OTL TXT je zde : mimochodem uznávám, že mezi první a poslední krokem jsem něco dělal, ale snažil jsem se to nijak nenarušit včetně restartování, které proběhlo pouze jednou.
------------------------------------------------------------------------
OTL logfile created on: 7/13/2011 3:44:56 AM - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Documents and Settings\Janusz Konieczny\Plocha
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000409 | Country: Spojené státy | Language: ENU | Date Format: M/d/yyyy
1013.23 Mb Total Physical Memory | 366.60 Mb Available Physical Memory | 36.18% Memory free
2.38 Gb Paging File | 1.79 Gb Available in Paging File | 75.26% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 39.07 Gb Total Space | 13.83 Gb Free Space | 35.39% Space Free | Partition Type: NTFS
Drive D: | 106.07 Gb Total Space | 20.62 Gb Free Space | 19.44% Space Free | Partition Type: NTFS
Drive G: | 465.65 Gb Total Space | 1.69 Gb Free Space | 0.36% Space Free | Partition Type: FAT32
Computer Name: N-48D3BEB46A3B4 | User Name: Janusz Konieczny | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days
========== Processes (SafeList) ==========
PRC - [2011/07/13 03:39:16 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Janusz Konieczny\Plocha\OTL.exe
PRC - [2011/06/24 01:34:03 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011/03/08 07:42:49 | 000,273,544 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Real\RealPlayer\Update\realsched.exe
PRC - [2010/09/06 19:56:38 | 000,247,096 | ---- | M] () -- C:\Program Files\ICQ6Toolbar\ICQ Service.exe
PRC - [2010/05/05 17:02:16 | 000,111,928 | R--- | M] (SweetIM Technologies Ltd.) -- C:\Program Files\SweetIM\Messenger\SweetIM.exe
PRC - [2009/09/15 13:56:48 | 000,081,000 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe
PRC - [2009/09/15 13:56:43 | 000,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe
PRC - [2009/09/15 13:56:28 | 000,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
PRC - [2009/09/15 13:54:13 | 000,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2009/09/15 13:49:40 | 000,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
PRC - [2008/10/15 18:34:10 | 000,051,712 | ---- | M] (TODO: <Company name>) -- C:\Program Files\MSI\EasyFace Logon\autolock\OpenChmAp.exe
PRC - [2008/10/09 11:19:00 | 000,688,128 | ---- | M] (Mirco-Star International CO., LTD.) -- C:\Program Files\System Control Manager\MGSysCtrl.exe
PRC - [2008/08/26 17:52:14 | 000,159,744 | ---- | M] () -- C:\Program Files\System Control Manager\MSIService.exe
PRC - [2008/04/14 14:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008/02/22 11:04:42 | 002,938,184 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
PRC - [2008/01/22 21:13:08 | 000,288,072 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe
PRC - [2007/10/29 15:30:14 | 000,278,528 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
PRC - [2007/10/04 19:39:42 | 000,077,824 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
PRC - [2007/09/28 17:05:16 | 000,128,360 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
PRC - [2004/05/13 03:18:22 | 000,049,152 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Hewlett-Packard\HP Software Update\hpwuSchd2.exe
========== Modules (SafeList) ==========
MOD - [2011/07/13 03:39:16 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Janusz Konieczny\Plocha\OTL.exe
MOD - [2011/03/08 07:43:19 | 000,040,448 | ---- | M] (RealNetworks, Inc.) -- C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\Chrome\Hook\rpchromebrowserrecordhelper.dll
MOD - [2010/05/05 17:02:16 | 000,023,864 | R--- | M] (SweetIM Technologies Ltd.) -- C:\Program Files\SweetIM\Messenger\mgAdaptersProxy.dll
MOD - [2008/07/29 08:05:08 | 000,655,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcr90.dll
MOD - [2008/07/29 08:05:08 | 000,572,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcp90.dll
MOD - [2008/04/14 14:00:00 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
MOD - [2006/07/11 18:35:38 | 000,348,160 | ---- | M] (Microsoft Corporation) -- C:\Program Files\SweetIM\Messenger\msvcr71.dll
========== Win32 Services (SafeList) ==========
SRV - File not found [Auto | Stopped] -- -- (StarWindServiceAE)
SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt)
SRV - [2010/09/06 19:56:38 | 000,247,096 | ---- | M] () [Auto | Running] -- C:\Program Files\ICQ6Toolbar\ICQ Service.exe -- (ICQ Service)
SRV - [2009/10/20 20:19:48 | 000,117,264 | ---- | M] (CACE Technologies, Inc.) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental)
SRV - [2009/09/15 13:56:43 | 000,138,680 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus)
SRV - [2009/09/15 13:56:28 | 000,254,040 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner)
SRV - [2009/09/15 13:54:13 | 000,352,920 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner)
SRV - [2009/09/15 13:49:40 | 000,018,752 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv)
SRV - [2009/09/02 02:45:59 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2008/08/26 17:52:14 | 000,159,744 | ---- | M] () [Auto | Running] -- C:\Program Files\System Control Manager\MSIService.exe -- (Micro Star SCM)
SRV - [2007/09/28 17:05:16 | 000,128,360 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
========== Driver Services (SafeList) ==========
DRV - [2010/06/24 13:46:12 | 000,028,256 | ---- | M] (Applian Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\appliand.sys -- (appliandMP)
DRV - [2010/06/24 13:46:12 | 000,028,256 | ---- | M] (Applian Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\appliand.sys -- (appliand)
DRV - [2009/10/20 20:19:44 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\npf.sys -- (NPF)
DRV - [2009/09/15 13:56:14 | 000,094,160 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2009/09/15 13:55:30 | 000,114,768 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2009/09/15 13:55:19 | 000,020,560 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2009/09/15 13:54:30 | 000,052,368 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2009/09/15 13:54:21 | 000,023,152 | ---- | M] (ALWIL Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2009/09/15 13:53:24 | 000,027,408 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2009/02/15 20:31:08 | 000,717,296 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2008/10/21 08:18:32 | 001,337,984 | R--- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\athw.sys -- (AR5416)
DRV - [2008/10/07 08:06:34 | 000,158,720 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTS5121.sys -- (RSUSBSTOR)
DRV - [2008/09/09 12:07:36 | 004,813,824 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2008/08/22 12:25:14 | 000,308,608 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rtl8187Se.sys -- (rtl8187Se)
