:\windows\SYSWOW64\winsta.dll
2011-05-07 17:19:33 ----A---- C:\windows\SYSWOW64\rdpcore.dll
2011-05-07 17:19:33 ----A---- C:\windows\SYSWOW64\ntshrui.dll
2011-05-07 17:19:33 ----A---- C:\windows\SYSWOW64\MSMPEG2ENC.DLL
2011-05-07 17:19:33 ----A---- C:\windows\SYSWOW64\imapi2.dll
2011-05-07 17:19:33 ----A---- C:\windows\SYSWOW64\iepeers.dll
2011-05-07 17:19:33 ----A---- C:\windows\system32\TsUsbGDCoInstaller.dll
2011-05-07 17:19:33 ----A---- C:\windows\system32\riched20.dll
2011-05-07 17:19:33 ----A---- C:\windows\system32\mtxclu.dll
2011-05-07 17:19:33 ----A---- C:\windows\system32\lsmproxy.dll
2011-05-07 17:19:33 ----A---- C:\windows\system32\fdeploy.dll
2011-05-07 17:19:33 ----A---- C:\windows\system32\drivers\sbp2port.sys
2011-05-07 17:19:33 ----A---- C:\windows\system32\drivers\ks.sys
2011-05-07 17:19:33 ----A---- C:\windows\system32\drivers\Diskdump.sys
2011-05-07 17:19:33 ----A---- C:\windows\system32\clusapi.dll
2011-05-07 17:19:33 ----A---- C:\windows\system32\basecsp.dll
2011-05-07 17:19:33 ----A---- C:\windows\system32\AuxiliaryDisplayCpl.dll
2011-05-07 17:19:32 ----A---- C:\windows\SYSWOW64\gameux.dll
2011-05-07 17:19:32 ----A---- C:\windows\SYSWOW64\DXPTaskRingtone.dll
2011-05-07 17:19:32 ----A---- C:\windows\system32\dnscmmc.dll
2011-05-07 17:19:31 ----A---- C:\windows\SYSWOW64\WMPEncEn.dll
2011-05-07 17:19:31 ----A---- C:\windows\SYSWOW64\winmm.dll
2011-05-07 17:19:31 ----A---- C:\windows\SYSWOW64\shsvcs.dll
2011-05-07 17:19:31 ----A---- C:\windows\SYSWOW64\onex.dll
2011-05-07 17:19:31 ----A---- C:\windows\SYSWOW64\mssvp.dll
2011-05-07 17:19:31 ----A---- C:\windows\SYSWOW64\hbaapi.dll
2011-05-07 17:19:31 ----A---- C:\windows\SYSWOW64\autofmt.exe
2011-05-07 17:19:31 ----A---- C:\windows\system32\themecpl.dll
2011-05-07 17:19:31 ----A---- C:\windows\system32\sharemediacpl.dll
2011-05-07 17:19:31 ----A---- C:\windows\system32\SensorsCpl.dll
2011-05-07 17:19:31 ----A---- C:\windows\system32\RpcRtRemote.dll
2011-05-07 17:19:31 ----A---- C:\windows\system32\powercpl.dll
2011-05-07 17:19:31 ----A---- C:\windows\system32\nci.dll
2011-05-07 17:19:31 ----A---- C:\windows\system32\logoncli.dll
2011-05-07 17:19:31 ----A---- C:\windows\system32\eudcedit.exe
2011-05-07 17:19:31 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2011-05-07 17:19:30 ----A---- C:\windows\SYSWOW64\samcli.dll
2011-05-07 17:19:30 ----A---- C:\windows\SYSWOW64\netiohlp.dll
2011-05-07 17:19:30 ----A---- C:\windows\SYSWOW64\IPHLPAPI.DLL
2011-05-07 17:19:30 ----A---- C:\windows\SYSWOW64\autochk.exe
2011-05-07 17:19:30 ----A---- C:\windows\system32\wkssvc.dll
2011-05-07 17:19:30 ----A---- C:\windows\system32\vpnikeapi.dll
2011-05-07 17:19:30 ----A---- C:\windows\system32\netjoin.dll
2011-05-07 17:19:30 ----A---- C:\windows\system32\Narrator.exe
2011-05-07 17:19:30 ----A---- C:\windows\system32\licmgr10.dll
2011-05-07 17:19:30 ----A---- C:\windows\system32\Faultrep.dll
2011-05-07 17:19:30 ----A---- C:\windows\system32\comctl32.dll
2011-05-07 17:19:29 ----A---- C:\windows\SYSWOW64\thumbcache.dll
2011-05-07 17:19:29 ----A---- C:\windows\SYSWOW64\tcpipcfg.dll
2011-05-07 17:19:29 ----A---- C:\windows\SYSWOW64\srchadmin.dll
2011-05-07 17:19:29 ----A---- C:\windows\SYSWOW64\schtasks.exe
2011-05-07 17:19:29 ----A---- C:\windows\SYSWOW64\regapi.dll
2011-05-07 17:19:29 ----A---- C:\windows\SYSWOW64\proquota.exe
2011-05-07 17:19:29 ----A---- C:\windows\SYSWOW64\powercpl.dll
2011-05-07 17:19:29 ----A---- C:\windows\SYSWOW64\msutb.dll
2011-05-07 17:19:29 ----A---- C:\windows\SYSWOW64\msinfo32.exe
2011-05-07 17:19:29 ----A---- C:\windows\SYSWOW64\mimefilt.dll
2011-05-07 17:19:29 ----A---- C:\windows\SYSWOW64\ipsmsnap.dll
2011-05-07 17:19:29 ----A---- C:\windows\SYSWOW64\eapphost.dll
2011-05-07 17:19:29 ----A---- C:\windows\SYSWOW64\autoconv.exe
2011-05-07 17:19:29 ----A---- C:\windows\SYSWOW64\AudioSes.dll
2011-05-07 17:19:29 ----A---- C:\windows\system32\wpd_ci.dll
2011-05-07 17:19:29 ----A---- C:\windows\system32\sppcomapi.dll
2011-05-07 17:19:29 ----A---- C:\windows\system32\shsetup.dll
2011-05-07 17:19:29 ----A---- C:\windows\system32\nshipsec.dll
2011-05-07 17:19:29 ----A---- C:\windows\system32\fms.dll
2011-05-07 17:19:29 ----A---- C:\windows\system32\cabview.dll
2011-05-07 17:19:29 ----A---- C:\windows\system32\bcdsrv.dll
2011-05-07 17:19:29 ----A---- C:\windows\system32\autochk.exe
2011-05-07 17:19:29 ----A---- C:\windows\system32\autofmt.exe
2011-05-07 17:19:29 ----A---- C:\windows\system32\autoconv.exe
2011-05-07 17:19:29 ----A---- C:\windows\system32\audiodg.exe
2011-05-07 17:19:28 ----A---- C:\windows\SYSWOW64\wcncsvc.dll
2011-05-07 17:19:28 ----A---- C:\windows\SYSWOW64\msihnd.dll
2011-05-07 17:19:28 ----A---- C:\windows\SYSWOW64\mscorier.dll
2011-05-07 17:19:28 ----A---- C:\windows\SYSWOW64\framedyn.dll
2011-05-07 17:19:28 ----A---- C:\windows\system32\wwanconn.dll
2011-05-07 17:19:28 ----A---- C:\windows\system32\wlanui.dll
2011-05-07 17:19:28 ----A---- C:\windows\system32\sdclt.exe
2011-05-07 17:19:28 ----A---- C:\windows\system32\prntvpt.dll
2011-05-07 17:19:28 ----A---- C:\windows\system32\mscorier.dll
2011-05-07 17:19:28 ----A---- C:\windows\system32\drivers\winusb.sys
2011-05-07 17:19:28 ----A---- C:\windows\system32\drivers\wanarp.sys
2011-05-07 17:19:28 ----A---- C:\windows\system32\drivers\usbvideo.sys
2011-05-07 17:19:28 ----A---- C:\windows\system32\drivers\scsiport.sys
2011-05-07 17:19:27 ----A---- C:\windows\SYSWOW64\wdc.dll
2011-05-07 17:19:27 ----A---- C:\windows\SYSWOW64\StructuredQuery.dll
2011-05-07 17:19:27 ----A---- C:\windows\SYSWOW64\scesrv.dll
2011-05-07 17:19:27 ----A---- C:\windows\SYSWOW64\QAGENT.DLL
2011-05-07 17:19:27 ----A---- C:\windows\SYSWOW64\netid.dll
2011-05-07 17:19:27 ----A---- C:\windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2011-05-07 17:19:27 ----A---- C:\windows\SYSWOW64\actxprxy.dll
2011-05-07 17:19:27 ----A---- C:\windows\system32\qedit.dll
2011-05-07 17:19:27 ----A---- C:\windows\system32\mprddm.dll
2011-05-07 17:19:27 ----A---- C:\windows\system32\mblctr.exe
2011-05-07 17:19:27 ----A---- C:\windows\system32\fontext.dll
2011-05-07 17:19:27 ----A---- C:\windows\system32\drivers\volmgrx.sys
2011-05-07 17:19:27 ----A---- C:\windows\system32\drivers\hidclass.sys
2011-05-07 17:19:27 ----A---- C:\windows\system32\drivers\BTHUSB.SYS
2011-05-07 17:19:27 ----A---- C:\windows\system32\drivers\bthport.sys
2011-05-07 17:19:27 ----A---- C:\windows\system32\dps.dll
2011-05-07 17:19:27 ----A---- C:\windows\system32\Display.dll
2011-05-07 17:19:27 ----A---- C:\windows\system32\credssp.dll
2011-05-07 17:19:27 ----A---- C:\windows\system32\batmeter.dll
2011-05-07 17:19:27 ----A---- C:\windows\system32\AxInstSv.dll
2011-05-07 17:19:26 ----A---- C:\windows\SYSWOW64\wlanpref.dll
2011-05-07 17:19:26 ----A---- C:\windows\SYSWOW64\Vault.dll
2011-05-07 17:19:26 ----A---- C:\windows\SYSWOW64\untfs.dll
2011-05-07 17:19:26 ----A---- C:\windows\SYSWOW64\rastls.dll
2011-05-07 17:19:26 ----A---- C:\windows\SYSWOW64\oleaut32.dll
2011-05-07 17:19:26 ----A---- C:\windows\SYSWOW64\nci.dll
2011-05-07 17:19:26 ----A---- C:\windows\system32\wmpsrcwp.dll
2011-05-07 17:19:26 ----A---- C:\windows\system32\DiagCpl.dll
2011-05-07 17:19:25 ----A---- C:\windows\SYSWOW64\WMNetMgr.dll
2011-05-07 17:19:25 ----A---- C:\windows\SYSWOW64\taskmgr.exe
2011-05-07 17:19:25 ----A---- C:\windows\SYSWOW64\RpcRtRemote.dll
2011-05-07 17:19:25 ----A---- C:\windows\SYSWOW64\Robocopy.exe
2011-05-07 17:19:25 ----A---- C:\windows\SYSWOW64\licmgr10.dll
2011-05-07 17:19:25 ----A---- C:\windows\SYSWOW64\DxpTaskSync.dll
2011-05-07 17:19:25 ----A---- C:\windows\system32\wpccpl.dll
2011-05-07 17:19:25 ----A---- C:\windows\system32\usercpl.dll
2011-05-07 17:19:25 ----A---- C:\windows\system32\sppsvc.exe
2011-05-07 17:19:25 ----A---- C:\windows\system32\SndVolSSO.dll
2011-05-07 17:19:25 ----A---- C:\windows\system32\rtutils.dll
2011-05-07 17:19:25 ----A---- C:\windows\system32\rasppp.dll
2011-05-07 17:19:25 ----A---- C:\windows\system32\provsvc.dll
2011-05-07 17:19:25 ----A---- C:\windows\system32\MCEWMDRMNDBootstrap.dll
2011-05-07 17:19:25 ----A---- C:\windows\system32\dot3cfg.dll
2011-05-07 17:19:25 ----A---- C:\windows\system32\bootres.dll
2011-05-07 17:19:24 ----A---- C:\windows\SYSWOW64\mtxclu.dll
2011-05-07 17:19:24 ----A---- C:\windows\SYSWOW64\Display.dll
2011-05-07 17:19:24 ----A---- C:\windows\system32\drivers\rdyboost.sys
2011-05-07 17:19:23 ----A---- C:\windows\SYSWOW64\XpsRasterService.dll
2011-05-07 17:19:23 ----A---- C:\windows\SYSWOW64\userinit.exe
2011-05-07 17:19:23 ----A---- C:\windows\SYSWOW64\termmgr.dll
2011-05-07 17:19:23 ----A---- C:\windows\SYSWOW64\puiobj.dll
2011-05-07 17:19:23 ----A---- C:\windows\SYSWOW64\mssphtb.dll
2011-05-07 17:19:23 ----A---- C:\windows\SYSWOW64\eudcedit.exe
2011-05-07 17:19:23 ----A---- C:\windows\system32\WPDShServiceObj.dll
2011-05-07 17:19:23 ----A---- C:\windows\system32\untfs.dll
2011-05-07 17:19:23 ----A---- C:\windows\system32\taskmgr.exe
2011-05-07 17:19:23 ----A---- C:\windows\system32\shdocvw.dll
2011-05-07 17:19:23 ----A---- C:\windows\system32\proquota.exe
2011-05-07 17:19:23 ----A---- C:\windows\system32\prnfldr.dll
2011-05-07 17:19:23 ----A---- C:\windows\system32\pdh.dll
2011-05-07 17:19:23 ----A---- C:\windows\system32\MSAC3ENC.DLL
2011-05-07 17:19:23 ----A---- C:\windows\system32\hbaapi.dll
2011-05-07 17:19:23 ----A---- C:\windows\system32\dxdiagn.dll
2011-05-07 17:19:23 ----A---- C:\windows\system32\drivers\mountmgr.sys
2011-05-07 17:19:23 ----A---- C:\windows\system32\drivers\ataport.sys
2011-05-07 17:19:22 ----A---- C:\windows\SYSWOW64\wiadefui.dll
2011-05-07 17:19:22 ----A---- C:\windows\SYSWOW64\sppcomapi.dll
2011-05-07 17:19:22 ----A---- C:\windows\SYSWOW64\shsetup.dll
2011-05-07 17:19:22 ----A---- C:\windows\SYSWOW64\rasppp.dll
2011-05-07 17:19:22 ----A---- C:\windows\SYSWOW64\logoncli.dll
2011-05-07 17:19:22 ----A---- C:\windows\SYSWOW64\cabview.dll
2011-05-07 17:19:22 ----A---- C:\windows\system32\userinit.exe
2011-05-07 17:19:22 ----A---- C:\windows\system32\rdpcorekmts.dll
2011-05-07 17:19:22 ----A---- C:\windows\system32\accessibilitycpl.dll
2011-05-07 17:19:21 ----A---- C:\windows\SYSWOW64\themecpl.dll
2011-05-07 17:19:21 ----A---- C:\windows\SYSWOW64\SensorsCpl.dll
2011-05-07 17:19:21 ----A---- C:\windows\SYSWOW64\FWPUCLNT.DLL
2011-05-07 17:19:21 ----A---- C:\windows\SYSWOW64\FirewallControlPanel.dll
2011-05-07 17:19:21 ----A---- C:\windows\SYSWOW64\dnscmmc.dll
2011-05-07 17:19:21 ----A---- C:\windows\system32\zipfldr.dll
2011-05-07 17:19:21 ----A---- C:\windows\system32\webcheck.dll
2011-05-07 17:19:21 ----A---- C:\windows\system32\slui.exe
2011-05-07 17:19:20 ----A---- C:\windows\SYSWOW64\hgcpl.dll
2011-05-07 17:19:20 ----A---- C:\windows\system32\msieftp.dll
2011-05-07 17:19:20 ----A---- C:\windows\system32\defaultlocationcpl.dll
2011-05-07 17:19:19 ----A---- C:\windows\SYSWOW64\tapisrv.dll
2011-05-07 17:19:19 ----A---- C:\windows\SYSWOW64\SndVolSSO.dll
2011-05-07 17:19:19 ----A---- C:\windows\SYSWOW64\scecli.dll
2011-05-07 17:19:19 ----A---- C:\windows\SYSWOW64\mscories.dll
2011-05-07 17:19:19 ----A---- C:\windows\SYSWOW64\mscms.dll
2011-05-07 17:19:19 ----A---- C:\windows\SYSWOW64\mprddm.dll
2011-05-07 17:19:19 ----A---- C:\windows\SYSWOW64\localsec.dll
2011-05-07 17:19:19 ----A---- C:\windows\SYSWOW64\iasacct.dll
2011-05-07 17:19:19 ----A---- C:\windows\SYSWOW64\fontext.dll
2011-05-07 17:19:19 ----A---- C:\windows\system32\taskbarcpl.dll
2011-05-07 17:19:19 ----A---- C:\windows\system32\sud.dll
2011-05-07 17:19:19 ----A---- C:\windows\system32\qdvd.dll
2011-05-07 17:19:19 ----A---- C:\windows\system32\OnLineIDCpl.dll
2011-05-07 17:19:19 ----A---- C:\windows\system32\networkmap.dll
2011-05-07 17:19:19 ----A---- C:\windows\system32\drivers\tssecsrv.sys
2011-05-07 17:19:19 ----A---- C:\windows\system32\dot3svc.dll
2011-05-07 17:19:19 ----A---- C:\windows\system32\DeviceCenter.dll
2011-05-07 17:19:19 ----A---- C:\windows\system32\cryptui.dll
2011-05-07 17:19:19 ----A---- C:\windows\system32\ActionCenter.dll
2011-05-07 17:19:18 ----A---- C:\windows\SYSWOW64\wlanui.dll
2011-05-07 17:19:18 ----A---- C:\windows\SYSWOW64\VAN.dll
2011-05-07 17:19:18 ----A---- C:\windows\SYSWOW64\usercpl.dll
2011-05-07 17:19:18 ----A---- C:\windows\SYSWOW64\qedit.dll
2011-05-07 17:19:18 ----A---- C:\windows\SYSWOW64\qdvd.dll
2011-05-07 17:19:18 ----A---- C:\windows\SYSWOW64\prntvpt.dll
2011-05-07 17:19:18 ----A---- C:\windows\SYSWOW64\PerfCenterCPL.dll
