VIRY.CZ

Pánové prosím o preventivní kontrolu, jen se mi stalo, že když jsem počítač hodil do režimu spánku tak potom to nechtělo spustit monitor a ten psal zkontrolujte video kabel. Pak nefungovala ani myš a ani klávesnice, tak nevím... Předem díky moc



Logfile of random's system information tool 1.09 (written by random/random)
Run by pavilion at 2011-09-10 16:09:48
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 796 GB (85%) free of 940 GB
Total RAM: 4095 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:09:55, on 10.9.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe
C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe
C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\pavilion.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://ib24.csob.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPDTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=HPDTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer, optimized for Bing and MSN
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: @C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll
O4 - HKLM\..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe
O4 - HKLM\..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [NokiaOviSuite2] C:\Program Files (x86)\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Snapfish PictureMover.lnk = C:\Program Files (x86)\PictureMover\Bin\PictureMover.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Zobrazit nebo skrýt HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\Windows\System32\ezSharedSvcHost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Health Check Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: HP Auto (HPAuto) - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe
O23 - Service: HP Client Services (HPClientSvc) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files (x86)\PDF Complete\pdfsvc.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\SysWOW64\IoctlSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11628 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
C:\Windows\SysWOW64\ezSharedSvcHost.exe
"C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe"
"C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" /background
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Logitech\Gaming Software\LWEMon.exe" /noui
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe"
"C:\Program Files (x86)\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe" -tray
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
"C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"
"C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe"
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\PDF Complete\pdfsvc.exe" /startedbyscm:66B66708-40E2BE4D-pdfcService
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\Windows\SysWOW64\IoctlSvc.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe" /watchfiles startup
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe"
"C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k HPService
"c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe"
"C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"
{3508CD23-D194-4646-A075-E9C71BBF2973}
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-28810d14-40c7-4b55-9ea7-ab7158b0f54c -SystemEventPortName:HostProcess-439af505-c0c2-4832-9b32-0ecd7dfc7278 -IoCancelEventPortName:HostProcess-d26497b6-b30c-4b33-994f-69e992e09011 -NonStateChangingEventPortName:HostProcess-bdd7c939-0e3e-4984-9a56-9d8dfa8811e7 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:1f7d6882-7129-4b52-8e63-0635d6be8f6d
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe" -CtxID "#Hewlett-Packard#HP Photosmart C5100 series#1313510261" -Startup
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe" -Embedding
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe" -Embedding
"C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe"
{754DF941-1856-4665-9C42-E9EC38BD2A52}
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
"C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_enabled/SpdyImpact/npn_with_spdy/ --disable-client-side-phishing-detection --channel=424.0046C160.870947611 --ignored=" --type=renderer " /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\pavilion\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.3.0.7550_0\npSkypeChromePlugin.dll" --lang=cs --channel=424.056F78C0.1672778134 /prefetch:4
taskhost.exe $(Arg0)
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_enabled/SpdyImpact/npn_with_spdy/ --disable-client-side-phishing-detection --channel=424.056FBC60.1519284946 /prefetch:3
C:\Windows\system32\rundll32.exe "C:\PROGRA~2\Google\Chrome\APPLIC~1\130782~1.220\gcswf32.dll",BrokerMain browser=chrome
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Program Files (x86)\Google\Chrome\Application\13.0.782.220\gcswf32.dll" --lang=cs --channel=424.06F67000.754520248 --flash-broker=4804 /prefetch:4
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"c:\Program Files\Microsoft Security Client\Antimalware\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey 92E3A2B2-305B-2062-684A-7473A1681E37 -Reinvoke
"C:\Users\pavilion\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\HPCeeScheduleForpavilion.job

=========Mozilla firefox=========

ProfilePath - C:\Users\pavilion\AppData\Roaming\Mozilla\Firefox\Profiles\m96dmin3.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpWinExt,version=5.0]
"Description"=Bing Bar
"Path"=C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.65\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.65\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