DRV - [2008/07/16 06:36:56 | 000,024,104 | R--- | M] (Sony Ericsson) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\emc2scard.sys -- (Sony_EricssonWWSC)
DRV - [2008/07/14 15:33:50 | 000,430,080 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\emc2mdm2.sys -- (emc2mdm2)
DRV - [2008/07/14 15:33:50 | 000,402,816 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\emc2unic.sys -- (emc2unic) Ericsson F3507g WMC 1.0 Network Adapter (WDM)
DRV - [2008/07/14 15:33:50 | 000,385,536 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\emc2mdm.sys -- (emc2mdm)
DRV - [2008/07/14 15:33:50 | 000,376,960 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\emc2card.sys -- (emc2card)
DRV - [2008/07/14 15:33:50 | 000,025,856 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\emc2nd5.sys -- (emc2nd5) Ericsson F3507g WMC 1.0 Network Adapter (NDIS)
DRV - [2008/07/14 15:33:50 | 000,014,976 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\emc2mdfl2.sys -- (emc2mdfl2)
DRV - [2008/07/14 15:33:50 | 000,014,976 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\emc2mdfl.sys -- (emc2mdfl)
DRV - [2008/07/14 15:33:48 | 000,300,544 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\emc2bus.sys -- (emc2bus) Ericsson F3507g WMC Composite Device driver (WDM)
DRV - [2008/07/10 06:28:16 | 000,072,232 | R--- | M] (Ericsson AB) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\emc2gps.sys -- (emc2gps)
DRV - [2008/05/07 13:31:16 | 000,106,368 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2008/02/15 16:01:06 | 000,131,712 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tosrfbd.sys -- (tosrfbd)
DRV - [2008/01/31 16:55:06 | 000,074,240 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Tosrfhid.sys -- (Tosrfhid)
DRV - [2008/01/22 21:57:48 | 000,054,144 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\TosRfSnd.sys -- (TosRfSnd)
DRV - [2007/11/29 10:45:44 | 000,036,608 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tosrfbnp.sys -- (tosrfbnp)
DRV - [2007/10/18 15:25:00 | 000,041,856 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tosrfusb.sys -- (Tosrfusb)
DRV - [2007/10/02 12:43:22 | 000,064,128 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tosrfcom.sys -- (Tosrfcom)
DRV - [2007/09/25 16:59:46 | 000,015,152 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\MediaCoder\SysInfo.sys -- (CrystalSysInfo)
DRV - [2006/10/10 20:33:00 | 000,041,600 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tosporte.sys -- (tosporte)
DRV - [2005/01/07 06:42:00 | 000,018,612 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tosrfnds.sys -- (tosrfnds)
DRV - [2004/12/23 05:47:10 | 000,027,392 | R--- | M] (Ulead Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ULCDRHlp.sys -- (ULCDRHlp)
DRV - [2004/09/22 15:10:54 | 000,029,728 | ---- | M] (ZTekWare.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\OCDE.sys -- (OCDE)
DRV - [2002/05/06 12:01:10 | 000,028,320 | ---- | M] (Adaptec) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\aspi32.sys -- (Aspi32)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKU\.DEFAULT\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-18\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.msi.com.tw
IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.msi.com.tw
IE - HKU\S-1-5-21-2944605962-562349552-2773569197-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://start.icq.com/
IE - HKU\S-1-5-21-2944605962-562349552-2773569197-1005\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-2944605962-562349552-2773569197-1005\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKU\S-1-5-21-2944605962-562349552-2773569197-1005\..\URLSearchHook: {e6570cd8-9978-4621-b1f9-6a62436f0466} - C:\Program Files\Softonic_VLC_EN\prxtbSof0.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-2944605962-562349552-2773569197-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2944605962-562349552-2773569197-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaultthis.engineName: "Softonic VLC EN Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "
http://search.babylon.com/web/{searchTe ... h&AF=14542"
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.startup.homepage: "
http://start.icq.com/"
FF - prefs.js..extensions.enabledItems:
jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}:2.6.0.15
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.7
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.2
FF - prefs.js..keyword.URL: "
http://search.icq.com/search/afe_result ... r=1.1.7&q="
FF - prefs.js..network.proxy.no_proxies_on: "*.local"
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.633: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.633: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.633: C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.633: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011/03/08 07:43:20 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.18\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/06/24 01:34:07 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.18\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/06/24 01:34:07 | 000,000,000 | ---D | M]
[2009/01/10 16:39:02 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Mozilla\Extensions
[2011/07/12 22:37:30 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Mozilla\Firefox\Profiles\iii472p4.default\extensions
[2009/08/14 16:55:08 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Mozilla\Firefox\Profiles\iii472p4.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/11/10 15:17:37 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Mozilla\Firefox\Profiles\iii472p4.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2009/08/05 01:57:55 | 000,000,000 | ---D | M] (BitComet Video Downloader) -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Mozilla\Firefox\Profiles\iii472p4.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}
[2010/08/02 07:06:30 | 000,000,000 | ---D | M] (myBabylon English Toolbar) -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Mozilla\Firefox\Profiles\iii472p4.default\extensions\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}
[2010/01/22 20:56:04 | 000,000,000 | ---D | M] (Softonic VLC EN Toolbar) -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Mozilla\Firefox\Profiles\iii472p4.default\extensions\{e6570cd8-9978-4621-b1f9-6a62436f0466}
[2009/08/04 17:13:44 | 000,000,892 | ---- | M] () -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Mozilla\Firefox\Profiles\iii472p4.default\searchplugins\conduit.xml
[2011/07/10 22:10:57 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Mozilla\Firefox\Profiles\iii472p4.default\searchplugins\icqplugin-1.xml
[2011/03/16 14:50:30 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Mozilla\Firefox\Profiles\iii472p4.default\searchplugins\icqplugin-2.xml
