VIRY.CZ

Logfile of random's system information tool 1.09 (written by random/random)
Run by user at 2011-08-05 09:21:55
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 885 GB (94%) free of 940 GB
Total RAM: 4095 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:21:59, on 5.8.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1438.0\mswinext.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
C:\Program Files (x86)\Winamp\winampa.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files\trend micro\user.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.seznam.cz
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
O4 - HKLM\..\Run: [Bing Bar] "C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1438.0\mswinext.exe"
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [WinampAgent] "c:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zobrazit nebo skrýt HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\Windows\System32\ezSharedSvcHost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files (x86)\PDF Complete\pdfsvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11384 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE"
C:\Windows\SysWOW64\ezSharedSvcHost.exe
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
"c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\PDF Complete\pdfsvc.exe" /startedbyscm:66B66708-40E2BE4D-pdfcService
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe"
"C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" /background
"C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe"
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-bfd23e67-ec21-4939-aa8e-d270290113c8 -SystemEventPortName:HostProcess-d05f8f8d-055e-4b38-9d3f-283871d612a1 -IoCancelEventPortName:HostProcess-3620f211-214c-466e-8ed3-706fcddc443d -NonStateChangingEventPortName:HostProcess-9cc46541-84a7-437c-9555-05532d60d4d1 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:327b2098-644b-4d2c-a8d0-4a3ea09fb653
"C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE"
"C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe"
"C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1438.0\mswinext.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe" -quickstart
"C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe" "-quickstart" "-env:OOO_CWD=2C:\\Program Files (x86)\\OpenOffice.org 3\\program"
"C:\Program Files (x86)\Winamp\winampa.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
WLIDSvcM.exe 2260
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=4240.71acb00.941627952 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll" "Mozilla.Firefox.5.0" -omnijar C:\Program Files (x86)\Mozilla Firefox\omni.jar 4240 \\.\pipe\gecko-crash-server-pipe.4240 plugin
"C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe"
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\servicing\TrustedInstaller.exe
"C:\Users\user\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\HPCeeScheduleForuser.job

=========Mozilla firefox=========

ProfilePath - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\eojz26w9.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpWinExt,version=5.0]
"Description"=Bing Bar
"Path"=C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1438.0\npwinext.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0]
"Description"=WildTangent Games App Presence Detector Plugin
"Path"=C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL

C:\Program Files (x86)\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\eojz26w9.default\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2011-07-04 978496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-01-16 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-05-14 191792]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-07-04 820864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-05-16 1164680]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-01-16 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21 509496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2011-07-04 978496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-07-04 820864]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"=c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [2008-11-20 62768]
"SmartMenu"=C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [2010-01-18 568888]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2011-08-04 5464448]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"PDF Complete"=C:\Program Files (x86)\PDF Complete\pdfsty.exe [2009-10-15 563736]
"HP Software Update"=c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2008-12-08 54576]
""= []
"Easybits Recovery"=C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [2010-04-25 61112]
"Bing Bar"=C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1438.0\mswinext.exe [2010-04-14 243544]
"Microsoft Default Manager"=C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [2009-11-12 288088]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-06-08 37296]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-30 937920]
"WinampAgent"=c:\Program Files (x86)\Winamp\winampa.exe [2010-06-28 74752]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-07-04 3493720]
"Malwarebytes' Anti-Malware"=C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [2011-07-06 449584]

