VIRY.CZ

Dobrý den prosím o pomoc měl jsem nainstalovaný Itunes ,když jsem tento program chtěl spustit(dříve mi normálně šel)tak mi vyskočí hláška V aplikaci došlo k problému a je třeba ji zavřít.Program nenaskočí.Pokoušel jsem se ho odinstalovat a instalovat novej Itunes.Součástí Itunes je i Quicktime avšak při instalaci mi zase vyskočí hláška Tato instalace je zakázána zásadami nastavenými správcem systému.Prosím o radu co by se s tím dalo dělat.Je to moje soukromé pc a jsem jediný uživatel.Děkuji
Logfile of random's system information tool 1.09 (written by random/random)
Run by Administrator at 2011-07-16 16:26:23
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 1 GB (3%) free of 40 GB
Total RAM: 2046 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:26:38, on 16.7.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\LENOVO\HOTKEY\FNF5SVC.exe
C:\WINDOWS\system32\FsUsbExService.Exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Lenovo\PM Driver\PMSveH.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\USB Disk Security\USBGuard.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Software602\Print2PDF\Print2PDF.exe
C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Administrator\Plocha\Download\RSIT.exe
C:\Program Files\trend micro\Administrator.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {074C1DC5-9320-4A9A-947D-C042949C6216} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [USB Antivirus] C:\Program Files\USB Disk Security\USBGuard.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Print2PDF Print Monitor] "C:\Program Files\Software602\Print2PDF\Print2PDF.exe" /server
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\PROGRA~1\Stardock\WINCUS~1\BootSkin\BootSkin.exe" /StartupJobs
O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Advanced SystemCare 3] "C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe" /startup
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O4 - S-1-5-18 Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'SYSTEM')
O4 - .DEFAULT Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'Default user')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 3641532948
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Adobe Version Cue CS4 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Fn+F5 Service (FNF5SVC) - Lenovo. - C:\Program Files\LENOVO\HOTKEY\FNF5SVC.exe
O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PMSveH - Lenovo - C:\Program Files\Lenovo\PM Driver\PMSveH.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

--
End of file - 11690 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AdobeAAMUpdater-1.0-LENOVO-Administrator.job
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
C:\WINDOWS\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\tbbkh2yw.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3, {6614d11d-d21d-b211-ae23-815234e1ebb5}:1.0.23, {0538E3E3-7E9B-4d49-8831-A227C80A7AD3}:2.0.2, {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.9, {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}:6.0.16, {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17, jqs@sun.com:1.0, {20a82645-c095-46ed-80e3-08825760534b}:1.1, {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}:6.0.19, {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"
prefs.js - "keyword.URL" - "http://search.icq.com/search/afe_result ... r=1.2.6&q="

"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"=C:\Program Files\Real\RealPlayer\browserrecord
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2027]
"Description"=RealMedia Plugin
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprjplug;version=1.0.3.69]
"Description"=RealJukebox Netscape Plugin
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1040]
"Description"=6.0.12.1040
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69]
"Description"=6.0.12.69
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@software602.cz/602XML Filler]
"Description"=602XML Filler Plugin
"Path"=C:\Program Files\Software602\602XML\Filler\npfiller.dll

C:\Program Files\Mozilla Firefox\extensions\
{800b5000-a755-47e1-992b-48a1c1357f07}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{AB2CE124-6272-4b12-94A9-7303C7397BD1}
{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsIQTScriptablePlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
npdeployJava1.dll
NPOFF12.DLL
NPOFFICE.DLL
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
QuickTimePlugin.class

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\tbbkh2yw.default\extensions\
staged
{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}
{20a82645-c095-46ed-80e3-08825760534b}
{6614d11d-d21d-b211-ae23-815234e1ebb5}
{800b5000-a755-47e1-992b-48a1c1357f07}

C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\tbbkh2yw.default\searchplugins\
daemon-search.xml
icqplugin-1.xml
icqplugin-10.xml
icqplugin-11.xml
icqplugin-12.xml
icqplugin-13.xml
icqplugin-14.xml
icqplugin-15.xml
icqplugin-16.xml
icqplugin-17.xml
icqplugin-18.xml
icqplugin-19.xml
icqplugin-2.xml
icqplugin-20.xml
icqplugin-21.xml
icqplugin-22.xml
icqplugin-23.xml
icqplugin-24.xml
icqplugin-3.xml
icqplugin-4.xml
icqplugin-5.xml
icqplugin-6.xml
icqplugin-7.xml
icqplugin-8.xml
icqplugin-9.xml
icqplugin.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2010-09-22 61888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{074C1DC5-9320-4A9A-947D-C042949C6216}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2009-05-13 312928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-08-04 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-08-04 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"USB Antivirus"=C:\Program Files\USB Disk Security\USBGuard.exe [2008-09-23 798720]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2010-08-02 281768]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-03-21 7585792]
"Print2PDF Print Monitor"=C:\Program Files\Software602\Print2PDF\Print2PDF.exe [2010-12-03 141368]
"AdobeAAMUpdater-1.0"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-04-04 500208]
"AdobeCS5ServiceManager"=C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-07-22 402432]
"SwitchBoard"=C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-05-27 413696]
"AGRSMMSG"=C:\WINDOWS\AGRSMMSG.exe [2006-08-30 89542]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-01-30 16116224]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-05-19 774233]
"nwiz"=nwiz.exe /install []
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-07-30 289064]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2009-05-13 198160]
"BootSkin Startup Jobs"=C:\PROGRA~1\Stardock\WINCUS~1\BootSkin\BootSkin.exe [2004-04-26 270336]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AutoStartNPSAgent"=C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe [2010-03-19 102400]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
"Advanced SystemCare 3"=C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe [2010-03-29 2343120]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Acrobat Speed Launcher]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-21 932288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]
C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe_ID0ENQBO]
C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE [2008-08-15 378224]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 3]
C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe [2010-03-29 2343120]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGRSMMSG]
C:\WINDOWS\AGRSMMSG.exe [2006-08-30 89542]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AzMixerSel]
C:\Program Files\Realtek\InstallShield\AzMixerSel.exe [2006-01-25 53248]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BDRegion]
C:\Program Files\Cyberlink\Shared Files\brs.exe [2008-04-12 91432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BootSkin Startup Jobs]
C:\Program Files\Stardock\WinCustomize\BootSkin\BootSkin.exe [2004-04-26 270336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Corel File Shell Monitor]
C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe [2008-01-15 16200]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Corel Photo Downloader]
C:\Program Files\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe [2007-12-14 531784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-08-08 490952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBJ]
C:\Program Files\Ahead\Nero BackItUp\NBJ.exe [2006-09-15 2048000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
C:\WINDOWS\system32\NvCpl.dll [2007-03-21 7585792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
nwiz.exe /install []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDVD8LanguageShortcut]
C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe [2007-12-14 50472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PMHandler]
C:\PROGRA~1\Lenovo\PMDRIV~1\PMHandler.exe [2007-03-16 31840]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl8]
C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe [2008-03-20 83240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\rfagent]
C:\Program Files\RFA\rfagent.exe [2008-11-24 916800]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-05-19 774233]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2009-05-13 198160]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TPWAUDAP]
C:\Program Files\Lenovo\HOTKEY\TpWAudAp.exe [2006-09-06 54824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Tweak UI]
TWEAKUI.CPL,TweakMeUp []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UnlockerAssistant]
C:\Program Files\Unlocker\UnlockerAssistant.exe [2006-08-20 6656]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Windows Search.lnk]
C:\Program Files\Windows Desktop Search\WindowsSearch.exe [2008-05-26 123904]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe

C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tphotkey]
C:\Program Files\Lenovo\HOTKEY\tphklock.dll [2007-12-14 28672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"NoSecCpl"=0
"DisableChangePassword"=0
"DisableLockWorkstation"=0
"NoDispCpl"=0
"NoDispScrSavPage"=0
"NoDispAppearancePage"=0
"NoDispSettingsPage"=0
"NoVisualStyleChoice"=0
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoActiveDesktop"=0
"HideClock"=0
"NoStartMenuPinnedList"=0
"NoStartMenuMFUprogramsList"=0
"NoUserNameInStartMenu"=0
"StartmenuLogoff"=0
"NoStartMenuSubFolders"=0
"NoCommonGroups"=0
"NoPrinterTabs"=0
"NoDeletePrinter"=0
"NoAddPrinter"=0
"NoPrinters"=0
"NoFavoritesMenu"=0
"NoFind"=0
"NoClose"=0
"NoSetFolders"=0
"NoViewContextMenu"=0
"NoToolbarCustomize"=0
"NoRecentDocsNetHood"=0
"NoChangeAnimation"=0
"NoChangeKeyboardNavigationIndicators"=0
"NoThemesTab"=0
"NoRun"=0
"NoDesktop"=0
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoResolveSearch"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Pinnacle\Studio 12\Programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\Studio.exe:*:Enabled:Studio program file"
"C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server"
"C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe"="C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Common Files\soft602\langserv.exe"="C:\Program Files\Common Files\soft602\langserv.exe:*:Enabled:Software602 Spell Checker"
"C:\Program Files\iTunes2\iTunes.exe"="C:\Program Files\iTunes2\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.ffds"=ffdshow.ax
"vidc.avrn"=C:\PROGRA~1\ACEMEG~1\SystemS\AVIDAV~1.DLL
"vidc.advj"=C:\PROGRA~1\ACEMEG~1\SystemS\AVIDAV~1.DLL
"vidc.mszh"=C:\PROGRA~1\ACEMEG~1\SystemS\avimszh.dll
"vidc.zlib"=C:\PROGRA~1\ACEMEG~1\SystemS\avizlib.dll
"vidc.cscd"=C:\PROGRA~1\ACEMEG~1\SystemS\camcodec.dll
"vidc.cvid"=C:\PROGRA~1\ACEMEG~1\SystemS\iccvid.dll
"msacm.trspch"=C:\PROGRA~1\ACEMEG~1\SystemS\tssoft32.acm
"vidc.em2v"=C:\PROGRA~1\ACEMEG~1\SystemS\etxcodec.dll
"vidc.mkvc"=C:\PROGRA~1\ACEMEG~1\SystemS\kmvidc32.dll
"vidc.hfyu"=C:\PROGRA~1\ACEMEG~1\SystemS\huffyuv.dll
"msacm.lameacm"=C:\PROGRA~1\ACEMEG~1\SystemS\lameacm.acm
"msacm.lhacm"=C:\PROGRA~1\ACEMEG~1\SystemS\lhacm.acm
"msacm.l3acm"=C:\PROGRA~1\ACEMEG~1\SystemS\l3codecp.acm
"vidc.sjpg"=C:\PROGRA~1\ACEMEG~1\SystemS\pmjpeg32.dll
"vidc.dmb2"=C:\PROGRA~1\ACEMEG~1\SystemS\pmjpeg32.dll
"vidc.gepj"=C:\PROGRA~1\ACEMEG~1\SystemS\pmjpeg32.dll
"vidc.qpeg"=C:\PROGRA~1\ACEMEG~1\SystemS\Qpeg32.dll
"vidc.q1.0"=C:\PROGRA~1\ACEMEG~1\SystemS\Qpeg32.dll
"msacm.sl_anet"=sl_anet.acm
"vidc.tscc"=C:\PROGRA~1\ACEMEG~1\SystemS\tsccvid.dll
"vidc.vifp"=C:\PROGRA~1\ACEMEG~1\SystemS\vfcodec.dll
"vidc.wrpr"=C:\PROGRA~1\ACEMEG~1\SystemS\aviwrap.dll
"vidc.wnv1"=C:\PROGRA~1\ACEMEG~1\SystemS\wnvplay1.dll
"vidc.advs"=C:\PROGRA~1\ACEMEG~1\SystemS\Adaptec\Dvc.dll
"vidc.aflc"=C:\PROGRA~1\ACEMEG~1\SystemS\Autodesk\FLCCOD~1.DLL
"vidc.afli"=C:\PROGRA~1\ACEMEG~1\SystemS\Autodesk\FLCCOD~1.DLL
"vidc.aasc"=C:\PROGRA~1\ACEMEG~1\SystemS\Autodesk\Aasc32.dll
"vidc.aas4"=C:\PROGRA~1\ACEMEG~1\SystemS\Autodesk\Aasc32.dll
"vidc.asv1"=C:\PROGRA~1\ACEMEG~1\SystemS\ASUS\asusasv1.dll
"vidc.asv2"=C:\PROGRA~1\ACEMEG~1\SystemS\ASUS\asusasv2.dll
"vidc.asvx"=C:\PROGRA~1\ACEMEG~1\SystemS\ASUS\asusasv2.dll
"vidc.vcr1"=C:\PROGRA~1\ACEMEG~1\SystemS\ATI\ativcr1.dll
"vidc.vcr2"=C:\PROGRA~1\ACEMEG~1\SystemS\ATI\ativcr2.dll
"vidc.yv12"=C:\PROGRA~1\ACEMEG~1\SystemS\ATI\atiyuv12.DLL
"vidc.mwv1"=C:\PROGRA~1\ACEMEG~1\SystemS\Aware\icmw_32.dll
"vidc.bt20"=C:\PROGRA~1\ACEMEG~1\SystemS\BROOKT~1\btvvc32.drv
"vidc.y41p"=C:\PROGRA~1\ACEMEG~1\SystemS\BROOKT~1\btvvc32.drv
"msacm.pcdv"=C:\PROGRA~1\ACEMEG~1\SystemS\Canopus\pcdv.acm
"vidc.cdvc"=C:\PROGRA~1\ACEMEG~1\SystemS\Canopus\CSCCDVC.DLL
"vidc.ddvc"=C:\PROGRA~1\ACEMEG~1\SystemS\Canopus\CSCdvsd.DLL
"vidc.png1"=C:\PROGRA~1\ACEMEG~1\SystemS\Core\COREPN~1.DLL
"msacm.CoreFLAC_ACM"=C:\PROGRA~1\ACEMEG~1\SystemS\Core\COREFL~1.ACM
"vidc.davc"=C:\PROGRA~1\ACEMEG~1\SystemS\dicas\davcvfw.dll
"vidc.div3"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32.dll
"vidc.div5"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32.dll
"vidc.mpg3"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32.dll
"vidc.div4"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32f.dll
"vidc.div6"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32f.dll
"vidc.ap41"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32f.dll
"vidc.dvx4"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\divx4.dll
"vidc.divx"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivX520.dll
"msacm.divxa32"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\divxa32.acm
"vidc.frwd"=C:\PROGRA~1\ACEMEG~1\SystemS\Forward\frwd.dll
"vidc.frwt"=C:\PROGRA~1\ACEMEG~1\SystemS\Forward\frwd.dll
"vidc.frwa"=C:\PROGRA~1\ACEMEG~1\SystemS\Forward\frwt.dll
"vidc.frwu"=C:\PROGRA~1\ACEMEG~1\SystemS\Forward\frwu.dll
"vidc.glzw"=C:\PROGRA~1\ACEMEG~1\SystemS\Gabest\GLZW.dll
"vidc.gpeg"=C:\PROGRA~1\ACEMEG~1\SystemS\Gabest\GPEG.dll
"vidc.i263"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\i263_32.drv
"vidc.iv30"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv31"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv32"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv33"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv34"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv35"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv36"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv37"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv38"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv39"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv40"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv41"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv42"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv43"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv44"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv45"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv46"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv47"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv48"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv49"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv50"=ir50_32.dll
"vidc.ir21"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\IR21_R.DLL
"vidc.rt21"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\IR21_R.DLL
"msacm.imc"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\IMC32.ACM
"vidc.lead"=C:\PROGRA~1\ACEMEG~1\SystemS\LEAD\LCODCCMP.DLL
"vidc.dvsd"=C:\PROGRA~1\ACEMEG~1\SystemS\MAINCO~1\MCDVD_32.DLL
"vidc.dvc"=C:\PROGRA~1\ACEMEG~1\SystemS\MAINCO~1\MCDVD_32.DLL
"vidc.dvcs"=C:\PROGRA~1\ACEMEG~1\SystemS\MAINCO~1\MCDVD_32.DLL
"vidc.dcmj"=C:\PROGRA~1\ACEMEG~1\SystemS\MAINCO~1\MCMJPG32.DLL
"vidc.avi1"=C:\PROGRA~1\ACEMEG~1\SystemS\MAINCO~1\MCMJPG32.DLL
"vidc.avi2"=C:\PROGRA~1\ACEMEG~1\SystemS\MAINCO~1\MCMJPG32.DLL
"vidc.dv25"=C:\PROGRA~1\ACEMEG~1\SystemS\Matrox\DigiVCap.dll
"vidc.dv50"=C:\PROGRA~1\ACEMEG~1\SystemS\Matrox\DigiVCap.dll
"vidc.msmc"=C:\PROGRA~1\ACEMEG~1\SystemS\Matrox\DigiVCap.dll
"vidc.mmjp"=C:\PROGRA~1\ACEMEG~1\SystemS\Matrox\DigiVCap.dll
"vidc.mtx1"=C:\PROGRA~1\ACEMEG~1\SystemS\Matrox\DigiVCap.dll

======File associations======

.js - open - "D:\Program Files\ADOBE\Adobe Dreamweaver CS5\Dreamweaver.exe","%1"