C:\Program Files (x86)\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
NPOFF12.DLL
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-08-04 49440]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-07-27 191792]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-05-16 1164680]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar BHO - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll [2010-08-14 609544]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-08-04 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20 509496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - @C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll,-100 - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll [2010-08-14 609544]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"=c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [2008-11-20 62768]
"SmartMenu"=C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [2010-09-15 611896]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2011-06-15 1436736]
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2010-06-14 190536]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
""= []
"NokiaOviSuite2"=C:\Program Files (x86)\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe [2011-08-04 966712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2008-12-08 54576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]
C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2011-06-20 2736128]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Norton Online Backup]
C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Total CMA Pack]
C:\Program Files (x86)\Total CMA Pack\Total CMA Pack.exe [2009-09-01 43255]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^pavilion^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk]
C:\PROGRA~2\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-12-13 1198592]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
""= []
"PDF Complete"=C:\Program Files (x86)\PDF Complete\pdfsty.exe [2010-09-28 664600]
"Easybits Recovery"=C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [2010-08-30 61112]
"Microsoft Default Manager"=C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [2010-05-10 439568]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-01-07 253672]
"hpqSRMon"=C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [2008-07-22 150528]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-07-07 336384]
"NokiaMServer"=C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe
Snapfish PictureMover.lnk - C:\Program Files (x86)\PictureMover\Bin\PictureMover.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{E54729E8-BB3D-4270-9D49-7389EA579090}"=C:\Windows\SysWow64\EZUPBH~1.DLL [2010-12-30 52920]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableLockWorkstation"=0
"DisableTaskMgr"=0
"DisableChangePassword"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"HideFastUserSwitching"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"EnableShellExecuteHooks"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2011-09-10 16:09:48 ----D---- C:\rsit
2011-09-10 16:09:48 ----D---- C:\Program Files\trend micro
2011-09-04 09:30:21 ----D---- C:\Users\pavilion\AppData\Roaming\Nokia Ovi Suite
2011-09-04 09:30:19 ----D---- C:\Users\pavilion\AppData\Roaming\Nokia
2011-09-04 08:22:39 ----D---- C:\ProgramData\PC Suite
2011-09-04 08:22:37 ----D---- C:\Users\pavilion\AppData\Roaming\PC Suite
2011-09-04 08:21:11 ----D---- C:\Program Files\DIFX
2011-09-04 08:21:10 ----A---- C:\Windows\system32\drivers\pccsmcfdx64.sys
2011-09-04 08:21:07 ----DC---- C:\Windows\system32\DRVSTORE
2011-09-04 08:21:00 ----D---- C:\Program Files (x86)\PC Connectivity Solution
2011-09-04 08:20:39 ----A---- C:\Windows\system32\nmwcdclsX64.dll
2011-09-04 08:19:49 ----D---- C:\ProgramData\NokiaInstallerCache
2011-09-04 08:19:49 ----D---- C:\Program Files (x86)\Nokia
2011-08-24 18:07:03 ----A---- C:\Windows\SYSWOW64\tzres.dll
2011-08-24 18:07:03 ----A---- C:\Windows\system32\tzres.dll
2011-08-23 22:26:29 ----D---- C:\ProgramData\Kamar
2011-08-23 22:22:59 ----D---- C:\Program Files\CV Curriculum vitae CREATOR
2011-08-23 22:22:59 ----A---- C:\Windows\SYSWOW64\swb_uninst.exe
2011-08-23 22:22:04 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2011-08-23 22:22:04 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2011-08-23 22:22:04 ----A---- C:\Windows\system32\d3dx10_40.dll
2011-08-23 22:22:04 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2011-08-23 22:22:02 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2011-08-23 22:22:02 ----A---- C:\Windows\system32\D3DX9_40.dll
2011-08-23 21:07:02 ----D---- C:\Directx9
2011-08-23 09:49:35 ----D---- C:\Windows\system32\SPReview
2011-08-23 09:47:58 ----D---- C:\Windows\system32\EventProviders
2011-08-18 05:30:32 ----A---- C:\Windows\SYSWOW64\pbsvc.exe
2011-08-18 05:27:09 ----D---- C:\Program Files (x86)\Activision
2011-08-18 05:18:11 ----SHD---- C:\Windows\ftpcache
2011-08-17 19:55:01 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2011-08-17 19:54:58 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2011-08-17 19:54:56 ----A---- C:\Windows\game.ini
2011-08-17 18:58:52 ----D---- C:\HDD zálohy notebook a pc
2011-08-17 16:35:39 ----D---- C:\Users\pavilion\AppData\Roaming\HP Support Assistant
2011-08-17 16:21:17 ----D---- C:\Windows\pss
2011-08-16 23:22:22 ----D---- C:\ProgramData\ATI
2011-08-16 23:22:20 ----D---- C:\Program Files (x86)\AMD APP
2011-08-16 23:22:08 ----D---- C:\Program Files\Common Files\ATI Technologies
2011-08-16 23:21:41 ----D---- C:\ProgramData\AMD
2011-08-16 23:21:40 ----A---- C:\Windows\system32\drivers\amdiox64.sys
2011-08-16 23:19:40 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2011-08-16 23:19:40 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2011-08-16 23:19:40 ----A---- C:\Windows\system32\XAudio2_7.dll
2011-08-16 23:19:40 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2011-08-16 23:19:39 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2011-08-16 23:19:39 ----A---- C:\Windows\system32\xactengine3_7.dll
2011-08-16 23:19:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2011-08-16 23:19:38 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2011-08-16 23:19:37 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2011-08-16 23:19:37 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2011-08-16 23:19:37 ----A---- C:\Windows\system32\d3dx11_43.dll
2011-08-16 23:19:37 ----A---- C:\Windows\system32\d3dcsx_43.dll
2011-08-16 23:19:36 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2011-08-16 23:19:36 ----A---- C:\Windows\system32\d3dx10_43.dll
2011-08-16 23:19:30 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2011-08-16 23:19:30 ----A---- C:\Windows\system32\D3DX9_43.dll
2011-08-16 23:19:29 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2011-08-16 23:19:29 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2011-08-16 23:19:29 ----A---- C:\Windows\system32\XAudio2_6.dll
2011-08-16 23:19:29 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2011-08-16 23:19:27 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2011-08-16 23:19:27 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2011-08-16 23:19:27 ----A---- C:\Windows\system32\xactengine3_6.dll
2011-08-16 23:19:27 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2011-08-16 23:19:25 ----A---- C:\Windows\system32\XAudio2_5.dll
2011-08-16 23:19:24 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2011-08-16 23:19:24 ----A---- C:\Windows\system32\xactengine3_5.dll
2011-08-16 23:19:23 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2011-08-16 23:19:23 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2011-08-16 23:19:23 ----A---- C:\Windows\system32\d3dcsx_42.dll
2011-08-16 23:19:23 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2011-08-16 23:19:22 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2011-08-16 23:19:22 ----A---- C:\Windows\system32\D3DX9_42.dll
2011-08-16 23:19:22 ----A---- C:\Windows\system32\d3dx11_42.dll
2011-08-16 23:19:21 ----A---- C:\Windows\system32\d3dx10_41.dll
2011-08-16 23:19:21 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2011-08-16 23:19:20 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2011-08-16 23:19:20 ----A---- C:\Windows\system32\D3DX9_41.dll
2011-08-16 23:19:18 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2011-08-16 23:19:18 ----A---- C:\Windows\system32\XAudio2_4.dll
2011-08-16 23:19:18 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2011-08-16 23:19:17 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2011-08-16 23:19:17 ----A---- C:\Windows\system32\xactengine3_4.dll
2011-08-16 23:19:16 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2011-08-16 23:19:16 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2011-08-16 23:19:10 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2011-08-16 23:19:10 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2011-08-16 23:19:10 ----A---- C:\Windows\system32\XAudio2_3.dll
2011-08-16 23:19:10 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2011-08-16 23:19:09 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2011-08-16 23:19:09 ----A---- C:\Windows\system32\xactengine3_3.dll
2011-08-16 23:19:08 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2011-08-16 23:19:08 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2011-08-16 23:19:07 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2011-08-16 23:19:07 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2011-08-16 23:19:07 ----A---- C:\Windows\system32\XAudio2_2.dll
2011-08-16 23:19:07 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2011-08-16 23:19:05 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2011-08-16 23:19:05 ----A---- C:\Windows\system32\xactengine3_2.dll
2011-08-16 23:19:04 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2011-08-16 23:19:04 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2011-08-16 23:19:04 ----A---- C:\Windows\system32\d3dx10_39.dll
2011-08-16 23:19:04 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2011-08-16 23:19:03 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2011-08-16 23:19:03 ----A---- C:\Windows\system32\D3DX9_39.dll
2011-08-16 23:19:02 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2011-08-16 23:19:02 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2011-08-16 23:19:01 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2011-08-16 23:19:01 ----A---- C:\Windows\system32\XAudio2_1.dll
2011-08-16 23:19:00 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2011-08-16 23:19:00 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2011-08-16 23:19:00 ----A---- C:\Windows\system32\xactengine3_1.dll
2011-08-16 23:19:00 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2011-08-16 23:18:59 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2011-08-16 23:18:59 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2011-08-16 23:18:59 ----A---- C:\Windows\system32\d3dx10_38.dll
2011-08-16 23:18:59 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2011-08-16 23:18:57 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2011-08-16 23:18:57 ----A---- C:\Windows\system32\D3DX9_38.dll
2011-08-16 23:18:56 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2011-08-16 23:18:56 ----A---- C:\Windows\system32\XAudio2_0.dll
2011-08-16 23:18:54 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2011-08-16 23:18:54 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2011-08-16 23:18:54 ----A---- C:\Windows\system32\xactengine3_0.dll
2011-08-16 23:18:54 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2011-08-16 23:18:53 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2011-08-16 23:18:53 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2011-08-16 23:18:53 ----A---- C:\Windows\system32\d3dx10_37.dll
2011-08-16 23:18:53 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2011-08-16 23:18:51 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2011-08-16 23:18:51 ----A---- C:\Windows\system32\D3DX9_37.dll
2011-08-16 23:18:50 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2011-08-16 23:18:50 ----A---- C:\Windows\system32\xactengine2_10.dll
2011-08-16 23:18:47 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2011-08-16 23:18:47 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2011-08-16 23:18:47 ----A---- C:\Windows\system32\d3dx10_36.dll
2011-08-16 23:18:47 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2011-08-16 23:18:46 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2011-08-16 23:18:46 ----A---- C:\Windows\system32\d3dx9_36.dll
2011-08-16 23:18:44 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2011-08-16 23:18:44 ----A---- C:\Windows\system32\xactengine2_9.dll
2011-08-16 23:18:43 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2011-08-16 23:18:43 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2011-08-16 23:18:43 ----A---- C:\Windows\system32\d3dx10_35.dll
2011-08-16 23:18:43 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2011-08-16 23:18:42 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2011-08-16 23:18:42 ----A---- C:\Windows\system32\d3dx9_35.dll
2011-08-16 23:18:41 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2011-08-16 23:18:41 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2011-08-16 23:18:41 ----A---- C:\Windows\system32\xactengine2_8.dll
2011-08-16 23:18:41 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2011-08-16 23:18:40 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2011-08-16 23:18:40 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2011-08-16 23:18:40 ----A---- C:\Windows\system32\d3dx10_34.dll
2011-08-16 23:18:40 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2011-08-16 23:18:39 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2011-08-16 23:18:39 ----A---- C:\Windows\system32\d3dx9_34.dll
2011-08-16 23:18:38 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2011-08-16 23:18:38 ----A---- C:\Windows\system32\xinput1_3.dll
2011-08-16 23:18:36 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2011-08-16 23:18:36 ----A---- C:\Windows\system32\xactengine2_7.dll
2011-08-16 23:18:35 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2011-08-16 23:18:35 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2011-08-16 23:18:35 ----A---- C:\Windows\system32\d3dx10_33.dll
2011-08-16 23:18:35 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2011-08-16 23:18:33 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2011-08-16 23:18:33 ----A---- C:\Windows\system32\d3dx9_33.dll
2011-08-16 23:18:32 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2011-08-16 23:18:32 ----A---- C:\Windows\system32\xactengine2_6.dll
2011-08-16 23:18:29 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2011-08-16 23:18:29 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2011-08-16 23:18:29 ----A---- C:\Windows\system32\xactengine2_5.dll
2011-08-16 23:18:29 ----A---- C:\Windows\system32\d3dx10.dll
2011-08-16 23:18:28 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2011-08-16 23:18:28 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2011-08-16 23:18:28 ----A---- C:\Windows\system32\xactengine2_4.dll
2011-08-16 23:18:28 ----A---- C:\Windows\system32\x3daudio1_1.dll
2011-08-16 23:18:27 ----A---- C:\Windows\system32\d3dx9_31.dll
2011-08-16 23:18:25 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2011-08-16 23:18:25 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2011-08-16 23:18:25 ----A---- C:\Windows\system32\xinput1_2.dll
2011-08-16 23:18:25 ----A---- C:\Windows\system32\xactengine2_3.dll
2011-08-16 23:18:23 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2011-08-16 23:18:23 ----A---- C:\Windows\system32\xactengine2_2.dll
2011-08-16 23:18:22 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2011-08-16 23:18:22 ----A---- C:\Windows\system32\xinput1_1.dll
2011-08-16 23:18:20 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2011-08-16 23:18:20 ----A---- C:\Windows\system32\xactengine2_1.dll
2011-08-16 23:18:14 ----A---- C:\Windows\system32\d3dx9_30.dll
2011-08-16 23:18:12 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2011-08-16 23:18:12 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2011-08-16 23:18:12 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2011-08-16 23:18:12 ----A---- C:\Windows\system32\xactengine2_0.dll
2011-08-16 23:18:12 ----A---- C:\Windows\system32\x3daudio1_0.dll
2011-08-16 23:18:12 ----A---- C:\Windows\system32\d3dx9_29.dll
2011-08-16 23:18:11 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2011-08-16 23:18:11 ----A---- C:\Windows\system32\d3dx9_28.dll
2011-08-16 23:18:11 ----A---- C:\Windows\system32\d3dx9_27.dll
2011-08-16 23:18:10 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2011-08-16 23:18:10 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2011-08-16 23:18:10 ----A---- C:\Windows\system32\d3dx9_26.dll
2011-08-16 23:18:10 ----A---- C:\Windows\system32\d3dx9_25.dll
2011-08-16 23:18:09 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2011-08-16 23:18:09 ----A---- C:\Windows\system32\d3dx9_24.dll
2011-08-16 23:16:49 ----D---- C:\Program Files\ATI Technologies
2011-08-16 23:16:00 ----D---- C:\ATI
2011-08-16 23:15:14 ----D---- C:\Windows\SYSWOW64\directx
2011-08-16 23:14:25 ----D---- C:\Program Files (x86)\Adobe
2011-08-16 22:59:27 ----A---- C:\Windows\system32\netfxperf.dll
2011-08-16 22:59:27 ----A---- C:\Windows\system32\dfshim.dll
2011-08-16 22:59:21 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2011-08-16 22:59:17 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2011-08-16 22:59:17 ----A---- C:\Windows\system32\mstscax.dll
2011-08-16 22:59:17 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2011-08-16 22:59:17 ----A---- C:\Windows\system32\d3d10warp.dll
2011-08-16 22:59:14 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2011-08-16 22:59:12 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2011-08-16 22:59:12 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2011-08-16 22:59:12 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2011-08-16 22:59:12 ----A---- C:\Windows\system32\sysmain.dll
2011-08-16 22:59:11 ----A---- C:\Windows\system32\shell32.dll
2011-08-16 22:59:10 ----A---- C:\Windows\system32\MSVidCtl.dll
2011-08-16 22:59:09 ----A---- C:\Windows\system32\wmp.dll
2011-08-16 22:59:08 ----A---- C:\Windows\system32\ntdll.dll
2011-08-16 22:59:08 ----A---- C:\Windows\system32\mscoree.dll
2011-08-16 22:59:08 ----A---- C:\Windows\system32\mmcndmgr.dll
2011-08-16 22:59:08 ----A---- C:\Windows\system32\d2d1.dll
2011-08-16 22:59:07 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2011-08-16 22:59:07 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2011-08-16 22:59:07 ----A---- C:\Windows\system32\xpsservices.dll
2011-08-16 22:59:07 ----A---- C:\Windows\system32\secproc_isv.dll
2011-08-16 22:59:07 ----A---- C:\Windows\system32\secproc.dll
2011-08-16 22:59:07 ----A---- C:\Windows\system32\RMActivate_isv.exe
2011-08-16 22:59:07 ----A---- C:\Windows\system32\RMActivate.exe
2011-08-16 22:59:07 ----A---- C:\Windows\system32\mf.dll
2011-08-16 22:59:06 ----A---- C:\Windows\SYSWOW64\shell32.dll
2011-08-16 22:59:05 ----A---- C:\Windows\SYSWOW64\secproc.dll
2011-08-16 22:59:05 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2011-08-16 22:59:05 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2011-08-16 22:59:05 ----A---- C:\Windows\system32\rpcrt4.dll
2011-08-16 22:59:03 ----A---- C:\Windows\system32\spwizui.dll
2011-08-16 22:59:03 ----A---- C:\Windows\system32\schedsvc.dll
2011-08-16 22:59:03 ----A---- C:\Windows\system32\ole32.dll
2011-08-16 22:59:02 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2011-08-16 22:59:02 ----A---- C:\Windows\system32\taskschd.dll
2011-08-16 22:59:01 ----A---- C:\Windows\SYSWOW64\mf.dll
2011-08-16 22:59:01 ----A---- C:\Windows\system32\wevtsvc.dll
2011-08-16 22:59:01 ----A---- C:\Windows\system32\vssapi.dll
2011-08-16 22:59:01 ----A---- C:\Windows\system32\RacEngn.dll
2011-08-16 22:59:01 ----A---- C:\Windows\system32\ExplorerFrame.dll
2011-08-16 22:59:01 ----A---- C:\Windows\system32\diagperf.dll
2011-08-16 22:59:00 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2011-08-16 22:59:00 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2011-08-16 22:59:00 ----A---- C:\Windows\system32\msxml3.dll
2011-08-16 22:59:00 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2011-08-16 22:58:59 ----A---- C:\Windows\SYSWOW64\wmp.dll
2011-08-16 22:58:59 ----A---- C:\Windows\system32\UIRibbon.dll
2011-08-16 22:58:59 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2011-08-16 22:58:58 ----A---- C:\Windows\system32\WsmSvc.dll
2011-08-16 22:58:58 ----A---- C:\Windows\system32\WMVCORE.DLL
2011-08-16 22:58:57 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2011-08-16 22:58:57 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2011-08-16 22:58:57 ----A---- C:\Windows\system32\spreview.exe
2011-08-16 22:58:57 ----A---- C:\Windows\system32\spinstall.exe
2011-08-16 22:58:57 ----A---- C:\Windows\system32\rdpdd.dll
2011-08-16 22:58:57 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2011-08-16 22:58:57 ----A---- C:\Windows\system32\PresentationHost.exe
2011-08-16 22:58:57 ----A---- C:\Windows\system32\MPSSVC.dll
2011-08-16 22:58:57 ----A---- C:\Windows\system32\DWrite.dll
2011-08-16 22:58:56 ----A---- C:\Windows\system32\WMVDECOD.DLL
2011-08-16 22:58:56 ----A---- C:\Windows\system32\WinSAT.exe
2011-08-16 22:58:56 ----A---- C:\Windows\system32\CertEnroll.dll
2011-08-16 22:58:55 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2011-08-16 22:58:55 ----A---- C:\Windows\system32\SearchFolder.dll
2011-08-16 22:58:55 ----A---- C:\Windows\system32\msxml6.dll
2011-08-16 22:58:55 ----A---- C:\Windows\system32\IKEEXT.DLL
2011-08-16 22:58:55 ----A---- C:\Windows\system32\d3d9.dll
2011-08-16 22:58:54 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2011-08-16 22:58:54 ----A---- C:\Windows\system32\gpsvc.dll
2011-08-16 22:58:54 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2011-08-16 22:58:53 ----A---- C:\Windows\system32\VSSVC.exe
2011-08-16 22:58:53 ----A---- C:\Windows\system32\FntCache.dll
2011-08-16 22:58:53 ----A---- C:\Windows\system32\dwmcore.dll
2011-08-16 22:58:53 ----A---- C:\Windows\system32\drivers\http.sys
2011-08-16 22:58:53 ----A---- C:\Windows\system32\dbgeng.dll
2011-08-16 22:58:52 ----A---- C:\Windows\system32\drivers\ndis.sys
2011-08-16 22:58:52 ----A---- C:\Windows\system32\crypt32.dll
2011-08-16 22:58:51 ----A---- C:\Windows\SYSWOW64\ole32.dll
2011-08-16 22:58:51 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2011-08-16 22:58:51 ----A---- C:\Windows\system32\TSWorkspace.dll
2011-08-16 22:58:51 ----A---- C:\Windows\system32\schannel.dll
2011-08-16 22:58:51 ----A---- C:\Windows\system32\audiosrv.dll
2011-08-16 22:58:51 ----A---- C:\Windows\system32\actxprxy.dll
2011-08-16 22:58:50 ----A---- C:\Windows\system32\termsrv.dll
2011-08-16 22:58:50 ----A---- C:\Windows\system32\qmgr.dll
2011-08-16 22:58:50 ----A---- C:\Windows\system32\lsasrv.dll
2011-08-16 22:58:49 ----A---- C:\Windows\system32\netlogon.dll
2011-08-16 22:58:49 ----A---- C:\Windows\system32\mstsc.exe
2011-08-16 22:58:49 ----A---- C:\Windows\system32\imapi2fs.dll
2011-08-16 22:58:48 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2011-08-16 22:58:48 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2011-08-16 22:58:48 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2011-08-16 22:58:48 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2011-08-16 22:58:48 ----A---- C:\Windows\system32\winhttp.dll
2011-08-16 22:58:48 ----A---- C:\Windows\system32\QAGENTRT.DLL
2011-08-16 22:58:48 ----A---- C:\Windows\system32\propsys.dll
2011-08-16 22:58:48 ----A---- C:\Windows\system32\msv1_0.dll
2011-08-16 22:58:48 ----A---- C:\Windows\system32\d3d11.dll
2011-08-16 22:58:47 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2011-08-16 22:58:47 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2011-08-16 22:58:47 ----A---- C:\Windows\system32\werconcpl.dll
2011-08-16 22:58:47 ----A---- C:\Windows\system32\wbengine.exe
2011-08-16 22:58:47 ----A---- C:\Windows\system32\taskeng.exe
2011-08-16 22:58:47 ----A---- C:\Windows\system32\setupapi.dll
2011-08-16 22:58:47 ----A---- C:\Windows\system32\rpcss.dll
2011-08-16 22:58:47 ----A---- C:\Windows\system32\odbc32.dll
2011-08-16 22:58:47 ----A---- C:\Windows\system32\authui.dll
2011-08-16 22:58:46 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2011-08-16 22:58:46 ----A---- C:\Windows\system32\WSDApi.dll
2011-08-16 22:58:46 ----A---- C:\Windows\system32\user32.dll
2011-08-16 22:58:46 ----A---- C:\Windows\system32\drivers\netio.sys
2011-08-16 22:58:45 ----A---- C:\Windows\SYSWOW64\wer.dll
2011-08-16 22:58:45 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2011-08-16 22:58:45 ----A---- C:\Windows\SYSWOW64\certcli.dll
2011-08-16 22:58:45 ----A---- C:\Windows\system32\webio.dll
2011-08-16 22:58:45 ----A---- C:\Windows\system32\scavengeui.dll
2011-08-16 22:58:45 ----A---- C:\Windows\system32\drivers\tdx.sys
2011-08-16 22:58:45 ----A---- C:\Windows\system32\drivers\netbt.sys
2011-08-16 22:58:45 ----A---- C:\Windows\system32\dhcpcore.dll