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.2.lnk - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{E54729E8-BB3D-4270-9D49-7389EA579090}"=C:\Windows\SysWow64\EZUPBH~1.DLL [2010-10-21 52920]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"EnableShellExecuteHooks"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2011-08-05 09:16:37 ----D---- C:\rsit
2011-08-05 09:16:37 ----D---- C:\Program Files\trend micro
2011-08-04 20:22:25 ----D---- C:\Users\user\AppData\Roaming\HP Support Assistant
2011-08-04 20:22:18 ----D---- C:\Users\user\AppData\Roaming\HpUpdate
2011-08-04 10:36:43 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-08-04 10:36:43 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\wextract.exe
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\url.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\occache.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\msrating.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\msls31.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\mshta.exe
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\inseng.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\icardie.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2011-08-04 10:36:42 ----A---- C:\Windows\SYSWOW64\admparse.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\wininet.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\wextract.exe
2011-08-04 10:36:42 ----A---- C:\Windows\system32\webcheck.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\vbscript.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\urlmon.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\url.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2011-08-04 10:36:42 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-08-04 10:36:42 ----A---- C:\Windows\system32\pngfilt.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\occache.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\msrating.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\msls31.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\mshtmler.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\mshtmled.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\mshtml.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\mshta.exe
2011-08-04 10:36:42 ----A---- C:\Windows\system32\msfeedssync.exe
2011-08-04 10:36:42 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\msfeeds.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\licmgr10.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\jsproxy.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\jscript9.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\jscript.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\inseng.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\imgutil.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\iexpress.exe
2011-08-04 10:36:42 ----A---- C:\Windows\system32\ieUnatt.exe
2011-08-04 10:36:42 ----A---- C:\Windows\system32\ieui.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\iesysprep.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\iesetup.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\iertutil.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\iernonce.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\iepeers.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\ieframe.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\iedkcs32.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\ieapfltr.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\ieapfltr.dat
2011-08-04 10:36:42 ----A---- C:\Windows\system32\ieakui.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\ieaksie.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\ieakeng.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\IEAdvpack.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\ie4uinit.exe
2011-08-04 10:36:42 ----A---- C:\Windows\system32\icardie.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\dxtrans.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\dxtmsft.dll
2011-08-04 10:36:42 ----A---- C:\Windows\system32\admparse.dll
2011-08-04 09:53:03 ----D---- C:\Users\user\AppData\Roaming\SUPERAntiSpyware.com
2011-08-04 09:53:00 ----D---- C:\ProgramData\!SASCORE
2011-08-04 09:50:10 ----D---- C:\Program Files\CCleaner
2011-08-04 09:38:57 ----D---- C:\Program Files\Microsoft Office
2011-08-04 09:38:46 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2011-08-04 09:38:06 ----D---- C:\ProgramData\Microsoft Help
2011-08-04 09:37:50 ----RHD---- C:\MSOCache
2011-08-04 09:36:01 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2011-08-04 09:36:01 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2011-08-04 09:36:01 ----A---- C:\Windows\system32\FntCache.dll
2011-08-04 09:36:01 ----A---- C:\Windows\system32\DWrite.dll
2011-08-04 09:36:01 ----A---- C:\Windows\system32\d2d1.dll
2011-08-02 16:39:53 ----D---- C:\Program Files (x86)\WildTangent Games
2011-07-31 18:52:06 ----D---- C:\Users\user\AppData\Roaming\dvdcss
2011-07-27 14:01:15 ----D---- C:\Program Files (x86)\Plane Arcade
2011-07-27 11:45:27 ----D---- C:\Windows\system32\SPReview
2011-07-27 11:44:14 ----D---- C:\Windows\system32\EventProviders
2011-07-25 14:08:02 ----A---- C:\Users\user\AppData\Roaming\burnaware.ini
2011-07-24 16:35:00 ----A---- C:\Windows\system32\netfxperf.dll
2011-07-24 16:35:00 ----A---- C:\Windows\system32\dfshim.dll
2011-07-24 16:34:55 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2011-07-24 16:34:52 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2011-07-24 16:34:52 ----A---- C:\Windows\system32\mstscax.dll
2011-07-24 16:34:52 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2011-07-24 16:34:52 ----A---- C:\Windows\system32\d3d10warp.dll
2011-07-24 16:34:50 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2011-07-24 16:34:48 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2011-07-24 16:34:48 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2011-07-24 16:34:48 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2011-07-24 16:34:48 ----A---- C:\Windows\system32\sysmain.dll
2011-07-24 16:34:44 ----A---- C:\Windows\system32\shell32.dll
2011-07-24 16:34:43 ----A---- C:\Windows\system32\MSVidCtl.dll
2011-07-24 16:34:42 ----A---- C:\Windows\system32\wmp.dll
2011-07-24 16:34:41 ----A---- C:\Windows\system32\ntdll.dll
2011-07-24 16:34:41 ----A---- C:\Windows\system32\mscoree.dll
2011-07-24 16:34:41 ----A---- C:\Windows\system32\mmcndmgr.dll
2011-07-24 16:34:40 ----A---- C:\Windows\SYSWOW64\shell32.dll
2011-07-24 16:34:40 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2011-07-24 16:34:40 ----A---- C:\Windows\system32\xpsservices.dll
2011-07-24 16:34:40 ----A---- C:\Windows\system32\secproc_isv.dll
2011-07-24 16:34:40 ----A---- C:\Windows\system32\secproc.dll
2011-07-24 16:34:40 ----A---- C:\Windows\system32\RMActivate_isv.exe
2011-07-24 16:34:40 ----A---- C:\Windows\system32\RMActivate.exe
2011-07-24 16:34:40 ----A---- C:\Windows\system32\mf.dll
2011-07-24 16:34:39 ----A---- C:\Windows\SYSWOW64\secproc.dll
2011-07-24 16:34:39 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2011-07-24 16:34:39 ----A---- C:\Windows\system32\rpcrt4.dll
2011-07-24 16:34:38 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2011-07-24 16:34:38 ----A---- C:\Windows\system32\schedsvc.dll
2011-07-24 16:34:38 ----A---- C:\Windows\system32\ole32.dll
2011-07-24 16:34:37 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2011-07-24 16:34:37 ----A---- C:\Windows\system32\spwizui.dll
2011-07-24 16:34:36 ----A---- C:\Windows\SYSWOW64\mf.dll
2011-07-24 16:34:36 ----A---- C:\Windows\system32\wevtsvc.dll
2011-07-24 16:34:36 ----A---- C:\Windows\system32\taskschd.dll
2011-07-24 16:34:36 ----A---- C:\Windows\system32\RacEngn.dll
2011-07-24 16:34:36 ----A---- C:\Windows\system32\ExplorerFrame.dll
2011-07-24 16:34:36 ----A---- C:\Windows\system32\diagperf.dll
2011-07-24 16:34:35 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2011-07-24 16:34:35 ----A---- C:\Windows\system32\vssapi.dll
2011-07-24 16:34:35 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2011-07-24 16:34:35 ----A---- C:\Windows\system32\msxml3.dll
2011-07-24 16:34:35 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2011-07-24 16:34:34 ----A---- C:\Windows\SYSWOW64\wmp.dll
2011-07-24 16:34:34 ----A---- C:\Windows\system32\UIRibbon.dll
2011-07-24 16:34:34 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2011-07-24 16:34:33 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2011-07-24 16:34:33 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2011-07-24 16:34:33 ----A---- C:\Windows\system32\WsmSvc.dll
2011-07-24 16:34:33 ----A---- C:\Windows\system32\WMVCORE.DLL
2011-07-24 16:34:32 ----A---- C:\Windows\system32\WinSAT.exe
2011-07-24 16:34:32 ----A---- C:\Windows\system32\spreview.exe
2011-07-24 16:34:32 ----A---- C:\Windows\system32\spinstall.exe
2011-07-24 16:34:32 ----A---- C:\Windows\system32\rdpdd.dll
2011-07-24 16:34:32 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2011-07-24 16:34:32 ----A---- C:\Windows\system32\PresentationHost.exe
2011-07-24 16:34:32 ----A---- C:\Windows\system32\MPSSVC.dll
2011-07-24 16:34:32 ----A---- C:\Windows\system32\CertEnroll.dll
2011-07-24 16:34:31 ----A---- C:\Windows\system32\WMVDECOD.DLL
2011-07-24 16:34:31 ----A---- C:\Windows\system32\msxml6.dll
2011-07-24 16:34:31 ----A---- C:\Windows\system32\d3d9.dll
2011-07-24 16:34:30 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2011-07-24 16:34:30 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2011-07-24 16:34:30 ----A---- C:\Windows\system32\SearchFolder.dll
2011-07-24 16:34:30 ----A---- C:\Windows\system32\IKEEXT.DLL
2011-07-24 16:34:30 ----A---- C:\Windows\system32\gpsvc.dll
2011-07-24 16:34:30 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2011-07-24 16:34:29 ----A---- C:\Windows\system32\VSSVC.exe
2011-07-24 16:34:29 ----A---- C:\Windows\system32\dwmcore.dll
2011-07-24 16:34:29 ----A---- C:\Windows\system32\drivers\http.sys
2011-07-24 16:34:29 ----A---- C:\Windows\system32\dbgeng.dll
2011-07-24 16:34:28 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2011-07-24 16:34:28 ----A---- C:\Windows\system32\drivers\ndis.sys
2011-07-24 16:34:28 ----A---- C:\Windows\system32\crypt32.dll
2011-07-24 16:34:28 ----A---- C:\Windows\system32\actxprxy.dll
2011-07-24 16:34:27 ----A---- C:\Windows\SYSWOW64\ole32.dll
2011-07-24 16:34:27 ----A---- C:\Windows\system32\TSWorkspace.dll
2011-07-24 16:34:27 ----A---- C:\Windows\system32\termsrv.dll
2011-07-24 16:34:27 ----A---- C:\Windows\system32\schannel.dll
2011-07-24 16:34:27 ----A---- C:\Windows\system32\qmgr.dll
2011-07-24 16:34:27 ----A---- C:\Windows\system32\lsasrv.dll
2011-07-24 16:34:27 ----A---- C:\Windows\system32\audiosrv.dll
2011-07-24 16:34:26 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2011-07-24 16:34:26 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2011-07-24 16:34:26 ----A---- C:\Windows\system32\winhttp.dll
2011-07-24 16:34:26 ----A---- C:\Windows\system32\sqmapi.dll
2011-07-24 16:34:26 ----A---- C:\Windows\system32\netlogon.dll
2011-07-24 16:34:26 ----A---- C:\Windows\system32\mstsc.exe
2011-07-24 16:34:26 ----A---- C:\Windows\system32\imapi2fs.dll
2011-07-24 16:34:26 ----A---- C:\Windows\system32\d3d11.dll
2011-07-24 16:34:25 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2011-07-24 16:34:25 ----A---- C:\Windows\system32\setupapi.dll
2011-07-24 16:34:25 ----A---- C:\Windows\system32\rpcss.dll
2011-07-24 16:34:25 ----A---- C:\Windows\system32\QAGENTRT.DLL
2011-07-24 16:34:25 ----A---- C:\Windows\system32\propsys.dll
2011-07-24 16:34:25 ----A---- C:\Windows\system32\msv1_0.dll
2011-07-24 16:34:24 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2011-07-24 16:34:24 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2011-07-24 16:34:24 ----A---- C:\Windows\system32\werconcpl.dll
2011-07-24 16:34:24 ----A---- C:\Windows\system32\wbengine.exe
2011-07-24 16:34:24 ----A---- C:\Windows\system32\taskeng.exe
2011-07-24 16:34:24 ----A---- C:\Windows\system32\odbc32.dll
2011-07-24 16:34:24 ----A---- C:\Windows\system32\authui.dll
2011-07-24 16:34:23 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2011-07-24 16:34:23 ----A---- C:\Windows\system32\WSDApi.dll
2011-07-24 16:34:23 ----A---- C:\Windows\system32\user32.dll
2011-07-24 16:34:23 ----A---- C:\Windows\system32\drivers\netio.sys
2011-07-24 16:34:23 ----A---- C:\Windows\system32\dhcpcore.dll
2011-07-24 16:34:23 ----A---- C:\Windows\system32\certmgr.dll
2011-07-24 16:34:22 ----A---- C:\Windows\SYSWOW64\wer.dll
2011-07-24 16:34:22 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2011-07-24 16:34:22 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2011-07-24 16:34:22 ----A---- C:\Windows\SYSWOW64\certcli.dll
2011-07-24 16:34:22 ----A---- C:\Windows\system32\webio.dll
2011-07-24 16:34:22 ----A---- C:\Windows\system32\tsmf.dll
2011-07-24 16:34:22 ----A---- C:\Windows\system32\scavengeui.dll
2011-07-24 16:34:22 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2011-07-24 16:34:22 ----A---- C:\Windows\system32\ncsi.dll
2011-07-24 16:34:22 ----A---- C:\Windows\system32\localspl.dll
2011-07-24 16:34:22 ----A---- C:\Windows\system32\drivers\tdx.sys
2011-07-24 16:34:22 ----A---- C:\Windows\system32\drivers\netbt.sys
2011-07-24 16:34:21 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2011-07-24 16:34:21 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2011-07-24 16:34:21 ----A---- C:\Windows\system32\shlwapi.dll
2011-07-24 16:34:21 ----A---- C:\Windows\system32\netshell.dll
2011-07-24 16:34:21 ----A---- C:\Windows\system32\msdtctm.dll
2011-07-24 16:34:21 ----A---- C:\Windows\system32\msdrm.dll
2011-07-24 16:34:21 ----A---- C:\Windows\system32\framedynos.dll
2011-07-24 16:34:20 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2011-07-24 16:34:20 ----A---- C:\Windows\system32\ws2_32.dll
2011-07-24 16:34:20 ----A---- C:\Windows\system32\wmicmiplugin.dll
2011-07-24 16:34:20 ----A---- C:\Windows\system32\winlogon.exe
2011-07-24 16:34:20 ----A---- C:\Windows\system32\usp10.dll
2011-07-24 16:34:20 ----A---- C:\Windows\system32\quartz.dll
2011-07-24 16:34:20 ----A---- C:\Windows\system32\nlasvc.dll
2011-07-24 16:34:20 ----A---- C:\Windows\system32\netcfgx.dll
2011-07-24 16:34:20 ----A---- C:\Windows\system32\lsm.exe
2011-07-24 16:34:20 ----A---- C:\Windows\system32\drivers\cng.sys
2011-07-24 16:34:19 ----A---- C:\Windows\SYSWOW64\quartz.dll
2011-07-24 16:34:19 ----A---- C:\Windows\system32\wmpps.dll
2011-07-24 16:34:19 ----A---- C:\Windows\system32\dxgi.dll
2011-07-24 16:34:19 ----A---- C:\Windows\system32\comdlg32.dll
2011-07-24 16:34:18 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2011-07-24 16:34:18 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2011-07-24 16:34:18 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2011-07-24 16:34:18 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2011-07-24 16:34:18 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2011-07-24 16:34:18 ----A---- C:\Windows\system32\wpdshext.dll
2011-07-24 16:34:18 ----A---- C:\Windows\system32\Query.dll
2011-07-24 16:34:18 ----A---- C:\Windows\system32\QAGENT.DLL
2011-07-24 16:34:18 ----A---- C:\Windows\system32\mswsock.dll
2011-07-24 16:34:18 ----A---- C:\Windows\system32\drvstore.dll
2011-07-24 16:34:18 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2011-07-24 16:34:18 ----A---- C:\Windows\system32\BFE.DLL
2011-07-24 16:34:18 ----A---- C:\Windows\system32\azroles.dll
2011-07-24 16:34:18 ----A---- C:\Windows\system32\apphelp.dll
2011-07-24 16:34:17 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2011-07-24 16:34:17 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2011-07-24 16:34:17 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2011-07-24 16:34:17 ----A---- C:\Windows\system32\Vault.dll
2011-07-24 16:34:17 ----A---- C:\Windows\system32\samsrv.dll
2011-07-24 16:34:17 ----A---- C:\Windows\system32\lpksetup.exe
2011-07-24 16:34:17 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2011-07-24 16:34:17 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2011-07-24 16:34:17 ----A---- C:\Windows\system32\cmd.exe
2011-07-24 16:34:16 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2011-07-24 16:34:16 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2011-07-24 16:34:16 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2011-07-24 16:34:16 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2011-07-24 16:34:16 ----A---- C:\Windows\system32\win32spl.dll
2011-07-24 16:34:16 ----A---- C:\Windows\system32\WebClnt.dll
2011-07-24 16:34:15 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2011-07-24 16:34:15 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2011-07-24 16:34:15 ----A---- C:\Windows\SYSWOW64\webio.dll
2011-07-24 16:34:15 ----A---- C:\Windows\SYSWOW64\Query.dll
2011-07-24 16:34:15 ----A---- C:\Windows\system32\Wldap32.dll
2011-07-24 16:34:15 ----A---- C:\Windows\system32\WindowsCodecs.dll
2011-07-24 16:34:15 ----A---- C:\Windows\system32\taskcomp.dll
2011-07-24 16:34:15 ----A---- C:\Windows\system32\sxs.dll
2011-07-24 16:34:15 ----A---- C:\Windows\system32\mfds.dll
2011-07-24 16:34:15 ----A---- C:\Windows\system32\mcbuilder.exe
2011-07-24 16:34:15 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2011-07-24 16:34:14 ----A---- C:\Windows\SYSWOW64\upnp.dll
2011-07-24 16:34:14 ----A---- C:\Windows\SYSWOW64\schannel.dll
2011-07-24 16:34:14 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2011-07-24 16:34:14 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2011-07-24 16:34:14 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2011-07-24 16:34:14 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2011-07-24 16:34:14 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2011-07-24 16:34:14 ----A---- C:\Windows\system32\wuaueng.dll
2011-07-24 16:34:14 ----A---- C:\Windows\system32\webservices.dll
2011-07-24 16:34:14 ----A---- C:\Windows\system32\SessEnv.dll
2011-07-24 16:34:14 ----A---- C:\Windows\system32\pnidui.dll
2011-07-24 16:34:14 ----A---- C:\Windows\system32\ipsmsnap.dll
2011-07-24 16:34:14 ----A---- C:\Windows\system32\hgprint.dll
2011-07-24 16:34:13 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2011-07-24 16:34:13 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2011-07-24 16:34:13 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2011-07-24 16:34:13 ----A---- C:\Windows\SYSWOW64\authui.dll
2011-07-24 16:34:13 ----A---- C:\Windows\system32\winsta.dll
2011-07-24 16:34:13 ----A---- C:\Windows\system32\sqlsrv32.dll
2011-07-24 16:34:13 ----A---- C:\Windows\system32\spoolsv.exe
2011-07-24 16:34:12 ----A---- C:\Windows\SYSWOW64\usp10.dll
2011-07-24 16:34:12 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2011-07-24 16:34:12 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2011-07-24 16:34:12 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe
2011-07-24 16:34:12 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2011-07-24 16:34:12 ----A---- C:\Windows\system32\WMNetMgr.dll
2011-07-24 16:34:12 ----A---- C:\Windows\system32\schtasks.exe
2011-07-24 16:34:12 ----A---- C:\Windows\system32\prncache.dll
2011-07-24 16:34:12 ----A---- C:\Windows\system32\mcmde.dll
2011-07-24 16:34:12 ----A---- C:\Windows\system32\gdi32.dll
2011-07-24 16:34:12 ----A---- C:\Windows\system32\fveapi.dll
2011-07-24 16:34:12 ----A---- C:\Windows\system32\drivers\volsnap.sys
2011-07-24 16:34:12 ----A---- C:\Windows\system32\drivers\msrpc.sys
2011-07-24 16:34:12 ----A---- C:\Windows\system32\dot3api.dll
2011-07-24 16:34:11 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2011-07-24 16:34:11 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2011-07-24 16:34:11 ----A---- C:\Windows\SYSWOW64\userenv.dll
2011-07-24 16:34:11 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2011-07-24 16:34:11 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2011-07-24 16:34:11 ----A---- C:\Windows\system32\wuapi.dll
2011-07-24 16:34:11 ----A---- C:\Windows\system32\wlanpref.dll
2011-07-24 16:34:11 ----A---- C:\Windows\system32\wintrust.dll
2011-07-24 16:34:11 ----A---- C:\Windows\system32\vpnike.dll
2011-07-24 16:34:11 ----A---- C:\Windows\system32\userenv.dll
2011-07-24 16:34:11 ----A---- C:\Windows\system32\photowiz.dll
2011-07-24 16:34:11 ----A---- C:\Windows\system32\evr.dll
2011-07-24 16:34:11 ----A---- C:\Windows\system32\drivers\rdbss.sys
2011-07-24 16:34:11 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2011-07-24 16:34:10 ----A---- C:\Windows\SYSWOW64\cmd.exe
2011-07-24 16:34:10 ----A---- C:\Windows\system32\wmpmde.dll
2011-07-24 16:34:10 ----A---- C:\Windows\system32\WMPEncEn.dll
2011-07-24 16:34:10 ----A---- C:\Windows\system32\wmpeffects.dll
2011-07-24 16:34:10 ----A---- C:\Windows\system32\SyncCenter.dll
2011-07-24 16:34:10 ----A---- C:\Windows\system32\sppobjs.dll
2011-07-24 16:34:10 ----A---- C:\Windows\system32\mfreadwrite.dll
2011-07-24 16:34:10 ----A---- C:\Windows\system32\IPSECSVC.DLL
2011-07-24 16:34:10 ----A---- C:\Windows\system32\FXSSVC.exe
2011-07-24 16:34:10 ----A---- C:\Windows\system32\framedyn.dll
2011-07-24 16:34:10 ----A---- C:\Windows\system32\AudioSes.dll
2011-07-24 16:34:10 ----A---- C:\Windows\system32\aepdu.dll
2011-07-24 16:34:09 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2011-07-24 16:34:09 ----A---- C:\Windows\SYSWOW64\propsys.dll
2011-07-24 16:34:09 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2011-07-24 16:34:09 ----A---- C:\Windows\system32\srvsvc.dll
2011-07-24 16:34:09 ----A---- C:\Windows\system32\shsvcs.dll
2011-07-24 16:34:09 ----A---- C:\Windows\system32\fde.dll
2011-07-24 16:34:09 ----A---- C:\Windows\system32\aeinv.dll
2011-07-24 16:34:08 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2011-07-24 16:34:08 ----A---- C:\Windows\SYSWOW64\user32.dll
2011-07-24 16:34:08 ----A---- C:\Windows\SYSWOW64\mfds.dll
2011-07-24 16:34:08 ----A---- C:\Windows\system32\WinSATAPI.dll
2011-07-24 16:34:08 ----A---- C:\Windows\system32\stobject.dll
2011-07-24 16:34:08 ----A---- C:\Windows\system32\netid.dll
2011-07-24 16:34:08 ----A---- C:\Windows\system32\netdiagfx.dll
2011-07-24 16:34:08 ----A---- C:\Windows\system32\localsec.dll
2011-07-24 16:34:08 ----A---- C:\Windows\system32\iphlpsvc.dll
2011-07-24 16:34:08 ----A---- C:\Windows\system32\inetpp.dll
2011-07-24 16:34:08 ----A---- C:\Windows\system32\imapi2.dll
2011-07-24 16:34:08 ----A---- C:\Windows\system32\drivers\udfs.sys
2011-07-24 16:34:08 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2011-07-24 16:34:08 ----A---- C:\Windows\system32\credui.dll
2011-07-24 16:34:08 ----A---- C:\Windows\system32\cdd.dll
2011-07-24 16:34:08 ----A---- C:\Windows\system32\bcryptprimitives.dll
2011-07-24 16:34:07 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2011-07-24 16:34:07 ----A---- C:\Windows\SYSWOW64\azroles.dll
2011-07-24 16:34:07 ----A---- C:\Windows\system32\tcpipcfg.dll
2011-07-24 16:34:07 ----A---- C:\Windows\system32\spp.dll