[2011/03/16 17:27:25 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Mozilla\Firefox\Profiles\iii472p4.default\searchplugins\icqplugin-3.xml
[2011/05/08 08:48:34 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Mozilla\Firefox\Profiles\iii472p4.default\searchplugins\icqplugin-4.xml
[2011/06/24 01:34:33 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Mozilla\Firefox\Profiles\iii472p4.default\searchplugins\icqplugin-5.xml
[2010/11/10 15:17:37 | 000,000,168 | ---- | M] () -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Mozilla\Firefox\Profiles\iii472p4.default\searchplugins\icqplugin.gif
[2010/11/10 15:17:37 | 000,000,618 | ---- | M] () -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Mozilla\Firefox\Profiles\iii472p4.default\searchplugins\icqplugin.src
[2011/03/09 08:43:38 | 000,001,056 | ---- | M] () -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Mozilla\Firefox\Profiles\iii472p4.default\searchplugins\icqplugin.xml
[2011/07/12 22:37:31 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ALL USERS\DATA APLIKACĂ\REAL\REALPLAYER\BROWSERRECORDPLUGIN\FIREFOX\EXT
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\JANUSZ KONIECZNY\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\III472P4.DEFAULT\EXTENSIONS\{20A82645-C095-46ED-80E3-08825760534B}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\JANUSZ KONIECZNY\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\III472P4.DEFAULT\EXTENSIONS\{800B5000-A755-47E1-992B-48A1C1357F07}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\JANUSZ KONIECZNY\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\III472P4.DEFAULT\EXTENSIONS\{B2E293EE-FD7E-4C71-A714-5F4750D8D7B7}
[2010/03/26 23:38:26 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2008/11/11 09:38:54 | 000,663,552 | ---- | M] (BitComet) -- C:\Program Files\mozilla firefox\plugins\npBitCometAgent.dll
[2010/08/02 07:06:23 | 000,002,226 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2010/07/27 20:38:06 | 000,000,638 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2010/07/27 20:38:06 | 000,001,687 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\mall-cz.xml
[2010/07/27 20:38:06 | 000,001,367 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2010/07/27 20:38:06 | 000,000,654 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2010/07/27 20:38:06 | 000,001,179 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml
O1 HOSTS File: ([2011/04/01 13:24:00 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll (BitComet)
O2 - BHO: (Softonic VLC EN Toolbar) - {e6570cd8-9978-4621-b1f9-6a62436f0466} - C:\Program Files\Softonic_VLC_EN\prxtbSof0.dll (Conduit Ltd.)
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\Janusz Konieczny\Data aplikací\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.)
O3 - HKLM\..\Toolbar: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKLM\..\Toolbar: (Softonic VLC EN Toolbar) - {e6570cd8-9978-4621-b1f9-6a62436f0466} - C:\Program Files\Softonic_VLC_EN\prxtbSof0.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-2944605962-562349552-2773569197-1005\..\Toolbar\WebBrowser: (Softonic VLC EN Toolbar) - {E6570CD8-9978-4621-B1F9-6A62436F0466} - C:\Program Files\Softonic_VLC_EN\prxtbSof0.dll (Conduit Ltd.)
O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [CNAP2 Launcher] C:\WINDOWS\system32\spool\drivers\w32x86\3\CNAP2LAK.EXE (CANON INC.)
O4 - HKLM..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe (HP)
O4 - HKLM..\Run: [MGSysCtrl] C:\Program Files\System Control Manager\MGSysCtrl.exe (Mirco-Star International CO., LTD.)
O4 - HKLM..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [UpdatePDRShortCut] C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKU\S-1-5-21-2944605962-562349552-2773569197-1005..\Run: [AdobeBridge] File not found
O4 - HKU\S-1-5-21-2944605962-562349552-2773569197-1005..\Run: [PCSpeedUp] File not found
O4 - HKU\S-1-5-21-2944605962-562349552-2773569197-1005..\Run: [Uniblue SpeedUpMyPC] C:\Program Files\Uniblue\SpeedUpMyPC 3\SpeedUpMyPC.exe (Uniblue Software)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2944605962-562349552-2773569197-1005\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2944605962-562349552-2773569197-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-2944605962-562349552-2773569197-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-2944605962-562349552-2773569197-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: + Offline &Explorer: Download the link - C:\Program Files\Offline Explorer\Add_UrlO.htm ()
O8 - Extra context menu item: + Offline E&xplorer: Download the current page - C:\Program Files\Offline Explorer\Add_AllO.htm ()
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - C:\Program Files\BitComet\BitComet.exe (
www.BitComet.com)
O8 - Extra context menu item: Stáhnout všechna videa s použitím BitCometu - C:\Program Files\BitComet\BitComet.exe (
www.BitComet.com)
O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - C:\Program Files\BitComet\BitComet.exe (
www.BitComet.com)
O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll (BitComet)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71}
http://download.microsoft.com/download/ ... vc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {41564D57-9980-0010-8000-00AA00389B71}
http://download.microsoft.com/download/ ... mvadvd.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 146.102.167.167 146.102.16.1 146.102.16.2
O18 - Protocol\Handler\cetihpz {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Janusz Konieczny\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Janusz Konieczny\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005/01/06 19:09:14 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009/01/01 18:54:38 | 000,000,000 | R--D | M] - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2009/01/01 18:54:38 | 000,000,000 | R--D | M] - D:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2009/01/01 17:47:56 | 000,000,000 | R--D | M] - G:\autorun.inf -- [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
Drivers32: msacm.ac3acm - C:\WINDOWS\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.alf2cd - C:\WINDOWS\System32\alf2cd.acm (NCT Company)
Drivers32: msacm.dvacm - C:\Program Files\Common Files\Ulead Systems\vio\DVACM.acm (Ulead Systems, Inc.)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3fhg - C:\WINDOWS\System32\mp3fhg.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.scg726 - C:\WINDOWS\System32\Scg726.acm (SHARP Corporation)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: msacm.voxacm160 - C:\WINDOWS\System32\vct3216.acm (Voxware, Inc.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\WINDOWS\System32\divx.dll (DivXNetworks, Inc.)