2011-05-07 17:19:18 ----A---- C:\windows\SYSWOW64\netcenter.dll
2011-05-07 17:19:18 ----A---- C:\windows\SYSWOW64\batmeter.dll
2011-05-07 17:19:18 ----A---- C:\windows\system32\twext.dll
2011-05-07 17:19:18 ----A---- C:\windows\system32\srcore.dll
2011-05-07 17:19:18 ----A---- C:\windows\system32\rdpwsx.dll
2011-05-07 17:19:17 ----A---- C:\windows\SYSWOW64\zipfldr.dll
2011-05-07 17:19:17 ----A---- C:\windows\SYSWOW64\w32tm.exe
2011-05-07 17:19:17 ----A---- C:\windows\SYSWOW64\spwizeng.dll
2011-05-07 17:19:17 ----A---- C:\windows\SYSWOW64\SndVol.exe
2011-05-07 17:19:17 ----A---- C:\windows\SYSWOW64\MSAC3ENC.DLL
2011-05-07 17:19:17 ----A---- C:\windows\SYSWOW64\fdeploy.dll
2011-05-07 17:19:17 ----A---- C:\windows\SYSWOW64\azroleui.dll
2011-05-07 17:19:17 ----A---- C:\windows\SYSWOW64\accessibilitycpl.dll
2011-05-07 17:19:17 ----A---- C:\windows\system32\uxlib.dll
2011-05-07 17:19:17 ----A---- C:\windows\system32\tzutil.exe
2011-05-07 17:19:17 ----A---- C:\windows\system32\systemcpl.dll
2011-05-07 17:19:17 ----A---- C:\windows\system32\syncui.dll
2011-05-07 17:19:17 ----A---- C:\windows\system32\sisbkup.dll
2011-05-07 17:19:17 ----A---- C:\windows\system32\sdcpl.dll
2011-05-07 17:19:17 ----A---- C:\windows\system32\recovery.dll
2011-05-07 17:19:17 ----A---- C:\windows\system32\recdisc.exe
2011-05-07 17:19:17 ----A---- C:\windows\system32\OobeFldr.dll
2011-05-07 17:19:17 ----A---- C:\windows\system32\netplwiz.dll
2011-05-07 17:19:17 ----A---- C:\windows\system32\MediaMetadataHandler.dll
2011-05-07 17:19:17 ----A---- C:\windows\system32\isoburn.exe
2011-05-07 17:19:17 ----A---- C:\windows\system32\httpapi.dll
2011-05-07 17:19:17 ----A---- C:\windows\system32\efscore.dll
2011-05-07 17:19:17 ----A---- C:\windows\system32\dsuiext.dll
2011-05-07 17:19:17 ----A---- C:\windows\system32\drivers\hwpolicy.sys
2011-05-07 17:19:17 ----A---- C:\windows\system32\drivers\FWPKCLNT.SYS
2011-05-07 17:19:17 ----A---- C:\windows\system32\cca.dll
2011-05-07 17:19:17 ----A---- C:\windows\system32\bcdedit.exe
2011-05-07 17:19:17 ----A---- C:\windows\system32\azroleui.dll
2011-05-07 17:19:17 ----A---- C:\windows\system32\asycfilt.dll
2011-05-07 17:19:16 ----A---- C:\windows\SYSWOW64\netjoin.dll
2011-05-07 17:19:16 ----A---- C:\windows\SYSWOW64\cryptui.dll
2011-05-07 17:19:16 ----A---- C:\windows\SYSWOW64\adsldp.dll
2011-05-07 17:19:16 ----A---- C:\windows\system32\sysclass.dll
2011-05-07 17:19:16 ----A---- C:\windows\system32\sspisrv.dll
2011-05-07 17:19:16 ----A---- C:\windows\system32\shwebsvc.dll
2011-05-07 17:19:16 ----A---- C:\windows\system32\ncryptui.dll
2011-05-07 17:19:16 ----A---- C:\windows\system32\drivers\mpio.sys
2011-05-07 17:19:16 ----A---- C:\windows\system32\certcli.dll
2011-05-07 17:19:16 ----A---- C:\windows\system32\autoplay.dll
2011-05-07 17:19:15 ----A---- C:\windows\SYSWOW64\wusa.exe
2011-05-07 17:19:15 ----A---- C:\windows\SYSWOW64\sud.dll
2011-05-07 17:19:15 ----A---- C:\windows\SYSWOW64\prnfldr.dll
2011-05-07 17:19:15 ----A---- C:\windows\SYSWOW64\OnLineIDCpl.dll
2011-05-07 17:19:15 ----A---- C:\windows\SYSWOW64\networkmap.dll
2011-05-07 17:19:15 ----A---- C:\windows\SYSWOW64\msieftp.dll
2011-05-07 17:19:15 ----A---- C:\windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2011-05-07 17:19:15 ----A---- C:\windows\SYSWOW64\Faultrep.dll
2011-05-07 17:19:15 ----A---- C:\windows\SYSWOW64\cfgmgr32.dll
2011-05-07 17:19:15 ----A---- C:\windows\SYSWOW64\ActionCenter.dll
2011-05-07 17:19:15 ----A---- C:\windows\system32\wlanmsm.dll
2011-05-07 17:19:15 ----A---- C:\windows\system32\vdsutil.dll
2011-05-07 17:19:15 ----A---- C:\windows\system32\spwizeng.dll
2011-05-07 17:19:15 ----A---- C:\windows\system32\sdrsvc.dll
2011-05-07 17:19:15 ----A---- C:\windows\system32\msvidc32.dll
2011-05-07 17:19:15 ----A---- C:\windows\system32\MFPlay.dll
2011-05-07 17:19:15 ----A---- C:\windows\system32\AuxiliaryDisplayServices.dll
2011-05-07 17:19:15 ----A---- C:\windows\system32\appinfo.dll
2011-05-07 17:19:15 ----A---- C:\windows\system32\ActionCenterCPL.dll
2011-05-07 17:19:14 ----A---- C:\windows\SYSWOW64\photowiz.dll
2011-05-07 17:19:14 ----A---- C:\windows\SYSWOW64\MediaMetadataHandler.dll
2011-05-07 17:19:14 ----A---- C:\windows\SYSWOW64\iprtrmgr.dll
2011-05-07 17:19:14 ----A---- C:\windows\SYSWOW64\iasrad.dll
2011-05-07 17:19:14 ----A---- C:\windows\SYSWOW64\defaultlocationcpl.dll
2011-05-07 17:19:14 ----A---- C:\windows\SYSWOW64\credssp.dll
2011-05-07 17:19:14 ----A---- C:\windows\system32\termmgr.dll
2011-05-07 17:19:14 ----A---- C:\windows\system32\sethc.exe
2011-05-07 17:19:14 ----A---- C:\windows\system32\rstrui.exe
2011-05-07 17:19:14 ----A---- C:\windows\system32\odbccp32.dll
2011-05-07 17:19:14 ----A---- C:\windows\system32\ntlanman.dll
2011-05-07 17:19:14 ----A---- C:\windows\system32\msscp.dll
2011-05-07 17:19:14 ----A---- C:\windows\system32\mshtmled.dll
2011-05-07 17:19:14 ----A---- C:\windows\system32\msfeedsbs.dll
2011-05-07 17:19:13 ----A---- C:\windows\SYSWOW64\syncui.dll
2011-05-07 17:19:13 ----A---- C:\windows\SYSWOW64\sisbkup.dll
2011-05-07 17:19:13 ----A---- C:\windows\SYSWOW64\shwebsvc.dll
2011-05-07 17:19:13 ----A---- C:\windows\SYSWOW64\odbcjt32.dll
2011-05-07 17:19:13 ----A---- C:\windows\SYSWOW64\ifsutil.dll
2011-05-07 17:19:13 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2011-05-07 17:19:13 ----A---- C:\windows\SYSWOW64\iesysprep.dll
2011-05-07 17:19:13 ----A---- C:\windows\SYSWOW64\ftp.exe
2011-05-07 17:19:13 ----A---- C:\windows\SYSWOW64\efscore.dll
2011-05-07 17:19:13 ----A---- C:\windows\SYSWOW64\dot3cfg.dll
2011-05-07 17:19:13 ----A---- C:\windows\SYSWOW64\autoplay.dll
2011-05-07 17:19:13 ----A---- C:\windows\SYSWOW64\ActionCenterCPL.dll
2011-05-07 17:19:13 ----A---- C:\windows\system32\wwanprotdim.dll
2011-05-07 17:19:13 ----A---- C:\windows\system32\UserAccountControlSettings.dll
2011-05-07 17:19:13 ----A---- C:\windows\system32\tsgqec.dll
2011-05-07 17:19:13 ----A---- C:\windows\system32\sqlcese30.dll
2011-05-07 17:19:13 ----A---- C:\windows\system32\SmartcardCredentialProvider.dll
2011-05-07 17:19:13 ----A---- C:\windows\system32\secur32.dll
2011-05-07 17:19:13 ----A---- C:\windows\system32\ReAgent.dll
2011-05-07 17:19:13 ----A---- C:\windows\system32\rdpd3d.dll
2011-05-07 17:19:13 ----A---- C:\windows\system32\odbctrac.dll
2011-05-07 17:19:13 ----A---- C:\windows\system32\iyuv_32.dll
2011-05-07 17:19:13 ----A---- C:\windows\system32\iTVData.dll
2011-05-07 17:19:13 ----A---- C:\windows\system32\iprtrmgr.dll
2011-05-07 17:19:13 ----A---- C:\windows\system32\drivers\ndproxy.sys
2011-05-07 17:19:12 ----A---- C:\windows\SYSWOW64\wmpmde.dll
2011-05-07 17:19:12 ----A---- C:\windows\SYSWOW64\ntlanman.dll
2011-05-07 17:19:12 ----A---- C:\windows\SYSWOW64\DeviceCenter.dll
2011-05-07 17:19:12 ----A---- C:\windows\system32\wmdrmsdk.dll
2011-05-07 17:19:12 ----A---- C:\windows\system32\srvcli.dll
2011-05-07 17:19:12 ----A---- C:\windows\system32\slwga.dll
2011-05-07 17:19:12 ----A---- C:\windows\system32\drmmgrtn.dll
2011-05-07 17:19:11 ----A---- C:\windows\SYSWOW64\systemcpl.dll
2011-05-07 17:19:11 ----A---- C:\windows\SYSWOW64\SmartcardCredentialProvider.dll
2011-05-07 17:19:11 ----A---- C:\windows\SYSWOW64\rtutils.dll
2011-05-07 17:19:11 ----A---- C:\windows\SYSWOW64\OobeFldr.dll
2011-05-07 17:19:11 ----A---- C:\windows\SYSWOW64\ntprint.dll
2011-05-07 17:19:11 ----A---- C:\windows\SYSWOW64\nshwfp.dll
2011-05-07 17:19:11 ----A---- C:\windows\SYSWOW64\dskquoui.dll
2011-05-07 17:19:11 ----A---- C:\windows\system32\wavemsp.dll
2011-05-07 17:19:11 ----A---- C:\windows\system32\ntprint.dll
2011-05-07 17:19:11 ----A---- C:\windows\system32\nslookup.exe
2011-05-07 17:19:11 ----A---- C:\windows\system32\NAPHLPR.DLL
2011-05-07 17:19:11 ----A---- C:\windows\system32\msiexec.exe
2011-05-07 17:19:11 ----A---- C:\windows\system32\DevicePairingFolder.dll
2011-05-07 17:19:11 ----A---- C:\windows\system32\bcdboot.exe
2011-05-07 17:19:11 ----A---- C:\windows\system32\acppage.dll
2011-05-07 17:19:10 ----A---- C:\windows\SYSWOW64\sethc.exe
2011-05-07 17:19:10 ----A---- C:\windows\SYSWOW64\riched20.dll
2011-05-07 17:19:10 ----A---- C:\windows\system32\srrstr.dll
2011-05-07 17:19:09 ----A---- C:\windows\SYSWOW64\wmpsrcwp.dll
2011-05-07 17:19:09 ----A---- C:\windows\SYSWOW64\nshipsec.dll
2011-05-07 17:19:09 ----A---- C:\windows\SYSWOW64\nlaapi.dll
2011-05-07 17:19:09 ----A---- C:\windows\SYSWOW64\netplwiz.dll
2011-05-07 17:19:09 ----A---- C:\windows\SYSWOW64\NAPHLPR.DLL
2011-05-07 17:19:09 ----A---- C:\windows\SYSWOW64\migisol.dll
2011-05-07 17:19:09 ----A---- C:\windows\SYSWOW64\httpapi.dll
2011-05-07 17:19:09 ----A---- C:\windows\SYSWOW64\fms.dll
2011-05-07 17:19:09 ----A---- C:\windows\SYSWOW64\cdosys.dll
2011-05-07 17:19:09 ----A---- C:\windows\SYSWOW64\blackbox.dll
2011-05-07 17:19:09 ----A---- C:\windows\SYSWOW64\asycfilt.dll
2011-05-07 17:19:09 ----A---- C:\windows\SYSWOW64\activeds.dll
2011-05-07 17:19:09 ----A---- C:\windows\system32\wkscli.dll
2011-05-07 17:19:09 ----A---- C:\windows\system32\TSpkg.dll
2011-05-07 17:19:09 ----A---- C:\windows\system32\sppnp.dll
2011-05-07 17:19:09 ----A---- C:\windows\system32\remotepg.dll
2011-05-07 17:19:09 ----A---- C:\windows\system32\networkexplorer.dll
2011-05-07 17:19:09 ----A---- C:\windows\system32\fsquirt.exe
2011-05-07 17:19:09 ----A---- C:\windows\system32\dfrgui.exe
2011-05-07 17:19:09 ----A---- C:\windows\system32\certprop.dll
2011-05-07 17:19:09 ----A---- C:\windows\system32\cdosys.dll
2011-05-07 17:19:09 ----A---- C:\windows\system32\cabinet.dll
2011-05-07 17:19:08 ----A---- C:\windows\SYSWOW64\wuwebv.dll
2011-05-07 17:19:08 ----A---- C:\windows\SYSWOW64\wlanmsm.dll
2011-05-07 17:19:08 ----A---- C:\windows\SYSWOW64\wavemsp.dll
2011-05-07 17:19:08 ----A---- C:\windows\SYSWOW64\ReAgent.dll
2011-05-07 17:19:08 ----A---- C:\windows\SYSWOW64\provsvc.dll
2011-05-07 17:19:08 ----A---- C:\windows\SYSWOW64\msftedit.dll
2011-05-07 17:19:08 ----A---- C:\windows\SYSWOW64\isoburn.exe
2011-05-07 17:19:08 ----A---- C:\windows\SYSWOW64\dot3ui.dll
2011-05-07 17:19:08 ----A---- C:\windows\system32\wsnmp32.dll
2011-05-07 17:19:08 ----A---- C:\windows\system32\wmpdxm.dll
2011-05-07 17:19:08 ----A---- C:\windows\system32\WinSCard.dll
2011-05-07 17:19:08 ----A---- C:\windows\system32\net1.exe
2011-05-07 17:19:08 ----A---- C:\windows\system32\ftp.exe
2011-05-07 17:19:07 ----A---- C:\windows\SYSWOW64\wvc.dll
2011-05-07 17:19:07 ----A---- C:\windows\SYSWOW64\wtsapi32.dll
2011-05-07 17:19:07 ----A---- C:\windows\SYSWOW64\wimgapi.dll
2011-05-07 17:19:07 ----A---- C:\windows\SYSWOW64\webcheck.dll
2011-05-07 17:19:07 ----A---- C:\windows\SYSWOW64\tzutil.exe
2011-05-07 17:19:07 ----A---- C:\windows\SYSWOW64\twext.dll
2011-05-07 17:19:07 ----A---- C:\windows\SYSWOW64\ocsetup.exe
2011-05-07 17:19:07 ----A---- C:\windows\SYSWOW64\mstask.dll
2011-05-07 17:19:07 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2011-05-07 17:19:07 ----A---- C:\windows\SYSWOW64\dsuiext.dll
2011-05-07 17:19:07 ----A---- C:\windows\SYSWOW64\dfrgui.exe
2011-05-07 17:19:07 ----A---- C:\windows\system32\wvc.dll
2011-05-07 17:19:07 ----A---- C:\windows\system32\wuwebv.dll
2011-05-07 17:19:07 ----A---- C:\windows\system32\wsqmcons.exe
2011-05-07 17:19:07 ----A---- C:\windows\system32\wmdrmdev.dll
2011-05-07 17:19:07 ----A---- C:\windows\system32\WerFaultSecure.exe
2011-05-07 17:19:07 ----A---- C:\windows\system32\msyuv.dll
2011-05-07 17:19:07 ----A---- C:\windows\system32\mfps.dll
2011-05-07 17:19:07 ----A---- C:\windows\system32\drivers\dxgmms1.sys
2011-05-07 17:19:07 ----A---- C:\windows\system32\blackbox.dll
2011-05-07 17:19:06 ----A---- C:\windows\twain_32.dll
2011-05-07 17:19:06 ----A---- C:\windows\SYSWOW64\shdocvw.dll
2011-05-07 17:19:06 ----A---- C:\windows\SYSWOW64\setupugc.exe
2011-05-07 17:19:06 ----A---- C:\windows\SYSWOW64\qcap.dll
2011-05-07 17:19:06 ----A---- C:\windows\SYSWOW64\occache.dll
2011-05-07 17:19:06 ----A---- C:\windows\system32\WUDFPlatform.dll
2011-05-07 17:19:06 ----A---- C:\windows\system32\unimdmat.dll
2011-05-07 17:19:06 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2011-05-07 17:19:06 ----A---- C:\windows\system32\OpcServices.dll
2011-05-07 17:19:06 ----A---- C:\windows\system32\msrle32.dll
2011-05-07 17:19:06 ----A---- C:\windows\system32\mapistub.dll
2011-05-07 17:19:06 ----A---- C:\windows\system32\mapi32.dll
2011-05-07 17:19:05 ----A---- C:\windows\SYSWOW64\uxlib.dll
2011-05-07 17:19:05 ----A---- C:\windows\SYSWOW64\slwga.dll
2011-05-07 17:19:05 ----A---- C:\windows\SYSWOW64\qasf.dll