2011-07-24 16:34:07 ----A---- C:\Windows\system32\QSHVHOST.DLL
2011-07-24 16:34:07 ----A---- C:\Windows\system32\profsvc.dll
2011-07-24 16:34:07 ----A---- C:\Windows\system32\msinfo32.exe
2011-07-24 16:34:07 ----A---- C:\Windows\system32\gameux.dll
2011-07-24 16:34:07 ----A---- C:\Windows\system32\davclnt.dll
2011-07-24 16:34:07 ----A---- C:\Windows\system32\biocpl.dll
2011-07-24 16:34:06 ----A---- C:\Windows\SYSWOW64\themeui.dll
2011-07-24 16:34:06 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2011-07-24 16:34:06 ----A---- C:\Windows\SYSWOW64\spp.dll
2011-07-24 16:34:06 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2011-07-24 16:34:06 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2011-07-24 16:34:06 ----A---- C:\Windows\SYSWOW64\credui.dll
2011-07-24 16:34:06 ----A---- C:\Windows\system32\wusa.exe
2011-07-24 16:34:06 ----A---- C:\Windows\system32\vds.exe
2011-07-24 16:34:06 ----A---- C:\Windows\system32\scansetting.dll
2011-07-24 16:34:06 ----A---- C:\Windows\system32\printui.dll
2011-07-24 16:34:06 ----A---- C:\Windows\system32\pla.dll
2011-07-24 16:34:06 ----A---- C:\Windows\system32\PhotoScreensaver.scr
2011-07-24 16:34:06 ----A---- C:\Windows\system32\mspbda.dll
2011-07-24 16:34:06 ----A---- C:\Windows\system32\msdri.dll
2011-07-24 16:34:06 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2011-07-24 16:34:06 ----A---- C:\Windows\system32\aitagent.exe
2011-07-24 16:34:06 ----A---- C:\Windows\splwow64.exe
2011-07-24 16:34:05 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2011-07-24 16:34:05 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2011-07-24 16:34:05 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2011-07-24 16:34:05 ----A---- C:\Windows\system32\wiaservc.dll
2011-07-24 16:34:05 ----A---- C:\Windows\system32\rpchttp.dll
2011-07-24 16:34:05 ----A---- C:\Windows\system32\drivers\pci.sys
2011-07-24 16:34:05 ----A---- C:\Windows\system32\cryptsvc.dll
2011-07-24 16:34:04 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2011-07-24 16:34:04 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2011-07-24 16:34:04 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2011-07-24 16:34:04 ----A---- C:\Windows\SYSWOW64\evr.dll
2011-07-24 16:34:04 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2011-07-24 16:34:04 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2011-07-24 16:34:04 ----A---- C:\Windows\system32\XpsRasterService.dll
2011-07-24 16:34:04 ----A---- C:\Windows\system32\wisptis.exe
2011-07-24 16:34:04 ----A---- C:\Windows\system32\PkgMgr.exe
2011-07-24 16:34:04 ----A---- C:\Windows\system32\ocsetup.exe
2011-07-24 16:34:04 ----A---- C:\Windows\system32\msi.dll
2011-07-24 16:34:04 ----A---- C:\Windows\system32\mscms.dll
2011-07-24 16:34:04 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2011-07-24 16:34:04 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2011-07-24 16:34:04 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2011-07-24 16:34:03 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2011-07-24 16:34:03 ----A---- C:\Windows\SYSWOW64\calc.exe
2011-07-24 16:34:03 ----A---- C:\Windows\system32\sppwinob.dll
2011-07-24 16:34:03 ----A---- C:\Windows\system32\ocsetapi.dll
2011-07-24 16:34:03 ----A---- C:\Windows\system32\DXP.dll
2011-07-24 16:34:02 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2011-07-24 16:34:02 ----A---- C:\Windows\system32\wpdbusenum.dll
2011-07-24 16:34:02 ----A---- C:\Windows\system32\wcncsvc.dll
2011-07-24 16:34:02 ----A---- C:\Windows\system32\upnp.dll
2011-07-24 16:34:02 ----A---- C:\Windows\system32\Robocopy.exe
2011-07-24 16:34:02 ----A---- C:\Windows\system32\rdpcore.dll
2011-07-24 16:34:02 ----A---- C:\Windows\system32\ntshrui.dll
2011-07-24 16:34:02 ----A---- C:\Windows\system32\mprapi.dll
2011-07-24 16:34:02 ----A---- C:\Windows\system32\eapphost.dll
2011-07-24 16:34:02 ----A---- C:\Windows\system32\eapp3hst.dll
2011-07-24 16:34:02 ----A---- C:\Windows\system32\drivers\volmgr.sys
2011-07-24 16:34:02 ----A---- C:\Windows\system32\drivers\msdsm.sys
2011-07-24 16:34:02 ----A---- C:\Windows\system32\ci.dll
2011-07-24 16:34:01 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2011-07-24 16:34:01 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2011-07-24 16:34:01 ----A---- C:\Windows\SYSWOW64\sxs.dll
2011-07-24 16:34:01 ----A---- C:\Windows\SYSWOW64\netshell.dll
2011-07-24 16:34:01 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2011-07-24 16:34:01 ----A---- C:\Windows\system32\thumbcache.dll
2011-07-24 16:34:01 ----A---- C:\Windows\system32\t2embed.dll
2011-07-24 16:34:01 ----A---- C:\Windows\system32\hal.dll
2011-07-24 16:34:01 ----A---- C:\Windows\system32\drivers\HpSAMD.sys
2011-07-24 16:34:00 ----A---- C:\Windows\SYSWOW64\stobject.dll
2011-07-24 16:34:00 ----A---- C:\Windows\SYSWOW64\prncache.dll
2011-07-24 16:34:00 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2011-07-24 16:34:00 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2011-07-24 16:34:00 ----A---- C:\Windows\system32\themeui.dll
2011-07-24 16:34:00 ----A---- C:\Windows\system32\sspicli.dll
2011-07-24 16:34:00 ----A---- C:\Windows\system32\scecli.dll
2011-07-24 16:34:00 ----A---- C:\Windows\system32\puiobj.dll
2011-07-24 16:34:00 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2011-07-24 16:34:00 ----A---- C:\Windows\system32\nlaapi.dll
2011-07-24 16:34:00 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2011-07-24 16:34:00 ----A---- C:\Windows\system32\msasn1.dll
2011-07-24 16:34:00 ----A---- C:\Windows\system32\iasrad.dll
2011-07-24 16:34:00 ----A---- C:\Windows\system32\DxpTaskSync.dll
2011-07-24 16:34:00 ----A---- C:\Windows\system32\dwmredir.dll
2011-07-24 16:34:00 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2011-07-24 16:34:00 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys
2011-07-24 16:34:00 ----A---- C:\Windows\system32\drivers\fvevol.sys
2011-07-24 16:34:00 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2011-07-24 16:33:59 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2011-07-24 16:33:59 ----A---- C:\Windows\SYSWOW64\printui.dll
2011-07-24 16:33:59 ----A---- C:\Windows\SYSWOW64\msi.dll
2011-07-24 16:33:59 ----A---- C:\Windows\system32\onex.dll
2011-07-24 16:33:59 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2011-07-24 16:33:59 ----A---- C:\Windows\system32\aaclient.dll
2011-07-24 16:33:58 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2011-07-24 16:33:58 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2011-07-24 16:33:58 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2011-07-24 16:33:58 ----A---- C:\Windows\SYSWOW64\net1.exe
2011-07-24 16:33:58 ----A---- C:\Windows\system32\wdc.dll
2011-07-24 16:33:58 ----A---- C:\Windows\system32\scesrv.dll
2011-07-24 16:33:58 ----A---- C:\Windows\system32\rasmans.dll
2011-07-24 16:33:57 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2011-07-24 16:33:57 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2011-07-24 16:33:57 ----A---- C:\Windows\system32\wlangpui.dll
2011-07-24 16:33:57 ----A---- C:\Windows\system32\wiadefui.dll
2011-07-24 16:33:57 ----A---- C:\Windows\system32\VAN.dll
2011-07-24 16:33:57 ----A---- C:\Windows\system32\StructuredQuery.dll
2011-07-24 16:33:57 ----A---- C:\Windows\system32\sdengin2.dll
2011-07-24 16:33:57 ----A---- C:\Windows\system32\netcenter.dll
2011-07-24 16:33:57 ----A---- C:\Windows\system32\msftedit.dll
2011-07-24 16:33:57 ----A---- C:\Windows\system32\dskquoui.dll
2011-07-24 16:33:57 ----A---- C:\Windows\system32\drivers\partmgr.sys
2011-07-24 16:33:56 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2011-07-24 16:33:56 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2011-07-24 16:33:56 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2011-07-24 16:33:56 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2011-07-24 16:33:56 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2011-07-24 16:33:56 ----A---- C:\Windows\SYSWOW64\pnidui.dll
2011-07-24 16:33:56 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2011-07-24 16:33:56 ----A---- C:\Windows\system32\wucltux.dll
2011-07-24 16:33:56 ----A---- C:\Windows\system32\wscapi.dll
2011-07-24 16:33:56 ----A---- C:\Windows\system32\TabSvc.dll
2011-07-24 16:33:56 ----A---- C:\Windows\system32\srchadmin.dll
2011-07-24 16:33:56 ----A---- C:\Windows\system32\SndVol.exe
2011-07-24 16:33:56 ----A---- C:\Windows\system32\samcli.dll
2011-07-24 16:33:56 ----A---- C:\Windows\system32\regapi.dll
2011-07-24 16:33:56 ----A---- C:\Windows\system32\QUTIL.DLL
2011-07-24 16:33:56 ----A---- C:\Windows\system32\iasacct.dll
2011-07-24 16:33:56 ----A---- C:\Windows\system32\drivers\termdd.sys
2011-07-24 16:33:56 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2011-07-24 16:33:56 ----A---- C:\Windows\system32\consent.exe
2011-07-24 16:33:55 ----A---- C:\Windows\SYSWOW64\webservices.dll
2011-07-24 16:33:55 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll
2011-07-24 16:33:55 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2011-07-24 16:33:55 ----A---- C:\Windows\SYSWOW64\fde.dll
2011-07-24 16:33:55 ----A---- C:\Windows\system32\WUDFSvc.dll
2011-07-24 16:33:55 ----A---- C:\Windows\system32\wksprt.exe
2011-07-24 16:33:55 ----A---- C:\Windows\system32\taskhost.exe
2011-07-24 16:33:55 ----A---- C:\Windows\system32\setupcl.exe
2011-07-24 16:33:55 ----A---- C:\Windows\system32\rastls.dll
2011-07-24 16:33:55 ----A---- C:\Windows\system32\drivers\msahci.sys
2011-07-24 16:33:54 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2011-07-24 16:33:54 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2011-07-24 16:33:54 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2011-07-24 16:33:54 ----A---- C:\Windows\SYSWOW64\pla.dll
2011-07-24 16:33:54 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2011-07-24 16:33:54 ----A---- C:\Windows\system32\tapisrv.dll
2011-07-24 16:33:54 ----A---- C:\Windows\system32\netiohlp.dll
2011-07-24 16:33:54 ----A---- C:\Windows\system32\msconfig.exe
2011-07-24 16:33:54 ----A---- C:\Windows\system32\mimefilt.dll
2011-07-24 16:33:54 ----A---- C:\Windows\system32\ListSvc.dll
2011-07-24 16:33:54 ----A---- C:\Windows\system32\hgcpl.dll
2011-07-24 16:33:54 ----A---- C:\Windows\system32\drivers\raspptp.sys
2011-07-24 16:33:54 ----A---- C:\Windows\system32\drivers\acpi.sys
2011-07-24 16:33:54 ----A---- C:\Windows\system32\basecsp.dll
2011-07-24 16:33:53 ----A---- C:\Windows\SYSWOW64\winsta.dll
2011-07-24 16:33:53 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2011-07-24 16:33:53 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2011-07-24 16:33:53 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2011-07-24 16:33:53 ----A---- C:\Windows\system32\lsmproxy.dll
2011-07-24 16:33:53 ----A---- C:\Windows\system32\fdeploy.dll
2011-07-24 16:33:53 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2011-07-24 16:33:53 ----A---- C:\Windows\system32\drivers\ks.sys
2011-07-24 16:33:53 ----A---- C:\Windows\system32\clusapi.dll
2011-07-24 16:33:53 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2011-07-24 16:33:52 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2011-07-24 16:33:52 ----A---- C:\Windows\SYSWOW64\imapi2.dll
2011-07-24 16:33:52 ----A---- C:\Windows\SYSWOW64\gameux.dll
2011-07-24 16:33:52 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll
2011-07-24 16:33:52 ----A---- C:\Windows\system32\riched20.dll
2011-07-24 16:33:52 ----A---- C:\Windows\system32\mtxclu.dll
2011-07-24 16:33:52 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2011-07-24 16:33:52 ----A---- C:\Windows\system32\dnscmmc.dll
2011-07-24 16:33:51 ----A---- C:\Windows\SYSWOW64\WMPEncEn.dll
2011-07-24 16:33:51 ----A---- C:\Windows\SYSWOW64\winmm.dll
2011-07-24 16:33:51 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2011-07-24 16:33:51 ----A---- C:\Windows\SYSWOW64\onex.dll
2011-07-24 16:33:51 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2011-07-24 16:33:51 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2011-07-24 16:33:51 ----A---- C:\Windows\system32\themecpl.dll
2011-07-24 16:33:51 ----A---- C:\Windows\system32\sharemediacpl.dll
2011-07-24 16:33:51 ----A---- C:\Windows\system32\SensorsCpl.dll
2011-07-24 16:33:51 ----A---- C:\Windows\system32\RpcRtRemote.dll
2011-07-24 16:33:51 ----A---- C:\Windows\system32\powercpl.dll
2011-07-24 16:33:51 ----A---- C:\Windows\system32\netjoin.dll
2011-07-24 16:33:51 ----A---- C:\Windows\system32\nci.dll
2011-07-24 16:33:51 ----A---- C:\Windows\system32\logoncli.dll
2011-07-24 16:33:51 ----A---- C:\Windows\system32\Faultrep.dll
2011-07-24 16:33:51 ----A---- C:\Windows\system32\eudcedit.exe
2011-07-24 16:33:50 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2011-07-24 16:33:50 ----A---- C:\Windows\SYSWOW64\samcli.dll
2011-07-24 16:33:50 ----A---- C:\Windows\SYSWOW64\regapi.dll
2011-07-24 16:33:50 ----A---- C:\Windows\SYSWOW64\proquota.exe
2011-07-24 16:33:50 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2011-07-24 16:33:50 ----A---- C:\Windows\SYSWOW64\msutb.dll
2011-07-24 16:33:50 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2011-07-24 16:33:50 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2011-07-24 16:33:50 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2011-07-24 16:33:50 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2011-07-24 16:33:50 ----A---- C:\Windows\SYSWOW64\autochk.exe
2011-07-24 16:33:50 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2011-07-24 16:33:50 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2011-07-24 16:33:50 ----A---- C:\Windows\system32\wkssvc.dll
2011-07-24 16:33:50 ----A---- C:\Windows\system32\vpnikeapi.dll
2011-07-24 16:33:50 ----A---- C:\Windows\system32\sppcomapi.dll
2011-07-24 16:33:50 ----A---- C:\Windows\system32\Narrator.exe
2011-07-24 16:33:50 ----A---- C:\Windows\system32\comctl32.dll
2011-07-24 16:33:50 ----A---- C:\Windows\system32\cabview.dll
2011-07-24 16:33:50 ----A---- C:\Windows\system32\autochk.exe
2011-07-24 16:33:50 ----A---- C:\Windows\system32\autofmt.exe
2011-07-24 16:33:49 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2011-07-24 16:33:49 ----A---- C:\Windows\SYSWOW64\srchadmin.dll
2011-07-24 16:33:49 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2011-07-24 16:33:49 ----A---- C:\Windows\system32\wpd_ci.dll
2011-07-24 16:33:49 ----A---- C:\Windows\system32\shsetup.dll
2011-07-24 16:33:49 ----A---- C:\Windows\system32\nshipsec.dll
2011-07-24 16:33:49 ----A---- C:\Windows\system32\fms.dll
2011-07-24 16:33:49 ----A---- C:\Windows\system32\autoconv.exe
2011-07-24 16:33:49 ----A---- C:\Windows\system32\audiodg.exe
2011-07-24 16:33:48 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2011-07-24 16:33:48 ----A---- C:\Windows\SYSWOW64\powercpl.dll
2011-07-24 16:33:48 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2011-07-24 16:33:48 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2011-07-24 16:33:48 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2011-07-24 16:33:48 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2011-07-24 16:33:48 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2011-07-24 16:33:48 ----A---- C:\Windows\system32\wwanconn.dll
2011-07-24 16:33:48 ----A---- C:\Windows\system32\wlanui.dll
2011-07-24 16:33:48 ----A---- C:\Windows\system32\SmiEngine.dll
2011-07-24 16:33:48 ----A---- C:\Windows\system32\sdclt.exe
2011-07-24 16:33:48 ----A---- C:\Windows\system32\prntvpt.dll
2011-07-24 16:33:48 ----A---- C:\Windows\system32\mscorier.dll
2011-07-24 16:33:48 ----A---- C:\Windows\system32\drivers\wanarp.sys
2011-07-24 16:33:48 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2011-07-24 16:33:48 ----A---- C:\Windows\system32\drivers\scsiport.sys
2011-07-24 16:33:48 ----A---- C:\Windows\system32\dps.dll
2011-07-24 16:33:48 ----A---- C:\Windows\system32\bcdsrv.dll
2011-07-24 16:33:47 ----A---- C:\Windows\SYSWOW64\wdc.dll
2011-07-24 16:33:47 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2011-07-24 16:33:47 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2011-07-24 16:33:47 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL
2011-07-24 16:33:47 ----A---- C:\Windows\SYSWOW64\netid.dll
2011-07-24 16:33:47 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2011-07-24 16:33:47 ----A---- C:\Windows\system32\qedit.dll
2011-07-24 16:33:47 ----A---- C:\Windows\system32\mprddm.dll
2011-07-24 16:33:47 ----A---- C:\Windows\system32\mblctr.exe
2011-07-24 16:33:47 ----A---- C:\Windows\system32\fontext.dll
2011-07-24 16:33:47 ----A---- C:\Windows\system32\drivers\hidclass.sys
2011-07-24 16:33:47 ----A---- C:\Windows\system32\Display.dll
2011-07-24 16:33:47 ----A---- C:\Windows\system32\credssp.dll
2011-07-24 16:33:47 ----A---- C:\Windows\system32\batmeter.dll
2011-07-24 16:33:47 ----A---- C:\Windows\system32\AxInstSv.dll
2011-07-24 16:33:46 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2011-07-24 16:33:46 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2011-07-24 16:33:46 ----A---- C:\Windows\SYSWOW64\Vault.dll
2011-07-24 16:33:46 ----A---- C:\Windows\SYSWOW64\untfs.dll
2011-07-24 16:33:46 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll
2011-07-24 16:33:46 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2011-07-24 16:33:46 ----A---- C:\Windows\SYSWOW64\rastls.dll
2011-07-24 16:33:46 ----A---- C:\Windows\SYSWOW64\nci.dll
2011-07-24 16:33:46 ----A---- C:\Windows\system32\wmpsrcwp.dll
2011-07-24 16:33:46 ----A---- C:\Windows\system32\usercpl.dll
2011-07-24 16:33:46 ----A---- C:\Windows\system32\rtutils.dll
2011-07-24 16:33:46 ----A---- C:\Windows\system32\provsvc.dll
2011-07-24 16:33:46 ----A---- C:\Windows\system32\DiagCpl.dll
2011-07-24 16:33:46 ----A---- C:\Windows\system32\bootres.dll
2011-07-24 16:33:45 ----A---- C:\Windows\SYSWOW64\taskmgr.exe
2011-07-24 16:33:45 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2011-07-24 16:33:45 ----A---- C:\Windows\SYSWOW64\DxpTaskSync.dll
2011-07-24 16:33:45 ----A---- C:\Windows\SYSWOW64\Display.dll
2011-07-24 16:33:45 ----A---- C:\Windows\system32\wpccpl.dll
2011-07-24 16:33:45 ----A---- C:\Windows\system32\sppsvc.exe
2011-07-24 16:33:45 ----A---- C:\Windows\system32\SndVolSSO.dll
2011-07-24 16:33:45 ----A---- C:\Windows\system32\rasppp.dll
2011-07-24 16:33:45 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2011-07-24 16:33:45 ----A---- C:\Windows\system32\dxdiagn.dll
2011-07-24 16:33:45 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2011-07-24 16:33:45 ----A---- C:\Windows\system32\dot3cfg.dll
2011-07-24 16:33:44 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2011-07-24 16:33:44 ----A---- C:\Windows\SYSWOW64\userinit.exe
2011-07-24 16:33:44 ----A---- C:\Windows\SYSWOW64\termmgr.dll
2011-07-24 16:33:44 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2011-07-24 16:33:44 ----A---- C:\Windows\SYSWOW64\eudcedit.exe
2011-07-24 16:33:44 ----A---- C:\Windows\system32\taskmgr.exe
2011-07-24 16:33:44 ----A---- C:\Windows\system32\shdocvw.dll
2011-07-24 16:33:44 ----A---- C:\Windows\system32\proquota.exe
2011-07-24 16:33:44 ----A---- C:\Windows\system32\prnfldr.dll
2011-07-24 16:33:44 ----A---- C:\Windows\system32\pdh.dll
2011-07-24 16:33:44 ----A---- C:\Windows\system32\hbaapi.dll
2011-07-24 16:33:44 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2011-07-24 16:33:44 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2011-07-24 16:33:43 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2011-07-24 16:33:43 ----A---- C:\Windows\system32\drivers\ataport.sys
2011-07-24 16:33:42 ----A---- C:\Windows\SYSWOW64\wiadefui.dll
2011-07-24 16:33:42 ----A---- C:\Windows\SYSWOW64\sppcomapi.dll
2011-07-24 16:33:42 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2011-07-24 16:33:42 ----A---- C:\Windows\SYSWOW64\rasppp.dll
2011-07-24 16:33:42 ----A---- C:\Windows\SYSWOW64\logoncli.dll
2011-07-24 16:33:42 ----A---- C:\Windows\SYSWOW64\FirewallControlPanel.dll
2011-07-24 16:33:42 ----A---- C:\Windows\SYSWOW64\cabview.dll
2011-07-24 16:33:42 ----A---- C:\Windows\system32\userinit.exe
2011-07-24 16:33:42 ----A---- C:\Windows\system32\untfs.dll
2011-07-24 16:33:42 ----A---- C:\Windows\system32\rdpcorekmts.dll
2011-07-24 16:33:42 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2011-07-24 16:33:42 ----A---- C:\Windows\system32\accessibilitycpl.dll
2011-07-24 16:33:41 ----A---- C:\Windows\SYSWOW64\themecpl.dll
2011-07-24 16:33:41 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll
2011-07-24 16:33:41 ----A---- C:\Windows\SYSWOW64\PhotoScreensaver.scr
2011-07-24 16:33:41 ----A---- C:\Windows\SYSWOW64\hgcpl.dll
2011-07-24 16:33:41 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2011-07-24 16:33:41 ----A---- C:\Windows\SYSWOW64\dnscmmc.dll
2011-07-24 16:33:41 ----A---- C:\Windows\system32\zipfldr.dll
2011-07-24 16:33:41 ----A---- C:\Windows\system32\slui.exe
2011-07-24 16:33:41 ----A---- C:\Windows\system32\msieftp.dll
2011-07-24 16:33:41 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2011-07-24 16:33:38 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2011-07-24 16:33:37 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2011-07-24 16:33:37 ----A---- C:\Windows\SYSWOW64\scecli.dll
2011-07-24 16:33:37 ----A---- C:\Windows\SYSWOW64\mscories.dll
2011-07-24 16:33:37 ----A---- C:\Windows\SYSWOW64\mscms.dll
2011-07-24 16:33:37 ----A---- C:\Windows\SYSWOW64\fontext.dll
2011-07-24 16:33:37 ----A---- C:\Windows\system32\sud.dll
2011-07-24 16:33:37 ----A---- C:\Windows\system32\DeviceCenter.dll
2011-07-24 16:33:36 ----A---- C:\Windows\SYSWOW64\wlanui.dll
2011-07-24 16:33:36 ----A---- C:\Windows\SYSWOW64\usercpl.dll
2011-07-24 16:33:36 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll
2011-07-24 16:33:36 ----A---- C:\Windows\SYSWOW64\PerfCenterCPL.dll
2011-07-24 16:33:36 ----A---- C:\Windows\SYSWOW64\mprddm.dll
2011-07-24 16:33:36 ----A---- C:\Windows\SYSWOW64\localsec.dll
2011-07-24 16:33:36 ----A---- C:\Windows\SYSWOW64\iasacct.dll
2011-07-24 16:33:36 ----A---- C:\Windows\system32\twext.dll
2011-07-24 16:33:36 ----A---- C:\Windows\system32\taskbarcpl.dll
2011-07-24 16:33:36 ----A---- C:\Windows\system32\srcore.dll
2011-07-24 16:33:36 ----A---- C:\Windows\system32\qdvd.dll
2011-07-24 16:33:36 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2011-07-24 16:33:36 ----A---- C:\Windows\system32\networkmap.dll
2011-07-24 16:33:36 ----A---- C:\Windows\system32\dot3svc.dll
2011-07-24 16:33:36 ----A---- C:\Windows\system32\cryptui.dll
2011-07-24 16:33:36 ----A---- C:\Windows\system32\ActionCenter.dll
2011-07-24 16:33:35 ----A---- C:\Windows\SYSWOW64\w32tm.exe
2011-07-24 16:33:35 ----A---- C:\Windows\SYSWOW64\VAN.dll
2011-07-24 16:33:35 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2011-07-24 16:33:35 ----A---- C:\Windows\SYSWOW64\qedit.dll
2011-07-24 16:33:35 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2011-07-24 16:33:35 ----A---- C:\Windows\SYSWOW64\prntvpt.dll
2011-07-24 16:33:35 ----A---- C:\Windows\SYSWOW64\netcenter.dll