Drivers32: vidc.dvsd - C:\WINDOWS\System32\mcdvd_32.dll (MainConcept)
Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll ()
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: vidc.xvid - C:\WINDOWS\System32\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\WINDOWS\System32\yv12vfw.dll (
www.helixcommunity.org)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 7 Days ==========
[2011/07/13 03:39:12 | 000,579,584 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Janusz Konieczny\Plocha\OTL.exe
[2011/07/12 19:07:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Janusz Konieczny\Local Settings\Data aplikací\Temp
[2003/02/21 05:42:22 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\Program Files\msvcr71.dll
========== Files - Modified Within 7 Days ==========
[2011/07/13 03:39:16 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Janusz Konieczny\Plocha\OTL.exe
[2011/07/13 03:28:04 | 000,206,336 | ---- | M] () -- C:\Documents and Settings\Janusz Konieczny\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/07/13 03:26:31 | 000,000,308 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-2944605962-562349552-2773569197-1005.job
[2011/07/13 03:26:31 | 000,000,300 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-2944605962-562349552-2773569197-1005.job
[2011/07/12 19:14:01 | 001,008,041 | ---- | M] () -- C:\Documents and Settings\Janusz Konieczny\Plocha\rkill.com
[2011/07/12 18:51:57 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/07/12 18:51:52 | 1062,526,976 | -HS- | M] () -- C:\hiberfil.sys
[2011/07/12 18:33:23 | 000,435,902 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/07/12 18:33:22 | 000,432,626 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2011/07/12 18:33:22 | 000,079,516 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2011/07/12 18:33:22 | 000,068,606 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011/07/12 15:19:09 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/07/12 00:29:33 | 000,004,078 | ---- | M] () -- C:\WINDOWS\wincmd.ini
[2011/07/12 00:29:05 | 000,001,776 | ---- | M] () -- C:\WINDOWS\wcx_ftp.ini
[2011/07/11 20:28:46 | 000,002,561 | ---- | M] () -- C:\Documents and Settings\Janusz Konieczny\Plocha\Microsoft Office Word 2003.lnk
========== Files Created - No Company Name ==========
[2011/07/12 19:13:59 | 001,008,041 | ---- | C] () -- C:\Documents and Settings\Janusz Konieczny\Plocha\rkill.com
[2011/07/12 12:39:43 | 000,000,300 | ---- | C] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-2944605962-562349552-2773569197-1005.job
[2011/07/12 09:42:32 | 000,000,854 | ---- | C] () -- C:\Documents and Settings\Janusz Konieczny\Plocha\Adobe InDesign CS4.lnk
[2011/04/25 15:57:20 | 000,004,489 | ---- | C] () -- C:\Documents and Settings\Janusz Konieczny\Local Settings\Data aplikací\SRDownloader.err
[2011/04/01 12:43:49 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2011/04/01 12:43:49 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2011/04/01 12:43:49 | 000,089,088 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2011/04/01 12:43:49 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2011/04/01 12:43:49 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010/12/22 23:42:21 | 000,000,598 | ---- | C] () -- C:\WINDOWS\videotoaudio.ini
[2010/12/22 23:41:45 | 000,000,005 | ---- | C] () -- C:\WINDOWS\System32\SySatm.dat
[2010/12/09 03:31:57 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010/11/01 12:25:46 | 000,609,344 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
[2010/11/01 12:24:37 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010/11/01 12:24:34 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010/08/02 06:34:36 | 000,129,024 | ---- | C] () -- C:\WINDOWS\System32\AVERM.dll
[2010/02/18 23:47:42 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\p2fContextMenu.dll
[2009/12/13 21:07:12 | 000,000,053 | ---- | C] () -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\AVSMediaPlayer.m3u
[2009/12/13 21:02:16 | 000,134,144 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009/10/28 18:36:45 | 000,047,221 | ---- | C] () -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\mdbu.bin
[2009/10/20 20:19:30 | 000,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll
[2009/08/07 23:46:06 | 000,001,434 | ---- | C] () -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\SAS7_000.DAT
[2009/06/14 11:10:51 | 000,299,008 | ---- | C] () -- C:\WINDOWS\Uninstall_tkexe.exe
[2009/05/18 15:18:16 | 000,001,776 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2009/02/16 18:23:33 | 000,000,390 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009/02/15 19:36:23 | 000,100,560 | ---- | C] () -- C:\WINDOWS\System32\drivers\VBoxDrv.sys
[2009/01/12 01:51:35 | 000,004,741 | ---- | C] () -- C:\WINDOWS\WTRAN32.INI
[2009/01/10 16:39:03 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009/01/09 00:43:20 | 000,003,914 | ---- | C] () -- C:\WINDOWS\WDICT32.INI
[2009/01/01 18:18:33 | 000,004,078 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2008/12/31 14:49:37 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll
[2008/12/31 11:27:58 | 000,010,625 | ---- | C] () -- C:\WINDOWS\hpdj3740.ini
[2008/12/28 19:25:42 | 000,103,474 | ---- | C] () -- C:\WINDOWS\hpoins04.dat
[2008/12/28 19:25:42 | 000,017,176 | ---- | C] () -- C:\WINDOWS\hpomdl04.dat
[2008/12/25 08:28:57 | 000,206,336 | ---- | C] () -- C:\Documents and Settings\Janusz Konieczny\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007/12/21 17:46:32 | 000,118,784 | ---- | C] () -- C:\WINDOWS\System32\TosBtAcc.dll
[2005/10/14 12:56:50 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2005/10/14 12:56:50 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\VorbisEnc.dll
[2005/10/14 12:56:50 | 000,790,528 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2005/10/14 12:56:50 | 000,778,240 | ---- | C] () -- C:\WINDOWS\System32\DivXsm.exe
[2005/10/14 12:56:50 | 000,344,064 | ---- | C] () -- C:\WINDOWS\System32\xvid.dll
[2005/10/14 12:56:50 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll
[2005/10/14 12:56:50 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll
[2005/10/14 12:56:50 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2005/10/14 12:56:50 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll
[2005/07/22 22:30:18 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\TosCommAPI.dll
[2005/01/07 02:53:41 | 000,001,168 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2005/01/07 02:53:38 | 000,432,626 | ---- | C] () -- C:\WINDOWS\System32\perfh005.dat
[2005/01/07 02:53:38 | 000,269,162 | ---- | C] () -- C:\WINDOWS\System32\perfi005.dat
[2005/01/07 02:53:38 | 000,079,516 | ---- | C] () -- C:\WINDOWS\System32\perfc005.dat
[2005/01/07 02:53:38 | 000,032,072 | ---- | C] () -- C:\WINDOWS\System32\perfd005.dat
[2005/01/07 02:53:34 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2005/01/07 02:53:33 | 000,435,902 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2005/01/07 02:53:33 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2005/01/07 02:53:33 | 000,068,606 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2005/01/07 02:53:33 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2005/01/07 02:53:32 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2005/01/07 02:53:32 | 000,004,628 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2005/01/07 02:53:32 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2005/01/07 02:53:30 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2005/01/07 02:53:30 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2005/01/07 02:53:29 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2005/01/07 02:53:27 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2005/01/07 02:44:37 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2005/01/07 01:14:01 | 000,000,000 | ---- | C] () -- C:\WINDOWS\tosOBEX.INI
[2005/01/07 00:44:50 | 000,147,456 | R--- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4906.dll
[2005/01/06 20:01:21 | 000,004,249 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2005/01/06 20:00:23 | 002,345,344 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2005/01/06 19:11:53 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2005/01/06 19:07:00 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2004/05/13 03:18:28 | 000,005,428 | ---- | C] () -- C:\WINDOWS\hpfmdl_s04_main.dat
[2004/05/13 03:18:28 | 000,000,362 | ---- | C] () -- C:\WINDOWS\hpfins_s04_main.dat
[2001/01/12 11:49:38 | 000,021,504 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll
========== LOP Check ==========
[2009/10/30 17:38:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Canon
[2005/01/07 01:00:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Ericsson
[2009/10/28 17:15:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\HappyFoto
[2010/11/10 15:17:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ICQ
[2009/08/07 00:29:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Nuance
[2009/07/23 01:42:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\OpenFM
[2010/08/02 07:07:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\SweetIM
[2010/08/20 23:59:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TEMP
[2005/01/07 02:03:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Ulead Systems
[2005/01/07 02:03:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Data aplikací\Ulead Systems
[2009/05/06 17:44:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Alien Skin
[2010/08/02 03:33:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\avidemux
[2010/10/31 19:20:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Broad Intelligence
[2008/12/25 15:53:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Ericsson
[2009/11/24 01:46:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\fizzy
[2010/10/31 16:37:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\FLV Extract
[2011/05/31 18:05:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\ICQ
[2010/11/01 12:03:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Leawo
[2011/07/01 23:20:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\My Streaming Media
[2009/07/12 00:52:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Nowe Gadu-Gadu
[2009/08/07 00:32:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Nuance
[2011/07/03 22:14:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Offline Explorer
[2010/10/31 19:20:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\OpenCandy
[2009/07/23 01:42:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\OpenFM
[2011/07/12 19:08:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\PriceGong
[2010/09/02 01:00:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Replay Media Catcher 4
[2011/07/01 12:27:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Thinstall
[2005/01/07 02:03:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Ulead Systems
[2011/06/30 17:31:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Uniblue
[2011/07/01 13:04:20 | 000,000,292 | ---- | M] () -- C:\WINDOWS\Tasks\Uniblue SpeedUpMyPC Nag.job
[2011/07/01 13:04:19 | 000,000,414 | ---- | M] () -- C:\WINDOWS\Tasks\Uniblue SpeedUpMyPC.job
========== Purity Check ==========
========== Custom Scans ==========
< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"AdobeUpdater" = "C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe" -- [2009/02/12 21:26:53 | 002,356,088 | ---- | M] (Adobe Systems Incorporated)
"PCSpeedUp" = "C:\Program Files\Zrychleni Pocitace\PCSpeedUp.exe"
"ctfmon.exe" = C:\WINDOWS\system32\ctfmon.exe -- [2008/04/14 14:00:00 | 000,015,360 | ---- | M] (Microsoft Corporation)
"AdobeBridge" =
"Uniblue SpeedUpMyPC" = C:\Program Files\Uniblue\SpeedUpMyPC 3\SpeedUpMyPC.exe -s -- [2007/09/10 11:43:40 | 009,495,832 | ---- | M] (Uniblue Software)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\AdobeUpdater]
"" =
< c:\windows\*.* /U >
< %SYSTEMDRIVE%\*.exe >
< %ALLUSERSPROFILE%\Application Data\*. >
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
< %APPDATA%\*. >
[2011/07/12 03:09:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Adobe
[2009/05/06 17:44:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Alien Skin
[2010/08/03 04:31:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Apple Computer