======List of files/folders created in the last 1 month======

2011-07-14 03:44:40 ----D---- C:\WINDOWS\system32\winrm
2011-07-14 03:44:36 ----D---- C:\WINDOWS\$NtUninstallKB968930$
2011-07-14 03:44:11 ----N---- C:\WINDOWS\system32\spmsg.dll
2011-07-14 02:24:01 ----D---- C:\Program Files\XP Codec Pack
2011-07-14 01:35:52 ----A---- C:\WINDOWS\ntbtlog.txt
2011-07-14 01:26:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\{AB2D8F2E-F7AD-4446-A11A-50D846B2CF2A}(2)
2011-07-14 01:22:00 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2011-07-14 00:37:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2492386$
2011-07-14 00:34:39 ----D---- C:\WINDOWS\system32\WindowsPowerShell
2011-07-14 00:34:34 ----HDC---- C:\WINDOWS\$968930Uinstall_KB968930$
2011-07-14 00:34:28 ----HDC---- C:\WINDOWS\$NtUninstallKB971513$
2011-07-14 00:34:12 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2011-07-13 23:49:44 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2011-07-13 23:49:38 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2011-07-13 23:49:25 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2011-07-13 15:53:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2467659$
2011-07-13 15:03:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$
2011-07-13 11:13:28 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Media Player Classic
2011-07-13 10:52:47 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2011-07-13 10:52:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2011-07-13 10:52:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2479943$
2011-07-13 10:52:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$
2011-07-13 10:52:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2011-07-13 10:52:16 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2011-07-13 10:52:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2011-07-13 10:52:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2481109$
2011-07-13 10:51:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2011-07-13 10:51:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$
2011-07-13 10:51:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2011-07-13 10:51:34 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2011-07-13 10:51:28 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2011-07-13 10:51:23 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2011-07-13 10:51:17 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2011-07-13 10:50:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2507618$
2011-07-13 10:50:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2419632$
2011-07-13 10:50:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2011-07-13 10:50:06 ----HDC---- C:\WINDOWS\$NtUninstallKB971029$
2011-07-13 10:49:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2506212$
2011-07-13 10:49:16 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2011-07-13 10:49:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2509553$
2011-07-13 10:49:01 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2011-07-13 10:48:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2541763$
2011-07-13 10:48:44 ----HDC---- C:\WINDOWS\$NtUninstallKB2555917$
2011-07-13 10:47:05 ----D---- C:\WINDOWS\system32\languages
2011-07-13 10:47:05 ----D---- C:\WINDOWS\system32\custom matrices
2011-07-13 10:47:03 ----A---- C:\WINDOWS\system32\unins000.dat
2011-07-13 10:46:13 ----D---- C:\Program Files\XP Codec Pack(2)
2011-07-13 09:34:01 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2011-07-13 09:33:49 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2011-07-13 09:33:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2011-07-13 09:33:28 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2011-07-13 09:33:19 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2011-07-13 09:33:07 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2011-07-13 09:33:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2485663$
2011-07-13 09:32:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2011-07-13 09:32:49 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2011-07-13 09:32:43 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2011-07-13 09:32:36 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2011-07-13 09:32:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2530548$
2011-07-13 09:32:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2011-07-13 09:32:04 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2011-07-13 09:31:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2510581$
2011-07-13 09:31:52 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2011-07-13 09:31:41 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2011-07-13 09:31:32 ----DC---- C:\WINDOWS\$NtUninstallKB975025$
2011-07-13 09:31:20 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2011-07-13 09:31:10 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2011-07-13 09:30:52 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2011-07-13 09:30:41 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2011-07-13 09:29:53 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2011-07-13 09:26:39 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2011-07-13 07:32:56 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2011-07-13 07:32:49 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2011-07-13 07:32:43 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2011-07-13 07:32:27 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2011-07-13 07:32:20 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2011-07-13 07:32:12 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2011-07-13 07:31:59 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2011-07-13 07:31:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2524375$
2011-07-13 07:31:42 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2011-07-13 07:31:36 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2011-07-13 07:31:28 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2011-07-13 07:31:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2412687$
2011-07-13 07:31:07 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2011-07-13 07:30:46 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2011-07-13 07:30:26 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2011-07-13 07:29:44 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2011-07-13 07:29:38 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2011-07-13 07:29:29 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2011-07-13 07:29:22 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2011-07-13 07:29:15 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2011-07-13 07:29:09 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2011-07-13 07:29:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2544521$
2011-07-13 07:28:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$
2011-07-13 07:28:46 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2011-07-13 07:28:38 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2011-07-13 07:28:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2011-07-13 07:28:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2011-07-13 06:37:53 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2011-07-13 06:37:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2011-07-13 06:37:38 ----DC---- C:\WINDOWS\$NtUninstallKB955069$
2011-07-13 06:37:21 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2011-07-12 23:32:06 ----D---- C:\Program Files\Common Files\Acronis
2011-07-12 23:32:05 ----D---- C:\Program Files\Acronis
2011-07-12 23:15:04 ----D---- C:\Program Files\Common Files\MAGIX Services
2011-07-12 23:15:02 ----D---- C:\Program Files\Xara
2011-07-12 23:15:02 ----D---- C:\Program Files\Nufsoft
2011-07-12 22:52:18 ----D---- C:\Program Files\Zrychleni Pocitace
2011-07-12 22:49:26 ----D---- C:\Program Files\Magical Jelly Bean
2011-07-12 22:39:38 ----D---- C:\WINDOWS\LastGood(2)
2011-07-12 21:57:15 ----D---- C:\Program Files\Blaze Media Pro
2011-07-12 21:56:54 ----HDC---- C:\Documents and Settings\All Users\Data aplikací\{DE097E60-7F86-4350-B083-1F09B6906C92}
2011-07-12 21:49:38 ----D---- C:\Program Files\XP Repair Pro 4.0
2011-07-12 20:07:40 ----D---- C:\Program Files\PhotoFiltre
2011-07-12 14:51:20 ----D---- C:\Program Files\FreeTime
2011-07-11 20:08:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\TreeCardGames
2011-07-11 20:08:53 ----D---- C:\Documents and Settings\Administrator\Data aplikací\SolSuite
2011-07-11 20:08:22 ----D---- C:\Program Files\SolSuite
2011-07-09 21:44:55 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2011-07-09 09:00:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2476490$
2011-07-09 09:00:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2503665$
2011-07-09 09:00:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2535512$
2011-07-09 09:00:35 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2011-07-09 09:00:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2508272$
2011-07-09 09:00:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276$
2011-07-09 09:00:14 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2011-07-09 09:00:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893$
2011-07-07 17:57:41 ----A---- C:\WINDOWS\system32\hpz3l43a.dll
2011-07-07 17:56:25 ----A---- C:\WINDOWS\system32\HPZisn12.dll
2011-07-07 17:56:25 ----A---- C:\WINDOWS\system32\HPZipt12.dll
2011-07-07 17:56:25 ----A---- C:\WINDOWS\system32\HPZipr12.dll
2011-07-07 17:56:25 ----A---- C:\WINDOWS\system32\HPZipm12.exe
2011-07-07 17:56:25 ----A---- C:\WINDOWS\system32\HPZinw12.exe
2011-07-07 17:56:25 ----A---- C:\WINDOWS\system32\HPZidr12.dll
2011-07-07 17:55:52 ----D---- C:\Program Files\HP
2011-07-07 17:55:49 ----N---- C:\WINDOWS\hpfmdl09.dat
2011-07-07 17:55:49 ----A---- C:\WINDOWS\HPFins09.dat
2011-07-07 17:55:48 ----A---- C:\WINDOWS\system32\drivers\HPZius12.sys
2011-07-07 17:55:48 ----A---- C:\WINDOWS\system32\drivers\HPZipr12.sys
2011-07-07 17:55:48 ----A---- C:\WINDOWS\system32\drivers\HPZid412.sys
2011-07-07 17:55:27 ----A---- C:\WINDOWS\system32\hpzjsn01.dll
2011-07-07 17:55:27 ----A---- C:\WINDOWS\system32\hpzids01.dll
2011-07-07 17:55:27 ----A---- C:\WINDOWS\system32\HPZc3212.dll
2011-07-07 07:25:26 ----A---- C:\WINDOWS\system32\drivers\usbprint.sys
2011-06-25 18:18:19 ----D---- C:\WINDOWS\Prefetch
2011-06-25 15:43:14 ----A---- C:\WINDOWS\003360_.tmp
2011-06-25 15:41:23 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2011-06-25 11:13:59 ----D---- C:\WINDOWS\mui
2011-06-25 11:13:59 ----D---- C:\WINDOWS\Connection Wizard
2011-06-25 11:13:59 ----D---- C:\WINDOWS\Config
2011-06-25 11:13:59 ----D---- C:\WINDOWS\addins
2011-06-25 10:52:04 ----D---- C:\Program Files\iTunes
2011-06-25 10:32:48 ----HD---- C:\Program Files\Uninstall Information
2011-06-25 10:26:20 ----ASH---- C:\pagefile.sys
2011-06-25 10:14:59 ----A---- C:\WINDOWS\OEWABLog.txt
2011-06-25 10:13:34 ----HD---- C:\Program Files\WindowsUpdate
2011-06-25 10:11:27 ----D---- C:\Program Files\ComPlus Applications
2011-06-25 09:24:19 ----A---- C:\WINDOWS\imsins.BAK
2011-06-25 09:23:37 ----A---- C:\WINDOWS\system32\spxcoins.dll
2011-06-25 09:23:37 ----A---- C:\WINDOWS\system32\irclass.dll
2011-06-25 09:23:16 ----RA---- C:\WINDOWS\SET163.tmp
2011-06-25 09:23:14 ----RA---- C:\WINDOWS\SET157.tmp
2011-06-25 09:23:12 ----RA---- C:\WINDOWS\SET154.tmp
2011-06-25 09:21:44 ----A---- C:\WINDOWS\setuplog.txt
2011-06-25 07:16:50 ----D---- C:\Program Files\QuickTime
2011-06-25 06:50:20 ----A---- C:\WINDOWS\UPGRADE.TXT
2011-06-24 23:15:59 ----D---- C:\Program Files\Apple Software Update
2011-06-24 23:14:45 ----D---- C:\Program Files\Bonjour
2011-06-24 15:29:32 ----D---- C:\WINDOWS\system32\QuickTime

======List of files/folders modified in the last 1 month======

2011-07-16 16:26:28 ----D---- C:\Program Files\trend micro
2011-07-16 16:16:13 ----SHD---- C:\WINDOWS\Installer
2011-07-16 16:16:08 ----SHD---- C:\Config.Msi
2011-07-16 14:22:22 ----SD---- C:\WINDOWS\Tasks
2011-07-16 14:08:20 ----D---- C:\WINDOWS\system32
2011-07-16 14:05:12 ----D---- C:\WINDOWS\temp
2011-07-16 11:40:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-07-16 07:47:04 ----A---- C:\audiodec.txt
2011-07-15 14:05:31 ----D---- C:\Program Files\Mozilla Firefox
2011-07-15 11:18:36 ----D---- C:\WINDOWS\Microsoft.NET
2011-07-15 11:03:37 ----D---- C:\Documents and Settings\Administrator\Data aplikací\FreeVideoConverter
2011-07-15 11:03:28 ----A---- C:\WINDOWS\win.ini
2011-07-15 11:03:25 ----D---- C:\Program Files\Free Video Converter
2011-07-15 10:51:26 ----A---- C:\WINDOWS\NeroDigital.ini
2011-07-15 10:43:37 ----D---- C:\WINDOWS\system32\CatRoot2
2011-07-15 10:41:50 ----D---- C:\WINDOWS
2011-07-15 10:37:57 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-07-14 20:43:34 ----A---- C:\WINDOWS\AviSplitter.INI
2011-07-14 10:28:24 ----D---- C:\WINDOWS\system32\drivers
2011-07-14 10:28:07 ----HD---- C:\WINDOWS\inf
2011-07-14 04:02:31 ----D---- C:\WINDOWS\system32\CatRoot
2011-07-14 04:01:06 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-07-14 03:52:11 ----D---- C:\WINDOWS\AppPatch
2011-07-14 03:46:39 ----RSD---- C:\WINDOWS\assembly
2011-07-14 03:45:00 ----D---- C:\WINDOWS\security
2011-07-14 03:44:40 ----D---- C:\WINDOWS\system32\wbem
2011-07-14 03:43:54 ----D---- C:\Program Files\Windows Media Player
2011-07-14 03:43:52 ----D---- C:\WINDOWS\Help
2011-07-14 03:24:57 ----D---- C:\Program Files\Internet Explorer
2011-07-14 03:20:54 ----HDC---- C:\WINDOWS\ie8
2011-07-14 03:19:41 ----D---- C:\WINDOWS\system32\cs-cz
2011-07-14 02:52:02 ----D---- C:\Program Files\Messenger
2011-07-14 02:44:21 ----A---- C:\WINDOWS\system32\MRT.exe
2011-07-14 02:38:40 ----D---- C:\Program Files\Outlook Express
2011-07-14 02:38:23 ----D---- C:\Program Files\Movie Maker
2011-07-14 02:27:01 ----D---- C:\WINDOWS\system32\config
2011-07-14 02:26:19 ----D---- C:\WINDOWS\Registration
2011-07-14 02:24:01 ----RD---- C:\Program Files
2011-07-14 02:23:23 ----D---- C:\Program Files\Crystal Player
2011-07-14 00:36:53 ----HD---- C:\WINDOWS\$hf_mig$
2011-07-13 23:15:46 ----D---- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
2011-07-13 15:53:21 ----D---- C:\WINDOWS\ie8updates
2011-07-13 15:30:25 ----D---- C:\WINDOWS\system32\NtmsData
2011-07-13 15:09:24 ----D---- C:\WINDOWS\Debug
2011-07-13 11:47:48 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Skype
2011-07-13 10:30:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\RFA_Backups
2011-07-12 23:32:06 ----D---- C:\Program Files\Common Files
2011-07-12 23:27:24 ----D---- C:\Program Files\Common Files\Stardock
2011-07-12 23:17:50 ----RSD---- C:\WINDOWS\Fonts
2011-07-12 23:15:02 ----HD---- C:\Program Files\InstallShield Installation Information
2011-07-12 23:13:19 ----D---- C:\Program Files\No1 Video Converter
2011-07-12 23:13:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-07-12 23:13:10 ----D---- C:\WINDOWS\system32\Setup
2011-07-12 23:12:35 ----D---- C:\WINDOWS\system32\inetsrv
2011-07-12 23:12:34 ----D---- C:\WINDOWS\ime
2011-07-12 23:12:26 ----D---- C:\WINDOWS\PeerNet
2011-07-12 23:09:57 ----D---- C:\WINDOWS\system32\Restore
2011-07-12 23:09:57 ----D---- C:\WINDOWS\system32\npp
2011-07-12 23:09:57 ----D---- C:\WINDOWS\msagent
2011-07-12 23:09:55 ----D---- C:\WINDOWS\srchasst
2011-07-12 23:09:54 ----D---- C:\Program Files\NetMeeting
2011-07-12 23:09:53 ----D---- C:\WINDOWS\system32\Com
2011-07-12 23:09:52 ----D---- C:\Program Files\Windows NT
2011-07-12 23:09:50 ----D---- C:\Program Files\Common Files\System
2011-07-12 23:09:42 ----D---- C:\WINDOWS\system32\oobe
2011-07-12 23:09:41 ----D---- C:\WINDOWS\system32\usmt
2011-07-12 23:09:41 ----D---- C:\WINDOWS\system
2011-07-12 22:40:05 ----D---- C:\WINDOWS\SoftwareDistribution
2011-07-12 21:59:19 ----A---- C:\WINDOWS\wincmd.ini
2011-07-12 21:33:55 ----RASH---- C:\boot.ini
2011-07-07 07:31:45 ----SD---- C:\Documents and Settings\Administrator\Data aplikací\Microsoft
2011-06-30 19:59:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\1Click DVD Copy Pro
2011-06-30 19:58:09 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Vso
2011-06-30 19:54:31 ----AC---- C:\WINDOWS\#1 Video Converter.INI
2011-06-30 12:20:22 ----AC---- C:\WINDOWS\WTRDICT.INI
2011-06-30 12:20:11 ----AC---- C:\WINDOWS\STXKBDSC.INI
2011-06-29 12:45:14 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Adobe
2011-06-25 15:43:09 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-06-25 15:41:22 ----D---- C:\WINDOWS\ehome
2011-06-25 15:35:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2011-06-25 14:23:08 ----HD---- C:\WINDOWS\system32\GroupPolicy
2011-06-25 11:18:35 ----D---- C:\WINDOWS\Media
2011-06-25 11:16:03 ----D---- C:\WINDOWS\twain_32
2011-06-25 11:15:45 ----D---- C:\WINDOWS\system32\icsxml
2011-06-25 11:15:01 ----D---- C:\WINDOWS\system32\1033
2011-06-25 11:15:01 ----D---- C:\WINDOWS\system32\1029
2011-06-25 11:13:59 ----D---- C:\WINDOWS\NLDRV
2011-06-25 11:13:59 ----D---- C:\WINDOWS\Driver Cache
2011-06-25 11:13:56 ----D---- C:\WINDOWS\WinSxS
2011-06-25 10:52:09 ----D---- C:\Program Files\iPod
2011-06-25 10:38:38 ----D---- C:\Program Files\Common Files\Apple
2011-06-25 10:28:38 ----SHD---- C:\System Volume Information
2011-06-25 10:14:56 ----AC---- C:\WINDOWS\ODBCINST.INI
2011-06-25 10:14:31 ----ASH---- C:\WINDOWS\fonts\desktop.ini
2011-06-25 10:14:27 ----D---- C:\WINDOWS\system32\ias
2011-06-25 10:13:52 ----RD---- C:\WINDOWS\Web
2011-06-25 10:13:41 ----RAHC---- C:\WINDOWS\system32\cdplayer.exe.manifest
2011-06-25 10:10:18 ----ASH---- C:\Boot.bak
2011-06-25 09:24:06 ----A---- C:\WINDOWS\system.ini
2011-06-25 09:23:25 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2011-06-24 23:15:35 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-06-24 20:44:37 ----D---- C:\Temp
2011-06-24 18:13:45 ----D---- C:\Documents and Settings\Administrator\Data aplikací\IObit
2011-06-24 18:10:20 ----D---- C:\Program Files\DVDFab 8
2011-06-24 18:10:20 ----D---- C:\Program Files\AdRegCln
2011-06-24 18:10:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\FLEXnet
2011-06-24 18:10:20 ----D---- C:\Documents and Settings\Administrator\Data aplikací\DVD Flick
2011-06-24 18:10:20 ----D---- C:\Documents and Settings\Administrator\Data aplikací\602Installer
2011-06-24 16:08:18 ----D---- C:\Documents and Settings\Administrator\Data aplikací\uTorrent
2011-06-24 15:59:42 ----D---- C:\Program Files\Perfect Uninstaller
2011-06-24 15:30:02 ----D---- C:\Program Files\ACE Mega CoDecS Pack
2011-06-24 15:10:17 ----D---- C:\Documents and Settings\Administrator\Data aplikací\DAEMON Tools Lite

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\WINDOWS\system32\DRIVERS\iaStor.sys [2008-11-09 308248]
R0 imagedrv;imagedrv; C:\WINDOWS\System32\Drivers\imagedrv.sys [2005-09-01 5888]
R0 imagesrv;imagesrv; C:\WINDOWS\system32\DRIVERS\imagesrv.sys [2005-09-01 127488]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2008-02-06 44608]
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2011-07-14 138192]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2011-06-03 218688]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 PMHler;PMHler; C:\WINDOWS\system32\drivers\PMHler.sys [2006-05-24 10240]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}; \??\C:\Program Files\CyberLink\PowerDVD8\000.fcl []
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.6.0.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2008-06-16 21425]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-09-07 279712]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2011-07-14 66616]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-09-07 25888]
R2 rimmptsk;rimmptsk; C:\WINDOWS\system32\DRIVERS\rimmptsk.sys [2007-02-24 39936]
R2 rimsptsk;rimsptsk; C:\WINDOWS\system32\DRIVERS\rimsptsk.sys [2007-01-23 42496]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\WINDOWS\system32\DRIVERS\rixdptsk.sys [2007-01-23 37376]
R2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2006-11-08 12544]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2006-08-30 1161152]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 ATSWPDRV;(****DEBUG****) AuthenTec TruePrint USB Driver (SwipeSensor); C:\WINDOWS\system32\DRIVERS\ATSwpDrv.sys [2007-04-10 140808]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2007-02-16 160256]
R3 btaudio;Bluetooth Audio Device; C:\WINDOWS\system32\drivers\btaudio.sys [2006-10-30 329901]
R3 BTDriver;Bluetooth Virtual Communications Driver; C:\WINDOWS\system32\DRIVERS\btport.sys [2006-10-30 30459]
R3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2006-11-13 862922]
R3 BTWDNDIS;Bluetooth LAN Access Server; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [2006-10-30 149123]
R3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2006-10-30 67672]
R3 FsUsbExDisk;FsUsbExDisk; \??\C:\WINDOWS\system32\FsUsbExDisk.SYS []
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2009-05-18 26600]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-01-30 4474368]
R3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
R3 NETw4x32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw4x32.sys [2007-04-30 2206976]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-03-21 3684512]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2008-06-16 47360]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-14 79232]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2006-05-19 193088]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
S0 BootScreen;BootScreen; C:\WINDOWS\System32\drivers\vidstub.sys [2011-07-12 163712]
S0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2009-04-02 717296]
S2 amd64si;amd64si; C:\WINDOWS\system32\drivers\amd64si.sys []
S3 61883;61883 Unit Device; C:\WINDOWS\system32\DRIVERS\61883.sys [2008-04-14 48128]
S3 Avc;AVC Device; C:\WINDOWS\system32\DRIVERS\avc.sys [2008-04-14 38912]
S3 catchme;catchme; C:\WINDOWS\system32\drivers\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2005-10-28 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2005-10-28 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2005-10-28 21568]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
S3 MSDV;Microsoft DV Camera and VCR; C:\WINDOWS\system32\DRIVERS\msdv.sys [2008-04-14 51200]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2007-09-17 21632]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\WINDOWS\system32\DRIVERS\ss_bus.sys [2007-05-02 83592]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys [2007-05-02 15112]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\WINDOWS\system32\DRIVERS\ss_mdm.sys [2007-05-02 109704]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2011-05-10 42496]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\WINDOWS\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 dwshd;dwshd; C:\WINDOWS\System32\drivers\dwshd.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 602XML Updater;602Updater; C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [2010-04-14 73728]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2011-07-14 269480]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2011-05-02 136360]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2011-05-25 37664]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-04-06 349472]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe [2006-11-11 266295]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [2006-11-08 434176]
R2 FNF5SVC;Fn+F5 Service; C:\Program Files\LENOVO\HOTKEY\FNF5SVC.exe [2007-04-09 54832]
R2 FsUsbExService;FsUsbExService; C:\WINDOWS\system32\FsUsbExService.Exe [2009-03-12 233472]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-07-17 153376]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-03-21 143426]
R2 PMSveH;PMSveH; C:\Program Files\Lenovo\PM Driver\PMSveH.exe [2007-03-16 57344]
R2 ProtexisLicensing;ProtexisLicensing; C:\WINDOWS\system32\PSIService.exe [2007-06-05 177704]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [2006-11-08 327680]
R2 S24EventMonitor;Intel(R) PROSet/Wireless Service; C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [2006-11-08 950272]
R2 wltrysvc;Broadcom Wireless LAN Tray Service; C:\WINDOWS\System32\WLTRYSVC.EXE [2006-10-12 20480]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2008-07-30 532264]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2005-03-14 69632]
S2 SSHNAS;SSHNAS; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 Adobe Version Cue CS4;Adobe Version Cue CS4; C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [2008-08-15 284016]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-08-03 655624]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 HP Port Resolver;HP Port Resolver; C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE [2005-05-20 81920]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-04-07 430592]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WinRM;Windows Remote Management (WS-Management); C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 Vmbastacc;Vmbastacc; C:\WINDOWS\system32\drivers\ntfs.sys [2008-04-14 574976]
S4 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]

-----------------EOF-----------------

Vzhledem k tomu, že máte téměř plný disk, vyčistěte nejprve PC od balastu CCleanerem: http://www.viry.cz/forum/viewtopic.php?f=46&t=7478 . Pak dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

Tak jsem spustil ComboFix zhruba asi tak v 50% se pc restartovalo najel opět windows objevila se hláška Microsoft Windows činnost systému byla obnovena po závažné chybě kliknul jsem na další informace a objevilo se mi BCCode : 19 BCP1 : 00000020 BCP2 : 857FA838 BCP3 : 857FAC50
BCP4 : 1A83000A OSVer : 5_1_2600 SP : 3_0 Product : 256_1 .Jinak nic dalšího se mi neobjevilo ani žádný log z ComboFixu

Zkuste CF spustit v nouz. režimu.