2011-08-16 22:58:45 ----A---- C:\Windows\system32\certmgr.dll
2011-08-16 22:58:44 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2011-08-16 22:58:44 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2011-08-16 22:58:44 ----A---- C:\Windows\system32\tsmf.dll
2011-08-16 22:58:44 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2011-08-16 22:58:44 ----A---- C:\Windows\system32\ncsi.dll
2011-08-16 22:58:44 ----A---- C:\Windows\system32\msdrm.dll
2011-08-16 22:58:44 ----A---- C:\Windows\system32\localspl.dll
2011-08-16 22:58:43 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2011-08-16 22:58:43 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2011-08-16 22:58:43 ----A---- C:\Windows\system32\wmicmiplugin.dll
2011-08-16 22:58:43 ----A---- C:\Windows\system32\shlwapi.dll
2011-08-16 22:58:43 ----A---- C:\Windows\system32\netshell.dll
2011-08-16 22:58:43 ----A---- C:\Windows\system32\netcfgx.dll
2011-08-16 22:58:43 ----A---- C:\Windows\system32\msdtctm.dll
2011-08-16 22:58:43 ----A---- C:\Windows\system32\framedynos.dll
2011-08-16 22:58:43 ----A---- C:\Windows\system32\drivers\cng.sys
2011-08-16 22:58:42 ----A---- C:\Windows\SYSWOW64\quartz.dll
2011-08-16 22:58:42 ----A---- C:\Windows\system32\ws2_32.dll
2011-08-16 22:58:42 ----A---- C:\Windows\system32\winlogon.exe
2011-08-16 22:58:42 ----A---- C:\Windows\system32\usp10.dll
2011-08-16 22:58:42 ----A---- C:\Windows\system32\quartz.dll
2011-08-16 22:58:42 ----A---- C:\Windows\system32\nlasvc.dll
2011-08-16 22:58:42 ----A---- C:\Windows\system32\lsm.exe
2011-08-16 22:58:42 ----A---- C:\Windows\system32\dxgi.dll
2011-08-16 22:58:42 ----A---- C:\Windows\system32\comdlg32.dll
2011-08-16 22:58:41 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2011-08-16 22:58:41 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2011-08-16 22:58:41 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2011-08-16 22:58:41 ----A---- C:\Windows\system32\wpdshext.dll
2011-08-16 22:58:41 ----A---- C:\Windows\system32\wmpps.dll
2011-08-16 22:58:41 ----A---- C:\Windows\system32\Query.dll
2011-08-16 22:58:41 ----A---- C:\Windows\system32\mswsock.dll
2011-08-16 22:58:41 ----A---- C:\Windows\system32\drvstore.dll
2011-08-16 22:58:41 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2011-08-16 22:58:41 ----A---- C:\Windows\system32\azroles.dll
2011-08-16 22:58:41 ----A---- C:\Windows\system32\apphelp.dll
2011-08-16 22:58:40 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2011-08-16 22:58:40 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2011-08-16 22:58:40 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2011-08-16 22:58:40 ----A---- C:\Windows\system32\Vault.dll
2011-08-16 22:58:40 ----A---- C:\Windows\system32\samsrv.dll
2011-08-16 22:58:40 ----A---- C:\Windows\system32\QAGENT.DLL
2011-08-16 22:58:40 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2011-08-16 22:58:40 ----A---- C:\Windows\system32\cmd.exe
2011-08-16 22:58:40 ----A---- C:\Windows\system32\BFE.DLL
2011-08-16 22:58:39 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2011-08-16 22:58:39 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2011-08-16 22:58:39 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2011-08-16 22:58:39 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2011-08-16 22:58:39 ----A---- C:\Windows\system32\win32spl.dll
2011-08-16 22:58:39 ----A---- C:\Windows\system32\lpksetup.exe
2011-08-16 22:58:39 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2011-08-16 22:58:38 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2011-08-16 22:58:38 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2011-08-16 22:58:38 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2011-08-16 22:58:38 ----A---- C:\Windows\system32\WebClnt.dll
2011-08-16 22:58:37 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2011-08-16 22:58:37 ----A---- C:\Windows\SYSWOW64\webio.dll
2011-08-16 22:58:37 ----A---- C:\Windows\SYSWOW64\upnp.dll
2011-08-16 22:58:37 ----A---- C:\Windows\SYSWOW64\Query.dll
2011-08-16 22:58:37 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2011-08-16 22:58:37 ----A---- C:\Windows\system32\Wldap32.dll
2011-08-16 22:58:37 ----A---- C:\Windows\system32\WindowsCodecs.dll
2011-08-16 22:58:37 ----A---- C:\Windows\system32\taskcomp.dll
2011-08-16 22:58:37 ----A---- C:\Windows\system32\sxs.dll
2011-08-16 22:58:37 ----A---- C:\Windows\system32\mfds.dll
2011-08-16 22:58:37 ----A---- C:\Windows\system32\mcbuilder.exe
2011-08-16 22:58:37 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2011-08-16 22:58:36 ----A---- C:\Windows\SYSWOW64\schannel.dll
2011-08-16 22:58:36 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2011-08-16 22:58:36 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2011-08-16 22:58:36 ----A---- C:\Windows\system32\pnidui.dll
2011-08-16 22:58:36 ----A---- C:\Windows\system32\ipsmsnap.dll
2011-08-16 22:58:36 ----A---- C:\Windows\system32\hgprint.dll
2011-08-16 22:58:35 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2011-08-16 22:58:35 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2011-08-16 22:58:35 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2011-08-16 22:58:35 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2011-08-16 22:58:35 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2011-08-16 22:58:35 ----A---- C:\Windows\SYSWOW64\authui.dll
2011-08-16 22:58:35 ----A---- C:\Windows\system32\wuaueng.dll
2011-08-16 22:58:35 ----A---- C:\Windows\system32\winsta.dll
2011-08-16 22:58:35 ----A---- C:\Windows\system32\webservices.dll
2011-08-16 22:58:35 ----A---- C:\Windows\system32\sqlsrv32.dll
2011-08-16 22:58:35 ----A---- C:\Windows\system32\spoolsv.exe
2011-08-16 22:58:35 ----A---- C:\Windows\system32\SessEnv.dll
2011-08-16 22:58:34 ----A---- C:\Windows\SYSWOW64\usp10.dll
2011-08-16 22:58:34 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2011-08-16 22:58:34 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2011-08-16 22:58:34 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe
2011-08-16 22:58:34 ----A---- C:\Windows\system32\prncache.dll
2011-08-16 22:58:34 ----A---- C:\Windows\system32\gdi32.dll
2011-08-16 22:58:34 ----A---- C:\Windows\system32\fveapi.dll
2011-08-16 22:58:34 ----A---- C:\Windows\system32\drivers\volsnap.sys
2011-08-16 22:58:34 ----A---- C:\Windows\system32\drivers\msrpc.sys
2011-08-16 22:58:34 ----A---- C:\Windows\system32\dot3api.dll
2011-08-16 22:58:33 ----A---- C:\Windows\SYSWOW64\userenv.dll
2011-08-16 22:58:33 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2011-08-16 22:58:33 ----A---- C:\Windows\system32\wuapi.dll
2011-08-16 22:58:33 ----A---- C:\Windows\system32\WMNetMgr.dll
2011-08-16 22:58:33 ----A---- C:\Windows\system32\wlanpref.dll
2011-08-16 22:58:33 ----A---- C:\Windows\system32\vpnike.dll
2011-08-16 22:58:33 ----A---- C:\Windows\system32\schtasks.exe
2011-08-16 22:58:33 ----A---- C:\Windows\system32\mcmde.dll
2011-08-16 22:58:32 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2011-08-16 22:58:32 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2011-08-16 22:58:32 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2011-08-16 22:58:32 ----A---- C:\Windows\system32\wintrust.dll
2011-08-16 22:58:32 ----A---- C:\Windows\system32\userenv.dll
2011-08-16 22:58:32 ----A---- C:\Windows\system32\photowiz.dll
2011-08-16 22:58:32 ----A---- C:\Windows\system32\evr.dll
2011-08-16 22:58:32 ----A---- C:\Windows\system32\drivers\rdbss.sys
2011-08-16 22:58:32 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2011-08-16 22:58:31 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2011-08-16 22:58:31 ----A---- C:\Windows\SYSWOW64\cmd.exe
2011-08-16 22:58:31 ----A---- C:\Windows\system32\wmpmde.dll
2011-08-16 22:58:31 ----A---- C:\Windows\system32\SyncCenter.dll
2011-08-16 22:58:31 ----A---- C:\Windows\system32\sppobjs.dll
2011-08-16 22:58:31 ----A---- C:\Windows\system32\IPSECSVC.DLL
2011-08-16 22:58:31 ----A---- C:\Windows\system32\FXSSVC.exe
2011-08-16 22:58:31 ----A---- C:\Windows\system32\framedyn.dll
2011-08-16 22:58:31 ----A---- C:\Windows\system32\AudioSes.dll
2011-08-16 22:58:31 ----A---- C:\Windows\system32\aepdu.dll
2011-08-16 22:58:30 ----A---- C:\Windows\system32\WMPEncEn.dll
2011-08-16 22:58:30 ----A---- C:\Windows\system32\wmpeffects.dll
2011-08-16 22:58:30 ----A---- C:\Windows\system32\srvsvc.dll
2011-08-16 22:58:30 ----A---- C:\Windows\system32\shsvcs.dll
2011-08-16 22:58:30 ----A---- C:\Windows\system32\mfreadwrite.dll
2011-08-16 22:58:30 ----A---- C:\Windows\system32\aeinv.dll
2011-08-16 22:58:29 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2011-08-16 22:58:29 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2011-08-16 22:58:29 ----A---- C:\Windows\SYSWOW64\propsys.dll
2011-08-16 22:58:29 ----A---- C:\Windows\SYSWOW64\mfds.dll
2011-08-16 22:58:29 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2011-08-16 22:58:29 ----A---- C:\Windows\system32\WinSATAPI.dll
2011-08-16 22:58:29 ----A---- C:\Windows\system32\stobject.dll
2011-08-16 22:58:29 ----A---- C:\Windows\system32\localsec.dll
2011-08-16 22:58:29 ----A---- C:\Windows\system32\imapi2.dll
2011-08-16 22:58:29 ----A---- C:\Windows\system32\fde.dll
2011-08-16 22:58:29 ----A---- C:\Windows\system32\credui.dll
2011-08-16 22:58:28 ----A---- C:\Windows\SYSWOW64\user32.dll
2011-08-16 22:58:28 ----A---- C:\Windows\system32\netid.dll
2011-08-16 22:58:28 ----A---- C:\Windows\system32\netdiagfx.dll
2011-08-16 22:58:28 ----A---- C:\Windows\system32\iphlpsvc.dll
2011-08-16 22:58:28 ----A---- C:\Windows\system32\inetpp.dll
2011-08-16 22:58:28 ----A---- C:\Windows\system32\drivers\udfs.sys
2011-08-16 22:58:28 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2011-08-16 22:58:28 ----A---- C:\Windows\system32\cdd.dll
2011-08-16 22:58:28 ----A---- C:\Windows\system32\bcryptprimitives.dll
2011-08-16 22:58:27 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2011-08-16 22:58:27 ----A---- C:\Windows\SYSWOW64\azroles.dll
2011-08-16 22:58:27 ----A---- C:\Windows\system32\tcpipcfg.dll
2011-08-16 22:58:27 ----A---- C:\Windows\system32\spp.dll
2011-08-16 22:58:27 ----A---- C:\Windows\system32\QSHVHOST.DLL
2011-08-16 22:58:27 ----A---- C:\Windows\system32\profsvc.dll
2011-08-16 22:58:27 ----A---- C:\Windows\system32\msinfo32.exe
2011-08-16 22:58:27 ----A---- C:\Windows\system32\gameux.dll
2011-08-16 22:58:27 ----A---- C:\Windows\system32\davclnt.dll
2011-08-16 22:58:27 ----A---- C:\Windows\system32\biocpl.dll
2011-08-16 22:58:26 ----A---- C:\Windows\SYSWOW64\themeui.dll
2011-08-16 22:58:26 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2011-08-16 22:58:26 ----A---- C:\Windows\SYSWOW64\spp.dll
2011-08-16 22:58:26 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2011-08-16 22:58:26 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2011-08-16 22:58:26 ----A---- C:\Windows\SYSWOW64\credui.dll
2011-08-16 22:58:26 ----A---- C:\Windows\system32\scansetting.dll
2011-08-16 22:58:26 ----A---- C:\Windows\system32\printui.dll
2011-08-16 22:58:26 ----A---- C:\Windows\system32\pla.dll
2011-08-16 22:58:26 ----A---- C:\Windows\system32\PhotoScreensaver.scr
2011-08-16 22:58:26 ----A---- C:\Windows\system32\mspbda.dll
2011-08-16 22:58:26 ----A---- C:\Windows\splwow64.exe
2011-08-16 22:58:25 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2011-08-16 22:58:25 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2011-08-16 22:58:25 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2011-08-16 22:58:25 ----A---- C:\Windows\system32\wusa.exe
2011-08-16 22:58:25 ----A---- C:\Windows\system32\wiaservc.dll
2011-08-16 22:58:25 ----A---- C:\Windows\system32\vds.exe
2011-08-16 22:58:25 ----A---- C:\Windows\system32\rpchttp.dll
2011-08-16 22:58:25 ----A---- C:\Windows\system32\msdri.dll
2011-08-16 22:58:25 ----A---- C:\Windows\system32\mscms.dll
2011-08-16 22:58:25 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2011-08-16 22:58:25 ----A---- C:\Windows\system32\drivers\pci.sys
2011-08-16 22:58:25 ----A---- C:\Windows\system32\cryptsvc.dll
2011-08-16 22:58:25 ----A---- C:\Windows\system32\aitagent.exe
2011-08-16 22:58:24 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2011-08-16 22:58:24 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2011-08-16 22:58:24 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2011-08-16 22:58:24 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2011-08-16 22:58:24 ----A---- C:\Windows\system32\XpsRasterService.dll
2011-08-16 22:58:24 ----A---- C:\Windows\system32\wisptis.exe
2011-08-16 22:58:24 ----A---- C:\Windows\system32\PkgMgr.exe
2011-08-16 22:58:24 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2011-08-16 22:58:24 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2011-08-16 22:58:23 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2011-08-16 22:58:23 ----A---- C:\Windows\SYSWOW64\evr.dll
2011-08-16 22:58:23 ----A---- C:\Windows\system32\ocsetup.exe
2011-08-16 22:58:23 ----A---- C:\Windows\system32\msi.dll
2011-08-16 22:58:23 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2011-08-16 22:58:22 ----A---- C:\Windows\system32\sppwinob.dll
2011-08-16 22:58:21 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2011-08-16 22:58:21 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2011-08-16 22:58:21 ----A---- C:\Windows\SYSWOW64\calc.exe
2011-08-16 22:58:21 ----A---- C:\Windows\system32\wpdbusenum.dll
2011-08-16 22:58:21 ----A---- C:\Windows\system32\rdpcore.dll
2011-08-16 22:58:21 ----A---- C:\Windows\system32\ocsetapi.dll
2011-08-16 22:58:21 ----A---- C:\Windows\system32\ntshrui.dll
2011-08-16 22:58:21 ----A---- C:\Windows\system32\eapp3hst.dll
2011-08-16 22:58:21 ----A---- C:\Windows\system32\DXP.dll
2011-08-16 22:58:21 ----A---- C:\Windows\system32\drivers\volmgr.sys
2011-08-16 22:58:21 ----A---- C:\Windows\system32\drivers\msdsm.sys
2011-08-16 22:58:21 ----A---- C:\Windows\system32\ci.dll
2011-08-16 22:58:20 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2011-08-16 22:58:20 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2011-08-16 22:58:20 ----A---- C:\Windows\system32\wcncsvc.dll
2011-08-16 22:58:20 ----A---- C:\Windows\system32\upnp.dll
2011-08-16 22:58:20 ----A---- C:\Windows\system32\t2embed.dll
2011-08-16 22:58:20 ----A---- C:\Windows\system32\Robocopy.exe
2011-08-16 22:58:20 ----A---- C:\Windows\system32\mprapi.dll
2011-08-16 22:58:20 ----A---- C:\Windows\system32\eapphost.dll
2011-08-16 22:58:20 ----A---- C:\Windows\system32\drivers\HpSAMD.sys
2011-08-16 22:58:19 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2011-08-16 22:58:19 ----A---- C:\Windows\SYSWOW64\sxs.dll
2011-08-16 22:58:19 ----A---- C:\Windows\SYSWOW64\stobject.dll
2011-08-16 22:58:19 ----A---- C:\Windows\SYSWOW64\netshell.dll
2011-08-16 22:58:19 ----A---- C:\Windows\system32\thumbcache.dll
2011-08-16 22:58:19 ----A---- C:\Windows\system32\scecli.dll
2011-08-16 22:58:19 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2011-08-16 22:58:19 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2011-08-16 22:58:19 ----A---- C:\Windows\system32\hal.dll
2011-08-16 22:58:19 ----A---- C:\Windows\system32\DxpTaskSync.dll
2011-08-16 22:58:19 ----A---- C:\Windows\system32\dwmredir.dll
2011-08-16 22:58:19 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2011-08-16 22:58:19 ----A---- C:\Windows\system32\drivers\fvevol.sys
2011-08-16 22:58:18 ----A---- C:\Windows\SYSWOW64\prncache.dll
2011-08-16 22:58:18 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2011-08-16 22:58:18 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2011-08-16 22:58:18 ----A---- C:\Windows\system32\themeui.dll
2011-08-16 22:58:18 ----A---- C:\Windows\system32\sspicli.dll
2011-08-16 22:58:18 ----A---- C:\Windows\system32\puiobj.dll
2011-08-16 22:58:18 ----A---- C:\Windows\system32\nlaapi.dll
2011-08-16 22:58:18 ----A---- C:\Windows\system32\msasn1.dll
2011-08-16 22:58:18 ----A---- C:\Windows\system32\iasrad.dll
2011-08-16 22:58:18 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys
2011-08-16 22:58:18 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2011-08-16 22:58:17 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2011-08-16 22:58:17 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2011-08-16 22:58:17 ----A---- C:\Windows\SYSWOW64\printui.dll
2011-08-16 22:58:17 ----A---- C:\Windows\SYSWOW64\msi.dll
2011-08-16 22:58:17 ----A---- C:\Windows\system32\onex.dll
2011-08-16 22:58:17 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2011-08-16 22:58:17 ----A---- C:\Windows\system32\aaclient.dll
2011-08-16 22:58:16 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2011-08-16 22:58:16 ----A---- C:\Windows\SYSWOW64\net1.exe
2011-08-16 22:58:16 ----A---- C:\Windows\system32\wdc.dll
2011-08-16 22:58:15 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2011-08-16 22:58:15 ----A---- C:\Windows\system32\wlangpui.dll
2011-08-16 22:58:15 ----A---- C:\Windows\system32\VAN.dll
2011-08-16 22:58:15 ----A---- C:\Windows\system32\StructuredQuery.dll
2011-08-16 22:58:15 ----A---- C:\Windows\system32\sdengin2.dll
2011-08-16 22:58:15 ----A---- C:\Windows\system32\scesrv.dll
2011-08-16 22:58:15 ----A---- C:\Windows\system32\rasmans.dll
2011-08-16 22:58:15 ----A---- C:\Windows\system32\msftedit.dll
2011-08-16 22:58:14 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2011-08-16 22:58:14 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2011-08-16 22:58:14 ----A---- C:\Windows\system32\wscapi.dll
2011-08-16 22:58:14 ----A---- C:\Windows\system32\wiadefui.dll
2011-08-16 22:58:14 ----A---- C:\Windows\system32\SndVol.exe
2011-08-16 22:58:14 ----A---- C:\Windows\system32\samcli.dll
2011-08-16 22:58:14 ----A---- C:\Windows\system32\netcenter.dll
2011-08-16 22:58:14 ----A---- C:\Windows\system32\iasacct.dll
2011-08-16 22:58:14 ----A---- C:\Windows\system32\dskquoui.dll
2011-08-16 22:58:14 ----A---- C:\Windows\system32\drivers\partmgr.sys
2011-08-16 22:58:14 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2011-08-16 22:58:13 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2011-08-16 22:58:13 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2011-08-16 22:58:13 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2011-08-16 22:58:13 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2011-08-16 22:58:13 ----A---- C:\Windows\system32\wucltux.dll
2011-08-16 22:58:13 ----A---- C:\Windows\system32\regapi.dll
2011-08-16 22:58:13 ----A---- C:\Windows\system32\drivers\termdd.sys
2011-08-16 22:58:12 ----A---- C:\Windows\system32\TabSvc.dll
2011-08-16 22:58:12 ----A---- C:\Windows\system32\srchadmin.dll
2011-08-16 22:58:12 ----A---- C:\Windows\system32\QUTIL.DLL
2011-08-16 22:58:12 ----A---- C:\Windows\system32\consent.exe
2011-08-16 22:58:11 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2011-08-16 22:58:11 ----A---- C:\Windows\SYSWOW64\webservices.dll
2011-08-16 22:58:11 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2011-08-16 22:58:11 ----A---- C:\Windows\SYSWOW64\pnidui.dll
2011-08-16 22:58:11 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2011-08-16 22:58:11 ----A---- C:\Windows\SYSWOW64\fde.dll
2011-08-16 22:58:11 ----A---- C:\Windows\system32\WUDFSvc.dll
2011-08-16 22:58:11 ----A---- C:\Windows\system32\wksprt.exe
2011-08-16 22:58:11 ----A---- C:\Windows\system32\taskhost.exe
2011-08-16 22:58:11 ----A---- C:\Windows\system32\setupcl.exe
2011-08-16 22:58:11 ----A---- C:\Windows\system32\drivers\msahci.sys
2011-08-16 22:58:10 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2011-08-16 22:58:10 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2011-08-16 22:58:10 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll
2011-08-16 22:58:10 ----A---- C:\Windows\system32\rastls.dll
2011-08-16 22:58:10 ----A---- C:\Windows\system32\drivers\acpi.sys
2011-08-16 22:58:09 ----A---- C:\Windows\system32\tapisrv.dll
2011-08-16 22:58:09 ----A---- C:\Windows\system32\netiohlp.dll
2011-08-16 22:58:09 ----A---- C:\Windows\system32\msconfig.exe
2011-08-16 22:58:09 ----A---- C:\Windows\system32\mimefilt.dll
2011-08-16 22:58:09 ----A---- C:\Windows\system32\ListSvc.dll
2011-08-16 22:58:09 ----A---- C:\Windows\system32\drivers\raspptp.sys
2011-08-16 22:58:08 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2011-08-16 22:58:08 ----A---- C:\Windows\SYSWOW64\pla.dll
2011-08-16 22:58:08 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2011-08-16 22:58:08 ----A---- C:\Windows\system32\lsmproxy.dll
2011-08-16 22:58:08 ----A---- C:\Windows\system32\hgcpl.dll
2011-08-16 22:58:08 ----A---- C:\Windows\system32\fdeploy.dll
2011-08-16 22:58:08 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2011-08-16 22:58:08 ----A---- C:\Windows\system32\drivers\ks.sys
2011-08-16 22:58:08 ----A---- C:\Windows\system32\clusapi.dll
2011-08-16 22:58:08 ----A---- C:\Windows\system32\basecsp.dll
2011-08-16 22:58:07 ----A---- C:\Windows\SYSWOW64\winsta.dll
2011-08-16 22:58:07 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2011-08-16 22:58:07 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2011-08-16 22:58:07 ----A---- C:\Windows\SYSWOW64\imapi2.dll
2011-08-16 22:58:07 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2011-08-16 22:58:07 ----A---- C:\Windows\system32\riched20.dll
2011-08-16 22:58:07 ----A---- C:\Windows\system32\mtxclu.dll
2011-08-16 22:58:07 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2011-08-16 22:58:06 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2011-08-16 22:58:06 ----A---- C:\Windows\SYSWOW64\gameux.dll
2011-08-16 22:58:06 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll
2011-08-16 22:58:06 ----A---- C:\Windows\system32\RpcRtRemote.dll
2011-08-16 22:58:06 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2011-08-16 22:58:06 ----A---- C:\Windows\system32\dnscmmc.dll
2011-08-16 22:58:05 ----A---- C:\Windows\SYSWOW64\WMPEncEn.dll
2011-08-16 22:58:05 ----A---- C:\Windows\SYSWOW64\winmm.dll
2011-08-16 22:58:05 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2011-08-16 22:58:05 ----A---- C:\Windows\SYSWOW64\onex.dll
2011-08-16 22:58:05 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2011-08-16 22:58:05 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2011-08-16 22:58:05 ----A---- C:\Windows\system32\themecpl.dll
2011-08-16 22:58:05 ----A---- C:\Windows\system32\sharemediacpl.dll
2011-08-16 22:58:05 ----A---- C:\Windows\system32\SensorsCpl.dll
2011-08-16 22:58:05 ----A---- C:\Windows\system32\powercpl.dll
2011-08-16 22:58:05 ----A---- C:\Windows\system32\netjoin.dll
2011-08-16 22:58:05 ----A---- C:\Windows\system32\nci.dll
2011-08-16 22:58:05 ----A---- C:\Windows\system32\logoncli.dll
2011-08-16 22:58:05 ----A---- C:\Windows\system32\eudcedit.exe
2011-08-16 22:58:04 ----A---- C:\Windows\SYSWOW64\samcli.dll
2011-08-16 22:58:04 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2011-08-16 22:58:04 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2011-08-16 22:58:04 ----A---- C:\Windows\SYSWOW64\autochk.exe
2011-08-16 22:58:04 ----A---- C:\Windows\system32\wkssvc.dll
2011-08-16 22:58:04 ----A---- C:\Windows\system32\vpnikeapi.dll
2011-08-16 22:58:04 ----A---- C:\Windows\system32\Narrator.exe
2011-08-16 22:58:04 ----A---- C:\Windows\system32\Faultrep.dll
2011-08-16 22:58:04 ----A---- C:\Windows\system32\comctl32.dll
2011-08-16 22:58:03 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2011-08-16 22:58:03 ----A---- C:\Windows\SYSWOW64\regapi.dll
2011-08-16 22:58:03 ----A---- C:\Windows\SYSWOW64\proquota.exe
2011-08-16 22:58:03 ----A---- C:\Windows\SYSWOW64\msutb.dll
2011-08-16 22:58:03 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2011-08-16 22:58:03 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2011-08-16 22:58:03 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2011-08-16 22:58:03 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2011-08-16 22:58:03 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2011-08-16 22:58:03 ----A---- C:\Windows\system32\sppcomapi.dll
2011-08-16 22:58:03 ----A---- C:\Windows\system32\nshipsec.dll
2011-08-16 22:58:03 ----A---- C:\Windows\system32\fms.dll
2011-08-16 22:58:03 ----A---- C:\Windows\system32\cabview.dll
2011-08-16 22:58:03 ----A---- C:\Windows\system32\autochk.exe
2011-08-16 22:58:03 ----A---- C:\Windows\system32\autofmt.exe
2011-08-16 22:58:03 ----A---- C:\Windows\system32\autoconv.exe
2011-08-16 22:58:03 ----A---- C:\Windows\system32\audiodg.exe
2011-08-16 22:58:02 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2011-08-16 22:58:02 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2011-08-16 22:58:02 ----A---- C:\Windows\SYSWOW64\srchadmin.dll
2011-08-16 22:58:02 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2011-08-16 22:58:02 ----A---- C:\Windows\SYSWOW64\powercpl.dll
2011-08-16 22:58:02 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2011-08-16 22:58:02 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2011-08-16 22:58:02 ----A---- C:\Windows\system32\wpd_ci.dll
2011-08-16 22:58:02 ----A---- C:\Windows\system32\shsetup.dll
2011-08-16 22:58:02 ----A---- C:\Windows\system32\sdclt.exe
2011-08-16 22:58:02 ----A---- C:\Windows\system32\bcdsrv.dll
2011-08-16 22:58:01 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2011-08-16 22:58:01 ----A---- C:\Windows\SYSWOW64\mscorier.dll