[2010/08/02 03:33:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\avidemux
[2010/10/31 19:20:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Broad Intelligence
[2010/08/02 16:20:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\CyberLink
[2009/09/01 13:13:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Download Manager
[2010/08/14 07:00:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\dvdcss
[2008/12/25 15:53:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Ericsson
[2009/11/24 01:46:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\fizzy
[2010/10/31 16:37:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\FLV Extract
[2009/07/05 13:40:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Help
[2011/05/31 18:05:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\ICQ
[2005/01/06 19:09:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Identities
[2005/01/07 00:50:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\InstallShield
[2010/11/01 12:03:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Leawo
[2009/01/10 14:36:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Macromedia
[2010/08/21 11:39:18 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Microsoft
[2009/01/10 16:39:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Mozilla
[2009/11/26 03:15:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\MozillaControl
[2011/07/01 23:20:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\My Streaming Media
[2009/07/12 00:52:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Nowe Gadu-Gadu
[2009/08/07 00:32:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Nuance
[2011/07/03 22:14:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Offline Explorer
[2010/10/31 19:20:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\OpenCandy
[2009/07/23 01:42:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\OpenFM
[2011/07/12 19:08:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\PriceGong
[2010/02/11 01:01:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\PSpad
[2011/05/22 10:47:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Real
[2005/01/07 02:04:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Reallusion
[2010/09/02 01:00:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Replay Media Catcher 4
[2009/01/12 21:28:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Sun
[2011/07/01 12:27:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Thinstall
[2009/02/08 22:43:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\U3
[2005/01/07 02:03:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Ulead Systems
[2011/06/30 17:31:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Uniblue
[2011/07/13 03:09:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\vlc
< %APPDATA%\*.exe /s >
[2010/10/31 19:20:00 | 000,349,296 | ---- | M] () -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\OpenCandy\OpenCandy_E99C6757874144898548D59D69A45689\DLMgr_3_1.6.87.exe
[2010/10/15 22:41:18 | 000,043,440 | ---- | M] () -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\OpenCandy\OpenCandy_E99C6757874144898548D59D69A45689\SpeedstarterCZ.exe
[2010/10/23 01:29:06 | 001,472,552 | ---- | M] (Speedchecker Limited ) -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\OpenCandy\OpenCandy_E99C6757874144898548D59D69A45689\ZrychleniPocitace.exe
[2011/07/10 22:00:59 | 000,308,864 | ---- | M] (RealNetworks, Inc.) -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Real\Update\UpgradeHelper\RealPlayer\8.01\rnupgagent.exe
[2011/07/12 22:00:06 | 025,827,984 | ---- | M] (RealNetworks, Inc.) -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Real\Update\UpgradeHelper\RealPlayer\8.01\stub_data\RealPlayer.exe
[2011/05/23 14:35:26 | 000,675,088 | ---- | M] (RealNetworks, Inc.) -- C:\Documents and Settings\Janusz Konieczny\Data aplikací\Real\Update\UpgradeHelper\RealPlayer\8.01\stub_exe\RealPlayer.exe
< MD5 for: AGP440.SYS >
[2008/04/14 14:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2008/04/14 14:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\I386\sp3.cab:AGP440.sys
< MD5 for: ATAPI.SYS >
[2008/04/14 14:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008/04/14 14:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\I386\sp3.cab:atapi.sys
[2005/03/25 15:00:00 | 000,095,744 | ---- | M] (Microsoft Corporation) MD5=9CAB5B612E3AF65810F276BA051D56CD -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\I386\SYSTEM32\DRIVERS\ATAPI.SYS
[2005/03/25 15:00:00 | 000,095,744 | ---- | M] (Microsoft Corporation) MD5=9CAB5B612E3AF65810F276BA051D56CD -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\STAGE\MININT\SYSTEM32\DRIVERS\ATAPI.SYS
[2008/04/14 01:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ERDNT\cache\atapi.sys
[2008/04/14 01:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\dllcache\atapi.sys
[2008/04/14 01:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2008/04/14 14:00:00 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\ReinstallBackups\0004\DriverFiles\i386\atapi.sys
< MD5 for: AUTOCHK.EXE >
[2008/04/14 14:00:00 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\cmdcons\autochk.exe
[2008/04/14 14:00:00 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\I386\AUTOCHK.EXE
[2008/04/14 14:00:00 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe
[2008/04/14 14:00:00 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\dllcache\autochk.exe
[2005/03/25 15:00:00 | 000,594,432 | ---- | M] (Microsoft Corporation) MD5=D18FA3530AA4124A9D64F97162B1E3DF -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\I386\SYSTEM32\AUTOCHK.EXE
[2005/03/25 15:00:00 | 000,594,432 | ---- | M] (Microsoft Corporation) MD5=D18FA3530AA4124A9D64F97162B1E3DF -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\STAGE\MININT\SYSTEM32\AUTOCHK.EXE
< MD5 for: CDROM.SYS >
[2008/04/14 14:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2008/04/14 14:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\I386\sp3.cab:cdrom.sys
[2008/04/14 14:00:00 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
[2009/11/14 00:57:16 | 000,062,592 | ---- | M] (Microsoft Corporation) MD5=7B53584D94E9D8716B2DE91D5F1CB42D -- C:\WINDOWS\system32\dllcache\cdrom.sys