Tak ted se zadařilo zasílám log
ComboFix 11-07-15.03 - Administrator 16.07.2011 21:45:17.4.2 - x86 MINIMAL
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2046.1739 [GMT 2:00]
Spuštěný z: C:\Documents and Settings\Administrator\Plocha\ComboFix.exe
AV: AntiVir Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}


((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))


C:\Documents and Settings\Administrator\WINDOWS
C:\WINDOWS\IsUn0405.exe
C:\WINDOWS\system32\Memman.vxd
C:\WINDOWS\system32\skinboxer43.dll
C:\WINDOWS\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job


((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_SSHNAS
-------\Service_SSHNAS


((((((((((((((((((((((((( Soubory vytvořené od 2011-06-16 do 2011-07-16 )))))))))))))))))))))))))))))))


2011-07-16 19:28:39 . 2011-07-16 19:28:42 76699 ----a-w- C:\Documents and Settings\Administrator\16_07_11;09-28-00 (PM).reg
2011-07-16 12:08:20 . 2011-07-16 12:08:20 404640 ----a-w- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2011-07-14 01:44:40 . 2011-07-14 01:44:40 -------- d-----w- C:\WINDOWS\system32\winrm
2011-07-14 00:26:19 . 2011-07-14 00:26:19 -------- d-----w- C:\WINDOWS\system32\wbem\Repository
2011-07-14 00:24:01 . 2011-07-14 00:24:03 -------- d-----w- C:\Program Files\XP Codec Pack
2011-07-13 23:26:55 . 2011-07-14 00:22:06 -------- d-----w- C:\Documents and Settings\All Users\Data aplikací\{AB2D8F2E-F7AD-4446-A11A-50D846B2CF2A}(2)
2011-07-13 22:34:34 . 2011-07-14 01:44:43 -------- dc-h--w- C:\WINDOWS\$968930Uinstall_KB968930$
2011-07-13 13:27:13 . 2010-10-18 11:10:56 7680 -c----w- C:\WINDOWS\system32\dllcache\iecompat.dll
2011-07-13 13:26:32 . 2011-04-25 16:06:09 602112 -c----w- C:\WINDOWS\system32\dllcache\msfeeds.dll
2011-07-13 13:26:32 . 2011-04-25 16:06:09 55296 -c----w- C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2011-07-13 13:26:27 . 2011-04-25 16:06:09 12800 -c----w- C:\WINDOWS\system32\dllcache\xpshims.dll
2011-07-13 13:26:27 . 2011-04-25 16:06:08 743424 -c----w- C:\WINDOWS\system32\dllcache\iedvtool.dll
2011-07-13 13:26:27 . 2011-04-25 16:06:08 247808 -c----w- C:\WINDOWS\system32\dllcache\ieproxy.dll
2011-07-13 13:26:26 . 2011-04-25 16:06:09 1991680 -c----w- C:\WINDOWS\system32\dllcache\iertutil.dll
2011-07-13 13:26:21 . 2011-04-26 08:06:10 11081728 -c----w- C:\WINDOWS\system32\dllcache\ieframe.dll
2011-07-13 09:13:28 . 2011-07-16 19:26:25 -------- d-----w- C:\Documents and Settings\Administrator\Data aplikací\Media Player Classic
2011-07-13 08:47:05 . 2011-07-14 00:24:00 -------- d-----w- C:\WINDOWS\system32\languages
2011-07-13 08:47:05 . 2011-07-13 08:47:05 -------- d-----w- C:\WINDOWS\system32\custom matrices
2011-07-13 08:46:20 . 2008-07-09 09:05:50 421888 ----a-w- C:\WINDOWS\system32\ac3filter.acm
2011-07-13 08:35:07 . 2010-09-18 06:53:37 953856 -c----w- C:\WINDOWS\system32\dllcache\mfc40u.dll
2011-07-13 06:20:44 . 2010-08-23 16:12:35 617472 -c----w- C:\WINDOWS\system32\dllcache\comctl32.dll
2011-07-13 06:11:37 . 2010-11-02 15:17:02 40960 -c----w- C:\WINDOWS\system32\dllcache\ndproxy.sys
2011-07-13 05:56:48 . 2010-08-27 08:03:42 119808 -c----w- C:\WINDOWS\system32\dllcache\t2embed.dll
2011-07-13 05:56:48 . 2009-10-15 16:32:57 81920 -c----w- C:\WINDOWS\system32\dllcache\fontsub.dll
2011-07-13 04:58:38 . 2010-06-18 13:36:12 3558912 -c----w- C:\WINDOWS\system32\dllcache\moviemk.exe
2011-07-13 04:55:49 . 2011-04-30 03:00:49 758784 -c--a-w- C:\WINDOWS\system32\dllcache\vgx.dll
2011-07-13 04:54:45 . 2010-12-09 15:15:19 713216 -c----w- C:\WINDOWS\system32\dllcache\ntdll.dll
2011-07-13 04:54:45 . 2010-12-09 15:14:08 2194944 -c----w- C:\WINDOWS\system32\dllcache\ntoskrnl.exe
2011-07-13 04:54:45 . 2010-12-09 15:14:06 2029056 -c----w- C:\WINDOWS\system32\dllcache\ntkrpamp.exe
2011-07-13 04:54:45 . 2010-12-09 15:14:05 2150912 -c----w- C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
2011-07-13 04:54:44 . 2010-12-09 15:14:04 2071552 -c----w- C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
2011-07-13 04:53:39 . 2010-10-11 14:59:30 45568 -c----w- C:\WINDOWS\system32\dllcache\wab.exe
2011-07-13 04:53:28 . 2010-08-16 08:45:05 590848 -c----w- C:\WINDOWS\system32\dllcache\rpcrt4.dll
2011-07-13 04:52:22 . 2011-03-11 14:10:37 471552 -c----w- C:\WINDOWS\system32\dllcache\aclayers.dll
2011-07-13 04:45:25 . 2009-02-06 10:10:02 227840 -c----w- C:\WINDOWS\system32\dllcache\wmiprvse.exe
2011-07-13 04:45:24 . 2009-03-06 14:23:43 284160 -c----w- C:\WINDOWS\system32\dllcache\pdh.dll
2011-07-13 04:45:24 . 2009-02-09 11:25:57 111104 -c----w- C:\WINDOWS\system32\dllcache\services.exe
2011-07-13 04:45:24 . 2009-02-09 10:56:06 401408 -c----w- C:\WINDOWS\system32\dllcache\rpcss.dll
2011-07-13 04:45:23 . 2009-02-09 10:56:05 684032 -c----w- C:\WINDOWS\system32\dllcache\advapi32.dll
2011-07-13 04:45:23 . 2009-02-09 10:56:05 473600 -c----w- C:\WINDOWS\system32\dllcache\fastprox.dll
2011-07-13 04:45:23 . 2009-02-09 10:56:04 453120 -c----w- C:\WINDOWS\system32\dllcache\wmiprvsd.dll
2011-07-13 04:43:28 . 2009-06-21 21:48:39 153088 -c----w- C:\WINDOWS\system32\dllcache\triedit.dll
2011-07-13 04:41:42 . 2010-06-14 07:43:17 1172480 -c----w- C:\WINDOWS\system32\dllcache\msxml3.dll
2011-07-13 04:41:13 . 2008-05-01 14:37:29 331776 -c----w- C:\WINDOWS\system32\dllcache\msadce.dll
2011-07-13 04:40:24 . 2008-10-15 16:38:26 337408 -c----w- C:\WINDOWS\system32\dllcache\netapi32.dll
2011-07-12 22:10:40 . 2010-07-16 11:58:30 219136 -c----w- C:\WINDOWS\system32\dllcache\wordpad.exe
2011-07-12 22:06:21 . 2008-06-14 17:35:31 272128 -c----w- C:\WINDOWS\system32\dllcache\bthport.sys
2011-07-12 21:53:44 . 2010-06-14 14:31:20 744448 -c----w- C:\WINDOWS\system32\dllcache\helpsvc.exe
2011-07-12 21:32:06 . 2011-07-14 00:25:53 -------- d-----w- C:\Program Files\Common Files\Acronis
2011-07-12 21:32:05 . 2011-07-12 21:32:05 -------- d-----w- C:\Program Files\Acronis
2011-07-12 21:15:05 . 2011-07-12 21:15:05 -------- d-----w- C:\Documents and Settings\Administrator\Local Settings\Data aplikací\{DD4E68DA-DBCD-4C1F-B85E-FF8A7BEBE383}
2011-07-12 21:15:04 . 2011-07-12 21:15:04 -------- d-----w- C:\Program Files\Common Files\MAGIX Services
2011-07-12 21:15:04 . 2011-07-12 21:15:04 -------- d-----w- C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Xara
2011-07-12 21:15:02 . 2011-07-12 21:15:04 -------- d-----w- C:\Program Files\Xara
2011-07-12 21:15:02 . 2011-07-12 21:15:04 -------- d-----w- C:\Program Files\Nufsoft
2011-07-12 20:52:18 . 2011-07-12 21:08:16 -------- d-----w- C:\Program Files\Zrychleni Pocitace
2011-07-12 20:49:26 . 2011-07-12 21:08:16 -------- d-----w- C:\Program Files\Magical Jelly Bean
2011-07-12 20:39:38 . 2011-07-12 21:08:17 -------- d-----w- C:\WINDOWS\LastGood(2)
2011-07-12 19:57:15 . 2011-07-12 21:15:38 -------- d-----w- C:\Program Files\Blaze Media Pro
2011-07-12 19:56:54 . 2011-07-12 21:15:38 -------- dc-h--w- C:\Documents and Settings\All Users\Data aplikací\{DE097E60-7F86-4350-B083-1F09B6906C92}
2011-07-12 19:49:38 . 2011-07-12 21:15:09 -------- d-----w- C:\Program Files\XP Repair Pro 4.0
2011-07-12 18:07:40 . 2011-07-12 21:15:02 -------- d-----w- C:\Program Files\PhotoFiltre
2011-07-12 12:51:20 . 2011-07-12 12:51:20 -------- d-----w- C:\Program Files\FreeTime
2011-07-11 18:08:54 . 2011-07-11 18:08:54 -------- d-----w- C:\Documents and Settings\All Users\Data aplikací\TreeCardGames
2011-07-11 18:08:53 . 2011-07-12 17:46:19 -------- d-----w- C:\Documents and Settings\Administrator\Data aplikací\SolSuite
2011-07-11 18:08:22 . 2011-07-12 21:14:27 -------- d-----w- C:\Program Files\SolSuite
2011-07-09 07:01:36 . 2008-05-08 14:02:52 203136 -c----w- C:\WINDOWS\system32\dllcache\rmcast.sys
2011-07-08 16:34:16 . 2010-12-20 17:32:06 551936 -c----w- C:\WINDOWS\system32\dllcache\oleaut32.dll
2011-07-08 16:34:14 . 2011-02-16 13:22:48 138496 -c----w- C:\WINDOWS\system32\dllcache\afd.sys
2011-07-08 16:34:10 . 2011-04-21 13:37:43 105472 -c----w- C:\WINDOWS\system32\dllcache\mup.sys
2011-07-08 16:34:05 . 2011-04-29 16:19:43 456320 -c----w- C:\WINDOWS\system32\dllcache\mrxsmb.sys
2011-07-08 16:34:01 . 2011-05-02 15:32:14 692736 -c----w- C:\WINDOWS\system32\dllcache\inetcomm.dll
2011-07-07 15:57:42 . 2005-10-14 20:41:46 72192 ----a-w- C:\WINDOWS\system32\Spool\prtprocs\w32x86\hpzpp43a.dll
2011-07-07 15:57:41 . 2005-10-14 20:42:34 37376 ----a-w- C:\WINDOWS\system32\hpz3l43a.dll
2011-07-07 15:56:25 . 2005-03-14 11:39:06 65536 ----a-w- C:\WINDOWS\system32\HPZinw12.exe
2011-07-07 15:56:25 . 2005-03-14 10:05:40 204800 ----a-w- C:\WINDOWS\system32\HPZipr12.dll
2011-07-07 15:56:25 . 2005-03-14 10:05:02 69632 ----a-w- C:\WINDOWS\system32\HPZipm12.exe
2011-07-07 15:56:25 . 2005-03-14 10:03:24 278584 ----a-w- C:\WINDOWS\system32\HPZidr12.dll
2011-07-07 15:56:25 . 2005-03-08 09:55:04 57344 ----a-w- C:\WINDOWS\system32\HPZisn12.dll
2011-07-07 15:56:25 . 2005-03-08 09:55:00 94208 ----a-w- C:\WINDOWS\system32\HPZipt12.dll
2011-07-07 15:55:52 . 2011-07-12 21:13:26 -------- d-----w- C:\Program Files\HP
2011-07-07 15:55:48 . 2005-10-28 00:52:19 21568 ----a-w- C:\WINDOWS\system32\drivers\HPZius12.sys
2011-07-07 15:55:48 . 2005-10-28 00:52:19 16496 ----a-w- C:\WINDOWS\system32\drivers\HPZipr12.sys
2011-07-07 15:55:48 . 2005-10-28 00:52:18 49664 ----a-w- C:\WINDOWS\system32\drivers\HPZid412.sys
2011-07-07 15:55:27 . 2005-10-28 00:51:09 77824 ----a-w- C:\WINDOWS\system32\hpzids01.dll
2011-07-07 15:55:27 . 2005-10-28 00:51:08 282624 ----a-w- C:\WINDOWS\system32\HPZc3212.dll
2011-07-07 15:55:27 . 2005-09-09 23:28:03 98304 ----a-w- C:\WINDOWS\system32\hpzjsn01.dll
2011-07-07 05:25:26 . 2008-04-13 22:17:38 25856 -c--a-w- C:\WINDOWS\system32\dllcache\usbprint.sys
2011-07-07 05:25:26 . 2008-04-13 22:17:38 25856 ----a-w- C:\WINDOWS\system32\drivers\usbprint.sys
2011-06-25 13:50:16 . 2009-07-31 08:05:12 1372672 -c----w- C:\WINDOWS\system32\dllcache\msxml6.dll
2011-06-25 13:50:16 . 2008-04-14 06:00:54 80896 -c----w- C:\WINDOWS\system32\dllcache\msxml6r.dll
2011-06-25 13:50:02 . 2008-04-14 06:49:50 102912 -c----w- C:\WINDOWS\system32\dllcache\dpcdll.dll
2011-06-25 13:46:55 . 2008-04-14 06:52:20 294912 -c----w- C:\WINDOWS\system32\dllcache\dlimport.exe
2011-06-25 13:43:14 . 2006-12-28 22:31:32 19569 ----a-w- C:\WINDOWS\003360_.tmp
2011-06-25 09:13:59 . 2011-06-25 09:13:59 -------- d-----w- C:\WINDOWS\mui
2011-06-25 09:13:59 . 2011-06-25 09:13:59 -------- d-----w- C:\WINDOWS\Connection Wizard
2011-06-25 09:13:59 . 2011-06-25 09:13:59 -------- d-----w- C:\WINDOWS\Config
2011-06-25 09:13:59 . 2011-06-25 09:13:59 -------- d-----w- C:\WINDOWS\addins
2011-06-25 08:52:04 . 2011-06-25 08:52:26 -------- d-----w- C:\Program Files\iTunes
2011-06-25 08:19:05 . 2001-10-25 13:00:00 41600 -c--a-w- C:\WINDOWS\system32\dllcache\weitekp9.dll
2011-06-25 08:19:05 . 2001-10-25 13:00:00 31360 -c--a-w- C:\WINDOWS\system32\dllcache\weitekp9.sys
2011-06-25 08:19:04 . 2001-10-25 13:00:00 9216 -c--a-w- C:\WINDOWS\system32\dllcache\wamps51.dll
2011-06-25 08:19:02 . 2001-10-25 13:00:00 73728 -c--a-w- C:\WINDOWS\system32\dllcache\w3ext.dll
2011-06-25 08:19:02 . 2001-10-25 13:00:00 5632 -c--a-w- C:\WINDOWS\system32\dllcache\w3svapi.dll
2011-06-25 08:19:02 . 2001-10-25 13:00:00 48256 -c--a-w- C:\WINDOWS\system32\dllcache\w32.dll
2011-06-25 08:19:02 . 2001-10-25 13:00:00 4608 -c--a-w- C:\WINDOWS\system32\dllcache\w3ctrs51.dll
2011-06-25 08:19:01 . 2008-04-14 06:50:26 86073 -c--a-w- C:\WINDOWS\system32\dllcache\voicesub.dll
2011-06-25 08:19:01 . 2008-04-14 06:50:26 426041 -c--a-w- C:\WINDOWS\system32\dllcache\voicepad.dll
2011-06-25 08:17:56 . 2001-10-25 13:00:00 98304 -c--a-w- C:\WINDOWS\system32\dllcache\msir3jp.dll
2011-06-25 08:16:58 . 2001-10-25 13:00:00 31744 -c--a-w- C:\WINDOWS\system32\dllcache\fxsroute.dll
2011-06-25 08:15:55 . 2001-10-24 10:24:44 5632 -c--a-w- C:\WINDOWS\system32\dllcache\EXCH_adsiisex.dll
2011-06-25 08:15:54 . 2001-10-25 13:00:00 6144 -c--a-w- C:\WINDOWS\system32\dllcache\admxprox.dll
2011-06-25 08:15:54 . 2001-10-25 13:00:00 50176 -c--a-w- C:\WINDOWS\system32\dllcache\adrot.dll
2011-06-25 08:15:46 . 2001-10-25 13:00:00 7168 -c--a-w- C:\WINDOWS\system32\dllcache\wamregps.dll
2011-06-25 08:15:45 . 2003-04-14 18:48:02 16384 -c--a-w- C:\WINDOWS\system32\dllcache\tcptsat.dll
2011-06-25 08:15:34 . 2001-10-25 13:00:00 7680 -c--a-w- C:\WINDOWS\system32\dllcache\inetmgr.exe
2011-06-25 08:15:34 . 2001-10-25 13:00:00 19968 -c--a-w- C:\WINDOWS\system32\dllcache\inetsloc.dll
2011-06-25 08:15:34 . 2001-10-25 13:00:00 171008 -c--a-w- C:\WINDOWS\system32\dllcache\iisui.dll
2011-06-25 08:15:33 . 2001-10-25 13:00:00 6144 -c--a-w- C:\WINDOWS\system32\dllcache\ftpsapi2.dll
2011-06-25 08:15:33 . 2001-10-25 13:00:00 5632 -c--a-w- C:\WINDOWS\system32\dllcache\iisrstap.dll
2011-06-25 08:15:33 . 2001-10-25 13:00:00 14848 -c--a-w- C:\WINDOWS\system32\dllcache\iisreset.exe
2011-06-25 08:15:32 . 2003-04-14 18:48:02 212992 -c--a-w- C:\WINDOWS\system32\dllcache\fpmmcsat.dll
2011-06-25 08:13:20 . 2001-10-25 13:00:00 16384 -c--a-w- C:\WINDOWS\system32\dllcache\isignup.exe
2011-06-25 08:13:20 . 2001-10-25 13:00:00 16384 ----a-w- C:\Program Files\Internet Explorer\Connection Wizard\isignup.exe
2011-06-25 07:23:37 . 2001-10-25 13:00:00 24661 -c--a-w- C:\WINDOWS\system32\dllcache\spxcoins.dll


(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))

2011-07-14 01:15:01 . 2009-04-30 18:30:08 66616 ----a-w- C:\WINDOWS\system32\drivers\avgntflt.sys
2011-07-14 01:15:01 . 2009-04-30 18:30:08 138192 ----a-w- C:\WINDOWS\system32\drivers\avipbb.sys
2011-07-12 21:27:50 . 2009-08-23 06:52:36 163712 ----a-w- C:\WINDOWS\system32\drivers\vidstub.sys
2011-06-06 11:35:21 . 2004-08-17 12:44:44 1858944 ----a-w- C:\WINDOWS\system32\win32k.sys
2011-06-03 14:18:09 . 2011-06-03 14:18:09 218688 ----a-w- C:\WINDOWS\system32\drivers\dtsoftbus01.sys
2011-05-10 06:06:08 . 2010-06-27 19:01:52 4517664 ----a-w- C:\WINDOWS\system32\usbaaplrc.dll
2011-05-10 06:06:08 . 2009-07-01 15:15:33 42496 ----a-w- C:\WINDOWS\system32\drivers\usbaapl.sys
2011-05-02 15:32:14 . 2008-06-16 16:54:59 692736 ----a-w- C:\WINDOWS\system32\inetcomm.dll
2011-04-29 17:25:05 . 2004-08-17 12:49:18 151552 ----a-w- C:\WINDOWS\system32\schannel.dll
2011-04-29 16:19:43 . 2004-08-03 20:15:18 456320 ----a-w- C:\WINDOWS\system32\drivers\mrxsmb.sys
2011-04-26 11:07:50 . 2004-08-17 12:49:22 293376 ----a-w- C:\WINDOWS\system32\winsrv.dll
2011-04-26 11:07:50 . 2004-08-17 12:49:06 33280 ----a-w- C:\WINDOWS\system32\csrsrv.dll
2011-04-25 16:06:09 . 2004-08-17 12:49:30 1469440 ------w- C:\WINDOWS\system32\inetcpl.cpl
2011-04-25 16:06:09 . 2004-08-17 12:49:22 916480 ----a-w- C:\WINDOWS\system32\wininet.dll
2011-04-25 16:06:09 . 2004-08-17 12:49:10 43520 ------w- C:\WINDOWS\system32\licmgr10.dll
2011-04-25 14:47:32 . 2004-08-17 12:49:22 668160 ----a-w- C:\WINDOWS\system32\wininet(4).dll
2011-04-25 14:47:32 . 2004-08-17 12:49:22 668160 ----a-w- C:\WINDOWS\system32\wininet(3).dll
2011-04-25 14:47:31 . 2004-08-17 12:49:20 627200 ----a-w- C:\WINDOWS\system32\urlmon(4).dll
2011-04-25 14:47:31 . 2004-08-17 12:49:20 627200 ----a-w- C:\WINDOWS\system32\urlmon(3).dll
2011-04-25 12:01:33 . 2004-08-17 12:44:08 385024 ------w- C:\WINDOWS\system32\html.iec
2011-04-21 13:37:43 . 2004-08-03 20:15:22 105472 ----a-w- C:\WINDOWS\system32\drivers\mup.sys
2011-06-18 14:22:48 . 2011-06-18 14:22:48 142296 ----a-w- C:\Program Files\mozilla firefox\components\browsercomps.dll


------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.