2011-08-16 22:58:01 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2011-08-16 22:58:01 ----A---- C:\Windows\system32\wwanconn.dll
2011-08-16 22:58:01 ----A---- C:\Windows\system32\wlanui.dll
2011-08-16 22:58:01 ----A---- C:\Windows\system32\prntvpt.dll
2011-08-16 22:58:01 ----A---- C:\Windows\system32\mscorier.dll
2011-08-16 22:58:01 ----A---- C:\Windows\system32\drivers\winusb.sys
2011-08-16 22:58:01 ----A---- C:\Windows\system32\drivers\wanarp.sys
2011-08-16 22:58:01 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2011-08-16 22:58:01 ----A---- C:\Windows\system32\drivers\scsiport.sys
2011-08-16 22:58:00 ----A---- C:\Windows\system32\SmiEngine.dll
2011-08-16 22:58:00 ----A---- C:\Windows\system32\dps.dll
2011-08-16 22:57:59 ----A---- C:\Windows\SYSWOW64\wdc.dll
2011-08-16 22:57:59 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL
2011-08-16 22:57:59 ----A---- C:\Windows\SYSWOW64\netid.dll
2011-08-16 22:57:59 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2011-08-16 22:57:59 ----A---- C:\Windows\system32\qedit.dll
2011-08-16 22:57:59 ----A---- C:\Windows\system32\mprddm.dll
2011-08-16 22:57:59 ----A---- C:\Windows\system32\fontext.dll
2011-08-16 22:57:59 ----A---- C:\Windows\system32\drivers\hidclass.sys
2011-08-16 22:57:59 ----A---- C:\Windows\system32\Display.dll
2011-08-16 22:57:59 ----A---- C:\Windows\system32\credssp.dll
2011-08-16 22:57:59 ----A---- C:\Windows\system32\batmeter.dll
2011-08-16 22:57:59 ----A---- C:\Windows\system32\AxInstSv.dll
2011-08-16 22:57:58 ----A---- C:\Windows\SYSWOW64\untfs.dll
2011-08-16 22:57:58 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2011-08-16 22:57:58 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2011-08-16 22:57:58 ----A---- C:\Windows\SYSWOW64\rastls.dll
2011-08-16 22:57:58 ----A---- C:\Windows\system32\wmpsrcwp.dll
2011-08-16 22:57:58 ----A---- C:\Windows\system32\mblctr.exe
2011-08-16 22:57:57 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2011-08-16 22:57:57 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2011-08-16 22:57:57 ----A---- C:\Windows\SYSWOW64\Vault.dll
2011-08-16 22:57:57 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll
2011-08-16 22:57:57 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2011-08-16 22:57:57 ----A---- C:\Windows\SYSWOW64\nci.dll
2011-08-16 22:57:57 ----A---- C:\Windows\system32\usercpl.dll
2011-08-16 22:57:57 ----A---- C:\Windows\system32\rtutils.dll
2011-08-16 22:57:57 ----A---- C:\Windows\system32\provsvc.dll
2011-08-16 22:57:57 ----A---- C:\Windows\system32\DiagCpl.dll
2011-08-16 22:57:57 ----A---- C:\Windows\system32\bootres.dll
2011-08-16 22:57:56 ----A---- C:\Windows\system32\wpccpl.dll
2011-08-16 22:57:56 ----A---- C:\Windows\system32\sppsvc.exe
2011-08-16 22:57:56 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2011-08-16 22:57:55 ----A---- C:\Windows\SYSWOW64\taskmgr.exe
2011-08-16 22:57:55 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2011-08-16 22:57:55 ----A---- C:\Windows\SYSWOW64\DxpTaskSync.dll
2011-08-16 22:57:55 ----A---- C:\Windows\SYSWOW64\Display.dll
2011-08-16 22:57:55 ----A---- C:\Windows\system32\SndVolSSO.dll
2011-08-16 22:57:55 ----A---- C:\Windows\system32\rasppp.dll
2011-08-16 22:57:55 ----A---- C:\Windows\system32\dxdiagn.dll
2011-08-16 22:57:55 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2011-08-16 22:57:55 ----A---- C:\Windows\system32\dot3cfg.dll
2011-08-16 22:57:54 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2011-08-16 22:57:54 ----A---- C:\Windows\SYSWOW64\userinit.exe
2011-08-16 22:57:54 ----A---- C:\Windows\SYSWOW64\termmgr.dll
2011-08-16 22:57:54 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2011-08-16 22:57:54 ----A---- C:\Windows\SYSWOW64\eudcedit.exe
2011-08-16 22:57:54 ----A---- C:\Windows\system32\taskmgr.exe
2011-08-16 22:57:54 ----A---- C:\Windows\system32\shdocvw.dll
2011-08-16 22:57:54 ----A---- C:\Windows\system32\proquota.exe
2011-08-16 22:57:54 ----A---- C:\Windows\system32\prnfldr.dll
2011-08-16 22:57:54 ----A---- C:\Windows\system32\pdh.dll
2011-08-16 22:57:54 ----A---- C:\Windows\system32\hbaapi.dll
2011-08-16 22:57:54 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2011-08-16 22:57:53 ----A---- C:\Windows\SYSWOW64\wiadefui.dll
2011-08-16 22:57:53 ----A---- C:\Windows\SYSWOW64\sppcomapi.dll
2011-08-16 22:57:53 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2011-08-16 22:57:53 ----A---- C:\Windows\SYSWOW64\rasppp.dll
2011-08-16 22:57:53 ----A---- C:\Windows\SYSWOW64\logoncli.dll
2011-08-16 22:57:53 ----A---- C:\Windows\SYSWOW64\cabview.dll
2011-08-16 22:57:53 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2011-08-16 22:57:53 ----A---- C:\Windows\system32\untfs.dll
2011-08-16 22:57:53 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2011-08-16 22:57:53 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2011-08-16 22:57:53 ----A---- C:\Windows\system32\drivers\ataport.sys
2011-08-16 22:57:52 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll
2011-08-16 22:57:52 ----A---- C:\Windows\SYSWOW64\FirewallControlPanel.dll
2011-08-16 22:57:52 ----A---- C:\Windows\system32\userinit.exe
2011-08-16 22:57:52 ----A---- C:\Windows\system32\rdpcorekmts.dll
2011-08-16 22:57:52 ----A---- C:\Windows\system32\accessibilitycpl.dll
2011-08-16 22:57:51 ----A---- C:\Windows\SYSWOW64\themecpl.dll
2011-08-16 22:57:51 ----A---- C:\Windows\SYSWOW64\PhotoScreensaver.scr
2011-08-16 22:57:51 ----A---- C:\Windows\SYSWOW64\hgcpl.dll
2011-08-16 22:57:51 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2011-08-16 22:57:51 ----A---- C:\Windows\SYSWOW64\dnscmmc.dll
2011-08-16 22:57:51 ----A---- C:\Windows\system32\zipfldr.dll
2011-08-16 22:57:51 ----A---- C:\Windows\system32\slui.exe
2011-08-16 22:57:51 ----A---- C:\Windows\system32\msieftp.dll
2011-08-16 22:57:51 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2011-08-16 22:57:50 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2011-08-16 22:57:50 ----A---- C:\Windows\SYSWOW64\scecli.dll
2011-08-16 22:57:50 ----A---- C:\Windows\SYSWOW64\mscories.dll
2011-08-16 22:57:50 ----A---- C:\Windows\SYSWOW64\mscms.dll
2011-08-16 22:57:50 ----A---- C:\Windows\SYSWOW64\localsec.dll
2011-08-16 22:57:50 ----A---- C:\Windows\SYSWOW64\fontext.dll
2011-08-16 22:57:50 ----A---- C:\Windows\system32\sud.dll
2011-08-16 22:57:50 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2011-08-16 22:57:50 ----A---- C:\Windows\system32\DeviceCenter.dll
2011-08-16 22:57:49 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll
2011-08-16 22:57:49 ----A---- C:\Windows\SYSWOW64\mprddm.dll
2011-08-16 22:57:49 ----A---- C:\Windows\SYSWOW64\iasacct.dll
2011-08-16 22:57:49 ----A---- C:\Windows\system32\taskbarcpl.dll
2011-08-16 22:57:49 ----A---- C:\Windows\system32\srcore.dll
2011-08-16 22:57:49 ----A---- C:\Windows\system32\qdvd.dll
2011-08-16 22:57:49 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2011-08-16 22:57:49 ----A---- C:\Windows\system32\networkmap.dll
2011-08-16 22:57:49 ----A---- C:\Windows\system32\dot3svc.dll
2011-08-16 22:57:49 ----A---- C:\Windows\system32\cryptui.dll
2011-08-16 22:57:49 ----A---- C:\Windows\system32\ActionCenter.dll
2011-08-16 22:57:48 ----A---- C:\Windows\SYSWOW64\wlanui.dll
2011-08-16 22:57:48 ----A---- C:\Windows\SYSWOW64\VAN.dll
2011-08-16 22:57:48 ----A---- C:\Windows\SYSWOW64\usercpl.dll
2011-08-16 22:57:48 ----A---- C:\Windows\SYSWOW64\qedit.dll
2011-08-16 22:57:48 ----A---- C:\Windows\SYSWOW64\prntvpt.dll
2011-08-16 22:57:48 ----A---- C:\Windows\SYSWOW64\PerfCenterCPL.dll
2011-08-16 22:57:48 ----A---- C:\Windows\SYSWOW64\batmeter.dll
2011-08-16 22:57:48 ----A---- C:\Windows\system32\twext.dll
2011-08-16 22:57:47 ----A---- C:\Windows\SYSWOW64\w32tm.exe
2011-08-16 22:57:47 ----A---- C:\Windows\SYSWOW64\spwizeng.dll
2011-08-16 22:57:47 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2011-08-16 22:57:47 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2011-08-16 22:57:47 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2011-08-16 22:57:47 ----A---- C:\Windows\system32\uxlib.dll
2011-08-16 22:57:47 ----A---- C:\Windows\system32\sisbkup.dll
2011-08-16 22:57:47 ----A---- C:\Windows\system32\recovery.dll
2011-08-16 22:57:47 ----A---- C:\Windows\system32\rdpwsx.dll
2011-08-16 22:57:47 ----A---- C:\Windows\system32\OobeFldr.dll
2011-08-16 22:57:47 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2011-08-16 22:57:47 ----A---- C:\Windows\system32\isoburn.exe
2011-08-16 22:57:47 ----A---- C:\Windows\system32\dsuiext.dll
2011-08-16 22:57:47 ----A---- C:\Windows\system32\cca.dll
2011-08-16 22:57:47 ----A---- C:\Windows\system32\bcdedit.exe
2011-08-16 22:57:47 ----A---- C:\Windows\system32\azroleui.dll
2011-08-16 22:57:47 ----A---- C:\Windows\system32\asycfilt.dll
2011-08-16 22:57:46 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2011-08-16 22:57:46 ----A---- C:\Windows\SYSWOW64\MSAC3ENC.DLL
2011-08-16 22:57:46 ----A---- C:\Windows\SYSWOW64\fdeploy.dll
2011-08-16 22:57:46 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2011-08-16 22:57:46 ----A---- C:\Windows\SYSWOW64\accessibilitycpl.dll
2011-08-16 22:57:46 ----A---- C:\Windows\system32\tzutil.exe
2011-08-16 22:57:46 ----A---- C:\Windows\system32\systemcpl.dll
2011-08-16 22:57:46 ----A---- C:\Windows\system32\syncui.dll
2011-08-16 22:57:46 ----A---- C:\Windows\system32\sdcpl.dll
2011-08-16 22:57:46 ----A---- C:\Windows\system32\recdisc.exe
2011-08-16 22:57:46 ----A---- C:\Windows\system32\netplwiz.dll
2011-08-16 22:57:46 ----A---- C:\Windows\system32\httpapi.dll
2011-08-16 22:57:46 ----A---- C:\Windows\system32\efscore.dll
2011-08-16 22:57:45 ----A---- C:\Windows\SYSWOW64\networkmap.dll
2011-08-16 22:57:45 ----A---- C:\Windows\SYSWOW64\netjoin.dll
2011-08-16 22:57:45 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2011-08-16 22:57:45 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2011-08-16 22:57:45 ----A---- C:\Windows\SYSWOW64\adsldp.dll
2011-08-16 22:57:45 ----A---- C:\Windows\system32\wlanmsm.dll
2011-08-16 22:57:45 ----A---- C:\Windows\system32\sysclass.dll
2011-08-16 22:57:45 ----A---- C:\Windows\system32\sspisrv.dll
2011-08-16 22:57:45 ----A---- C:\Windows\system32\shwebsvc.dll
2011-08-16 22:57:45 ----A---- C:\Windows\system32\sdrsvc.dll
2011-08-16 22:57:45 ----A---- C:\Windows\system32\ncryptui.dll
2011-08-16 22:57:45 ----A---- C:\Windows\system32\drivers\mpio.sys
2011-08-16 22:57:45 ----A---- C:\Windows\system32\certcli.dll
2011-08-16 22:57:45 ----A---- C:\Windows\system32\autoplay.dll
2011-08-16 22:57:45 ----A---- C:\Windows\system32\appinfo.dll
2011-08-16 22:57:45 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2011-08-16 22:57:44 ----A---- C:\Windows\SYSWOW64\wusa.exe
2011-08-16 22:57:44 ----A---- C:\Windows\SYSWOW64\prnfldr.dll
2011-08-16 22:57:44 ----A---- C:\Windows\SYSWOW64\OnLineIDCpl.dll
2011-08-16 22:57:44 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2011-08-16 22:57:44 ----A---- C:\Windows\system32\spwizeng.dll
2011-08-16 22:57:44 ----A---- C:\Windows\system32\msvidc32.dll
2011-08-16 22:57:44 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2011-08-16 22:57:43 ----A---- C:\Windows\SYSWOW64\sud.dll
2011-08-16 22:57:43 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2011-08-16 22:57:43 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2011-08-16 22:57:43 ----A---- C:\Windows\SYSWOW64\MediaMetadataHandler.dll
2011-08-16 22:57:43 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll
2011-08-16 22:57:43 ----A---- C:\Windows\SYSWOW64\iasrad.dll
2011-08-16 22:57:43 ----A---- C:\Windows\SYSWOW64\credssp.dll
2011-08-16 22:57:43 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2011-08-16 22:57:43 ----A---- C:\Windows\system32\vdsutil.dll
2011-08-16 22:57:43 ----A---- C:\Windows\system32\termmgr.dll
2011-08-16 22:57:43 ----A---- C:\Windows\system32\sethc.exe
2011-08-16 22:57:43 ----A---- C:\Windows\system32\msscp.dll
2011-08-16 22:57:43 ----A---- C:\Windows\system32\MFPlay.dll
2011-08-16 22:57:42 ----A---- C:\Windows\SYSWOW64\sisbkup.dll
2011-08-16 22:57:42 ----A---- C:\Windows\SYSWOW64\ftp.exe
2011-08-16 22:57:42 ----A---- C:\Windows\SYSWOW64\dot3cfg.dll
2011-08-16 22:57:42 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll
2011-08-16 22:57:42 ----A---- C:\Windows\system32\tsgqec.dll
2011-08-16 22:57:42 ----A---- C:\Windows\system32\sqlcese30.dll
2011-08-16 22:57:42 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2011-08-16 22:57:42 ----A---- C:\Windows\system32\rstrui.exe
2011-08-16 22:57:42 ----A---- C:\Windows\system32\ReAgent.dll
2011-08-16 22:57:42 ----A---- C:\Windows\system32\ntlanman.dll
2011-08-16 22:57:41 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll
2011-08-16 22:57:41 ----A---- C:\Windows\SYSWOW64\ifsutil.dll
2011-08-16 22:57:41 ----A---- C:\Windows\SYSWOW64\efscore.dll
2011-08-16 22:57:41 ----A---- C:\Windows\SYSWOW64\ActionCenterCPL.dll
2011-08-16 22:57:41 ----A---- C:\Windows\system32\wwanprotdim.dll
2011-08-16 22:57:41 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2011-08-16 22:57:41 ----A---- C:\Windows\system32\ssText3d.scr
2011-08-16 22:57:41 ----A---- C:\Windows\system32\secur32.dll
2011-08-16 22:57:41 ----A---- C:\Windows\system32\rdpd3d.dll
2011-08-16 22:57:41 ----A---- C:\Windows\system32\iyuv_32.dll
2011-08-16 22:57:41 ----A---- C:\Windows\system32\iTVData.dll
2011-08-16 22:57:41 ----A---- C:\Windows\system32\iprtrmgr.dll
2011-08-16 22:57:41 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2011-08-16 22:57:40 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2011-08-16 22:57:40 ----A---- C:\Windows\SYSWOW64\syncui.dll
2011-08-16 22:57:40 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2011-08-16 22:57:40 ----A---- C:\Windows\SYSWOW64\ntlanman.dll
2011-08-16 22:57:40 ----A---- C:\Windows\SYSWOW64\dskquoui.dll
2011-08-16 22:57:40 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll
2011-08-16 22:57:40 ----A---- C:\Windows\SYSWOW64\autoplay.dll
2011-08-16 22:57:40 ----A---- C:\Windows\system32\wmdrmsdk.dll
2011-08-16 22:57:40 ----A---- C:\Windows\system32\srvcli.dll
2011-08-16 22:57:40 ----A---- C:\Windows\system32\slwga.dll
2011-08-16 22:57:40 ----A---- C:\Windows\system32\msiexec.exe
2011-08-16 22:57:40 ----A---- C:\Windows\system32\drmmgrtn.dll
2011-08-16 22:57:39 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2011-08-16 22:57:39 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2011-08-16 22:57:39 ----A---- C:\Windows\SYSWOW64\sethc.exe
2011-08-16 22:57:39 ----A---- C:\Windows\SYSWOW64\riched20.dll
2011-08-16 22:57:39 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll
2011-08-16 22:57:39 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2011-08-16 22:57:39 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2011-08-16 22:57:39 ----A---- C:\Windows\system32\wavemsp.dll
2011-08-16 22:57:39 ----A---- C:\Windows\system32\srrstr.dll
2011-08-16 22:57:39 ----A---- C:\Windows\system32\ntprint.dll
2011-08-16 22:57:39 ----A---- C:\Windows\system32\nslookup.exe
2011-08-16 22:57:39 ----A---- C:\Windows\system32\NAPHLPR.DLL
2011-08-16 22:57:39 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2011-08-16 22:57:39 ----A---- C:\Windows\system32\bcdboot.exe
2011-08-16 22:57:39 ----A---- C:\Windows\system32\acppage.dll
2011-08-16 22:57:38 ----A---- C:\Windows\SYSWOW64\wmpsrcwp.dll
2011-08-16 22:57:38 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2011-08-16 22:57:38 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL
2011-08-16 22:57:38 ----A---- C:\Windows\SYSWOW64\migisol.dll
2011-08-16 22:57:38 ----A---- C:\Windows\SYSWOW64\fms.dll
2011-08-16 22:57:38 ----A---- C:\Windows\SYSWOW64\dpx.dll
2011-08-16 22:57:38 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2011-08-16 22:57:38 ----A---- C:\Windows\SYSWOW64\activeds.dll
2011-08-16 22:57:38 ----A---- C:\Windows\system32\TSpkg.dll
2011-08-16 22:57:38 ----A---- C:\Windows\system32\sppnp.dll
2011-08-16 22:57:38 ----A---- C:\Windows\system32\networkexplorer.dll
2011-08-16 22:57:38 ----A---- C:\Windows\system32\certprop.dll
2011-08-16 22:57:37 ----A---- C:\Windows\SYSWOW64\wavemsp.dll
2011-08-16 22:57:37 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2011-08-16 22:57:37 ----A---- C:\Windows\SYSWOW64\nshipsec.dll
2011-08-16 22:57:37 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2011-08-16 22:57:37 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2011-08-16 22:57:37 ----A---- C:\Windows\SYSWOW64\isoburn.exe
2011-08-16 22:57:37 ----A---- C:\Windows\SYSWOW64\httpapi.dll
2011-08-16 22:57:37 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2011-08-16 22:57:37 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2011-08-16 22:57:37 ----A---- C:\Windows\system32\wkscli.dll
2011-08-16 22:57:37 ----A---- C:\Windows\system32\WinSCard.dll
2011-08-16 22:57:37 ----A---- C:\Windows\system32\remotepg.dll
2011-08-16 22:57:37 ----A---- C:\Windows\system32\dfrgui.exe
2011-08-16 22:57:37 ----A---- C:\Windows\system32\cdosys.dll
2011-08-16 22:57:37 ----A---- C:\Windows\system32\cabinet.dll
2011-08-16 22:57:36 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2011-08-16 22:57:36 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2011-08-16 22:57:36 ----A---- C:\Windows\SYSWOW64\tzutil.exe
2011-08-16 22:57:36 ----A---- C:\Windows\SYSWOW64\provsvc.dll
2011-08-16 22:57:36 ----A---- C:\Windows\SYSWOW64\dsuiext.dll
2011-08-16 22:57:36 ----A---- C:\Windows\SYSWOW64\dot3ui.dll
2011-08-16 22:57:36 ----A---- C:\Windows\SYSWOW64\dfrgui.exe
2011-08-16 22:57:36 ----A---- C:\Windows\system32\wvc.dll
2011-08-16 22:57:36 ----A---- C:\Windows\system32\wuwebv.dll
2011-08-16 22:57:36 ----A---- C:\Windows\system32\wsqmcons.exe
2011-08-16 22:57:36 ----A---- C:\Windows\system32\wsnmp32.dll
2011-08-16 22:57:36 ----A---- C:\Windows\system32\wmpdxm.dll
2011-08-16 22:57:36 ----A---- C:\Windows\system32\net1.exe
2011-08-16 22:57:36 ----A---- C:\Windows\system32\ftp.exe
2011-08-16 22:57:35 ----A---- C:\Windows\SYSWOW64\wvc.dll
2011-08-16 22:57:35 ----A---- C:\Windows\SYSWOW64\wtsapi32.dll
2011-08-16 22:57:35 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2011-08-16 22:57:35 ----A---- C:\Windows\SYSWOW64\ocsetup.exe
2011-08-16 22:57:35 ----A---- C:\Windows\system32\wmdrmdev.dll
2011-08-16 22:57:35 ----A---- C:\Windows\system32\WerFaultSecure.exe
2011-08-16 22:57:35 ----A---- C:\Windows\system32\mfps.dll
2011-08-16 22:57:35 ----A---- C:\Windows\system32\blackbox.dll
2011-08-16 22:57:34 ----A---- C:\Windows\SYSWOW64\twext.dll
2011-08-16 22:57:34 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2011-08-16 22:57:34 ----A---- C:\Windows\SYSWOW64\PkgMgr.exe
2011-08-16 22:57:34 ----A---- C:\Windows\SYSWOW64\mstask.dll
2011-08-16 22:57:34 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2011-08-16 22:57:34 ----A---- C:\Windows\system32\msyuv.dll
2011-08-16 22:57:34 ----A---- C:\Windows\system32\mapistub.dll
2011-08-16 22:57:34 ----A---- C:\Windows\system32\mapi32.dll
2011-08-16 22:57:34 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2011-08-16 22:57:34 ----A---- C:\Windows\system32\Bubbles.scr
2011-08-16 22:57:33 ----A---- C:\Windows\twain_32.dll
2011-08-16 22:57:33 ----A---- C:\Windows\SYSWOW64\uxlib.dll
2011-08-16 22:57:33 ----A---- C:\Windows\SYSWOW64\slwga.dll
2011-08-16 22:57:33 ----A---- C:\Windows\SYSWOW64\setupugc.exe
2011-08-16 22:57:33 ----A---- C:\Windows\SYSWOW64\qcap.dll
2011-08-16 22:57:33 ----A---- C:\Windows\SYSWOW64\qasf.dll
2011-08-16 22:57:33 ----A---- C:\Windows\system32\WUDFPlatform.dll
2011-08-16 22:57:33 ----A---- C:\Windows\system32\unimdmat.dll
2011-08-16 22:57:33 ----A---- C:\Windows\system32\tsbyuv.dll
2011-08-16 22:57:33 ----A---- C:\Windows\system32\seclogon.dll
2011-08-16 22:57:33 ----A---- C:\Windows\system32\OpcServices.dll
2011-08-16 22:57:33 ----A---- C:\Windows\system32\msrle32.dll
2011-08-16 22:57:33 ----A---- C:\Windows\system32\iscsium.dll
2011-08-16 22:57:33 ----A---- C:\Windows\system32\ifsutil.dll
2011-08-16 22:57:33 ----A---- C:\Windows\system32\diskraid.exe
2011-08-16 22:57:32 ----A---- C:\Windows\SYSWOW64\ssText3d.scr
2011-08-16 22:57:32 ----A---- C:\Windows\SYSWOW64\msvfw32.dll
2011-08-16 22:57:32 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2011-08-16 22:57:32 ----A---- C:\Windows\SYSWOW64\audiodev.dll
2011-08-16 22:57:32 ----A---- C:\Windows\system32\Ribbons.scr
2011-08-16 22:57:32 ----A---- C:\Windows\system32\Mystify.scr
2011-08-16 22:57:32 ----A---- C:\Windows\system32\drivers\umbus.sys
2011-08-16 22:57:31 ----A---- C:\Windows\SYSWOW64\WPDShServiceObj.dll
2011-08-16 22:57:31 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2011-08-16 22:57:31 ----A---- C:\Windows\SYSWOW64\wimserv.exe
2011-08-16 22:57:31 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2011-08-16 22:57:31 ----A---- C:\Windows\SYSWOW64\nslookup.exe
2011-08-16 22:57:31 ----A---- C:\Windows\SYSWOW64\msscp.dll
2011-08-16 22:57:31 ----A---- C:\Windows\SYSWOW64\diskraid.exe
2011-08-16 22:57:31 ----A---- C:\Windows\SYSWOW64\DevicePairingFolder.dll
2011-08-16 22:57:31 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2011-08-16 22:57:31 ----A---- C:\Windows\system32\wmpshell.dll
2011-08-16 22:57:31 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2011-08-16 22:57:31 ----A---- C:\Windows\system32\rdpencom.dll
2011-08-16 22:57:31 ----A---- C:\Windows\system32\perfmon.exe
2011-08-16 22:57:31 ----A---- C:\Windows\system32\netutils.dll
2011-08-16 22:57:31 ----A---- C:\Windows\system32\muifontsetup.dll
2011-08-16 22:57:31 ----A---- C:\Windows\system32\d3d10level9.dll
2011-08-16 22:57:31 ----A---- C:\Windows\system32\AzSqlExt.dll
2011-08-16 22:57:30 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2011-08-16 22:57:30 ----A---- C:\Windows\SYSWOW64\rdpencom.dll
2011-08-16 22:57:30 ----A---- C:\Windows\SYSWOW64\perfmon.exe
2011-08-16 22:57:30 ----A---- C:\Windows\SYSWOW64\acppage.dll
2011-08-16 22:57:30 ----A---- C:\Windows\system32\umb.dll
2011-08-16 22:57:30 ----A---- C:\Windows\system32\tlscsp.dll
2011-08-16 22:57:30 ----A---- C:\Windows\system32\qasf.dll
2011-08-16 22:57:30 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2011-08-16 22:57:30 ----A---- C:\Windows\system32\dbghelp.dll
2011-08-16 22:57:30 ----A---- C:\Windows\system32\browser.dll
2011-08-16 22:57:30 ----A---- C:\Windows\system32\ActionQueue.dll
2011-08-16 22:57:29 ----A---- C:\Windows\SYSWOW64\remotepg.dll
2011-08-16 22:57:29 ----A---- C:\Windows\SYSWOW64\raschap.dll
2011-08-16 22:57:29 ----A---- C:\Windows\SYSWOW64\QUTIL.DLL
2011-08-16 22:57:29 ----A---- C:\Windows\SYSWOW64\networkexplorer.dll
2011-08-16 22:57:29 ----A---- C:\Windows\SYSWOW64\NAPCRYPT.DLL
2011-08-16 22:57:29 ----A---- C:\Windows\SYSWOW64\input.dll
2011-08-16 22:57:29 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2011-08-16 22:57:29 ----A---- C:\Windows\system32\wpdwcn.dll
2011-08-16 22:57:29 ----A---- C:\Windows\system32\WMADMOD.DLL
2011-08-16 22:57:29 ----A---- C:\Windows\system32\wiavideo.dll
2011-08-16 22:57:29 ----A---- C:\Windows\system32\syssetup.dll
2011-08-16 22:57:29 ----A---- C:\Windows\system32\runonce.exe
2011-08-16 22:57:29 ----A---- C:\Windows\system32\raschap.dll
2011-08-16 22:57:29 ----A---- C:\Windows\system32\FXSAPI.dll
2011-08-16 22:57:29 ----A---- C:\Windows\bfsvc.exe
2011-08-16 22:57:28 ----A---- C:\Windows\SYSWOW64\wmpdxm.dll
2011-08-16 22:57:28 ----A---- C:\Windows\SYSWOW64\vpnikeapi.dll
2011-08-16 22:57:28 ----A---- C:\Windows\SYSWOW64\vdsbas.dll
2011-08-16 22:57:28 ----A---- C:\Windows\SYSWOW64\UserAccountControlSettings.dll
2011-08-16 22:57:28 ----A---- C:\Windows\SYSWOW64\onexui.dll
2011-08-16 22:57:28 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2011-08-16 22:57:28 ----A---- C:\Windows\SYSWOW64\ocsetapi.dll
2011-08-16 22:57:28 ----A---- C:\Windows\SYSWOW64\iTVData.dll
2011-08-16 22:57:28 ----A---- C:\Windows\system32\WMVSDECD.DLL
2011-08-16 22:57:28 ----A---- C:\Windows\system32\vdsbas.dll
2011-08-16 22:57:28 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2011-08-16 22:57:28 ----A---- C:\Windows\system32\MdSched.exe
2011-08-16 22:57:28 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2011-08-16 22:57:27 ----A---- C:\Windows\SYSWOW64\wpdwcn.dll
2011-08-16 22:57:27 ----A---- C:\Windows\SYSWOW64\runonce.exe
2011-08-16 22:57:27 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2011-08-16 22:57:27 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2011-08-16 22:57:27 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2011-08-16 22:57:27 ----A---- C:\Windows\SYSWOW64\logagent.exe
2011-08-16 22:57:27 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2011-08-16 22:57:27 ----A---- C:\Windows\SYSWOW64\dxdiagn.dll
2011-08-16 22:57:27 ----A---- C:\Windows\system32\shacct.dll
2011-08-16 22:57:27 ----A---- C:\Windows\system32\nltest.exe
2011-08-16 22:57:27 ----A---- C:\Windows\system32\mstask.dll
2011-08-16 22:57:27 ----A---- C:\Windows\system32\Mcx2Svc.dll
2011-08-16 22:57:27 ----A---- C:\Windows\system32\drivers\rmcast.sys
2011-08-16 22:57:27 ----A---- C:\Windows\system32\cscapi.dll
2011-08-16 22:57:27 ----A---- C:\Windows\system32\bitsadmin.exe
2011-08-16 22:57:26 ----A---- C:\Windows\SYSWOW64\wmpshell.dll
2011-08-16 22:57:26 ----A---- C:\Windows\SYSWOW64\wmdrmdev.dll
2011-08-16 22:57:26 ----A---- C:\Windows\SYSWOW64\shacct.dll
2011-08-16 22:57:26 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2011-08-16 22:57:26 ----A---- C:\Windows\system32\WPDSp.dll
2011-08-16 22:57:26 ----A---- C:\Windows\system32\wmdrmnet.dll
2011-08-16 22:57:26 ----A---- C:\Windows\system32\vss_ps.dll
2011-08-16 22:57:26 ----A---- C:\Windows\system32\tabcal.exe
2011-08-16 22:57:26 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2011-08-16 22:57:26 ----A---- C:\Windows\system32\qcap.dll
2011-08-16 22:57:26 ----A---- C:\Windows\system32\logman.exe
2011-08-16 22:57:25 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2011-08-16 22:57:25 ----A---- C:\Windows\SYSWOW64\unimdmat.dll
2011-08-16 22:57:25 ----A---- C:\Windows\SYSWOW64\lsmproxy.dll
2011-08-16 22:57:25 ----A---- C:\Windows\SYSWOW64\bitsadmin.exe
2011-08-16 22:57:25 ----A---- C:\Windows\system32\wudriver.dll
2011-08-16 22:57:25 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2011-08-16 22:57:25 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2011-08-16 22:57:25 ----A---- C:\Windows\system32\msnetobj.dll
2011-08-16 22:57:24 ----A---- C:\Windows\SYSWOW64\sqlcese30.dll
2011-08-16 22:57:24 ----A---- C:\Windows\SYSWOW64\rdpd3d.dll
2011-08-16 22:57:24 ----A---- C:\Windows\SYSWOW64\PortableDeviceSyncProvider.dll
2011-08-16 22:57:24 ----A---- C:\Windows\SYSWOW64\pdh.dll
2011-08-16 22:57:24 ----A---- C:\Windows\SYSWOW64\OpcServices.dll
2011-08-16 22:57:24 ----A---- C:\Windows\SYSWOW64\mprapi.dll
2011-08-16 22:57:24 ----A---- C:\Windows\SYSWOW64\iscsium.dll
2011-08-16 22:57:24 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2011-08-16 22:57:24 ----A---- C:\Windows\SYSWOW64\Bubbles.scr
2011-08-16 22:57:24 ----A---- C:\Windows\system32\spbcd.dll
2011-08-16 22:57:24 ----A---- C:\Windows\system32\secproc_ssp.dll
2011-08-16 22:57:24 ----A---- C:\Windows\system32\qdv.dll
2011-08-16 22:57:24 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2011-08-16 22:57:23 ----A---- C:\Windows\SYSWOW64\WPDSp.dll
2011-08-16 22:57:23 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2011-08-16 22:57:23 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2011-08-16 22:57:23 ----A---- C:\Windows\SYSWOW64\srvcli.dll
2011-08-16 22:57:23 ----A---- C:\Windows\SYSWOW64\Ribbons.scr
2011-08-16 22:57:23 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL
2011-08-16 22:57:23 ----A---- C:\Windows\SYSWOW64\PortableDeviceStatus.dll
2011-08-16 22:57:23 ----A---- C:\Windows\SYSWOW64\olethk32.dll
2011-08-16 22:57:23 ----A---- C:\Windows\SYSWOW64\ncryptui.dll
2011-08-16 22:57:23 ----A---- C:\Windows\SYSWOW64\Mystify.scr
2011-08-16 22:57:23 ----A---- C:\Windows\SYSWOW64\mapistub.dll
2011-08-16 22:57:23 ----A---- C:\Windows\SYSWOW64\mapi32.dll
2011-08-16 22:57:23 ----A---- C:\Windows\SYSWOW64\logman.exe
2011-08-16 22:57:23 ----A---- C:\Windows\system32\takeown.exe
2011-08-16 22:57:23 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2011-08-16 22:57:23 ----A---- C:\Windows\system32\PnPUnattend.exe
2011-08-16 22:57:23 ----A---- C:\Windows\system32\fphc.dll
2011-08-16 22:57:23 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2011-08-16 22:57:23 ----A---- C:\Windows\system32\dot3ui.dll
2011-08-16 22:57:22 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2011-08-16 22:57:22 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2011-08-16 22:57:22 ----A---- C:\Windows\SYSWOW64\wiavideo.dll
2011-08-16 22:57:22 ----A---- C:\Windows\SYSWOW64\utildll.dll
2011-08-16 22:57:22 ----A---- C:\Windows\SYSWOW64\takeown.exe
2011-08-16 22:57:22 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2011-08-16 22:57:22 ----A---- C:\Windows\SYSWOW64\fphc.dll
2011-08-16 22:57:22 ----A---- C:\Windows\SYSWOW64\dot3msm.dll
2011-08-16 22:57:22 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2011-08-16 22:57:22 ----A---- C:\Windows\system32\WMPhoto.dll
2011-08-16 22:57:22 ----A---- C:\Windows\system32\vfwwdm32.dll
2011-08-16 22:57:22 ----A---- C:\Windows\system32\EhStorAPI.dll
2011-08-16 22:57:22 ----A---- C:\Windows\system32\amstream.dll
2011-08-16 22:57:21 ----A---- C:\Windows\SYSWOW64\wmdrmnet.dll
2011-08-16 22:57:21 ----A---- C:\Windows\SYSWOW64\sppinst.dll
2011-08-16 22:57:21 ----A---- C:\Windows\SYSWOW64\qdv.dll
2011-08-16 22:57:21 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2011-08-16 22:57:21 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2011-08-16 22:57:21 ----A---- C:\Windows\SYSWOW64\EhStorAPI.dll
2011-08-16 22:57:21 ----A---- C:\Windows\system32\WUDFx.dll
2011-08-16 22:57:21 ----A---- C:\Windows\system32\WUDFHost.exe
2011-08-16 22:57:21 ----A---- C:\Windows\system32\WavDest.dll
2011-08-16 22:57:21 ----A---- C:\Windows\system32\shimgvw.dll
2011-08-16 22:57:21 ----A---- C:\Windows\system32\QCLIPROV.DLL
2011-08-16 22:57:21 ----A---- C:\Windows\system32\nrpsrv.dll
2011-08-16 22:57:21 ----A---- C:\Windows\system32\netapi32.dll
2011-08-16 22:57:21 ----A---- C:\Windows\system32\iasrecst.dll
2011-08-16 22:57:21 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2011-08-16 22:57:21 ----A---- C:\Windows\system32\djoin.exe
2011-08-16 22:57:21 ----A---- C:\Windows\system32\cmstp.exe
2011-08-16 22:57:21 ----A---- C:\Windows\system32\CertPolEng.dll
2011-08-16 22:57:20 ----A---- C:\Windows\SYSWOW64\wsnmp32.dll
2011-08-16 22:57:20 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2011-08-16 22:57:20 ----A---- C:\Windows\SYSWOW64\vfwwdm32.dll
2011-08-16 22:57:20 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2011-08-16 22:57:20 ----A---- C:\Windows\SYSWOW64\QCLIPROV.DLL
2011-08-16 22:57:20 ----A---- C:\Windows\SYSWOW64\pdhui.dll
2011-08-16 22:57:20 ----A---- C:\Windows\SYSWOW64\MuiUnattend.exe
2011-08-16 22:57:20 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2011-08-16 22:57:20 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2011-08-16 22:57:20 ----A---- C:\Windows\SYSWOW64\cmstp.exe
2011-08-16 22:57:20 ----A---- C:\Windows\SYSWOW64\cca.dll
2011-08-16 22:57:20 ----A---- C:\Windows\system32\MultiDigiMon.exe
2011-08-16 22:57:20 ----A---- C:\Windows\system32\KMSVC.DLL
2011-08-16 22:57:20 ----A---- C:\Windows\system32\fdProxy.dll
2011-08-16 22:57:20 ----A---- C:\Windows\system32\drivers\usbser.sys
2011-08-16 22:57:20 ----A---- C:\Windows\system32\drivers\pacer.sys
2011-08-16 22:57:19 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2011-08-16 22:57:19 ----A---- C:\Windows\SYSWOW64\setupcln.dll
2011-08-16 22:57:19 ----A---- C:\Windows\SYSWOW64\relog.exe