2011-05-07 17:19:05 ----A---- C:\windows\SYSWOW64\nslookup.exe
2011-05-07 17:19:05 ----A---- C:\windows\SYSWOW64\msvfw32.dll
2011-05-07 17:19:05 ----A---- C:\windows\SYSWOW64\msrating.dll
2011-05-07 17:19:05 ----A---- C:\windows\SYSWOW64\msfeedsbs.dll
2011-05-07 17:19:05 ----A---- C:\windows\SYSWOW64\mciavi32.dll
2011-05-07 17:19:05 ----A---- C:\windows\SYSWOW64\imgutil.dll
2011-05-07 17:19:05 ----A---- C:\windows\SYSWOW64\audiodev.dll
2011-05-07 17:19:05 ----A---- C:\windows\system32\tsbyuv.dll
2011-05-07 17:19:05 ----A---- C:\windows\system32\seclogon.dll
2011-05-07 17:19:05 ----A---- C:\windows\system32\muifontsetup.dll
2011-05-07 17:19:05 ----A---- C:\windows\system32\iscsium.dll
2011-05-07 17:19:05 ----A---- C:\windows\system32\ifsutil.dll
2011-05-07 17:19:05 ----A---- C:\windows\system32\drivers\umbus.sys
2011-05-07 17:19:05 ----A---- C:\windows\system32\diskraid.exe
2011-05-07 17:19:04 ----A---- C:\windows\SYSWOW64\WPDShServiceObj.dll
2011-05-07 17:19:04 ----A---- C:\windows\SYSWOW64\wmdrmsdk.dll
2011-05-07 17:19:04 ----A---- C:\windows\SYSWOW64\wimserv.exe
2011-05-07 17:19:04 ----A---- C:\windows\SYSWOW64\TSpkg.dll
2011-05-07 17:19:04 ----A---- C:\windows\SYSWOW64\rpcrt4.dll
2011-05-07 17:19:04 ----A---- C:\windows\SYSWOW64\msscp.dll
2011-05-07 17:19:04 ----A---- C:\windows\SYSWOW64\diskraid.exe
2011-05-07 17:19:04 ----A---- C:\windows\SYSWOW64\DevicePairingFolder.dll
2011-05-07 17:19:04 ----A---- C:\windows\SYSWOW64\clusapi.dll
2011-05-07 17:19:04 ----A---- C:\windows\SYSWOW64\acppage.dll
2011-05-07 17:19:04 ----A---- C:\windows\system32\wmpshell.dll
2011-05-07 17:19:04 ----A---- C:\windows\system32\WindowsAnytimeUpgradeResults.exe
2011-05-07 17:19:04 ----A---- C:\windows\system32\umb.dll
2011-05-07 17:19:04 ----A---- C:\windows\system32\tlscsp.dll
2011-05-07 17:19:04 ----A---- C:\windows\system32\rdpencom.dll
2011-05-07 17:19:04 ----A---- C:\windows\system32\qasf.dll
2011-05-07 17:19:04 ----A---- C:\windows\system32\perfmon.exe
2011-05-07 17:19:04 ----A---- C:\windows\system32\netutils.dll
2011-05-07 17:19:04 ----A---- C:\windows\system32\NAPCRYPT.DLL
2011-05-07 17:19:04 ----A---- C:\windows\system32\inseng.dll
2011-05-07 17:19:04 ----A---- C:\windows\system32\d3d10level9.dll
2011-05-07 17:19:04 ----A---- C:\windows\system32\AzSqlExt.dll
2011-05-07 17:19:03 ----A---- C:\windows\SYSWOW64\UserAccountControlSettings.dll
2011-05-07 17:19:03 ----A---- C:\windows\SYSWOW64\remotepg.dll
2011-05-07 17:19:03 ----A---- C:\windows\SYSWOW64\rdpencom.dll
2011-05-07 17:19:03 ----A---- C:\windows\SYSWOW64\raschap.dll
2011-05-07 17:19:03 ----A---- C:\windows\SYSWOW64\QUTIL.DLL
2011-05-07 17:19:03 ----A---- C:\windows\SYSWOW64\perfmon.exe
2011-05-07 17:19:03 ----A---- C:\windows\SYSWOW64\olepro32.dll
2011-05-07 17:19:03 ----A---- C:\windows\SYSWOW64\odbccp32.dll
2011-05-07 17:19:03 ----A---- C:\windows\SYSWOW64\ocsetapi.dll
2011-05-07 17:19:03 ----A---- C:\windows\SYSWOW64\networkexplorer.dll
2011-05-07 17:19:03 ----A---- C:\windows\SYSWOW64\NAPCRYPT.DLL
2011-05-07 17:19:03 ----A---- C:\windows\SYSWOW64\input.dll
2011-05-07 17:19:03 ----A---- C:\windows\SYSWOW64\drmmgrtn.dll
2011-05-07 17:19:03 ----A---- C:\windows\system32\wpdwcn.dll
2011-05-07 17:19:03 ----A---- C:\windows\system32\WMADMOD.DLL
2011-05-07 17:19:03 ----A---- C:\windows\system32\wiavideo.dll
2011-05-07 17:19:03 ----A---- C:\windows\system32\syssetup.dll
2011-05-07 17:19:03 ----A---- C:\windows\system32\runonce.exe
2011-05-07 17:19:03 ----A---- C:\windows\system32\raschap.dll
2011-05-07 17:19:03 ----A---- C:\windows\system32\MdSched.exe
2011-05-07 17:19:03 ----A---- C:\windows\system32\FXSAPI.dll
2011-05-07 17:19:03 ----A---- C:\windows\system32\dbghelp.dll
2011-05-07 17:19:03 ----A---- C:\windows\system32\browser.dll
2011-05-07 17:19:03 ----A---- C:\windows\system32\ActionQueue.dll
2011-05-07 17:19:03 ----A---- C:\windows\bfsvc.exe
2011-05-07 17:19:02 ----A---- C:\windows\SYSWOW64\wpdwcn.dll
2011-05-07 17:19:02 ----A---- C:\windows\SYSWOW64\wmpdxm.dll
2011-05-07 17:19:02 ----A---- C:\windows\SYSWOW64\vpnikeapi.dll
2011-05-07 17:19:02 ----A---- C:\windows\SYSWOW64\vdsbas.dll
2011-05-07 17:19:02 ----A---- C:\windows\SYSWOW64\runonce.exe
2011-05-07 17:19:02 ----A---- C:\windows\SYSWOW64\onexui.dll
2011-05-07 17:19:02 ----A---- C:\windows\SYSWOW64\iTVData.dll
2011-05-07 17:19:02 ----A---- C:\windows\SYSWOW64\inseng.dll
2011-05-07 17:19:02 ----A---- C:\windows\SYSWOW64\dxdiagn.dll
2011-05-07 17:19:02 ----A---- C:\windows\system32\WMVSDECD.DLL
2011-05-07 17:19:02 ----A---- C:\windows\system32\vdsbas.dll
2011-05-07 17:19:02 ----A---- C:\windows\system32\PrintIsolationProxy.dll
2011-05-07 17:19:02 ----A---- C:\windows\system32\nltest.exe
2011-05-07 17:19:02 ----A---- C:\windows\system32\mstask.dll
2011-05-07 17:19:02 ----A---- C:\windows\system32\Mcx2Svc.dll
2011-05-07 17:19:02 ----A---- C:\windows\system32\drivers\tcpipreg.sys
2011-05-07 17:19:02 ----A---- C:\windows\system32\drivers\rmcast.sys
2011-05-07 17:19:01 ----A---- C:\windows\SYSWOW64\wmpshell.dll
2011-05-07 17:19:01 ----A---- C:\windows\SYSWOW64\wmdrmdev.dll
2011-05-07 17:19:01 ----A---- C:\windows\SYSWOW64\shacct.dll
2011-05-07 17:19:01 ----A---- C:\windows\SYSWOW64\RegisterIEPKEYs.exe
2011-05-07 17:19:01 ----A---- C:\windows\SYSWOW64\msvidc32.dll
2011-05-07 17:19:01 ----A---- C:\windows\SYSWOW64\msiexec.exe
2011-05-07 17:19:01 ----A---- C:\windows\SYSWOW64\MFPlay.dll
2011-05-07 17:19:01 ----A---- C:\windows\SYSWOW64\lsmproxy.dll
2011-05-07 17:19:01 ----A---- C:\windows\SYSWOW64\logagent.exe
2011-05-07 17:19:01 ----A---- C:\windows\SYSWOW64\eapp3hst.dll
2011-05-07 17:19:01 ----A---- C:\windows\SYSWOW64\d3d10level9.dll
2011-05-07 17:19:01 ----A---- C:\windows\SYSWOW64\bitsadmin.exe
2011-05-07 17:19:01 ----A---- C:\windows\system32\wudriver.dll
2011-05-07 17:19:01 ----A---- C:\windows\system32\WPDSp.dll
2011-05-07 17:19:01 ----A---- C:\windows\system32\wmdrmnet.dll
2011-05-07 17:19:01 ----A---- C:\windows\system32\vss_ps.dll
2011-05-07 17:19:01 ----A---- C:\windows\system32\tabcal.exe
2011-05-07 17:19:01 ----A---- C:\windows\system32\shacct.dll
2011-05-07 17:19:01 ----A---- C:\windows\system32\secproc_ssp_isv.dll
2011-05-07 17:19:01 ----A---- C:\windows\system32\QSVRMGMT.DLL
2011-05-07 17:19:01 ----A---- C:\windows\system32\qcap.dll
2011-05-07 17:19:01 ----A---- C:\windows\system32\mssphtb.dll
2011-05-07 17:19:01 ----A---- C:\windows\system32\logman.exe
2011-05-07 17:19:01 ----A---- C:\windows\system32\cscapi.dll
2011-05-07 17:19:01 ----A---- C:\windows\system32\bitsadmin.exe
2011-05-07 17:19:00 ----A---- C:\windows\SYSWOW64\wudriver.dll
2011-05-07 17:19:00 ----A---- C:\windows\SYSWOW64\unimdmat.dll
2011-05-07 17:19:00 ----A---- C:\windows\SYSWOW64\sqlcese30.dll
2011-05-07 17:19:00 ----A---- C:\windows\SYSWOW64\rdpd3d.dll
2011-05-07 17:19:00 ----A---- C:\windows\SYSWOW64\pdh.dll
2011-05-07 17:19:00 ----A---- C:\windows\SYSWOW64\OpcServices.dll
2011-05-07 17:19:00 ----A---- C:\windows\SYSWOW64\mprapi.dll
2011-05-07 17:19:00 ----A---- C:\windows\SYSWOW64\iscsium.dll
2011-05-07 17:19:00 ----A---- C:\windows\SYSWOW64\cscapi.dll
2011-05-07 17:19:00 ----A---- C:\windows\system32\WMSPDMOD.DLL
2011-05-07 17:19:00 ----A---- C:\windows\system32\spbcd.dll
2011-05-07 17:19:00 ----A---- C:\windows\system32\secproc_ssp.dll
2011-05-07 17:19:00 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2011-05-07 17:19:00 ----A---- C:\windows\system32\qdv.dll
2011-05-07 17:19:00 ----A---- C:\windows\system32\PortableDeviceSyncProvider.dll
2011-05-07 17:19:00 ----A---- C:\windows\system32\msnetobj.dll
2011-05-07 17:18:59 ----A---- C:\windows\SYSWOW64\WPDSp.dll
2011-05-07 17:18:59 ----A---- C:\windows\SYSWOW64\WMVSDECD.DLL
2011-05-07 17:18:59 ----A---- C:\windows\SYSWOW64\WMPhoto.dll
2011-05-07 17:18:59 ----A---- C:\windows\SYSWOW64\WMADMOD.DLL
2011-05-07 17:18:59 ----A---- C:\windows\SYSWOW64\wiavideo.dll
2011-05-07 17:18:59 ----A---- C:\windows\SYSWOW64\utildll.dll
2011-05-07 17:18:59 ----A---- C:\windows\SYSWOW64\tsgqec.dll
2011-05-07 17:18:59 ----A---- C:\windows\SYSWOW64\takeown.exe
2011-05-07 17:18:59 ----A---- C:\windows\SYSWOW64\srvcli.dll
2011-05-07 17:18:59 ----A---- C:\windows\SYSWOW64\QSVRMGMT.DLL
2011-05-07 17:18:59 ----A---- C:\windows\SYSWOW64\PortableDeviceSyncProvider.dll
2011-05-07 17:18:59 ----A---- C:\windows\SYSWOW64\PortableDeviceStatus.dll
2011-05-07 17:18:59 ----A---- C:\windows\SYSWOW64\olethk32.dll
2011-05-07 17:18:59 ----A---- C:\windows\SYSWOW64\odbctrac.dll
2011-05-07 17:18:59 ----A---- C:\windows\SYSWOW64\ncryptui.dll
2011-05-07 17:18:59 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2011-05-07 17:18:59 ----A---- C:\windows\SYSWOW64\mapistub.dll
2011-05-07 17:18:59 ----A---- C:\windows\SYSWOW64\mapi32.dll
2011-05-07 17:18:59 ----A---- C:\windows\SYSWOW64\logman.exe
2011-05-07 17:18:59 ----A---- C:\windows\SYSWOW64\iyuv_32.dll
2011-05-07 17:18:59 ----A---- C:\windows\SYSWOW64\fphc.dll
2011-05-07 17:18:59 ----A---- C:\windows\SYSWOW64\dot3msm.dll
2011-05-07 17:18:59 ----A---- C:\windows\SYSWOW64\avifil32.dll
2011-05-07 17:18:59 ----A---- C:\windows\system32\WMPhoto.dll
2011-05-07 17:18:59 ----A---- C:\windows\system32\vfwwdm32.dll
2011-05-07 17:18:59 ----A---- C:\windows\system32\takeown.exe
2011-05-07 17:18:59 ----A---- C:\windows\system32\PortableDeviceStatus.dll
2011-05-07 17:18:59 ----A---- C:\windows\system32\PnPUnattend.exe
2011-05-07 17:18:59 ----A---- C:\windows\system32\fphc.dll
2011-05-07 17:18:59 ----A---- C:\windows\system32\EhStorAPI.dll
2011-05-07 17:18:59 ----A---- C:\windows\system32\drivers\ndisuio.sys
2011-05-07 17:18:59 ----A---- C:\windows\system32\dot3ui.dll
2011-05-07 17:18:59 ----A---- C:\windows\system32\amstream.dll
2011-05-07 17:18:58 ----A---- C:\windows\SYSWOW64\wmdrmnet.dll
2011-05-07 17:18:58 ----A---- C:\windows\SYSWOW64\sqmapi.dll
2011-05-07 17:18:58 ----A---- C:\windows\SYSWOW64\qdv.dll
2011-05-07 17:18:58 ----A---- C:\windows\SYSWOW64\imagehlp.dll
2011-05-07 17:18:58 ----A---- C:\windows\SYSWOW64\EhStorAPI.dll
2011-05-07 17:18:58 ----A---- C:\windows\system32\WUDFHost.exe
2011-05-07 17:18:58 ----A---- C:\windows\system32\shimgvw.dll
2011-05-07 17:18:58 ----A---- C:\windows\system32\QCLIPROV.DLL
2011-05-07 17:18:58 ----A---- C:\windows\system32\nrpsrv.dll
2011-05-07 17:18:58 ----A---- C:\windows\system32\netapi32.dll
2011-05-07 17:18:58 ----A---- C:\windows\system32\iasrecst.dll
2011-05-07 17:18:58 ----A---- C:\windows\system32\HotStartUserAgent.dll
2011-05-07 17:18:58 ----A---- C:\windows\system32\djoin.exe
2011-05-07 17:18:58 ----A---- C:\windows\system32\cmstp.exe
2011-05-07 17:18:58 ----A---- C:\windows\system32\CertPolEng.dll
2011-05-07 17:18:57 ----A---- C:\windows\SYSWOW64\msnetobj.dll
2011-05-07 17:18:54 ----A---- C:\windows\SYSWOW64\wsnmp32.dll
2011-05-07 17:18:54 ----A---- C:\windows\SYSWOW64\WMSPDMOD.DLL
2011-05-07 17:18:54 ----A---- C:\windows\SYSWOW64\vfwwdm32.dll
2011-05-07 17:18:54 ----A---- C:\windows\SYSWOW64\sspicli.dll
2011-05-07 17:18:54 ----A---- C:\windows\SYSWOW64\sppinst.dll
2011-05-07 17:18:54 ----A---- C:\windows\SYSWOW64\QCLIPROV.DLL
2011-05-07 17:18:54 ----A---- C:\windows\SYSWOW64\pdhui.dll
2011-05-07 17:18:54 ----A---- C:\windows\SYSWOW64\MuiUnattend.exe
2011-05-07 17:18:54 ----A---- C:\windows\SYSWOW64\msyuv.dll
2011-05-07 17:18:54 ----A---- C:\windows\SYSWOW64\msrle32.dll
2011-05-07 17:18:54 ----A---- C:\windows\SYSWOW64\cmstp.exe
2011-05-07 17:18:54 ----A---- C:\windows\SYSWOW64\cca.dll
2011-05-07 17:18:54 ----A---- C:\windows\system32\WUDFx.dll
2011-05-07 17:18:54 ----A---- C:\windows\system32\WavDest.dll
2011-05-07 17:18:54 ----A---- C:\windows\system32\MultiDigiMon.exe
2011-05-07 17:18:54 ----A---- C:\windows\system32\KMSVC.DLL
2011-05-07 17:18:54 ----A---- C:\windows\system32\fdProxy.dll
2011-05-07 17:18:54 ----A---- C:\windows\system32\drivers\pacer.sys
2011-05-07 17:18:53 ----A---- C:\windows\SYSWOW64\wkscli.dll
2011-05-07 17:18:53 ----A---- C:\windows\SYSWOW64\tsbyuv.dll
2011-05-07 17:18:53 ----A---- C:\windows\SYSWOW64\syssetup.dll
2011-05-07 17:18:53 ----A---- C:\windows\SYSWOW64\spbcd.dll
2011-05-07 17:18:53 ----A---- C:\windows\SYSWOW64\setupcln.dll
2011-05-07 17:18:53 ----A---- C:\windows\SYSWOW64\secproc_ssp_isv.dll
2011-05-07 17:18:53 ----A---- C:\windows\SYSWOW64\secproc_ssp.dll
2011-05-07 17:18:53 ----A---- C:\windows\SYSWOW64\resutils.dll
2011-05-07 17:18:53 ----A---- C:\windows\SYSWOW64\relog.exe
2011-05-07 17:18:53 ----A---- C:\windows\SYSWOW64\rastapi.dll