2011-07-24 16:33:35 ----A---- C:\Windows\SYSWOW64\batmeter.dll
2011-07-24 16:33:35 ----A---- C:\Windows\system32\uxlib.dll
2011-07-24 16:33:35 ----A---- C:\Windows\system32\recovery.dll
2011-07-24 16:33:35 ----A---- C:\Windows\system32\rdpwsx.dll
2011-07-24 16:33:35 ----A---- C:\Windows\system32\OobeFldr.dll
2011-07-24 16:33:35 ----A---- C:\Windows\system32\bcdedit.exe
2011-07-24 16:33:35 ----A---- C:\Windows\system32\azroleui.dll
2011-07-24 16:33:34 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2011-07-24 16:33:34 ----A---- C:\Windows\SYSWOW64\spwizeng.dll
2011-07-24 16:33:34 ----A---- C:\Windows\SYSWOW64\fdeploy.dll
2011-07-24 16:33:34 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2011-07-24 16:33:34 ----A---- C:\Windows\SYSWOW64\accessibilitycpl.dll
2011-07-24 16:33:34 ----A---- C:\Windows\system32\tzutil.exe
2011-07-24 16:33:34 ----A---- C:\Windows\system32\syncui.dll
2011-07-24 16:33:34 ----A---- C:\Windows\system32\sisbkup.dll
2011-07-24 16:33:34 ----A---- C:\Windows\system32\sdcpl.dll
2011-07-24 16:33:34 ----A---- C:\Windows\system32\recdisc.exe
2011-07-24 16:33:34 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2011-07-24 16:33:34 ----A---- C:\Windows\system32\isoburn.exe
2011-07-24 16:33:34 ----A---- C:\Windows\system32\httpapi.dll
2011-07-24 16:33:34 ----A---- C:\Windows\system32\efscore.dll
2011-07-24 16:33:34 ----A---- C:\Windows\system32\dsuiext.dll
2011-07-24 16:33:34 ----A---- C:\Windows\system32\cca.dll
2011-07-24 16:33:34 ----A---- C:\Windows\system32\asycfilt.dll
2011-07-24 16:33:33 ----A---- C:\Windows\SYSWOW64\networkmap.dll
2011-07-24 16:33:33 ----A---- C:\Windows\SYSWOW64\netjoin.dll
2011-07-24 16:33:33 ----A---- C:\Windows\SYSWOW64\MSAC3ENC.DLL
2011-07-24 16:33:33 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2011-07-24 16:33:33 ----A---- C:\Windows\SYSWOW64\adsldp.dll
2011-07-24 16:33:33 ----A---- C:\Windows\system32\systemcpl.dll
2011-07-24 16:33:33 ----A---- C:\Windows\system32\sysclass.dll
2011-07-24 16:33:33 ----A---- C:\Windows\system32\sspisrv.dll
2011-07-24 16:33:33 ----A---- C:\Windows\system32\shwebsvc.dll
2011-07-24 16:33:33 ----A---- C:\Windows\system32\netplwiz.dll
2011-07-24 16:33:33 ----A---- C:\Windows\system32\ncryptui.dll
2011-07-24 16:33:33 ----A---- C:\Windows\system32\drivers\mpio.sys
2011-07-24 16:33:33 ----A---- C:\Windows\system32\certcli.dll
2011-07-24 16:33:33 ----A---- C:\Windows\system32\autoplay.dll
2011-07-24 16:33:33 ----A---- C:\Windows\system32\appinfo.dll
2011-07-24 16:33:32 ----A---- C:\Windows\SYSWOW64\wusa.exe
2011-07-24 16:33:32 ----A---- C:\Windows\SYSWOW64\prnfldr.dll
2011-07-24 16:33:32 ----A---- C:\Windows\SYSWOW64\OnLineIDCpl.dll
2011-07-24 16:33:32 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2011-07-24 16:33:32 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2011-07-24 16:33:32 ----A---- C:\Windows\system32\wlanmsm.dll
2011-07-24 16:33:32 ----A---- C:\Windows\system32\spwizeng.dll
2011-07-24 16:33:32 ----A---- C:\Windows\system32\sdrsvc.dll
2011-07-24 16:33:32 ----A---- C:\Windows\system32\msvidc32.dll
2011-07-24 16:33:32 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2011-07-24 16:33:32 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2011-07-24 16:33:31 ----A---- C:\Windows\SYSWOW64\sud.dll
2011-07-24 16:33:31 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2011-07-24 16:33:31 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2011-07-24 16:33:31 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2011-07-24 16:33:31 ----A---- C:\Windows\system32\vdsutil.dll
2011-07-24 16:33:31 ----A---- C:\Windows\system32\MFPlay.dll
2011-07-24 16:33:30 ----A---- C:\Windows\SYSWOW64\sisbkup.dll
2011-07-24 16:33:30 ----A---- C:\Windows\SYSWOW64\MediaMetadataHandler.dll
2011-07-24 16:33:30 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll
2011-07-24 16:33:30 ----A---- C:\Windows\SYSWOW64\iasrad.dll
2011-07-24 16:33:30 ----A---- C:\Windows\SYSWOW64\ftp.exe
2011-07-24 16:33:30 ----A---- C:\Windows\SYSWOW64\dot3cfg.dll
2011-07-24 16:33:30 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll
2011-07-24 16:33:30 ----A---- C:\Windows\SYSWOW64\credssp.dll
2011-07-24 16:33:30 ----A---- C:\Windows\system32\tsgqec.dll
2011-07-24 16:33:30 ----A---- C:\Windows\system32\termmgr.dll
2011-07-24 16:33:30 ----A---- C:\Windows\system32\sqlcese30.dll
2011-07-24 16:33:30 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2011-07-24 16:33:30 ----A---- C:\Windows\system32\sethc.exe
2011-07-24 16:33:30 ----A---- C:\Windows\system32\rstrui.exe
2011-07-24 16:33:30 ----A---- C:\Windows\system32\ReAgent.dll
2011-07-24 16:33:30 ----A---- C:\Windows\system32\odbccp32.dll
2011-07-24 16:33:30 ----A---- C:\Windows\system32\ntlanman.dll
2011-07-24 16:33:30 ----A---- C:\Windows\system32\msscp.dll
2011-07-24 16:33:29 ----A---- C:\Windows\SYSWOW64\syncui.dll
2011-07-24 16:33:29 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll
2011-07-24 16:33:29 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2011-07-24 16:33:29 ----A---- C:\Windows\SYSWOW64\ifsutil.dll
2011-07-24 16:33:29 ----A---- C:\Windows\SYSWOW64\efscore.dll
2011-07-24 16:33:29 ----A---- C:\Windows\SYSWOW64\autoplay.dll
2011-07-24 16:33:29 ----A---- C:\Windows\SYSWOW64\ActionCenterCPL.dll
2011-07-24 16:33:29 ----A---- C:\Windows\system32\wwanprotdim.dll
2011-07-24 16:33:29 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2011-07-24 16:33:29 ----A---- C:\Windows\system32\ssText3d.scr
2011-07-24 16:33:29 ----A---- C:\Windows\system32\slwga.dll
2011-07-24 16:33:29 ----A---- C:\Windows\system32\secur32.dll
2011-07-24 16:33:29 ----A---- C:\Windows\system32\rdpd3d.dll
2011-07-24 16:33:29 ----A---- C:\Windows\system32\odbctrac.dll
2011-07-24 16:33:29 ----A---- C:\Windows\system32\iyuv_32.dll
2011-07-24 16:33:29 ----A---- C:\Windows\system32\iTVData.dll
2011-07-24 16:33:29 ----A---- C:\Windows\system32\iprtrmgr.dll
2011-07-24 16:33:29 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2011-07-24 16:33:28 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2011-07-24 16:33:28 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2011-07-24 16:33:28 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2011-07-24 16:33:28 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll
2011-07-24 16:33:28 ----A---- C:\Windows\SYSWOW64\ntlanman.dll
2011-07-24 16:33:28 ----A---- C:\Windows\SYSWOW64\dskquoui.dll
2011-07-24 16:33:28 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll
2011-07-24 16:33:28 ----A---- C:\Windows\system32\wmdrmsdk.dll
2011-07-24 16:33:28 ----A---- C:\Windows\system32\wavemsp.dll
2011-07-24 16:33:28 ----A---- C:\Windows\system32\srvcli.dll
2011-07-24 16:33:28 ----A---- C:\Windows\system32\ntprint.dll
2011-07-24 16:33:28 ----A---- C:\Windows\system32\nslookup.exe
2011-07-24 16:33:28 ----A---- C:\Windows\system32\NAPHLPR.DLL
2011-07-24 16:33:28 ----A---- C:\Windows\system32\msiexec.exe
2011-07-24 16:33:28 ----A---- C:\Windows\system32\drmmgrtn.dll
2011-07-24 16:33:28 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2011-07-24 16:33:28 ----A---- C:\Windows\system32\acppage.dll
2011-07-24 16:33:27 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2011-07-24 16:33:27 ----A---- C:\Windows\SYSWOW64\sethc.exe
2011-07-24 16:33:27 ----A---- C:\Windows\SYSWOW64\riched20.dll
2011-07-24 16:33:27 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2011-07-24 16:33:27 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2011-07-24 16:33:27 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2011-07-24 16:33:27 ----A---- C:\Windows\system32\srrstr.dll
2011-07-24 16:33:27 ----A---- C:\Windows\system32\bcdboot.exe
2011-07-24 16:33:26 ----A---- C:\Windows\SYSWOW64\wmpsrcwp.dll
2011-07-24 16:33:26 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2011-07-24 16:33:26 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL
2011-07-24 16:33:26 ----A---- C:\Windows\SYSWOW64\migisol.dll
2011-07-24 16:33:26 ----A---- C:\Windows\SYSWOW64\httpapi.dll
2011-07-24 16:33:26 ----A---- C:\Windows\SYSWOW64\fms.dll
2011-07-24 16:33:26 ----A---- C:\Windows\SYSWOW64\dpx.dll
2011-07-24 16:33:26 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2011-07-24 16:33:26 ----A---- C:\Windows\SYSWOW64\activeds.dll
2011-07-24 16:33:26 ----A---- C:\Windows\system32\wkscli.dll
2011-07-24 16:33:26 ----A---- C:\Windows\system32\TSpkg.dll
2011-07-24 16:33:26 ----A---- C:\Windows\system32\sppnp.dll
2011-07-24 16:33:26 ----A---- C:\Windows\system32\remotepg.dll
2011-07-24 16:33:26 ----A---- C:\Windows\system32\networkexplorer.dll
2011-07-24 16:33:26 ----A---- C:\Windows\system32\certprop.dll
2011-07-24 16:33:26 ----A---- C:\Windows\system32\cabinet.dll
2011-07-24 16:33:25 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2011-07-24 16:33:25 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2011-07-24 16:33:25 ----A---- C:\Windows\SYSWOW64\wavemsp.dll
2011-07-24 16:33:25 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2011-07-24 16:33:25 ----A---- C:\Windows\SYSWOW64\provsvc.dll
2011-07-24 16:33:25 ----A---- C:\Windows\SYSWOW64\nshipsec.dll
2011-07-24 16:33:25 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2011-07-24 16:33:25 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2011-07-24 16:33:25 ----A---- C:\Windows\SYSWOW64\isoburn.exe
2011-07-24 16:33:25 ----A---- C:\Windows\SYSWOW64\dot3ui.dll
2011-07-24 16:33:25 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2011-07-24 16:33:25 ----A---- C:\Windows\system32\wsnmp32.dll
2011-07-24 16:33:25 ----A---- C:\Windows\system32\wmpdxm.dll
2011-07-24 16:33:25 ----A---- C:\Windows\system32\WinSCard.dll
2011-07-24 16:33:25 ----A---- C:\Windows\system32\ftp.exe
2011-07-24 16:33:25 ----A---- C:\Windows\system32\dfrgui.exe
2011-07-24 16:33:25 ----A---- C:\Windows\system32\cdosys.dll
2011-07-24 16:33:24 ----A---- C:\Windows\SYSWOW64\wvc.dll
2011-07-24 16:33:24 ----A---- C:\Windows\SYSWOW64\wtsapi32.dll
2011-07-24 16:33:24 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2011-07-24 16:33:24 ----A---- C:\Windows\SYSWOW64\tzutil.exe
2011-07-24 16:33:24 ----A---- C:\Windows\SYSWOW64\twext.dll
2011-07-24 16:33:24 ----A---- C:\Windows\SYSWOW64\PkgMgr.exe
2011-07-24 16:33:24 ----A---- C:\Windows\SYSWOW64\ocsetup.exe
2011-07-24 16:33:24 ----A---- C:\Windows\SYSWOW64\mstask.dll
2011-07-24 16:33:24 ----A---- C:\Windows\SYSWOW64\dsuiext.dll
2011-07-24 16:33:24 ----A---- C:\Windows\SYSWOW64\dfrgui.exe
2011-07-24 16:33:24 ----A---- C:\Windows\system32\wvc.dll
2011-07-24 16:33:24 ----A---- C:\Windows\system32\wuwebv.dll
2011-07-24 16:33:24 ----A---- C:\Windows\system32\wsqmcons.exe
2011-07-24 16:33:24 ----A---- C:\Windows\system32\wmdrmdev.dll
2011-07-24 16:33:24 ----A---- C:\Windows\system32\WerFaultSecure.exe
2011-07-24 16:33:24 ----A---- C:\Windows\system32\net1.exe
2011-07-24 16:33:24 ----A---- C:\Windows\system32\msyuv.dll
2011-07-24 16:33:24 ----A---- C:\Windows\system32\mfps.dll
2011-07-24 16:33:24 ----A---- C:\Windows\system32\blackbox.dll
2011-07-24 16:33:23 ----A---- C:\Windows\twain_32.dll
2011-07-24 16:33:23 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2011-07-24 16:33:23 ----A---- C:\Windows\SYSWOW64\setupugc.exe
2011-07-24 16:33:23 ----A---- C:\Windows\SYSWOW64\qcap.dll
2011-07-24 16:33:23 ----A---- C:\Windows\SYSWOW64\qasf.dll
2011-07-24 16:33:23 ----A---- C:\Windows\system32\WUDFPlatform.dll
2011-07-24 16:33:23 ----A---- C:\Windows\system32\unimdmat.dll
2011-07-24 16:33:23 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2011-07-24 16:33:23 ----A---- C:\Windows\system32\OpcServices.dll
2011-07-24 16:33:23 ----A---- C:\Windows\system32\msrle32.dll
2011-07-24 16:33:23 ----A---- C:\Windows\system32\mapistub.dll
2011-07-24 16:33:23 ----A---- C:\Windows\system32\mapi32.dll
2011-07-24 16:33:23 ----A---- C:\Windows\system32\iscsium.dll
2011-07-24 16:33:23 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2011-07-24 16:33:23 ----A---- C:\Windows\system32\Bubbles.scr
2011-07-24 16:33:22 ----A---- C:\Windows\SYSWOW64\uxlib.dll
2011-07-24 16:33:22 ----A---- C:\Windows\SYSWOW64\ssText3d.scr
2011-07-24 16:33:22 ----A---- C:\Windows\SYSWOW64\slwga.dll
2011-07-24 16:33:22 ----A---- C:\Windows\SYSWOW64\nslookup.exe
2011-07-24 16:33:22 ----A---- C:\Windows\SYSWOW64\msvfw32.dll
2011-07-24 16:33:22 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2011-07-24 16:33:22 ----A---- C:\Windows\SYSWOW64\audiodev.dll
2011-07-24 16:33:22 ----A---- C:\Windows\system32\tsbyuv.dll
2011-07-24 16:33:22 ----A---- C:\Windows\system32\seclogon.dll
2011-07-24 16:33:22 ----A---- C:\Windows\system32\Ribbons.scr
2011-07-24 16:33:22 ----A---- C:\Windows\system32\Mystify.scr
2011-07-24 16:33:22 ----A---- C:\Windows\system32\ifsutil.dll
2011-07-24 16:33:22 ----A---- C:\Windows\system32\drivers\umbus.sys
2011-07-24 16:33:22 ----A---- C:\Windows\system32\diskraid.exe
2011-07-24 16:33:21 ----A---- C:\Windows\SYSWOW64\WPDShServiceObj.dll
2011-07-24 16:33:21 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2011-07-24 16:33:21 ----A---- C:\Windows\SYSWOW64\wimserv.exe
2011-07-24 16:33:21 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2011-07-24 16:33:21 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2011-07-24 16:33:21 ----A---- C:\Windows\SYSWOW64\msscp.dll
2011-07-24 16:33:21 ----A---- C:\Windows\SYSWOW64\diskraid.exe
2011-07-24 16:33:21 ----A---- C:\Windows\SYSWOW64\DevicePairingFolder.dll
2011-07-24 16:33:21 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2011-07-24 16:33:21 ----A---- C:\Windows\system32\wmpshell.dll
2011-07-24 16:33:21 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2011-07-24 16:33:21 ----A---- C:\Windows\system32\umb.dll
2011-07-24 16:33:21 ----A---- C:\Windows\system32\tlscsp.dll
2011-07-24 16:33:21 ----A---- C:\Windows\system32\rdpencom.dll
2011-07-24 16:33:21 ----A---- C:\Windows\system32\perfmon.exe
2011-07-24 16:33:21 ----A---- C:\Windows\system32\netutils.dll
2011-07-24 16:33:21 ----A---- C:\Windows\system32\muifontsetup.dll
2011-07-24 16:33:21 ----A---- C:\Windows\system32\d3d10level9.dll
2011-07-24 16:33:21 ----A---- C:\Windows\system32\AzSqlExt.dll
2011-07-24 16:33:20 ----A---- C:\Windows\SYSWOW64\remotepg.dll
2011-07-24 16:33:20 ----A---- C:\Windows\SYSWOW64\rdpencom.dll
2011-07-24 16:33:20 ----A---- C:\Windows\SYSWOW64\raschap.dll
2011-07-24 16:33:20 ----A---- C:\Windows\SYSWOW64\perfmon.exe
2011-07-24 16:33:20 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2011-07-24 16:33:20 ----A---- C:\Windows\SYSWOW64\acppage.dll
2011-07-24 16:33:20 ----A---- C:\Windows\system32\runonce.exe
2011-07-24 16:33:20 ----A---- C:\Windows\system32\raschap.dll
2011-07-24 16:33:20 ----A---- C:\Windows\system32\qasf.dll
2011-07-24 16:33:20 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2011-07-24 16:33:20 ----A---- C:\Windows\system32\FXSAPI.dll
2011-07-24 16:33:20 ----A---- C:\Windows\system32\dbghelp.dll
2011-07-24 16:33:20 ----A---- C:\Windows\system32\browser.dll
2011-07-24 16:33:20 ----A---- C:\Windows\system32\ActionQueue.dll
2011-07-24 16:33:20 ----A---- C:\Windows\bfsvc.exe
2011-07-24 16:33:19 ----A---- C:\Windows\SYSWOW64\wmpdxm.dll
2011-07-24 16:33:19 ----A---- C:\Windows\SYSWOW64\vpnikeapi.dll
2011-07-24 16:33:19 ----A---- C:\Windows\SYSWOW64\UserAccountControlSettings.dll
2011-07-24 16:33:19 ----A---- C:\Windows\SYSWOW64\QUTIL.DLL
2011-07-24 16:33:19 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2011-07-24 16:33:19 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2011-07-24 16:33:19 ----A---- C:\Windows\SYSWOW64\ocsetapi.dll
2011-07-24 16:33:19 ----A---- C:\Windows\SYSWOW64\networkexplorer.dll
2011-07-24 16:33:19 ----A---- C:\Windows\SYSWOW64\NAPCRYPT.DLL
2011-07-24 16:33:19 ----A---- C:\Windows\SYSWOW64\input.dll
2011-07-24 16:33:19 ----A---- C:\Windows\system32\wpdwcn.dll
2011-07-24 16:33:19 ----A---- C:\Windows\system32\WMADMOD.DLL
2011-07-24 16:33:19 ----A---- C:\Windows\system32\wiavideo.dll
2011-07-24 16:33:19 ----A---- C:\Windows\system32\vdsbas.dll
2011-07-24 16:33:19 ----A---- C:\Windows\system32\syssetup.dll
2011-07-24 16:33:19 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2011-07-24 16:33:19 ----A---- C:\Windows\system32\MdSched.exe
2011-07-24 16:33:18 ----A---- C:\Windows\SYSWOW64\wpdwcn.dll
2011-07-24 16:33:18 ----A---- C:\Windows\SYSWOW64\vdsbas.dll
2011-07-24 16:33:18 ----A---- C:\Windows\SYSWOW64\runonce.exe
2011-07-24 16:33:18 ----A---- C:\Windows\SYSWOW64\onexui.dll
2011-07-24 16:33:18 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2011-07-24 16:33:18 ----A---- C:\Windows\SYSWOW64\logagent.exe
2011-07-24 16:33:18 ----A---- C:\Windows\SYSWOW64\iTVData.dll
2011-07-24 16:33:18 ----A---- C:\Windows\SYSWOW64\dxdiagn.dll
2011-07-24 16:33:18 ----A---- C:\Windows\system32\WMVSDECD.DLL
2011-07-24 16:33:18 ----A---- C:\Windows\system32\nltest.exe
2011-07-24 16:33:18 ----A---- C:\Windows\system32\mstask.dll
2011-07-24 16:33:18 ----A---- C:\Windows\system32\Mcx2Svc.dll
2011-07-24 16:33:18 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2011-07-24 16:33:18 ----A---- C:\Windows\system32\drivers\rmcast.sys
2011-07-24 16:33:18 ----A---- C:\Windows\system32\bitsadmin.exe
2011-07-24 16:33:17 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2011-07-24 16:33:17 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2011-07-24 16:33:17 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2011-07-24 16:33:17 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2011-07-24 16:33:17 ----A---- C:\Windows\system32\vss_ps.dll
2011-07-24 16:33:17 ----A---- C:\Windows\system32\tabcal.exe
2011-07-24 16:33:17 ----A---- C:\Windows\system32\shacct.dll
2011-07-24 16:33:17 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2011-07-24 16:33:17 ----A---- C:\Windows\system32\cscapi.dll
2011-07-24 16:33:16 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2011-07-24 16:33:16 ----A---- C:\Windows\SYSWOW64\wmpshell.dll
2011-07-24 16:33:16 ----A---- C:\Windows\SYSWOW64\wmdrmdev.dll
2011-07-24 16:33:16 ----A---- C:\Windows\SYSWOW64\unimdmat.dll
2011-07-24 16:33:16 ----A---- C:\Windows\SYSWOW64\shacct.dll
2011-07-24 16:33:16 ----A---- C:\Windows\SYSWOW64\lsmproxy.dll
2011-07-24 16:33:16 ----A---- C:\Windows\SYSWOW64\bitsadmin.exe
2011-07-24 16:33:16 ----A---- C:\Windows\system32\wudriver.dll
2011-07-24 16:33:16 ----A---- C:\Windows\system32\WPDSp.dll
2011-07-24 16:33:16 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2011-07-24 16:33:16 ----A---- C:\Windows\system32\wmdrmnet.dll
2011-07-24 16:33:16 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2011-07-24 16:33:16 ----A---- C:\Windows\system32\qcap.dll
2011-07-24 16:33:16 ----A---- C:\Windows\system32\msnetobj.dll
2011-07-24 16:33:16 ----A---- C:\Windows\system32\logman.exe
2011-07-24 16:33:15 ----A---- C:\Windows\SYSWOW64\WPDSp.dll
2011-07-24 16:33:15 ----A---- C:\Windows\SYSWOW64\srvcli.dll
2011-07-24 16:33:15 ----A---- C:\Windows\SYSWOW64\sqlcese30.dll
2011-07-24 16:33:15 ----A---- C:\Windows\SYSWOW64\rdpd3d.dll
2011-07-24 16:33:15 ----A---- C:\Windows\SYSWOW64\PortableDeviceSyncProvider.dll
2011-07-24 16:33:15 ----A---- C:\Windows\SYSWOW64\pdh.dll
2011-07-24 16:33:15 ----A---- C:\Windows\SYSWOW64\OpcServices.dll
2011-07-24 16:33:15 ----A---- C:\Windows\SYSWOW64\olethk32.dll
2011-07-24 16:33:15 ----A---- C:\Windows\SYSWOW64\ncryptui.dll
2011-07-24 16:33:15 ----A---- C:\Windows\SYSWOW64\mprapi.dll
2011-07-24 16:33:15 ----A---- C:\Windows\SYSWOW64\logman.exe
2011-07-24 16:33:15 ----A---- C:\Windows\SYSWOW64\iscsium.dll
2011-07-24 16:33:15 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2011-07-24 16:33:15 ----A---- C:\Windows\SYSWOW64\Bubbles.scr
2011-07-24 16:33:15 ----A---- C:\Windows\system32\spbcd.dll
2011-07-24 16:33:15 ----A---- C:\Windows\system32\secproc_ssp.dll
2011-07-24 16:33:15 ----A---- C:\Windows\system32\qdv.dll
2011-07-24 16:33:15 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2011-07-24 16:33:15 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2011-07-24 16:33:14 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2011-07-24 16:33:14 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2011-07-24 16:33:14 ----A---- C:\Windows\SYSWOW64\wiavideo.dll
2011-07-24 16:33:14 ----A---- C:\Windows\SYSWOW64\utildll.dll
2011-07-24 16:33:14 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2011-07-24 16:33:14 ----A---- C:\Windows\SYSWOW64\takeown.exe
2011-07-24 16:33:14 ----A---- C:\Windows\SYSWOW64\Ribbons.scr
2011-07-24 16:33:14 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL
2011-07-24 16:33:14 ----A---- C:\Windows\SYSWOW64\PortableDeviceStatus.dll
2011-07-24 16:33:14 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2011-07-24 16:33:14 ----A---- C:\Windows\SYSWOW64\Mystify.scr
2011-07-24 16:33:14 ----A---- C:\Windows\SYSWOW64\mapistub.dll
2011-07-24 16:33:14 ----A---- C:\Windows\SYSWOW64\mapi32.dll
2011-07-24 16:33:14 ----A---- C:\Windows\SYSWOW64\fphc.dll
2011-07-24 16:33:14 ----A---- C:\Windows\SYSWOW64\dot3msm.dll
2011-07-24 16:33:14 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2011-07-24 16:33:14 ----A---- C:\Windows\system32\WMPhoto.dll
2011-07-24 16:33:14 ----A---- C:\Windows\system32\takeown.exe
2011-07-24 16:33:14 ----A---- C:\Windows\system32\PnPUnattend.exe
2011-07-24 16:33:14 ----A---- C:\Windows\system32\fphc.dll
2011-07-24 16:33:14 ----A---- C:\Windows\system32\EhStorAPI.dll
2011-07-24 16:33:14 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2011-07-24 16:33:14 ----A---- C:\Windows\system32\dot3ui.dll
2011-07-24 16:33:14 ----A---- C:\Windows\system32\amstream.dll
2011-07-24 16:33:13 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2011-07-24 16:33:13 ----A---- C:\Windows\SYSWOW64\wmdrmnet.dll
2011-07-24 16:33:13 ----A---- C:\Windows\SYSWOW64\sqmapi.dll
2011-07-24 16:33:13 ----A---- C:\Windows\SYSWOW64\qdv.dll
2011-07-24 16:33:13 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2011-07-24 16:33:13 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2011-07-24 16:33:13 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2011-07-24 16:33:13 ----A---- C:\Windows\SYSWOW64\EhStorAPI.dll
2011-07-24 16:33:13 ----A---- C:\Windows\system32\WUDFHost.exe
2011-07-24 16:33:13 ----A---- C:\Windows\system32\vfwwdm32.dll
2011-07-24 16:33:13 ----A---- C:\Windows\system32\shimgvw.dll
2011-07-24 16:33:13 ----A---- C:\Windows\system32\QCLIPROV.DLL
2011-07-24 16:33:13 ----A---- C:\Windows\system32\nrpsrv.dll
2011-07-24 16:33:13 ----A---- C:\Windows\system32\netapi32.dll
2011-07-24 16:33:13 ----A---- C:\Windows\system32\iasrecst.dll
2011-07-24 16:33:13 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2011-07-24 16:33:13 ----A---- C:\Windows\system32\djoin.exe
2011-07-24 16:33:13 ----A---- C:\Windows\system32\cmstp.exe
2011-07-24 16:33:13 ----A---- C:\Windows\system32\CertPolEng.dll
2011-07-24 16:33:12 ----A---- C:\Windows\SYSWOW64\vfwwdm32.dll
2011-07-24 16:33:12 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2011-07-24 16:33:12 ----A---- C:\Windows\SYSWOW64\sppinst.dll
2011-07-24 16:33:12 ----A---- C:\Windows\SYSWOW64\QCLIPROV.DLL
2011-07-24 16:33:12 ----A---- C:\Windows\SYSWOW64\MuiUnattend.exe
2011-07-24 16:33:12 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2011-07-24 16:33:12 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2011-07-24 16:33:12 ----A---- C:\Windows\SYSWOW64\cmstp.exe
2011-07-24 16:33:12 ----A---- C:\Windows\SYSWOW64\cca.dll
2011-07-24 16:33:12 ----A---- C:\Windows\system32\WUDFx.dll
2011-07-24 16:33:12 ----A---- C:\Windows\system32\WavDest.dll
2011-07-24 16:33:12 ----A---- C:\Windows\system32\MultiDigiMon.exe
2011-07-24 16:33:12 ----A---- C:\Windows\system32\KMSVC.DLL
2011-07-24 16:33:12 ----A---- C:\Windows\system32\fdProxy.dll
2011-07-24 16:33:12 ----A---- C:\Windows\system32\drivers\pacer.sys
2011-07-24 16:33:11 ----A---- C:\Windows\SYSWOW64\wsnmp32.dll
2011-07-24 16:33:11 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2011-07-24 16:33:11 ----A---- C:\Windows\SYSWOW64\setupcln.dll
2011-07-24 16:33:11 ----A---- C:\Windows\SYSWOW64\pdhui.dll
2011-07-24 16:33:10 ----A---- C:\Windows\system32\wuauclt.exe
2011-07-24 16:33:10 ----A---- C:\Windows\system32\sscore.dll
2011-07-24 16:33:10 ----A---- C:\Windows\system32\relog.exe
2011-07-24 16:33:10 ----A---- C:\Windows\system32\mydocs.dll
2011-07-24 16:33:10 ----A---- C:\Windows\system32\iscsicli.exe
2011-07-24 16:33:09 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2011-07-24 16:33:09 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2011-07-24 16:33:09 ----A---- C:\Windows\SYSWOW64\iasrecst.dll
2011-07-24 16:33:09 ----A---- C:\Windows\SYSWOW64\AzSqlExt.dll
2011-07-24 16:33:09 ----A---- C:\Windows\system32\diskpart.exe
2011-07-24 16:33:08 ----A---- C:\Windows\SYSWOW64\relog.exe
2011-07-24 16:33:08 ----A---- C:\Windows\SYSWOW64\netiougc.exe
2011-07-24 16:33:08 ----A---- C:\Windows\system32\mobsync.exe
2011-07-24 16:33:08 ----A---- C:\Windows\system32\BWUnpairElevated.dll
2011-07-24 16:33:07 ----A---- C:\Windows\SYSWOW64\wkscli.dll
2011-07-24 16:33:07 ----A---- C:\Windows\SYSWOW64\spbcd.dll
2011-07-24 16:33:07 ----A---- C:\Windows\SYSWOW64\mydocs.dll
2011-07-24 16:33:07 ----A---- C:\Windows\SYSWOW64\iscsicli.exe
2011-07-24 16:33:07 ----A---- C:\Windows\SYSWOW64\amstream.dll
2011-07-24 16:33:07 ----A---- C:\Windows\system32\msdmo.dll
2011-07-24 16:33:07 ----A---- C:\Windows\system32\itircl.dll
2011-07-24 16:33:07 ----A---- C:\Windows\system32\dot3msm.dll
2011-07-24 16:33:06 ----A---- C:\Windows\SYSWOW64\syssetup.dll
2011-07-24 16:33:06 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2011-07-24 16:33:06 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2011-07-24 16:33:06 ----A---- C:\Windows\SYSWOW64\resutils.dll
2011-07-24 16:33:06 ----A---- C:\Windows\SYSWOW64\rastapi.dll
2011-07-24 16:33:06 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2011-07-24 16:33:06 ----A---- C:\Windows\SYSWOW64\itircl.dll
2011-07-24 16:33:06 ----A---- C:\Windows\SYSWOW64\diskpart.exe