2011-08-16 22:57:19 ----A---- C:\Windows\SYSWOW64\netiougc.exe
2011-08-16 22:57:19 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2011-08-16 22:57:19 ----A---- C:\Windows\SYSWOW64\iscsicli.exe
2011-08-16 22:57:19 ----A---- C:\Windows\SYSWOW64\iasrecst.dll
2011-08-16 22:57:19 ----A---- C:\Windows\SYSWOW64\AzSqlExt.dll
2011-08-16 22:57:19 ----A---- C:\Windows\system32\wuauclt.exe
2011-08-16 22:57:19 ----A---- C:\Windows\system32\sscore.dll
2011-08-16 22:57:19 ----A---- C:\Windows\system32\relog.exe
2011-08-16 22:57:19 ----A---- C:\Windows\system32\mydocs.dll
2011-08-16 22:57:19 ----A---- C:\Windows\system32\mobsync.exe
2011-08-16 22:57:19 ----A---- C:\Windows\system32\iscsicli.exe
2011-08-16 22:57:19 ----A---- C:\Windows\system32\diskpart.exe
2011-08-16 22:57:19 ----A---- C:\Windows\system32\BWUnpairElevated.dll
2011-08-16 22:57:18 ----A---- C:\Windows\SYSWOW64\wkscli.dll
2011-08-16 22:57:18 ----A---- C:\Windows\SYSWOW64\syssetup.dll
2011-08-16 22:57:18 ----A---- C:\Windows\SYSWOW64\spbcd.dll
2011-08-16 22:57:18 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2011-08-16 22:57:18 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2011-08-16 22:57:18 ----A---- C:\Windows\SYSWOW64\resutils.dll
2011-08-16 22:57:18 ----A---- C:\Windows\SYSWOW64\rastapi.dll
2011-08-16 22:57:18 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2011-08-16 22:57:18 ----A---- C:\Windows\SYSWOW64\mydocs.dll
2011-08-16 22:57:18 ----A---- C:\Windows\SYSWOW64\itircl.dll
2011-08-16 22:57:18 ----A---- C:\Windows\SYSWOW64\diskpart.exe
2011-08-16 22:57:18 ----A---- C:\Windows\SYSWOW64\CertPolEng.dll
2011-08-16 22:57:18 ----A---- C:\Windows\SYSWOW64\amstream.dll
2011-08-16 22:57:18 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2011-08-16 22:57:18 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2011-08-16 22:57:18 ----A---- C:\Windows\system32\msdmo.dll
2011-08-16 22:57:18 ----A---- C:\Windows\system32\itircl.dll
2011-08-16 22:57:18 ----A---- C:\Windows\system32\dot3msm.dll
2011-08-16 22:57:18 ----A---- C:\Windows\system32\browcli.dll
2011-08-16 22:57:17 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2011-08-16 22:57:17 ----A---- C:\Windows\SYSWOW64\wmpps.dll
2011-08-16 22:57:17 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2011-08-16 22:57:17 ----A---- C:\Windows\SYSWOW64\tlscsp.dll
2011-08-16 22:57:17 ----A---- C:\Windows\SYSWOW64\secur32.dll
2011-08-16 22:57:17 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2011-08-16 22:57:17 ----A---- C:\Windows\SYSWOW64\ReAgentc.exe
2011-08-16 22:57:17 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2011-08-16 22:57:17 ----A---- C:\Windows\system32\wuapp.exe
2011-08-16 22:57:17 ----A---- C:\Windows\system32\mciqtz32.dll
2011-08-16 22:57:17 ----A---- C:\Windows\system32\imagehlp.dll
2011-08-16 22:57:17 ----A---- C:\Windows\system32\choice.exe
2011-08-16 22:57:17 ----A---- C:\Windows\system32\FXSTIFF.dll
2011-08-16 22:57:17 ----A---- C:\Windows\system32\findstr.exe
2011-08-16 22:57:17 ----A---- C:\Windows\system32\eappgnui.dll
2011-08-16 22:57:16 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2011-08-16 22:57:16 ----A---- C:\Windows\SYSWOW64\findstr.exe
2011-08-16 22:57:16 ----A---- C:\Windows\system32\sppc.dll
2011-08-16 22:57:16 ----A---- C:\Windows\system32\onexui.dll
2011-08-16 22:57:16 ----A---- C:\Windows\system32\luainstall.dll
2011-08-16 22:57:16 ----A---- C:\Windows\system32\drivers\tunnel.sys
2011-08-16 22:57:15 ----A---- C:\Windows\SYSWOW64\netutils.dll
2011-08-16 22:57:15 ----A---- C:\Windows\SYSWOW64\mobsync.exe
2011-08-16 22:57:15 ----A---- C:\Windows\SYSWOW64\mciqtz32.dll
2011-08-16 22:57:14 ----A---- C:\Windows\SYSWOW64\sppc.dll
2011-08-16 22:57:14 ----A---- C:\Windows\SYSWOW64\spopk.dll
2011-08-16 22:57:14 ----A---- C:\Windows\SYSWOW64\shimgvw.dll
2011-08-16 22:57:14 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2011-08-16 22:57:14 ----A---- C:\Windows\SYSWOW64\muifontsetup.dll
2011-08-16 22:57:14 ----A---- C:\Windows\SYSWOW64\luainstall.dll
2011-08-16 22:57:14 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2011-08-16 22:57:14 ----A---- C:\Windows\SYSWOW64\cabinet.dll
2011-08-16 22:57:14 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2011-08-16 22:57:14 ----A---- C:\Windows\system32\spopk.dll
2011-08-16 22:57:14 ----A---- C:\Windows\system32\schedcli.dll
2011-08-16 22:57:14 ----A---- C:\Windows\system32\repair-bde.exe
2011-08-16 22:57:14 ----A---- C:\Windows\system32\RDPENCDD.dll
2011-08-16 22:57:14 ----A---- C:\Windows\system32\manage-bde.exe
2011-08-16 22:57:14 ----A---- C:\Windows\system32\inetmib1.dll
2011-08-16 22:57:14 ----A---- C:\Windows\system32\drivers\dfsc.sys
2011-08-16 22:57:13 ----A---- C:\Windows\SYSWOW64\unlodctr.exe
2011-08-16 22:57:13 ----A---- C:\Windows\SYSWOW64\rdprefdrvapi.dll
2011-08-16 22:57:13 ----A---- C:\Windows\SYSWOW64\msdmo.dll
2011-08-16 22:57:13 ----A---- C:\Windows\SYSWOW64\inetmib1.dll
2011-08-16 22:57:13 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2011-08-16 22:57:13 ----A---- C:\Windows\system32\profprov.dll
2011-08-16 22:57:13 ----A---- C:\Windows\system32\odbcconf.dll
2011-08-16 22:57:13 ----A---- C:\Windows\system32\fixmapi.exe
2011-08-16 22:57:12 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2011-08-16 22:57:12 ----A---- C:\Windows\SYSWOW64\odbcconf.dll
2011-08-16 22:57:12 ----A---- C:\Windows\SYSWOW64\browcli.dll
2011-08-16 22:57:12 ----A---- C:\Windows\system32\UIRibbonRes.dll
2011-08-16 22:57:12 ----A---- C:\Windows\system32\FXSMON.dll
2011-08-16 22:57:12 ----A---- C:\Windows\system32\elsTrans.dll
2011-08-16 22:57:11 ----A---- C:\Windows\SYSWOW64\wups.dll
2011-08-16 22:57:11 ----A---- C:\Windows\SYSWOW64\perfts.dll
2011-08-16 22:57:11 ----A---- C:\Windows\SYSWOW64\imm32.dll
2011-08-16 22:57:11 ----A---- C:\Windows\system32\wshbth.dll
2011-08-16 22:57:11 ----A---- C:\Windows\system32\TRAPI.dll
2011-08-16 22:57:11 ----A---- C:\Windows\system32\napdsnap.dll
2011-08-16 22:57:11 ----A---- C:\Windows\system32\LogonUI.exe
2011-08-16 22:57:11 ----A---- C:\Windows\system32\dsauth.dll
2011-08-16 22:57:11 ----A---- C:\Windows\system32\drivers\tdi.sys
2011-08-16 22:57:10 ----A---- C:\Windows\SYSWOW64\TRAPI.dll
2011-08-16 22:57:10 ----A---- C:\Windows\SYSWOW64\schedcli.dll
2011-08-16 22:57:10 ----A---- C:\Windows\SYSWOW64\elsTrans.dll
2011-08-16 22:57:10 ----A---- C:\Windows\SYSWOW64\bitsperf.dll
2011-08-16 22:57:10 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2011-08-16 22:57:10 ----A---- C:\Windows\system32\FXSUNATD.exe
2011-08-16 22:57:10 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2011-08-16 22:57:10 ----A---- C:\Windows\system32\cscdll.dll
2011-08-16 22:57:10 ----A---- C:\Windows\system32\bitsperf.dll
2011-08-16 22:57:09 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2011-08-16 22:57:09 ----A---- C:\Windows\SYSWOW64\napdsnap.dll
2011-08-16 22:57:09 ----A---- C:\Windows\SYSWOW64\dsauth.dll
2011-08-16 22:57:09 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2011-08-16 22:57:09 ----A---- C:\Windows\system32\wups2.dll
2011-08-16 22:57:09 ----A---- C:\Windows\system32\wups.dll
2011-08-16 22:57:09 ----A---- C:\Windows\system32\wsdchngr.dll
2011-08-16 22:57:09 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2011-08-16 22:57:08 ----A---- C:\Windows\SYSWOW64\wsdchngr.dll
2011-08-16 22:57:08 ----A---- C:\Windows\SYSWOW64\sscore.dll
2011-08-16 22:57:08 ----A---- C:\Windows\SYSWOW64\shgina.dll
2011-08-16 22:57:08 ----A---- C:\Windows\SYSWOW64\riched32.dll
2011-08-16 22:57:08 ----A---- C:\Windows\system32\shgina.dll
2011-08-16 22:57:07 ----A---- C:\Windows\system32\wshirda.dll
2011-08-16 22:57:07 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2011-08-16 22:57:07 ----A---- C:\Windows\system32\drivers\hidusb.sys
2011-08-16 22:57:07 ----A---- C:\Windows\system32\drivers\Dot4Prt.sys
2011-08-16 22:57:07 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2011-08-16 22:57:07 ----A---- C:\Windows\system32\drivers\appid.sys
2011-08-16 22:57:06 ----A---- C:\Windows\SYSWOW64\wshirda.dll
2011-08-16 22:57:06 ----A---- C:\Windows\system32\spwmp.dll
2011-08-16 22:57:06 ----A---- C:\Windows\system32\riched32.dll
2011-08-16 22:57:06 ----A---- C:\Windows\system32\rdpcfgex.dll
2011-08-16 22:57:06 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2011-08-16 22:57:06 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2011-08-16 22:57:06 ----A---- C:\Windows\system32\browseui.dll
2011-08-16 22:57:05 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2011-08-16 22:57:05 ----A---- C:\Windows\SYSWOW64\browseui.dll
2011-08-16 22:57:05 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2011-08-16 22:57:05 ----A---- C:\Windows\system32\C_ISCII.DLL
2011-08-16 22:57:04 ----AH---- C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
2011-08-16 22:57:04 ----A---- C:\Windows\SYSWOW64\C_ISCII.DLL
2011-08-16 22:57:04 ----A---- C:\Windows\system32\dxmasf.dll
2011-08-16 22:57:04 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2011-08-16 22:57:04 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2011-08-16 22:57:04 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2011-08-16 22:57:04 ----A---- C:\Windows\system32\drivers\scfilter.sys
2011-08-16 22:57:04 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2011-08-16 22:57:04 ----A---- C:\Windows\system32\drivers\cdrom.sys
2011-08-16 22:57:03 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2011-08-16 22:57:03 ----A---- C:\Windows\SYSWOW64\shunimpl.dll
2011-08-16 22:57:03 ----A---- C:\Windows\SYSWOW64\KBDTUQ.DLL
2011-08-16 22:57:03 ----A---- C:\Windows\SYSWOW64\KBDTUF.DLL
2011-08-16 22:57:03 ----A---- C:\Windows\SYSWOW64\KBDSG.DLL
2011-08-16 22:57:03 ----A---- C:\Windows\SYSWOW64\kbdlk41a.dll
2011-08-16 22:57:03 ----A---- C:\Windows\SYSWOW64\KBDGR1.DLL
2011-08-16 22:57:03 ----A---- C:\Windows\SYSWOW64\KBDGKL.DLL
2011-08-16 22:57:03 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2011-08-16 22:57:03 ----A---- C:\Windows\system32\wmploc.DLL
2011-08-16 22:57:03 ----A---- C:\Windows\system32\shunimpl.dll
2011-08-16 22:57:03 ----A---- C:\Windows\system32\KBDTUQ.DLL
2011-08-16 22:57:03 ----A---- C:\Windows\system32\KBDTUF.DLL
2011-08-16 22:57:03 ----A---- C:\Windows\system32\KBDSG.DLL
2011-08-16 22:57:03 ----A---- C:\Windows\system32\KBDSF.DLL
2011-08-16 22:57:03 ----A---- C:\Windows\system32\KBDPO.DLL
2011-08-16 22:57:03 ----A---- C:\Windows\system32\KBDNEPR.DLL
2011-08-16 22:57:03 ----A---- C:\Windows\system32\kbdlk41a.dll
2011-08-16 22:57:03 ----A---- C:\Windows\system32\KBDINTAM.DLL
2011-08-16 22:57:03 ----A---- C:\Windows\system32\KBDINBEN.DLL
2011-08-16 22:57:03 ----A---- C:\Windows\system32\KBDGR1.DLL
2011-08-16 22:57:03 ----A---- C:\Windows\system32\KBDGKL.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\spwizres.dll
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\pifmgr.dll
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\KBDUS.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\KBDUGHR1.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\KBDTURME.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\KBDTAJIK.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\KBDSF.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\KBDPO.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\KBDNEPR.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\KBDMON.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\KBDMAORI.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\KBDLT1.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\KBDINTEL.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\KBDINTAM.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\KBDINORI.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\KBDINMAR.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\KBDINKAN.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\KBDINHIN.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\KBDINBEN.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\KBDGEO.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\KBDCZ1.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\KBDBULG.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\KBDBLR.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\SYSWOW64\dpnaddr.dll
2011-08-16 22:57:02 ----A---- C:\Windows\system32\spwizres.dll
2011-08-16 22:57:02 ----A---- C:\Windows\system32\pifmgr.dll
2011-08-16 22:57:02 ----A---- C:\Windows\system32\nlsbres.dll
2011-08-16 22:57:02 ----A---- C:\Windows\system32\KBDUS.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\system32\KBDTURME.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\system32\KBDMON.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\system32\KBDMAORI.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\system32\KBDLT1.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\system32\KBDINTEL.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\system32\KBDINORI.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\system32\KBDINMAR.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\system32\KBDINKAN.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\system32\KBDINHIN.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\system32\KBDGEO.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\system32\KBDCZ1.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\system32\KBDBULG.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\system32\KBDBLR.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\system32\KBDBASH.DLL
2011-08-16 22:57:02 ----A---- C:\Windows\system32\dpnaddr.dll
2011-08-16 22:57:02 ----A---- C:\Windows\system32\BlbEvents.dll
2011-08-16 22:56:33 ----A---- C:\Windows\SYSWOW64\wdscore.dll
2011-08-16 22:56:33 ----A---- C:\Windows\system32\dpx.dll
2011-08-16 22:56:27 ----A---- C:\Windows\SYSWOW64\sqmapi.dll
2011-08-16 22:56:17 ----A---- C:\Windows\SYSWOW64\wbemcomn.dll
2011-08-16 22:54:48 ----A---- C:\Windows\system32\wbemcomn.dll
2011-08-16 22:54:39 ----A---- C:\Windows\system32\sqmapi.dll
2011-08-16 22:35:13 ----D---- C:\Program Files\Common Files\Logitech
2011-08-16 22:35:10 ----D---- C:\Program Files\Logitech
2011-08-16 21:57:21 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2011-08-16 21:57:21 ----A---- C:\Windows\system32\drivers\usbport.sys
2011-08-16 21:57:21 ----A---- C:\Windows\system32\drivers\usbohci.sys
2011-08-16 21:57:21 ----A---- C:\Windows\system32\drivers\usbhub.sys
2011-08-16 21:57:21 ----A---- C:\Windows\system32\drivers\usbehci.sys
2011-08-16 21:57:21 ----A---- C:\Windows\system32\drivers\usbd.sys
2011-08-16 21:57:21 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2011-08-16 21:57:17 ----A---- C:\Windows\system32\esent.dll
2011-08-16 21:57:17 ----A---- C:\Windows\system32\drivers\ntfs.sys
2011-08-16 21:57:16 ----A---- C:\Windows\SYSWOW64\esent.dll
2011-08-16 21:57:16 ----A---- C:\Windows\system32\drivers\storport.sys
2011-08-16 21:57:16 ----A---- C:\Windows\system32\drivers\nvstor.sys
2011-08-16 21:57:16 ----A---- C:\Windows\system32\drivers\nvraid.sys
2011-08-16 21:57:16 ----A---- C:\Windows\system32\drivers\amdxata.sys
2011-08-16 21:57:16 ----A---- C:\Windows\system32\drivers\amdsata.sys
2011-08-16 21:57:15 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2011-08-16 21:57:15 ----A---- C:\Windows\system32\fsutil.exe
2011-08-16 21:57:15 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2011-08-16 21:57:15 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2011-08-16 20:19:04 ----D---- C:\Program Files (x86)\CCleaner
2011-08-16 20:13:31 ----D---- C:\Users\pavilion\AppData\Roaming\TeamViewer
2011-08-16 20:13:07 ----D---- C:\Program Files (x86)\TeamViewer
2011-08-16 20:09:09 ----D---- C:\Windows\Sun
2011-08-16 20:06:59 ----D---- C:\Users\pavilion\AppData\Roaming\skypePM
2011-08-16 20:06:56 ----D---- C:\ProgramData\Skype Extras
2011-08-16 20:02:47 ----D---- C:\ProgramData\HPSSUPPLY
2011-08-16 19:59:42 ----D---- C:\ProgramData\HP Product Assistant
2011-08-16 19:44:54 ----D---- C:\Program Files (x86)\Microsoft Works
2011-08-16 19:44:43 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2011-08-16 19:39:38 ----D---- C:\ProgramData\Ahead
2011-08-16 19:37:56 ----D---- C:\ProgramData\Nero
2011-08-16 19:34:32 ----D---- C:\Users\pavilion\AppData\Roaming\hpqLog
2011-08-16 19:31:54 ----A---- C:\Windows\wcx_ftp.ini
2011-08-16 19:23:59 ----D---- C:\Windows\SYSWOW64\Wat
2011-08-16 19:23:59 ----D---- C:\Windows\system32\Wat
2011-08-16 19:09:25 ----D---- C:\Users\pavilion\AppData\Roaming\Ahead
2011-08-16 19:09:25 ----D---- C:\ProgramData\LightScribe
2011-08-16 19:07:19 ----SD---- C:\Program Files (x86)\Total CMA Pack
2011-08-16 19:04:14 ----D---- C:\ProgramData\I.CA SecureStore
2011-08-16 19:04:14 ----D---- C:\Program Files\I.CA SecureStore
2011-08-16 19:03:26 ----D---- C:\Program Files (x86)\Gemalto
2011-08-16 18:59:26 ----D---- C:\Program Files (x86)\Nero
2011-08-16 18:52:40 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2011-08-16 18:52:39 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2011-08-16 18:30:30 ----HD---- C:\Windows\msdownld.tmp
2011-08-16 18:29:17 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-08-16 18:29:17 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-08-16 18:29:17 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2011-08-16 18:29:17 ----A---- C:\Windows\SYSWOW64\msrating.dll
2011-08-16 18:29:17 ----A---- C:\Windows\SYSWOW64\msls31.dll
2011-08-16 18:29:17 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-08-16 18:29:17 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-08-16 18:29:17 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-08-16 18:29:17 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2011-08-16 18:29:17 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-08-16 18:29:17 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-08-16 18:29:17 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-08-16 18:29:17 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2011-08-16 18:29:17 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\wextract.exe
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\url.dll
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\occache.dll
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\mshta.exe
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\inseng.dll
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\icardie.dll
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2011-08-16 18:29:16 ----A---- C:\Windows\SYSWOW64\admparse.dll
2011-08-16 18:29:15 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2011-08-16 18:29:15 ----A---- C:\Windows\system32\wininet.dll
2011-08-16 18:29:15 ----A---- C:\Windows\system32\urlmon.dll
2011-08-16 18:29:15 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-08-16 18:29:15 ----A---- C:\Windows\system32\pngfilt.dll
2011-08-16 18:29:15 ----A---- C:\Windows\system32\occache.dll
2011-08-16 18:29:15 ----A---- C:\Windows\system32\msrating.dll
2011-08-16 18:29:15 ----A---- C:\Windows\system32\msls31.dll
2011-08-16 18:29:15 ----A---- C:\Windows\system32\mshtml.dll
2011-08-16 18:29:15 ----A---- C:\Windows\system32\mshta.exe
2011-08-16 18:29:15 ----A---- C:\Windows\system32\jsproxy.dll
2011-08-16 18:29:15 ----A---- C:\Windows\system32\jscript9.dll
2011-08-16 18:29:15 ----A---- C:\Windows\system32\jscript.dll
2011-08-16 18:29:15 ----A---- C:\Windows\system32\ieUnatt.exe
2011-08-16 18:29:15 ----A---- C:\Windows\system32\iertutil.dll
2011-08-16 18:29:15 ----A---- C:\Windows\system32\ieakui.dll
2011-08-16 18:29:15 ----A---- C:\Windows\system32\ieaksie.dll
2011-08-16 18:29:15 ----A---- C:\Windows\system32\admparse.dll
2011-08-16 18:29:14 ----A---- C:\Windows\system32\url.dll
2011-08-16 18:29:14 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2011-08-16 18:29:14 ----A---- C:\Windows\system32\mshtmler.dll
2011-08-16 18:29:14 ----A---- C:\Windows\system32\msfeedssync.exe
2011-08-16 18:29:14 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-08-16 18:29:14 ----A---- C:\Windows\system32\imgutil.dll
2011-08-16 18:29:14 ----A---- C:\Windows\system32\ieui.dll
2011-08-16 18:29:14 ----A---- C:\Windows\system32\iesysprep.dll
2011-08-16 18:29:14 ----A---- C:\Windows\system32\iesetup.dll
2011-08-16 18:29:14 ----A---- C:\Windows\system32\iernonce.dll
2011-08-16 18:29:14 ----A---- C:\Windows\system32\iepeers.dll
2011-08-16 18:29:14 ----A---- C:\Windows\system32\ieframe.dll
2011-08-16 18:29:14 ----A---- C:\Windows\system32\ieapfltr.dll
2011-08-16 18:29:14 ----A---- C:\Windows\system32\ieapfltr.dat
2011-08-16 18:29:14 ----A---- C:\Windows\system32\ieakeng.dll
2011-08-16 18:29:14 ----A---- C:\Windows\system32\IEAdvpack.dll
2011-08-16 18:29:14 ----A---- C:\Windows\system32\ie4uinit.exe
2011-08-16 18:29:14 ----A---- C:\Windows\system32\icardie.dll
2011-08-16 18:29:14 ----A---- C:\Windows\system32\dxtrans.dll
2011-08-16 18:29:14 ----A---- C:\Windows\system32\dxtmsft.dll
2011-08-16 18:29:13 ----A---- C:\Windows\system32\wextract.exe
2011-08-16 18:29:13 ----A---- C:\Windows\system32\webcheck.dll
2011-08-16 18:29:13 ----A---- C:\Windows\system32\vbscript.dll
2011-08-16 18:29:13 ----A---- C:\Windows\system32\mshtmled.dll
2011-08-16 18:29:13 ----A---- C:\Windows\system32\msfeeds.dll
2011-08-16 18:29:13 ----A---- C:\Windows\system32\licmgr10.dll
2011-08-16 18:29:13 ----A---- C:\Windows\system32\inseng.dll
2011-08-16 18:29:13 ----A---- C:\Windows\system32\iexpress.exe
2011-08-16 18:29:13 ----A---- C:\Windows\system32\iedkcs32.dll
2011-08-16 18:15:00 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2011-08-16 18:14:49 ----D---- C:\Program Files (x86)\Microsoft Security Client
2011-08-16 18:14:18 ----D---- C:\Program Files\Microsoft Security Client
2011-08-16 18:10:20 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2011-08-16 17:51:24 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2011-08-16 17:39:14 ----A---- C:\Windows\system32\drivers\sptd.sys
2011-08-16 17:38:39 ----D---- C:\Users\pavilion\AppData\Roaming\DAEMON Tools Lite
2011-08-16 17:38:36 ----D---- C:\ProgramData\DAEMON Tools Lite
2011-08-16 17:33:35 ----D---- C:\Users\pavilion\AppData\Roaming\CyberLink
2011-08-16 17:31:59 ----D---- C:\Program Files (x86)\MSXML 4.0
2011-08-16 17:29:47 ----A---- C:\Windows\system32\browserchoice.exe
2011-08-16 17:24:10 ----A---- C:\Windows\system32\MRT.exe
2011-08-16 16:57:55 ----D---- C:\Users\pavilion\AppData\Roaming\HP
2011-08-16 16:32:29 ----D---- C:\Program Files (x86)\Microsoft.NET
2011-08-16 16:27:43 ----D---- C:\Program Files (x86)\Microsoft Office
2011-08-16 16:27:41 ----D---- C:\Program Files\Microsoft Office
2011-08-16 16:27:33 ----D---- C:\ProgramData\Microsoft Help
2011-08-16 16:26:56 ----RHD---- C:\MSOCache
2011-08-16 16:26:49 ----D---- C:\Windows\SYSWOW64\spool
2011-08-16 16:22:37 ----N---- C:\Windows\hpomdl18.dat
2011-08-16 16:22:37 ----A---- C:\Windows\hpoins18.dat
2011-08-16 16:22:31 ----D---- C:\ProgramData\HP
2011-08-16 16:22:27 ----A---- C:\Windows\system32\hpzids40.dll
2011-08-16 16:13:08 ----D---- C:\ProgramData\HipSoft
2011-08-16 16:08:11 ----D---- C:\Users\pavilion\AppData\Roaming\WildTangent
2011-08-16 15:55:09 ----D---- C:\Program Files (x86)\Lavalys
2011-08-16 15:54:43 ----D---- C:\Users\pavilion\AppData\Roaming\WinRAR
2011-08-16 15:51:27 ----D---- C:\Program Files (x86)\SCi Games
2011-08-16 15:49:22 ----D---- C:\Program Files\Winrar
2011-08-16 15:49:20 ----D---- C:\Program Files (x86)\WinRAR
2011-08-16 15:15:20 ----D---- C:\Users\pavilion\AppData\Roaming\Macromedia
2011-08-16 15:15:20 ----A---- C:\Windows\SYSWOW64\win_utilman.exe
2011-08-16 15:15:17 ----D---- C:\Users\pavilion\AppData\Roaming\_MDLogs
2011-08-16 15:07:56 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2011-08-16 15:07:56 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2011-08-16 15:07:56 ----A---- C:\Windows\system32\xmllite.dll
2011-08-16 15:07:56 ----A---- C:\Windows\system32\kerberos.dll
2011-08-16 15:07:55 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2011-08-16 15:07:55 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2011-08-16 15:07:55 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2011-08-16 15:07:55 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2011-08-16 15:07:55 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2011-08-16 15:07:55 ----A---- C:\Windows\system32\odbctrac.dll
2011-08-16 15:07:55 ----A---- C:\Windows\system32\odbccu32.dll
2011-08-16 15:07:55 ----A---- C:\Windows\system32\odbccr32.dll
2011-08-16 15:07:55 ----A---- C:\Windows\system32\odbccp32.dll
2011-08-16 15:07:46 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2011-08-16 15:07:46 ----A---- C:\Windows\system32\poqexec.exe
2011-08-16 15:07:45 ----A---- C:\Windows\explorer.exe
2011-08-16 15:07:44 ----A---- C:\Windows\SYSWOW64\explorer.exe
2011-08-16 15:07:42 ----A---- C:\Windows\SYSWOW64\sbe.dll
2011-08-16 15:07:42 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2011-08-16 15:07:42 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2011-08-16 15:07:42 ----A---- C:\Windows\system32\sbe.dll
2011-08-16 15:07:42 ----A---- C:\Windows\system32\EncDec.dll
2011-08-16 15:07:42 ----A---- C:\Windows\system32\CPFilters.dll
2011-08-16 15:07:39 ----A---- C:\Windows\system32\tquery.dll
2011-08-16 15:07:39 ----A---- C:\Windows\system32\mssrch.dll
2011-08-16 15:07:38 ----A---- C:\Windows\SYSWOW64\tquery.dll
2011-08-16 15:07:38 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2011-08-16 15:07:38 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2011-08-16 15:07:38 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2011-08-16 15:07:38 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2011-08-16 15:07:38 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2011-08-16 15:07:38 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2011-08-16 15:07:38 ----A---- C:\Windows\SYSWOW64\mssph.dll
2011-08-16 15:07:38 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2011-08-16 15:07:38 ----A---- C:\Windows\system32\SearchIndexer.exe
2011-08-16 15:07:38 ----A---- C:\Windows\system32\SearchFilterHost.exe
2011-08-16 15:07:38 ----A---- C:\Windows\system32\mssvp.dll
2011-08-16 15:07:38 ----A---- C:\Windows\system32\mssphtb.dll
2011-08-16 15:07:38 ----A---- C:\Windows\system32\mssph.dll
2011-08-16 15:07:38 ----A---- C:\Windows\system32\msscntrs.dll
2011-08-16 15:07:37 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2011-08-16 15:07:36 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-08-16 15:07:36 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-08-16 15:07:36 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-08-16 15:07:34 ----A---- C:\Windows\system32\drivers\afd.sys
2011-08-16 15:07:28 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2011-08-16 15:07:28 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-08-16 15:07:20 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2011-08-16 15:07:20 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2011-08-16 15:07:20 ----A---- C:\Windows\system32\XpsPrint.dll
2011-08-16 15:07:20 ----A---- C:\Windows\system32\mfc42u.dll
2011-08-16 15:07:20 ----A---- C:\Windows\system32\mfc42.dll
2011-08-16 15:07:19 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2011-08-16 15:07:16 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2011-08-16 15:07:16 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2011-08-16 15:07:16 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2011-08-16 15:07:16 ----A---- C:\Windows\system32\fontsub.dll
2011-08-16 15:07:16 ----A---- C:\Windows\system32\atmlib.dll
2011-08-16 15:07:16 ----A---- C:\Windows\system32\atmfd.dll
2011-08-16 15:07:10 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2011-08-16 15:07:00 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2011-08-16 15:07:00 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-08-16 15:07:00 ----A---- C:\Windows\system32\dnsapi.dll
2011-08-16 15:06:59 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2011-08-16 15:06:59 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-08-16 15:06:54 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2011-08-16 15:06:54 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2011-08-16 15:06:54 ----A---- C:\Windows\system32\d3d10_1core.dll
2011-08-16 15:06:54 ----A---- C:\Windows\system32\d3d10_1.dll
2011-08-16 15:06:53 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-08-16 15:06:53 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-08-16 15:06:53 ----A---- C:\Windows\system32\drivers\srv.sys
2011-08-16 15:06:44 ----A---- C:\Windows\system32\winresume.exe
2011-08-16 15:06:44 ----A---- C:\Windows\system32\winload.exe
2011-08-16 15:06:43 ----A---- C:\Windows\system32\setbcdlocale.dll
2011-08-16 15:06:43 ----A---- C:\Windows\system32\kdusb.dll
2011-08-16 15:06:43 ----A---- C:\Windows\system32\kdcom.dll
2011-08-16 15:06:43 ----A---- C:\Windows\system32\kd1394.dll
2011-08-16 15:06:42 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2011-08-16 15:06:42 ----A---- C:\Windows\system32\oleaut32.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-08-16 15:06:40 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-08-16 15:06:40 ----A---- C:\Windows\SYSWOW64\wow32.dll
2011-08-16 15:06:40 ----A---- C:\Windows\SYSWOW64\user.exe
2011-08-16 15:06:40 ----A---- C:\Windows\SYSWOW64\setup16.exe
2011-08-16 15:06:40 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2011-08-16 15:06:40 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2011-08-16 15:06:40 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2011-08-16 15:06:40 ----A---- C:\Windows\SYSWOW64\instnm.exe
2011-08-16 15:06:40 ----A---- C:\Windows\system32\wow64win.dll
2011-08-16 15:06:40 ----A---- C:\Windows\system32\wow64cpu.dll
2011-08-16 15:06:40 ----A---- C:\Windows\system32\wow64.dll
2011-08-16 15:06:40 ----A---- C:\Windows\system32\winsrv.dll
2011-08-16 15:06:40 ----A---- C:\Windows\system32\ntvdm64.dll
2011-08-16 15:06:40 ----A---- C:\Windows\system32\KernelBase.dll
2011-08-16 15:06:40 ----A---- C:\Windows\system32\kernel32.dll
2011-08-16 15:06:40 ----A---- C:\Windows\system32\conhost.exe
2011-08-16 15:06:34 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2011-08-16 15:06:34 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2011-08-16 15:06:34 ----A---- C:\Windows\SYSWOW64\devobj.dll
2011-08-16 15:06:34 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2011-08-16 15:06:34 ----A---- C:\Windows\system32\umpnpmgr.dll
2011-08-16 15:06:34 ----A---- C:\Windows\system32\cfgmgr32.dll
2011-08-16 15:06:32 ----A---- C:\Windows\system32\win32k.sys
2011-08-16 15:06:30 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-08-16 15:06:30 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2011-08-16 15:06:29 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2011-08-16 15:06:29 ----A---- C:\Windows\system32\prevhost.exe
2011-08-16 15:06:28 ----A---- C:\Windows\system32\WFS.exe
2011-08-16 15:06:28 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-08-16 15:06:27 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2011-08-16 15:06:27 ----A---- C:\Windows\system32\inetcomm.dll
2011-08-16 15:06:25 ----A---- C:\Windows\system32\drivers\bowser.sys
2011-08-16 15:01:00 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-08-16 15:00:59 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-08-16 15:00:58 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-08-16 14:57:01 ----A---- C:\Windows\nsreg.dat
2011-08-16 14:56:55 ----D---- C:\Users\pavilion\AppData\Roaming\Mozilla
2011-08-16 14:56:01 ----D---- C:\Users\pavilion\AppData\Roaming\OpenOffice.org
2011-08-16 14:52:19 ----D---- C:\Users\pavilion\AppData\Roaming\HpUpdate