2011-05-07 17:18:53 ----A---- C:\windows\SYSWOW64\netiougc.exe
2011-05-07 17:18:53 ----A---- C:\windows\SYSWOW64\netbtugc.exe
2011-05-07 17:18:53 ----A---- C:\windows\SYSWOW64\mydocs.dll
2011-05-07 17:18:53 ----A---- C:\windows\SYSWOW64\msorcl32.dll
2011-05-07 17:18:53 ----A---- C:\windows\SYSWOW64\itircl.dll
2011-05-07 17:18:53 ----A---- C:\windows\SYSWOW64\iscsicli.exe
2011-05-07 17:18:53 ----A---- C:\windows\SYSWOW64\iasrecst.dll
2011-05-07 17:18:53 ----A---- C:\windows\SYSWOW64\diskpart.exe
2011-05-07 17:18:53 ----A---- C:\windows\SYSWOW64\CertPolEng.dll
2011-05-07 17:18:53 ----A---- C:\windows\SYSWOW64\AzSqlExt.dll
2011-05-07 17:18:53 ----A---- C:\windows\SYSWOW64\amstream.dll
2011-05-07 17:18:53 ----A---- C:\windows\system32\wuauclt.exe
2011-05-07 17:18:53 ----A---- C:\windows\system32\sscore.dll
2011-05-07 17:18:53 ----A---- C:\windows\system32\RMActivate_ssp_isv.exe
2011-05-07 17:18:53 ----A---- C:\windows\system32\RMActivate_ssp.exe
2011-05-07 17:18:53 ----A---- C:\windows\system32\relog.exe
2011-05-07 17:18:53 ----A---- C:\windows\system32\mydocs.dll
2011-05-07 17:18:53 ----A---- C:\windows\system32\msdmo.dll
2011-05-07 17:18:53 ----A---- C:\windows\system32\mobsync.exe
2011-05-07 17:18:53 ----A---- C:\windows\system32\itircl.dll
2011-05-07 17:18:53 ----A---- C:\windows\system32\iscsicli.exe
2011-05-07 17:18:53 ----A---- C:\windows\system32\dot3msm.dll
2011-05-07 17:18:53 ----A---- C:\windows\system32\diskpart.exe
2011-05-07 17:18:53 ----A---- C:\windows\system32\BWUnpairElevated.dll
2011-05-07 17:18:53 ----A---- C:\windows\system32\browcli.dll
2011-05-07 17:18:52 ----A---- C:\windows\SYSWOW64\wuapp.exe
2011-05-07 17:18:52 ----A---- C:\windows\SYSWOW64\wmpps.dll
2011-05-07 17:18:52 ----A---- C:\windows\SYSWOW64\WerFaultSecure.exe
2011-05-07 17:18:52 ----A---- C:\windows\SYSWOW64\tlscsp.dll
2011-05-07 17:18:52 ----A---- C:\windows\SYSWOW64\secur32.dll
2011-05-07 17:18:52 ----A---- C:\windows\SYSWOW64\RMActivate_ssp_isv.exe
2011-05-07 17:18:52 ----A---- C:\windows\SYSWOW64\RMActivate_ssp.exe
2011-05-07 17:18:52 ----A---- C:\windows\SYSWOW64\ReAgentc.exe
2011-05-07 17:18:52 ----A---- C:\windows\SYSWOW64\netutils.dll
2011-05-07 17:18:52 ----A---- C:\windows\SYSWOW64\mciqtz32.dll
2011-05-07 17:18:52 ----A---- C:\windows\SYSWOW64\findstr.exe
2011-05-07 17:18:52 ----A---- C:\windows\SYSWOW64\eappgnui.dll
2011-05-07 17:18:52 ----A---- C:\windows\system32\wuapp.exe
2011-05-07 17:18:52 ----A---- C:\windows\system32\sppc.dll
2011-05-07 17:18:52 ----A---- C:\windows\system32\onexui.dll
2011-05-07 17:18:52 ----A---- C:\windows\system32\mciqtz32.dll
2011-05-07 17:18:52 ----A---- C:\windows\system32\luainstall.dll
2011-05-07 17:18:52 ----A---- C:\windows\system32\imagehlp.dll
2011-05-07 17:18:52 ----A---- C:\windows\system32\choice.exe
2011-05-07 17:18:52 ----A---- C:\windows\system32\FXSTIFF.dll
2011-05-07 17:18:52 ----A---- C:\windows\system32\findstr.exe
2011-05-07 17:18:52 ----A---- C:\windows\system32\eappgnui.dll
2011-05-07 17:18:52 ----A---- C:\windows\system32\drivers\tunnel.sys
2011-05-07 17:18:51 ----A---- C:\windows\SYSWOW64\unlodctr.exe
2011-05-07 17:18:51 ----A---- C:\windows\SYSWOW64\sppc.dll
2011-05-07 17:18:51 ----A---- C:\windows\SYSWOW64\spopk.dll
2011-05-07 17:18:51 ----A---- C:\windows\SYSWOW64\shimgvw.dll
2011-05-07 17:18:51 ----A---- C:\windows\SYSWOW64\rdprefdrvapi.dll
2011-05-07 17:18:51 ----A---- C:\windows\SYSWOW64\netapi32.dll
2011-05-07 17:18:51 ----A---- C:\windows\SYSWOW64\muifontsetup.dll
2011-05-07 17:18:51 ----A---- C:\windows\SYSWOW64\msdmo.dll
2011-05-07 17:18:51 ----A---- C:\windows\SYSWOW64\mobsync.exe
2011-05-07 17:18:51 ----A---- C:\windows\SYSWOW64\luainstall.dll
2011-05-07 17:18:51 ----A---- C:\windows\SYSWOW64\iccvid.dll
2011-05-07 17:18:51 ----A---- C:\windows\SYSWOW64\cabinet.dll
2011-05-07 17:18:51 ----A---- C:\windows\system32\WUDFCoinstaller.dll
2011-05-07 17:18:51 ----A---- C:\windows\system32\wdiasqmmodule.dll
2011-05-07 17:18:51 ----A---- C:\windows\system32\spopk.dll
2011-05-07 17:18:51 ----A---- C:\windows\system32\schedcli.dll
2011-05-07 17:18:51 ----A---- C:\windows\system32\repair-bde.exe
2011-05-07 17:18:51 ----A---- C:\windows\system32\RDPENCDD.dll
2011-05-07 17:18:51 ----A---- C:\windows\system32\profprov.dll
2011-05-07 17:18:51 ----A---- C:\windows\system32\odbcconf.dll
2011-05-07 17:18:51 ----A---- C:\windows\system32\manage-bde.exe
2011-05-07 17:18:51 ----A---- C:\windows\system32\inetmib1.dll
2011-05-07 17:18:51 ----A---- C:\windows\system32\fixmapi.exe
2011-05-07 17:18:51 ----A---- C:\windows\system32\drivers\dfsc.sys
2011-05-07 17:18:50 ----A---- C:\windows\SYSWOW64\inetmib1.dll
2011-05-07 17:18:50 ----A---- C:\windows\system32\FXSMON.dll
2011-05-07 17:18:49 ----A---- C:\windows\SYSWOW64\wups.dll
2011-05-07 17:18:49 ----A---- C:\windows\SYSWOW64\UIRibbonRes.dll
2011-05-07 17:18:49 ----A---- C:\windows\SYSWOW64\perfts.dll
2011-05-07 17:18:49 ----A---- C:\windows\SYSWOW64\odbcconf.dll
2011-05-07 17:18:49 ----A---- C:\windows\SYSWOW64\imm32.dll
2011-05-07 17:18:49 ----A---- C:\windows\SYSWOW64\browcli.dll
2011-05-07 17:18:49 ----A---- C:\windows\system32\wshbth.dll
2011-05-07 17:18:49 ----A---- C:\windows\system32\UIRibbonRes.dll
2011-05-07 17:18:49 ----A---- C:\windows\system32\TRAPI.dll
2011-05-07 17:18:49 ----A---- C:\windows\system32\napdsnap.dll
2011-05-07 17:18:49 ----A---- C:\windows\system32\msfeedssync.exe
2011-05-07 17:18:49 ----A---- C:\windows\system32\LogonUI.exe
2011-05-07 17:18:49 ----A---- C:\windows\system32\elsTrans.dll
2011-05-07 17:18:49 ----A---- C:\windows\system32\dsauth.dll
2011-05-07 17:18:49 ----A---- C:\windows\system32\drivers\tdi.sys
2011-05-07 17:18:48 ----A---- C:\windows\SYSWOW64\msfeedssync.exe
2011-05-07 17:18:48 ----A---- C:\windows\SYSWOW64\elsTrans.dll
2011-05-07 17:18:48 ----A---- C:\windows\system32\rdprefdrvapi.dll
2011-05-07 17:18:48 ----A---- C:\windows\system32\FXSUNATD.exe
2011-05-07 17:18:47 ----A---- C:\windows\SYSWOW64\wshbth.dll
2011-05-07 17:18:47 ----A---- C:\windows\SYSWOW64\TRAPI.dll
2011-05-07 17:18:47 ----A---- C:\windows\SYSWOW64\sscore.dll
2011-05-07 17:18:47 ----A---- C:\windows\SYSWOW64\schedcli.dll
2011-05-07 17:18:47 ----A---- C:\windows\SYSWOW64\napdsnap.dll
2011-05-07 17:18:47 ----A---- C:\windows\SYSWOW64\dsauth.dll
2011-05-07 17:18:47 ----A---- C:\windows\SYSWOW64\cscdll.dll
2011-05-07 17:18:47 ----A---- C:\windows\SYSWOW64\bitsperf.dll
2011-05-07 17:18:47 ----A---- C:\windows\system32\wups2.dll
2011-05-07 17:18:47 ----A---- C:\windows\system32\wups.dll
2011-05-07 17:18:47 ----A---- C:\windows\system32\wsdchngr.dll
2011-05-07 17:18:47 ----A---- C:\windows\system32\drivers\usbrpm.sys
2011-05-07 17:18:47 ----A---- C:\windows\system32\drivers\acpipmi.sys
2011-05-07 17:18:47 ----A---- C:\windows\system32\cscdll.dll
2011-05-07 17:18:47 ----A---- C:\windows\system32\bitsperf.dll
2011-05-07 17:18:46 ----A---- C:\windows\SYSWOW64\wsdchngr.dll
2011-05-07 17:18:46 ----A---- C:\windows\SYSWOW64\shgina.dll
2011-05-07 17:18:46 ----A---- C:\windows\SYSWOW64\riched32.dll
2011-05-07 17:18:46 ----A---- C:\windows\system32\shgina.dll
2011-05-07 17:18:45 ----A---- C:\windows\SYSWOW64\wshirda.dll
2011-05-07 17:18:45 ----A---- C:\windows\system32\wshirda.dll
2011-05-07 17:18:45 ----A---- C:\windows\system32\wow64win.dll
2011-05-07 17:18:45 ----A---- C:\windows\system32\wow64cpu.dll
2011-05-07 17:18:45 ----A---- C:\windows\system32\rdpcfgex.dll
2011-05-07 17:18:45 ----A---- C:\windows\system32\drivers\USBCAMD2.sys
2011-05-07 17:18:45 ----A---- C:\windows\system32\drivers\kbdhid.sys
2011-05-07 17:18:45 ----A---- C:\windows\system32\drivers\hidusb.sys
2011-05-07 17:18:45 ----A---- C:\windows\system32\drivers\Dot4Prt.sys
2011-05-07 17:18:45 ----A---- C:\windows\system32\drivers\CompositeBus.sys
2011-05-07 17:18:45 ----A---- C:\windows\system32\drivers\appid.sys
2011-05-07 17:18:44 ----A---- C:\windows\SYSWOW64\spwmp.dll
2011-05-07 17:18:44 ----A---- C:\windows\SYSWOW64\browseui.dll
2011-05-07 17:18:44 ----A---- C:\windows\system32\spwmp.dll
2011-05-07 17:18:44 ----A---- C:\windows\system32\riched32.dll
2011-05-07 17:18:44 ----A---- C:\windows\system32\drivers\IPMIDrv.sys
2011-05-07 17:18:44 ----A---- C:\windows\system32\C_ISCII.DLL
2011-05-07 17:18:44 ----A---- C:\windows\system32\browseui.dll
2011-05-07 17:18:43 ----AH---- C:\windows\system32\api-ms-win-core-ums-l1-1-0.dll
2011-05-07 17:18:43 ----A---- C:\windows\SYSWOW64\wmploc.DLL
2011-05-07 17:18:43 ----A---- C:\windows\SYSWOW64\shunimpl.dll
2011-05-07 17:18:43 ----A---- C:\windows\SYSWOW64\KBDTUQ.DLL
2011-05-07 17:18:43 ----A---- C:\windows\SYSWOW64\KBDTUF.DLL
2011-05-07 17:18:43 ----A---- C:\windows\SYSWOW64\KBDSG.DLL
2011-05-07 17:18:43 ----A---- C:\windows\SYSWOW64\kbdlk41a.dll
2011-05-07 17:18:43 ----A---- C:\windows\SYSWOW64\KBDGR1.DLL
2011-05-07 17:18:43 ----A---- C:\windows\SYSWOW64\KBDGKL.DLL
2011-05-07 17:18:43 ----A---- C:\windows\SYSWOW64\dxmasf.dll
2011-05-07 17:18:43 ----A---- C:\windows\SYSWOW64\C_ISCII.DLL
2011-05-07 17:18:43 ----A---- C:\windows\system32\wmploc.DLL
2011-05-07 17:18:43 ----A---- C:\windows\system32\shunimpl.dll
2011-05-07 17:18:43 ----A---- C:\windows\system32\KBDTUQ.DLL
2011-05-07 17:18:43 ----A---- C:\windows\system32\KBDTUF.DLL
2011-05-07 17:18:43 ----A---- C:\windows\system32\KBDSG.DLL
2011-05-07 17:18:43 ----A---- C:\windows\system32\KBDSF.DLL
2011-05-07 17:18:43 ----A---- C:\windows\system32\KBDPO.DLL
2011-05-07 17:18:43 ----A---- C:\windows\system32\KBDNEPR.DLL
2011-05-07 17:18:43 ----A---- C:\windows\system32\kbdlk41a.dll
2011-05-07 17:18:43 ----A---- C:\windows\system32\KBDINTAM.DLL
2011-05-07 17:18:43 ----A---- C:\windows\system32\KBDINBEN.DLL
2011-05-07 17:18:43 ----A---- C:\windows\system32\KBDGR1.DLL
2011-05-07 17:18:43 ----A---- C:\windows\system32\KBDGKL.DLL
2011-05-07 17:18:43 ----A---- C:\windows\system32\dxmasf.dll
2011-05-07 17:18:43 ----A---- C:\windows\system32\drivers\WUDFRd.sys
2011-05-07 17:18:43 ----A---- C:\windows\system32\drivers\WUDFPf.sys
2011-05-07 17:18:43 ----A---- C:\windows\system32\drivers\sffp_sd.sys
2011-05-07 17:18:43 ----A---- C:\windows\system32\drivers\scfilter.sys
2011-05-07 17:18:43 ----A---- C:\windows\system32\drivers\HdAudio.sys
2011-05-07 17:18:43 ----A---- C:\windows\system32\drivers\hdaudbus.sys
2011-05-07 17:18:43 ----A---- C:\windows\system32\drivers\cdrom.sys
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\tzres.dll
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\spwizres.dll
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\pifmgr.dll
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\nlsbres.dll
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\KBDUS.DLL
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\KBDUGHR1.DLL
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\KBDTURME.DLL
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\KBDTAJIK.DLL
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\KBDSF.DLL
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\KBDPO.DLL
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\KBDNEPR.DLL
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\KBDMON.DLL
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\KBDMAORI.DLL
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\KBDLT1.DLL
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\KBDINTEL.DLL
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\KBDINTAM.DLL
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\KBDINORI.DLL
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\KBDINMAR.DLL
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\KBDINKAN.DLL
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\KBDINHIN.DLL
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\KBDINBEN.DLL
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\KBDGEO.DLL
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\KBDCZ1.DLL
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\KBDBULG.DLL
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\KBDBLR.DLL
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\KBDBASH.DLL
2011-05-07 17:18:42 ----A---- C:\windows\SYSWOW64\dpnaddr.dll
2011-05-07 17:18:42 ----A---- C:\windows\system32\tzres.dll
2011-05-07 17:18:42 ----A---- C:\windows\system32\spwizres.dll
2011-05-07 17:18:42 ----A---- C:\windows\system32\pifmgr.dll
2011-05-07 17:18:42 ----A---- C:\windows\system32\nlsbres.dll
2011-05-07 17:18:42 ----A---- C:\windows\system32\KBDUS.DLL
2011-05-07 17:18:42 ----A---- C:\windows\system32\KBDUGHR1.DLL
2011-05-07 17:18:42 ----A---- C:\windows\system32\KBDTURME.DLL
2011-05-07 17:18:42 ----A---- C:\windows\system32\KBDTAJIK.DLL
2011-05-07 17:18:42 ----A---- C:\windows\system32\KBDMON.DLL
2011-05-07 17:18:42 ----A---- C:\windows\system32\KBDMAORI.DLL
2011-05-07 17:18:42 ----A---- C:\windows\system32\KBDLT1.DLL
2011-05-07 17:18:42 ----A---- C:\windows\system32\KBDINTEL.DLL
2011-05-07 17:18:42 ----A---- C:\windows\system32\KBDINORI.DLL
2011-05-07 17:18:42 ----A---- C:\windows\system32\KBDINMAR.DLL
2011-05-07 17:18:42 ----A---- C:\windows\system32\KBDINKAN.DLL
2011-05-07 17:18:42 ----A---- C:\windows\system32\KBDINHIN.DLL
2011-05-07 17:18:42 ----A---- C:\windows\system32\KBDGEO.DLL
2011-05-07 17:18:42 ----A---- C:\windows\system32\KBDCZ1.DLL
2011-05-07 17:18:42 ----A---- C:\windows\system32\KBDBULG.DLL
2011-05-07 17:18:42 ----A---- C:\windows\system32\KBDBLR.DLL
2011-05-07 17:18:42 ----A---- C:\windows\system32\KBDBASH.DLL
2011-05-07 17:18:42 ----A---- C:\windows\system32\dpnaddr.dll
2011-05-07 17:18:42 ----A---- C:\windows\system32\BlbEvents.dll
2011-05-07 17:18:19 ----A---- C:\windows\SYSWOW64\wdscore.dll
2011-05-07 17:18:19 ----A---- C:\windows\SYSWOW64\PkgMgr.exe
2011-05-07 17:18:11 ----A---- C:\windows\SYSWOW64\drvstore.dll
2011-05-07 17:18:11 ----A---- C:\windows\SYSWOW64\dpx.dll
2011-05-07 17:18:09 ----A---- C:\windows\SYSWOW64\wbemcomn.dll
2011-05-07 17:16:01 ----A---- C:\windows\system32\wmicmiplugin.dll
2011-05-07 17:16:01 ----A---- C:\windows\system32\wbemcomn.dll
2011-05-07 17:15:44 ----A---- C:\windows\system32\SmiEngine.dll
2011-05-07 17:15:31 ----A---- C:\windows\system32\PkgMgr.exe
2011-05-07 17:14:53 ----A---- C:\windows\system32\drvstore.dll
2011-05-07 17:14:53 ----A---- C:\windows\system32\dpx.dll
2011-05-06 18:13:29 ----A---- C:\windows\SYSWOW64\d3d10_1core.dll
2011-05-06 18:13:29 ----A---- C:\windows\SYSWOW64\d3d10_1.dll
2011-05-06 18:13:29 ----A---- C:\windows\system32\d3d10_1core.dll
2011-05-06 18:13:29 ----A---- C:\windows\system32\d3d10_1.dll
2011-05-06 16:58:56 ----D---- C:\Program Files (x86)\PokerStars
2011-04-30 15:07:16 ----D---- C:\Program Files (x86)\Microsoft XNA
2011-04-30 15:00:11 ----D---- C:\Program Files (x86)\Paradox Interactive
2011-04-28 17:35:36 ----A---- C:\windows\explorer.exe
2011-04-28 17:35:35 ----A---- C:\windows\SYSWOW64\explorer.exe
2011-04-28 17:35:34 ----A---- C:\windows\system32\XpsPrint.dll
2011-04-28 17:35:33 ----A---- C:\windows\SYSWOW64\XpsPrint.dll
2011-04-28 17:35:08 ----A---- C:\windows\SYSWOW64\esent.dll
2011-04-28 17:35:08 ----A---- C:\windows\system32\esent.dll
2011-04-28 17:35:08 ----A---- C:\windows\system32\drivers\ntfs.sys
2011-04-28 17:35:07 ----A---- C:\windows\system32\drivers\nvstor.sys
2011-04-28 17:35:07 ----A---- C:\windows\system32\drivers\nvraid.sys
2011-04-28 17:35:07 ----A---- C:\windows\system32\drivers\amdsata.sys
2011-04-28 17:35:06 ----A---- C:\windows\SYSWOW64\fsutil.exe
2011-04-28 17:35:06 ----A---- C:\windows\system32\fsutil.exe
2011-04-28 17:35:06 ----A---- C:\windows\system32\drivers\USBSTOR.SYS
2011-04-28 17:35:06 ----A---- C:\windows\system32\drivers\storport.sys
2011-04-28 17:35:06 ----A---- C:\windows\system32\drivers\iaStorV.sys
2011-04-28 17:35:06 ----A---- C:\windows\system32\drivers\amdxata.sys
2011-04-28 17:34:58 ----A---- C:\windows\system32\prevhost.exe
2011-04-28 17:34:57 ----A---- C:\windows\SYSWOW64\prevhost.exe
2011-04-23 15:14:10 ----D---- C:\Users\Paja&Monika\AppData\Roaming\Ubisoft