2011-07-24 16:33:06 ----A---- C:\Windows\SYSWOW64\CertPolEng.dll
2011-07-24 16:33:06 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2011-07-24 16:33:06 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2011-07-24 16:33:06 ----A---- C:\Windows\system32\browcli.dll
2011-07-24 16:33:05 ----A---- C:\Windows\SYSWOW64\wmpps.dll
2011-07-24 16:33:05 ----A---- C:\Windows\system32\wuapp.exe
2011-07-24 16:33:05 ----A---- C:\Windows\system32\mciqtz32.dll
2011-07-24 16:33:05 ----A---- C:\Windows\system32\choice.exe
2011-07-24 16:33:05 ----A---- C:\Windows\system32\FXSTIFF.dll
2011-07-24 16:33:05 ----A---- C:\Windows\system32\eappgnui.dll
2011-07-24 16:33:04 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2011-07-24 16:33:04 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2011-07-24 16:33:04 ----A---- C:\Windows\SYSWOW64\tlscsp.dll
2011-07-24 16:33:04 ----A---- C:\Windows\SYSWOW64\secur32.dll
2011-07-24 16:33:04 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2011-07-24 16:33:04 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2011-07-24 16:33:04 ----A---- C:\Windows\SYSWOW64\ReAgentc.exe
2011-07-24 16:33:04 ----A---- C:\Windows\SYSWOW64\netutils.dll
2011-07-24 16:33:04 ----A---- C:\Windows\SYSWOW64\findstr.exe
2011-07-24 16:33:04 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2011-07-24 16:33:04 ----A---- C:\Windows\system32\sppc.dll
2011-07-24 16:33:04 ----A---- C:\Windows\system32\onexui.dll
2011-07-24 16:33:04 ----A---- C:\Windows\system32\luainstall.dll
2011-07-24 16:33:04 ----A---- C:\Windows\system32\imagehlp.dll
2011-07-24 16:33:04 ----A---- C:\Windows\system32\findstr.exe
2011-07-24 16:33:04 ----A---- C:\Windows\system32\drivers\tunnel.sys
2011-07-24 16:33:03 ----A---- C:\Windows\SYSWOW64\sppc.dll
2011-07-24 16:33:03 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2011-07-24 16:33:03 ----A---- C:\Windows\SYSWOW64\muifontsetup.dll
2011-07-24 16:33:03 ----A---- C:\Windows\SYSWOW64\mobsync.exe
2011-07-24 16:33:03 ----A---- C:\Windows\SYSWOW64\mciqtz32.dll
2011-07-24 16:33:03 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2011-07-24 16:33:03 ----A---- C:\Windows\SYSWOW64\cabinet.dll
2011-07-24 16:33:03 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2011-07-24 16:33:03 ----A---- C:\Windows\system32\schedcli.dll
2011-07-24 16:33:03 ----A---- C:\Windows\system32\repair-bde.exe
2011-07-24 16:33:03 ----A---- C:\Windows\system32\manage-bde.exe
2011-07-24 16:33:03 ----A---- C:\Windows\system32\inetmib1.dll
2011-07-24 16:33:03 ----A---- C:\Windows\system32\drivers\dfsc.sys
2011-07-24 16:33:02 ----A---- C:\Windows\SYSWOW64\unlodctr.exe
2011-07-24 16:33:02 ----A---- C:\Windows\SYSWOW64\spopk.dll
2011-07-24 16:33:02 ----A---- C:\Windows\SYSWOW64\shimgvw.dll
2011-07-24 16:33:02 ----A---- C:\Windows\SYSWOW64\msdmo.dll
2011-07-24 16:33:02 ----A---- C:\Windows\SYSWOW64\luainstall.dll
2011-07-24 16:33:02 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2011-07-24 16:33:02 ----A---- C:\Windows\system32\spopk.dll
2011-07-24 16:33:02 ----A---- C:\Windows\system32\RDPENCDD.dll
2011-07-24 16:33:02 ----A---- C:\Windows\system32\profprov.dll
2011-07-24 16:33:02 ----A---- C:\Windows\system32\odbcconf.dll
2011-07-24 16:33:02 ----A---- C:\Windows\system32\fixmapi.exe
2011-07-24 16:33:01 ----A---- C:\Windows\SYSWOW64\rdprefdrvapi.dll
2011-07-24 16:33:01 ----A---- C:\Windows\SYSWOW64\inetmib1.dll
2011-07-24 16:33:00 ----A---- C:\Windows\SYSWOW64\wups.dll
2011-07-24 16:33:00 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2011-07-24 16:33:00 ----A---- C:\Windows\SYSWOW64\odbcconf.dll
2011-07-24 16:33:00 ----A---- C:\Windows\SYSWOW64\browcli.dll
2011-07-24 16:33:00 ----A---- C:\Windows\system32\UIRibbonRes.dll
2011-07-24 16:33:00 ----A---- C:\Windows\system32\TRAPI.dll
2011-07-24 16:33:00 ----A---- C:\Windows\system32\FXSMON.dll
2011-07-24 16:33:00 ----A---- C:\Windows\system32\elsTrans.dll
2011-07-24 16:33:00 ----A---- C:\Windows\system32\drivers\tdi.sys
2011-07-24 16:32:59 ----A---- C:\Windows\SYSWOW64\perfts.dll
2011-07-24 16:32:59 ----A---- C:\Windows\SYSWOW64\imm32.dll
2011-07-24 16:32:59 ----A---- C:\Windows\system32\wshbth.dll
2011-07-24 16:32:59 ----A---- C:\Windows\system32\napdsnap.dll
2011-07-24 16:32:59 ----A---- C:\Windows\system32\LogonUI.exe
2011-07-24 16:32:59 ----A---- C:\Windows\system32\dsauth.dll
2011-07-24 16:32:58 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2011-07-24 16:32:58 ----A---- C:\Windows\SYSWOW64\TRAPI.dll
2011-07-24 16:32:58 ----A---- C:\Windows\SYSWOW64\schedcli.dll
2011-07-24 16:32:58 ----A---- C:\Windows\SYSWOW64\napdsnap.dll
2011-07-24 16:32:58 ----A---- C:\Windows\SYSWOW64\elsTrans.dll
2011-07-24 16:32:58 ----A---- C:\Windows\SYSWOW64\dsauth.dll
2011-07-24 16:32:58 ----A---- C:\Windows\SYSWOW64\bitsperf.dll
2011-07-24 16:32:58 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2011-07-24 16:32:58 ----A---- C:\Windows\system32\FXSUNATD.exe
2011-07-24 16:32:58 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2011-07-24 16:32:58 ----A---- C:\Windows\system32\cscdll.dll
2011-07-24 16:32:58 ----A---- C:\Windows\system32\bitsperf.dll
2011-07-24 16:32:57 ----A---- C:\Windows\SYSWOW64\sscore.dll
2011-07-24 16:32:57 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2011-07-24 16:32:57 ----A---- C:\Windows\system32\wups2.dll
2011-07-24 16:32:57 ----A---- C:\Windows\system32\wups.dll
2011-07-24 16:32:57 ----A---- C:\Windows\system32\wsdchngr.dll
2011-07-24 16:32:57 ----A---- C:\Windows\system32\shgina.dll
2011-07-24 16:32:57 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2011-07-24 16:32:56 ----A---- C:\Windows\SYSWOW64\wsdchngr.dll
2011-07-24 16:32:56 ----A---- C:\Windows\SYSWOW64\shgina.dll
2011-07-24 16:32:56 ----A---- C:\Windows\SYSWOW64\riched32.dll
2011-07-24 16:32:56 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2011-07-24 16:32:56 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2011-07-24 16:32:55 ----A---- C:\Windows\system32\wshirda.dll
2011-07-24 16:32:55 ----A---- C:\Windows\system32\drivers\hidusb.sys
2011-07-24 16:32:55 ----A---- C:\Windows\system32\drivers\Dot4Prt.sys
2011-07-24 16:32:55 ----A---- C:\Windows\system32\drivers\appid.sys
2011-07-24 16:32:54 ----A---- C:\Windows\SYSWOW64\wshirda.dll
2011-07-24 16:32:54 ----A---- C:\Windows\system32\spwmp.dll
2011-07-24 16:32:54 ----A---- C:\Windows\system32\riched32.dll
2011-07-24 16:32:54 ----A---- C:\Windows\system32\rdpcfgex.dll
2011-07-24 16:32:54 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2011-07-24 16:32:54 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2011-07-24 16:32:54 ----A---- C:\Windows\system32\C_ISCII.DLL
2011-07-24 16:32:54 ----A---- C:\Windows\system32\browseui.dll
2011-07-24 16:32:53 ----AH---- C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
2011-07-24 16:32:53 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2011-07-24 16:32:53 ----A---- C:\Windows\SYSWOW64\shunimpl.dll
2011-07-24 16:32:53 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2011-07-24 16:32:53 ----A---- C:\Windows\SYSWOW64\C_ISCII.DLL
2011-07-24 16:32:53 ----A---- C:\Windows\SYSWOW64\browseui.dll
2011-07-24 16:32:53 ----A---- C:\Windows\system32\shunimpl.dll
2011-07-24 16:32:53 ----A---- C:\Windows\system32\dxmasf.dll
2011-07-24 16:32:53 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2011-07-24 16:32:53 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2011-07-24 16:32:53 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2011-07-24 16:32:53 ----A---- C:\Windows\system32\drivers\scfilter.sys
2011-07-24 16:32:53 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2011-07-24 16:32:53 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2011-07-24 16:32:53 ----A---- C:\Windows\system32\drivers\cdrom.sys
2011-07-24 16:32:52 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2011-07-24 16:32:52 ----A---- C:\Windows\SYSWOW64\KBDTUQ.DLL
2011-07-24 16:32:52 ----A---- C:\Windows\SYSWOW64\KBDTUF.DLL
2011-07-24 16:32:52 ----A---- C:\Windows\SYSWOW64\KBDSG.DLL
2011-07-24 16:32:52 ----A---- C:\Windows\SYSWOW64\kbdlk41a.dll
2011-07-24 16:32:52 ----A---- C:\Windows\SYSWOW64\KBDGR1.DLL
2011-07-24 16:32:52 ----A---- C:\Windows\SYSWOW64\KBDGKL.DLL
2011-07-24 16:32:52 ----A---- C:\Windows\system32\wmploc.DLL
2011-07-24 16:32:52 ----A---- C:\Windows\system32\KBDTUQ.DLL
2011-07-24 16:32:52 ----A---- C:\Windows\system32\KBDTUF.DLL
2011-07-24 16:32:52 ----A---- C:\Windows\system32\KBDSG.DLL
2011-07-24 16:32:52 ----A---- C:\Windows\system32\KBDSF.DLL
2011-07-24 16:32:52 ----A---- C:\Windows\system32\KBDPO.DLL
2011-07-24 16:32:52 ----A---- C:\Windows\system32\KBDNEPR.DLL
2011-07-24 16:32:52 ----A---- C:\Windows\system32\kbdlk41a.dll
2011-07-24 16:32:52 ----A---- C:\Windows\system32\KBDINTAM.DLL
2011-07-24 16:32:52 ----A---- C:\Windows\system32\KBDINBEN.DLL
2011-07-24 16:32:52 ----A---- C:\Windows\system32\KBDGR1.DLL
2011-07-24 16:32:52 ----A---- C:\Windows\system32\KBDGKL.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\SYSWOW64\tzres.dll
2011-07-24 16:32:51 ----A---- C:\Windows\SYSWOW64\KBDUS.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\SYSWOW64\KBDUGHR1.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\SYSWOW64\KBDTURME.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\SYSWOW64\KBDTAJIK.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\SYSWOW64\KBDSF.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\SYSWOW64\KBDPO.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\SYSWOW64\KBDNEPR.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\SYSWOW64\KBDMON.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\SYSWOW64\KBDMAORI.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\SYSWOW64\KBDLT1.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\SYSWOW64\KBDINTEL.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\SYSWOW64\KBDINTAM.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\SYSWOW64\KBDINORI.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\SYSWOW64\KBDINMAR.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\SYSWOW64\KBDINKAN.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\SYSWOW64\KBDINHIN.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\SYSWOW64\KBDINBEN.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\SYSWOW64\KBDGEO.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\SYSWOW64\KBDCZ1.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\SYSWOW64\KBDBULG.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\SYSWOW64\KBDBLR.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\system32\tzres.dll
2011-07-24 16:32:51 ----A---- C:\Windows\system32\KBDUS.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\system32\KBDTURME.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\system32\KBDMON.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\system32\KBDMAORI.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\system32\KBDLT1.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\system32\KBDINTEL.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\system32\KBDINORI.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\system32\KBDINMAR.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\system32\KBDINKAN.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\system32\KBDINHIN.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\system32\KBDGEO.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\system32\KBDCZ1.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\system32\KBDBULG.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\system32\KBDBLR.DLL
2011-07-24 16:32:51 ----A---- C:\Windows\system32\KBDBASH.DLL
2011-07-24 16:32:50 ----A---- C:\Windows\SYSWOW64\spwizres.dll
2011-07-24 16:32:50 ----A---- C:\Windows\SYSWOW64\pifmgr.dll
2011-07-24 16:32:50 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2011-07-24 16:32:50 ----A---- C:\Windows\SYSWOW64\dpnaddr.dll
2011-07-24 16:32:50 ----A---- C:\Windows\system32\spwizres.dll
2011-07-24 16:32:50 ----A---- C:\Windows\system32\pifmgr.dll
2011-07-24 16:32:50 ----A---- C:\Windows\system32\nlsbres.dll
2011-07-24 16:32:50 ----A---- C:\Windows\system32\dpnaddr.dll
2011-07-24 16:32:50 ----A---- C:\Windows\system32\BlbEvents.dll
2011-07-24 16:32:15 ----A---- C:\Windows\SYSWOW64\wdscore.dll
2011-07-24 16:32:15 ----A---- C:\Windows\system32\dpx.dll
2011-07-24 16:32:01 ----A---- C:\Windows\SYSWOW64\wbemcomn.dll
2011-07-24 16:30:36 ----A---- C:\Windows\system32\wbemcomn.dll
2011-07-24 15:58:20 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2011-07-24 15:58:20 ----A---- C:\Windows\system32\drivers\usbport.sys
2011-07-24 15:58:20 ----A---- C:\Windows\system32\drivers\usbohci.sys
2011-07-24 15:58:20 ----A---- C:\Windows\system32\drivers\usbhub.sys
2011-07-24 15:58:20 ----A---- C:\Windows\system32\drivers\usbehci.sys
2011-07-24 15:58:20 ----A---- C:\Windows\system32\drivers\usbd.sys
2011-07-24 15:58:20 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2011-07-24 15:58:13 ----A---- C:\Windows\SYSWOW64\esent.dll
2011-07-24 15:58:13 ----A---- C:\Windows\system32\esent.dll
2011-07-24 15:58:13 ----A---- C:\Windows\system32\drivers\ntfs.sys
2011-07-24 15:58:12 ----A---- C:\Windows\system32\drivers\storport.sys
2011-07-24 15:58:12 ----A---- C:\Windows\system32\drivers\nvstor.sys
2011-07-24 15:58:12 ----A---- C:\Windows\system32\drivers\nvraid.sys
2011-07-24 15:58:12 ----A---- C:\Windows\system32\drivers\amdsata.sys
2011-07-24 15:58:11 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2011-07-24 15:58:11 ----A---- C:\Windows\system32\drivers\amdxata.sys
2011-07-24 15:58:10 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2011-07-24 15:58:10 ----A---- C:\Windows\system32\fsutil.exe
2011-07-24 15:58:10 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2011-07-24 15:56:00 ----D---- C:\Program Files (x86)\Microsoft.NET
2011-07-23 22:22:17 ----D---- C:\Program Files (x86)\MSXML 4.0
2011-07-23 22:21:47 ----D---- C:\Windows\SYSWOW64\Wat
2011-07-23 22:21:47 ----D---- C:\Windows\system32\Wat
2011-07-23 19:56:34 ----A---- C:\Windows\system32\MRT.exe
2011-07-23 19:49:49 ----A---- C:\Windows\system32\browserchoice.exe
2011-07-23 19:48:17 ----D---- C:\Users\user\AppData\Roaming\skypePM
2011-07-23 19:48:16 ----D---- C:\ProgramData\Skype Extras
2011-07-23 19:47:43 ----D---- C:\Users\user\AppData\Roaming\Skype
2011-07-23 19:47:14 ----RD---- C:\Program Files (x86)\Skype
2011-07-23 19:45:21 ----A---- C:\Windows\system32\tquery.dll
2011-07-23 19:45:21 ----A---- C:\Windows\system32\mssrch.dll
2011-07-23 19:45:19 ----A---- C:\Windows\SYSWOW64\tquery.dll
2011-07-23 19:45:19 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2011-07-23 19:45:19 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2011-07-23 19:45:19 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2011-07-23 19:45:19 ----A---- C:\Windows\SYSWOW64\mssph.dll
2011-07-23 19:45:19 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2011-07-23 19:45:19 ----A---- C:\Windows\system32\SearchIndexer.exe
2011-07-23 19:45:19 ----A---- C:\Windows\system32\mssvp.dll
2011-07-23 19:45:18 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2011-07-23 19:45:18 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2011-07-23 19:45:18 ----A---- C:\Windows\system32\SearchFilterHost.exe
2011-07-23 19:45:18 ----A---- C:\Windows\system32\mssphtb.dll
2011-07-23 19:45:18 ----A---- C:\Windows\system32\mssph.dll
2011-07-23 19:45:17 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2011-07-23 19:45:17 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2011-07-23 19:45:17 ----A---- C:\Windows\system32\msscntrs.dll
2011-07-23 19:44:51 ----A---- C:\Windows\system32\drivers\bowser.sys
2011-07-23 19:44:45 ----A---- C:\Windows\system32\winresume.exe
2011-07-23 19:44:45 ----A---- C:\Windows\system32\winload.exe
2011-07-23 19:44:44 ----A---- C:\Windows\system32\setbcdlocale.dll
2011-07-23 19:44:44 ----A---- C:\Windows\system32\kdusb.dll
2011-07-23 19:44:44 ----A---- C:\Windows\system32\kdcom.dll
2011-07-23 19:44:44 ----A---- C:\Windows\system32\kd1394.dll
2011-07-23 19:44:43 ----A---- C:\Windows\system32\EncDec.dll
2011-07-23 19:44:43 ----A---- C:\Windows\system32\CPFilters.dll
2011-07-23 19:44:42 ----A---- C:\Windows\SYSWOW64\sbe.dll
2011-07-23 19:44:42 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2011-07-23 19:44:42 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2011-07-23 19:44:42 ----A---- C:\Windows\system32\sbe.dll
2011-07-23 19:44:38 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2011-07-23 19:44:38 ----A---- C:\Windows\system32\poqexec.exe
2011-07-23 19:44:36 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2011-07-23 19:44:36 ----A---- C:\Windows\system32\prevhost.exe
2011-07-23 19:44:34 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2011-07-23 19:44:34 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-07-23 19:44:13 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2011-07-23 19:44:13 ----A---- C:\Windows\system32\XpsPrint.dll
2011-07-23 19:44:10 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-07-23 19:44:08 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-07-23 19:44:08 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-07-23 19:44:06 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-07-23 19:44:05 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2011-07-23 19:44:05 ----A---- C:\Windows\system32\drivers\afd.sys
2011-07-23 19:44:01 ----A---- C:\Windows\SYSWOW64\explorer.exe
2011-07-23 19:44:01 ----A---- C:\Windows\explorer.exe
2011-07-23 19:43:59 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2011-07-23 19:43:59 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2011-07-23 19:43:59 ----A---- C:\Windows\system32\mfc42u.dll
2011-07-23 19:43:59 ----A---- C:\Windows\system32\mfc42.dll
2011-07-23 19:43:58 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-07-23 19:43:58 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-07-23 19:43:58 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-07-23 19:43:48 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-07-23 19:43:48 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-07-23 19:43:48 ----A---- C:\Windows\system32\drivers\srv.sys
2011-07-23 19:43:45 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2011-07-23 19:43:45 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2011-07-23 19:43:45 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2011-07-23 19:43:45 ----A---- C:\Windows\system32\fontsub.dll
2011-07-23 19:43:45 ----A---- C:\Windows\system32\atmlib.dll
2011-07-23 19:43:45 ----A---- C:\Windows\system32\atmfd.dll
2011-07-23 19:43:39 ----A---- C:\Windows\system32\umpnpmgr.dll
2011-07-23 19:43:39 ----A---- C:\Windows\system32\cfgmgr32.dll
2011-07-23 19:43:38 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2011-07-23 19:43:38 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2011-07-23 19:43:38 ----A---- C:\Windows\SYSWOW64\devobj.dll
2011-07-23 19:43:38 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2011-07-23 19:43:34 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2011-07-23 19:43:33 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2011-07-23 19:43:33 ----A---- C:\Windows\system32\inetcomm.dll
2011-07-23 19:43:30 ----A---- C:\Windows\system32\win32k.sys
2011-07-23 19:43:25 ----A---- C:\Windows\system32\KernelBase.dll
2011-07-23 19:43:24 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-07-23 19:43:23 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-07-23 19:42:46 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2011-07-23 19:42:46 ----A---- C:\Windows\system32\kerberos.dll
2011-07-23 19:42:45 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2011-07-23 19:42:45 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2011-07-23 19:42:45 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-07-23 19:42:45 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-07-23 19:42:45 ----A---- C:\Windows\system32\dnsapi.dll
2011-07-23 19:42:44 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2011-07-23 19:42:44 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2011-07-23 19:42:44 ----A---- C:\Windows\system32\d3d10_1core.dll
2011-07-23 19:42:44 ----A---- C:\Windows\system32\d3d10_1.dll
2011-07-23 19:42:41 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2011-07-23 19:42:41 ----A---- C:\Windows\system32\oleaut32.dll
2011-07-23 19:42:39 ----A---- C:\Windows\system32\WFS.exe
2011-07-23 19:42:39 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-07-23 19:36:40 ----A---- C:\Windows\system32\kernel32.dll
2011-07-23 19:36:39 ----A---- C:\Windows\SYSWOW64\setup16.exe
2011-07-23 19:36:39 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2011-07-23 19:36:39 ----A---- C:\Windows\system32\wow64win.dll
2011-07-23 19:36:39 ----A---- C:\Windows\system32\wow64.dll
2011-07-23 19:36:39 ----A---- C:\Windows\system32\winsrv.dll
2011-07-23 19:36:39 ----A---- C:\Windows\system32\ntvdm64.dll
2011-07-23 19:36:39 ----A---- C:\Windows\system32\conhost.exe
2011-07-23 19:36:38 ----A---- C:\Windows\SYSWOW64\wow32.dll
2011-07-23 19:36:38 ----A---- C:\Windows\SYSWOW64\user.exe
2011-07-23 19:36:38 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2011-07-23 19:36:38 ----A---- C:\Windows\SYSWOW64\instnm.exe
2011-07-23 19:36:38 ----A---- C:\Windows\system32\wow64cpu.dll
2011-07-23 19:11:21 ----D---- C:\ProgramData\Skype
2011-07-23 19:02:47 ----D---- C:\Users\user\AppData\Roaming\Malwarebytes
2011-07-23 19:02:42 ----A---- C:\Windows\SYSWOW64\drivers\mbamswissarmy.sys
2011-07-23 19:02:41 ----D---- C:\ProgramData\Malwarebytes
2011-07-23 19:02:38 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-07-23 19:02:38 ----A---- C:\Windows\system32\drivers\mbam.sys
2011-07-23 18:52:41 ----D---- C:\Users\user\AppData\Roaming\Mozilla
2011-07-23 18:52:41 ----A---- C:\Windows\nsreg.dat
2011-07-23 18:52:36 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-07-23 18:43:20 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2011-07-23 18:43:13 ----D---- C:\Program Files\SUPERAntiSpyware
2011-07-23 18:41:12 ----A---- C:\Windows\system32\drivers\aswSP.sys
2011-07-23 18:41:12 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2011-07-23 18:41:10 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2011-07-23 18:41:10 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2011-07-23 18:41:10 ----A---- C:\Windows\system32\drivers\aswRdr.sys
2011-07-23 18:41:09 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2011-07-23 18:41:09 ----A---- C:\Windows\system32\aswBoot.exe
2011-07-23 18:41:02 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2011-07-23 18:41:02 ----A---- C:\Windows\avastSS.scr
2011-07-23 18:40:53 ----D---- C:\ProgramData\AVAST Software
2011-07-23 18:40:53 ----D---- C:\Program Files\AVAST Software
2011-07-23 18:32:35 ----D---- C:\ProgramData\WEBREG
2011-07-23 18:32:34 ----D---- C:\Users\user\AppData\Roaming\HP
2011-07-23 18:29:19 ----D---- C:\ProgramData\HP Product Assistant
2011-07-23 18:25:48 ----A---- C:\Windows\system32\hposwia_d02c.dll
2011-07-23 18:25:48 ----A---- C:\Windows\system32\hpost_d02c.dll
2011-07-23 18:25:48 ----A---- C:\Windows\system32\hposc_d02a.dll
2011-07-23 18:25:39 ----A---- C:\Windows\system32\hppldcoi.dll
2011-07-23 18:25:31 ----A---- C:\Windows\system32\hpzids40.dll
2011-07-23 18:25:23 ----A---- C:\Windows\system32\hpf3l70v.dll
2011-07-23 18:18:36 ----A---- C:\Windows\hpoins44.dat
2011-07-23 18:18:06 ----D---- C:\ProgramData\HP
2011-07-23 18:17:21 ----N---- C:\Windows\system32\MpSigStub.exe
2011-07-23 18:08:59 ----D---- C:\Users\user\AppData\Roaming\Macromedia
2011-07-23 10:32:54 ----D---- C:\Users\user\AppData\Roaming\Winamp
2011-07-23 10:32:54 ----D---- C:\Program Files (x86)\Winamp
2011-07-23 10:32:48 ----D---- C:\Users\user\AppData\Roaming\Adobe
2011-07-23 10:32:31 ----D---- C:\ProgramData\Adobe
2011-07-23 10:32:30 ----D---- C:\Program Files (x86)\Adobe
2011-07-23 10:32:02 ----D---- C:\Users\user\AppData\Roaming\GHISLER
2011-07-23 10:32:02 ----D---- C:\totalcmd
2011-07-23 10:32:02 ----A---- C:\Windows\UC.PIF
2011-07-23 10:32:02 ----A---- C:\Windows\RAR.PIF
2011-07-23 10:32:02 ----A---- C:\Windows\PKZIP.PIF
2011-07-23 10:32:02 ----A---- C:\Windows\PKUNZIP.PIF
2011-07-23 10:32:02 ----A---- C:\Windows\NOCLOSE.PIF
2011-07-23 10:32:02 ----A---- C:\Windows\LHA.PIF
2011-07-23 10:32:02 ----A---- C:\Windows\ARJ.PIF
2011-07-23 10:31:57 ----D---- C:\Program Files (x86)\IrfanView
2011-07-23 10:31:55 ----D---- C:\Program Files (x86)\BurnAware Free
2011-07-23 10:31:43 ----D---- C:\Program Files (x86)\7-Zip
2011-07-23 10:31:31 ----D---- C:\Users\user\AppData\Roaming\vlc
2011-07-23 10:31:17 ----D---- C:\Program Files (x86)\VideoLAN
2011-07-23 10:31:07 ----D---- C:\Users\user\AppData\Roaming\OpenOffice.org
2011-07-23 10:30:29 ----D---- C:\Program Files (x86)\OpenOffice.org 3
2011-07-23 09:14:09 ----A---- C:\Windows\system32\perfi005.dat
2011-07-23 09:14:09 ----A---- C:\Windows\system32\perfh005.dat
2011-07-23 09:14:09 ----A---- C:\Windows\system32\perfd005.dat
2011-07-23 09:14:09 ----A---- C:\Windows\system32\perfc005.dat
2011-07-23 09:13:28 ----D---- C:\Windows\SYSWOW64\cs
2011-07-23 09:13:15 ----D---- C:\Windows\SYSWOW64\drivers\cs-CZ
2011-07-23 09:13:14 ----D---- C:\Windows\cs-CZ
2011-07-23 09:13:11 ----D---- C:\Windows\system32\cs
2011-07-23 09:12:49 ----D---- C:\Windows\system32\drivers\cs-CZ
2011-07-23 09:04:11 ----D---- C:\Users\user\AppData\Roaming\Identities
2011-07-23 09:01:20 ----D---- C:\Users\user\AppData\Roaming\Hewlett-Packard
2011-07-23 09:00:28 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2011-07-23 09:00:28 ----A---- C:\Windows\system32\d3dx9_32.dll
2011-07-23 09:00:24 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2011-07-23 08:59:31 ----D---- C:\Program Files (x86)\Windows Live SkyDrive
2011-07-23 08:58:58 ----D---- C:\Windows\PCHEALTH
2011-07-23 08:58:05 ----SD---- C:\Users\user\AppData\Roaming\Microsoft
2011-07-23 08:58:05 ----D---- C:\Users\user\AppData\Roaming\Media Center Programs