======List of files/folders modified in the last 1 month======

2011-09-10 16:09:48 ----RD---- C:\Program Files
2011-09-10 16:08:47 ----D---- C:\Windows\Temp
2011-09-10 16:07:37 ----D---- C:\Users\pavilion\AppData\Roaming\Skype
2011-09-10 15:27:24 ----D---- C:\Windows\system32\config
2011-09-10 14:55:50 ----D---- C:\Windows\system32\catroot2
2011-09-10 14:48:40 ----AD---- C:\Windows
2011-09-10 14:45:10 ----SHD---- C:\Windows\Installer
2011-09-10 14:45:09 ----RD---- C:\Program Files (x86)
2011-09-10 14:45:09 ----HD---- C:\ProgramData
2011-09-10 14:44:55 ----SHD---- C:\System Volume Information
2011-09-10 14:39:50 ----D---- C:\Users\pavilion\AppData\Roaming\Winamp
2011-09-10 14:39:50 ----D---- C:\ProgramData\Spybot - Search & Destroy
2011-09-10 14:39:28 ----D---- C:\Windows\Logs
2011-09-10 14:39:28 ----D---- C:\Windows\debug
2011-09-09 22:08:55 ----RSD---- C:\Windows\assembly
2011-09-09 22:06:52 ----D---- C:\Windows\system32\wdi
2011-09-09 22:06:36 ----D---- C:\Windows\Microsoft.NET
2011-09-07 22:29:21 ----D---- C:\Windows\system32\catroot
2011-09-07 20:48:39 ----SD---- C:\Users\pavilion\AppData\Roaming\Microsoft
2011-09-07 19:55:24 ----D---- C:\ProgramData\PDFC
2011-09-07 19:07:07 ----D---- C:\Windows\Tasks
2011-09-07 19:07:07 ----D---- C:\Windows\system32\Tasks
2011-09-06 08:19:46 ----D---- C:\Windows\System32
2011-09-06 08:19:46 ----D---- C:\Windows\inf
2011-09-06 08:19:46 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-09-04 08:57:24 ----D---- C:\Windows\system32\LogFiles
2011-09-04 08:26:24 ----D---- C:\Windows\system32\drivers
2011-09-04 08:21:32 ----D---- C:\Program Files (x86)\Common Files
2011-09-04 08:21:10 ----D---- C:\Windows\system32\DriverStore
2011-09-04 08:01:37 ----D---- C:\Windows\system32\drivers\UMDF
2011-08-25 12:06:58 ----D---- C:\Windows\winsxs
2011-08-25 12:05:45 ----D---- C:\Windows\SYSWOW64\fr-FR
2011-08-25 12:05:45 ----D---- C:\Windows\SYSWOW64\en-US
2011-08-25 12:05:45 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-08-25 12:05:45 ----D---- C:\Windows\system32\fr-FR
2011-08-25 12:05:45 ----D---- C:\Windows\system32\en-US
2011-08-25 12:05:45 ----D---- C:\Windows\system32\cs-CZ
2011-08-25 12:05:45 ----AD---- C:\Windows\SysWOW64
2011-08-23 22:26:13 ----RSD---- C:\Windows\Fonts
2011-08-23 16:56:00 ----D---- C:\Windows\Prefetch
2011-08-23 12:45:59 ----D---- C:\Program Files (x86)\Windows Sidebar
2011-08-23 12:45:59 ----D---- C:\Program Files (x86)\Windows Portable Devices
2011-08-23 12:45:59 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2011-08-23 12:45:59 ----D---- C:\Program Files (x86)\Windows Media Player
2011-08-23 12:45:59 ----D---- C:\Program Files (x86)\Windows Mail
2011-08-23 12:45:54 ----D---- C:\Program Files\Windows Sidebar
2011-08-23 12:45:54 ----D---- C:\Program Files\Windows Portable Devices
2011-08-23 12:45:54 ----D---- C:\Program Files\Windows Media Player
2011-08-23 12:45:54 ----D---- C:\Program Files\Windows Mail
2011-08-23 12:45:54 ----D---- C:\Program Files\DVD Maker
2011-08-23 12:45:53 ----D---- C:\Program Files\Windows Photo Viewer
2011-08-23 12:45:53 ----D---- C:\Program Files\Windows Journal
2011-08-23 12:45:46 ----D---- C:\Windows\servicing
2011-08-23 12:45:46 ----D---- C:\Windows\ehome
2011-08-23 12:45:46 ----D---- C:\Program Files\Windows Defender
2011-08-23 12:45:23 ----D---- C:\Windows\SYSWOW64\da-DK
2011-08-23 12:45:20 ----D---- C:\Windows\SYSWOW64\oobe
2011-08-23 12:45:19 ----D---- C:\Windows\SYSWOW64\migration
2011-08-23 12:45:19 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2011-08-23 12:45:15 ----D---- C:\Windows\SYSWOW64\Setup
2011-08-23 12:45:15 ----D---- C:\Windows\SYSWOW64\cs
2011-08-23 12:45:12 ----D---- C:\Windows\SYSWOW64\sppui
2011-08-23 12:45:12 ----D---- C:\Windows\SYSWOW64\manifeststore
2011-08-23 12:45:12 ----D---- C:\Windows\SYSWOW64\es-ES
2011-08-23 12:45:12 ----D---- C:\Windows\SYSWOW64\en
2011-08-23 12:45:11 ----D---- C:\Windows\SYSWOW64\wbem
2011-08-23 12:45:10 ----D---- C:\Windows\SYSWOW64\migwiz
2011-08-23 12:45:10 ----D---- C:\Windows\SYSWOW64\Dism
2011-08-23 12:44:26 ----D---- C:\Windows\system32\da-DK
2011-08-23 12:44:22 ----D---- C:\Windows\system32\oobe
2011-08-23 12:44:22 ----D---- C:\Windows\system32\migration
2011-08-23 12:44:21 ----D---- C:\Windows\system32\AdvancedInstallers
2011-08-23 12:44:18 ----D---- C:\Windows\system32\Setup
2011-08-23 12:44:18 ----D---- C:\Windows\system32\cs
2011-08-23 12:44:14 ----D---- C:\Windows\system32\sppui
2011-08-23 12:44:14 ----D---- C:\Windows\system32\manifeststore
2011-08-23 12:44:14 ----D---- C:\Windows\system32\es-ES
2011-08-23 12:44:12 ----D---- C:\Windows\system32\drivers\fr-FR
2011-08-23 12:44:12 ----D---- C:\Windows\system32\drivers\en-US
2011-08-23 12:44:12 ----D---- C:\Windows\system32\drivers\cs-CZ
2011-08-23 12:44:11 ----D---- C:\Windows\system32\wbem
2011-08-23 12:44:09 ----D---- C:\Windows\system32\migwiz
2011-08-23 12:44:09 ----D---- C:\Windows\system32\Dism
2011-08-23 12:43:28 ----D---- C:\Windows\AppPatch
2011-08-23 12:43:05 ----D---- C:\Windows\system32\Boot
2011-08-23 10:23:23 ----RD---- C:\Program Files (x86)\Skype
2011-08-23 10:23:22 ----D---- C:\ProgramData\Skype
2011-08-23 10:02:37 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2011-08-23 10:02:37 ----A---- C:\Windows\system32\msclmd.dll
2011-08-18 12:08:34 ----D---- C:\ProgramData\Recovery
2011-08-18 05:30:30 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-08-18 03:00:49 ----A---- C:\Windows\win.ini
2011-08-17 16:40:54 ----D---- C:\Users\pavilion\AppData\Roaming\Hewlett-Packard
2011-08-16 23:22:08 ----D---- C:\Program Files\Common Files
2011-08-16 23:21:37 ----D---- C:\Program Files (x86)\ATI Technologies
2011-08-16 23:14:27 ----D---- C:\ProgramData\Adobe
2011-08-16 20:57:01 ----D---- C:\Users\pavilion\AppData\Roaming\Adobe
2011-08-16 19:59:25 ----D---- C:\Program Files (x86)\Hp
2011-08-16 19:55:31 ----SD---- C:\ProgramData\Microsoft
2011-08-16 19:55:30 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-08-16 19:54:19 ----D---- C:\Windows\ShellNew
2011-08-16 19:54:17 ----D---- C:\Program Files (x86)\MSBuild
2011-08-16 19:52:13 ----D---- C:\Program Files\Common Files\System
2011-08-16 19:23:59 ----D---- C:\Program Files\Internet Explorer
2011-08-16 19:23:59 ----D---- C:\Program Files (x86)\Internet Explorer
2011-08-16 19:23:56 ----D---- C:\Windows\PolicyDefinitions
2011-08-16 19:05:21 ----D---- C:\Program Files (x86)\Java
2011-08-16 18:17:49 ----D---- C:\ProgramData\Norton
2011-08-16 17:33:35 ----D---- C:\ProgramData\CyberLink
2011-08-16 17:33:31 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2011-08-16 17:16:11 ----D---- C:\Windows\SoftwareDistribution
2011-08-16 16:34:17 ----D---- C:\Windows\twain_32
2011-08-16 16:23:35 ----D---- C:\Program Files\hp
2011-08-16 16:09:13 ----D---- C:\ProgramData\WildTangent
2011-08-16 15:36:08 ----D---- C:\ProgramData\Hewlett-Packard
2011-08-16 15:15:50 ----D---- C:\Program Files (x86)\EasyBits For Kids

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amd_sata;amd_sata; C:\Windows\system32\DRIVERS\amd_sata.sys [2010-08-13 75904]
R0 amd_xata;amd_xata; C:\Windows\system32\DRIVERS\amd_xata.sys [2010-08-13 38016]
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie64.sys [2010-03-10 16440]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-08-16 526392]
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2011-04-18 189440]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-07-08 9884672]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-07-08 307712]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2011-03-30 114704]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-08-16 270912]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-09-07 2484072]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2010-07-22 1002848]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2011-04-27 84864]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-09-03 349800]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2009-12-22 38456]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2010-04-27 26440]
R3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [2010-04-27 16200]
R3 WmXlCore;Logitech Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [2010-04-27 77512]
S3 ar5ckgf4;ar5ckgf4; C:\Windows\system32\drivers\ar5ckgf4.sys []
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\drivers\Dot4Prt.sys [2010-11-20 19968]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 GemCCID;GemCCID; C:\Windows\System32\Drivers\GemCCID.sys [2009-08-10 119680]
S3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2011-04-18 40832]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2011-05-18 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2011-05-18 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2011-05-18 9216]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2011-05-18 9216]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
S3 WmFilter;Logitech Gaming HID Filter Driver; C:\Windows\system32\drivers\WmFilter.sys [2010-04-27 43976]
S3 WmHidLo;Logitech Gaming USB Filter Driver; C:\Windows\system32\drivers\WmHidLo.sys [2010-04-27 36936]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-07-08 204288]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-07-07 365568]
R2 ezSharedSvc;Easybits Services for Windows; C:\Windows\syswow64\ezSharedSvcHost.exe [2010-04-23 514232]
R2 HP Health Check Service;HP Health Check Service; C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe [2010-09-18 126008]
R2 HPAuto;HP Auto; C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe [2010-08-06 681528]
R2 HPClientSvc;HP Client Services; C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-08-06 291896]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2010-08-21 92216]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2011-06-20 73728]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2011-04-27 12784]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [2010-09-28 1119768]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [2006-12-19 81920]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-08-18 66872]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-07-27 249136]
R2 TeamViewer6;TeamViewer 6; C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-08-17 2358656]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\Antimalware\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-04-27 288272]
R3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2011-06-08 633856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-08-04 136176]
S3 GameConsoleService;GameConsoleService; C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe [2010-06-19 246520]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-08-04 136176]
S3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2010-08-21 707128]
S3 NBService;NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [2008-04-08 800040]
S3 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [2008-01-22 275752]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-08-16 1255736]

-----------------EOF-----------------




Omlouvám se za vytvoření tří témat, omylem jsem tvořil témata a ne odpovědi...

//EDIT vyosek: temata sloucena

Zdravim a pekny den preji

Temata jsem sloucil do jednoho

v prve rade zkontrolujte kabelaz, ci je dobre zapojena

Nyni je s PC nejaky problemy

Stahnete OTL (viz muj podpis) a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
• Zaskrtnete okenko Pro vsechny uzivatele
• Zaskrtnete okenko Kontrola na havet "LOP"
• Zaskrtnete okenko Kontrola na havet "Purity"
• Stari souboru zmente z 30 dnu na 7 dnu
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  CREATERESTOREPOINT
  
  netsvcs
  drivers32
  savembr:0
  
  /md5start
  adp3132.sys
  AGP440.sys
  ahcix86.sys
  ahcix86s.sys
  atapi.sys
  autochk.exe
  cdrom.sys
  cngaudit.dll
  cryptsvc.dll
  eNetHook.dll
  eventlog.dll
  explorer.exe
  hal.dll
  Changer.sys
  iaStor.sys
  iastorv.sys
  IdeChnDr.sys
  isapnp.sys
  JakNDis.sys
  KR10N.sys
  logevent.dll
  lsass.exe
  mv61xx.sys
  ndis.sys
  netlogon.dll
  ntelogon.dll
  nvata.sys
  nvatabus.sys
  nvgts.sys
  nvraid.sys
  nvrd32.sys
  nvstor.sys
  nvstor32.sys
  scecli.dll
  sceclt.dll
  smss.exe
  svchost.exe
  symmpi.sys
  tcpip.sys
  userinit.exe
  vaxscsi.sys
  viamraid.sys
  viasraid.sys
  ViPrt.sys
  winlogon.exe
  ws2_32.dll
  /md5stop
  
  %systemroot%*.* /U /s
  %SYSTEMDRIVE%\*.exe
  %ALLUSERSPROFILE%\Application Data\*.
  %ALLUSERSPROFILE%\Application Data\*.exe /s
  %APPDATA%\*.
  %APPDATA%\*.exe /s
  %systemroot%\*. /mp /s
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\Tasks\*.job /lockedfiles
  %systemroot%\system32\drivers\*.sys /lockedfiles
  %systemroot%\System32\config\*.sav
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\system32\drivers\*.sys /3
  %systemroot%\system32\*.* /3
  %SYSTEMDRIVE%\*.exe
  
  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
  
  type c:\boot.ini >> test.txt /c
  %SystemDrive%\PhysicalMBR.bin /md5 
  
  *crack* /s
  *keygen* /s

• Kliknete na tlacitko Prohledat
• Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte

OTL logfile created on: 11.9.2011 18:59:59 - Run 1
OTL by OldTimer - Version 3.2.27.0 Folder = C:\Users\pavilion\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

4,00 Gb Total Physical Memory | 2,54 Gb Available Physical Memory | 63,45% Memory free
8,00 Gb Paging File | 6,26 Gb Available in Paging File | 78,24% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 917,60 Gb Total Space | 776,89 Gb Free Space | 84,67% Space Free | Partition Type: NTFS
Drive D: | 13,82 Gb Total Space | 1,75 Gb Free Space | 12,63% Space Free | Partition Type: NTFS
Drive E: | 2,17 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: PAVILION-HP | User Name: pavilion | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2011.09.11 18:58:02 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Users\pavilion\Downloads\OTL.exe
PRC - [2011.09.03 13:28:25 | 001,017,912 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2011.08.18 05:30:32 | 000,066,872 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2011.08.17 16:52:04 | 002,358,656 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
PRC - [2011.08.04 09:50:30 | 000,966,712 | ---- | M] (Nokia) -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe
PRC - [2011.08.02 08:33:30 | 004,910,912 | ---- | M] (DT Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
PRC - [2011.08.02 08:33:22 | 002,998,592 | ---- | M] (DT Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe
PRC - [2011.06.14 17:42:26 | 001,540,096 | ---- | M] (Nokia) -- C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe
PRC - [2011.06.08 13:02:00 | 000,633,856 | ---- | M] (Nokia) -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
PRC - [2011.06.06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011.03.31 14:38:26 | 000,140,288 | ---- | M] (Nokia) -- C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
PRC - [2010.09.28 17:09:28 | 001,119,768 | ---- | M] (PDF Complete Inc) -- C:\Program Files (x86)\PDF Complete\pdfsvc.exe
PRC - [2010.08.21 02:57:28 | 000,092,216 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
PRC - [2010.04.23 21:00:00 | 000,514,232 | ---- | M] (EasyBits Software AS) -- C:\Windows\SysWOW64\ezSharedSvcHost.exe
PRC - [2010.04.23 21:00:00 | 000,514,232 | ---- | M] (EasyBits Software AS) -- C:\Windows\SysWOW64\ezSharedSvcHost.exe
PRC - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
PRC - [2008.11.20 19:47:28 | 000,062,768 | ---- | M] (Hewlett-Packard) -- C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
PRC - [2006.12.19 10:30:26 | 000,081,920 | ---- | M] (Prolific Technology Inc.) -- C:\Windows\SysWOW64\IoctlSvc.exe


========== Modules (No Company Name) ==========

MOD - [2011.09.03 13:28:23 | 000,400,440 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\13.0.782.220\ppgooglenaclpluginchrome.dll
MOD - [2011.09.03 13:28:22 | 004,118,072 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\13.0.782.220\pdf.dll
MOD - [2011.09.03 13:26:51 | 000,104,520 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\13.0.782.220\avutil-50.dll
MOD - [2011.09.03 13:26:49 | 000,203,848 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\13.0.782.220\avformat-52.dll
MOD - [2011.09.03 13:26:48 | 001,846,344 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\13.0.782.220\avcodec-52.dll
MOD - [2011.09.03 11:35:01 | 006,338,720 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\13.0.782.220\gcswf32.dll
MOD - [2011.08.04 09:49:10 | 000,931,896 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Maps Service API.dll
MOD - [2011.08.04 09:48:28 | 010,837,504 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\QtWebKit4.dll
MOD - [2011.08.04 09:48:28 | 000,913,920 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\QtNetwork4.dll
MOD - [2011.08.04 09:48:28 | 000,416,256 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\sqldrivers\qsqlite4.dll
MOD - [2011.08.04 09:48:28 | 000,196,608 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Imageformats\qjpeg4.dll
MOD - [2011.08.04 09:48:28 | 000,026,624 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Imageformats\qgif4.dll
MOD - [2011.08.04 09:48:26 | 008,166,912 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\QtGui4.dll
MOD - [2011.08.04 09:48:26 | 002,551,296 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\QtXmlPatterns4.dll
MOD - [2011.08.04 09:48:26 | 002,282,496 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\QtCore4.dll
MOD - [2011.08.04 09:48:26 | 002,246,656 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\QtDeclarative4.dll
MOD - [2011.08.04 09:48:26 | 001,288,192 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\QtScript4.dll
MOD - [2011.08.04 09:48:26 | 000,676,864 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\QtOpenGL4.dll
MOD - [2011.08.04 09:48:26 | 000,340,480 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\QtXml4.dll
MOD - [2011.08.04 09:48:26 | 000,266,752 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\phonon4.dll
MOD - [2011.08.04 09:48:26 | 000,190,464 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\QtSql4.dll
MOD - [2011.08.04 09:19:44 | 000,508,416 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\QtMultimediaKit1.dll
MOD - [2011.08.04 09:19:44 | 000,109,568 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\mediaservice\dsengine.dll
MOD - [2011.08.04 09:19:16 | 000,378,880 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\QxtCore.dll
MOD - [2011.08.04 09:19:16 | 000,159,232 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\QxtWeb.dll
MOD - [2011.08.04 09:19:14 | 000,089,088 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\qjson.dll
MOD - [2011.08.04 09:19:12 | 000,392,080 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\ssoengine.dll
MOD - [2011.08.04 09:19:12 | 000,387,976 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\OviShareLib.dll
MOD - [2011.08.04 09:19:12 | 000,058,768 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\securestorage.dll
MOD - [2011.08.04 09:18:02 | 000,727,552 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\CommonUpdateChecker.dll
MOD - [2005.07.20 11:48:10 | 000,059,904 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\zlib1.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2011.07.08 04:25:02 | 000,204,288 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2011.07.07 23:36:06 | 000,365,568 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
SRV:64bit: - [2011.04.27 17:21:18 | 000,288,272 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe -- (NisSrv)
SRV:64bit: - [2011.04.27 17:21:18 | 000,012,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe -- (MsMpSvc)
SRV:64bit: - [2010.08.06 04:51:08 | 000,291,896 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe -- (HPClientSvc)
SRV:64bit: - [2010.08.06 04:47:48 | 000,681,528 | ---- | M] (Hewlett-Packard) [Auto | Running] -- C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe -- (HPAuto)
SRV:64bit: - [2009.07.14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2011.08.18 05:30:32 | 000,066,872 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2011.08.17 16:52:04 | 002,358,656 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe -- (TeamViewer6)
SRV - [2011.06.08 13:02:00 | 000,633,856 | ---- | M] (Nokia) [On_Demand | Running] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2011.06.06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2010.10.22 13:08:18 | 001,039,360 | ---- | M] (Hewlett-Packard Co.) [Auto | Running] -- C:\Program Files (x86)\Hp\Digital Imaging\bin\HPSLPSVC64.DLL -- (HPSLPSVC)
SRV - [2010.09.28 17:09:28 | 001,119,768 | ---- | M] (PDF Complete Inc) [Auto | Running] -- C:\Program Files (x86)\PDF Complete\pdfsvc.exe -- (pdfcDispatcher)
SRV - [2010.08.21 02:57:28 | 000,092,216 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe -- (HPDrvMntSvc.exe)
SRV - [2010.06.19 02:59:12 | 000,246,520 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe -- (GameConsoleService)
SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2006.12.19 10:30:26 | 000,081,920 | ---- | M] (Prolific Technology Inc.) [Auto | Running] -- C:\Windows\SysWOW64\IoctlSvc.exe -- (PLFlash DeviceIoControl Service)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2011.08.16 18:10:20 | 000,270,912 | ---- | M] (DT Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2011.08.16 17:52:03 | 000,526,392 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2011.07.08 05:15:50 | 009,884,672 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2011.07.08 03:47:04 | 000,307,712 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2011.05.18 10:14:22 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt)
DRV:64bit: - [2011.05.18 10:14:20 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)
DRV:64bit: - [2011.05.18 10:14:16 | 000,027,136 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc)
DRV:64bit: - [2011.05.18 10:14:12 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd)
DRV:64bit: - [2011.04.27 15:25:24 | 000,084,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
DRV:64bit: - [2011.03.30 19:46:44 | 000,114,704 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:64bit: - [2011.03.11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010.11.20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 12:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.20 11:43:57 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:64bit: - [2010.09.03 07:59:26 | 000,349,800 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2010.08.13 14:35:36 | 000,075,904 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amd_sata.sys -- (amd_sata)
DRV:64bit: - [2010.08.13 14:35:36 | 000,038,016 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amd_xata.sys -- (amd_xata)
DRV:64bit: - [2010.07.22 04:57:22 | 001,002,848 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x)
DRV:64bit: - [2010.04.27 16:57:20 | 000,016,200 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmVirHid.sys -- (WmVirHid)
DRV:64bit: - [2010.04.27 16:57:14 | 000,036,936 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmHidLo.sys -- (WmHidLo)
DRV:64bit: - [2010.04.27 16:57:12 | 000,026,440 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmBEnum.sys -- (WmBEnum)
DRV:64bit: - [2010.04.27 14:03:12 | 000,077,512 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmXlCore.sys -- (WmXlCore)
DRV:64bit: - [2010.04.27 14:02:42 | 000,043,976 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmFilter.sys -- (WmFilter)
DRV:64bit: - [2010.03.10 16:33:52 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie64.sys -- (AtiPcie) AMD PCI Express (3GIO)
DRV:64bit: - [2010.02.18 09:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64)
DRV:64bit: - [2009.12.22 10:26:36 | 000,038,456 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
DRV:64bit: - [2009.08.10 14:07:40 | 000,119,680 | ---- | M] (Gemalto) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\GemCCID.sys -- (GemCCID)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2008.08.28 12:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPDTDF
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=HPDTDF
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPDTDF
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=HPDTDF