======List of files/folders modified in the last 1 months======

2011-05-19 18:40:11 ----RD---- C:\Program Files
2011-05-19 18:37:03 ----D---- C:\windows\system32\config
2011-05-19 18:37:01 ----SHD---- C:\System Volume Information
2011-05-19 18:32:41 ----D---- C:\windows\System32
2011-05-19 18:32:41 ----A---- C:\windows\system32\PerfStringBackup.INI
2011-05-19 18:32:40 ----D---- C:\windows\inf
2011-05-19 18:30:39 ----D---- C:\windows\Temp
2011-05-19 18:30:36 ----D---- C:\windows\system32\drivers\Avg
2011-05-19 18:27:18 ----D---- C:\Program Files (x86)\Steam
2011-05-19 08:39:38 ----D---- C:\windows\LiveKernelReports
2011-05-17 22:31:16 ----D---- C:\Users\Paja&Monika\AppData\Roaming\uTorrent
2011-05-17 17:30:21 ----D---- C:\Users\Paja&Monika\AppData\Roaming\BSplayer
2011-05-14 18:06:54 ----A---- C:\windows\ntbtlog.txt
2011-05-14 17:46:19 ----D---- C:\windows\system32\drivers
2011-05-14 17:46:07 ----HD---- C:\ProgramData
2011-05-14 17:46:05 ----RD---- C:\Program Files (x86)
2011-05-13 20:58:01 ----D---- C:\windows\Prefetch
2011-05-13 20:57:17 ----D---- C:\Windows
2011-05-13 20:57:16 ----D---- C:\windows\winsxs
2011-05-13 20:55:00 ----D---- C:\windows\SysWOW64
2011-05-13 20:54:59 ----D---- C:\windows\system32\DriverStore
2011-05-12 18:47:00 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-05-11 21:08:02 ----SHD---- C:\windows\Installer
2011-05-11 21:08:01 ----HD---- C:\Config.Msi
2011-05-11 21:07:59 ----D---- C:\ProgramData\Microsoft Help
2011-05-11 21:05:03 ----A---- C:\windows\system32\MRT.exe
2011-05-11 20:05:20 ----D---- C:\windows\system32\catroot2
2011-05-11 20:05:20 ----D---- C:\windows\system32\catroot
2011-05-09 19:08:00 ----D---- C:\windows\Microsoft.NET
2011-05-09 19:07:31 ----RSD---- C:\windows\assembly
2011-05-08 23:13:14 ----D---- C:\Program Files (x86)\Windows Live
2011-05-08 13:37:18 ----D---- C:\windows\rescache
2011-05-07 18:36:50 ----D---- C:\Program Files (x86)\Windows Sidebar
2011-05-07 18:36:50 ----D---- C:\Program Files (x86)\Windows Portable Devices
2011-05-07 18:36:50 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2011-05-07 18:36:50 ----D---- C:\Program Files (x86)\Windows Media Player
2011-05-07 18:36:50 ----D---- C:\Program Files (x86)\Windows Mail
2011-05-07 18:36:50 ----D---- C:\Program Files (x86)\Internet Explorer
2011-05-07 18:36:46 ----D---- C:\Program Files\Windows Sidebar
2011-05-07 18:36:46 ----D---- C:\Program Files\Windows Portable Devices
2011-05-07 18:36:46 ----D---- C:\Program Files\Windows Photo Viewer
2011-05-07 18:36:46 ----D---- C:\Program Files\Windows Media Player
2011-05-07 18:36:46 ----D---- C:\Program Files\Windows Mail
2011-05-07 18:36:46 ----D---- C:\Program Files\Windows Journal
2011-05-07 18:36:46 ----D---- C:\Program Files\Internet Explorer
2011-05-07 18:36:46 ----D---- C:\Program Files\DVD Maker
2011-05-07 18:36:44 ----D---- C:\windows\servicing
2011-05-07 18:36:44 ----D---- C:\windows\ehome
2011-05-07 18:36:44 ----D---- C:\Program Files\Windows Defender
2011-05-07 18:36:41 ----D---- C:\windows\SYSWOW64\oobe
2011-05-07 18:36:41 ----D---- C:\windows\SYSWOW64\migration
2011-05-07 18:36:41 ----D---- C:\windows\SYSWOW64\da-DK
2011-05-07 18:36:40 ----D---- C:\windows\SYSWOW64\Setup
2011-05-07 18:36:40 ----D---- C:\windows\SYSWOW64\cs-CZ
2011-05-07 18:36:40 ----D---- C:\windows\SYSWOW64\cs
2011-05-07 18:36:40 ----D---- C:\windows\SYSWOW64\AdvancedInstallers
2011-05-07 18:36:37 ----D---- C:\windows\SYSWOW64\sppui
2011-05-07 18:36:37 ----D---- C:\windows\SYSWOW64\manifeststore
2011-05-07 18:36:37 ----D---- C:\windows\SYSWOW64\es-ES
2011-05-07 18:36:36 ----D---- C:\windows\SYSWOW64\wbem
2011-05-07 18:36:36 ----D---- C:\windows\SYSWOW64\migwiz
2011-05-07 18:36:36 ----D---- C:\windows\SYSWOW64\Dism
2011-05-07 18:36:21 ----D---- C:\windows\system32\Setup
2011-05-07 18:36:21 ----D---- C:\windows\system32\oobe
2011-05-07 18:36:21 ----D---- C:\windows\system32\migration
2011-05-07 18:36:21 ----D---- C:\windows\system32\en-US
2011-05-07 18:36:21 ----D---- C:\windows\system32\da-DK
2011-05-07 18:36:21 ----D---- C:\windows\system32\cs-CZ
2011-05-07 18:36:21 ----D---- C:\windows\system32\cs
2011-05-07 18:36:21 ----D---- C:\windows\system32\AdvancedInstallers
2011-05-07 18:36:21 ----D---- C:\windows\PolicyDefinitions
2011-05-07 18:36:20 ----D---- C:\windows\system32\sppui
2011-05-07 18:36:20 ----D---- C:\windows\system32\manifeststore
2011-05-07 18:36:20 ----D---- C:\windows\system32\es-ES
2011-05-07 18:36:20 ----D---- C:\windows\system32\drivers\cs-CZ
2011-05-07 18:36:19 ----D---- C:\windows\system32\wbem
2011-05-07 18:36:18 ----D---- C:\windows\system32\migwiz
2011-05-07 18:36:18 ----D---- C:\windows\system32\Dism
2011-05-07 18:36:02 ----RSD---- C:\windows\Fonts
2011-05-07 18:36:02 ----D---- C:\windows\AppPatch
2011-05-07 18:35:51 ----D---- C:\windows\system32\Boot
2011-05-07 18:32:52 ----A---- C:\windows\SYSWOW64\msclmd.dll
2011-05-07 18:32:52 ----A---- C:\windows\system32\msclmd.dll
2011-05-07 18:21:53 ----SD---- C:\ProgramData\Microsoft
2011-05-07 18:21:35 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-05-07 18:20:44 ----D---- C:\windows\SoftwareDistribution
2011-05-06 18:58:13 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2011-05-01 23:33:25 ----D---- C:\Program Files (x86)\Full Tilt Poker
2011-05-01 17:52:11 ----D---- C:\Program Files (x86)\Holdem Indicator
2011-05-01 13:29:50 ----D---- C:\Users\Paja&Monika\AppData\Roaming\HEM Data
2011-04-26 04:01:11 ----D---- C:\windows\system32\LogFiles
2011-04-24 09:17:10 ----D---- C:\Program Files (x86)\uTorrent
2011-04-23 15:14:10 ----D---- C:\ProgramData\Ubisoft
2011-04-23 14:57:33 ----D---- C:\Program Files (x86)\Ubisoft
2011-04-23 14:57:32 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-04-22 10:16:49 ----D---- C:\Program Files (x86)\Microsoft Silverlight

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2009-08-07 408600]
R0 LPCFilter;LPC Lower Filter Driver; C:\windows\system32\DRIVERS\LPCFilter.sys [2009-07-02 44912]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\windows\System32\Drivers\sptd.sys [2010-07-08 834544]
R1 AvgLdx64;AVG Free AVI Loader Driver x64; C:\windows\System32\Drivers\avgldx64.sys [2010-07-17 269904]
R1 AvgMfx64;AVG Free On-access Scanner Minifilter Driver x64; C:\windows\System32\Drivers\avgmfx64.sys [2010-07-11 35536]
R1 AvgTdiA;AVG Free Network Redirector x64; C:\windows\System32\Drivers\avgtdia.sys [2011-05-06 317520]
R1 funfrm;funfrm; C:\windows\system32\drivers\funfrm.sys [2010-01-24 58896]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 sp_rsdrv2;Spyware Terminator Driver Filter; C:\windows\system32\DRIVERS\stflt.sys [2010-07-07 50696]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2009-05-19 26128]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2010-11-20 80384]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2009-07-01 98344]
R3 btwavdt;Bluetooth AVDT; C:\windows\system32\drivers\btwavdt.sys [2009-07-01 132648]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 35104]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2009-07-01 21160]
R3 enecir;ENE CIR Receiver; C:\windows\system32\DRIVERS\enecir.sys [2009-06-29 70656]
R3 enecirhid;ENE CIR HID Receiver; C:\windows\system32\DRIVERS\enecirhid.sys [2009-05-19 14848]
R3 enecirhidma;ENE CIR HIDmini Filter; C:\windows\system32\DRIVERS\enecirhidma.sys [2008-04-24 6656]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2009-12-17 2222240]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\k57nd60a.sys [2009-06-07 317480]
R3 NETw5s64;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 64 Bit; C:\windows\system32\DRIVERS\NETw5s64.sys [2009-09-15 6952960]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\windows\system32\drivers\nvhda64v.sys [2009-08-11 84000]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2009-07-30 281648]
R3 usbsmi;Lenovo EasyCamera; C:\windows\system32\DRIVERS\SMIksdrv.sys [2009-08-21 197120]
R3 wdmirror;wdmirror; C:\windows\system32\DRIVERS\WDMirror.sys [2009-07-16 11280]
S1 VD_FileDisk;VD_FileDisk; C:\windows\system32\drivers\VD_FileDisk.sys []
S3 actau9w3;actau9w3; C:\windows\system32\drivers\actau9w3.sys []
S3 AVerAF35;AVerMedia A835 USB DVB-T; C:\windows\System32\Drivers\AVerAF35.sys [2009-10-19 511232]
S3 Bridge0;Bridge0; C:\windows\system32\drivers\WDBridge.sys [2009-07-16 79376]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2010-11-20 552448]
S3 Dot4;MS IEEE-1284.4 Driver; C:\windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\windows\system32\drivers\Dot4Prt.sys [2010-11-20 19968]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\windows\system32\DRIVERS\netw5v64.sys [2009-05-14 5435904]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUStor.sys [2009-09-30 225792]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usbscan;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 WimFltr;WimFltr; C:\windows\system32\DRIVERS\wimfltr.sys [2008-08-06 151656]
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
S3 wsvd;wsvd; C:\windows\system32\DRIVERS\wsvd.sys [2009-07-21 121840]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AVerRemote;AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [2009-04-08 344064]
R2 AVerScheduleService;AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [2009-10-09 389120]
R2 avg9wd;AVG Free WatchDog; C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe [2010-07-17 308136]
R2 BcmSqlStartupSvc;Služba spouštění serveru SQL Server aplikace Business Contact Manager; C:\Program Files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe [2008-01-16 30312]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2009-07-01 864032]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\windows\system32\svchost.exe [2009-07-14 27136]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-08-07 354840]
R2 IGRS;IGRS; C:\Program Files (x86)\Lenovo\ReadyComm\common\IGRS.exe [2009-07-14 38152]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2009-10-03 392296]
R2 pgsql-8.3;PostgreSQL Database Server 8.3; C:\Program Files (x86)\PostgreSQL\8.3\bin\pg_ctl.exe [2009-12-10 65536]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 PnkBstrA;PnkBstrA; C:\windows\syswow64\PnkBstrA.exe [2011-03-19 75136]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-09-22 249136]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe [2011-05-14 948775]
R2 SQLBrowser;SQL Server Browser; c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2010-12-10 238944]
R2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2010-12-10 153440]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 hpqcxs08;hpqcxs08; C:\windows\system32\svchost.exe [2009-07-14 27136]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2011-05-14 403240]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 ReadyComm.DirectRouter;ReadyComm.DirectRouter; C:\windows\System32\IgrsSvcs.exe -k IgrsSvcs []
S3 AVG Security Toolbar Service;AVG Security Toolbar Service; C:\Program Files (x86)\AVG\AVG9\Toolbar\ToolbarBroker.exe [2011-03-18 947528]
S3 Lenovo ReadyComm AppSvc;Lenovo ReadyComm AppSvc; C:\Program Files\Lenovo\ReadyComm\AppSvc.exe [2009-08-14 509192]
S3 Lenovo ReadyComm ConnSvc;Lenovo ReadyComm ConnSvc; C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe [2009-09-22 579400]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 MSSQL$MSSMLBIZ;SQL Server (MSSMLBIZ); c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2010-12-10 29293408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PS_MDP;ReadyComm Presentation Space Helper Service; C:\windows\System32\IgrsSvcs.exe -k IgrsSvcs []
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2010-07-09 1255736]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2010-12-10 44384]

-----------------EOF-----------------

Zdravim a pekny den preji

Doporucoval bych zmenu zabezpeceni - AVG nepatri mezi nase favority (vyssi zatez systemu, slabsi detekce). Doporucuji dat si tam Avast ci Aviru

Stahnete OTL (viz muj podpis) a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
• Zaskrtnete okenko Pro vsechny uzivatele
• Zaskrtnete okenko Kontrola na havet "LOP"
• Zaskrtnete okenko Kontrola na havet "Purity"
• Stari souboru zmente z 30 dnu na 7 dnu
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  netsvcs
  drivers32
  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
  c:\windows\*.* /U
  %SYSTEMDRIVE%\*.exe
  %ALLUSERSPROFILE%\Application Data\*.
  %ALLUSERSPROFILE%\Application Data\*.exe /s
  %APPDATA%\*.
  %APPDATA%\*.exe /s
  /md5start
  adp3132.sys
  AGP440.sys
  ahcix86.sys
  ahcix86s.sys
  atapi.sys
  autochk.exe
  cdrom.sys
  cngaudit.dll
  cryptsvc.dll
  eNetHook.dll
  eventlog.dll
  explorer.exe
  hal.dll
  Changer.sys
  iaStor.sys
  iastorv.sys
  IdeChnDr.sys
  isapnp.sys
  JakNDis.sys
  KR10N.sys
  logevent.dll
  lsass.exe
  mv61xx.sys
  ndis.sys
  netlogon.dll
  ntelogon.dll
  nvata.sys
  nvatabus.sys
  nvgts.sys
  nvraid.sys
  nvrd32.sys
  nvstor.sys
  nvstor32.sys
  scecli.dll
  sceclt.dll
  smss.exe
  svchost.exe
  symmpi.sys
  tcpip.sys
  userinit.exe
  vaxscsi.sys
  viamraid.sys
  viasraid.sys
  ViPrt.sys
  winlogon.exe
  ws2_32.dll
  /md5stop
  %systemroot%\*. /mp /s
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\Tasks\*.job /lockedfiles
  %systemroot%\system32\drivers\*.sys /lockedfiles
  %systemroot%\System32\config\*.sav
  %systemroot%\system32\*.dll /lockedfiles
  reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
  reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
  reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c
  %systemroot%\system32\drivers\*.sys /3
  %systemroot%\system32\*.* /3
  CREATERESTOREPOINT

• Kliknete na tlacitko Prohledat
• Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte

Vyskočila mi hláška Cannot create file C:\users\paja&monika\Desktop\cmd.bat. Po kliknutí na Ok nevypadá, že by program něco dále dělal. Dole je napsané Manual File Scan - Looking at file C:\Windows\system32\zipfldr.dll

Ok, pouzijte tento - upraveny - skript

OTL logfile created on: 20.5.2011 23:34:25 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Paja&Monika\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 63,00% Memory free
8,00 Gb Paging File | 6,00 Gb Available in Paging File | 75,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 420,56 Gb Total Space | 96,30 Gb Free Space | 22,90% Space Free | Partition Type: NTFS
Drive D: | 30,25 Gb Total Space | 29,18 Gb Free Space | 96,46% Space Free | Partition Type: NTFS

Computer Name: VENDELÍN | User Name: Paja&Monika | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2011.05.20 17:47:24 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Paja&Monika\Desktop\OTL.exe
PRC - [2011.05.14 17:46:11 | 003,318,784 | ---- | M] (Crawler.com) -- C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
PRC - [2011.05.14 17:46:10 | 002,557,440 | ---- | M] (Crawler.com) -- C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.Exe
PRC - [2011.05.14 10:43:34 | 000,403,240 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe
PRC - [2011.05.01 13:12:36 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2011.03.19 18:19:39 | 000,075,136 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2011.03.14 18:29:14 | 002,071,904 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG9\avgtray.exe
PRC - [2011.01.11 01:25:06 | 001,230,704 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
PRC - [2011.01.05 20:11:29 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Steam\Steam.exe
PRC - [2010.07.17 09:38:11 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe
PRC - [2010.04.01 11:16:20 | 000,357,696 | ---- | M] (DT Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
PRC - [2009.12.10 04:39:04 | 000,065,536 | ---- | M] (PostgreSQL Global Development Group) -- C:\Program Files (x86)\PostgreSQL\8.3\bin\pg_ctl.exe
PRC - [2009.12.10 04:37:16 | 003,690,496 | ---- | M] (PostgreSQL Global Development Group) -- C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe
PRC - [2009.10.22 04:57:40 | 000,845,640 | ---- | M] (Lenovo) -- C:\Program Files\Lenovo\Lenovo SlideNav\SlidebarNavigator\SlidebarNavigator.exe
PRC - [2009.10.21 10:54:12 | 000,081,920 | ---- | M] (Lenovo) -- C:\Program Files\Lenovo\Lenovo SlideNav\SlidebarNavigator\SlidebarDriverAdapter_550vista.exe
PRC - [2009.10.21 10:53:22 | 000,049,152 | ---- | M] (Lenovo) -- C:\Program Files\Lenovo\Lenovo SlideNav\SlidebarNavigator\SlidebarNotifier.exe
PRC - [2009.10.09 13:11:19 | 000,389,120 | R--- | M] () -- C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
PRC - [2009.08.07 07:29:54 | 000,186,904 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2009.08.07 07:29:36 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2009.07.31 21:06:24 | 000,155,648 | R--- | M] () -- C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
PRC - [2009.07.14 16:27:26 | 000,038,152 | ---- | M] (Lenovo Group Limited) -- C:\Program Files (x86)\Lenovo\ReadyComm\common\IGRS.exe
PRC - [2009.07.01 20:54:04 | 000,013,600 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe
PRC - [2009.06.19 11:31:38 | 000,651,264 | R--- | M] (AVerMedia TECHNOLOGIES, Inc.) -- C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
PRC - [2009.04.08 13:49:30 | 000,344,064 | R--- | M] (AVerMedia) -- C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
PRC - [2008.01.16 12:26:38 | 000,030,312 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe


========== Modules (SafeList) ==========

MOD - [2011.05.20 17:47:24 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Paja&Monika\Desktop\OTL.exe
MOD - [2010.11.20 13:55:09 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2009.09.22 20:16:32 | 000,579,400 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe -- (Lenovo ReadyComm ConnSvc)
SRV:64bit: - [2009.08.14 16:22:48 | 000,509,192 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- C:\Program Files\Lenovo\ReadyComm\AppSvc.exe -- (Lenovo ReadyComm AppSvc)
SRV:64bit: - [2009.07.14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009.07.01 20:54:02 | 000,864,032 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe -- (btwdins)
SRV - [2011.05.14 17:46:11 | 000,948,775 | ---- | M] (Crawler.com) [Auto | Running] -- C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe -- (sp_rssrv)
SRV - [2011.05.14 10:43:34 | 000,403,240 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2011.03.19 18:19:39 | 000,075,136 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2011.03.18 08:11:02 | 000,947,528 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\AVG\AVG9\Toolbar\ToolbarBroker.exe -- (AVG Security Toolbar Service)
SRV - [2010.07.17 09:38:11 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe -- (avg9wd)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.12.10 04:39:04 | 000,065,536 | ---- | M] (PostgreSQL Global Development Group) [Auto | Running] -- C:\Program Files (x86)\PostgreSQL\8.3\bin\pg_ctl.exe -- (pgsql-8.3)
SRV - [2009.10.09 13:11:19 | 000,389,120 | R--- | M] () [Auto | Running] -- C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe -- (AVerScheduleService)
SRV - [2009.08.07 07:29:36 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel(R)
SRV - [2009.07.14 16:27:26 | 000,038,152 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files (x86)\Lenovo\ReadyComm\common\IGRS.exe -- (IGRS)
SRV - [2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\windows\SysWow64\IgrsSvcs.exe -- (ReadyComm.DirectRouter)
SRV - [2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\windows\SysWow64\IgrsSvcs.exe -- (PS_MDP)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009.04.08 13:49:30 | 000,344,064 | R--- | M] (AVerMedia) [Auto | Running] -- C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe -- (AVerRemote)
SRV - [2008.01.16 12:26:38 | 000,030,312 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe -- (BcmSqlStartupSvc)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2011.05.06 09:23:36 | 000,317,520 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtdia.sys -- (AvgTdiA)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.07.17 09:37:46 | 000,269,904 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (AvgLdx64)
DRV:64bit: - [2010.07.11 12:51:25 | 000,035,536 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (AvgMfx64)
DRV:64bit: - [2010.07.08 21:06:50 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2010.07.07 11:26:46 | 000,050,696 | ---- | M] (Windows (R) Win 7 DDK provider) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\stflt.sys -- (sp_rsdrv2)
DRV:64bit: - [2009.10.19 03:32:42 | 000,511,232 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AVerAF35.sys -- (AVerAF35)
DRV:64bit: - [2009.09.30 03:58:18 | 000,225,792 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV:64bit: - [2009.09.15 19:40:42 | 006,952,960 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETw5s64.sys -- (NETw5s64) Ovladač adaptéru Intel(R)
DRV:64bit: - [2009.08.21 21:08:50 | 000,197,120 | ---- | M] (SMI) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SMIksdrv.sys -- (usbsmi)
DRV:64bit: - [2009.08.11 21:49:18 | 000,084,000 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2009.08.07 07:24:14 | 000,408,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2009.07.30 12:20:18 | 000,281,648 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2009.07.21 16:20:06 | 000,121,840 | ---- | M] (CyberLink) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wsvd.sys -- (wsvd)
DRV:64bit: - [2009.07.16 13:55:34 | 000,011,280 | ---- | M] (Lenovo) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WDMirror.sys -- (wdmirror)
DRV:64bit: - [2009.07.16 05:38:20 | 000,079,376 | ---- | M] (Lenovo) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WDBridge.sys -- (Bridge0)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.02 16:55:38 | 000,044,912 | ---- | M] (COMPAL ELECTRONIC INC.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\LPCFilter.sys -- (LPCFilter)
DRV:64bit: - [2009.07.01 06:46:52 | 000,098,344 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio)
DRV:64bit: - [2009.07.01 06:46:48 | 000,132,648 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)
DRV:64bit: - [2009.07.01 06:46:40 | 000,021,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid)
DRV:64bit: - [2009.06.29 04:17:00 | 000,070,656 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\enecir.sys -- (enecir)
DRV:64bit: - [2009.06.10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:64bit: - [2009.06.10 22:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.06.07 02:36:46 | 000,317,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a) Broadcom NetLink (TM)
DRV:64bit: - [2009.05.19 15:59:00 | 000,014,848 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\enecirhid.sys -- (enecirhid)
DRV:64bit: - [2009.05.19 15:43:32 | 000,026,128 | ---- | M] (Lenovo Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AcpiVpc.sys -- (ACPIVPC)
DRV:64bit: - [2009.05.14 02:51:40 | 005,435,904 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NETw5v64.sys -- (netw5v64) Intel(R)
DRV:64bit: - [2009.04.07 09:33:08 | 000,035,104 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap)
DRV:64bit: - [2008.08.06 14:32:16 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV:64bit: - [2008.04.24 12:16:00 | 000,006,656 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\enecirhidma.sys -- (enecirhidma)
DRV - [2009.09.30 03:58:18 | 000,225,792 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV - [2006.01.13 15:00:52 | 000,015,872 | ---- | M] (Flint Incorporation) [Kernel | System | Stopped] -- C:\windows\SysWow64\drivers\vd_filedisk.sys -- (VD_FileDisk)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm


IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll ()
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll ()
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-2927811871-1221682460-959869790-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
IE - HKU\S-1-5-21-2927811871-1221682460-959869790-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
IE - HKU\S-1-5-21-2927811871-1221682460-959869790-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
IE - HKU\S-1-5-21-2927811871-1221682460-959869790-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/ [binary data]
IE - HKU\S-1-5-21-2927811871-1221682460-959869790-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://qip.ru
IE - HKU\S-1-5-21-2927811871-1221682460-959869790-1004\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
IE - HKU\S-1-5-21-2927811871-1221682460-959869790-1004\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-2927811871-1221682460-959869790-1004\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll ()
IE - HKU\S-1-5-21-2927811871-1221682460-959869790-1004\..\URLSearchHook: {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\Paja&Monika\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru)
IE - HKU\S-1-5-21-2927811871-1221682460-959869790-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-2927811871-1221682460-959869790-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/ [binary data]
IE - HKU\S-1-5-21-2927811871-1221682460-959869790-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://lenovo.msn.com

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "WebHledani"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://cs.start3.mozilla.com/firefox?cl ... s:official"
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.872
FF - prefs.js..extensions.enabledItems: avg@igeared:6.103.018.001
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: personas@christopher.beard:1.6.2
FF - prefs.js..extensions.enabledItems: {32a1fd71-835e-4b11-8e54-886fda0b4c89}:1.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.1.94
FF - prefs.js..extensions.enabledItems: {6904342A-8307-11DF-A508-4AE2DFD72085}:2.1.1.94
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..keyword.URL: "http://www.webhledani.cz/results.aspx?i=39&tp=ab&q="

FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files (x86)\AVG\AVG9\Firefox [2010.11.25 14:12:37 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\avg@igeared: C:\Program Files (x86)\AVG\AVG9\Toolbar\Firefox\avg@igeared [2011.05.09 17:23:59 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011.01.16 21:01:05 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\html5video [2011.02.23 19:54:27 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa [2011.02.23 19:54:28 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.05.01 13:12:38 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.03.23 19:08:04 | 000,000,000 | ---D | M]

[2010.07.08 21:00:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Paja&Monika\AppData\Roaming\Mozilla\Extensions
[2011.03.23 19:03:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Paja&Monika\AppData\Roaming\Mozilla\Firefox\Profiles\pvapp8um.default\extensions
[2010.09.12 14:20:03 | 000,000,000 | ---D | M] (QipAuthorizer) -- C:\Users\Paja&Monika\AppData\Roaming\Mozilla\Firefox\Profiles\pvapp8um.default\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}
[2011.03.12 21:33:02 | 000,000,000 | ---D | M] (Personas) -- C:\Users\Paja&Monika\AppData\Roaming\Mozilla\Firefox\Profiles\pvapp8um.default\extensions\personas@christopher.beard
[2011.03.23 19:08:05 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2010.07.18 11:48:26 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010.11.19 18:16:27 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011.01.16 01:57:45 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011.03.13 02:08:51 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
File not found (No name found) --
[2011.05.09 17:23:59 | 000,000,000 | ---D | M] ("urn:mozilla:install-manifest" em:id="avg@igeared" em:name="AVG Security Toolbar" em:version="6.103.018.001" em:displayname="AVG Security Toolbar" em:iconURL="chrome://tavgp/skin/logo.ico" em:creator="AVG Technologies" em:description="AVG Security Toolbar" em:homepageURL="http://www.avg.com" >) -- C:\PROGRAM FILES (X86)\AVG\AVG9\TOOLBAR\FIREFOX\AVG@IGEARED
[2011.05.01 13:12:36 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\Mozilla Firefox\components\browsercomps.dll
[2011.02.02 22:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
[2010.12.09 12:47:06 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll
[2011.05.01 13:12:37 | 000,002,208 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\heureka-cz.xml
[2011.05.01 13:12:37 | 000,000,638 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2011.05.01 13:12:37 | 000,001,367 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\seznam-cz.xml
[2011.05.01 13:12:37 | 000,000,654 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2011.05.01 13:12:37 | 000,001,179 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssiea.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll ()
O2 - BHO: (QIPBHO Class) - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\Paja&Monika\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru)
O2 - BHO: (Bing Bar BHO) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll (Microsoft Corporation)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (@C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll ()
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-2927811871-1221682460-959869790-1004\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKU\S-1-5-21-2927811871-1221682460-959869790-1004\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll ()
O4:64bit: - HKLM..\Run: [Energy Management] C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited)
O4:64bit: - HKLM..\Run: [EnergyUtility] C:\Program Files (x86)\Lenovo\Energy Management\utility.exe (Lenovo(beijing) Limited)
O4:64bit: - HKLM..\Run: [EPSON Stylus DX3800 Series] File not found
O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [NvCplDaemon] C:\windows\SysNative\NvCpl.dll (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files (x86)\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [Lenovo SlideNav] C:\Program Files\Lenovo\Lenovo SlideNav\SlidebarNavigator\SlidebarNavigator.exe (Lenovo)
O4 - HKLM..\Run: [OnekeyDM] C:\Program Files (x86)\Lenovo\OnekeyDM\OnekeyDM.exe ()
O4 - HKLM..\Run: [SpywareTerminator] C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe (Crawler.com)
O4 - HKLM..\Run: [UpdateP2GShortCut] C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2927811871-1221682460-959869790-1004..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-2927811871-1221682460-959869790-1004..\Run: [SpywareTerminatorUpdate] C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe (Crawler.com)
O4 - HKU\S-1-5-21-2927811871-1221682460-959869790-1004..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)
O4 - HKU\S-1-5-21-2927811871-1221682460-959869790-1006..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] File not found
O4 - HKU\S-1-5-21-2927811871-1221682460-959869790-1006..\RunOnce: [avg_spchecker] C:\Program Files (x86)\AVG\AVG9\Notification\SPChecker1.exe ()
O4 - HKU\S-1-5-21-2927811871-1221682460-959869790-1006..\RunOnce: [mctadmin] File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm ()
O8:64bit: - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra Button: @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe (PokerStars)
O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Users\Paja&Monika\Desktop\PartyPoker.lnk ()
O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Users\Paja&Monika\Desktop\PartyPoker.lnk ()
O9 - Extra Button: Odeslat do zařízení Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Odeslat do zařízení &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18:64bit: - Protocol\Handler\avgsecuritytoolbar {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgppa.dll (AVG Technologies CZ, s.r.o.)
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Reg Error: Key error. File not found
O18 - Protocol\Handler\avgsecuritytoolbar {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll ()
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O20:64bit: - AppInit_DLLs: (avgrssta.dll) - C:\windows\SysNative\avgrssta.dll (AVG Technologies CZ, s.r.o.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{112e6368-8ac4-11df-b6ef-2c8158c5c31d}\Shell - "" = AutoRun
O33 - MountPoints2\{112e6368-8ac4-11df-b6ef-2c8158c5c31d}\Shell\AutoRun\command - "" = F:\Setup.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*


Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.clmp3enc - C:\Program Files (x86)\Lenovo\Power2Go\CLMP3Enc.ACM (CyberLink Corp.)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\windows\SysWow64\DivX.dll (DivX, Inc.)
Drivers32: vidc.VP60 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com)
Drivers32: vidc.VP61 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com)
Drivers32: vidc.yv12 - C:\windows\SysWow64\DivX.dll (DivX, Inc.)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 7 Days ==========

[2011.05.20 17:47:24 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Users\Paja&Monika\Desktop\OTL.exe
[2011.05.19 18:40:11 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2011.05.19 18:40:10 | 000,000,000 | ---D | C] -- C:\rsit
[2011.05.14 17:46:09 | 000,000,000 | ---D | C] -- C:\Users\Paja&Monika\AppData\Roaming\Spyware Terminator
[2011.05.14 17:46:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Spyware Terminator
[2011.05.14 17:46:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator
[2011.05.14 17:46:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spyware Terminator
[2011.05.14 00:44:45 | 000,000,000 | ---D | C] -- C:\Users\Paja&Monika\PARTYPokerDir
[4 C:\windows\*.tmp files -> C:\windows\*.tmp -> ]
[2 C:\windows\SysWow64\*.tmp files -> C:\windows\SysWow64\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2011.05.20 23:18:25 | 000,013,632 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.05.20 23:18:25 | 000,013,632 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.05.20 23:13:42 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2011.05.20 17:47:24 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Paja&Monika\Desktop\OTL.exe
[2011.05.20 17:42:27 | 076,292,264 | ---- | M] () -- C:\windows\SysNative\drivers\Avg\incavi.avm
[2011.05.20 08:34:29 | 001,601,472 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI
[2011.05.20 08:34:29 | 000,678,234 | ---- | M] () -- C:\windows\SysNative\perfh005.dat
[2011.05.20 08:34:29 | 000,662,950 | ---- | M] () -- C:\windows\SysNative\perfh009.dat
[2011.05.20 08:34:29 | 000,139,670 | ---- | M] () -- C:\windows\SysNative\perfc005.dat
[2011.05.20 08:34:29 | 000,124,144 | ---- | M] () -- C:\windows\SysNative\perfc009.dat
[2011.05.20 08:29:32 | 3216,977,920 | -HS- | M] () -- C:\hiberfil.sys
[2011.05.17 19:44:57 | 000,002,143 | ---- | M] () -- C:\Users\Paja&Monika\Desktop\SitNGo Wizard.lnk
[2011.05.14 17:48:47 | 000,007,606 | ---- | M] () -- C:\Users\Paja&Monika\AppData\Local\Resmon.ResmonCfg
[2011.05.14 17:46:21 | 000,001,122 | ---- | M] () -- C:\Users\Public\Desktop\Spyware Terminator.lnk
[4 C:\windows\*.tmp files -> C:\windows\*.tmp -> ]
[2 C:\windows\SysWow64\*.tmp files -> C:\windows\SysWow64\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011.05.14 17:48:47 | 000,007,606 | ---- | C] () -- C:\Users\Paja&Monika\AppData\Local\Resmon.ResmonCfg
[2011.05.14 17:46:21 | 000,001,122 | ---- | C] () -- C:\Users\Public\Desktop\Spyware Terminator.lnk
[2011.04.13 20:41:49 | 000,159,887 | ---- | C] () -- C:\windows\ScanWiz Uninstaller.exe
[2011.04.09 18:55:28 | 000,179,261 | ---- | C] () -- C:\windows\SysWow64\xlive.dll.cat
[2011.03.19 18:19:40 | 000,189,248 | ---- | C] () -- C:\windows\SysWow64\PnkBstrB.exe
[2011.03.19 18:19:39 | 000,075,136 | ---- | C] () -- C:\windows\SysWow64\PnkBstrA.exe
[2011.03.10 22:06:19 | 000,000,000 | ---- | C] () -- C:\windows\HMHud.INI
[2011.02.23 13:09:51 | 000,004,997 | ---- | C] () -- C:\ProgramData\bltofzsb.qlf
[2011.01.23 22:28:26 | 000,000,064 | ---- | C] () -- C:\Users\Paja&Monika\AppData\Local\SRDownloader.err
[2011.01.23 22:27:11 | 000,000,856 | ---- | C] () -- C:\Users\Paja&Monika\AppData\Local\SRDownloader.nast
[2011.01.16 20:58:00 | 000,180,024 | ---- | C] () -- C:\windows\hpoins28.dat
[2011.01.16 20:58:00 | 000,000,442 | ---- | C] () -- C:\windows\hpomdl28.dat
[2010.08.12 15:15:34 | 000,093,168 | ---- | C] () -- C:\windows\Scan to PDF Uninstaller.exe
[2010.08.12 15:01:49 | 000,092,240 | ---- | C] () -- C:\windows\SysWow64\EPPICPrinterDB.dat
[2010.08.12 15:01:49 | 000,026,154 | ---- | C] () -- C:\windows\SysWow64\EPPICPattern1.dat
[2010.08.12 15:01:49 | 000,024,903 | ---- | C] () -- C:\windows\SysWow64\EPPICPattern3.dat
[2010.08.12 15:01:49 | 000,021,390 | ---- | C] () -- C:\windows\SysWow64\EPPICPattern5.dat
[2010.08.12 15:01:49 | 000,020,148 | ---- | C] () -- C:\windows\SysWow64\EPPICPattern2.dat
[2010.08.12 15:01:49 | 000,011,811 | ---- | C] () -- C:\windows\SysWow64\EPPICPattern4.dat
[2010.08.12 15:01:49 | 000,004,943 | ---- | C] () -- C:\windows\SysWow64\EPPICPattern6.dat
[2010.08.12 15:01:49 | 000,001,146 | ---- | C] () -- C:\windows\SysWow64\EPPICPresetData_DU.dat
[2010.08.12 15:01:49 | 000,001,139 | ---- | C] () -- C:\windows\SysWow64\EPPICPresetData_PT.dat
[2010.08.12 15:01:49 | 000,001,139 | ---- | C] () -- C:\windows\SysWow64\EPPICPresetData_BP.dat
[2010.08.12 15:01:49 | 000,001,136 | ---- | C] () -- C:\windows\SysWow64\EPPICPresetData_ES.dat
[2010.08.12 15:01:49 | 000,001,129 | ---- | C] () -- C:\windows\SysWow64\EPPICPresetData_FR.dat
[2010.08.12 15:01:49 | 000,001,129 | ---- | C] () -- C:\windows\SysWow64\EPPICPresetData_CF.dat
[2010.08.12 15:01:49 | 000,001,120 | ---- | C] () -- C:\windows\SysWow64\EPPICPresetData_IT.dat
[2010.08.12 15:01:49 | 000,001,107 | ---- | C] () -- C:\windows\SysWow64\EPPICPresetData_GE.dat
[2010.08.12 15:01:49 | 000,001,104 | ---- | C] () -- C:\windows\SysWow64\EPPICPresetData_EN.dat
[2010.08.12 15:01:49 | 000,000,099 | ---- | C] () -- C:\windows\SysWow64\PICSDK.ini
[2010.08.12 14:42:35 | 000,000,026 | ---- | C] () -- C:\windows\CDE DX3800EDFNSCHPGT.ini
[2010.07.23 18:55:34 | 000,000,001 | ---- | C] () -- C:\windows\SysWow64\SI.bin
[2010.07.19 19:13:39 | 000,049,152 | R--- | C] () -- C:\windows\SysWow64\AVerIO.dll
[2010.07.19 19:13:39 | 000,003,456 | R--- | C] () -- C:\windows\SysWow64\AVerIO.sys
[2010.07.19 19:13:09 | 000,598,016 | R--- | C] () -- C:\windows\SysWow64\sptlib21.dll
[2010.07.19 19:13:09 | 000,307,200 | R--- | C] () -- C:\windows\SysWow64\sptlib01.dll
[2010.07.19 19:13:09 | 000,294,912 | R--- | C] () -- C:\windows\SysWow64\sptlib11.dll
[2010.07.19 19:13:09 | 000,290,816 | R--- | C] () -- C:\windows\SysWow64\sptlib22.dll
[2010.07.19 19:13:09 | 000,249,856 | R--- | C] () -- C:\windows\SysWow64\sptlib03.dll
[2010.07.19 19:13:09 | 000,225,280 | R--- | C] () -- C:\windows\SysWow64\sptlib02.dll
[2010.07.19 19:13:09 | 000,135,168 | R--- | C] () -- C:\windows\SysWow64\sptlib12.dll
[2010.07.17 11:05:25 | 000,000,088 | ---- | C] () -- C:\ProgramData\profile.xml
[2010.01.24 17:58:37 | 002,110,728 | ---- | C] () -- C:\windows\SysWow64\Apblend.dll
[2010.01.24 17:58:37 | 001,171,456 | ---- | C] () -- C:\windows\SysWow64\PicNotify.dll
[2010.01.24 17:58:04 | 001,044,480 | ---- | C] () -- C:\windows\SysWow64\3DImageRenderer.dll
[2010.01.24 17:56:55 | 000,057,344 | ---- | C] () -- C:\windows\AsfHelper.dll
[2010.01.24 17:51:27 | 000,016,648 | R--- | C] () -- C:\windows\SysWow64\LogAPI.dll
[2010.01.24 17:36:31 | 000,262,144 | ---- | C] () -- C:\windows\SysWow64\SBarHook.DLL
[2010.01.01 13:22:14 | 001,495,982 | ---- | C] () -- C:\windows\SysWow64\PerfStringBackup.INI
[2009.07.14 07:38:36 | 000,067,584 | --S- | C] () -- C:\windows\bootstat.dat
[2009.07.14 04:35:51 | 000,000,741 | ---- | C] () -- C:\windows\SysWow64\NOISE.DAT
[2009.07.14 04:34:42 | 000,215,943 | ---- | C] () -- C:\windows\SysWow64\dssec.dat
[2009.07.14 02:10:29 | 000,043,131 | ---- | C] () -- C:\windows\mib.bin
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\windows\SysWow64\BWContextHandler.dll
[2009.07.13 23:59:36 | 000,982,196 | ---- | C] () -- C:\windows\SysWow64\igkrng500.bin
[2009.07.13 23:59:36 | 000,139,824 | ---- | C] () -- C:\windows\SysWow64\igfcg500.bin
[2009.07.13 23:59:36 | 000,097,448 | ---- | C] () -- C:\windows\SysWow64\igfcg500m.bin
[2009.07.13 23:59:35 | 000,417,344 | ---- | C] () -- C:\windows\SysWow64\igcompkrng500.bin
[2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\windows\SysWow64\msjetoledb40.dll
[2009.06.10 23:26:10 | 000,673,088 | ---- | C] () -- C:\windows\SysWow64\mlang.dat
[2005.10.14 11:56:50 | 000,921,600 | ---- | C] () -- C:\windows\SysWow64\VorbisEnc.dll
[2005.10.14 11:56:50 | 000,237,568 | ---- | C] () -- C:\windows\SysWow64\OggDS.dll
[2005.10.14 11:56:50 | 000,188,416 | ---- | C] () -- C:\windows\SysWow64\vorbis.dll
[2005.10.14 11:56:50 | 000,155,136 | ---- | C] () -- C:\windows\SysWow64\unrar.dll
[2005.10.14 11:56:50 | 000,045,056 | ---- | C] () -- C:\windows\SysWow64\ogg.dll
[2005.10.14 11:56:48 | 003,223,552 | ---- | C] () -- C:\windows\SysWow64\libavcodec.dll
[2005.10.14 11:56:48 | 000,540,672 | ---- | C] () -- C:\windows\SysWow64\libmplayer.dll
[2005.10.14 11:56:48 | 000,266,240 | ---- | C] () -- C:\windows\SysWow64\TomsMoComp_ff.dll
[2005.10.14 11:56:48 | 000,094,208 | ---- | C] () -- C:\windows\SysWow64\libmpeg2_ff.dll
[2005.02.25 07:15:00 | 000,159,744 | ---- | C] () -- C:\windows\SysWow64\EPSPTDV.DLL