======List of files/folders modified in the last 1 month======

2011-08-05 09:21:58 ----D---- C:\Windows\Temp
2011-08-05 09:21:09 ----D---- C:\Windows\System32
2011-08-05 09:21:09 ----D---- C:\Windows\inf
2011-08-05 09:21:09 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-08-05 09:19:24 ----D---- C:\Windows\Prefetch
2011-08-05 09:16:37 ----RD---- C:\Program Files
2011-08-05 09:12:00 ----D---- C:\Windows\system32\config
2011-08-04 22:14:18 ----D---- C:\Windows\Tasks
2011-08-04 22:14:12 ----D---- C:\Windows\system32\Tasks
2011-08-04 21:56:31 ----SHD---- C:\Windows\Installer
2011-08-04 21:56:25 ----AD---- C:\Windows\SysWOW64
2011-08-04 21:55:21 ----SHD---- C:\System Volume Information
2011-08-04 13:26:44 ----D---- C:\Windows\twain_32
2011-08-04 11:34:56 ----RSD---- C:\Windows\assembly
2011-08-04 11:34:56 ----D---- C:\Windows\Microsoft.NET
2011-08-04 10:41:30 ----D---- C:\Windows\winsxs
2011-08-04 10:40:31 ----D---- C:\Program Files\Internet Explorer
2011-08-04 10:40:31 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2011-08-04 10:39:37 ----D---- C:\Windows\SYSWOW64\fr-FR
2011-08-04 10:39:37 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-08-04 10:39:37 ----D---- C:\Windows\system32\fr-FR
2011-08-04 10:39:37 ----D---- C:\Program Files (x86)\Internet Explorer
2011-08-04 10:39:36 ----D---- C:\Windows\SYSWOW64\migration
2011-08-04 10:39:36 ----D---- C:\Windows\SYSWOW64\en-US
2011-08-04 10:39:36 ----D---- C:\Windows\system32\cs-CZ
2011-08-04 10:39:35 ----D---- C:\Windows\system32\migration
2011-08-04 10:39:35 ----D---- C:\Windows\system32\en-US
2011-08-04 10:39:35 ----D---- C:\Windows\PolicyDefinitions
2011-08-04 10:38:39 ----D---- C:\Windows\Logs
2011-08-04 10:38:37 ----D---- C:\Windows\servicing
2011-08-04 10:38:20 ----D---- C:\Windows\system32\catroot2
2011-08-04 10:38:20 ----D---- C:\Windows\system32\catroot
2011-08-04 09:53:00 ----HD---- C:\ProgramData
2011-08-04 09:44:52 ----A---- C:\Windows\win.ini
2011-08-04 09:44:04 ----SD---- C:\ProgramData\Microsoft
2011-08-04 09:44:03 ----D---- C:\Program Files (x86)\Microsoft Office
2011-08-04 09:42:11 ----RSD---- C:\Windows\Fonts
2011-08-04 09:42:00 ----D---- C:\Program Files (x86)\Common Files
2011-08-04 09:39:47 ----D---- C:\Windows\system32\wbem
2011-08-04 09:39:46 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-08-04 09:38:46 ----D---- C:\Windows\ShellNew
2011-08-04 09:38:46 ----D---- C:\Program Files (x86)
2011-08-02 16:40:35 ----D---- C:\Program Files (x86)\HP Games
2011-08-02 16:40:14 ----D---- C:\ProgramData\WildTangent
2011-08-01 18:43:05 ----D---- C:\Windows\SYSWOW64\wbem
2011-08-01 18:43:05 ----D---- C:\Windows\system32\wfp
2011-08-01 18:43:05 ----D---- C:\Windows\system32\DriverStore
2011-08-01 18:43:05 ----D---- C:\Windows\system32\drivers
2011-08-01 18:43:04 ----RSD---- C:\Windows\Media
2011-08-01 18:42:54 ----D---- C:\Windows\AppCompat
2011-08-01 18:42:28 ----D---- C:\Windows\registration
2011-08-01 08:59:59 ----AD---- C:\Windows
2011-07-30 19:52:23 ----D---- C:\Windows\system32\LogFiles
2011-07-30 10:02:47 ----D---- C:\ProgramData\PDFC
2011-07-27 13:02:48 ----D---- C:\Program Files (x86)\Windows Sidebar
2011-07-27 13:02:48 ----D---- C:\Program Files (x86)\Windows Portable Devices
2011-07-27 13:02:48 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2011-07-27 13:02:48 ----D---- C:\Program Files (x86)\Windows Media Player
2011-07-27 13:02:48 ----D---- C:\Program Files (x86)\Windows Mail
2011-07-27 13:02:47 ----D---- C:\Program Files\Windows Sidebar
2011-07-27 13:02:47 ----D---- C:\Program Files\Windows Portable Devices
2011-07-27 13:02:47 ----D---- C:\Program Files\Windows Photo Viewer
2011-07-27 13:02:47 ----D---- C:\Program Files\Windows Media Player
2011-07-27 13:02:47 ----D---- C:\Program Files\Windows Mail
2011-07-27 13:02:47 ----D---- C:\Program Files\Windows Journal
2011-07-27 13:02:47 ----D---- C:\Program Files\DVD Maker
2011-07-27 13:02:46 ----D---- C:\Windows\ehome
2011-07-27 13:02:46 ----D---- C:\Program Files\Windows Defender
2011-07-27 13:02:38 ----D---- C:\Windows\SYSWOW64\da-DK
2011-07-27 13:02:37 ----D---- C:\Windows\SYSWOW64\oobe
2011-07-27 13:02:37 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2011-07-27 13:02:36 ----D---- C:\Windows\SYSWOW64\sppui
2011-07-27 13:02:36 ----D---- C:\Windows\SYSWOW64\Setup
2011-07-27 13:02:36 ----D---- C:\Windows\SYSWOW64\manifeststore
2011-07-27 13:02:36 ----D---- C:\Windows\SYSWOW64\es-ES
2011-07-27 13:02:36 ----D---- C:\Windows\SYSWOW64\en
2011-07-27 13:02:35 ----D---- C:\Windows\SYSWOW64\migwiz
2011-07-27 13:02:35 ----D---- C:\Windows\SYSWOW64\Dism
2011-07-27 13:02:20 ----D---- C:\Windows\system32\da-DK
2011-07-27 13:02:18 ----D---- C:\Windows\system32\oobe
2011-07-27 13:02:18 ----D---- C:\Windows\system32\AdvancedInstallers
2011-07-27 13:02:17 ----D---- C:\Windows\system32\Setup
2011-07-27 13:02:16 ----D---- C:\Windows\system32\sppui
2011-07-27 13:02:16 ----D---- C:\Windows\system32\migwiz
2011-07-27 13:02:16 ----D---- C:\Windows\system32\manifeststore
2011-07-27 13:02:16 ----D---- C:\Windows\system32\es-ES
2011-07-27 13:02:16 ----D---- C:\Windows\system32\drivers\fr-FR
2011-07-27 13:02:16 ----D---- C:\Windows\system32\drivers\en-US
2011-07-27 13:02:15 ----D---- C:\Windows\system32\Dism
2011-07-27 13:02:05 ----D---- C:\Windows\AppPatch
2011-07-27 13:01:56 ----D---- C:\Windows\system32\Boot
2011-07-27 11:59:20 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2011-07-27 11:59:19 ----A---- C:\Windows\system32\msclmd.dll
2011-07-24 20:47:00 ----D---- C:\Windows\system32\wdi
2011-07-23 19:56:35 ----D---- C:\Windows\debug
2011-07-23 19:46:06 ----D---- C:\Windows\SoftwareDistribution
2011-07-23 19:02:42 ----D---- C:\Windows\SYSWOW64\drivers
2011-07-23 18:47:17 ----D---- C:\ProgramData\Norton
2011-07-23 18:30:06 ----D---- C:\Program Files (x86)\Hp
2011-07-23 18:23:11 ----D---- C:\Program Files\hp
2011-07-23 09:23:12 ----D---- C:\Windows\system32\restore
2011-07-23 09:23:10 ----AD---- C:\swsetup
2011-07-23 09:13:35 ----D---- C:\Program Files (x86)\Windows Defender
2011-07-23 09:13:33 ----D---- C:\Program Files\Common Files\System
2011-07-23 09:13:28 ----D---- C:\Windows\SYSWOW64\winrm
2011-07-23 09:13:28 ----D---- C:\Windows\SYSWOW64\slmgr
2011-07-23 09:13:15 ----D---- C:\Windows\SYSWOW64\XPSViewer
2011-07-23 09:13:15 ----D---- C:\Windows\SYSWOW64\WCN
2011-07-23 09:13:15 ----D---- C:\Windows\SYSWOW64\DriverStore
2011-07-23 09:13:14 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2011-07-23 09:13:14 ----D---- C:\Windows\SYSWOW64\MUI
2011-07-23 09:13:14 ----D---- C:\Windows\SYSWOW64\com
2011-07-23 09:13:14 ----D---- C:\Windows\IME
2011-07-23 09:13:12 ----D---- C:\Windows\system32\winrm
2011-07-23 09:13:11 ----D---- C:\Windows\system32\sysprep
2011-07-23 09:13:11 ----D---- C:\Windows\system32\slmgr
2011-07-23 09:12:49 ----D---- C:\Windows\system32\WCN
2011-07-23 09:12:49 ----D---- C:\Windows\system32\MUI
2011-07-23 09:12:49 ----D---- C:\Windows\system32\drivers\UMDF
2011-07-23 09:12:33 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2011-07-23 09:12:32 ----D---- C:\Windows\system32\com
2011-07-23 09:04:09 ----SHD---- C:\$RECYCLE.BIN
2011-07-23 09:04:04 ----HD---- C:\SYSTEM.SAV
2011-07-23 09:01:09 ----RD---- C:\Program Files (x86)\Online Services
2011-07-23 09:00:53 ----D---- C:\Program Files (x86)\Windows Live
2011-07-23 08:58:05 ----RD---- C:\Users
2011-07-23 08:58:03 ----D---- C:\Windows\Panther

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nvstor64;nvstor64; C:\Windows\system32\DRIVERS\nvstor64.sys [2009-08-05 241696]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2011-07-04 31064]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2011-07-04 600920]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2011-07-04 288088]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2011-07-04 45400]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2011-07-04 22360]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2011-07-04 64856]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-06-08 2394216]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2011-07-06 25912]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2010-01-28 86120]
R3 NVNET;NVIDIA nForce 10/100 Mbps Ethernet ; C:\Windows\system32\DRIVERS\nvmf6264.sys [2010-03-04 349416]
S1 SASKUTIL;SASKUTIL; \??\C:\Users\user\AppData\Local\Temp\SASKUTIL64.SYS []
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\drivers\Dot4Prt.sys [2010-11-20 19968]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2011-08-04 146816]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-07-04 42184]
R2 ezSharedSvc;Easybits Services for Windows; C:\Windows\syswow64\ezSharedSvcHost.exe [2010-04-23 514232]
R2 ForceWare Intelligent Application Manager (IAM);ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [2010-03-05 496232]
R2 HP Health Check Service;HP Health Check Service; C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe [2010-06-11 121344]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2010-05-19 73728]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-07-06 366640]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 nSvcIp;ForceWare IP service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [2010-03-05 209000]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-05-22 159336]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [2009-10-15 635416]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-05-14 249136]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 hpqwmiex;hpqwmiex; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2010-05-15 230968]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-07-23 1255736]

-----------------EOF-----------------

Zdravim a pekny den preji

Odinstalujte MBAM - bohuzel ma jiz aktivni rezidentni stit a ten je v kolizi s antivirem - mate tam SAS coz je tez dostatecna antiSpy ochrana

Jsou s PC nejake problemy

Občas zamrzne, byly potíže se startem, ale ty po nainstalování nové verze SAS zmizely. Nicméně to zamrzání mě ještě stále trápí.

Zamrza pri jake cinnosti - hry, prace s dokumenty nebo jen terab bezne prohlizeni webu

Stahnete OTL (viz muj podpis) a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
• Zaskrtnete okenko Pro vsechny uzivatele
• Zaskrtnete okenko Kontrola na havet "LOP"
• Zaskrtnete okenko Kontrola na havet "Purity"
• Stari souboru zmente z 30 dnu na 7 dnu
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  CREATERESTOREPOINT
  
  netsvcs
  drivers32
  savembr:0
  
  /md5start
  adp3132.sys
  AGP440.sys
  ahcix86.sys
  ahcix86s.sys
  atapi.sys
  autochk.exe
  cdrom.sys
  cngaudit.dll
  cryptsvc.dll
  eNetHook.dll
  eventlog.dll
  explorer.exe
  hal.dll
  Changer.sys
  iaStor.sys
  iastorv.sys
  IdeChnDr.sys
  isapnp.sys
  JakNDis.sys
  KR10N.sys
  logevent.dll
  lsass.exe
  mv61xx.sys
  ndis.sys
  netlogon.dll
  ntelogon.dll
  nvata.sys
  nvatabus.sys
  nvgts.sys
  nvraid.sys
  nvrd32.sys
  nvstor.sys
  nvstor32.sys
  scecli.dll
  sceclt.dll
  smss.exe
  svchost.exe
  symmpi.sys
  tcpip.sys
  userinit.exe
  vaxscsi.sys
  viamraid.sys
  viasraid.sys
  ViPrt.sys
  winlogon.exe
  ws2_32.dll
  /md5stop
  
  %systemroot%*.* /U /s
  %SYSTEMDRIVE%\*.exe
  %ALLUSERSPROFILE%\Application Data\*.
  %ALLUSERSPROFILE%\Application Data\*.exe /s
  %APPDATA%\*.
  %APPDATA%\*.exe /s
  %systemroot%\*. /mp /s
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\Tasks\*.job /lockedfiles
  %systemroot%\system32\drivers\*.sys /lockedfiles
  %systemroot%\System32\config\*.sav
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\system32\drivers\*.sys /3
  %systemroot%\system32\*.* /3
  %SYSTEMDRIVE%\*.exe
  
  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
  reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
  reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
  reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c
  
  type c:\boot.ini >> test.txt /c
  %SystemDrive%\PhysicalMBR.bin /md5

• Kliknete na tlacitko Prohledat
• Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte

OTL logfile created on: 8/5/2011 2:46:20 PM - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Users\user\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: Czech Republic | Language: CSY | Date Format: d.M.yyyy

4.00 Gb Total Physical Memory | 2.08 Gb Available Physical Memory | 52.02% Memory free
8.00 Gb Paging File | 6.04 Gb Available in Paging File | 75.57% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 917.71 Gb Total Space | 865.09 Gb Free Space | 94.27% Space Free | Partition Type: NTFS
Drive D: | 13.70 Gb Total Space | 1.75 Gb Free Space | 12.74% Space Free | Partition Type: NTFS

Computer Name: USER-HP | User Name: user | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2011/08/05 11:34:56 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Users\user\Desktop\OTL.exe
PRC - [2011/07/04 13:43:54 | 003,493,720 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2011/06/16 06:30:16 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2010/06/28 23:39:02 | 000,074,752 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\Winamp\winampa.exe
PRC - [2010/06/07 21:12:12 | 011,312,128 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
PRC - [2010/06/07 21:12:08 | 011,318,784 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
PRC - [2010/04/14 05:13:52 | 000,243,544 | ---- | M] (Microsoft Corp.) -- C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1438.0\mswinext.exe
PRC - [2010/01/18 19:21:08 | 000,568,888 | ---- | M] () -- C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
PRC - [2008/11/20 19:47:28 | 000,062,768 | ---- | M] (Hewlett-Packard) -- C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe

========== Modules (SafeList) ==========

MOD - [2011/08/05 11:34:56 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Users\user\Desktop\OTL.exe
MOD - [2011/07/04 13:43:51 | 000,199,792 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\snxhk.dll
MOD - [2010/11/20 13:55:09 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll

========== Win32 Services (SafeList) ==========

SRV:64bit: - [2011/08/04 10:02:15 | 000,146,816 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE -- (!SASCORE)
SRV:64bit: - [2011/07/04 13:43:51 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2010/03/05 02:25:36 | 000,209,000 | ---- | M] () [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe -- (nSvcIp)
SRV:64bit: - [2010/03/05 02:25:34 | 000,496,232 | ---- | M] () [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe -- (ForceWare Intelligent Application Manager (IAM))
SRV:64bit: - [2009/07/14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2010/10/12 19:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/10/15 00:53:20 | 000,635,416 | ---- | M] (PDF Complete Inc) [Auto | Running] -- C:\Program Files (x86)\PDF Complete\pdfsvc.exe -- (pdfcDispatcher)
SRV - [2009/06/10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
========== Driver Services (SafeList) ==========

DRV:64bit: - [2011/07/04 13:32:24 | 000,064,856 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2011/03/11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/11/20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/03/04 13:26:58 | 000,349,416 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvmf6264.sys -- (NVNET)
DRV:64bit: - [2010/01/28 18:25:04 | 000,086,120 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/06/10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:64bit: - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3758773303-2342552062-2968818899-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
IE - HKU\S-1-5-21-3758773303-2342552062-2968818899-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.seznam.cz
IE - HKU\S-1-5-21-3758773303-2342552062-2968818899-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..network.proxy.type: 0

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpWinExt,version=5.0: C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1438.0\npwinext.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\msntoolbar@msn.com: C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1438.0\Firefox [2010/10/21 07:42:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011/07/23 18:30:26 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2011/08/01 09:00:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2011/08/04 10:17:31 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/07/23 18:55:27 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011/07/23 18:30:26 | 000,000,000 | ---D | M]

[2011/07/23 18:52:46 | 000,000,000 | ---D | M] (No name found) -- C:\Users\user\AppData\Roaming\Mozilla\Extensions
[2011/07/25 14:08:42 | 000,000,000 | ---D | M] (No name found) -- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\eojz26w9.default\extensions
[2011/07/25 14:08:44 | 000,000,000 | ---D | M] (Seznam lištička) -- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\eojz26w9.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
[2011/07/23 19:47:32 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2011/07/23 19:47:32 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2011/07/23 18:55:26 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\distribution\extensions
[2011/07/23 18:55:26 | 000,000,000 | ---D | M] (Seznam lištička) -- C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
File not found (No name found) --
[2011/08/01 09:00:09 | 000,000,000 | ---D | M] (avast! WebRep) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
[2011/06/16 06:30:16 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2010/01/01 10:00:00 | 000,002,208 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\heureka-cz.xml
[2010/01/01 10:00:00 | 000,000,638 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\jyxo-cz.xml
[2010/01/01 10:00:00 | 000,001,367 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\seznam-cz.xml
[2010/01/01 10:00:00 | 000,000,654 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\slunecnice-cz.xml
[2010/01/01 10:00:00 | 000,001,179 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2009/06/10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKU\S-1-5-21-3758773303-2342552062-2968818899-1000\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4:64bit: - HKLM..\Run: [hpsysdrv] c:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe (Hewlett-Packard)
O4:64bit: - HKLM..\Run: [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe ()
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Bing Bar] C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1438.0\mswinext.exe (Microsoft Corp.)
O4 - HKLM..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe (EasyBits Software AS)
O4 - HKLM..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe (PDF Complete Inc)
O4 - HKLM..\Run: [WinampAgent] c:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-3758773303-2342552062-2968818899-1000..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] File not found
O4 - Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: EnableShellExecuteHooks = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O28 - HKLM ShellExecuteHooks: {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll (EasyBits Software Corp.)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

CREATERESTOREPOINT
Error creating restore point.