[-] 2008-04-13 22:10:32 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[-] 2008-04-13 22:10:32 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\drivers\atapi.sys
[-] 2004-08-03 20:59:44 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\atapi.sys

[-] 2008-04-13 22:27:28 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\asyncmac.sys
[-] 2008-04-13 22:27:28 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\drivers\asyncmac.sys
[-] 2008-04-13 18:57:27 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ERDNT\cache\asyncmac.sys
[-] 2004-08-03 20:05:04 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\asyncmac.sys

[-] 2001-10-25 13:00:00 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0 (XPClient.010817-1148)] . . C:\WINDOWS\system32\dllcache\beep.sys
[-] 2001-10-25 13:00:00 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0 (XPClient.010817-1148)] . . C:\WINDOWS\system32\drivers\beep.sys
[-] 2001-10-25 12:00:00 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0 (XPClient.010817-1148)] . . C:\WINDOWS\ERDNT\cache\beep.sys

[-] 2008-04-14 05:59:08 . 1B6162FE7F66B1A71A4B70F941C4AA9B . 24576 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\kbdclass.sys
[-] 2008-04-14 05:59:08 . 1B6162FE7F66B1A71A4B70F941C4AA9B . 24576 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\drivers\kbdclass.sys
[-] 2008-04-14 02:29:06 . 1B6162FE7F66B1A71A4B70F941C4AA9B . 24576 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ERDNT\cache\kbdclass.sys
[-] 2004-08-17 12:45:00 . 6F877BF8DC01A550CD666F3BEDB2213C . 24576 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\kbdclass.sys

[-] 2008-04-13 22:50:38 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\ndis.sys
[-] 2008-04-13 22:50:38 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\drivers\ndis.sys
[-] 2008-04-13 19:20:37 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ERDNT\cache\ndis.sys
[-] 2004-08-03 20:14:30 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\ndis.sys

[-] 2008-04-13 22:45:54 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\ntfs.sys
[-] 2008-04-13 22:45:54 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\drivers\ntfs.sys
[-] 2008-04-13 19:15:53 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ERDNT\cache\ntfs.sys
[-] 2004-08-03 20:15:10 . B78BE402C3F63DD55521F73876951CDD . 574592 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\ntfs.sys

[-] 2001-10-25 13:00:00 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0 (XPClient.010817-1148)] . . C:\WINDOWS\system32\dllcache\null.sys
[-] 2001-10-25 13:00:00 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0 (XPClient.010817-1148)] . . C:\WINDOWS\system32\drivers\null.sys
[-] 2001-10-25 12:00:00 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0 (XPClient.010817-1148)] . . C:\WINDOWS\ERDNT\cache\null.sys

[-] 2008-06-20 11:59:02 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)] . . C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[-] 2008-06-20 11:59:02 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)] . . C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[-] 2008-06-20 11:51:12 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\ERDNT\cache\tcpip.sys
[-] 2008-06-20 11:51:12 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\SoftwareDistribution\Download\fe608cd8d2b8f77abaee7a69a696bcf7\sp3gdr\tcpip.sys
[-] 2008-06-20 11:51:12 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\system32\dllcache\tcpip.sys
[-] 2008-06-20 11:51:12 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\system32\drivers\tcpip.sys
[-] 2008-04-13 22:50:18 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\$NtUninstallKB2509553$\tcpip.sys
[-] 2008-04-13 22:50:18 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[-] 2004-08-03 20:14:42 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys

[-] 2008-04-14 06:51:38 . 249276D3EF1E74B992299CB96099E4D7 . 77824 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\browser.dll
[-] 2008-04-14 06:51:38 . 249276D3EF1E74B992299CB96099E4D7 . 77824 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\browser.dll
[-] 2008-04-14 03:21:37 . 249276D3EF1E74B992299CB96099E4D7 . 77824 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ERDNT\cache\browser.dll
[-] 2004-08-17 12:49:04 . F219E27E88107A50544153898DD8178E . 77312 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\browser.dll

[-] 2008-04-14 06:52:30 . ED0A176354487CEED65B80A7148AB739 . 13312 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\lsass.exe
[-] 2008-04-14 06:52:30 . ED0A176354487CEED65B80A7148AB739 . 13312 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\lsass.exe
[-] 2008-04-14 03:22:29 . ED0A176354487CEED65B80A7148AB739 . 13312 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ERDNT\cache\lsass.exe
[-] 2004-08-17 12:49:24 . 82A362FE1D4980B71B588D9C10748511 . 13312 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\lsass.exe

[-] 2008-04-14 06:51:52 . 72E1E9E2977BE08BDEEDB6D8FD9D4D40 . 198144 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\netman.dll
[-] 2008-04-14 06:51:52 . 72E1E9E2977BE08BDEEDB6D8FD9D4D40 . 198144 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\netman.dll
[-] 2008-04-14 03:21:50 . 72E1E9E2977BE08BDEEDB6D8FD9D4D40 . 198144 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ERDNT\cache\netman.dll
[-] 2004-08-17 12:49:14 . AF342D2781225A8769686E0D47E3123E . 198144 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\netman.dll

[-] 2008-04-14 06:51:40 . E7B375DFFB68A16659CA66474A280C47 . 806912 . . [2001.12.4414.700] . . C:\WINDOWS\ServicePackFiles\i386\comres.dll
[-] 2008-04-14 06:51:40 . E7B375DFFB68A16659CA66474A280C47 . 806912 . . [2001.12.4414.700] . . C:\WINDOWS\system32\comres.dll
[-] 2004-08-17 12:49:04 . B44F68274AB7B8A54E9AD74AFF0EFAAC . 806912 . . [2001.12.4414.258] . . C:\WINDOWS\$NtServicePackUninstall$\comres.dll

[-] 2008-04-14 06:51:56 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\qmgr.dll
[-] 2008-04-14 06:51:56 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\qmgr.dll
[-] 2008-04-14 03:21:54 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ERDNT\cache\qmgr.dll
[-] 2008-04-14 03:21:54 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\bits\qmgr.dll
[-] 2004-08-17 12:49:16 . E774A26610EC92674273486612C11CFC . 382464 . . [6.6.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\qmgr.dll

[-] 2009-02-09 10:59:26 . C0BD34A62508BA68F146E22CE45919F9 . 401408 . . [5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)] . . C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\rpcss.dll
[-] 2009-02-09 10:59:26 . C0BD34A62508BA68F146E22CE45919F9 . 401408 . . [5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)] . . C:\WINDOWS\SoftwareDistribution\Download\3600e56e45ad54d0df91c2e4c0249f5a\SP3QFE\rpcss.dll
[-] 2009-02-09 10:56:06 . BE27674D1CBC3214AEC84B4336A38BBF . 401408 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\ERDNT\cache\rpcss.dll
[-] 2009-02-09 10:56:06 . BE27674D1CBC3214AEC84B4336A38BBF . 401408 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\SoftwareDistribution\Download\3600e56e45ad54d0df91c2e4c0249f5a\SP3GDR\rpcss.dll
[-] 2009-02-09 10:56:06 . BE27674D1CBC3214AEC84B4336A38BBF . 401408 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\system32\rpcss.dll
[-] 2009-02-09 10:56:06 . BE27674D1CBC3214AEC84B4336A38BBF . 401408 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\system32\dllcache\rpcss.dll
[-] 2009-02-09 10:22:08 . 2B269C916766BDB43404F043B763427D . 399360 . . [5.1.2600.3520 (xpsp_sp2_gdr.090206-1233)] . . C:\WINDOWS\SoftwareDistribution\Download\3600e56e45ad54d0df91c2e4c0249f5a\SP2GDR\rpcss.dll
[-] 2009-02-09 10:03:46 . BEF7BB41E666EAA34BE7E99C2B107DB8 . 401408 . . [5.1.2600.3520 (xpsp_sp2_qfe.090206-1239)] . . C:\WINDOWS\SoftwareDistribution\Download\3600e56e45ad54d0df91c2e4c0249f5a\SP2QFE\rpcss.dll
[-] 2008-04-14 06:51:56 . C868F3AE15CF71A93F2AA3A32856D839 . 399360 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\$NtUninstallKB956572$\rpcss.dll
[-] 2008-04-14 06:51:56 . C868F3AE15CF71A93F2AA3A32856D839 . 399360 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\rpcss.dll
[-] 2004-08-17 12:49:18 . C72C15EE57E248C66E57C76CAB086CF2 . 395776 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\rpcss.dll

[-] 2009-02-09 11:25:57 . 9EF697AF07BB8DD82C3B02CA953A95B7 . 111104 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\ERDNT\cache\services.exe
[-] 2009-02-09 11:25:57 . 9EF697AF07BB8DD82C3B02CA953A95B7 . 111104 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\SoftwareDistribution\Download\3600e56e45ad54d0df91c2e4c0249f5a\SP3GDR\services.exe
[-] 2009-02-09 11:25:57 . 9EF697AF07BB8DD82C3B02CA953A95B7 . 111104 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\system32\services.exe
[-] 2009-02-09 11:25:57 . 9EF697AF07BB8DD82C3B02CA953A95B7 . 111104 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\system32\dllcache\services.exe
[-] 2009-02-09 11:18:56 . 3D107D45CCFDB266E91D84B52CD7F430 . 111104 . . [5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)] . . C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe
[-] 2009-02-09 11:18:56 . 3D107D45CCFDB266E91D84B52CD7F430 . 111104 . . [5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)] . . C:\WINDOWS\SoftwareDistribution\Download\3600e56e45ad54d0df91c2e4c0249f5a\SP3QFE\services.exe
[-] 2009-02-09 10:11:38 . 4F9F7B567970B524F31D9970A23F7C24 . 111104 . . [5.1.2600.3520 (xpsp_sp2_gdr.090206-1233)] . . C:\WINDOWS\SoftwareDistribution\Download\3600e56e45ad54d0df91c2e4c0249f5a\SP2GDR\services.exe
[-] 2009-02-09 09:54:36 . 33081FED75032291EE0E008D5385E86F . 111104 . . [5.1.2600.3520 (xpsp_sp2_qfe.090206-1239)] . . C:\WINDOWS\SoftwareDistribution\Download\3600e56e45ad54d0df91c2e4c0249f5a\SP2QFE\services.exe
[-] 2008-04-14 06:52:46 . F0D2AE69035092BF22DAD6B50FAB85C2 . 108544 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\$NtUninstallKB956572$\services.exe
[-] 2008-04-14 06:52:46 . F0D2AE69035092BF22DAD6B50FAB85C2 . 108544 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\services.exe
[-] 2004-08-17 12:49:28 . 6E401E61F952FBBF708AFBECEFAFAE81 . 108544 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\services.exe

[-] 2010-08-17 13:19:36 . 258DD5D4283FD9F9A7166BE9AE45CE73 . 58880 . . [5.1.2600.6024 (xpsp_sp3_qfe.100817-1627)] . . C:\WINDOWS\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe
[-] 2010-08-17 13:17:06 . 60784F891563FB1B767F70117FC2428F . 58880 . . [5.1.2600.6024 (xpsp_sp3_gdr.100817-1626)] . . C:\WINDOWS\SoftwareDistribution\Download\f6c525d95e98af6721a0244324b98925\sp3gdr\spoolsv.exe
[-] 2010-08-17 13:17:06 . 60784F891563FB1B767F70117FC2428F . 58880 . . [5.1.2600.6024 (xpsp_sp3_gdr.100817-1626)] . . C:\WINDOWS\system32\spoolsv.exe
[-] 2010-08-17 13:17:06 . 60784F891563FB1B767F70117FC2428F . 58880 . . [5.1.2600.6024 (xpsp_sp3_gdr.100817-1626)] . . C:\WINDOWS\system32\dllcache\spoolsv.exe
[-] 2008-04-14 06:52:50 . CB1090BCA0E7B40D0B5B4E4D66531809 . 57856 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\$NtUninstallKB2347290$\spoolsv.exe
[-] 2008-04-14 06:52:50 . CB1090BCA0E7B40D0B5B4E4D66531809 . 57856 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\spoolsv.exe
[-] 2008-04-14 03:22:48 . CB1090BCA0E7B40D0B5B4E4D66531809 . 57856 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ERDNT\cache\spoolsv.exe
[-] 2004-08-17 12:49:28 . 21B6FAA88044A41640E03EBB68BE93E8 . 57856 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\spoolsv.exe

[-] 2008-04-14 06:52:54 . CDDB1F8E1AEA356F3AD106F2CF9B7FEA . 507904 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[-] 2008-04-14 06:52:54 . CDDB1F8E1AEA356F3AD106F2CF9B7FEA . 507904 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\winlogon.exe
[-] 2008-04-14 03:22:53 . CDDB1F8E1AEA356F3AD106F2CF9B7FEA . 507904 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ERDNT\cache\winlogon.exe
[-] 2004-08-17 12:49:28 . 221C29AE1B4CC61D11D8B27DE78B2307 . 502272 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe

[-] 2010-08-23 16:12:35 . E145ADD7DAEF759C4F5FB80A180A9C30 . 617472 . . [5.82 (xpsp_sp3_qfe.100823-1643)] . . C:\WINDOWS\SoftwareDistribution\Download\91c0d00449fe57ed4a4c0c930c390f2f\SP3QFE\comctl32.dll
[-] 2010-08-23 16:12:35 . E145ADD7DAEF759C4F5FB80A180A9C30 . 617472 . . [5.82 (xpsp_sp3_qfe.100823-1643)] . . C:\WINDOWS\system32\comctl32.dll
[-] 2010-08-23 16:12:35 . E145ADD7DAEF759C4F5FB80A180A9C30 . 617472 . . [5.82 (xpsp_sp3_qfe.100823-1643)] . . C:\WINDOWS\system32\dllcache\comctl32.dll
[-] 2010-08-23 16:12:33 . 8A72A30FDC803DC06755D3B36D966F31 . 1054208 . . [6.0 (xpsp_sp3_qfe.100823-1643)] . . C:\WINDOWS\SoftwareDistribution\Download\91c0d00449fe57ed4a4c0c930c390f2f\asms\60\msft\windows\common\controls\comctl32.dll
[-] 2010-08-23 16:12:33 . 8A72A30FDC803DC06755D3B36D966F31 . 1054208 . . [6.0 (xpsp_sp3_qfe.100823-1643)] . . C:\WINDOWS\SoftwareDistribution\Download\91c0d00449fe57ed4a4c0c930c390f2f\SP3QFE\asms\60\msft\windows\common\controls\comctl32.dll
[-] 2010-08-23 16:12:33 . 8A72A30FDC803DC06755D3B36D966F31 . 1054208 . . [6.0 (xpsp_sp3_qfe.100823-1643)] . . C:\WINDOWS\WinSxS\InstallTemp\6186278\comctl32.dll
[-] 2010-08-23 16:12:33 . 8A72A30FDC803DC06755D3B36D966F31 . 1054208 . . [6.0 (xpsp_sp3_qfe.100823-1643)] . . C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
[-] 2008-04-14 06:51:40 . 4F993463DC5F3F80D77A3D34D7BFBFED . 617472 . . [5.82 (xpsp.080413-2105)] . . C:\WINDOWS\$NtUninstallKB2296011$\comctl32.dll
[-] 2008-04-14 06:51:40 . 4F993463DC5F3F80D77A3D34D7BFBFED . 617472 . . [5.82 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\comctl32.dll
[-] 2008-04-14 06:37:06 . D7B7AE36A2EBA312AC4B53862019B3F5 . 1054208 . . [6.0 (xpsp.080413-2105)] . . C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
[-] 2008-04-14 03:21:38 . 4F993463DC5F3F80D77A3D34D7BFBFED . 617472 . . [5.82 (xpsp.080413-2105)] . . C:\WINDOWS\ERDNT\cache\comctl32.dll
[-] 2004-08-17 12:49:04 . 876C658C44F2BF4AF050E5534A9F066F . 611328 . . [5.82 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\comctl32.dll
[-] 2004-08-17 12:48:02 . F76B3003366A205E05AFC0D034C7D3E9 . 1050624 . . [6.0 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
[-] 2001-10-25 13:00:00 . AEF3D788DBF40C7C4D204EA45EB0C505 . 921088 . . [6.0 (xpclient.010817-1148)] . . C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll
[-] 2001-10-25 12:00:00 . AEF3D788DBF40C7C4D204EA45EB0C505 . 921088 . . [6.0 (xpclient.010817-1148)] . . C:\WINDOWS\WinSxS\InstallTemp\81422\comctl32.dll

[-] 2008-04-14 06:51:40 . F3AB0933CBD166D271992F411C27CCAF . 62464 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll
[-] 2008-04-14 06:51:40 . F3AB0933CBD166D271992F411C27CCAF . 62464 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\cryptsvc.dll
[-] 2008-04-14 03:21:38 . F3AB0933CBD166D271992F411C27CCAF . 62464 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ERDNT\cache\cryptsvc.dll
[-] 2004-08-17 12:49:04 . 70D2A1756F4B2067658A186C963FCABD . 60416 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll

[-] 2008-07-07 20:29:06 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . C:\WINDOWS\ERDNT\cache\es.dll
[-] 2008-07-07 20:29:06 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . C:\WINDOWS\SoftwareDistribution\Download\238cf948db525111b0a69f7144be46ee\sp3gdr\es.dll
[-] 2008-07-07 20:29:06 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . C:\WINDOWS\system32\es.dll
[-] 2008-07-07 20:29:06 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . C:\WINDOWS\system32\dllcache\es.dll
[-] 2008-07-07 20:25:38 . BE68EA4457E2E5717231CF91BE5448E0 . 253952 . . [2001.12.4414.706] . . C:\WINDOWS\$hf_mig$\KB950974\SP3QFE\es.dll
[-] 2008-04-14 06:51:42 . 260C69FD67687B0DC062FC3D31655857 . 246272 . . [2001.12.4414.701] . . C:\WINDOWS\$NtUninstallKB950974$\es.dll
[-] 2008-04-14 06:51:42 . 260C69FD67687B0DC062FC3D31655857 . 246272 . . [2001.12.4414.701] . . C:\WINDOWS\ServicePackFiles\i386\es.dll
[-] 2004-08-17 12:49:08 . 972378B907070F64932A87C90A035487 . 243200 . . [2001.12.4414.258] . . C:\WINDOWS\$NtServicePackUninstall$\es.dll

[-] 2008-04-14 06:51:44 . 6C60CA8AC7470AC01CFD3D24C7283CD1 . 110080 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\imm32.dll
[-] 2008-04-14 06:51:44 . 6C60CA8AC7470AC01CFD3D24C7283CD1 . 110080 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\imm32.dll
[-] 2008-04-14 03:21:43 . 6C60CA8AC7470AC01CFD3D24C7283CD1 . 110080 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ERDNT\cache\imm32.dll
[-] 2004-08-17 12:49:10 . 2413635113361E54B62F0C40E4E4DAE6 . 110080 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\imm32.dll

[-] 2009-03-21 14:09:02 . 545C653E8FE241CA6200798AA94FE5C7 . 988160 . . [5.1.2600.5781 (xpsp_sp3_gdr.090321-1317)] . . C:\WINDOWS\ERDNT\cache\kernel32.dll
[-] 2009-03-21 14:09:02 . 545C653E8FE241CA6200798AA94FE5C7 . 988160 . . [5.1.2600.5781 (xpsp_sp3_gdr.090321-1317)] . . C:\WINDOWS\SoftwareDistribution\Download\5aa53a77792c8cc6cbdb431d4bf47daa\sp3gdr\kernel32.dll
[-] 2009-03-21 14:09:02 . 545C653E8FE241CA6200798AA94FE5C7 . 988160 . . [5.1.2600.5781 (xpsp_sp3_gdr.090321-1317)] . . C:\WINDOWS\system32\kernel32.dll
[-] 2009-03-21 14:09:02 . 545C653E8FE241CA6200798AA94FE5C7 . 988160 . . [5.1.2600.5781 (xpsp_sp3_gdr.090321-1317)] . . C:\WINDOWS\system32\dllcache\kernel32.dll
[-] 2009-03-21 14:03:50 . 0D8F61460F84139BBE5E391D8DE18D9A . 990208 . . [5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)] . . C:\WINDOWS\$hf_mig$\KB959426\SP3QFE\kernel32.dll
[-] 2008-04-14 06:51:46 . FD91CD95A1C663DF54DD371CC8A234DE . 988160 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\$NtUninstallKB959426$\kernel32.dll
[-] 2008-04-14 06:51:46 . FD91CD95A1C663DF54DD371CC8A234DE . 988160 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\kernel32.dll
[-] 2004-08-17 12:49:10 . 98DA079F61265BC26D4587E280B79F30 . 982016 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\kernel32.dll

[-] 2008-04-14 06:51:46 . 7FDE9FC15765E02B23E1756930165AD1 . 19968 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\linkinfo.dll
[-] 2008-04-14 06:51:46 . 7FDE9FC15765E02B23E1756930165AD1 . 19968 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\linkinfo.dll
[-] 2008-04-14 03:21:45 . 7FDE9FC15765E02B23E1756930165AD1 . 19968 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ERDNT\cache\linkinfo.dll
[-] 2004-08-17 12:49:10 . EE1F842DB2AE412136643B0814D770A6 . 18944 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\linkinfo.dll

[-] 2008-04-14 06:51:46 . C66BA7BD13C8FB8BEC4863B88641C763 . 22016 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\lpk.dll
[-] 2008-04-14 06:51:46 . C66BA7BD13C8FB8BEC4863B88641C763 . 22016 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\lpk.dll
[-] 2008-04-14 03:21:45 . C66BA7BD13C8FB8BEC4863B88641C763 . 22016 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ERDNT\cache\lpk.dll
[-] 2004-08-17 12:49:10 . BFE8DC7AAE7CB1C86243D77B340DC304 . 22016 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\lpk.dll