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-2484980351-1062422368-565276184-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msn.com/?ocid=OIE9MSE
IE - HKU\S-1-5-21-2484980351-1062422368-565276184-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\S-1-5-21-2484980351-1062422368-565276184-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://ib24.csob.cz/
IE - HKU\S-1-5-21-2484980351-1062422368-565276184-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========


FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpWinExt,version=5.0: C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\msntoolbar@msn.com: C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\Firefox [2010.12.30 18:23:35 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2010.12.30 18:23:39 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [2010.12.30 18:23:43 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011.08.16 16:29:57 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.08.04 10:55:32 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.08.16 23:14:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}: C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ [2011.09.04 08:21:17 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011.08.16 16:29:57 | 000,000,000 | ---D | M]

[2011.08.16 15:06:02 | 000,000,000 | ---D | M] (No name found) -- C:\Users\pavilion\AppData\Roaming\Mozilla\Extensions
[2011.08.16 19:05:37 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2011.08.23 10:23:38 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2011.08.16 19:05:37 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011.08.04 10:57:05 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}
[2011.07.08 08:29:03 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011.08.04 10:56:46 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2010.01.01 09:00:00 | 000,002,208 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\heureka-cz.xml
[2010.01.01 09:00:00 | 000,000,638 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\jyxo-cz.xml
[2010.01.01 09:00:00 | 000,001,367 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\seznam-cz.xml
[2010.01.01 09:00:00 | 000,000,654 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\slunecnice-cz.xml
[2010.01.01 09:00:00 | 000,001,179 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Bing Bar BHO) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (@C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll,-100) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll (Microsoft Corporation)
O3 - HKU\S-1-5-21-2484980351-1062422368-565276184-1000\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O4:64bit: - HKLM..\Run: [hpsysdrv] c:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe (Hewlett-Packard)
O4:64bit: - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe ()
O4:64bit: - HKLM..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe (Logitech Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe (EasyBits Software AS)
O4 - HKLM..\Run: [NokiaMServer] C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe (Nokia)
O4 - HKLM..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe (PDF Complete Inc)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2484980351-1062422368-565276184-1000..\Run: [] File not found
O4 - HKU\S-1-5-21-2484980351-1062422368-565276184-1000..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-2484980351-1062422368-565276184-1000..\Run: [NokiaOviSuite2] C:\Program Files (x86)\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe (Nokia)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: EnableShellExecuteHooks = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0
O7 - HKU\S-1-5-21-2484980351-1062422368-565276184-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2484980351-1062422368-565276184-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0
O7 - HKU\S-1-5-21-2484980351-1062422368-565276184-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_25)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 10.145.25.1 85.92.54.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9EDBC47A-264F-49D9-8C18-AA336B6D3830}: DhcpNameServer = 192.168.1.1 10.145.25.1 85.92.54.1
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O28 - HKLM ShellExecuteHooks: {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll (EasyBits Software Corp.)
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{3507cd9b-c82a-11e0-a556-d48564a128fc}\Shell - "" = AutoRun
O33 - MountPoints2\{3507cd9b-c82a-11e0-a556-d48564a128fc}\Shell\AutoRun\command - "" = K:\setup\rsrc\Autorun.exe
O33 - MountPoints2\{3507cd9b-c82a-11e0-a556-d48564a128fc}\Shell\dinstall\command - "" = K:\Directx\dxsetup.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

CREATERESTOREPOINT
Restore point Set: OTL Restore Point


Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.ac3acm - C:\Windows\SysWow64\ac3acm.acm (fccHandler)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\Windows\SysWow64\lameACM.acm (http://www.mp3dev.org/)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\Windows\SysWow64\ff_vfw.dll ()
Drivers32: VIDC.XVID - C:\Windows\SysWow64\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\Windows\SysWow64\yv12vfw.dll (www.helixcommunity.org)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2011.09.10 16:09:48 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2011.09.10 16:09:48 | 000,000,000 | ---D | C] -- C:\rsit
[2011.09.10 14:34:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2011.09.07 20:55:38 | 000,000,000 | ---D | C] -- C:\Users\pavilion\Desktop\Magda
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2011.09.11 19:01:48 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2011.09.11 18:43:00 | 000,000,956 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011.09.11 13:08:36 | 000,000,952 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011.09.11 13:08:06 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.09.11 13:07:49 | 3220,660,224 | -HS- | M] () -- C:\hiberfil.sys
[2011.09.11 12:15:30 | 000,015,568 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.09.11 12:15:30 | 000,015,568 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.09.10 14:34:28 | 000,001,019 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2011.09.08 06:29:46 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForpavilion.job
[2011.09.06 08:19:46 | 002,278,440 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.09.06 08:19:46 | 000,689,760 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat
[2011.09.06 08:19:46 | 000,627,776 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2011.09.06 08:19:46 | 000,611,996 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.09.06 08:19:46 | 000,128,716 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat
[2011.09.06 08:19:46 | 000,120,794 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2011.09.06 08:19:46 | 000,105,214 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011.09.11 19:01:48 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2011.09.10 14:34:28 | 000,001,019 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2011.09.07 19:07:07 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\HPCeeScheduleForpavilion.job
[2011.08.18 05:30:32 | 000,682,280 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe
[2011.08.17 19:55:01 | 000,111,928 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2011.08.17 19:54:58 | 000,066,872 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2011.08.17 19:54:56 | 000,000,331 | ---- | C] () -- C:\Windows\game.ini
[2011.08.16 19:58:27 | 000,223,817 | ---- | C] () -- C:\Windows\hpoins18.dat.temp
[2011.08.16 19:58:27 | 000,005,355 | ---- | C] () -- C:\Windows\hpomdl18.dat.temp
[2011.08.16 19:31:54 | 000,000,135 | ---- | C] () -- C:\Windows\wcx_ftp.ini
[2011.08.16 18:15:00 | 002,302,100 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011.08.16 16:22:37 | 000,223,800 | ---- | C] () -- C:\Windows\hpoins18.dat
[2011.08.16 16:22:37 | 000,005,355 | ---- | C] () -- C:\Windows\hpomdl18.dat
[2011.08.16 14:57:01 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2011.08.04 11:40:38 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
[2011.08.04 11:30:36 | 000,644,608 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2011.08.04 11:30:36 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2011.08.04 11:30:36 | 000,175,616 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2011.08.04 11:30:36 | 000,073,216 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2011.08.04 11:30:36 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2011.06.27 16:23:20 | 000,053,760 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll
[2011.03.17 18:51:44 | 000,003,929 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2011.03.10 14:58:56 | 000,061,440 | ---- | C] () -- C:\Windows\SysWow64\SecureStoreKSignReg.exe
[2011.03.10 14:58:18 | 000,020,992 | ---- | C] () -- C:\Windows\SysWow64\SecureStoreCspRes.dll
[2011.03.10 14:57:20 | 000,089,088 | ---- | C] () -- C:\Windows\SysWow64\SecureStoreKSign.dll
[2011.03.10 14:56:54 | 000,159,744 | ---- | C] () -- C:\Windows\SysWow64\SecureStorePkcs11.dll
[2011.03.10 14:56:26 | 000,156,672 | ---- | C] () -- C:\Windows\SysWow64\SecureStoreCsp.dll
[2011.03.10 14:55:36 | 000,393,728 | ---- | C] () -- C:\Windows\SysWow64\SecureStoreCore.dll
[2010.12.30 18:17:18 | 000,009,988 | ---- | C] () -- C:\Windows\SysWow64\ezdigsgn.dat
[2010.12.30 18:00:52 | 000,014,051 | ---- | C] () -- C:\Windows\SysWow64\RaCoInst.dat
[2010.12.30 17:46:45 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2010.09.21 19:30:44 | 000,007,736 | ---- | C] () -- C:\Windows\hpDSTRES.DLL
[2010.04.21 15:30:48 | 000,372,736 | ---- | C] () -- C:\Windows\SysWow64\openssl_100.exe
[2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2005.01.08 18:54:42 | 000,132,096 | ---- | C] () -- C:\Windows\SysWow64\keymaker.dll
[2002.12.06 15:44:26 | 000,296,448 | ---- | C] () -- C:\Windows\SysWow64\KROBw32.dll

========== LOP Check ==========

[2011.08.04 10:54:23 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\Ashampoo
[2011.09.10 14:39:50 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\DAEMON Tools Lite
[2011.09.04 09:30:19 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\Nokia
[2011.09.04 09:30:21 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\Nokia Ovi Suite
[2011.08.16 14:56:01 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\OpenOffice.org
[2011.09.04 08:27:11 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\PC Suite
[2011.08.04 11:46:28 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\PictureMover
[2011.08.16 20:13:39 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\TeamViewer
[2011.08.16 16:08:11 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\WildTangent
[2011.08.16 15:15:17 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\_MDLogs
[2009.07.14 06:08:49 | 000,013,602 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========


< >

< >


< MD5 for: AGP440.SYS >
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.20776_none_39c28c74544f69e8\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010.11.20 14:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010.11.20 14:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2009.07.14 02:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2009.07.14 02:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_3de8def0db722996\autochk.exe
[2010.11.20 13:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010.11.20 13:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009.07.14 00:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys
[2010.11.20 10:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010.11.20 10:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010.11.20 10:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: CNGAUDIT.DLL >
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009.07.14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009.07.14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll

< MD5 for: CRYPTSVC.DLL >
[2010.11.20 14:25:59 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=15597883FBE9B056F276ADA3AD87D9AF -- C:\Windows\SysNative\cryptsvc.dll
[2010.11.20 14:25:59 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=15597883FBE9B056F276ADA3AD87D9AF -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_d4259ed3b16ed82a\cryptsvc.dll
[2009.07.14 02:40:24 | 000,175,104 | ---- | M] (Microsoft Corporation) MD5=8C57411B66282C01533CB776F98AD384 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_d1f48b0bb4805490\cryptsvc.dll
[2009.07.14 02:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_75d5ef87fc22e35a\cryptsvc.dll
[2010.11.20 13:18:24 | 000,136,192 | ---- | M] (Microsoft Corporation) MD5=A585BEBF7D054BD9618EDA0922D5484A -- C:\Windows\SysWOW64\cryptsvc.dll
[2010.11.20 13:18:24 | 000,136,192 | ---- | M] (Microsoft Corporation) MD5=A585BEBF7D054BD9618EDA0922D5484A -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_7807034ff91166f4\cryptsvc.dll

< MD5 for: EVENTLOG.DLL >
[2008.06.06 23:03:52 | 000,007,216 | ---- | M] () MD5=C2A279A458A06DE2C83D842AA042B5A8 -- C:\Program Files (x86)\CyberLink\PowerDirector\EventLog.dll

< MD5 for: EXPLORER.EXE >
[2010.12.30 18:35:53 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=00B0358734CAA32C39D181FE6916B178 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20542_none_b8b0208ee0ce1889\explorer.exe
[2011.02.26 07:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011.02.26 06:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2010.12.30 18:36:43 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011.02.26 07:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010.11.20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2010.12.30 18:35:53 | 002,868,736 | ---- | M] (Microsoft Corporation) MD5=6D4F9E4B640B413C6F73414327484C80 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16434_none_addea9f19345cd81\explorer.exe
[2010.12.30 18:34:49 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010.12.30 18:36:43 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2010.12.30 18:34:49 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010.11.20 14:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2010.12.30 18:36:43 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2010.12.30 18:34:49 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009.07.14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2010.12.30 18:36:43 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2010.12.30 18:35:53 | 002,868,736 | ---- | M] (Microsoft Corporation) MD5=CA17F8620815267DC838E30B68CB5052 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20542_none_ae5b763cac6d568e\explorer.exe
[2011.02.26 07:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2010.12.30 18:34:49 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe
[2010.12.30 18:35:53 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=FC89FACA0473641CB625EDA9277D0885 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16434_none_b8335443c7a68f7c\explorer.exe

< MD5 for: HAL.DLL >
[2009.07.14 02:47:48 | 000,263,232 | ---- | M] (Microsoft Corporation) MD5=C0A6F6E05E14FBCAEDE7796C8590B7AC -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_071de44b735b3dfc\hal.dll
[2010.11.20 14:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010.11.20 14:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: IASTORV.SYS >
[2010.11.20 14:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010.11.20 14:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2010.12.30 18:41:12 | 000,410,504 | ---- | M] (Intel Corporation) MD5=513DC087CFED7D2BB82F005385D3531F -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16592_none_0af87721a183cb70\iaStorV.sys
[2011.03.11 07:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\drivers\iaStorV.sys
[2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys
[2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys
[2011.03.11 07:23:00 | 000,410,496 | ---- | M] (Intel Corporation) MD5=B75E45C564E944A2657167D197AB29DA -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_0b141c81a16e25e6\iaStorV.sys
[2011.03.11 07:25:49 | 000,410,496 | ---- | M] (Intel Corporation) MD5=BFDC9D75698800CFE4D1698BF2750EA2 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_0bccc8c8ba6985c1\iaStorV.sys
[2009.07.14 02:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys
[2010.12.30 18:41:12 | 000,410,496 | ---- | M] (Intel Corporation) MD5=E353CF970C5D4D6A092911E15FB78C07 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.20712_none_0bd89532ba6088d9\iaStorV.sys

< MD5 for: ISAPNP.SYS >
[2009.07.14 02:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\SysNative\drivers\isapnp.sys
[2009.07.14 02:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\isapnp.sys
[2009.07.14 02:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\isapnp.sys
[2009.07.14 02:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\isapnp.sys

< MD5 for: LSASS.EXE >
[2009.07.14 02:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\SysNative\lsass.exe
[2009.07.14 02:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16385_none_023f7c69767c3edd\lsass.exe
[2009.07.14 02:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16484_none_023e7e05767d22ad\lsass.exe
[2009.07.14 02:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.20594_none_02bd4ae48fa2de68\lsass.exe
[2009.07.14 02:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_04709031736ac277\lsass.exe

< MD5 for: NDIS.SYS >
[2010.11.20 14:33:45 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\SysNative\drivers\ndis.sys
[2010.11.20 14:33:45 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_05ed313632ae9759\ndis.sys
[2009.07.14 02:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys

< MD5 for: NETLOGON.DLL >
[2009.07.14 02:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2010.11.20 14:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
[2010.11.20 14:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
[2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
[2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll

< MD5 for: NVRAID.SYS >
[2011.03.11 07:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\SysNative\drivers\nvraid.sys
[2011.03.11 07:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvraid.sys
[2011.03.11 07:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvraid.sys
[2009.07.14 02:48:27 | 000,149,056 | ---- | M] (NVIDIA Corporation) MD5=3E38712941E9BB4DDBEE00AFFE3FED3D -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvraid.sys
[2010.12.30 18:41:12 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=491E3CF1A4F0869E32197E34603B9BE1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20712_none_96a205e1f19732b1\nvraid.sys
[2010.11.20 14:33:48 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvraid.sys
[2010.11.20 14:33:48 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvraid.sys
[2011.03.11 07:19:21 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=666CA16F17914C1CD3616CF16DE0A6EA -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvraid.sys
[2011.03.11 07:23:06 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=A4D9C9A608A97F59307C2F2600EDC6A4 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvraid.sys
[2011.03.11 07:25:53 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=A5C82EB2F72AA004887F90B84A771F73 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvraid.sys
[2010.12.30 18:41:12 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=DEAB10231CBDB0881FC25428EBE11506 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16592_none_95c1e7d0d8ba7548\nvraid.sys

< MD5 for: NVSTOR.SYS >
[2010.12.30 18:41:12 | 000,166,280 | ---- | M] (NVIDIA Corporation) MD5=0AF7B8136794E23E87BE138992880E64 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16592_none_95c1e7d0d8ba7548\nvstor.sys
[2009.07.14 02:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys
[2011.03.11 07:23:06 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=6C1D5F70E7A6A3FD1C90D840EDC048B9 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvstor.sys
[2011.03.11 07:25:53 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=AE274836BA56518E279087363A781214 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvstor.sys
[2010.12.30 18:41:12 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=CE76755AF933E728CEBA6C7A970838A4 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20712_none_96a205e1f19732b1\nvstor.sys
[2011.03.11 07:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys
[2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys
[2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010.11.20 14:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010.11.20 14:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys

< MD5 for: SCECLI.DLL >
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 02:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.20 14:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.20 14:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SMSS.EXE >
[2009.07.14 02:39:41 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=1911A3356FA3F77CCC825CCBAC038C2A -- C:\Windows\SysNative\smss.exe
[2009.07.14 02:39:41 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=1911A3356FA3F77CCC825CCBAC038C2A -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_082f99a432e2a661\smss.exe

< MD5 for: SVCHOST.EXE >
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009.07.14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009.07.14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2011.04.25 06:28:24 | 001,893,248 | ---- | M] (Microsoft Corporation) MD5=1F748D5439B65E0BEBD92F65048F030D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20951_none_0fb918de99201ffb\tcpip.sys
[2010.11.20 14:33:57 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2011.06.21 07:16:55 | 001,888,128 | ---- | M] (Microsoft Corporation) MD5=5279D4DD69C7C71524B8E7A5746D15CC -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20992_none_0f8ed978993fa916\tcpip.sys
[2010.12.30 18:37:33 | 001,889,152 | ---- | M] (Microsoft Corporation) MD5=542C6767C68C9D6AAACA59436B0D15C2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20733_none_0fd0b57e990e2079\tcpip.sys
[2011.04.25 06:32:22 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=61DC720BB065D607D5823F13D2A64321 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16802_none_0f668bf97fd90dd3\tcpip.sys
[2010.04.09 12:06:28 | 001,898,376 | ---- | M] (Microsoft Corporation) MD5=7FC877A25796D8ADF539E64703FCA7E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16569_none_0f2ca8c580036f65\tcpip.sys
[2010.12.30 18:37:33 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=90A2D722CF64D911879D6C4A4F802A4D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16610_none_0f59b7ad7fe2fcc8\tcpip.sys
[2009.07.14 02:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys
[2011.04.25 06:33:51 | 001,923,968 | ---- | M] (Microsoft Corporation) MD5=92CE29D95AC9DD2D0EE9061D551BA250 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17603_none_114de9497cfe9316\tcpip.sys
[2011.06.21 07:20:30 | 001,914,752 | ---- | M] (Microsoft Corporation) MD5=A0EB71E0DC047C7CC95CD6AB4036296E -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21754_none_11a276c29643d7ec\tcpip.sys
[2010.04.09 08:56:29 | 001,892,232 | ---- | M] (Microsoft Corporation) MD5=A9C0F786AC1F736891D05CE0A1D29DEB -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20687_none_0f9ea52499331463\tcpip.sys
[2011.04.25 07:16:34 | 001,927,552 | ---- | M] (Microsoft Corporation) MD5=B77977AEB2FF159D01DB08A309989C5F -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21712_none_11cbb5de9625357a\tcpip.sys
[2011.06.21 07:27:14 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=B9D87C7707F058AC652A398CD28DE14B -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16839_none_0f4d1e3b7feb1307\tcpip.sys
[2011.06.21 07:34:00 | 001,923,968 | ---- | M] (Microsoft Corporation) MD5=F0E98C00A09FDF791525829A1D14240F -- C:\Windows\SysNative\drivers\tcpip.sys
[2011.06.21 07:34:00 | 001,923,968 | ---- | M] (Microsoft Corporation) MD5=F0E98C00A09FDF791525829A1D14240F -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17638_none_11327af77d12659c\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010.11.20 14:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.20 14:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010.11.20 14:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010.11.20 14:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009.07.14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2010.12.30 18:36:43 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2010.12.30 18:36:43 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

< MD5 for: WS2_32.DLL >
[2010.11.20 14:27:29 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\SysNative\ws2_32.dll
[2010.11.20 14:27:29 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_50ddb631e4f59005\ws2_32.dll
[2009.07.14 02:41:58 | 000,296,448 | ---- | M] (Microsoft Corporation) MD5=7083F463788CB34FCC42F565D56F89E8 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_4eaca269e8070c6b\ws2_32.dll
[2010.11.20 13:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\SysWOW64\ws2_32.dll
[2010.11.20 13:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll
[2009.07.14 02:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_f28e06e62fa99b35\ws2_32.dll

< >

< %systemroot%*.* /U /s >
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[3 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[1 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[1 C:\Windows\twain_32\*.tmp files -> C:\Windows\twain_32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2011.08.16 20:57:01 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\Adobe
[2011.08.16 22:55:01 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\Ahead
[2011.08.04 10:54:23 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\Ashampoo
[2011.08.04 11:46:35 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\ATI
[2011.09.10 14:37:07 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\CyberLink
[2011.09.10 14:39:50 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\DAEMON Tools Lite
[2011.08.17 16:40:54 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\Hewlett-Packard
[2011.08.16 20:04:11 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\HP
[2011.09.07 19:05:33 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\HP Support Assistant
[2011.08.16 19:34:32 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\hpqLog
[2011.09.07 19:05:33 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\HpUpdate
[2011.08.04 11:43:00 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\Identities
[2011.08.16 15:15:20 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\Macromedia
[2009.07.14 08:44:38 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\Media Center Programs
[2011.09.07 20:48:39 | 000,000,000 | --SD | M] -- C:\Users\pavilion\AppData\Roaming\Microsoft
[2011.08.16 15:06:02 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\Mozilla
[2011.09.04 09:30:19 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\Nokia
[2011.09.04 09:30:21 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\Nokia Ovi Suite
[2011.08.16 14:56:01 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\OpenOffice.org
[2011.09.04 08:27:11 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\PC Suite
[2011.08.04 11:46:28 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\PictureMover
[2011.09.10 16:07:37 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\Skype
[2011.08.16 20:07:01 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\skypePM
[2011.08.16 20:13:39 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\TeamViewer
[2011.08.04 11:35:53 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\vlc
[2011.08.16 16:08:11 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\WildTangent
[2011.09.10 14:39:50 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\Winamp
[2011.08.16 15:54:43 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\WinRAR
[2011.08.16 15:15:17 | 000,000,000 | ---D | M] -- C:\Users\pavilion\AppData\Roaming\_MDLogs

< %APPDATA%\*.exe /s >
[2011.08.31 21:42:20 | 000,010,134 | R--- | M] () -- C:\Users\pavilion\AppData\Roaming\Microsoft\Installer\{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}\ARPPRODUCTICON.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"DAEMON Tools Lite" = "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun -- [2011.08.02 08:33:30 | 004,910,912 | ---- | M] (DT Soft Ltd)
"Sidebar" = C:\Program Files\Windows Sidebar\sidebar.exe /autoRun -- [2010.11.20 14:25:17 | 001,475,584 | ---- | M] (Microsoft Corporation)
"" =
"NokiaOviSuite2" = C:\Program Files (x86)\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray -- [2011.08.04 09:50:30 | 000,966,712 | ---- | M] (Nokia)

< >

< type c:\boot.ini >> test.txt /c >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2011.09.11 19:01:48 | 000,000,512 | ---- | M] () MD5=E164907B888FCC016E440B1778E62492 -- C:\PhysicalMBR.bin

< >

< *crack* /s >

< *keygen* /s >
[2010.05.17 20:01:26 | 002,298,660 | ---- | M] () -- \HDD zálohy notebook a pc\Záloha\David\Eset keygen.rar
[2009.12.03 00:31:30 | 000,030,084 | ---- | M] () -- \HDD zálohy notebook a pc\Záloha\Magda\foto prodejna\Telefon\Smartphoneware%20All%20S60v3%20keygen.rar
[2008.04.08 21:51:25 | 000,000,024 | ---- | M] () -- \Program Files (x86)\Activision\Call of Duty - World at War\Crack\Key gen.txt
[2009.11.11 22:56:16 | 000,085,504 | ---- | M] () -- \Users\pavilion\Desktop\call\Call.Of.Duty.5.World.At.War_KEYGEN-FFF.exe

< End of report >

OTL Extras logfile created on: 11.9.2011 18:59:59 - Run 1
OTL by OldTimer - Version 3.2.27.0 Folder = C:\Users\pavilion\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