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2011/08/05 11:34:51 | 000,579,584 | ---- | C] (OldTimer Tools) -- C:\Users\user\Desktop\OTL.exe
[2011/08/05 09:16:37 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2011/08/05 09:16:37 | 000,000,000 | ---D | C] -- C:\rsit
[2011/08/04 20:22:25 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Roaming\HP Support Assistant
[2011/08/04 20:22:18 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Roaming\HpUpdate
[2011/08/04 17:37:12 | 000,404,640 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2011/08/04 10:36:43 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2011/08/04 10:36:42 | 003,695,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat
[2011/08/04 10:36:42 | 003,695,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat
[2011/08/04 10:36:42 | 002,303,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2011/08/04 10:36:42 | 001,797,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9.dll
[2011/08/04 10:36:42 | 001,492,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2011/08/04 10:36:42 | 001,427,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2011/08/04 10:36:42 | 000,818,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2011/08/04 10:36:42 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2011/08/04 10:36:42 | 000,697,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2011/08/04 10:36:42 | 000,603,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2011/08/04 10:36:42 | 000,580,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll
[2011/08/04 10:36:42 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2011/08/04 10:36:42 | 000,452,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2011/08/04 10:36:42 | 000,448,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2011/08/04 10:36:42 | 000,434,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2011/08/04 10:36:42 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2011/08/04 10:36:42 | 000,353,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxtmsft.dll
[2011/08/04 10:36:42 | 000,282,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2011/08/04 10:36:42 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieaksie.dll
[2011/08/04 10:36:42 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2011/08/04 10:36:42 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2011/08/04 10:36:42 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2011/08/04 10:36:42 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieaksie.dll
[2011/08/04 10:36:42 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxtrans.dll
[2011/08/04 10:36:42 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
[2011/08/04 10:36:42 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2011/08/04 10:36:42 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2011/08/04 10:36:42 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2011/08/04 10:36:42 | 000,165,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
[2011/08/04 10:36:42 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieakui.dll
[2011/08/04 10:36:42 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieakui.dll
[2011/08/04 10:36:42 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2011/08/04 10:36:42 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msls31.dll
[2011/08/04 10:36:42 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
[2011/08/04 10:36:42 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieakeng.dll
[2011/08/04 10:36:42 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
[2011/08/04 10:36:42 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
[2011/08/04 10:36:42 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
[2011/08/04 10:36:42 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2011/08/04 10:36:42 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2011/08/04 10:36:42 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll
[2011/08/04 10:36:42 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieakeng.dll
[2011/08/04 10:36:42 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2011/08/04 10:36:42 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2011/08/04 10:36:42 | 000,114,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\admparse.dll
[2011/08/04 10:36:42 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2011/08/04 10:36:42 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll
[2011/08/04 10:36:42 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
[2011/08/04 10:36:42 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\admparse.dll
[2011/08/04 10:36:42 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2011/08/04 10:36:42 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe
[2011/08/04 10:36:42 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2011/08/04 10:36:42 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2011/08/04 10:36:42 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2011/08/04 10:36:42 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2011/08/04 10:36:42 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll
[2011/08/04 10:36:42 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
[2011/08/04 10:36:42 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
[2011/08/04 10:36:42 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe
[2011/08/04 10:36:42 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2011/08/04 10:36:42 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ie4uinit.exe
[2011/08/04 10:36:42 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2011/08/04 10:36:42 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll
[2011/08/04 10:36:42 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
[2011/08/04 10:36:42 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
[2011/08/04 10:36:42 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
[2011/08/04 10:36:42 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
[2011/08/04 10:36:42 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll
[2011/08/04 10:36:42 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll
[2011/08/04 10:36:42 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2011/08/04 10:36:42 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imgutil.dll
[2011/08/04 10:36:42 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2011/08/04 10:36:42 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2011/08/04 10:36:42 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2011/08/04 10:36:42 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
[2011/08/04 10:36:42 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2011/08/04 10:36:42 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2011/08/04 09:53:03 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Roaming\SUPERAntiSpyware.com
[2011/08/04 09:53:00 | 000,000,000 | ---D | C] -- C:\ProgramData\!SASCORE
[2011/08/04 09:50:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2011/08/04 09:50:10 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2011/08/04 09:42:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2011/08/04 09:42:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
[2011/08/04 09:38:57 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2011/08/04 09:38:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Analysis Services
[2011/08/04 09:38:11 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Local\Microsoft Help
[2011/08/04 09:38:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2011/08/04 09:37:50 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2011/08/04 09:36:01 | 001,544,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2011/08/04 09:36:01 | 001,076,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DWrite.dll
[2011/08/04 09:36:01 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
[2011/08/04 09:36:01 | 000,739,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d2d1.dll
[2011/08/02 16:39:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WildTangent Games
[2011/08/01 11:43:32 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Local\GHISLER
[2011/07/31 18:52:06 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Roaming\dvdcss

========== Files - Modified Within 7 Days ==========

[2011/08/05 14:47:21 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2011/08/05 11:34:56 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Users\user\Desktop\OTL.exe
[2011/08/05 11:01:00 | 000,015,792 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/08/05 11:01:00 | 000,015,792 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/08/05 10:58:39 | 002,293,446 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011/08/05 10:58:39 | 000,694,232 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat
[2011/08/05 10:58:39 | 000,631,054 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2011/08/05 10:58:39 | 000,615,810 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011/08/05 10:58:39 | 000,129,942 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat
[2011/08/05 10:58:39 | 000,121,708 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2011/08/05 10:58:39 | 000,106,190 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011/08/05 10:53:19 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/08/05 10:53:16 | 3220,676,608 | -HS- | M] () -- C:\hiberfil.sys
[2011/08/05 09:08:42 | 000,000,328 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForuser.job
[2011/08/04 17:37:12 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2011/08/04 11:22:00 | 000,001,021 | ---- | M] () -- C:\Users\user\Desktop\Plane Arcade.lnk
[2011/08/04 10:41:39 | 000,001,383 | ---- | M] () -- C:\Users\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/08/04 10:36:43 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msls31.dll
[2011/08/04 10:36:43 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2011/08/04 10:36:42 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat
[2011/08/04 10:36:42 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat
[2011/08/04 10:36:42 | 002,303,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2011/08/04 10:36:42 | 001,797,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9.dll
[2011/08/04 10:36:42 | 001,492,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2011/08/04 10:36:42 | 001,427,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2011/08/04 10:36:42 | 000,818,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2011/08/04 10:36:42 | 000,716,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2011/08/04 10:36:42 | 000,697,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2011/08/04 10:36:42 | 000,603,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2011/08/04 10:36:42 | 000,580,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll
[2011/08/04 10:36:42 | 000,534,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2011/08/04 10:36:42 | 000,452,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2011/08/04 10:36:42 | 000,448,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2011/08/04 10:36:42 | 000,434,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2011/08/04 10:36:42 | 000,367,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2011/08/04 10:36:42 | 000,353,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\dxtmsft.dll
[2011/08/04 10:36:42 | 000,282,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2011/08/04 10:36:42 | 000,267,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieaksie.dll
[2011/08/04 10:36:42 | 000,248,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2011/08/04 10:36:42 | 000,236,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2011/08/04 10:36:42 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2011/08/04 10:36:42 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieaksie.dll
[2011/08/04 10:36:42 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\dxtrans.dll
[2011/08/04 10:36:42 | 000,222,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
[2011/08/04 10:36:42 | 000,197,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2011/08/04 10:36:42 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2011/08/04 10:36:42 | 000,173,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2011/08/04 10:36:42 | 000,165,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
[2011/08/04 10:36:42 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieakui.dll
[2011/08/04 10:36:42 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieakui.dll
[2011/08/04 10:36:42 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2011/08/04 10:36:42 | 000,160,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
[2011/08/04 10:36:42 | 000,160,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieakeng.dll
[2011/08/04 10:36:42 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
[2011/08/04 10:36:42 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
[2011/08/04 10:36:42 | 000,149,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
[2011/08/04 10:36:42 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2011/08/04 10:36:42 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2011/08/04 10:36:42 | 000,135,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll
[2011/08/04 10:36:42 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieakeng.dll
[2011/08/04 10:36:42 | 000,123,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2011/08/04 10:36:42 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2011/08/04 10:36:42 | 000,114,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\admparse.dll
[2011/08/04 10:36:42 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2011/08/04 10:36:42 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll
[2011/08/04 10:36:42 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
[2011/08/04 10:36:42 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\admparse.dll
[2011/08/04 10:36:42 | 000,096,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2011/08/04 10:36:42 | 000,091,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe
[2011/08/04 10:36:42 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2011/08/04 10:36:42 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2011/08/04 10:36:42 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2011/08/04 10:36:42 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2011/08/04 10:36:42 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll
[2011/08/04 10:36:42 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
[2011/08/04 10:36:42 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
[2011/08/04 10:36:42 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe
[2011/08/04 10:36:42 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2011/08/04 10:36:42 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ie4uinit.exe
[2011/08/04 10:36:42 | 000,072,822 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf
[2011/08/04 10:36:42 | 000,072,822 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf
[2011/08/04 10:36:42 | 000,072,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2011/08/04 10:36:42 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll
[2011/08/04 10:36:42 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
[2011/08/04 10:36:42 | 000,063,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
[2011/08/04 10:36:42 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
[2011/08/04 10:36:42 | 000,049,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
[2011/08/04 10:36:42 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll
[2011/08/04 10:36:42 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll
[2011/08/04 10:36:42 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2011/08/04 10:36:42 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\imgutil.dll
[2011/08/04 10:36:42 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2011/08/04 10:36:42 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2011/08/04 10:36:42 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2011/08/04 10:36:42 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
[2011/08/04 10:36:42 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2011/08/04 10:36:42 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2011/08/04 09:57:03 | 000,377,632 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011/08/04 09:52:59 | 000,001,810 | ---- | M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
[2011/08/04 09:50:11 | 000,000,824 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2011/08/03 18:26:17 | 000,007,597 | ---- | M] () -- C:\Users\user\AppData\Local\Resmon.ResmonCfg
[2011/08/02 17:48:49 | 000,002,528 | ---- | M] () -- C:\Users\Public\Desktop\WildTangent Games App - hp.lnk
[2011/08/02 16:40:16 | 000,002,560 | ---- | M] () -- C:\Users\user\Application Data\Microsoft\Internet Explorer\Quick Launch\WildTangent Games App - hp.lnk
[2011/08/01 09:04:28 | 000,001,843 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2011/08/01 09:04:25 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt

========== Files Created - No Company Name ==========

[2011/08/05 14:47:21 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2011/08/04 22:14:12 | 000,000,328 | ---- | C] () -- C:\Windows\tasks\HPCeeScheduleForuser.job
[2011/08/04 11:21:24 | 000,001,021 | ---- | C] () -- C:\Users\user\Desktop\Plane Arcade.lnk
[2011/08/04 10:36:42 | 000,072,822 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf
[2011/08/04 10:36:42 | 000,072,822 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf
[2011/08/04 09:50:11 | 000,000,824 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2011/08/03 18:26:17 | 000,007,597 | ---- | C] () -- C:\Users\user\AppData\Local\Resmon.ResmonCfg
[2011/08/02 16:40:16 | 000,002,560 | ---- | C] () -- C:\Users\user\Application Data\Microsoft\Internet Explorer\Quick Launch\WildTangent Games App - hp.lnk
[2011/08/02 16:40:16 | 000,002,528 | ---- | C] () -- C:\Users\Public\Desktop\WildTangent Games App - hp.lnk
[2011/07/25 14:08:02 | 000,000,040 | ---- | C] () -- C:\Users\user\AppData\Roaming\burnaware.ini
[2011/07/23 18:52:41 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2011/07/23 18:18:36 | 000,180,009 | ---- | C] () -- C:\Windows\hpoins44.dat
[2011/05/25 14:50:11 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
[2010/10/21 07:36:07 | 000,009,988 | ---- | C] () -- C:\Windows\SysWow64\ezdigsgn.dat
[2010/02/10 03:58:12 | 000,012,800 | ---- | C] () -- C:\Windows\LPRES.DLL
[2009/07/14 07:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009/07/14 04:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009/07/14 04:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009/07/14 02:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009/07/14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/11 11:30:02 | 000,000,586 | ---- | C] () -- C:\Windows\hpomdl44.dat
[2009/06/10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat

========== LOP Check ==========

[2011/07/23 10:32:02 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\GHISLER
[2011/07/23 10:31:07 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\OpenOffice.org
[2009/07/14 07:08:49 | 000,011,294 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========


< >

< >


< MD5 for: AGP440.SYS >
[2009/07/14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009/07/14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009/07/14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys
[2009/07/14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010/11/20 15:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010/11/20 15:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2009/07/14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2009/07/14 03:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_3de8def0db722996\autochk.exe
[2010/11/20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010/11/20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009/07/14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys
[2010/11/20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010/11/20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010/11/20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: CNGAUDIT.DLL >
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009/07/14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009/07/14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll

< MD5 for: CRYPTSVC.DLL >
[2010/11/20 15:25:59 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=15597883FBE9B056F276ADA3AD87D9AF -- C:\Windows\SysNative\cryptsvc.dll
[2010/11/20 15:25:59 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=15597883FBE9B056F276ADA3AD87D9AF -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_d4259ed3b16ed82a\cryptsvc.dll
[2009/07/14 03:40:24 | 000,175,104 | ---- | M] (Microsoft Corporation) MD5=8C57411B66282C01533CB776F98AD384 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_d1f48b0bb4805490\cryptsvc.dll
[2009/07/14 03:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_75d5ef87fc22e35a\cryptsvc.dll
[2010/11/20 14:18:24 | 000,136,192 | ---- | M] (Microsoft Corporation) MD5=A585BEBF7D054BD9618EDA0922D5484A -- C:\Windows\SysWOW64\cryptsvc.dll
[2010/11/20 14:18:24 | 000,136,192 | ---- | M] (Microsoft Corporation) MD5=A585BEBF7D054BD9618EDA0922D5484A -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_7807034ff91166f4\cryptsvc.dll

< MD5 for: EVENTLOG.DLL >
[2008/06/06 23:03:52 | 000,007,216 | ---- | M] () MD5=C2A279A458A06DE2C83D842AA042B5A8 -- C:\Program Files (x86)\CyberLink\PowerDirector\EventLog.dll

< MD5 for: EXPLORER.EXE >
[2010/10/21 07:46:03 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=00B0358734CAA32C39D181FE6916B178 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20542_none_b8b0208ee0ce1889\explorer.exe
[2011/02/26 08:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011/02/26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009/07/14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011/02/26 07:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2010/10/21 07:48:28 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011/02/26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011/02/25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011/02/25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011/02/26 08:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010/11/20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2010/10/21 07:46:03 | 002,868,736 | ---- | M] (Microsoft Corporation) MD5=6D4F9E4B640B413C6F73414327484C80 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16434_none_addea9f19345cd81\explorer.exe
[2010/10/21 07:43:56 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010/10/21 07:48:28 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2010/10/21 07:43:56 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010/11/20 15:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2010/10/21 07:48:28 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2010/10/21 07:43:56 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009/07/14 03:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2010/10/21 07:48:28 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2010/10/21 07:46:03 | 002,868,736 | ---- | M] (Microsoft Corporation) MD5=CA17F8620815267DC838E30B68CB5052 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20542_none_ae5b763cac6d568e\explorer.exe
[2011/02/26 08:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2010/10/21 07:43:56 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe
[2010/10/21 07:46:03 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=FC89FACA0473641CB625EDA9277D0885 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16434_none_b8335443c7a68f7c\explorer.exe

< MD5 for: HAL.DLL >
[2009/07/14 03:47:48 | 000,263,232 | ---- | M] (Microsoft Corporation) MD5=C0A6F6E05E14FBCAEDE7796C8590B7AC -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_071de44b735b3dfc\hal.dll
[2010/11/20 15:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010/11/20 15:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: IASTORV.SYS >
[2010/11/20 15:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010/11/20 15:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2010/10/21 07:57:32 | 000,410,504 | ---- | M] (Intel Corporation) MD5=513DC087CFED7D2BB82F005385D3531F -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16592_none_0af87721a183cb70\iaStorV.sys
[2011/03/11 08:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2011/03/11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\drivers\iaStorV.sys
[2011/03/11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys
[2011/03/11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys
[2011/03/11 08:23:00 | 000,410,496 | ---- | M] (Intel Corporation) MD5=B75E45C564E944A2657167D197AB29DA -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_0b141c81a16e25e6\iaStorV.sys
[2011/03/11 08:25:49 | 000,410,496 | ---- | M] (Intel Corporation) MD5=BFDC9D75698800CFE4D1698BF2750EA2 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_0bccc8c8ba6985c1\iaStorV.sys
[2009/07/14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys
[2010/10/21 07:57:32 | 000,410,496 | ---- | M] (Intel Corporation) MD5=E353CF970C5D4D6A092911E15FB78C07 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.20712_none_0bd89532ba6088d9\iaStorV.sys

< MD5 for: ISAPNP.SYS >
[2009/07/14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\SysNative\drivers\isapnp.sys
[2009/07/14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\isapnp.sys
[2009/07/14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\isapnp.sys
[2009/07/14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\isapnp.sys

< MD5 for: LSASS.EXE >
[2009/07/14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\SysNative\lsass.exe
[2009/07/14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16385_none_023f7c69767c3edd\lsass.exe
[2009/07/14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16484_none_023e7e05767d22ad\lsass.exe
[2009/07/14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.20594_none_02bd4ae48fa2de68\lsass.exe
[2009/07/14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_04709031736ac277\lsass.exe

< MD5 for: NDIS.SYS >
[2010/11/20 15:33:45 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\SysNative\drivers\ndis.sys
[2010/11/20 15:33:45 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_05ed313632ae9759\ndis.sys
[2009/07/14 03:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys

< MD5 for: NETLOGON.DLL >
[2009/07/14 03:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2010/11/20 15:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
[2010/11/20 15:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010/11/20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
[2010/11/20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
[2009/07/14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll

< MD5 for: NVRAID.SYS >
[2011/03/11 08:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\SysNative\drivers\nvraid.sys
[2011/03/11 08:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvraid.sys
[2011/03/11 08:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvraid.sys
[2009/07/14 03:48:27 | 000,149,056 | ---- | M] (NVIDIA Corporation) MD5=3E38712941E9BB4DDBEE00AFFE3FED3D -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvraid.sys
[2010/10/21 07:57:32 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=491E3CF1A4F0869E32197E34603B9BE1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20712_none_96a205e1f19732b1\nvraid.sys
[2010/11/20 15:33:48 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvraid.sys
[2010/11/20 15:33:48 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvraid.sys
[2011/03/11 08:19:21 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=666CA16F17914C1CD3616CF16DE0A6EA -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvraid.sys
[2011/03/11 08:23:06 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=A4D9C9A608A97F59307C2F2600EDC6A4 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvraid.sys
[2011/03/11 08:25:53 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=A5C82EB2F72AA004887F90B84A771F73 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvraid.sys
[2010/10/21 07:57:32 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=DEAB10231CBDB0881FC25428EBE11506 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16592_none_95c1e7d0d8ba7548\nvraid.sys

< MD5 for: NVSTOR.SYS >
[2010/10/21 07:57:32 | 000,166,280 | ---- | M] (NVIDIA Corporation) MD5=0AF7B8136794E23E87BE138992880E64 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16592_none_95c1e7d0d8ba7548\nvstor.sys
[2009/07/14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys
[2011/03/11 08:23:06 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=6C1D5F70E7A6A3FD1C90D840EDC048B9 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvstor.sys
[2011/03/11 08:25:53 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=AE274836BA56518E279087363A781214 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvstor.sys
[2010/10/21 07:57:32 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=CE76755AF933E728CEBA6C7A970838A4 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20712_none_96a205e1f19732b1\nvstor.sys
[2011/03/11 08:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2011/03/11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys
[2011/03/11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys
[2011/03/11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010/11/20 15:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010/11/20 15:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys

< MD5 for: SCECLI.DLL >
[2009/07/14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009/07/14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010/11/20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010/11/20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010/11/20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010/11/20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SMSS.EXE >
[2009/07/14 03:39:41 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=1911A3356FA3F77CCC825CCBAC038C2A -- C:\Windows\SysNative\smss.exe
[2009/07/14 03:39:41 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=1911A3356FA3F77CCC825CCBAC038C2A -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_082f99a432e2a661\smss.exe

< MD5 for: SVCHOST.EXE >
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009/07/14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009/07/14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2011/04/25 07:28:24 | 001,893,248 | ---- | M] (Microsoft Corporation) MD5=1F748D5439B65E0BEBD92F65048F030D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20951_none_0fb918de99201ffb\tcpip.sys
[2010/11/20 15:33:57 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2010/10/21 07:51:14 | 001,889,152 | ---- | M] (Microsoft Corporation) MD5=542C6767C68C9D6AAACA59436B0D15C2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20733_none_0fd0b57e990e2079\tcpip.sys
[2011/04/25 07:32:22 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=61DC720BB065D607D5823F13D2A64321 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16802_none_0f668bf97fd90dd3\tcpip.sys
[2010/10/21 07:51:14 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=90A2D722CF64D911879D6C4A4F802A4D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16610_none_0f59b7ad7fe2fcc8\tcpip.sys
[2009/07/14 03:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys
[2011/04/25 07:33:51 | 001,923,968 | ---- | M] (Microsoft Corporation) MD5=92CE29D95AC9DD2D0EE9061D551BA250 -- C:\Windows\SysNative\drivers\tcpip.sys
[2011/04/25 07:33:51 | 001,923,968 | ---- | M] (Microsoft Corporation) MD5=92CE29D95AC9DD2D0EE9061D551BA250 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17603_none_114de9497cfe9316\tcpip.sys
[2011/04/25 08:16:34 | 001,927,552 | ---- | M] (Microsoft Corporation) MD5=B77977AEB2FF159D01DB08A309989C5F -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21712_none_11cbb5de9625357a\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010/11/20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010/11/20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009/07/14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009/07/14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010/11/20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010/11/20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010/11/20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010/11/20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009/07/14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2010/10/21 07:48:28 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2010/10/21 07:48:28 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

< MD5 for: WS2_32.DLL >
[2010/11/20 15:27:29 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\SysNative\ws2_32.dll
[2010/11/20 15:27:29 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_50ddb631e4f59005\ws2_32.dll
[2009/07/14 03:41:58 | 000,296,448 | ---- | M] (Microsoft Corporation) MD5=7083F463788CB34FCC42F565D56F89E8 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_4eaca269e8070c6b\ws2_32.dll
[2010/11/20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\SysWOW64\ws2_32.dll
[2010/11/20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll
[2009/07/14 03:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_f28e06e62fa99b35\ws2_32.dll