[-] 2011-05-30 22:12:53 . DCF153201CF53F9A721AFEEF43C6947D . 5964800 . . [8.00.6001.19088 (longhorn_ie8_gdr.110527-1700)] . . C:\WINDOWS\SoftwareDistribution\Download\63bb42b24624dac39b0ccbf93365e2fd\SP3GDR\mshtml.dll
[-] 2011-05-30 22:12:53 . DCF153201CF53F9A721AFEEF43C6947D . 5964800 . . [8.00.6001.19088 (longhorn_ie8_gdr.110527-1700)] . . C:\WINDOWS\SoftwareDistribution\Download\6c966f0586f91fbfb81a7f7a71834cf1\SP3GDR\mshtml.dll
[-] 2011-05-30 22:12:53 . DCF153201CF53F9A721AFEEF43C6947D . 5964800 . . [8.00.6001.19088 (longhorn_ie8_gdr.110527-1700)] . . C:\WINDOWS\system32\mshtml.dll
[-] 2011-05-30 22:12:53 . DCF153201CF53F9A721AFEEF43C6947D . 5964800 . . [8.00.6001.19088 (longhorn_ie8_gdr.110527-1700)] . . C:\WINDOWS\system32\dllcache\mshtml.dll
[-] 2011-05-30 22:11:35 . 878F729E235273AAF7EE57AD15679F15 . 5967360 . . [8.00.6001.23181 (longhorn_ie8_ldr.110527-1800)] . . C:\WINDOWS\$hf_mig$\KB2530548-IE8\SP3QFE\mshtml.dll
[-] 2011-05-30 22:11:35 . 878F729E235273AAF7EE57AD15679F15 . 5967360 . . [8.00.6001.23181 (longhorn_ie8_ldr.110527-1800)] . . C:\WINDOWS\SoftwareDistribution\Download\63bb42b24624dac39b0ccbf93365e2fd\SP3QFE\mshtml.dll
[-] 2011-05-30 22:11:35 . 878F729E235273AAF7EE57AD15679F15 . 5967360 . . [8.00.6001.23181 (longhorn_ie8_ldr.110527-1800)] . . C:\WINDOWS\SoftwareDistribution\Download\6c966f0586f91fbfb81a7f7a71834cf1\SP3QFE\mshtml.dll
[-] 2011-04-25 14:47:31 . 210D7D9200D8E374500FE9EC34578A1C . 3100672 . . [6.00.2900.6104 (xpsp_sp3_gdr.110425-1624)] . . C:\WINDOWS\ie8\mshtml.dll
[-] 2011-04-25 14:47:31 . 210D7D9200D8E374500FE9EC34578A1C . 3100672 . . [6.00.2900.6104 (xpsp_sp3_gdr.110425-1624)] . . C:\WINDOWS\SoftwareDistribution\Download\0d6a16a8c196a076bb861a124cf15724\sp3gdr\mshtml.dll
[-] 2011-04-25 14:46:28 . 93B0E90290A9E668F7E39379335B75F7 . 3101184 . . [6.00.2900.6104 (xpsp_sp3_qfe.110425-1624)] . . C:\WINDOWS\$hf_mig$\KB2530548\SP3QFE\mshtml.dll
[-] 2011-04-25 14:46:28 . 93B0E90290A9E668F7E39379335B75F7 . 3101184 . . [6.00.2900.6104 (xpsp_sp3_qfe.110425-1624)] . . C:\WINDOWS\SoftwareDistribution\Download\0d6a16a8c196a076bb861a124cf15724\sp3qfe\mshtml.dll
[-] 2011-02-22 23:26:49 . A5DF4911593299C09D92BFA3E7096F68 . 5964800 . . [8.00.6001.23141 (longhorn_ie8_ldr.110216-1756)] . . C:\WINDOWS\$hf_mig$\KB2497640-IE8\SP3QFE\mshtml.dll
[-] 2010-12-20 23:52:36 . F41F8D25A9EC6BC64B4F081DD4AC3C7F . 5961216 . . [8.00.6001.19019 (longhorn_ie8_gdr.101217-1700)] . . C:\WINDOWS\ie8updates\KB2497640-IE8\mshtml.dll
[-] 2010-12-20 23:51:56 . 0EB055A6E68E1855AB0AA90CDBEDBA6C . 5962240 . . [8.00.6001.23111 (longhorn_ie8_ldr.101217-1800)] . . C:\WINDOWS\$hf_mig$\KB2482017-IE8\SP3QFE\mshtml.dll
[-] 2010-11-06 00:24:58 . 8C0B4A6F4E9C323937F44BC252747FD1 . 5960704 . . [8.00.6001.23091 (longhorn_ie8_ldr.101101-1800)] . . C:\WINDOWS\$hf_mig$\KB2416400-IE8\SP3QFE\mshtml.dll
[-] 2010-11-06 00:23:37 . 331567A3FD1058728D444E5CA11F0E24 . 5959168 . . [8.00.6001.18999 (longhorn_ie8_gdr.101101-1700)] . . C:\WINDOWS\ie8updates\KB2482017-IE8\mshtml.dll
[-] 2010-09-10 05:52:33 . BFB18929123F545F3EAA845F912AC4BD . 5957120 . . [8.00.6001.18975 (longhorn_ie8_gdr.100907-1700)] . . C:\WINDOWS\ie8updates\KB2416400-IE8\mshtml.dll
[-] 2010-09-10 05:50:03 . 84BF75E7A417C4F176AEC0B4E46C104E . 5958656 . . [8.00.6001.23067 (longhorn_ie8_ldr.100907-1730)] . . C:\WINDOWS\$hf_mig$\KB2360131-IE8\SP3QFE\mshtml.dll
[-] 2010-06-24 12:29:03 . C082E5EC8E50C92E23E3464EF7F05410 . 5954560 . . [8.00.6001.23037 (longhorn_ie8_ldr.100616-1800)] . . C:\WINDOWS\$hf_mig$\KB2183461-IE8\SP3QFE\mshtml.dll
[-] 2010-06-24 12:27:26 . 5110C2044FF335AC363EECEA920F6DF2 . 5951488 . . [8.00.6001.18939 (longhorn_ie8_gdr.100616-1700)] . . C:\WINDOWS\ie8updates\KB2360131-IE8\mshtml.dll
[-] 2010-05-06 10:35:34 . 06B941C7749A9F071444B4C7563F36B5 . 5950976 . . [8.00.6001.18928 (longhorn_ie8_gdr.100503-1700)] . . C:\WINDOWS\ie8updates\KB2183461-IE8\mshtml.dll
[-] 2010-05-06 10:35:34 . 06B941C7749A9F071444B4C7563F36B5 . 5950976 . . [8.00.6001.18928 (longhorn_ie8_gdr.100503-1700)] . . C:\WINDOWS\ie8updates\KB2530548-IE8\mshtml.dll
[-] 2010-05-06 10:35:34 . 06B941C7749A9F071444B4C7563F36B5 . 5950976 . . [8.00.6001.18928 (longhorn_ie8_gdr.100503-1700)] . . C:\WINDOWS\SoftwareDistribution\Download\4da92e2c99b7232d7106179052438045\SP3GDR\mshtml.dll
[-] 2010-05-06 10:28:40 . 3F88F981AA7BC20744E0D2C699F500EF . 5953024 . . [8.00.6001.23019 (longhorn_ie8_ldr.100503-1800)] . . C:\WINDOWS\$hf_mig$\KB982381-IE8\SP3QFE\mshtml.dll
[-] 2010-05-06 10:28:40 . 3F88F981AA7BC20744E0D2C699F500EF . 5953024 . . [8.00.6001.23019 (longhorn_ie8_ldr.100503-1800)] . . C:\WINDOWS\SoftwareDistribution\Download\4da92e2c99b7232d7106179052438045\SP3QFE\mshtml.dll
[-] 2010-02-25 06:12:54 . AC93856CC1D10E74986EA4E70D90748F . 5946880 . . [8.00.6001.22995 (longhorn_ie8_ldr.100223-0100)] . . C:\WINDOWS\$hf_mig$\KB980182-IE8\SP3QFE\mshtml.dll
[-] 2009-12-21 19:08:41 . 8BE0CC683F604CA2DA29589DA96D6FD1 . 5942784 . . [8.00.6001.18876 (longhorn_ie8_gdr.091218-1700)] . . C:\WINDOWS\ie8updates\KB980182-IE8\mshtml.dll
[-] 2009-12-21 19:02:41 . BD424F12E808F3AA345C4816F7124F7C . 5945856 . . [8.00.6001.22967 (longhorn_ie8_ldr.091219-0100)] . . C:\WINDOWS\$hf_mig$\KB978207-IE8\SP3QFE\mshtml.dll
[-] 2009-10-29 07:43:52 . 00EC3DE6B7C581CC2675CCD549B692D7 . 5940736 . . [8.00.6001.18854 (longhorn_ie8_gdr.091026-1700)] . . C:\WINDOWS\ie8updates\KB978207-IE8\mshtml.dll
[-] 2009-10-29 07:38:12 . FC883BC594F028EF5D77B645AE91C914 . 5944320 . . [8.00.6001.22945 (longhorn_ie8_ldr.091027-0100)] . . C:\WINDOWS\$hf_mig$\KB976325-IE8\SP3QFE\mshtml.dll
[-] 2009-10-22 09:18:24 . B459C87AA60BADADF3F0887737889CFF . 5939712 . . [8.00.6001.18852 (longhorn_ie8_gdr.091020-1827)] . . C:\WINDOWS\ie8updates\KB976325-IE8\mshtml.dll
[-] 2009-10-22 09:14:58 . 3E902BD4D0EFB9E73C515DD3DEB6003B . 5943296 . . [8.00.6001.22942 (longhorn_ie8_ldr.091021-0230)] . . C:\WINDOWS\$hf_mig$\KB976749-IE8\SP3QFE\mshtml.dll
[-] 2009-08-29 07:58:57 . 8097658FEC4E7E65C8A63E6B7B2B0921 . 5940224 . . [8.00.6001.18828 (longhorn_ie8_gdr.090826-1700)] . . C:\WINDOWS\ERDNT\cache\mshtml.dll
[-] 2009-08-29 07:58:57 . 8097658FEC4E7E65C8A63E6B7B2B0921 . 5940224 . . [8.00.6001.18828 (longhorn_ie8_gdr.090826-1700)] . . C:\WINDOWS\ie8updates\KB976749-IE8\mshtml.dll
[-] 2009-08-29 07:51:13 . F343C3CE6026ADE482D48B2D4F881A1D . 5942272 . . [8.00.6001.22918 (longhorn_ie8_ldr.090827-0100)] . . C:\WINDOWS\$hf_mig$\KB974455-IE8\SP3QFE\mshtml.dll
[-] 2009-07-19 13:16:59 . D6DA6137433E02999C1229DC692250CD . 5937152 . . [8.00.6001.18812 (longhorn_ie8_gdr.090717-2100)] . . C:\WINDOWS\ie8updates\KB974455-IE8\mshtml.dll
[-] 2009-07-19 13:08:39 . 54E07F3B4EEF71607437367BA1922F6A . 5938176 . . [8.00.6001.22902 (longhorn_ie8_ldr.090718-0500)] . . C:\WINDOWS\$hf_mig$\KB972260-IE8\SP3QFE\mshtml.dll
[-] 2009-05-13 05:09:06 . 53FF3AE6C6C6F7888E845C6A755D5C09 . 5936128 . . [8.00.6001.22873 (longhorn_ie8_ldr.090509-0100)] . . C:\WINDOWS\$hf_mig$\KB969897-IE8\SP3QFE\mshtml.dll
[-] 2009-05-13 05:09:06 . 53FF3AE6C6C6F7888E845C6A755D5C09 . 5936128 . . [8.00.6001.22873 (longhorn_ie8_ldr.090509-0100)] . . C:\WINDOWS\SoftwareDistribution\Download\508db5965e9c778c7eb18f4b9547ae6c\SP3QFE\mshtml.dll
[-] 2009-05-13 05:05:58 . 3BABDB8AAEED25E0EFE23561C1A2BCE1 . 5936128 . . [8.00.6001.18783 (longhorn_ie8_gdr.090508-1700)] . . C:\WINDOWS\ie8updates\KB972260-IE8\mshtml.dll
[-] 2009-05-13 05:05:58 . 3BABDB8AAEED25E0EFE23561C1A2BCE1 . 5936128 . . [8.00.6001.18783 (longhorn_ie8_gdr.090508-1700)] . . C:\WINDOWS\SoftwareDistribution\Download\508db5965e9c778c7eb18f4b9547ae6c\SP3GDR\mshtml.dll
[-] 2009-04-29 04:38:50 . 46C3D119A366232907CD32A609A276B2 . 3598336 . . [7.00.6000.21045 (vista_ldr.090423-0018)] . . C:\WINDOWS\$hf_mig$\KB969897-IE7\SP3QFE\mshtml.dll
[-] 2009-03-08 02:41:16 . D469A0EBA2EF5C6BEE8065B7E3196E5E . 5937152 . . [8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)] . . C:\WINDOWS\ie8updates\KB982381-IE8\mshtml.dll
[-] 2009-03-08 01:41:16 . D469A0EBA2EF5C6BEE8065B7E3196E5E . 5937152 . . [8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)] . . C:\WINDOWS\ie8updates\KB969897-IE8\mshtml.dll
[-] 2009-02-21 06:49:56 . 920B2B7C54C6B102A98EE54C56134CEC . 3596800 . . [7.00.6000.21015 (vista_ldr.090218-1505)] . . C:\WINDOWS\$hf_mig$\KB963027-IE7\SP3QFE\mshtml.dll
[-] 2009-02-20 17:13:47 . DB1BCEDF3C640170A9E78E199516A8C9 . 3595264 . . [7.00.6000.16825 (vista_gdr.090218-1505)] . . C:\WINDOWS\ie7updates\KB969897-IE7\mshtml.dll
[-] 2009-01-16 19:30:12 . 95E1214DBB029B3D37076999B53407D6 . 3594752 . . [7.00.6000.16809 (vista_gdr.090114-1504)] . . C:\WINDOWS\ie7updates\KB963027-IE7\mshtml.dll
[-] 2009-01-16 16:22:05 . D049549814B44670C88C0C3777D24FFA . 3596288 . . [7.00.6000.20996 (vista_ldr.090114-1504)] . . C:\WINDOWS\$hf_mig$\KB961260-IE7\SP2QFE\mshtml.dll
[-] 2008-04-23 20:16:34 . 4B0ED25CBE16A4BECE1CCB7F8F7C8112 . 3591680 . . [7.00.6000.16674 (vista_gdr.080415-1732)] . . C:\WINDOWS\SoftwareDistribution\Download\fb81a215e85a7c4d363be115f73bb277\SP2GDR\mshtml.dll
[-] 2008-04-23 04:21:15 . 223F1E24EBBF6D6FB67999179DD2D75E . 3593728 . . [7.00.6000.20815 (vista_ldr.080415-1732)] . . C:\WINDOWS\SoftwareDistribution\Download\fb81a215e85a7c4d363be115f73bb277\SP2QFE\mshtml.dll
[-] 2008-04-21 06:41:17 . 84DD596D04865401939EFA2770C41DAB . 3088384 . . [6.00.2900.5583 (xpsp_sp3_qfe.080417-1431)] . . C:\WINDOWS\$hf_mig$\KB950759\SP3QFE\mshtml.dll
[-] 2008-04-14 06:51:50 . DAF9947DE2A6EA20AE524B7C50487E57 . 3066880 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\$NtUninstallKB2530548$\mshtml.dll
[-] 2008-04-14 06:51:50 . DAF9947DE2A6EA20AE524B7C50487E57 . 3066880 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\mshtml.dll
[-] 2008-04-14 06:51:50 . DAF9947DE2A6EA20AE524B7C50487E57 . 3066880 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\SoftwareDistribution\Download\2a86ecf59fd361a254057c2bd8a2fc84\backup\sp3gdr\mshtml.dll
[-] 2008-04-14 06:51:50 . DAF9947DE2A6EA20AE524B7C50487E57 . 3066880 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\SoftwareDistribution\Download\2a86ecf59fd361a254057c2bd8a2fc84\backup\sp3qfe\mshtml.dll
[-] 2008-04-14 03:21:48 . DAF9947DE2A6EA20AE524B7C50487E57 . 3066880 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ie7\mshtml.dll
[-] 2007-08-13 16:54:12 . C6EC2493346ED8888A549F59210A8ED3 . 3578368 . . [7.00.5730.13 (longhorn(wmbla).070711-1130)] . . C:\WINDOWS\ie7updates\KB961260-IE7\mshtml.dll
[-] 2004-08-17 12:49:12 . EF74351C9098210CC9C1A3679DB62041 . 3003392 . . [6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\mshtml.dll

[-] 2008-04-14 06:51:50 . D165DFCB4EA452510E53416F573018BB . 343040 . . [7.0.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\msvcrt.dll
[-] 2008-04-14 06:51:50 . D165DFCB4EA452510E53416F573018BB . 343040 . . [7.0.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\msvcrt.dll
[-] 2008-04-14 06:37:10 . EC8D5E09C6CA5F52858A5EB71F308FDF . 343040 . . [7.0.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll
[-] 2008-04-14 03:21:49 . D165DFCB4EA452510E53416F573018BB . 343040 . . [7.0.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ERDNT\cache\msvcrt.dll
[-] 2004-08-17 12:49:14 . 91CC3E4CCDBBF8E224182C76C87E454F . 343040 . . [7.0.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\msvcrt.dll
[-] 2004-08-17 12:48:02 . AB47015B67531572BE46C0C08222C84C . 343040 . . [7.0.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcrt.dll
[-] 2001-10-25 13:00:00 . 4200BE3808F6406DBE45A7B88DAE5035 . 322560 . . [7.0.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll

[-] 2008-06-20 17:49:25 . 1289B7611CCD6CB27596AE92CBF03E35 . 247296 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\ERDNT\cache\mswsock.dll
[-] 2008-06-20 17:44:39 . B6CEC406351EA5EF131416D5F52D006F . 247296 . . [5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)] . . C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\mswsock.dll
[-] 2008-06-20 17:44:39 . B6CEC406351EA5EF131416D5F52D006F . 247296 . . [5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)] . . C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\mswsock.dll
[-] 2008-06-20 16:04:19 . 39EE7C3BFBC64BA87CC8CF67386E814C . 247296 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\SoftwareDistribution\Download\fe608cd8d2b8f77abaee7a69a696bcf7\sp3gdr\mswsock.dll
[-] 2008-06-20 16:04:19 . 39EE7C3BFBC64BA87CC8CF67386E814C . 247296 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\system32\mswsock.dll
[-] 2008-06-20 16:04:19 . 39EE7C3BFBC64BA87CC8CF67386E814C . 247296 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\system32\dllcache\mswsock.dll
[-] 2008-04-14 06:51:50 . AAC97DAB5F8A0573CF10E0EAC42A7724 . 247296 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\$NtUninstallKB2509553$\mswsock.dll
[-] 2008-04-14 06:51:50 . AAC97DAB5F8A0573CF10E0EAC42A7724 . 247296 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\mswsock.dll
[-] 2004-08-17 12:49:14 . 64C078BD4EFD441C3F159EDC5EA4420A . 247296 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\mswsock.dll

[-] 2008-04-14 06:51:52 . C2ED0E3408F50BBC149D4F0936E67832 . 407040 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[-] 2008-04-14 06:51:52 . C2ED0E3408F50BBC149D4F0936E67832 . 407040 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\netlogon.dll
[-] 2008-04-14 03:21:50 . C2ED0E3408F50BBC149D4F0936E67832 . 407040 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ERDNT\cache\netlogon.dll
[-] 2004-08-17 12:49:14 . 2591CADAEF7D2242039255028E577688 . 407040 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll

[-] 2008-04-14 06:51:54 . 9FA69781CAA7A1DA981A24F240A61A60 . 17408 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\powrprof.dll
[-] 2008-04-14 06:51:54 . 9FA69781CAA7A1DA981A24F240A61A60 . 17408 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\powrprof.dll
[-] 2008-04-14 03:21:53 . 9FA69781CAA7A1DA981A24F240A61A60 . 17408 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ERDNT\cache\powrprof.dll
[-] 2004-08-17 12:49:16 . 134B95A1D8FAFD74A68E4B2116DEFA7D . 17408 . . [6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\powrprof.dll

[-] 2008-04-14 06:51:56 . 830CE8951C71F361D7D2F38416CC8BC1 . 185856 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[-] 2008-04-14 06:51:56 . 830CE8951C71F361D7D2F38416CC8BC1 . 185856 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\scecli.dll
[-] 2008-04-14 03:21:54 . 830CE8951C71F361D7D2F38416CC8BC1 . 185856 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ERDNT\cache\scecli.dll
[-] 2004-08-17 12:49:18 . 07119058D451CB7EA4317BCFDA8599A6 . 184832 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\scecli.dll

[-] 2008-04-14 06:51:56 . 5EE949255BABC0B17C09DDB2E59E3878 . 5120 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\sfc.dll
[-] 2008-04-14 06:51:56 . 5EE949255BABC0B17C09DDB2E59E3878 . 5120 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\sfc.dll
[-] 2008-04-14 03:21:54 . 5EE949255BABC0B17C09DDB2E59E3878 . 5120 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ERDNT\cache\sfc.dll
[-] 2004-08-17 12:49:18 . 6CC2D21488333133AE0C9F44F6051CB7 . 5120 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\sfc.dll