========== LOP Check ==========

[2010.10.31 15:11:57 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\2K Games
[2010.10.06 20:19:11 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\BlackBean
[2011.05.17 17:30:21 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\BSplayer
[2010.07.12 20:33:34 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\BSplayer PRO
[2010.12.07 19:25:52 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\CDisplayEx
[2011.02.17 22:48:17 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\CoSoSys
[2010.09.11 14:04:19 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\DAEMON Tools Lite
[2010.10.04 19:11:06 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Electronic Arts
[2011.05.01 13:29:50 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\HEM Data
[2010.10.26 23:16:35 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\HEXelon
[2010.10.01 18:34:12 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Leadertech
[2010.07.08 19:53:32 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Lenovo
[2010.07.08 21:03:15 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Opera
[2011.04.05 20:03:24 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\postgresql
[2011.03.19 18:19:36 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\PunkBuster
[2010.07.17 11:14:08 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\QIP
[2010.09.12 14:20:16 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\QipGuard
[2011.04.08 18:18:24 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Roaming
[2011.01.06 23:58:39 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Rovio
[2010.11.07 22:30:43 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Sports Interactive
[2011.05.19 18:29:51 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Spyware Terminator
[2011.04.23 15:14:10 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Ubisoft
[2011.05.17 22:31:16 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\uTorrent
[2010.07.18 11:48:51 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\VitySoft
[2010.09.04 16:57:30 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Zoner
[2011.02.19 14:25:22 | 000,032,584 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========


< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"DAEMON Tools Lite" = "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun -- [2010.04.01 11:16:20 | 000,357,696 | ---- | M] (DT Soft Ltd)
"Sidebar" = C:\Program Files\Windows Sidebar\sidebar.exe /autoRun -- [2010.11.20 15:25:17 | 001,475,584 | ---- | M] (Microsoft Corporation)
"Steam" = "C:\Program Files (x86)\Steam\steam.exe" -silent -- [2011.01.05 20:11:29 | 001,242,448 | ---- | M] (Valve Corporation)
"SpywareTerminatorUpdate" = "C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe" -- [2011.05.14 17:46:11 | 003,318,784 | ---- | M] (Crawler.com)

< c:\windows\*.* /U >
[4 c:\windows\*.tmp files -> c:\windows\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >
[2007.11.07 09:03:18 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\install.exe

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2010.10.31 15:11:57 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\2K Games
[2010.10.03 23:56:12 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Adobe
[2010.10.06 20:19:11 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\BlackBean
[2011.05.17 17:30:21 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\BSplayer
[2010.07.12 20:33:34 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\BSplayer PRO
[2010.12.07 19:25:52 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\CDisplayEx
[2011.02.17 22:48:17 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\CoSoSys
[2010.07.24 17:38:38 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\CyberLink
[2010.09.11 14:04:19 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\DAEMON Tools Lite
[2011.02.23 22:07:24 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\DivX
[2010.10.04 19:11:06 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Electronic Arts
[2011.05.01 13:29:50 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\HEM Data
[2010.10.26 23:16:35 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\HEXelon
[2011.01.16 21:21:26 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\HP
[2010.07.08 19:53:04 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Identities
[2010.10.31 15:10:00 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\InstallShield
[2010.10.31 15:12:06 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\InstallShield Installation Information
[2010.10.01 18:34:12 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Leadertech
[2010.07.08 19:53:32 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Lenovo
[2010.07.08 20:50:42 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Macromedia
[2009.07.29 09:23:49 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Media Center Programs
[2011.03.13 16:47:36 | 000,000,000 | --SD | M] -- C:\Users\Paja&Monika\AppData\Roaming\Microsoft
[2010.07.08 21:00:25 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Mozilla
[2011.05.12 18:47:28 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Mozilla-Cache
[2010.07.08 21:03:15 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Opera
[2011.04.05 20:03:24 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\postgresql
[2011.03.19 18:19:36 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\PunkBuster
[2010.07.17 11:14:08 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\QIP
[2010.09.12 14:20:16 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\QipGuard
[2011.04.08 18:18:24 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Roaming
[2011.01.06 23:58:39 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Rovio
[2010.09.11 14:10:11 | 000,000,000 | RH-D | M] -- C:\Users\Paja&Monika\AppData\Roaming\SecuROM
[2010.11.07 22:30:43 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Sports Interactive
[2011.05.19 18:29:51 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Spyware Terminator
[2011.04.23 15:14:10 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Ubisoft
[2011.05.17 22:31:16 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\uTorrent
[2010.07.18 11:48:51 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\VitySoft
[2010.07.12 20:18:57 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Winamp
[2010.07.23 20:19:11 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\WinRAR
[2010.09.04 16:57:30 | 000,000,000 | ---D | M] -- C:\Users\Paja&Monika\AppData\Roaming\Zoner

< %APPDATA%\*.exe /s >
[2007.09.17 11:45:08 | 012,708,264 | ---- | M] (Firaxis Games) -- C:\Users\Paja&Monika\AppData\Roaming\2K Games\Firaxis Games\Sid Meier's Civilization 4 Complete\Civilization4.exe
[2007.06.06 20:23:28 | 010,139,200 | ---- | M] (Firaxis Games) -- C:\Users\Paja&Monika\AppData\Roaming\2K Games\Firaxis Games\Sid Meier's Civilization 4 Complete\PitBoss.exe
[2007.10.05 19:01:24 | 012,767,232 | ---- | M] (Firaxis Games) -- C:\Users\Paja&Monika\AppData\Roaming\2K Games\Firaxis Games\Sid Meier's Civilization 4 Complete\Beyond the Sword\Civ4BeyondSword.exe
[2007.09.21 17:57:00 | 011,650,360 | ---- | M] (Firaxis Games) -- C:\Users\Paja&Monika\AppData\Roaming\2K Games\Firaxis Games\Sid Meier's Civilization 4 Complete\Beyond the Sword\Civ4BeyondSword_PitBoss.exe
[2007.09.17 11:45:12 | 012,265,896 | ---- | M] (Firaxis Games) -- C:\Users\Paja&Monika\AppData\Roaming\2K Games\Firaxis Games\Sid Meier's Civilization 4 Complete\Warlords\Civ4Warlords.exe
[2007.06.06 20:23:04 | 009,713,216 | ---- | M] (Firaxis Games) -- C:\Users\Paja&Monika\AppData\Roaming\2K Games\Firaxis Games\Sid Meier's Civilization 4 Complete\Warlords\Civ4Warlords_PitBoss.exe
[2010.10.04 19:11:14 | 000,051,312 | ---- | M] (Electronic Arts) -- C:\Users\Paja&Monika\AppData\Roaming\Electronic Arts\Game Face\1.0.0.18\uninstall.exe
[2010.09.18 05:53:58 | 005,073,240 | ---- | M] (Microsoft Corporation) -- C:\Users\Paja&Monika\AppData\Roaming\Electronic Arts\Game Face\1.0.0.18\vcredist_x86.exe
[2007.02.27 23:08:44 | 000,456,416 | ---- | M] (Macrovision Corporation) -- C:\Users\Paja&Monika\AppData\Roaming\InstallShield Installation Information\{30D1F3D2-54CF-481D-A005-F94B0E98FEEC}\setup.exe
[2010.10.03 23:56:44 | 000,053,632 | ---- | M] (Adobe Systems Inc.) -- C:\Users\Paja&Monika\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
[2010.07.08 21:21:23 | 000,010,134 | R--- | M] () -- C:\Users\Paja&Monika\AppData\Roaming\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe
[2011.02.24 17:07:45 | 000,835,440 | R--- | M] () -- C:\Users\Paja&Monika\AppData\Roaming\PunkBuster\pbsetup\pbsvc.exe
[2010.09.10 14:11:40 | 000,190,928 | ---- | M] () -- C:\Users\Paja&Monika\AppData\Roaming\QipGuard\QipGuard.exe


< MD5 for: AGP440.SYS >
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010.11.20 15:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010.11.20 15:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2009.07.14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2009.07.14 03:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_3de8def0db722996\autochk.exe
[2010.11.20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010.11.20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009.07.14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys
[2010.11.20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010.11.20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010.11.20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: CNGAUDIT.DLL >
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll

< MD5 for: CRYPTSVC.DLL >
[2010.11.20 15:25:59 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=15597883FBE9B056F276ADA3AD87D9AF -- C:\Windows\SysNative\cryptsvc.dll
[2010.11.20 15:25:59 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=15597883FBE9B056F276ADA3AD87D9AF -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_d4259ed3b16ed82a\cryptsvc.dll
[2009.07.14 03:40:24 | 000,175,104 | ---- | M] (Microsoft Corporation) MD5=8C57411B66282C01533CB776F98AD384 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_d1f48b0bb4805490\cryptsvc.dll
[2009.07.14 03:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_75d5ef87fc22e35a\cryptsvc.dll
[2010.11.20 14:18:24 | 000,136,192 | ---- | M] (Microsoft Corporation) MD5=A585BEBF7D054BD9618EDA0922D5484A -- C:\Windows\SysWOW64\cryptsvc.dll
[2010.11.20 14:18:24 | 000,136,192 | ---- | M] (Microsoft Corporation) MD5=A585BEBF7D054BD9618EDA0922D5484A -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_7807034ff91166f4\cryptsvc.dll

< MD5 for: EXPLORER.EXE >
[2011.02.26 08:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011.02.26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009.07.14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011.02.26 07:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011.02.26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011.02.25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011.02.25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011.02.26 08:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010.11.20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2009.08.03 08:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2009.10.31 08:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009.08.03 07:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010.11.20 15:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2009.10.31 08:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009.08.03 07:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009.07.14 03:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009.10.31 08:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2011.02.26 08:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2009.08.03 08:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe

< MD5 for: HAL.DLL >
[2009.07.14 03:47:48 | 000,263,232 | ---- | M] (Microsoft Corporation) MD5=C0A6F6E05E14FBCAEDE7796C8590B7AC -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_071de44b735b3dfc\hal.dll
[2010.11.20 15:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010.11.20 15:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: IASTOR.SYS >
[2009.08.07 07:17:26 | 000,330,264 | ---- | M] (Intel Corporation) MD5=01446278D4563B3013C92830AE6CBB26 -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\driver\IaStor.sys
[2009.08.07 07:24:14 | 000,408,600 | ---- | M] (Intel Corporation) MD5=BBB3B6DF1ABB0FE35802EDE85CC1C011 -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\driver64\IaStor.sys
[2009.08.07 07:24:14 | 000,408,600 | ---- | M] (Intel Corporation) MD5=BBB3B6DF1ABB0FE35802EDE85CC1C011 -- C:\Windows\SysNative\drivers\iaStor.sys
[2009.08.07 07:24:14 | 000,408,600 | ---- | M] (Intel Corporation) MD5=BBB3B6DF1ABB0FE35802EDE85CC1C011 -- C:\Windows\SysNative\DriverStore\FileRepository\iaahci.inf_amd64_neutral_4fa22a1c88c09097\iaStor.sys

< MD5 for: IASTORV.SYS >
[2010.11.20 15:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010.11.20 15:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2011.03.11 08:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\drivers\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys
[2011.03.11 08:23:00 | 000,410,496 | ---- | M] (Intel Corporation) MD5=B75E45C564E944A2657167D197AB29DA -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_0b141c81a16e25e6\iaStorV.sys
[2011.03.11 08:25:49 | 000,410,496 | ---- | M] (Intel Corporation) MD5=BFDC9D75698800CFE4D1698BF2750EA2 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_0bccc8c8ba6985c1\iaStorV.sys
[2009.07.14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys

< MD5 for: ISAPNP.SYS >
[2009.07.14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\SysNative\drivers\isapnp.sys
[2009.07.14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\isapnp.sys
[2009.07.14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\isapnp.sys
[2009.07.14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\isapnp.sys

< MD5 for: LSASS.EXE >
[2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\SysNative\lsass.exe
[2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16385_none_023f7c69767c3edd\lsass.exe
[2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16484_none_023e7e05767d22ad\lsass.exe
[2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.20594_none_02bd4ae48fa2de68\lsass.exe
[2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_04709031736ac277\lsass.exe

< MD5 for: NDIS.SYS >
[2010.11.20 15:33:45 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\SysNative\drivers\ndis.sys
[2010.11.20 15:33:45 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_05ed313632ae9759\ndis.sys
[2009.07.14 03:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys

< MD5 for: NETLOGON.DLL >
[2009.07.14 03:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2010.11.20 15:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
[2010.11.20 15:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
[2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll

< MD5 for: NVRAID.SYS >
[2011.03.11 08:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\SysNative\drivers\nvraid.sys
[2011.03.11 08:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvraid.sys
[2011.03.11 08:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvraid.sys
[2009.07.14 03:48:27 | 000,149,056 | ---- | M] (NVIDIA Corporation) MD5=3E38712941E9BB4DDBEE00AFFE3FED3D -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvraid.sys
[2010.11.20 15:33:48 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvraid.sys
[2010.11.20 15:33:48 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvraid.sys
[2011.03.11 08:19:21 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=666CA16F17914C1CD3616CF16DE0A6EA -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvraid.sys
[2011.03.11 08:23:06 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=A4D9C9A608A97F59307C2F2600EDC6A4 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvraid.sys
[2011.03.11 08:25:53 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=A5C82EB2F72AA004887F90B84A771F73 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvraid.sys

< MD5 for: NVSTOR.SYS >
[2009.07.14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys
[2011.03.11 08:23:06 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=6C1D5F70E7A6A3FD1C90D840EDC048B9 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvstor.sys
[2011.03.11 08:25:53 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=AE274836BA56518E279087363A781214 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvstor.sys
[2011.03.11 08:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010.11.20 15:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010.11.20 15:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys

< MD5 for: SCECLI.DLL >
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SMSS.EXE >
[2009.07.14 03:39:41 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=1911A3356FA3F77CCC825CCBAC038C2A -- C:\Windows\SysNative\smss.exe
[2009.07.14 03:39:41 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=1911A3356FA3F77CCC825CCBAC038C2A -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_082f99a432e2a661\smss.exe

< MD5 for: SVCHOST.EXE >
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2010.11.20 15:33:57 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\SysNative\drivers\tcpip.sys
[2010.11.20 15:33:57 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2010.06.14 08:39:16 | 001,889,152 | ---- | M] (Microsoft Corporation) MD5=542C6767C68C9D6AAACA59436B0D15C2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20733_none_0fd0b57e990e2079\tcpip.sys
[2010.06.14 08:37:36 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=90A2D722CF64D911879D6C4A4F802A4D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16610_none_0f59b7ad7fe2fcc8\tcpip.sys
[2009.07.14 03:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010.11.20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010.11.20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009.07.14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2009.10.28 09:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2009.10.28 08:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

< MD5 for: WS2_32.DLL >
[2010.11.20 15:27:29 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\SysNative\ws2_32.dll
[2010.11.20 15:27:29 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_50ddb631e4f59005\ws2_32.dll
[2009.07.14 03:41:58 | 000,296,448 | ---- | M] (Microsoft Corporation) MD5=7083F463788CB34FCC42F565D56F89E8 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_4eaca269e8070c6b\ws2_32.dll
[2010.11.20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\SysWOW64\ws2_32.dll
[2010.11.20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll
[2009.07.14 03:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_f28e06e62fa99b35\ws2_32.dll

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[2 C:\windows\system32\*.tmp files -> C:\windows\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >
[2 C:\windows\system32\*.tmp files -> C:\windows\system32\*.tmp -> ]

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2 C:\windows\system32\*.tmp files -> C:\windows\system32\*.tmp -> ]

========== Alternate Data Streams ==========

@Alternate Data Stream - 81 bytes -> C:\Program Files (x86)\Jetbull Poker:MID

< End of report >

Druhý soubor:

OTL Extras logfile created on: 20.5.2011 23:34:25 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Paja&Monika\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 63,00% Memory free
8,00 Gb Paging File | 6,00 Gb Available in Paging File | 75,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 420,56 Gb Total Space | 96,30 Gb Free Space | 22,90% Space Free | Partition Type: NTFS
Drive D: | 30,25 Gb Total Space | 29,18 Gb Free Space | 96,46% Space Free | Partition Type: NTFS

Computer Name: VENDELÍN | User Name: Paja&Monika | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software)
.url[@ = InternetShortcut] -- C:\windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software)

[HKEY_USERS\S-1-5-21-2927811871-1221682460-959869790-1004\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{20387B45-18A4-4D48-ABD9-A23D2CBE42B3}" = Dolby Control Center
"{46F4D124-20E5-4D12-BE52-EC177A7A4B42}" = Lenovo OneKey Recovery
"{55D55008-E5F6-47D6-B16F-B2A40D4D145F}" = 64 Bit HP CIO Components Installer
"{5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}" = Windows Live Language Selector
"{790E02A1-145A-3843-8C13-A4F41C9B48B7}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0405-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Czech) 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{96F70DF8-160F-4F9C-9B9E-2A9B439B4EB9}" = Broadcom Gigabit NetLink Controller
"{9ACF3FDB-C8E6-444C-8C64-13A221F7BFFD}" = Microsoft SQL Server Native Client
"{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}" = Lenovo Bluetooth with Enhanced Data Rate Software
"{A00C9114-40E6-4C70-A619-7DF264B23485}" = HP Deskjet F4200 All-In-One Driver Software 13.0 Rel. 3
"{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}" = Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175
"{B636C9B9-A3F2-4DCE-ADCC-72E095018385}" = Microsoft SQL Server VSS Writer
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}" = PlayReady PC Runtime amd64
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"92F4CDC794E6E4E29DC063D292D1C94F6FA1EA1E" = Balíček ovladače systému Windows - Lenovo (ACPIVPC) System (05/19/2009 4.4.0.1)
"Canon LBP2900" = Canon LBP2900
"FFE7D41DF3C645075BB149E21988B63996C34187" = ENE CIR Receiver Driver
"HoldemManager" = Holdem Manager
"HP Imaging Device Functions" = HP Imaging Device Functions 13.0
"HP Photosmart Essential" = HP Photosmart Essential 3.5
"HP Smart Web Printing" = HP Smart Web Printing 4.51
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0
"HPExtendedCapabilities" = HP Customer Participation Program 13.0
"Lenovo EasyCamera" = Lenovo EasyCamera
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"NVIDIA Drivers" = NVIDIA Drivers
"Shop for HP Supplies" = Shop for HP Supplies
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"WinRAR archiver" = WinRAR