< >

< %systemroot%*.* /U /s >
[2 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[7 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[1 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]
[1 C:\Windows\twain_32\*.tmp files -> C:\Windows\twain_32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2011/07/23 17:11:36 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Adobe
[2011/08/01 18:42:48 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\dvdcss
[2011/07/23 10:32:02 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\GHISLER
[2011/08/04 21:55:25 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Hewlett-Packard
[2011/07/23 18:32:35 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\HP
[2011/08/04 20:22:35 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\HP Support Assistant
[2011/08/04 20:22:35 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\HpUpdate
[2011/07/23 09:04:11 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Identities
[2011/07/23 18:08:59 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Macromedia
[2011/07/23 19:02:47 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Malwarebytes
[2009/07/14 09:44:38 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Media Center Programs
[2011/08/04 09:55:33 | 000,000,000 | --SD | M] -- C:\Users\user\AppData\Roaming\Microsoft
[2011/07/23 18:52:46 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Mozilla
[2011/07/23 10:31:07 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\OpenOffice.org

pokračování

[2011/08/03 21:28:19 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Skype
[2011/07/25 19:35:22 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\skypePM
[2011/08/04 09:53:03 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\SUPERAntiSpyware.com
[2011/08/01 18:42:54 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\vlc
[2011/08/05 09:33:32 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Winamp
< %APPDATA%\*.exe /s >
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
< %systemroot%\Tasks\*.job /lockedfiles >
< %systemroot%\system32\drivers\*.sys /lockedfiles >
< %systemroot%\System32\config\*.sav >
< %systemroot%\system32\*.dll /lockedfiles >
< %systemroot%\system32\drivers\*.sys /3 >
< %systemroot%\system32\*.* /3 >
[2011/08/04 10:36:42 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\admparse.dll
[2011/08/04 10:36:42 | 000,353,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\dxtmsft.dll
[2011/08/04 10:36:42 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\dxtrans.dll
[2011/08/04 10:36:42 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\icardie.dll
[2011/08/04 10:36:42 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\IEAdvpack.dll
[2011/08/04 10:36:42 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ieakeng.dll
[2011/08/04 10:36:42 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ieaksie.dll
[2011/08/04 10:36:42 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ieakui.dll
[2011/08/04 10:36:42 | 000,434,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ieapfltr.dll
[2011/08/04 10:36:42 | 000,353,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\iedkcs32.dll
[2011/08/04 10:36:42 | 009,703,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ieframe.dll
[2011/08/04 10:36:42 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\iepeers.dll
[2011/08/04 10:36:42 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\iernonce.dll
[2011/08/04 10:36:42 | 001,785,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\iertutil.dll
[2011/08/04 10:36:42 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\iesetup.dll
[2011/08/04 10:36:42 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\iesysprep.dll
[2011/08/04 10:36:42 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ieui.dll
[2011/08/04 10:36:42 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\imgutil.dll
[2011/08/04 10:36:42 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\inseng.dll
[2011/08/04 10:36:42 | 000,716,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\jscript.dll
[2011/08/04 10:36:42 | 001,797,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\jscript9.dll
[2011/08/04 10:36:42 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\jsproxy.dll
[2011/08/04 10:36:42 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\licmgr10.dll
[2011/08/04 10:36:42 | 000,580,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msfeeds.dll
[2011/08/04 10:36:42 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msfeedsbs.dll
[2011/08/04 10:36:42 | 012,269,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\mshtml.dll
[2011/08/04 10:36:42 | 000,072,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\mshtmled.dll
[2011/08/04 10:36:42 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\mshtmler.dll
[2011/08/04 10:36:43 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msls31.dll
[2011/08/04 10:36:42 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msrating.dll
[2011/08/04 10:36:42 | 000,123,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\occache.dll
[2011/08/04 10:36:42 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\pngfilt.dll
[2011/08/04 10:36:42 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\url.dll
[2011/08/04 10:36:43 | 001,102,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\urlmon.dll
[2011/08/04 10:36:42 | 000,420,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\vbscript.dll
[2011/08/04 10:36:42 | 000,203,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\webcheck.dll
[2011/08/04 10:36:42 | 001,126,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\wininet.dll
[2011/08/04 20:39:46 | 000,000,052 | ---- | M] () -- C:\Windows\system32\DOErrors.log
[2011/08/04 17:37:12 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\system32\FlashPlayerCPLApp.cpl
[2011/08/04 10:36:42 | 000,367,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\html.iec
[2011/08/04 10:36:42 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ie4uinit.exe
[2011/08/04 10:36:42 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ieapfltr.dat
[2011/08/04 10:36:42 | 000,072,822 | ---- | M] () -- C:\Windows\system32\ieuinit.inf
[2011/08/04 10:36:42 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ieUnatt.exe
[2011/08/04 10:36:42 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\iexpress.exe
[2011/08/04 10:36:42 | 001,427,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\inetcpl.cpl
[2011/08/04 10:36:42 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msfeedssync.exe
[2011/08/04 10:36:42 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\mshta.exe
[2011/08/04 10:36:42 | 002,382,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\mshtml.tlb
[2011/08/04 10:36:43 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\RegisterIEPKEYs.exe
[2011/08/04 10:36:42 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\SetIEInstalledDate.exe
[2011/08/04 10:36:42 | 000,063,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\tdc.ocx
[2011/08/04 10:36:42 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\wextract.exe

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"SUPERAntiSpyware" = C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe -- [2011/08/04 10:02:13 | 005,464,448 | ---- | M] (SUPERAntiSpyware.com)

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs

< >

< type c:\boot.ini >> test.txt /c >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2011/08/05 14:47:21 | 000,000,512 | ---- | M] () MD5=6D3D5DDD08BB960B3CC9872E6E17BC9C -- C:\PhysicalMBR.bin

< End of report >

a druhý report extras.txt

OTL Extras logfile created on: 8/5/2011 2:46:20 PM - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Users\user\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: Czech Republic | Language: CSY | Date Format: d.M.yyyy

4.00 Gb Total Physical Memory | 2.08 Gb Available Physical Memory | 52.02% Memory free
8.00 Gb Paging File | 6.04 Gb Available in Paging File | 75.57% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 917.71 Gb Total Space | 865.09 Gb Free Space | 94.27% Space Free | Partition Type: NTFS
Drive D: | 13.70 Gb Total Space | 1.75 Gb Free Space | 12.74% Space Free | Partition Type: NTFS

Computer Name: USER-HP | User Name: user | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-3758773303-2342552062-2968818899-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Browse with &IrfanView] -- "C:\Program Files (x86)\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] -- "c:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "c:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "c:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Browse with &IrfanView] -- "C:\Program Files (x86)\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] -- "c:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "c:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "c:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5B08AF35-B699-4A44-BB89-3E51E70611E8}" = HP MediaSmart SmartMenu
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{790E02A1-145A-3843-8C13-A4F41C9B48B7}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2010
"{90140000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}" = PlayReady PC Runtime amd64
"{CDBF8C2D-04B0-4F9B-9AE1-7422F7F0EC94}" = HP Deskjet F2400 All-In-One Driver Software 13.0 Rel .6
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{D79A02E9-6713-4335-9668-AAC7474C0C0E}" = HP Vision Hardware Diagnostics
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FF21C3E6-97FD-474F-9518-8DCBE94C2854}" = 64 Bit HP CIO Components Installer
"CCleaner" = CCleaner
"HP Imaging Device Functions" = HP Imaging Device Functions 13.0
"HP Print Projects" = HP Print Projects 1.0
"HP Smart Web Printing" = HP Smart Web Printing 4.5
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0
"HPExtendedCapabilities" = HP Customer Participation Program 13.0
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
"Shop for HP Supplies" = Shop for HP Supplies

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{06E6E30D-B498-442F-A943-07DE41D7F785}" = Microsoft Search Enhancement Pack
"{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements
"{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}" = hpWLPGInstaller
"{08234a0d-cf39-4dca-99f0-0c5cb496da81}" = Bing Bar
"{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan
"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch
"{178832DE-9DE0-4C87-9F82-9315A9B03985}" = Windows Live Writer
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite Deluxe
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{21A2F5EE-1DC5-488A-BE7E-E526F8C61488}" = DeviceDiscovery
"{222A544B-E6B7-496F-B4D7-6FE74FF0E616}" = Bing Bar Platform
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{254C37AA-6B72-4300-84F6-98A82419187E}" = ActiveCheck component for HP Active Support Library
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App" = Update Installer for WildTangent Games App
"{3023EBDA-BF1B-4831-B347-E5018555F26E}" = Movie Theme Pack for HP MediaSmart Video
"{319E272A-B5DB-4939-99D0-1F1F0C55699E}" = HP Support Assistant
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}" = HP Advisor
"{42E2EEB2-D48E-4A47-B181-32ECA031D93B}" = DJ_AIO_06_F2400_SW_Min
"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg
"{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}" = Recovery Manager
"{46BA053F-57B3-4153-BDB6-D37EEC8B12D7}" = LightScribe System Software
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{6412CECE-8172-4BE5-935B-6CECACD2CA87}" = Windows Live Mail
"{669D4A35-146B-4314-89F1-1AC3D7B88367}" = HPAsset component for HP Active Support Library
"{68A10D12-0D0F-4212-BDE6-D87FAD32A8FA}" = SmartWebPrinting
"{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply
"{6BAA71B6-8F43-4C72-931A-3354ABB0258A}" = F2400
"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox
"{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF}" = HP MediaSmart Photo
"{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp" = WildTangent Games App (HP Games)
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{72D90DB3-A16A-4545-B555-868471101833}" = HP Setup
"{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}" = NVIDIA ForceWare Network Access Manager
"{81128EE8-8EAD-4DB0-85C6-17C2CE50FF71}" = Windows Live Essentials
"{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}" = Windows Live Sync
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{912CED74-88D3-4C5B-ACB0-13231864975D}" = PressReader
"{91A34181-9FAD-43AB-A35F-E7A8945B7E1C}" = HP MediaSmart Music
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A85FD55B-891B-4314-97A5-EA96C0BD80B5}" = Windows Live Messenger
"{AC76BA86-7AD7-1029-7B44-A94000000001}" = Adobe Reader 9.4.5 - Czech
"{AE8705FB-E13C-40A9-8A2D-68D6733FBFC2}" = Status
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Toolbars
"{B8AC1A89-FFD1-4F97-8051-E505A160F562}" = HP Odometer
"{B95B1BA9-F887-4B3C-8D3A-CCD4C4675120}" = Microsoft Default Manager
"{B9A03B7B-E0FF-4FB3-BA83-762E58A1B0AA}" = HP Support Information
"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"{C75CDBA2-3C86-481e-BD10-BDDA758F9DFF}" = hpPrintProjects
"{CAE4213F-F797-439D-BD9E-79B71D115BE3}" = HPPhotoGadget
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{D12E3E7F-1B13-4933-A915-16C7DD37A095}" = HP MediaSmart Video
"{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow!
"{D6C75F0B-3BC1-4FC9-B8C5-3F7E8ED059CA}" = Windows Live Photo Gallery
"{D6F879CC-59D6-4D4B-AE9B-D761E48D25ED}" = Skype™ 5.3
"{DC0A5F99-FD66-433F-9D3A-05DCBA64BE42}" = TrayApp
"{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"{DE77FE3F-A33D-499A-87AD-5FC406617B40}" = HP Update
"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F6BD194C-4190-4D73-B1B1-C48C99921BFE}" = Windows Live Call
"{FAB43061-FEFB-46E8-A159-96710395DB5E}" = OpenOffice.org 3.2
"{FAF26102-09D7-4C58-AB01-0D59A2E517CA}" = Copy
"{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}" = DVD Menu Pack for HP MediaSmart Video
"7-Zip" = 7-Zip 9.15 beta
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"avast" = avast! Free Antivirus
"BurnAware Free_is1" = BurnAware Free 3.1
"EasyBits Magic Desktop" = Magic Desktop
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite Deluxe
"InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}" = Movie Theme Pack for HP MediaSmart Video
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"InstallShield_{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF}" = HP MediaSmart Photo
"InstallShield_{91A34181-9FAD-43AB-A35F-E7A8945B7E1C}" = HP MediaSmart Music
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"InstallShield_{D12E3E7F-1B13-4933-A915-16C7DD37A095}" = HP MediaSmart Video
"InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow!
"InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}" = DVD Menu Pack for HP MediaSmart Video
"IrfanView" = IrfanView (remove only)
"Mozilla Firefox 5.0 (x86 cs)" = Mozilla Firefox 5.0 (x86 cs)
"MusicStationNetstaller" = MusicStation
"Office14.SingleImage" = Microsoft Office Home and Business 2010
"PDF Complete" = PDF Complete Special Edition
"Plane Arcade" = Plane Arcade
"Totalcmd" = Total Commander (Remove or Repair)
"VLC media player" = VLC media player 1.1.5
"WildTangent hp Master Uninstall" = HP Games
"Winamp" = Winamp
"WinLiveSuite_Wave3" = Windows Live Essentials
"WT087361" = FATE
"WT087380" = John Deere Drive Green
"WT087394" = Penguins!
"WT087396" = Polar Bowler
"WT087420" = Agatha Christie - Death on the Nile
"WT087428" = Bejeweled 2 Deluxe
"WT087453" = Chuzzle Deluxe
"WT087480" = Insaniquarium Deluxe
"WT087485" = Jewel Quest II
"WT087490" = Jewel Quest Solitaire
"WT087501" = Plants vs. Zombies
"WT087510" = Slingo Deluxe
"WT087513" = Virtual Villagers - The Secret City
"WT087519" = Wedding Dash
"WT087533" = Zuma Deluxe
"WT087536" = Diner Dash 2 Restaurant Rescue

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 7/28/2011 12:13:52 PM | Computer Name = user-HP | Source = SideBySide | ID = 16842811
Description = Generování kontextu aktivace pro c:\program files (x86)\microsoft\search
enhancement pack\search helper\sepsearchhelperie.dll se nezdařilo. Chyba v souboru
manifestu nebo zásady c:\program files (x86)\microsoft\search enhancement pack\search
helper\sepsearchhelperie.dll na řádku 2. Neplatná syntaxe XML.

Error - 7/29/2011 7:02:55 AM | Computer Name = user-HP | Source = SideBySide | ID = 16842811
Description = Generování kontextu aktivace pro c:\program files (x86)\microsoft\search
enhancement pack\search helper\sepsearchhelperie.dll se nezdařilo. Chyba v souboru
manifestu nebo zásady c:\program files (x86)\microsoft\search enhancement pack\search
helper\sepsearchhelperie.dll na řádku 2. Neplatná syntaxe XML.

Error - 7/31/2011 10:19:48 AM | Computer Name = user-HP | Source = SideBySide | ID = 16842811
Description = Generování kontextu aktivace pro c:\program files (x86)\microsoft\search
enhancement pack\search helper\sepsearchhelperie.dll se nezdařilo. Chyba v souboru
manifestu nebo zásady c:\program files (x86)\microsoft\search enhancement pack\search
helper\sepsearchhelperie.dll na řádku 2. Neplatná syntaxe XML.

Error - 8/2/2011 6:56:31 PM | Computer Name = user-HP | Source = Application Error | ID = 1000
Description = Název chybující aplikace: SUPERANTISPYWARE.EXE, verze: 4.56.0.1000,
časové razítko: 0x4e3018ef Název chybujícího modulu: SUPERANTISPYWARE.EXE, verze:
4.56.0.1000, časové razítko: 0x4e3018ef Kód výjimky: 0xc000041d Posun chyby: 0x00000000000307d3
ID
chybujícího procesu: 0x89c Čas spuštění chybující aplikace: 0x01cc51670133a180 Cesta
k chybující aplikaci: C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE Cesta
k chybujícímu modulu: C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE ID
zprávy: a9449000-bd5a-11e0-b541-7071bc962a0e

Error - 8/2/2011 8:01:13 PM | Computer Name = user-HP | Source = Application Hang | ID = 1002
Description = Program Explorer.EXE verze 6.1.7601.17567 přestal spolupracovat se
systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací
o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID
procesu: 6f0 Čas spuštění: 01cc516fd7f34d80 Čas ukončení: 0 Cesta k aplikaci: C:\Windows\Explorer.EXE

ID
hlášení: abb25531-bd63-11e0-b87f-7071bc962a0e

Error - 8/2/2011 8:04:48 PM | Computer Name = user-HP | Source = Application Hang | ID = 1002
Description = Program explorer.exe verze 6.1.7601.17567 přestal spolupracovat se
systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací
o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID
procesu: ca8 Čas spuštění: 01cc51707535d130 Čas ukončení: 0 Cesta k aplikaci: C:\Windows\explorer.exe

ID
hlášení: 07eb47d1-bd64-11e0-b87f-7071bc962a0e

Error - 8/3/2011 7:09:55 AM | Computer Name = user-HP | Source = Application Hang | ID = 1002
Description = Program Explorer.EXE verze 6.1.7601.17567 přestal spolupracovat se
systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací
o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID
procesu: 56c Čas spuštění: 01cc51c8bcc0f0e0 Čas ukončení: 0 Cesta k aplikaci: C:\Windows\Explorer.EXE

ID
hlášení: 108e5501-bdc1-11e0-b591-7071bc962a0e

Error - 8/3/2011 11:23:31 AM | Computer Name = user-HP | Source = SideBySide | ID = 16842811
Description = Generování kontextu aktivace pro c:\program files (x86)\microsoft\search
enhancement pack\search helper\sepsearchhelperie.dll se nezdařilo. Chyba v souboru
manifestu nebo zásady c:\program files (x86)\microsoft\search enhancement pack\search
helper\sepsearchhelperie.dll na řádku 2. Neplatná syntaxe XML.

Error - 8/4/2011 3:43:16 AM | Computer Name = user-HP | Source = Office Software Protection Platform Service | ID = 8200
Description = License acquisition failure details. hr=0xC004C032

Error - 8/4/2011 3:43:16 AM | Computer Name = user-HP | Source = Office Software Protection Platform Service | ID = 1014
Description = Acquisition of End User License failed. hr=0xC004C032 Sku Id=1dfbb6c1-0c4d-44e9-a0ea-77f59146e011

[ Hewlett-Packard Events ]
Error - 7/28/2011 1:49:54 PM | Computer Name = user-HP | Source = Hewlett-Packard | ID = 0
Description = cs-CZ Část cesty C:\ProgramData\Hewlett-Packard\HP Support Framework\Logs\Temp\HPSA\HPSASession_201107281949.xml
nebyla nalezena. mscorlib v System.IO.__Error.WinIOError(Int32 errorCode, String
maybeFullPath) v System.IO.FileStream.Init(String path, FileMode mode, FileAccess
access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions
options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy) v
System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare
share, Int32 bufferSize, FileOptions options) v System.IO.StreamWriter.CreateFile(String
path, Boolean append) v System.IO.StreamWriter..ctor(String path, Boolean append,
Encoding encoding, Int32 bufferSize) v System.IO.StreamWriter..ctor(String path,
Boolean append, Encoding encoding) v System.IO.File.WriteAllText(String path,
String contents, Encoding encoding) v HP.ActiveSupportLibrary.Issues.HPSFSession.closeSaveSession()


[ System Events ]
Error - 7/29/2011 12:15:00 PM | Computer Name = user-HP | Source = Service Control Manager | ID = 7001
Description = Služba Služba seznamu sítí závisí na službě Sledování umístění v síti
(NLA), která neuspěla při spuštění v důsledku následující chyby: %%1068

Error - 7/29/2011 12:15:00 PM | Computer Name = user-HP | Source = Service Control Manager | ID = 7001
Description = Služba Služba seznamu sítí závisí na službě Sledování umístění v síti
(NLA), která neuspěla při spuštění v důsledku následující chyby: %%1068

Error - 7/29/2011 12:15:00 PM | Computer Name = user-HP | Source = Service Control Manager | ID = 7001
Description = Služba Služba seznamu sítí závisí na službě Sledování umístění v síti
(NLA), která neuspěla při spuštění v důsledku následující chyby: %%1068

Error - 7/29/2011 12:15:00 PM | Computer Name = user-HP | Source = Service Control Manager | ID = 7001
Description = Služba Služba seznamu sítí závisí na službě Sledování umístění v síti
(NLA), která neuspěla při spuštění v důsledku následující chyby: %%1068

Error - 7/29/2011 12:15:00 PM | Computer Name = user-HP | Source = Service Control Manager | ID = 7001
Description = Služba Služba seznamu sítí závisí na službě Sledování umístění v síti
(NLA), která neuspěla při spuštění v důsledku následující chyby: %%1068

Error - 7/30/2011 4:01:57 AM | Computer Name = user-HP | Source = Service Control Manager | ID = 7022
Description = Služba avast! Antivirus přestala během spouštění reagovat.

Error - 7/30/2011 1:56:30 PM | Computer Name = user-HP | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (19:45:32, ?30.?7.?2011) bylo neočekávané.

Error - 8/1/2011 3:04:10 AM | Computer Name = user-HP | Source = Service Control Manager | ID = 7022
Description = Služba avast! Antivirus přestala během spouštění reagovat.

Error - 8/4/2011 4:01:47 AM | Computer Name = user-HP | Source = Service Control Manager | ID = 7000
Description = Služba SASKUTIL neuspěla při spuštění v důsledku následující chyby:
%%2

Error - 8/4/2011 4:03:46 AM | Computer Name = user-HP | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: SASKUTIL

počítač zamrzá při jakékoliv činnosti dokonce i když na něm nikdo nic nedělá tak zamrzne a je třeba ho restartovat

Spustte znovu OTL

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  :otl
  IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
  IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com
  IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
  IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com
  IE - HKU\S-1-5-21-3758773303-2342552062-2968818899-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
  FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\msntoolbar@msn.com: C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1438.0\Firefox [2010/10/21 07:42:00 | 000,000,000 | ---D | M]
  O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
  O4 - HKLM..\Run: [] File not found
  O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: EnableShellExecuteHooks = 1
  O13 - gopher Prefix: missing
  O13 - gopher Prefix: missing
  O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
  O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
  O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
  O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
  O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
  O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
  O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
  [2 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
  [7 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
  [1 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]
  [1 C:\Windows\twain_32\*.tmp files -> C:\Windows\twain_32\*.tmp -> ]
  
  :reg
  [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
  "PDF Complete"=-
  "HP Software Update"=-
  "Bing Bar"=-
  "Adobe Reader Speed Launcher"=-
  "Adobe ARM"=-
  "WinampAgent"=-
  "Malwarebytes' Anti-Malware"=-
   
  :files
  %windir%\system32\*.tmp.dll /s
  %windir%\system32\SET*.tmp /s
  %windir%\*.tmp
  
  :commands
  [RESETHOSTS]
  [EMPTYTEMP]
  [EMPTYFLASH]

• Nasledne kliknete na Opravit
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

děkuji za radu, ale bohužel vše proběhne v pořádku až do doby kdy se mě otl zeptá na restart. Potvrdím, že tedy ano, ale počítač se nerestartuje.

Restartujte jej tedy rucne

ale pak nevyjede žádný log, když to restartuju ručně. Nebo to tedy znamená, že mám opět udělat ten test jako předtím?

Opakujte tedy postup s opravou v nouzovem rezimu (restart PC, mackat F8, zvolit Stav nouze s praci v siti)

Dobrý den,

omlouvám se za zpoždění, pracovala s tím sestra, která se nouzového režimu bála. Tady je log, v nouzovém režimu se oprava podařila.

All processes killed
========== OTL ==========
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKU\S-1-5-21-3758773303-2342552062-2968818899-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
File HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\msntoolbar@msn.com: C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1438.0\Firefox not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\EnableShellExecuteHooks deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\livecall\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{828030A1-22C1-4009-854F-8E305202313F}\ not found.
File {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-help\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{314111c7-a502-11d2-bbca-00c04f8ec294}\ not found.
File {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msnim\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{828030A1-22C1-4009-854F-8E305202313F}\ not found.
File {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype-ie-addon-data\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}\ not found.
File {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlmailhtml\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03C514A3-1EFB-4856-9F99-10D7BE1653C0}\ not found.
File {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found not found.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2970.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP495E.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP8C47.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPCB7B.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE427.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPFEA8.tmp folder deleted successfully.
C:\Windows\Temp\TS_43C5.tmp deleted successfully.
C:\Windows\twain_32\hpqgnds2.tmp deleted successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\PDF Complete deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\HP Software Update deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\Bing Bar deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\WinampAgent deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\Malwarebytes' Anti-Malware not found.
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

User: user
->Temp folder emptied: 194027833 bytes
->Temporary Internet Files folder emptied: 53933372 bytes
->FireFox cache emptied: 107778733 bytes
->Flash cache emptied: 26319 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 38671375 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50641 bytes
RecycleBin emptied: 3162 bytes

Total Files Cleaned = 376.00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Public

User: user
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0.00 mb


OTL by OldTimer - Version 3.2.26.1 log created on 08092011_112957

Files\Folders moved on Reboot...
C:\Users\user\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

Registry entries deleted on Reboot...