[-] 2008-04-14 06:52:50 . BE4A520E29B6391F49E79CCC52044D93 . 14336 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[-] 2008-04-14 06:52:50 . BE4A520E29B6391F49E79CCC52044D93 . 14336 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\svchost.exe
[-] 2008-04-14 03:22:48 . BE4A520E29B6391F49E79CCC52044D93 . 14336 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ERDNT\cache\svchost.exe
[-] 2004-08-17 12:49:28 . DFBA2915B0BF58ABB288CD4C9318CB3F . 14336 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\svchost.exe

[-] 2008-04-14 06:52:04 . C2546CD7A398476F9DF5614B2AE160E8 . 249856 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\tapisrv.dll
[-] 2008-04-14 06:52:04 . C2546CD7A398476F9DF5614B2AE160E8 . 249856 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\tapisrv.dll
[-] 2008-04-14 03:22:03 . C2546CD7A398476F9DF5614B2AE160E8 . 249856 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ERDNT\cache\tapisrv.dll
[-] 2004-08-17 12:49:20 . 37162D29CD61519E6F5EA0DE99786FF6 . 246272 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\tapisrv.dll

[-] 2008-04-14 06:52:06 . E16E0990967374E76F3E40CACAFD3D53 . 578560 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\user32.dll
[-] 2008-04-14 06:52:06 . E16E0990967374E76F3E40CACAFD3D53 . 578560 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\user32.dll
[-] 2008-04-14 03:22:04 . E16E0990967374E76F3E40CACAFD3D53 . 578560 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ERDNT\cache\user32.dll
[-] 2004-08-17 12:49:20 . 1B4CCC59980DA34E75F20E42B283B027 . 577024 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\user32.dll

[-] 2008-04-14 06:52:52 . 7DC1830F22E7D275B438127B68030239 . 26112 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[-] 2008-04-14 06:52:52 . 7DC1830F22E7D275B438127B68030239 . 26112 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\userinit.exe
[-] 2008-04-14 03:22:50 . 7DC1830F22E7D275B438127B68030239 . 26112 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ERDNT\cache\userinit.exe
[-] 2004-08-17 12:49:28 . 836F7960362FF95C5D49E40B891F2CFC . 24576 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\userinit.exe

[-] 2011-04-25 16:06:09 . ABBE4038CB5C1363B8886C525C67264C . 916480 . . [8.00.6001.19072 (longhorn_ie8_gdr.110420-1700)] . . C:\WINDOWS\SoftwareDistribution\Download\63bb42b24624dac39b0ccbf93365e2fd\SP3GDR\wininet.dll
[-] 2011-04-25 16:06:09 . ABBE4038CB5C1363B8886C525C67264C . 916480 . . [8.00.6001.19072 (longhorn_ie8_gdr.110420-1700)] . . C:\WINDOWS\SoftwareDistribution\Download\6c966f0586f91fbfb81a7f7a71834cf1\SP3GDR\wininet.dll
[-] 2011-04-25 16:06:09 . ABBE4038CB5C1363B8886C525C67264C . 916480 . . [8.00.6001.19072 (longhorn_ie8_gdr.110420-1700)] . . C:\WINDOWS\system32\wininet.dll
[-] 2011-04-25 16:06:09 . ABBE4038CB5C1363B8886C525C67264C . 916480 . . [8.00.6001.19072 (longhorn_ie8_gdr.110420-1700)] . . C:\WINDOWS\system32\dllcache\wininet.dll
[-] 2011-04-25 16:04:04 . 081237E3BE3EA0AF3B7A77F7578B7831 . 919552 . . [8.00.6001.23165 (longhorn_ie8_ldr.110420-1800)] . . C:\WINDOWS\$hf_mig$\KB2530548-IE8\SP3QFE\wininet.dll
[-] 2011-04-25 16:04:04 . 081237E3BE3EA0AF3B7A77F7578B7831 . 919552 . . [8.00.6001.23165 (longhorn_ie8_ldr.110420-1800)] . . C:\WINDOWS\SoftwareDistribution\Download\63bb42b24624dac39b0ccbf93365e2fd\SP3QFE\wininet.dll
[-] 2011-04-25 16:04:04 . 081237E3BE3EA0AF3B7A77F7578B7831 . 919552 . . [8.00.6001.23165 (longhorn_ie8_ldr.110420-1800)] . . C:\WINDOWS\SoftwareDistribution\Download\6c966f0586f91fbfb81a7f7a71834cf1\SP3QFE\wininet.dll
[-] 2011-04-25 14:47:32 . 5C38741D26A79985A54AFA0F6FF26E4D . 668160 . . [6.00.2900.6104 (xpsp_sp3_gdr.110425-1624)] . . C:\WINDOWS\ie8\wininet.dll
[-] 2011-04-25 14:47:32 . 5C38741D26A79985A54AFA0F6FF26E4D . 668160 . . [6.00.2900.6104 (xpsp_sp3_gdr.110425-1624)] . . C:\WINDOWS\SoftwareDistribution\Download\0d6a16a8c196a076bb861a124cf15724\sp3gdr\wininet.dll
[-] 2011-04-25 14:46:28 . 2725CF0CDD70374DBE94C52B42F28BA9 . 669696 . . [6.00.2900.6104 (xpsp_sp3_qfe.110425-1624)] . . C:\WINDOWS\$hf_mig$\KB2530548\SP3QFE\wininet.dll
[-] 2011-04-25 14:46:28 . 2725CF0CDD70374DBE94C52B42F28BA9 . 669696 . . [6.00.2900.6104 (xpsp_sp3_qfe.110425-1624)] . . C:\WINDOWS\SoftwareDistribution\Download\0d6a16a8c196a076bb861a124cf15724\sp3qfe\wininet.dll
[-] 2011-02-22 23:26:49 . 193372CF2538E1943580C416D6DE925B . 919552 . . [8.00.6001.23139 (longhorn_ie8_ldr.110211-1800)] . . C:\WINDOWS\$hf_mig$\KB2497640-IE8\SP3QFE\wininet.dll
[-] 2010-12-20 23:52:37 . 62709A317843B4A64C39A94354847E90 . 916480 . . [8.00.6001.19019 (longhorn_ie8_gdr.101217-1700)] . . C:\WINDOWS\ie8updates\KB2497640-IE8\wininet.dll
[-] 2010-12-20 23:51:56 . 0EA9F77AAE38F90904E926BB73BF6D00 . 919552 . . [8.00.6001.23111 (longhorn_ie8_ldr.101217-1800)] . . C:\WINDOWS\$hf_mig$\KB2482017-IE8\SP3QFE\wininet.dll
[-] 2010-11-06 00:24:59 . 8E5E22429507F8CF2F7B7D4F361F2827 . 919552 . . [8.00.6001.23084 (longhorn_ie8_ldr.101015-1800)] . . C:\WINDOWS\$hf_mig$\KB2416400-IE8\SP3QFE\wininet.dll
[-] 2010-11-06 00:23:38 . B5AC5C32FEA7C91E0C3CD2446E56EDD2 . 916480 . . [8.00.6001.18992 (longhorn_ie8_gdr.101015-1700)] . . C:\WINDOWS\ie8updates\KB2482017-IE8\wininet.dll
[-] 2010-09-10 05:52:35 . 63505861F205E3835D8148811DCB56FE . 916480 . . [8.00.6001.18968 (longhorn_ie8_gdr.100824-1830)] . . C:\WINDOWS\ie8updates\KB2416400-IE8\wininet.dll
[-] 2010-09-10 05:50:03 . 1B2338967DABAA1B65415D355105D743 . 919552 . . [8.00.6001.23060 (longhorn_ie8_ldr.100824-1900)] . . C:\WINDOWS\$hf_mig$\KB2360131-IE8\SP3QFE\wininet.dll
[-] 2010-06-24 12:29:04 . D2B5FCDB99A3321C1B9B8A12A6D56AD8 . 919040 . . [8.00.6001.23037 (longhorn_ie8_ldr.100616-1800)] . . C:\WINDOWS\$hf_mig$\KB2183461-IE8\SP3QFE\wininet.dll
[-] 2010-06-24 12:27:28 . EF345C39AD3FBBD239627EDD99793CF1 . 916480 . . [8.00.6001.18939 (longhorn_ie8_gdr.100616-1700)] . . C:\WINDOWS\ie8updates\KB2360131-IE8\wininet.dll
[-] 2010-05-06 10:35:35 . B7ECEF0CCF63119356E174A78C185171 . 916480 . . [8.00.6001.18923 (longhorn_ie8_gdr.100419-1241)] . . C:\WINDOWS\ie8updates\KB2183461-IE8\wininet.dll
[-] 2010-05-06 10:35:35 . B7ECEF0CCF63119356E174A78C185171 . 916480 . . [8.00.6001.18923 (longhorn_ie8_gdr.100419-1241)] . . C:\WINDOWS\ie8updates\KB2530548-IE8\wininet.dll
[-] 2010-05-06 10:35:35 . B7ECEF0CCF63119356E174A78C185171 . 916480 . . [8.00.6001.18923 (longhorn_ie8_gdr.100419-1241)] . . C:\WINDOWS\SoftwareDistribution\Download\4da92e2c99b7232d7106179052438045\SP3GDR\wininet.dll
[-] 2010-05-06 10:28:42 . 72064DA077E9D6912F39438D97CC0C60 . 919040 . . [8.00.6001.23014 (longhorn_ie8_ldr.100419-1507)] . . C:\WINDOWS\$hf_mig$\KB982381-IE8\SP3QFE\wininet.dll
[-] 2010-05-06 10:28:42 . 72064DA077E9D6912F39438D97CC0C60 . 919040 . . [8.00.6001.23014 (longhorn_ie8_ldr.100419-1507)] . . C:\WINDOWS\SoftwareDistribution\Download\4da92e2c99b7232d7106179052438045\SP3QFE\wininet.dll
[-] 2010-02-25 06:12:56 . 2E6504E28C7E0F753F68731861A94214 . 919040 . . [8.00.6001.22995 (longhorn_ie8_ldr.100223-0100)] . . C:\WINDOWS\$hf_mig$\KB980182-IE8\SP3QFE\wininet.dll
[-] 2009-12-21 19:08:42 . 75A4A1378971D84FF6A7D766F4A7BC59 . 916480 . . [8.00.6001.18876 (longhorn_ie8_gdr.091218-1700)] . . C:\WINDOWS\ie8updates\KB980182-IE8\wininet.dll
[-] 2009-12-21 19:02:42 . 9256DA4AEE5E2C20FC6C126BDBC11997 . 916480 . . [8.00.6001.22967 (longhorn_ie8_ldr.091219-0100)] . . C:\WINDOWS\$hf_mig$\KB978207-IE8\SP3QFE\wininet.dll
[-] 2009-10-29 07:43:54 . F651D2A69B7037D6063BC697CF296D8C . 916480 . . [8.00.6001.18854 (longhorn_ie8_gdr.091026-1700)] . . C:\WINDOWS\ie8updates\KB978207-IE8\wininet.dll
[-] 2009-10-29 07:38:14 . 4941ADD731725AF468342E42B71F776C . 916480 . . [8.00.6001.22945 (longhorn_ie8_ldr.091027-0100)] . . C:\WINDOWS\$hf_mig$\KB976325-IE8\SP3QFE\wininet.dll
[-] 2009-08-29 07:58:59 . 37CFE7928711C8157CF4D191F0EF5F69 . 916480 . . [8.00.6001.18828 (longhorn_ie8_gdr.090826-1700)] . . C:\WINDOWS\ERDNT\cache\wininet.dll
[-] 2009-08-29 07:58:59 . 37CFE7928711C8157CF4D191F0EF5F69 . 916480 . . [8.00.6001.18828 (longhorn_ie8_gdr.090826-1700)] . . C:\WINDOWS\ie8updates\KB976325-IE8\wininet.dll
[-] 2009-08-29 07:51:14 . F658908845F3EB727FEF4769ED0E52FE . 916480 . . [8.00.6001.22918 (longhorn_ie8_ldr.090827-0100)] . . C:\WINDOWS\$hf_mig$\KB974455-IE8\SP3QFE\wininet.dll
[-] 2009-07-03 17:02:29 . 0B1AA91DFEDB1298FF7D93EBA45F8DB5 . 915456 . . [8.00.6001.22896 (longhorn_ie8_ldr.090702-0100)] . . C:\WINDOWS\$hf_mig$\KB972260-IE8\SP3QFE\wininet.dll
[-] 2009-07-03 16:59:42 . FCD887F2BA15CD8D95F8D70766D42739 . 915456 . . [8.00.6001.18806 (longhorn_ie8_gdr.090701-1700)] . . C:\WINDOWS\ie8updates\KB974455-IE8\wininet.dll
[-] 2009-05-13 05:09:06 . 0C20BF283DE5BA50060240383B8AA41C . 915456 . . [8.00.6001.22873 (longhorn_ie8_ldr.090509-0100)] . . C:\WINDOWS\$hf_mig$\KB969897-IE8\SP3QFE\wininet.dll
[-] 2009-05-13 05:09:06 . 0C20BF283DE5BA50060240383B8AA41C . 915456 . . [8.00.6001.22873 (longhorn_ie8_ldr.090509-0100)] . . C:\WINDOWS\SoftwareDistribution\Download\508db5965e9c778c7eb18f4b9547ae6c\SP3QFE\wininet.dll
[-] 2009-05-13 05:05:58 . 9122013C5668D967C4AE7F52252898DE . 915456 . . [8.00.6001.18783 (longhorn_ie8_gdr.090508-1700)] . . C:\WINDOWS\ie8updates\KB972260-IE8\wininet.dll
[-] 2009-05-13 05:05:58 . 9122013C5668D967C4AE7F52252898DE . 915456 . . [8.00.6001.18783 (longhorn_ie8_gdr.090508-1700)] . . C:\WINDOWS\SoftwareDistribution\Download\508db5965e9c778c7eb18f4b9547ae6c\SP3GDR\wininet.dll
[-] 2009-04-29 04:38:56 . C6D7F3DF74C49ED8E01CB18272EA0CCA . 828928 . . [7.00.6000.21045 (vista_ldr.090423-0018)] . . C:\WINDOWS\$hf_mig$\KB969897-IE7\SP3QFE\wininet.dll
[-] 2009-03-08 02:34:58 . 6CE32F7778061CCC5814D5E0F282D369 . 914944 . . [8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)] . . C:\WINDOWS\ie8updates\KB982381-IE8\wininet.dll
[-] 2009-03-08 01:34:58 . 6CE32F7778061CCC5814D5E0F282D369 . 914944 . . [8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)] . . C:\WINDOWS\ie8updates\KB969897-IE8\wininet.dll
[-] 2009-03-03 00:16:45 . 3D7B87D8102C41BABBE5922B5275AA7C . 828416 . . [7.00.6000.21020 (vista_ldr.090226-1506)] . . C:\WINDOWS\$hf_mig$\KB963027-IE7\SP3QFE\wininet.dll
[-] 2009-03-03 00:14:11 . BA2611F55D9AE29554008ADBC49D7664 . 826368 . . [7.00.6000.16827 (vista_gdr.090226-1506)] . . C:\WINDOWS\ie7updates\KB969897-IE7\wininet.dll
[-] 2008-12-20 23:48:30 . A039CE5F34BF98760F877B29E5A1D4CD . 827904 . . [7.00.6000.20978 (vista_ldr.081217-1620)] . . C:\WINDOWS\$hf_mig$\KB961260-IE7\SP2QFE\wininet.dll
[-] 2008-12-20 23:03:48 . 793DA751C812EFC3C6786BBD3B8489A8 . 826368 . . [7.00.6000.16791 (vista_gdr.081217-1620)] . . C:\WINDOWS\ie7updates\KB963027-IE7\wininet.dll
[-] 2008-04-23 04:21:15 . 03727BB0DE4D4902F951D3BD7D0AC4FE . 827392 . . [7.00.6000.20815 (vista_ldr.080415-1732)] . . C:\WINDOWS\SoftwareDistribution\Download\fb81a215e85a7c4d363be115f73bb277\SP2QFE\wininet.dll
[-] 2008-04-23 04:16:32 . B2F04AA876DC2E15B59B509DE727F415 . 826368 . . [7.00.6000.16674 (vista_gdr.080415-1732)] . . C:\WINDOWS\SoftwareDistribution\Download\fb81a215e85a7c4d363be115f73bb277\SP2GDR\wininet.dll
[-] 2008-04-21 06:41:18 . E2CFF7BF2F1D122CFA546C667A47F87E . 667648 . . [6.00.2900.5583 (xpsp_sp3_qfe.080417-1431)] . . C:\WINDOWS\$hf_mig$\KB950759\SP3QFE\wininet.dll
[-] 2008-04-14 06:52:06 . 3FE5E65A7ED9EC98AEE9167CA07812D3 . 667136 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\$NtUninstallKB2530548$\wininet.dll
[-] 2008-04-14 06:52:06 . 3FE5E65A7ED9EC98AEE9167CA07812D3 . 667136 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\wininet.dll
[-] 2008-04-14 06:52:06 . 3FE5E65A7ED9EC98AEE9167CA07812D3 . 667136 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\SoftwareDistribution\Download\2a86ecf59fd361a254057c2bd8a2fc84\backup\sp3gdr\wininet.dll
[-] 2008-04-14 06:52:06 . 3FE5E65A7ED9EC98AEE9167CA07812D3 . 667136 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\SoftwareDistribution\Download\2a86ecf59fd361a254057c2bd8a2fc84\backup\sp3qfe\wininet.dll
[-] 2008-04-14 03:22:05 . 3FE5E65A7ED9EC98AEE9167CA07812D3 . 667136 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ie7\wininet.dll
[-] 2007-08-13 16:54:10 . A4A0FC92358F39538A6494C42EF99FE9 . 818688 . . [7.00.5730.13 (longhorn(wmbla).070711-1130)] . . C:\WINDOWS\ie7updates\KB961260-IE7\wininet.dll
[-] 2004-08-17 12:49:22 . 50D263E3454E8357D13BB598129185AD . 657408 . . [6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\wininet.dll

[-] 2008-04-14 06:52:08 . 951D473917C51F21496D914CF6E5DDD1 . 82432 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll
[-] 2008-04-14 06:52:08 . 951D473917C51F21496D914CF6E5DDD1 . 82432 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\ws2_32.dll
[-] 2008-04-14 03:22:06 . 951D473917C51F21496D914CF6E5DDD1 . 82432 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ERDNT\cache\ws2_32.dll
[-] 2004-08-17 12:49:22 . 382E9B87F1282E697C67AF84E34E35E2 . 82944 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll

[-] 2008-04-14 06:52:08 . 859F7735F199C90403340183A3DDFB78 . 19968 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\ws2help.dll
[-] 2008-04-14 06:52:08 . 859F7735F199C90403340183A3DDFB78 . 19968 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\ws2help.dll
[-] 2004-08-17 12:49:22 . C2B86666FC44B48903AD6016D15A23DF . 19968 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\ws2help.dll

[-] 2008-04-14 06:52:24 . 27AFD587C462E280EE046B8CCA3C2CD1 . 1034240 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\explorer.exe
[-] 2008-04-14 06:52:24 . 27AFD587C462E280EE046B8CCA3C2CD1 . 1034240 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[-] 2008-04-14 03:22:22 . 27AFD587C462E280EE046B8CCA3C2CD1 . 1034240 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ERDNT\cache\explorer.exe
[-] 2004-08-17 12:49:24 . 53114D57AB73A406AC7F602227781A99 . 1032704 . . [6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\explorer.exe

[-] 2008-04-14 06:52:44 . FDEB1D02CAE38665CBF114F44E6B997E . 147968 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\regedit.exe
[-] 2008-04-14 06:52:44 . FDEB1D02CAE38665CBF114F44E6B997E . 147968 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\regedit.exe
[-] 2004-08-17 12:49:28 . CB5A91928D94224E7E30EE277B45E8A3 . 147968 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\regedit.exe

[-] 2010-07-16 12:00:53 . 6D1A3A355CA2AC64D2D5BAEC25C16427 . 1287680 . . [5.1.2600.6010 (xpsp_sp3_gdr.100712-1633)] . . C:\WINDOWS\SoftwareDistribution\Download\70eb2b0acdab79da474eb19525899a3a\sp3gdr\ole32.dll
[-] 2010-07-16 12:00:53 . 6D1A3A355CA2AC64D2D5BAEC25C16427 . 1287680 . . [5.1.2600.6010 (xpsp_sp3_gdr.100712-1633)] . . C:\WINDOWS\system32\ole32.dll
[-] 2010-07-16 12:00:53 . 6D1A3A355CA2AC64D2D5BAEC25C16427 . 1287680 . . [5.1.2600.6010 (xpsp_sp3_gdr.100712-1633)] . . C:\WINDOWS\system32\dllcache\ole32.dll
[-] 2010-07-16 11:59:24 . C85BE0CF9C91EB64CECA1D639D71D4CC . 1288704 . . [5.1.2600.6010 (xpsp_sp3_qfe.100712-1633)] . . C:\WINDOWS\$hf_mig$\KB979687\SP3QFE\ole32.dll
[-] 2008-04-14 06:51:54 . 21F836AAB269FF644E0E708B794B0DF7 . 1287168 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\$NtUninstallKB979687$\ole32.dll
[-] 2008-04-14 06:51:54 . 21F836AAB269FF644E0E708B794B0DF7 . 1287168 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\ole32.dll
[-] 2004-08-17 12:49:16 . 7FE54C063DDA8EF226846510852E6B1B . 1281024 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\ole32.dll