4,00 Gb Total Physical Memory | 2,54 Gb Available Physical Memory | 63,45% Memory free
8,00 Gb Paging File | 6,26 Gb Available in Paging File | 78,24% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 917,60 Gb Total Space | 776,89 Gb Free Space | 84,67% Space Free | Partition Type: NTFS
Drive D: | 13,82 Gb Total Space | 1,75 Gb Free Space | 12,63% Space Free | Partition Type: NTFS
Drive E: | 2,17 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: PAVILION-HP | User Name: pavilion | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-2484980351-1062422368-565276184-1000\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{05BFB060-4F22-4710-B0A2-2801A1B606C5}" = Microsoft Antimalware
"{05EFBF37-0E52-4579-875C-7EEF0DFB4FCB}" = Network64
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{1444D2EE-C7AD-44A8-844F-2634B49353D1}" = Logitech Gaming Software 5.10
"{17016DA1-F040-4032-BD36-34DD317BC9D5}" = HP Photosmart All-In-One Driver Software 13.0 Rel. A
"{17CA32D1-73BD-4990-B8F6-369D8D34B05D}" = Microsoft Antimalware Service CS-CZ Language Pack
"{23170F69-40C1-2702-0920-000001000000}" = 7-Zip 9.20 (x64 edition)
"{26A24AE4-039D-4CA4-87B4-2F86416025FF}" = Java(TM) 6 Update 25 (64-bit)
"{2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2}" = HP Client Services
"{36A5281A-B56F-44AA-23F3-0DD2A37B2825}" = AMD Media Foundation Decoders
"{42738DB0-FC3E-4672-A99B-9372F5696E30}" = Microsoft Security Client
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{4D668D4F-FAA2-4726-834C-31F4614F312E}" = MSVC80_x64_v2
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6966E87A-91BA-4D4B-B7DA-A4610FAA31E0}" = ATI Catalyst Install Manager
"{6BFAB6C1-6D46-46DB-A538-A269907C9F2F}" = Network64
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{7567A068-2F02-40D1-A34C-16D79ECD35A6}" = GemPcCCID
"{7C4B297D-0F5D-4D0F-8C5E-1E4BA5D7674B}" = I.CA SecureStore 2.17.1
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0405-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Czech) 2007
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{A40F60B1-F1E1-452E-96A5-FF97F9A2D102}" = HP MediaSmart SmartMenu
"{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}" = MSVC90_x64
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{ADED6869-D6D1-671E-9653-3782C21FA809}" = AMD Drag and Drop Transcoding
"{AFCA7057-581F-9CE2-A1BD-65371995C64F}" = AMD Fuel
"{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}" = PlayReady PC Runtime amd64
"{BCC08D47-60ED-FA7F-241B-34BC9947D9FF}" = ccc-utility64
"{CC4D56B7-6F18-470B-8734-ABCD75BCF4F1}" = HP Auto
"{D79A02E9-6713-4335-9668-AAC7474C0C0E}" = HP Vision Hardware Diagnostics
"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319
"{DC911ADF-7B60-40F2-A112-FB1EB6402D07}" = Microsoft Security Client CS-CZ Language Pack
"{FF21C3E6-97FD-474F-9518-8DCBE94C2854}" = 64 Bit HP CIO Components Installer
"CCleaner" = CCleaner
"FCEC33AD40CEA5E0FC4CEE6E42041A0DA189652D" = Balíček ovladače systému Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"HP Imaging Device Functions" = HP Imaging Device Functions 13.0
"HP Photosmart Essential" = HP Photosmart Essential 3.5
"HP Smart Web Printing" = HP Smart Web Printing 4.51
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0
"HPExtendedCapabilities" = HP Customer Participation Program 13.0
"HPOCR" = OCR Software by I.R.I.S. 13.0
"Microsoft Security Client" = Microsoft Security Essentials
"Shop for HP Supplies" = Shop for HP Supplies

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{07D77970-B205-460C-84E4-263F30455597}" = Nokia Ovi Suite
"{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements
"{08234a0d-cf39-4dca-99f0-0c5cb496da81}" = Bing Bar
"{0EF5BEA9-B9D3-46d7-8958-FB69A0BAEACC}" = Status
"{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan
"{12451AF7-EFF8-4B5B-8255-282D7CC7CAEE}" = OviMPlatform
"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{19A492A0-888F-44A0-9B21-D91700763F62}" = Catalyst Control Center - Branding
"{1CAC7A41-583B-4483-9FA5-3E5465AFF8C2}" = Microsoft Default Manager
"{1EC71BFB-01A3-4239-B6AF-B1AE656B15C0}" = TrayApp
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite Deluxe
"{254C37AA-6B72-4300-84F6-98A82419187E}" = ActiveCheck component for HP Active Support Library
"{264FE20A-757B-492a-B0C3-4009E2997D8A}" = PictureMover
"{26A24AE4-039D-4CA4-87B4-2F83216024F0}" = Java(TM) 6 Update 24
"{26A24AE4-039D-4CA4-87B4-2F83216025FF}" = Java(TM) 6 Update 25
"{2A7EF808-14F3-4E93-BE3A-1675EE5332A4}" = AIO_CDA_ProductContext
"{2CC53A53-44F4-4667-8584-2FFC9ACB2242}" = Ovi Desktop Sync Engine
"{2D99A593-C841-43A7-B7C9-D6F3AE70B756}" = Nokia Connectivity Cable Driver
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{2FA75B40-17C9-4D22-88CA-80A5D52FAB13}" = LightScribe System Software
"{2FF8C687-DB7D-4adc-A5DC-57983EC25046}" = DeviceDiscovery
"{3023EBDA-BF1B-4831-B347-E5018555F26E}" = Movie Theme Pack for HP MediaSmart Video
"{3C92B2E6-380D-4fef-B4DF-4A3B4B669771}" = Copy
"{4037A2B9-A976-4538-8B08-A0D95B637F35}" = C5100
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg
"{440B915A-0C85-45DB-92AE-75AE14704A64}" = Fax
"{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}" = Recovery Manager
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}" = UnloadSupport
"{53469506-A37E-4314-A9D9-38724EC23A75}" = HP Setup
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5D0A3FB4-2B8A-4E1B-892B-35FABD761EE1}" = Versme
"{61EDBE71-5D3E-4AB7-AD95-E53FEAF68C17}" = Bing Rewards Client Installer
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{669D4A35-146B-4314-89F1-1AC3D7B88367}" = HPAsset component for HP Active Support Library
"{681B698F-C997-42C3-B184-B489C6CA24C9}" = HPPhotoSmartDiscLabelContent1
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply
"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF}" = HP MediaSmart Photo
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{77C4850C-3592-4A2F-B652-ACB77A1EF77C}" = Bing Bar Platform
"{7F2A11F4-EAE8-4325-83EC-E3E99F85169E}" = HP Support Information
"{801EFC7D-AA66-F889-030D-C96E99F884A4}" = Catalyst Control Center InstallProxy
"{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}" = HPDiagnosticAlert
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8F9534FB-3BF3-8450-9B48-18F6EF8A6B37}" = HydraVision
"{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}" = Ralink RT2860 Wireless LAN Card
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0015-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_ENTERPRISE_{294B4278-CF7B-40B9-86A1-2D3FF0C2C524}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_ENTERPRISE_{10EC59E5-9BCE-4884-BB1A-E28627220232}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0405-1000-0000000FF1CE}_ENTERPRISE_{E12F9D31-4025-4BC6-B1B2-AB262C5580B0}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2007
"{90120000-0044-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_ENTERPRISE_{E12F9D31-4025-4BC6-B1B2-AB262C5580B0}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2007
"{90120000-00BA-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{912CED74-88D3-4C5B-ACB0-13231864975E}" = PressReader
"{91A34181-9FAD-43AB-A35F-E7A8945B7E1C}" = HP MediaSmart Music
"{928B06E4-DDAA-476A-926A-641620326327}" = Microsoft Search Enhancement Pack
"{936783CC-73D3-F125-71A4-BC0697B48167}" = CCC Help English
"{98890E89-0353-D7BB-594D-26A17055A42B}" = Catalyst Control Center Graphics Previews Common
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B362566-EC1B-4700-BB9C-EC661BDE2175}" = DocProc
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A5436728-2DFD-4221-B4D7-F49F740134C9}" = c5100_Help
"{A7AEE29F-839E-46B5-B347-6D430618129F}" = AIO_CDA_Software
"{A8F7FCEF-3CA6-4CE9-8FEA-8BB18F8686F0}" = Nokia Ovi Suite Software Updater
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1029-7B44-AA1000000001}" = Adobe Reader X (10.1.0) - Czech
"{AE856388-AFAD-4753-81DF-D96B19D0A17C}" = HP Setup Manager
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{B1A4A13D-4665-4ED3-9DFE-F845725FBBD8}" = HP Support Assistant
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Toolbars
"{B8AC1A89-FFD1-4F97-8051-E505A160F562}" = HP Odometer
"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations
"{C373F7C4-05D2-4047-96D1-6AF30661C6AA}" = PC Connectivity Solution
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"{CAE4213F-F797-439D-BD9E-79B71D115BE3}" = HPPhotoGadget
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{CCF9FABA-FF1F-AA77-60F5-8A6FD53E78E3}" = AMD VISION Engine Control Center
"{D12E3E7F-1B13-4933-A915-16C7DD37A095}" = HP MediaSmart Video
"{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow!
"{D5B94160-4A07-4956-9C73-8C5EEFEF180F}" = OpenOffice.org 3.3
"{D6F879CC-59D6-4D4B-AE9B-D761E48D25ED}" = Skype™ 5.3
"{D79113E7-274C-470B-BD46-01B10219DF6A}" = HPPhotosmartEssential
"{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty(R) - World at War(TM)
"{D86B0E2E-DF9A-441C-AF77-8D1A0FF00FA6}" = AIO_Scan
"{DC635845-46D3-404B-BCB1-FC4A91091AFA}" = SmartWebPrinting
"{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"{DE77FE3F-A33D-499A-87AD-5FC406617B40}" = HP Update
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F90D6825-8F1F-4E3A-9E42-A9C8A9DD1029}" = Nero 7 Ultra Edition
"{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}" = DVD Menu Pack for HP MediaSmart Video
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"CV Curriculum vitae CREATOR" = CV Curriculum vitae CREATOR
"DAEMON Tools Lite" = DAEMON Tools Lite
"EasyBits Magic Desktop" = Magic Desktop
"ENTERPRISE" = Microsoft Office Enterprise 2007
"EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.02
"Google Chrome" = Google Chrome
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite Deluxe
"InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}" = Movie Theme Pack for HP MediaSmart Video
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"InstallShield_{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF}" = HP MediaSmart Photo
"InstallShield_{91A34181-9FAD-43AB-A35F-E7A8945B7E1C}" = HP MediaSmart Music
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"InstallShield_{D12E3E7F-1B13-4933-A915-16C7DD37A095}" = HP MediaSmart Video
"InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow!
"InstallShield_{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty(R) - World at War(TM)
"InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}" = DVD Menu Pack for HP MediaSmart Video
"KLiteCodecPack_is1" = K-Lite Codec Pack 7.2.0 (Full)
"Mozilla Firefox 5.0.1 (x86 cs)" = Mozilla Firefox 5.0.1 (x86 cs)
"MusicStationNetstaller" = MusicStation
"My HP Game Console" = HP Game Console
"Nokia Ovi Suite" = Nokia Ovi Suite
"PDF Complete" = PDF Complete Special Edition
"PunkBusterSvc" = PunkBuster Services
"RBRBergheim" = RBR Bergheim (remove only)
"RBRHradek" = RBR Hradek (remove only)
"RBRMlynky" = RBR Mlynky (remove only)
"RBRMontekland" = RBR Montekland 0.9 (remove only)
"RBRPeklo" = RBR Peklo (remove only)
"RBRPeklo_R" = RBR Peklo_R (remove only)
"RBRPekloSnow" = RBR Peklo Snow (remove only)
"RBRPekloSnow_R" = RBR Peklo Snow_R(remove only)
"RBRPribram1" = RBR Pribram (remove only)
"RBRPribram2" = RBR Pribram 2 (remove only)
"RBRProspectRidge2A" = RBR Prospect Ridge 2A (remove only)
"RBRPTDRallySprint11" = RBR PTD RallySprint 1.1 (remove only)
"RBRReversedTracks" = RBR Reversed Tracks (remove only)
"RBRROC2008" = RBR ROC 2008 (remove only)
"RBRSchool2" = RBR School stage 2 (remove only)
"RBRSosnova" = RBR Sumburk (remove only)
"RBRTM" = RBR Tournament plugin (remove only)
"SweetLamb" = RBR Sweet Lamb (remove only)
"TeamViewer 6" = TeamViewer 6
"Total CMA Pack" = Total CMA Pack 0.50
"Versme" = RBR Stage Versme
"VLC media player" = VLC media player 1.1.11
"WildTangent hp Master Uninstall" = HP Games
"Winamp" = Winamp
"WinRAR archiver" = WinRAR
"WT087330" = Bounce Symphony
"WT087361" = FATE
"WT087380" = John Deere Drive Green
"WT087394" = Penguins!
"WT087396" = Polar Bowler
"WT087428" = Bejeweled 2 Deluxe
"WT087453" = Chuzzle Deluxe
"WT087480" = Insaniquarium Deluxe
"WT087485" = Jewel Quest II
"WT087490" = Jewel Quest Solitaire
"WT087501" = Plants vs. Zombies
"WT087510" = Slingo Deluxe
"WT087513" = Virtual Villagers - The Secret City
"WT087519" = Wedding Dash
"WT087533" = Zuma Deluxe
"WT087536" = Diner Dash 2 Restaurant Rescue
"WT089303" = Build-a-Lot - The Elizabethan Era
"WT089308" = Blasterball 3
"WT089328" = Farm Frenzy
"WT089359" = Cake Mania
"WT089362" = Agatha Christie - Peril at End House

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 16.8.2011 14:04:58 | Computer Name = pavilion-HP | Source = MsiInstaller | ID = 11500
Description =

Error - 16.8.2011 14:15:57 | Computer Name = pavilion-HP | Source = MsiInstaller | ID = 10005
Description =

Error - 16.8.2011 14:34:41 | Computer Name = pavilion-HP | Source = MsiInstaller | ID = 11500
Description =

Error - 16.8.2011 15:45:26 | Computer Name = pavilion-HP | Source = MsiInstaller | ID = 10005
Description =

Error - 16.8.2011 16:54:22 | Computer Name = pavilion-HP | Source = Microsoft Office 12 | ID = 2001
Description = Rejected Safe Mode action : Microsoft Office Outlook.

Error - 17.8.2011 15:58:36 | Computer Name = pavilion-HP | Source = Application Error | ID = 1000
Description = Název chybující aplikace: ZModeler2.exe, verze: 1.0.0.989, časové
razítko: 0x4d6002b1 Název chybujícího modulu: ZModeler2.exe, verze: 1.0.0.989, časové
razítko: 0x4d6002b1 Kód výjimky: 0xc0000005 Posun chyby: 0x00009268 ID chybujícího
procesu: 0xd00 Čas spuštění chybující aplikace: 0x01cc5d180b52fedb Cesta k chybující
aplikaci: C:\Users\pavilion\AppData\Local\Temp\_tc\ZModeler2.exe Cesta k chybujícímu
modulu: C:\Users\pavilion\AppData\Local\Temp\_tc\ZModeler2.exe ID zprávy: 4a85eb68-c90b-11e0-8063-d48564a128fc

Error - 17.8.2011 15:59:00 | Computer Name = pavilion-HP | Source = Application Error | ID = 1000
Description = Název chybující aplikace: ZModeler2.exe, verze: 1.0.0.989, časové
razítko: 0x4d6002b1 Název chybujícího modulu: ZModeler2.exe, verze: 1.0.0.989, časové
razítko: 0x4d6002b1 Kód výjimky: 0xc0000005 Posun chyby: 0x00009268 ID chybujícího
procesu: 0x11ac Čas spuštění chybující aplikace: 0x01cc5d181ae3be62 Cesta k chybující
aplikaci: C:\Users\pavilion\AppData\Local\Temp\_tc\ZModeler2.exe Cesta k chybujícímu
modulu: C:\Users\pavilion\AppData\Local\Temp\_tc\ZModeler2.exe ID zprávy: 58aa7866-c90b-11e0-8063-d48564a128fc

Error - 18.8.2011 0:28:22 | Computer Name = pavilion-HP | Source = Application Hang | ID = 1002
Description = Program WinRAR.exe verze 3.90.0.0 přestal spolupracovat se systémem
Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto
problému, vyhledejte historii problému v ovládacím panelu Centrum akcí. ID procesu:
744 Čas spuštění: 01cc5d5ee9a675ad Čas ukončení: 0 Cesta k aplikaci: C:\Program Files
(x86)\WinRAR\WinRAR.exe ID hlášení: 773108b3-c952-11e0-99a7-d48564a128fc

Error - 23.8.2011 11:25:31 | Computer Name = pavilion-HP | Source = ESENT | ID = 215
Description = WinMail (3952) WindowsMail0: Zálohování bylo ukončeno, protože bylo
zastaveno klientem nebo protože se nezdařilo připojení ke klientovi.

Error - 23.8.2011 11:25:36 | Computer Name = pavilion-HP | Source = ESENT | ID = 215
Description = WinMail (3512) WindowsMail0: Zálohování bylo ukončeno, protože bylo
zastaveno klientem nebo protože se nezdařilo připojení ke klientovi.

[ System Events ]
Error - 9.9.2011 17:16:29 | Computer Name = pavilion-HP | Source = Service Control Manager | ID = 7001
Description = Služba Služba seznamu sítí závisí na službě Sledování umístění v síti
(NLA), která neuspěla při spuštění v důsledku následující chyby: %%1068

Error - 9.9.2011 17:16:29 | Computer Name = pavilion-HP | Source = Service Control Manager | ID = 7001
Description = Služba Služba seznamu sítí závisí na službě Sledování umístění v síti
(NLA), která neuspěla při spuštění v důsledku následující chyby: %%1068

Error - 9.9.2011 17:16:29 | Computer Name = pavilion-HP | Source = Service Control Manager | ID = 7001
Description = Služba Služba seznamu sítí závisí na službě Sledování umístění v síti
(NLA), která neuspěla při spuštění v důsledku následující chyby: %%1068

Error - 9.9.2011 17:16:29 | Computer Name = pavilion-HP | Source = Service Control Manager | ID = 7001
Description = Služba Služba seznamu sítí závisí na službě Sledování umístění v síti
(NLA), která neuspěla při spuštění v důsledku následující chyby: %%1068

Error - 9.9.2011 17:16:29 | Computer Name = pavilion-HP | Source = Service Control Manager | ID = 7001
Description = Služba Služba seznamu sítí závisí na službě Sledování umístění v síti
(NLA), která neuspěla při spuštění v důsledku následující chyby: %%1068

Error - 9.9.2011 17:16:29 | Computer Name = pavilion-HP | Source = Service Control Manager | ID = 7001
Description = Služba Služba seznamu sítí závisí na službě Sledování umístění v síti
(NLA), která neuspěla při spuštění v důsledku následující chyby: %%1068

Error - 9.9.2011 21:15:00 | Computer Name = pavilion-HP | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (22:17:37, ?9.?9.?2011) bylo neočekávané.

Error - 9.9.2011 21:16:29 | Computer Name = pavilion-HP | Source = Microsoft Antimalware | ID = 3002
Description = %%860 – funkce ochrany v reálném čase selhala z důvodu chyby. Funkce:
%%835 Kód chyby: 0x80004005 Popis chyby: Nespecifikovaná chyba Důvod: %%842

Error - 10.9.2011 0:59:30 | Computer Name = pavilion-HP | Source = sptd | ID = 262148
Description = Ovladač zjistil interní chybu ve vlastní struktuře dat u .

Error - 10.9.2011 0:59:58 | Computer Name = pavilion-HP | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (2:17:38, ?10.?9.?2011) bylo neočekávané.


< End of report >

Spustte znovu OTL

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  :otl
  IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPDTDF
  IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=HPDTDF
  IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPDTDF
  IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=HPDTDF
  IE - HKU\S-1-5-21-2484980351-1062422368-565276184-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msn.com/?ocid=OIE9MSE
  IE - HKU\S-1-5-21-2484980351-1062422368-565276184-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
  FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  O4 - HKLM..\Run: [] File not found
  O4 - HKU\S-1-5-21-2484980351-1062422368-565276184-1000..\Run: [] File not found
  O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] File not found
  O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] File not found
  O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  O13 - gopher Prefix: missing
  O13 - gopher Prefix: missing
  O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
  O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
  O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
  O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
  O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
  O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
  O33 - MountPoints2\{3507cd9b-c82a-11e0-a556-d48564a128fc}\Shell - "" = AutoRun
  [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  [1 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
  [3 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
  [1 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
  [1 C:\Windows\twain_32\*.tmp files -> C:\Windows\twain_32\*.tmp -> ]
  [2010.05.17 20:01:26 | 002,298,660 | ---- | M] () -- \HDD zálohy notebook a pc\Záloha\David\Eset keygen.rar
  [2009.12.03 00:31:30 | 000,030,084 | ---- | M] () -- \HDD zálohy notebook a pc\Záloha\Magda\foto prodejna\Telefon\Smartphoneware%20All%20S60v3%20keygen.rar
  [2008.04.08 21:51:25 | 000,000,024 | ---- | M] () -- \Program Files (x86)\Activision\Call of Duty - World at War\Crack\Key gen.txt
  [2009.11.11 22:56:16 | 000,085,504 | ---- | M] () -- \Users\pavilion\Desktop\call\Call.Of.Duty.5.World.At.War_KEYGEN-FFF.exe
  
  :reg
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  "DAEMON Tools Lite"=-
  "NokiaOviSuite2"=-
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
  [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
  ""=-
  "SunJavaUpdateSched"=-
  "Adobe ARM"=-
  
  :services
  gupdate
  gupdatem
  
  :files
  C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  C:\Windows\tasks\HPCeeScheduleForpavilion.job
  %windir%\system32\*.tmp.dll /s
  %windir%\system32\SET*.tmp /s
  %windir%\*.tmp
  
  :commands
  [RESETHOSTS]
  [EMPTYTEMP]
  [EMPTYFLASH]

• Nasledne kliknete na Opravit
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

All processes killed
========== OTL ==========
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Local Page| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKU\S-1-5-21-2484980351-1062422368-565276184-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
HKU\S-1-5-21-2484980351-1062422368-565276184-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\SearchDefaultBranded| /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_USERS\S-1-5-21-2484980351-1062422368-565276184-1000\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\EnableLUA deleted successfully.
Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-help\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{314111c7-a502-11d2-bbca-00c04f8ec294}\ not found.
File {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype-ie-addon-data\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}\ not found.
File {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found not found.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3507cd9b-c82a-11e0-a556-d48564a128fc}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3507cd9b-c82a-11e0-a556-d48564a128fc}\ not found.
C:\Windows\msdownld.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPD9F6.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp folder deleted successfully.
C:\Windows\Installer\MSI314.tmp deleted successfully.
C:\Windows\twain_32\hpqgnds2.tmp deleted successfully.
File move failed. \HDD zálohy notebook a pc\Záloha\David\Eset keygen.rar scheduled to be moved on reboot.
File move failed. \HDD zálohy notebook a pc\Záloha\Magda\foto prodejna\Telefon\Smartphoneware%20All%20S60v3%20keygen.rar scheduled to be moved on reboot.
File move failed. \Program Files (x86)\Activision\Call of Duty - World at War\Crack\Key gen.txt scheduled to be moved on reboot.
File move failed. \Users\pavilion\Desktop\call\Call.Of.Duty.5.World.At.War_KEYGEN-FFF.exe scheduled to be moved on reboot.
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\NokiaOviSuite2 deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite\ not found.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
========== SERVICES/DRIVERS ==========
Service gupdate stopped successfully!
Service gupdate deleted successfully!
Service gupdatem stopped successfully!
Service gupdatem deleted successfully!
========== FILES ==========
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Windows\tasks\HPCeeScheduleForpavilion.job moved successfully.
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: pavilion
->Temp folder emptied: 182378 bytes
->Temporary Internet Files folder emptied: 1920811 bytes
->Java cache emptied: 128348 bytes
->FireFox cache emptied: 11655692 bytes
->Google Chrome cache emptied: 49217929 bytes
->Flash cache emptied: 1405 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 2157825 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50306 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 62,00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: pavilion
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.27.0 log created on 09112011_201902

Files\Folders moved on Reboot...
File move failed. \HDD zálohy notebook a pc\Záloha\David\Eset keygen.rar scheduled to be moved on reboot.
File move failed. \HDD zálohy notebook a pc\Záloha\Magda\foto prodejna\Telefon\Smartphoneware%20All%20S60v3%20keygen.rar scheduled to be moved on reboot.
File move failed. \Program Files (x86)\Activision\Call of Duty - World at War\Crack\Key gen.txt scheduled to be moved on reboot.
File move failed. \Users\pavilion\Desktop\call\Call.Of.Duty.5.World.At.War_KEYGEN-FFF.exe scheduled to be moved on reboot.
C:\Users\pavilion\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

Registry entries deleted on Reboot...

Jak se chova PC

Zatím vcelku spokojeně... uvidíme za pár dní jestli to neudělá nějakou prasárnu. A to jej mám doma cca 3 týdny nový. Nebo spíš z výstavy. Co se tam vlastně odehrálo?? Zjednodušeně prosím...

Ja jsem opravil jen nejake drobnosti v registrech (neplatne zaznamy, zbytecnosti spoustene po startu), vymazal docasne soubory...

Problem, co jste popisoval, bych videl spise na HW problem - pokud by se opakoval, tak napiste

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner (viz muj podpis)
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A melo by to byt z me strany vse

zatím moc moc děkujíííí...

Nemate zac, rad jsem pomohl