[2005/03/25 15:00:00 | 000,052,224 | ---- | M] (Microsoft Corporation) MD5=DD6A189894B14E24A14B4D182F5F3949 -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\I386\SYSTEM32\DRIVERS\CDROM.SYS
[2005/03/25 15:00:00 | 000,052,224 | ---- | M] (Microsoft Corporation) MD5=DD6A189894B14E24A14B4D182F5F3949 -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\STAGE\MININT\SYSTEM32\DRIVERS\CDROM.SYS
< MD5 for: CHANGER.SYS >
[2008/04/14 14:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:Changer.sys
[2008/04/14 14:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\I386\sp3.cab:Changer.sys
< MD5 for: CRYPTSVC.DLL >
[2008/04/14 14:00:00 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\ERDNT\cache\cryptsvc.dll
[2008/04/14 14:00:00 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\cryptsvc.dll
[2008/04/14 14:00:00 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\dllcache\cryptsvc.dll
< MD5 for: EVENTLOG.DLL >
[2008/04/14 14:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ERDNT\cache\eventlog.dll
[2008/04/14 14:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\dllcache\eventlog.dll
[2008/04/14 14:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
[2008/06/06 14:03:52 | 000,007,216 | ---- | M] () MD5=C2A279A458A06DE2C83D842AA042B5A8 -- C:\Program Files\CyberLink\PowerDirector\EventLog.dll
< MD5 for: EXPLORER.EXE >
[2008/04/14 14:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ERDNT\cache\explorer.exe
[2008/04/14 14:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008/04/14 14:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\system32\dllcache\explorer.exe
< MD5 for: HAL.DLL >
[2008/04/14 14:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2008/04/14 14:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\I386\sp3.cab:hal.dll
[2008/04/14 14:00:00 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- C:\WINDOWS\system32\hal.dll
[2005/03/25 15:00:00 | 000,109,568 | ---- | M] (Microsoft Corporation) MD5=EB0D4F2DED96775E9C272BBDFAA7B923 -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\I386\SYSTEM32\HAL.DLL
[2005/03/25 15:00:00 | 000,109,568 | ---- | M] (Microsoft Corporation) MD5=EB0D4F2DED96775E9C272BBDFAA7B923 -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\STAGE\MININT\SYSTEM32\HAL.DLL
< MD5 for: IASTOR.SYS >
[2008/02/14 13:31:26 | 000,310,808 | ---- | M] (Intel Corporation) MD5=ACF3EC4273521B83AD9EFE56C11B4626 -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\I386\SYSTEM32\DRIVERS\IASTOR.SYS
[2008/02/14 13:31:26 | 000,310,808 | ---- | M] (Intel Corporation) MD5=ACF3EC4273521B83AD9EFE56C11B4626 -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\STAGE\MININT\SYSTEM32\DRIVERS\IASTOR.SYS
< MD5 for: ISAPNP.SYS >
[2008/04/14 14:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:isapnp.sys
[2008/04/14 14:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\I386\sp3.cab:isapnp.sys
[2005/03/25 15:00:00 | 000,037,888 | ---- | M] (Microsoft Corporation) MD5=4EA2CC0CC091854FB1A07B6758BB68C0 -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\I386\SYSTEM32\DRIVERS\ISAPNP.SYS
[2005/03/25 15:00:00 | 000,037,888 | ---- | M] (Microsoft Corporation) MD5=4EA2CC0CC091854FB1A07B6758BB68C0 -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\STAGE\MININT\SYSTEM32\DRIVERS\ISAPNP.SYS
[2008/04/14 08:57:54 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\dllcache\isapnp.sys
[2008/04/14 08:57:54 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\drivers\isapnp.sys
[2008/04/14 14:00:00 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\ReinstallBackups\0003\DriverFiles\i386\isapnp.sys
< MD5 for: LSASS.EXE >
[2005/03/25 15:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=D4B61A935670C57A0DEA81B4F4A12169 -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\I386\SYSTEM32\LSASS.EXE
[2005/03/25 15:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=D4B61A935670C57A0DEA81B4F4A12169 -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\STAGE\MININT\SYSTEM32\LSASS.EXE
[2008/04/14 14:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ERDNT\cache\lsass.exe
[2008/04/14 14:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\dllcache\lsass.exe
[2008/04/14 14:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\lsass.exe
< MD5 for: NDIS.SYS >
[2008/04/14 14:00:00 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ERDNT\cache\ndis.sys
[2008/04/14 14:00:00 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\dllcache\ndis.sys
[2008/04/14 14:00:00 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
[2005/03/25 15:00:00 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=FDB9275EB5E75A456BD26F4479103C19 -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\I386\SYSTEM32\DRIVERS\NDIS.SYS
[2005/03/25 15:00:00 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=FDB9275EB5E75A456BD26F4479103C19 -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\STAGE\MININT\SYSTEM32\DRIVERS\NDIS.SYS
< MD5 for: NETLOGON.DLL >
[2005/03/25 15:00:00 | 000,419,328 | ---- | M] (Microsoft Corporation) MD5=9DA343027F3B72029AB499D3F7FFACAA -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\I386\SYSTEM32\NETLOGON.DLL
[2005/03/25 15:00:00 | 000,419,328 | ---- | M] (Microsoft Corporation) MD5=9DA343027F3B72029AB499D3F7FFACAA -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\STAGE\MININT\SYSTEM32\NETLOGON.DLL
[2008/04/14 14:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ERDNT\cache\netlogon.dll
[2008/04/14 14:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\dllcache\netlogon.dll
[2008/04/14 14:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll
< MD5 for: SCECLI.DLL >
[2005/03/25 15:00:00 | 000,190,976 | ---- | M] (Microsoft Corporation) MD5=71FB876580530E7B0429312A8BCE5E04 -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\I386\SYSTEM32\SCECLI.DLL
[2005/03/25 15:00:00 | 000,190,976 | ---- | M] (Microsoft Corporation) MD5=71FB876580530E7B0429312A8BCE5E04 -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\STAGE\MININT\SYSTEM32\SCECLI.DLL
[2008/04/14 14:00:00 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ERDNT\cache\scecli.dll