[-] 2010-04-16 15:38:42 . A0C90E01D288A618AE6B99E92B7E0115 . 406016 . . [1.0420.2600.5969 (xpsp_sp3_gdr.100416-1716)] . . C:\WINDOWS\SoftwareDistribution\Download\b473a2a7ff96184cc2de23500dc14808\sp3gdr\usp10.dll
[-] 2010-04-16 15:38:42 . A0C90E01D288A618AE6B99E92B7E0115 . 406016 . . [1.0420.2600.5969 (xpsp_sp3_gdr.100416-1716)] . . C:\WINDOWS\system32\usp10.dll
[-] 2010-04-16 15:38:42 . A0C90E01D288A618AE6B99E92B7E0115 . 406016 . . [1.0420.2600.5969 (xpsp_sp3_gdr.100416-1716)] . . C:\WINDOWS\system32\dllcache\usp10.dll
[-] 2010-04-16 15:30:51 . 6BE004F9FCEECA6536385D5CB59BFD37 . 406016 . . [1.0420.2600.5969 (xpsp_sp3_qfe.100416-1736)] . . C:\WINDOWS\$hf_mig$\KB981322\SP3QFE\usp10.dll
[-] 2008-04-14 06:52:06 . F5B6A143739B894BF4F488CFFC3D3015 . 406016 . . [1.0420.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\$NtUninstallKB981322$\usp10.dll
[-] 2008-04-14 06:52:06 . F5B6A143739B894BF4F488CFFC3D3015 . 406016 . . [1.0420.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\usp10.dll
[-] 2004-08-17 12:49:20 . E28340F6CB7BAC3EACDA9C74A0BE42BE . 406528 . . [1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\usp10.dll

[-] 2008-04-14 06:52:04 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\srsvc.dll
[-] 2008-04-14 06:52:04 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\srsvc.dll
[-] 2008-04-14 03:22:03 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ERDNT\cache\srsvc.dll
[-] 2004-08-17 12:49:20 . 3CD57F31A64D32FDB28918B16D1E6AAC . 170496 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\srsvc.dll

[-] 2008-04-14 06:52:56 . 278A14BEDEF58687EAF8BEC056A78D8B . 13824 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\wscntfy.exe
[-] 2008-04-14 06:52:56 . 278A14BEDEF58687EAF8BEC056A78D8B . 13824 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\wscntfy.exe
[-] 2008-04-14 03:22:55 . 278A14BEDEF58687EAF8BEC056A78D8B . 13824 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ERDNT\cache\wscntfy.exe
[-] 2004-08-17 12:49:30 . 93F75FF033BAA186D08115D73BFE3D32 . 13824 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\wscntfy.exe

[-] 2008-04-14 06:52:10 . EAA4BB9EDB3FB10CF8979FE65E63658F . 129024 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\xmlprov.dll
[-] 2008-04-14 06:52:10 . EAA4BB9EDB3FB10CF8979FE65E63658F . 129024 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\xmlprov.dll
[-] 2008-04-14 03:22:08 . EAA4BB9EDB3FB10CF8979FE65E63658F . 129024 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ERDNT\cache\xmlprov.dll
[-] 2004-08-17 12:49:22 . 9B835D4C64860B155A1701D5092EC9E4 . 129536 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\xmlprov.dll

[-] 2008-04-14 06:51:42 . 2EE99F67C930931EB404DADCE57E976E . 56320 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[-] 2008-04-14 06:51:42 . 2EE99F67C930931EB404DADCE57E976E . 56320 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\eventlog.dll
[-] 2008-04-14 03:21:41 . 2EE99F67C930931EB404DADCE57E976E . 56320 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ERDNT\cache\eventlog.dll
[-] 2004-08-17 12:49:08 . 6EB66066D5C0175320CFEA0A4C74C88F . 55808 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll

[-] 2008-11-09 16:49:58 . 07DE423FB70EBAC5136677E3956FDBC3 . 1548288 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\sfcfiles.dll
[-] 2008-04-14 06:51:56 . 56A6034E7764E23D9114223EB3523925 . 1571840 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\sfcfiles.dll
[-] 2008-04-14 06:51:56 . 56A6034E7764E23D9114223EB3523925 . 1571840 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\sfcfiles.dll
[-] 2008-04-14 03:21:55 . 56A6034E7764E23D9114223EB3523925 . 1571840 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ERDNT\cache\sfcfiles.dll

[-] 2008-04-14 06:52:18 . A756B8F0F7BAFBA6DFE39F7D169F2519 . 15360 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\ctfmon.exe
[-] 2008-04-14 06:52:18 . A756B8F0F7BAFBA6DFE39F7D169F2519 . 15360 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\ctfmon.exe
[-] 2008-04-14 03:22:17 . A756B8F0F7BAFBA6DFE39F7D169F2519 . 15360 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ERDNT\cache\ctfmon.exe
[-] 2004-08-17 12:49:24 . A5BAA91475167161DEA02BA3C4CA4F59 . 15360 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\ctfmon.exe

A zbytek logu tady

[-] 2009-07-27 23:19:06 . EE9A2B9EA968A792A053C9D1A86BF870 . 135168 . . [6.00.2900.5853 (xpsp_sp3_gdr.090727-1736)] . . C:\WINDOWS\SoftwareDistribution\Download\0469960d85c902da290eaeb975ff5520\sp3gdr\shsvcs.dll
[-] 2009-07-27 23:19:06 . EE9A2B9EA968A792A053C9D1A86BF870 . 135168 . . [6.00.2900.5853 (xpsp_sp3_gdr.090727-1736)] . . C:\WINDOWS\system32\shsvcs.dll
[-] 2009-07-27 23:19:06 . EE9A2B9EA968A792A053C9D1A86BF870 . 135168 . . [6.00.2900.5853 (xpsp_sp3_gdr.090727-1736)] . . C:\WINDOWS\system32\dllcache\shsvcs.dll
[-] 2009-07-27 22:22:37 . 54A6BF743E0517528A5064CEAEB40EA7 . 135168 . . [6.00.2900.5853 (xpsp_sp3_qfe.090727-1747)] . . C:\WINDOWS\$hf_mig$\KB971029\SP3QFE\shsvcs.dll
[-] 2008-04-14 06:51:56 . B927443008910B412BEC72FC41C1BAD0 . 135168 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\$NtUninstallKB971029$\shsvcs.dll
[-] 2008-04-14 06:51:56 . B927443008910B412BEC72FC41C1BAD0 . 135168 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\shsvcs.dll
[-] 2008-04-14 03:21:55 . B927443008910B412BEC72FC41C1BAD0 . 135168 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ERDNT\cache\shsvcs.dll
[-] 2004-08-17 12:49:18 . 8BA76BD2A943F642F267A296A15776D2 . 134656 . . [6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\shsvcs.dll

[-] 2008-04-14 06:51:56 . 8F31505484A190D5B22274708799F4EC . 59904 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\regsvc.dll
[-] 2008-04-14 06:51:56 . 8F31505484A190D5B22274708799F4EC . 59904 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\regsvc.dll
[-] 2008-04-14 03:21:54 . 8F31505484A190D5B22274708799F4EC . 59904 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ERDNT\cache\regsvc.dll
[-] 2004-08-17 12:49:18 . 5B21208FCF8970BB61FE98E19D828714 . 59904 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\regsvc.dll

[-] 2008-04-14 06:51:56 . 3FF232A7731621B8902D81D42418C93C . 192512 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\schedsvc.dll
[-] 2008-04-14 06:51:56 . 3FF232A7731621B8902D81D42418C93C . 192512 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\schedsvc.dll
[-] 2008-04-14 03:21:54 . 3FF232A7731621B8902D81D42418C93C . 192512 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ERDNT\cache\schedsvc.dll
[-] 2004-08-17 12:49:18 . 29AC93307C6182DBE336BCA314947F28 . 190976 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\schedsvc.dll

[-] 2008-04-14 06:52:04 . BECD5271DC4E3B7C3D035F790FCBC1E5 . 71680 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\ssdpsrv.dll
[-] 2008-04-14 06:52:04 . BECD5271DC4E3B7C3D035F790FCBC1E5 . 71680 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\ssdpsrv.dll
[-] 2008-04-14 03:22:03 . BECD5271DC4E3B7C3D035F790FCBC1E5 . 71680 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ERDNT\cache\ssdpsrv.dll
[-] 2004-08-17 12:49:20 . 88C28F53F53438DAFCD95E99C837C61E . 71680 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\ssdpsrv.dll

[-] 2008-04-14 06:52:04 . A75DD6FC3DBEE4FFF5EBC9F2C28BB66E . 295936 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\termsrv.dll
[-] 2008-04-14 06:52:04 . A75DD6FC3DBEE4FFF5EBC9F2C28BB66E . 295936 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\termsrv.dll
[-] 2008-04-14 03:22:03 . A75DD6FC3DBEE4FFF5EBC9F2C28BB66E . 295936 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ERDNT\cache\termsrv.dll
[-] 2004-08-17 12:49:20 . 2F5919F2F6EE7A845893D9C3AA2BC56A . 295936 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\termsrv.dll

[-] 2008-04-14 06:51:44 . ED18ADEE4AA21EB26977260152D7241A . 345088 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\hnetcfg.dll
[-] 2008-04-14 06:51:44 . ED18ADEE4AA21EB26977260152D7241A . 345088 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\hnetcfg.dll
[-] 2004-08-17 12:49:08 . FAABA83BE47C5B15F620FAA53267A9B8 . 345088 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\hnetcfg.dll

[-] 2008-04-14 06:51:38 . 6B8E7A90E576D4FE308F97C69060A171 . 171008 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\appmgmts.dll
[-] 2008-04-14 06:51:38 . 6B8E7A90E576D4FE308F97C69060A171 . 171008 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\appmgmts.dll
[-] 2008-04-14 03:21:36 . 6B8E7A90E576D4FE308F97C69060A171 . 171008 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ERDNT\cache\appmgmts.dll
[-] 2004-08-17 12:49:04 . 421184F91EAE5C6E78E653C6B32AAE84 . 171008 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\appmgmts.dll

[-] 2001-10-25 13:00:00 . AFDFF022A01F0B11C776F0860C3B282F . 11776 . . [5.1.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\system32\drivers\acpiec.sys
[-] 2001-10-25 12:00:00 . AFDFF022A01F0B11C776F0860C3B282F . 11776 . . [5.1.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\ERDNT\cache\acpiec.sys

[-] 2008-04-13 20:09:24 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . C:\WINDOWS\ServicePackFiles\i386\aec.sys
[-] 2008-04-13 20:09:24 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . C:\WINDOWS\system32\drivers\aec.sys
[-] 2008-04-13 16:39:23 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . C:\WINDOWS\ERDNT\cache\aec.sys
[-] 2004-08-17 12:57:28 . 841F385C6CFAF66B58FBD898722BB4F0 . 142464 . . [5.1.2601.2078] . . C:\WINDOWS\$NtServicePackUninstall$\aec.sys

[-] 2008-04-13 22:06:40 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[-] 2008-04-13 22:06:40 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\drivers\agp440.sys
[-] 2008-04-13 18:36:38 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ERDNT\cache\agp440.sys
[-] 2004-08-03 21:07:42 . 2C428FA0C3E3A01ED93C9B2A27D8D4BB . 42368 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\agp440.sys

[-] 2008-04-13 22:23:36 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\ip6fw.sys
[-] 2008-04-13 22:23:36 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\drivers\ip6fw.sys
[-] 2008-04-13 18:53:34 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ERDNT\cache\ip6fw.sys
[-] 2004-08-03 20:00:08 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\ip6fw.sys

[-] 2010-09-18 07:18:53 . 2BC3ED47ACB42F664D5D1D247F2553AA . 953856 . . [4.1.6151] . . C:\WINDOWS\$hf_mig$\KB2387149\SP3QFE\mfc40u.dll
[-] 2010-09-18 07:18:53 . 2BC3ED47ACB42F664D5D1D247F2553AA . 953856 . . [4.1.6151] . . C:\WINDOWS\SoftwareDistribution\Download\da9806174d8a9f6201610644d0773fd9\SP3QFE\mfc40u.dll
[-] 2010-09-18 06:53:37 . 9BB005DF755C4EDE048221DFD4A28A87 . 953856 . . [4.1.6151] . . C:\WINDOWS\SoftwareDistribution\Download\da9806174d8a9f6201610644d0773fd9\SP3GDR\mfc40u.dll
[-] 2010-09-18 06:53:37 . 9BB005DF755C4EDE048221DFD4A28A87 . 953856 . . [4.1.6151] . . C:\WINDOWS\system32\mfc40u.dll
[-] 2010-09-18 06:53:37 . 9BB005DF755C4EDE048221DFD4A28A87 . 953856 . . [4.1.6151] . . C:\WINDOWS\system32\dllcache\mfc40u.dll
[-] 2008-04-14 06:51:46 . 7C3351F60B759D5D917E68342AE3307C . 927504 . . [4.1.0.61] . . C:\WINDOWS\$NtUninstallKB2387149$\mfc40u.dll
[-] 2008-04-14 06:51:46 . 7C3351F60B759D5D917E68342AE3307C . 927504 . . [4.1.0.61] . . C:\WINDOWS\ServicePackFiles\i386\mfc40u.dll
[-] 2008-04-14 03:21:45 . 7C3351F60B759D5D917E68342AE3307C . 927504 . . [4.1.0.61] . . C:\WINDOWS\ERDNT\cache\mfc40u.dll
[-] 2001-10-25 13:00:00 . A9D81C87BEF253D4CE3A5F8CEE2526C4 . 924432 . . [4.1.6140] . . C:\WINDOWS\$NtServicePackUninstall$\mfc40u.dll

[-] 2008-04-14 06:51:50 . 221CD1C815B8A6B79389C3F5D1018DE8 . 33792 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\msgsvc.dll
[-] 2008-04-14 06:51:50 . 221CD1C815B8A6B79389C3F5D1018DE8 . 33792 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\msgsvc.dll
[-] 2008-04-14 03:21:48 . 221CD1C815B8A6B79389C3F5D1018DE8 . 33792 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ERDNT\cache\msgsvc.dll
[-] 2004-08-17 12:49:12 . 8B2FCBD881879B55BE40B41F12FFC431 . 33792 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\msgsvc.dll

[-] 2008-04-14 03:21:49 . 6199B2AE3F9DB9CB6DB230471A1DC601 . 52224 . . [9.0.1.56] . . C:\WINDOWS\$NtUninstallWMFDist11$\mspmsnsv.dll
[-] 2006-10-18 19:47:16 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . C:\WINDOWS\system32\mspmsnsv.dll
[-] 2006-10-18 19:47:16 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . C:\WINDOWS\system32\dllcache\mspmsnsv.dll
[-] 2006-10-18 18:47:16 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . C:\WINDOWS\ERDNT\cache\mspmsnsv.dll
[-] 2004-08-17 12:49:14 . E02E913B3841717A890A644EE167B9A5 . 52224 . . [9.0.1.56] . . C:\WINDOWS\$NtServicePackUninstall$\mspmsnsv.dll

[-] 2010-12-09 19:44:36 . 40D176442F70573DBA0E05A7E40D3EBB . 2071552 . . [5.1.2600.6055 (xpsp_sp3_qfe.101209-1646)] . . C:\WINDOWS\$hf_mig$\KB2393802\SP3QFE\ntkrnlpa.exe
[-] 2010-12-09 18:44:36 . 40D176442F70573DBA0E05A7E40D3EBB . 2071552 . . [5.1.2600.6055 (xpsp_sp3_qfe.101209-1646)] . . C:\WINDOWS\SoftwareDistribution\Download\12a74340a66b7d58c4c319d3d76434da\SP3QFE\ntkrnlpa.exe
[-] 2010-12-09 15:14:06 . 3BDF4E6E7BAA918AAA1670B7EBA505A3 . 2029056 . . [5.1.2600.6055 (xpsp_sp3_gdr.101209-1647)] . . C:\WINDOWS\system32\ntkrnlpa.exe
[-] 2010-12-09 15:14:04 . 4FE7B81BEDE8D37C9E3D95C99A56A34E . 2071552 . . [5.1.2600.6055 (xpsp_sp3_gdr.101209-1647)] . . C:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe
[-] 2010-12-09 15:14:04 . 4FE7B81BEDE8D37C9E3D95C99A56A34E . 2071552 . . [5.1.2600.6055 (xpsp_sp3_gdr.101209-1647)] . . C:\WINDOWS\SoftwareDistribution\Download\12a74340a66b7d58c4c319d3d76434da\SP3GDR\ntkrnlpa.exe
[-] 2010-12-09 15:14:04 . 4FE7B81BEDE8D37C9E3D95C99A56A34E . 2071552 . . [5.1.2600.6055 (xpsp_sp3_gdr.101209-1647)] . . C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
[-] 2010-04-28 21:19:54 . 2FA1EF498F026847CF276DF9099ABE79 . 2069120 . . [5.1.2600.5973 (xpsp_sp3_qfe.100427-1650)] . . C:\WINDOWS\$hf_mig$\KB981852\SP3QFE\ntkrnlpa.exe
[-] 2010-02-16 19:02:20 . DCC3D91A3DEDBBA9ECFFA6028D872CF5 . 2069120 . . [5.1.2600.5938 (xpsp_sp3_qfe.100216-1510)] . . C:\WINDOWS\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe
[-] 2009-12-09 13:33:56 . 58516936F00D10D4B615C458A8A4AB71 . 2068352 . . [5.1.2600.5913 (xpsp_sp3_qfe.091208-2029)] . . C:\WINDOWS\$hf_mig$\KB977165\SP3QFE\ntkrnlpa.exe
[-] 2009-08-04 19:53:46 . 97815C93200676C727CE951AE5C78137 . 2068352 . . [5.1.2600.5857 (xpsp_sp3_qfe.090804-1456)] . . C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntkrnlpa.exe
[-] 2009-08-04 17:29:33 . C50A3A3C9724135FFBD9CB31355F9341 . 2025984 . . [5.1.2600.5857 (xpsp_sp3_gdr.090804-1435)] . . C:\WINDOWS\ERDNT\cache\ntkrnlpa.exe
[-] 2009-02-10 17:09:12 . D721665942F74CA7FF4162A0761CBB0A . 2068224 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\SoftwareDistribution\Download\3600e56e45ad54d0df91c2e4c0249f5a\SP3GDR\ntkrnlpa.exe
[-] 2009-02-09 11:52:19 . 73A13AA10E146A3E2B4AC6D007953A74 . 2059904 . . [5.1.2600.3520 (xpsp_sp2_gdr.090206-1233)] . . C:\WINDOWS\SoftwareDistribution\Download\3600e56e45ad54d0df91c2e4c0249f5a\SP2GDR\ntkrnlpa.exe
[-] 2009-02-09 11:44:58 . BB64DC108F8C4EE4D4B7998AA19E5FA7 . 2065152 . . [5.1.2600.3520 (xpsp_sp2_qfe.090206-1239)] . . C:\WINDOWS\SoftwareDistribution\Download\3600e56e45ad54d0df91c2e4c0249f5a\SP2QFE\ntkrnlpa.exe
[-] 2009-02-09 11:19:06 . FF8A3F180A224AA27EBAB937CA027F4D . 2068352 . . [5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)] . . C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe
[-] 2009-02-09 11:19:06 . FF8A3F180A224AA27EBAB937CA027F4D . 2068352 . . [5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)] . . C:\WINDOWS\SoftwareDistribution\Download\3600e56e45ad54d0df91c2e4c0249f5a\SP3QFE\ntkrnlpa.exe
[-] 2008-08-14 17:26:52 . 5495B7902AE2EEE3A98D889E9A679724 . 2068224 . . [5.1.2600.5657 (xpsp_sp3_qfe.080814-1300)] . . C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe
[-] 2008-04-14 06:06:44 . 9F12E026DC0B0C43F521114EFB3A3ACC . 2025984 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\$NtUninstallKB2393802$\ntkrnlpa.exe
[-] 2008-04-14 06:06:34 . 4DEE41C45E803DB91A72FD1BA69C05EE . 2067968 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\ntkrnlpa.exe
[-] 2004-08-17 12:57:28 . 7715EDDD01EDFEF9EF335D29C6DFE212 . 2017280 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\ntkrnlpa.exe

[-] 2008-04-14 06:51:52 . 023DD70573D644F3D9C8B1258A7BFD08 . 435712 . . [5.1.2400.5512] . . C:\WINDOWS\ServicePackFiles\i386\ntmssvc.dll
[-] 2008-04-14 06:51:52 . 023DD70573D644F3D9C8B1258A7BFD08 . 435712 . . [5.1.2400.5512] . . C:\WINDOWS\system32\ntmssvc.dll
[-] 2008-04-14 03:21:51 . 023DD70573D644F3D9C8B1258A7BFD08 . 435712 . . [5.1.2400.5512] . . C:\WINDOWS\ERDNT\cache\ntmssvc.dll
[-] 2004-08-17 12:49:16 . D8D2B13BA93AE830B1A637DF571D1195 . 435712 . . [5.1.2400.2180] . . C:\WINDOWS\$NtServicePackUninstall$\ntmssvc.dll

[-] 2008-04-14 06:52:06 . 651BD90DCEE5B7BDC74A2EB7C9266F9E . 186368 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\upnphost.dll
[-] 2008-04-14 06:52:06 . 651BD90DCEE5B7BDC74A2EB7C9266F9E . 186368 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\upnphost.dll
[-] 2008-04-14 03:22:04 . 651BD90DCEE5B7BDC74A2EB7C9266F9E . 186368 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ERDNT\cache\upnphost.dll
[-] 2004-08-17 12:49:20 . 984FC1518B0D5B31D76F0E63608E0500 . 185344 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\upnphost.dll