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{068B46A0-8858-4CEB-80BC-A4AE787A05FC}" = Windows Live Sync
"{08234a0d-cf39-4dca-99f0-0c5cb496da81}" = Panel nástrojů Bing
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0EF5BEA9-B9D3-46d7-8958-FB69A0BAEACC}" = Status
"{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan
"{1023383E-D9F6-478C-A965-23A4657B3C9A}" = Sacred 2
"{12688FD7-CB92-4A5B-BEE4-5C8E0574434F}" = Utility Common Driver
"{13B792AA-C078-43A4-8A3A-8B12D629940D}" = Counter-Strike 1.6
"{17542DBF-E17C-4562-BC4D-FA3EF3076C45}" = Lenovo ReadyComm 5
"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1
"{1E445925-273D-4186-88A0-B8D1B6B119E2}" = WRC FIA World Rally Championship
"{1EC71BFB-01A3-4239-B6AF-B1AE656B15C0}" = TrayApp
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{20071984-5EB1-4881-8EDB-082532ACEC6D}" = Heroes of Might and Magic V
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{26A24AE4-039D-4CA4-87B4-2F83216021FF}" = Java(TM) 6 Update 24
"{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{2FDBBCEA-62DB-45F4-B6E5-0E1FB2A1F29D}" = Visual C++ 8.0 Runtime Setup Package (x64)
"{2FF8C687-DB7D-4adc-A5DC-57983EC25046}" = DeviceDiscovery
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{363CEA5C-C9D0-45DD-9511-A461DBDEE94B}" = DJ_AIO_03_F4200_Software_Min
"{3C92B2E6-380D-4fef-B4DF-4A3B4B669771}" = Copy
"{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C}" = FIFA 11
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"{4264C020-850B-4F08-ACBE-98205D9C336C}" = Windows Live Writer
"{432282b5-d708-431a-9ada-abbbbac3f205}" = Business Contact Manager pro aplikaci Outlook 2007 SP2
"{434D0831-3E0C-4D03-A5D4-5E1000008400}" = F1 2010
"{43BC46E0-8C63-4026-B16C-049092FDAD54}" = Icy Christmas Screensaver 1.0.9
"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg
"{463F67F4-58D0-4C0D-BBC9-D0CC4E56D1B8}" = Windows Live UX Platform Language Pack
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
"{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}" = UnloadSupport
"{50120000-1105-0000-0000-0000000FF1CE}" = Microsoft Office 2007 Primary Interop Assemblies
"{50300123-F8FC-4B50-B449-E847D04F1BA2}" = Windows Live Messenger
"{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English)
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{64B2D6B3-71AC-45A7-A6A1-2E07ABF58341}" = Windows Live Movie Maker
"{65C0025A-2CDE-43C5-82D0-C7A56EF0DB39}" = Bing Bar Platform
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{681B698F-C997-42C3-B184-B489C6CA24C9}" = HPPhotoSmartDiscLabelContent1
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply
"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox
"{6D0C6BE4-F674-43D2-96BC-3509345108C9}_is1" = PokerStove version 1.23
"{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update
"{71828142-5A24-4BD0-97E7-976DA08CE6CF}" = The Sims™ 3 Luxusní bydlení – Kolekce
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{76C66170-C538-4E77-B54D-48E136B5B533}" = Lenovo ReadyComm 5.0 Service
"{78906B56-0E81-42A7-AC25-F54C946E1538}" = Windows Live Photo Common
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8570BEE8-0CA3-4977-9AB1-80ED93F0513C}" = Assassin's Creed II
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0015-0405-0000-0000000FF1CE}_PROHYBRIDR_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_PROHYBRIDR_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_PROHYBRIDR_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}_PROHYBRIDR_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}_PROHYBRIDR_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_PROHYBRIDR_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_PROHYBRIDR_{294B4278-CF7B-40B9-86A1-2D3FF0C2C524}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_PROHYBRIDR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROHYBRIDR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}_ULTIMATER_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ULTIMATER_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_PROHYBRIDR_{10EC59E5-9BCE-4884-BB1A-E28627220232}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ULTIMATER_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002A-0000-1000-0000000FF1CE}_PROHYBRIDR_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0000-1000-0000000FF1CE}_ULTIMATER_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0405-1000-0000000FF1CE}_PROHYBRIDR_{E12F9D31-4025-4BC6-B1B2-AB262C5580B0}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0409-1000-0000000FF1CE}_ULTIMATER_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_PROHYBRIDR_{E12F9D31-4025-4BC6-B1B2-AB262C5580B0}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ULTIMATER_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ULTIMATER_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0116-0409-1000-0000000FF1CE}_ULTIMATER_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90A40405-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 Web Components
"{910F4A29-1134-49E0-AD8B-56E4A3152BD1}" = The Sims™ 3 Povolání snů
"{91120000-002E-0000-0000-0000000FF1CE}" = Microsoft Office Ultimate 2007
"{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{91120000-0031-0000-0000-0000000FF1CE}" = Microsoft Office Professional Hybrid 2007
"{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B304612-421E-4CC3-84A1-5BAAC1CBE409}" = Onekey Theater
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A939D341-5A04-4E0A-BB55-3E65B386432D}" = Součásti připojení sady Microsoft Office Small Business
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AB78C965-5C67-409B-8433-D7B5BDB12073}" = Windows Live Writer Resources
"{AC76BA86-7AD7-1029-7B44-A90100000001}" = Adobe Reader 9.0.1 - Czech
"{AE1E24C2-E720-42D5-B8E1-48F71A97B4DB}" = Energy Management
"{AEEAE03F-DEB4-461B-ACC2-FFA7BFAA7178}" = SlideBar Driver
"{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR
"{B6E3F2A0-DDBB-4F0A-BA7C-09138605DDAC}" = WRC FIA World Rally Championship
"{B823632F-3B72-4514-8861-B961CE263224}" = PostgreSQL 8.3
"{BA26FFA5-6D47-47DB-BE56-34C357B5F8CC}" = The Sims™ 3 Cestovní horečka
"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations
"{BE4BA698-8533-4F77-9559-C7F3F78C0B05}" = Assassin's Creed Brotherhood
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3
"{C2524280-A5CF-4458-B809-167F13FAB56D}" = F4200
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{C454280F-3C3E-4929-B60E-9E6CED5717E7}" = Windows Live Mail
"{CAE4213F-F797-439D-BD9E-79B71D115BE3}" = HPPhotoGadget
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CFF8B8E8-E086-4DE0-935F-FE22CAB54F80}" = Microsoft Search Enhancement Pack
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.4.4 Game
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D4C9692E-4EFA-4DA0-8B7F-9439466D9E31}" = Full Tilt Poker
"{D79113E7-274C-470B-BD46-01B10219DF6A}" = HPPhotosmartEssential
"{DC158DF7-6B36-4C6F-BC91-109014297994}" = FIFA 11 Demo
"{DC635845-46D3-404B-BCB1-FC4A91091AFA}" = SmartWebPrinting
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E28B1E6F-E0AA-4228-AB89-DB4A0C89D426}" = AVerTV
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{F9835182-794B-4F24-902A-E2CA9D43380F}" = NVIDIA PhysX
"{FB79FDB7-4DE1-453D-99FE-9A880F57380E}" = Windows Live Fotogalerie
"{FE62C88B-425B-4BDE-8B70-CD5AE3B83176}" = Windows Live Essentials
"{FE7AD27A-62B1-44F6-B69C-25D1ECA94F5D}" = Lenovo EasyCamera
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"A-PDF Image to PDF_is1" = A-PDF Image Converter Pro
"AVerMedia A835 USB TV Tuner" = AVerMedia A835 USB TV Tuner 8.0.64.43
"AVG9Uninstall" = AVG Free 9.0
"BSPlayerf" = BS.Player FREE
"BSPlayerp" = BS.Player PRO
"Business Contact Manager" = Business Contact Manager pro aplikaci Outlook 2007 SP2
"CDisplayEx_is1" = CDisplayEx 1.7
"Cities XL 2011" = Cities XL 2011
"Cool's_Codec_pack_4.12" = Codec Pack - All In 1 6.0.3.0
"DivX Setup.divx.com" = DivX Setup
"EADM" = EA Download Manager
"EasyCapture4.0" = EasyCapture
"Episode 1" = Back to the Future The Game - Episode 1
"EPSON Printer and Utilities" = Software tiskárny EPSON
"EPSON Scanner" = EPSON Scan
"Football Manager 2011" = Football Manager 2011
"GFWL_{434D0831-3E0C-4D03-A5D4-5E1000008400}" = F1 2010
"Holdem Indicator_is1" = Holdem Indicator 1.6.9
"HoldemManager" = Holdem Manager
"InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}" = Lenovo OneKey Recovery
"InstallShield_{9B304612-421E-4CC3-84A1-5BAAC1CBE409}" = Onekey Theater
"InstallShield_{AEEAE03F-DEB4-461B-ACC2-FFA7BFAA7178}" = SlideBar Driver
"InstallShield_{E28B1E6F-E0AA-4228-AB89-DB4A0C89D426}" = AVerTV
"Jetbull Poker" = Jetbull Poker
"Lenovo SlideNav" = Lenovo SlideNav
"Magicka_is1" = Magicka
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"Mini Ninjas" = Mini Ninjas 1.0
"Mozilla Firefox 4.0.1 (x86 cs)" = Mozilla Firefox 4.0.1 (x86 cs)
"Oddworld The Oddboxx_is1" = Oddworld The Oddboxx
"OpenAL" = OpenAL
"Opera 11.10.2092" = Opera 11.10
"PartyPoker" = PartyPoker
"POD-Bot 2.5" = POD-Bot 2.5
"PokerStars" = PokerStars
"PokerTracker3" = PokerTracker 3 (remove only)
"PROHYBRIDR" = 2007 Microsoft Office system
"PunkBusterSvc" = PunkBuster Services
"rajče.net_is1" = rajče verze 57 sestavení 190
"Scan to PDF" = Scan to PDF
"ScanWiz" = ScanWiz
"SitNGoWizard" = SitNGo Wizard
"Spyware Terminator_is1" = Spyware Terminator
"Steam App 11170" = Blood Bowl: Dark Elves Edition
"Steam App 16600" = Trials 2: Second Edition
"Steam App 24010" = RailWorks 2
"Steam App 8500" = EVE Online: Tyrannis
"TC UP" = Total Commander Ultima Prime 5.0.0.0
"ULTIMATER" = Microsoft Office Ultimate 2007
"uTorrent" = µTorrent
"Winamp" = Winamp
"WinLiveSuite" = Windows Live Essentials
"ZonerPhotoStudio12_EN_is1" = Zoner Photo Studio 12

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-2927811871-1221682460-959869790-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{30D1F3D2-54CF-481D-A005-F94B0E98FEEC}" = Sid Meier's Civilization 4 Complete
"EA SPORTS Game Face Browser Plugin" = EA SPORTS Game Face Browser Plugin 1.0.0.18
"QIP 2005" = QIP 2005 8095
"QIP Infium" = QIP Infium 2.0.9036
"UnityWebPlayer" = Unity Web Player
"Winamp Detect" = Winamp Detector Plug-in

========== Last 10 Event Log Errors ==========

Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!

< End of report >

Koukam, ze jste se toho pitomeho AVG nevzdal, no jak myslite...

Spustte znovu OTL

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  :otl
  E - HKU\S-1-5-21-2927811871-1221682460-959869790-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
  IE - HKU\S-1-5-21-2927811871-1221682460-959869790-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
  IE - HKU\S-1-5-21-2927811871-1221682460-959869790-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
  IE - HKU\S-1-5-21-2927811871-1221682460-959869790-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/ [binary data]
  IE - HKU\S-1-5-21-2927811871-1221682460-959869790-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://qip.ru
  IE - HKU\S-1-5-21-2927811871-1221682460-959869790-1004\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
  IE - HKU\S-1-5-21-2927811871-1221682460-959869790-1004\..\URLSearchHook: - Reg Error: Key error. File not found
  IE - HKU\S-1-5-21-2927811871-1221682460-959869790-1004\..\URLSearchHook: {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\Paja&Monika\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru)
  IE - HKU\S-1-5-21-2927811871-1221682460-959869790-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/ [binary data]
  FF - prefs.js..browser.search.defaultenginename: "WebHledani"
  FF - prefs.js..keyword.URL: "http://www.webhledani.cz/results.aspx?i=39&tp=ab&q="
  O2 - BHO: (QIPBHO Class) - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\Paja&Monika\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru)
  O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  O3 - HKU\S-1-5-21-2927811871-1221682460-959869790-1004\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
  O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] File not found
  O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] File not found
  O13 - gopher Prefix: missing
  O13 - gopher Prefix: missing
  O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
  O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
  O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
  O18:64bit: - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - Reg Error: Key error. File not found
  O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
  O18:64bit: - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Reg Error: Key error. File not found
  O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
  O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
  O33 - MountPoints2\{112e6368-8ac4-11df-b6ef-2c8158c5c31d}\Shell - "" = AutoRun
  [4 C:\windows\*.tmp files -> C:\windows\*.tmp -> ]
  [2 C:\windows\SysWow64\*.tmp files -> C:\windows\SysWow64\*.tmp -> ]
  @Alternate Data Stream - 81 bytes -> C:\Program Files (x86)\Jetbull Poker:MID
  
  :reg
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  "DAEMON Tools Lite"=-
  "SpywareTerminatorUpdate"=-
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
  "FlashPlayerUpdate"=-
  [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
  "Adobe Reader Speed Launcher"=-
  "HP Software Update"=-
  "DivXUpdate"=-
  "SunJavaUpdateSched"=-
   
  :files
  %windir%\system32\*.tmp.dll /s
  %windir%\system32\SET*.tmp /s
  %windir%\*.tmp
  
  :commands
  [RESETHOSTS]
  [EMPTYTEMP]
  [EMPTYFLASH]

• Nasledne kliknete na Opravit
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Ale ne. Já jsem jen nevěděl, že se ho mám zbavit hned. Vzal jsem to jako doporučení do budoucna, až tady s tím skončíme. Na starém počítači jsem měl Avast, pak jsme se ho pokoušel nainstalovat i sem, ale pamatuju si, že mi to tady nefungovalo. A jediná jiný free antivirus, který jsem tehdy znal byl AVG. Pokusím se tedy ještě před tím skenem ještě jednou o instalaci avastu, případně zkusím tu Aviru.

Avira je anglicky, nebo muzete zkusit ten antivir od microsoftu (MSE), zatim jsou na nej docela kladne ohlasy...

Už se povedlo. AVG je pryč, Avast nainstalovaný. Po instalaci avastu se začalo u vlaješky dole zobrazovat, že windows defender potřebuje zkontrolovat počítač. Jak to že dokud jsem měl AVG, tak jsem ani netušil, že nějaký windows defender mám?

Log:
All processes killed
========== OTL ==========
HKU\S-1-5-21-2927811871-1221682460-959869790-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Search_URL| /E : value set successfully!
HKU\S-1-5-21-2927811871-1221682460-959869790-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Page| /E : value set successfully!
HKU\S-1-5-21-2927811871-1221682460-959869790-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Secondary Start Pages| /E : value set successfully!
HKU\S-1-5-21-2927811871-1221682460-959869790-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKU\S-1-5-21-2927811871-1221682460-959869790-1004\SOFTWARE\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-2927811871-1221682460-959869790-1004\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_USERS\S-1-5-21-2927811871-1221682460-959869790-1004\Software\Microsoft\Internet Explorer\URLSearchHooks\\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}\ deleted successfully.
C:\Users\Paja&Monika\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll moved successfully.
HKU\S-1-5-21-2927811871-1221682460-959869790-1006\SOFTWARE\Microsoft\Internet Explorer\Main\\Secondary Start Pages| /E : value set successfully!
Prefs.js: "WebHledani" removed from browser.search.defaultenginename
Prefs.js: "http://www.webhledani.cz/results.aspx?i=39&tp=ab&q=" removed from keyword.URL
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}\ not found.
File C:\Users\Paja&Monika\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_USERS\S-1-5-21-2927811871-1221682460-959869790-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068}\ not found.
Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\livecall\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{828030A1-22C1-4009-854F-8E305202313F}\ not found.
File {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-help\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{314111c7-a502-11d2-bbca-00c04f8ec294}\ not found.
File {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msnim\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{828030A1-22C1-4009-854F-8E305202313F}\ not found.
File {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\mso-offdap11\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32505114-5902-49B2-880A-1F7738E5A384}\ not found.
File {32505114-5902-49B2-880A-1F7738E5A384} - Reg Error: Key error. File not found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlmailhtml\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03C514A3-1EFB-4856-9F99-10D7BE1653C0}\ not found.
File {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlpg\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324}\ not found.
File {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Reg Error: Key error. File not found not found.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{112e6368-8ac4-11df-b6ef-2c8158c5c31d}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{112e6368-8ac4-11df-b6ef-2c8158c5c31d}\ not found.
C:\windows\1C4551A64743409391E41477CD655043.TMP\WiseCustomCalla.dll deleted successfully.
C:\windows\1C4551A64743409391E41477CD655043.TMP folder deleted successfully.
C:\windows\506DDFBE983F4BC384B865F423B2D798.TMP\WiseCustomCalla.dll deleted successfully.
C:\windows\506DDFBE983F4BC384B865F423B2D798.TMP folder deleted successfully.
C:\windows\7104189AC5924A56AC9E7C0CA135DA3C.TMP\WiseCustomCalla.dll deleted successfully.
C:\windows\7104189AC5924A56AC9E7C0CA135DA3C.TMP folder deleted successfully.
C:\windows\95FC26FB19FD4A96BBB1B1062E8648F5.TMP\WiseCustomCalla.dll deleted successfully.
C:\windows\95FC26FB19FD4A96BBB1B1062E8648F5.TMP folder deleted successfully.
C:\windows\SysWow64\tmp5E7E.tmp deleted successfully.
C:\windows\SysWow64\tmp5E7F.tmp deleted successfully.
ADS C:\Program Files (x86)\Jetbull Poker:MID deleted successfully.
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\SpywareTerminatorUpdate deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\FlashPlayerUpdate not found.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\HP Software Update deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\DivXUpdate deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
========== FILES ==========
File/Folder C:\windows\system32\*.tmp.dll not found.
File/Folder C:\windows\system32\SET*.tmp not found.
File/Folder C:\windows\*.tmp not found.
========== COMMANDS ==========
C:\windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 56504 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Paja&Monika
->Temp folder emptied: 5169938404 bytes
->Temporary Internet Files folder emptied: 310270690 bytes
->Java cache emptied: 8089147 bytes
->FireFox cache emptied: 1057605001 bytes
->Opera cache emptied: 13442301 bytes
->Flash cache emptied: 134319 bytes

User: postgres
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 56504 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 34636074 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 67978 bytes
RecycleBin emptied: 1517494692 bytes

Total Files Cleaned = 7 736,00 mb


[EMPTYFLASH]

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Paja&Monika
->Flash cache emptied: 0 bytes

User: postgres
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.22.3 log created on 05212011_112319

Files\Folders moved on Reboot...
C:\Users\Paja&Monika\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Paja&Monika\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BR5L8G2E\background_button_green_full[1].png moved successfully.
C:\Users\Paja&Monika\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\04K93EBQ\background_banner[1].png moved successfully.
C:\Users\Paja&Monika\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\04K93EBQ\list-item-disc[1].png moved successfully.
C:\Users\Paja&Monika\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\04K93EBQ\list-item-plus[1].png moved successfully.
File move failed. C:\windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

Windows Defender je antipsyware windowsu, AVG ho blokuje pac ma svuj, ale na nic, ten windowsovy je dobry - je to takovy doplnek k Avastu...

OTL nam to pekne procistilo, jeste tomu trosku pomuzem

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner (viz muj podpis)
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za 14 dni

Doporucuji provest defragmentaci disku

• Nejjednodussi (ale nejmene ucinny) zpusob je pomoci utility ve windowsech
  • Kliknete na Tento pocitac, dale na disk kliknete pravym tlacitkem, vyberte Vlastnosti
  • prepnete se do zalozky Nastroje
  • Nyni vidite pomucky Defragmentace - spustte ji kliknutim na Defragmentovat
  • Toto provedte se vsemi disky
• Dalsi moznosti (a mnou doporucenou) je pres programek Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
  • Program stahnete, nainstalujte (dejte fajfku pryc u yahoo toolbaru) a spustte
  • Kliknete na Analyzovat
  • Pokud je ve sloupci Fragmentováno vice jak 5%, doporucuji provest defragmentaci (klik na Defragmentovat)
  • Postup provedte se vsemi disky
• Posledni moznost je pres jednoduchy programek JKDefrag http://www.stahuj.centrum.cz/utility_a_ ... /jkdefrag/
  • Vyhodou programku je, ze se neinstaluje
  • Staci tedy jen stahnout dle verze vaseho OS a rozbalit
  • Nasledne spustit pomoci souboru JKDefrag pripadne JKDefrag64
  • Probehne analyza disku a nasledne i defragmentace

Napiste jak se chova PC