[2008/04/14 14:00:00 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\dllcache\scecli.dll
[2008/04/14 14:00:00 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll
< MD5 for: SMSS.EXE >
[2005/03/25 15:00:00 | 000,053,760 | ---- | M] (Microsoft Corporation) MD5=5912CC8F61CF76E4FADC6F34C8F92DDB -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\I386\SYSTEM32\SMSS.EXE
[2005/03/25 15:00:00 | 000,053,760 | ---- | M] (Microsoft Corporation) MD5=5912CC8F61CF76E4FADC6F34C8F92DDB -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\STAGE\MININT\SYSTEM32\SMSS.EXE
[2004/08/04 00:44:30 | 000,178,688 | ---- | M] (Microsoft Corporation) MD5=9ADE80BD6A084B95FE678F5C5C61C9B7 -- C:\cmdcons\SYSTEM32\SMSS.EXE
[2008/04/14 14:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\dllcache\smss.exe
[2008/04/14 14:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\smss.exe
[2008/04/14 14:00:00 | 000,481,792 | ---- | M] (Microsoft Corporation) MD5=F209B5C79A87A9521DC0BD88B039EEE3 -- C:\WINDOWS\I386\SYSTEM32\SMSS.EXE
< MD5 for: SVCHOST.EXE >
[2008/04/14 14:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ERDNT\cache\svchost.exe
[2008/04/14 14:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\dllcache\svchost.exe
[2008/04/14 14:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
[2005/03/25 15:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=CA8E6441930B54A8B8210061CE5FCCE7 -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\I386\SYSTEM32\SVCHOST.EXE
[2005/03/25 15:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=CA8E6441930B54A8B8210061CE5FCCE7 -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\STAGE\MININT\SYSTEM32\SVCHOST.EXE
< MD5 for: SYMMPI.SYS >
[2005/03/25 15:00:00 | 000,049,664 | ---- | M] (LSI Logic) MD5=868204832E011E2D64281D7EABEE572E -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\I386\SYSTEM32\DRIVERS\SYMMPI.SYS
[2005/03/25 15:00:00 | 000,049,664 | ---- | M] (LSI Logic) MD5=868204832E011E2D64281D7EABEE572E -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\STAGE\MININT\SYSTEM32\DRIVERS\SYMMPI.SYS
< MD5 for: TCPIP.SYS >
[2008/04/14 14:00:00 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008/06/20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\ERDNT\cache\tcpip.sys
[2008/06/20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008/06/20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2008/06/20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[2005/03/25 15:00:00 | 000,333,312 | ---- | M] (Microsoft Corporation) MD5=EC676733442B122F1828FCD03B86C20B -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\I386\SYSTEM32\DRIVERS\TCPIP.SYS
[2005/03/25 15:00:00 | 000,333,312 | ---- | M] (Microsoft Corporation) MD5=EC676733442B122F1828FCD03B86C20B -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\STAGE\MININT\SYSTEM32\DRIVERS\TCPIP.SYS
< MD5 for: USERINIT.EXE >
[2005/03/25 15:00:00 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=29A1877F2D0EACFF20B6507A3C00F31B -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\I386\SYSTEM32\USERINIT.EXE
[2005/03/25 15:00:00 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=29A1877F2D0EACFF20B6507A3C00F31B -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\STAGE\MININT\SYSTEM32\USERINIT.EXE
[2008/04/14 14:00:00 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ERDNT\cache\userinit.exe
[2008/04/14 14:00:00 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\dllcache\userinit.exe
[2008/04/14 14:00:00 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
< MD5 for: WINLOGON.EXE >
[2005/03/25 15:00:00 | 000,508,928 | ---- | M] (Microsoft Corporation) MD5=325FD6D25FC1D77C363E87B445C8B023 -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\I386\SYSTEM32\WINLOGON.EXE
[2005/03/25 15:00:00 | 000,508,928 | ---- | M] (Microsoft Corporation) MD5=325FD6D25FC1D77C363E87B445C8B023 -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\STAGE\MININT\SYSTEM32\WINLOGON.EXE
[2008/04/14 14:00:00 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ERDNT\cache\winlogon.exe
[2008/04/14 14:00:00 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\dllcache\winlogon.exe
[2008/04/14 14:00:00 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe
< MD5 for: WS2_32.DLL >
[2008/04/14 14:00:00 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ERDNT\cache\ws2_32.dll
[2008/04/14 14:00:00 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\dllcache\ws2_32.dll
[2008/04/14 14:00:00 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\ws2_32.dll
[2005/03/25 15:00:00 | 000,083,968 | ---- | M] (Microsoft Corporation) MD5=DB060880F9C349F597AFA270D1D01B68 -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\I386\SYSTEM32\WS2_32.DLL
[2005/03/25 15:00:00 | 000,083,968 | ---- | M] (Microsoft Corporation) MD5=DB060880F9C349F597AFA270D1D01B68 -- C:\WINDOWS\RE_DRIVE\RECOVERYCD_ISO\STAGE\MININT\SYSTEM32\WS2_32.DLL
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
< %systemroot%\Tasks\*.job /lockedfiles >
< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2009/02/15 20:31:08 | 000,717,296 | ---- | M] ()
Unable to obtain MD5 -- C:\WINDOWS\system32\drivers\sptd.sys
< %systemroot%\System32\config\*.sav >
[2005/01/06 19:59:47 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2005/01/06 19:59:47 | 001,069,056 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2005/01/06 19:59:47 | 000,483,328 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav
< %systemroot%\system32\*.dll /lockedfiles >
< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON
< %systemroot%\system32\drivers\*.sys /3 >
< %systemroot%\system32\*.* /3 >
[2011/07/12 18:33:22 | 000,079,516 | ---- | M] () -- C:\WINDOWS\system32\perfc005.dat
[2011/07/12 18:33:22 | 000,068,606 | ---- | M] () -- C:\WINDOWS\system32\perfc009.dat
[2011/07/12 18:33:22 | 000,432,626 | ---- | M] () -- C:\WINDOWS\system32\perfh005.dat
[2011/07/12 18:33:23 | 000,435,902 | ---- | M] () -- C:\WINDOWS\system32\perfh009.dat
[2011/07/12 18:33:22 | 001,029,544 | ---- | M] () -- C:\WINDOWS\system32\PerfStringBackup.INI
========== Alternate Data Streams ==========
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:F35A93AD
< End of report >