[-] 2008-04-14 06:51:42 . 8E009E7AC012823845D5F39A77F4A27F . 367616 . . [5.3.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\ServicePackFiles\i386\dsound.dll
[-] 2008-04-14 06:51:42 . 8E009E7AC012823845D5F39A77F4A27F . 367616 . . [5.3.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\system32\dsound.dll
[-] 2004-08-17 12:49:06 . 8ECC475F5BAD26DB85943F888D62E364 . 367616 . . [5.3.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\dsound.dll
[-] 2004-07-09 02:27:28 . 033A45AB696EEF481707C2808C806E1A . 381952 . . [5.3.0000001.0904 built by: private/Lab06_dev(DXBLD00)] . . C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dsound.dll

[-] 2008-04-14 06:51:40 . 3B8AE11A3419DF8239183E94888702FA . 1689088 . . [5.03.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\ServicePackFiles\i386\d3d9.dll
[-] 2008-04-14 06:51:40 . 3B8AE11A3419DF8239183E94888702FA . 1689088 . . [5.03.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\system32\d3d9.dll
[-] 2004-08-17 12:49:06 . A19F5837E52D57DB66D9DB55BFCC7796 . 1689088 . . [5.03.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\d3d9.dll

[-] 2008-04-14 06:51:40 . EDAD701F01FFD9B5799B8FCF1CF6BDA7 . 279552 . . [5.03.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\ServicePackFiles\i386\ddraw.dll
[-] 2008-04-14 06:51:40 . EDAD701F01FFD9B5799B8FCF1CF6BDA7 . 279552 . . [5.03.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\system32\ddraw.dll
[-] 2004-08-17 12:49:06 . 0F9A5DD4503E82B085D8B1336B961A81 . 266240 . . [5.03.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\ddraw.dll
[-] 2004-07-09 02:27:28 . 90114704C17A581DA1BAE029F20932BE . 292864 . . [5.3.0000001.0904 built by: private/Lab06_dev(DXBLD00)] . . C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ddraw.dll

[-] 2008-04-14 06:51:54 . 16C195EBC0A3EC35C48D0C2D9A346BAB . 84992 . . [5.1.2600.5512] . . C:\WINDOWS\ServicePackFiles\i386\olepro32.dll
[-] 2008-04-14 06:51:54 . 16C195EBC0A3EC35C48D0C2D9A346BAB . 84992 . . [5.1.2600.5512] . . C:\WINDOWS\system32\olepro32.dll
[-] 2004-08-17 12:49:16 . 33F14F23DFAE4B43CDD4E535CD7C1963 . 83456 . . [5.1.2600.2180] . . C:\WINDOWS\$NtServicePackUninstall$\olepro32.dll

[-] 2008-04-14 06:51:54 . 1682285F7C0934C764A0EBBC568153CA . 39936 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\perfctrs.dll
[-] 2008-04-14 06:51:54 . 1682285F7C0934C764A0EBBC568153CA . 39936 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\perfctrs.dll
[-] 2004-08-17 12:49:16 . 6C08FF4B76506676617E03C34ECCFB11 . 39936 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\perfctrs.dll

[-] 2008-04-14 06:52:06 . 614F8186BDAB926E3B1D8927A4161B54 . 18944 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\version.dll
[-] 2008-04-14 06:52:06 . 614F8186BDAB926E3B1D8927A4161B54 . 18944 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\version.dll
[-] 2004-08-17 12:49:20 . E472BDA53A4DCD2142143AF9FD25C99A . 18944 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\version.dll

[-] 2010-12-09 15:14:39 . 8D222D8EF9B1951296F822583A044542 . 2194944 . . [5.1.2600.6055 (xpsp_sp3_qfe.101209-1646)] . . C:\WINDOWS\$hf_mig$\KB2393802\SP3QFE\ntoskrnl.exe
[-] 2010-12-09 15:14:39 . 8D222D8EF9B1951296F822583A044542 . 2194944 . . [5.1.2600.6055 (xpsp_sp3_qfe.101209-1646)] . . C:\WINDOWS\SoftwareDistribution\Download\12a74340a66b7d58c4c319d3d76434da\SP3QFE\ntoskrnl.exe
[-] 2010-12-09 15:14:08 . B6C5D4CBB22EEF31FAFBB76C2C6F3D99 . 2194944 . . [5.1.2600.6055 (xpsp_sp3_gdr.101209-1647)] . . C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe
[-] 2010-12-09 15:14:08 . B6C5D4CBB22EEF31FAFBB76C2C6F3D99 . 2194944 . . [5.1.2600.6055 (xpsp_sp3_gdr.101209-1647)] . . C:\WINDOWS\SoftwareDistribution\Download\12a74340a66b7d58c4c319d3d76434da\SP3GDR\ntoskrnl.exe
[-] 2010-12-09 15:14:08 . B6C5D4CBB22EEF31FAFBB76C2C6F3D99 . 2194944 . . [5.1.2600.6055 (xpsp_sp3_gdr.101209-1647)] . . C:\WINDOWS\system32\dllcache\ntoskrnl.exe
[-] 2010-12-09 15:14:05 . EB4B6B42932C180632A2C2C43F23B84C . 2150912 . . [5.1.2600.6055 (xpsp_sp3_gdr.101209-1647)] . . C:\WINDOWS\system32\ntoskrnl.exe
[-] 2010-04-28 05:19:52 . 91FE668957FF51A2DBCEE0D8637BA77E . 2192256 . . [5.1.2600.5973 (xpsp_sp3_qfe.100427-1650)] . . C:\WINDOWS\$hf_mig$\KB981852\SP3QFE\ntoskrnl.exe
[-] 2010-02-16 19:02:19 . 6B2312D847BA95F4E858CB4C3B5F51E1 . 2192256 . . [5.1.2600.5938 (xpsp_sp3_qfe.100216-1510)] . . C:\WINDOWS\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe
[-] 2009-12-09 13:33:50 . 7782F11AE957B736585870CD2671227B . 2191488 . . [5.1.2600.5913 (xpsp_sp3_qfe.091208-2029)] . . C:\WINDOWS\$hf_mig$\KB977165\SP3QFE\ntoskrnl.exe
[-] 2009-08-04 17:29:36 . 3742270B8C90A97A0BDD25DED1201AA9 . 2147328 . . [5.1.2600.5857 (xpsp_sp3_gdr.090804-1435)] . . C:\WINDOWS\ERDNT\cache\ntoskrnl.exe
[-] 2009-08-04 17:23:42 . 3502DBBC657001D7A2A2768BD7DE1483 . 2191488 . . [5.1.2600.5857 (xpsp_sp3_qfe.090804-1456)] . . C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe
[-] 2009-02-10 17:18:42 . 97480EBFE1D4B547657BAD75AAAB1325 . 2191360 . . [5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)] . . C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe
[-] 2009-02-10 17:18:42 . 97480EBFE1D4B547657BAD75AAAB1325 . 2191360 . . [5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)] . . C:\WINDOWS\SoftwareDistribution\Download\3600e56e45ad54d0df91c2e4c0249f5a\SP3QFE\ntoskrnl.exe
[-] 2009-02-09 11:52:17 . DF530FCAD41349C92945DF52EBA9F3E4 . 2182656 . . [5.1.2600.3520 (xpsp_sp2_gdr.090206-1233)] . . C:\WINDOWS\SoftwareDistribution\Download\3600e56e45ad54d0df91c2e4c0249f5a\SP2GDR\ntoskrnl.exe
[-] 2009-02-09 11:44:53 . C424407DDD99223BF3248044CBBE91F6 . 2188288 . . [5.1.2600.3520 (xpsp_sp2_qfe.090206-1239)] . . C:\WINDOWS\SoftwareDistribution\Download\3600e56e45ad54d0df91c2e4c0249f5a\SP2QFE\ntoskrnl.exe
[-] 2009-02-09 11:26:15 . F48662F55CD8DDD4DBBBCB69DE197725 . 2191232 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\SoftwareDistribution\Download\3600e56e45ad54d0df91c2e4c0249f5a\SP3GDR\ntoskrnl.exe
[-] 2008-08-14 17:26:50 . 2BCBCE27A946C057051A85CB032F49FF . 2191360 . . [5.1.2600.5657 (xpsp_sp3_qfe.080814-1300)] . . C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
[-] 2008-04-14 06:07:10 . C1536014AC1CB1D5397E31D9735E6571 . 2191104 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe
[-] 2008-04-14 06:06:18 . 27C7A7AED8A477F6A0C7D3AD00AB9419 . 2147328 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\$NtUninstallKB2393802$\ntoskrnl.exe
[-] 2004-08-17 12:45:30 . 84FEF6BE553ACC66729F5D4113F53310 . 2150400 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe

[-] 2008-04-14 06:52:04 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\srsvc.dll
[-] 2008-04-14 06:52:04 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\srsvc.dll
[-] 2008-04-14 03:22:03 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ERDNT\cache\srsvc.dll
[-] 2004-08-17 12:49:20 . 3CD57F31A64D32FDB28918B16D1E6AAC . 170496 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\srsvc.dll

[-] 2008-04-14 06:52:06 . FA4E1CDBA256787F2149F4AAD07BC91F . 176640 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\w32time.dll
[-] 2008-04-14 06:52:06 . FA4E1CDBA256787F2149F4AAD07BC91F . 176640 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\w32time.dll
[-] 2004-08-17 12:49:20 . 2CEEBB402187AE56B585701F3D191FB3 . 176128 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\w32time.dll

[-] 2008-04-14 06:52:06 . C1CDD9275F6A115BB0AE1D55D8D27BA6 . 334336 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\wiaservc.dll
[-] 2008-04-14 06:52:06 . C1CDD9275F6A115BB0AE1D55D8D27BA6 . 334336 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\wiaservc.dll
[-] 2004-08-17 12:49:20 . 0645CCDDDD27F96EEA3534C1DEF736D9 . 333824 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\wiaservc.dll

[-] 2008-04-14 06:51:46 . 160A1500DDBE42F8793E3AD341E4BEC4 . 18944 . . [5.1.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\ServicePackFiles\i386\midimap.dll
[-] 2008-04-14 06:51:46 . 160A1500DDBE42F8793E3AD341E4BEC4 . 18944 . . [5.1.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\system32\midimap.dll
[-] 2004-08-17 12:49:12 . B356DD67178B22A8C2FBD47316CCB43B . 18944 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\midimap.dll

[-] 2008-04-14 06:51:56 . B26098F3DC08D841DE3D79C38ACCB807 . 7680 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\rasadhlp.dll
[-] 2008-04-14 06:51:56 . B26098F3DC08D841DE3D79C38ACCB807 . 7680 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\rasadhlp.dll
[-] 2004-08-17 12:49:16 . 630A1012AF129918D2E2D70727D69351 . 8192 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\rasadhlp.dll

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))


*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AutoStartNPSAgent"="C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe" [2010-03-19 18:02:19 102400]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\DTLite.exe" [2011-01-20 09:20:12 1305408]
"Advanced SystemCare 3"="C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe" [2010-03-29 12:54:52 2343120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SkyTel"="SkyTel.EXE" [2006-05-16 16:04:00 2879488]
"USB Antivirus"="C:\Program Files\USB Disk Security\USBGuard.exe" [2008-09-23 15:21:28 798720]
"avgnt"="C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" [2010-08-02 15:09:56 281768]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-03-21 20:31:30 7585792]
"Print2PDF Print Monitor"="C:\Program Files\Software602\Print2PDF\Print2PDF.exe" [2010-12-03 15:47:58 141368]
"AdobeAAMUpdater-1.0"="C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2011-04-04 15:59:55 500208]
"AdobeCS5ServiceManager"="C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-07-22 20:10:47 402432]
"SwitchBoard"="C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 11:37:14 517096]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-05-27 08:50:30 413696]
"AGRSMMSG"="AGRSMMSG.exe" [2006-08-30 14:40:04 89542]
"RTHDCPL"="RTHDCPL.EXE" [2007-01-30 16:54:00 16116224]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-05-19 12:51:16 774233]
"nwiz"="nwiz.exe" [2007-03-21 20:31:34 1622016]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-07-30 08:47:56 289064]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2009-05-13 10:38:07 198160]
"BootSkin Startup Jobs"="C:\PROGRA~1\Stardock\WINCUS~1\BootSkin\BootSkin.exe" [2004-04-26 14:21:00 270336]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 06:52:18 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"tscuninstall"="C:\WINDOWS\system32\tscupgrd.exe" [2004-08-17 14:42:50 44544]

C:\Documents and Settings\Administrator\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]

C:\Documents and Settings\Administrator\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]

C:\Documents and Settings\Administrator\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]

C:\Documents and Settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe [2006-11-13 561213]

C:\Documents and Settings\Administrator\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"NoSecCpl"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoStartMenuSubFolders"= 0 (0x0)
"NoCommonGroups"= 0 (0x0)
"NoPrinters"= 0 (0x0)
"NoRecentDocsNetHood"= 0 (0x0)
"NoChangeAnimation"= 0 (0x0)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 19:41:34 304128]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tphotkey]
2007-12-14 14:36:04 28672 ----a-w- C:\Program Files\Lenovo\HOTKEY\tphklock.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Windows Search.lnk]
backup=C:\WINDOWS\pss\Windows Search.lnkCommon Startup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Acrobat Speed Launcher
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-09-21 18:37:40 932288 ----a-w- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2009-12-21 23:57:28 35760 ----a-w- C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]
2008-08-14 04:58:34 611712 ----a-w- C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe_ID0ENQBO]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 3]
2010-03-29 12:54:52 2343120 ----a-w- C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGRSMMSG]
2006-08-30 14:40:04 89542 ----a-w- C:\WINDOWS\AGRSMMSG.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AzMixerSel]
2006-01-25 16:45:50 53248 ----a-w- C:\Program Files\Realtek\InstallShield\AzMixerSel.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BDRegion]
2008-04-12 16:50:02 91432 ----a-w- C:\Program Files\CyberLink\Shared Files\brs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BootSkin Startup Jobs]
2004-04-26 14:21:00 270336 ----a-w- C:\Program Files\Stardock\WinCustomize\BootSkin\BootSkin.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Corel File Shell Monitor]
2008-01-15 13:18:10 16200 ----a-r- C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Corel Photo Downloader]
2007-12-14 11:35:34 531784 ----a-r- C:\Program Files\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
2008-04-14 06:52:18 15360 ----a-w- C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2008-08-08 12:11:12 490952 ----a-w- C:\Program Files\DAEMON Tools Lite\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2006-10-26 22:47:42 31016 ----a-w- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBJ]
2006-09-15 11:27:00 2048000 ----a-w- C:\Program Files\Ahead\Nero BackItUp\NBJ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2001-07-09 09:50:42 155648 ----a-w- C:\WINDOWS\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2007-03-21 20:31:30 7585792 ----a-w- C:\WINDOWS\system32\nvcpl.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
2007-03-21 20:31:34 1622016 ----a-w- C:\WINDOWS\system32\nwiz.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDVD8LanguageShortcut]
2007-12-14 09:36:42 50472 ----a-w- C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PMHandler]
2007-03-16 03:26:18 31840 ----a-w- C:\PROGRA~1\Lenovo\PMDRIV~1\PMHandler.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl8]
2008-03-20 18:23:22 83240 ----a-w- C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\rfagent]
2008-11-24 14:48:58 916800 ----a-w- C:\Program Files\RFA\rfagent.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2010-05-14 09:44:46 248552 ----a-w- C:\Program Files\Common Files\Java\Java Update\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
2006-05-19 12:51:16 774233 ----a-w- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2009-05-13 10:38:07 198160 ----a-w- C:\Program Files\Common Files\Real\Update_OB\realsched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TPWAUDAP]
2006-09-06 14:38:44 54824 ----a-w- C:\Program Files\Lenovo\HOTKEY\TpWAudAp.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Tweak UI]
2003-03-25 03:49:02 106544 ----a-w- C:\WINDOWS\system32\tweakui.cpl

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UnlockerAssistant]
2006-08-20 10:48:06 6656 ----a-w- C:\Program Files\Unlocker\UnlockerAssistant.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Pinnacle\\Studio 12\\Programs\\Studio.exe"=
"C:\\Program Files\\Samsung\\Samsung New PC Studio\\npsasvr.exe"=
"C:\\Program Files\\Samsung\\Samsung New PC Studio\\npsvsvr.exe"=
"C:\\Program Files\\uTorrent\\utorrent.exe"=
"C:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=
"C:\\Program Files\\Common Files\\soft602\\langserv.exe"=
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1723:TCP"= 1723:TCP:@xpsp2res.dll,-22015
"1701:UDP"= 1701:UDP:@xpsp2res.dll,-22016
"500:UDP"= 500:UDP:@xpsp2res.dll,-22017
"5985:TCP"= 5985:TCP:*:Disabled:Vzdálená správa systému Windows

R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:\WINDOWS\system32\drivers\dtsoftbus01.sys [3.6.2011 16:18:09 218688]
R1 PMHler;PMHler;C:\WINDOWS\system32\drivers\PMHler.sys [24.5.2006 11:48:14 10240]
R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};C:\Program Files\CyberLink\PowerDVD8\000.fcl [1.2.2008 17:24:04 41456]
R2 602XML Updater;602Updater;C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [14.4.2010 11:28:44 73728]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;C:\Program Files\Avira\AntiVir Desktop\sched.exe [30.4.2009 20:30:07 136360]
R2 FNF5SVC;Fn+F5 Service;C:\Program Files\Lenovo\HOTKEY\FnF5svc.exe [9.4.2007 10:24:32 54832]
R2 FsUsbExService;FsUsbExService;C:\WINDOWS\system32\FsUsbExService.Exe [19.3.2010 17:40:47 233472]
R3 FsUsbExDisk;FsUsbExDisk;C:\WINDOWS\system32\FsUsbExDisk.Sys [19.3.2010 17:40:47 36608]
S0 sptd;sptd;C:\WINDOWS\system32\drivers\sptd.sys [2.4.2009 20:04:55 717296]
S2 amd64si;amd64si; [x]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16:28 130384]
S3 Adobe Version Cue CS4;Adobe Version Cue CS4;C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [15.8.2008 4:46:20 284016]
S3 SwitchBoard;SwitchBoard;C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [19.2.2010 13:37:14 517096]
S3 WDC_SAM;WD SCSI Pass Thru driver;C:\WINDOWS\system32\drivers\wdcsam.sys [22.1.2010 18:32:24 11520]
S3 WinRM;Windows Remote Management (WS-Management);C:\WINDOWS\system32\svchost.exe -k WINRM [17.8.2004 14:49:28 14336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16:28 753504]
S4 Vmbastacc;Vmbastacc;C:\WINDOWS\system32\drivers\ntfs.sys [3.8.2004 22:15:10 574976]

--- Ostatní služby/ovladače v paměti ---

*NewlyCreated* - FSUSBEXDISK

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WINRM REG_MULTI_SZ WINRM

Obsah adresáře 'Naplánované úlohy'

2011-07-16 C:\WINDOWS\Tasks\AdobeAAMUpdater-1.0-LENOVO-Administrator.job
- C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2011-04-04 16:00:53 . 2011-04-04 15:59:55]

2011-07-16 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 15:57:16 . 2011-06-01 15:57:16]


------- Doplňkový sken -------

uStart Page = about:blank
uInternet Settings,ProxyOverride = *.local
IE: Append Link Target to Existing PDF
IE: E&xport to Microsoft Excel - C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Send to &Bluetooth Device... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
TCP: DhcpNameServer = 212.67.64.2 212.67.64.18
FF - ProfilePath - C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\tbbkh2yw.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.2.6&q=
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000


**************************************************************************

Několik položek CF smazal, zbytek logu vypadá čistý. Nastala nějaká změna?

Abych řekl pravdu nezdá se že by nastala nějaká změna stále platí že kdyz chci program nainstalovat Itunes zahlásí že potřebuje Quicktime a když si stáhnu tento program a chci ho znovu nainstalovat tak se napíše hláška Tato instalace je zakázána zásadami nastavenými správcem.Moc to nechápu občas mi ještě vyskočí hláška že soubor msi nemmám opravnění nainstalovat nebo tak něco podobného

Máte účet s admin právy?

no jsem jediný kdo tento notebook používá a windows mi najíždí okamžitě bez nějakého klikání na nějaký účet pokud se ptáte na toto

DavidHron píše:no jsem jediný kdo tento notebook používá a windows mi najíždí okamžitě bez nějakého klikání na nějaký účet pokud se ptáte na toto

Ne. Ptám se na to, zda váš účet má omezená (uživatelská), nebo administrátorská práva.

nezlobte se prosím ale nevím opravdu.Dá se to nejakým způsobem zjistit nebo jak to mohu poznat

Ovl. panely>uživ. účty. Klikněte na svůj účet, kde by mělo být popsáno oprávnění (uživatelský - omezený, administrátorský - plný).

Dle vašeho popisu jsem tam došel a mám tam dvě okénka.
Jedno administrátor a pod ním je napsané správce počítače do tohoto logu mohu vstoupit a druhé je označeno Guest pod ním je napsané-Účet hosta(guest) je zakázán a když vstoupím do tohoto objeví se hláška zda chci zapnout účet hosta(Guest)

Ano. Tzn. máte plné oprávnění a virus to zřejmě změnil. Zkuste obnovu systému k datu, kdy korektně fungoval.