VIRY.CZ

Logfile of random's system information tool 1.09 (written by random/random)
Run by Partizan at 2011-12-07 23:20:49
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 429 GB (61%) free of 700 GB
Total RAM: 3959 MB (48% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:20:54, on 7. 12. 2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\OpenDNS Updater\OpenDNSUpdater.exe
C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe
C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
C:\Users\Partizan\AppData\Local\Apps\2.0\WDPZZL1M.12H\KZ98HRTK.093\odme..tion_e50b86a32720a37b_0001.0000_86e2b7ea2b24a1ab\Odmenovac.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\GIGABYTE\GHOST(6980)\GHOSTOPEN.exe
C:\Program Files (x86)\GIGABYTE\GHOST(6980)\Tilt.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\trend micro\Partizan.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.facemoods.com/?a=ddrnw
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: Code: Select all | Line number On/Off | Expand/Contract
O1 - Hosts: 1. 127.0.0.1 static3.cdn.ubi.com
O1 - Hosts: 2. 127.0.0.1 ubisoft-orbit.s3.amazonaws.com
O1 - Hosts: 3. #127.0.0.1 onlineconfigservice.ubi.com
O1 - Hosts: 4. 127.0.0.1 orbitservice.ubi.com
O1 - Hosts: 5. #127.0.0.1 ubisoft-orbit-savegames.s3.amazonaws.com
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Pomocník pri prihlasovaní v konte Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: FlashGetBHO - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - C:\Users\Partizan\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [ghost] C:\Program Files (x86)\GIGABYTE\GHOST(6980)\ghostopen.exe
O4 - HKLM\..\Run: [Tilt] C:\Program Files (x86)\GIGABYTE\GHOST(6980)\Tilt.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ShowBatteryBar] "C:\Program Files\BatteryBar\ShowBatteryBar.exe" show
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [OpenDNS Updater] "C:\Program Files (x86)\OpenDNS Updater\OpenDNSUpdater.exe" /autostart
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Odmenovac.appref-ms
O4 - Global Startup: Acer VCM.lnk = ?
O8 - Extra context menu item: Download all by FlashGet3 - C:\Users\Partizan\AppData\Roaming\FlashGetBHO\GetAllUrl.htm
O8 - Extra context menu item: Download by FlashGet3 - C:\Users\Partizan\AppData\Roaming\FlashGetBHO\GetUrl.htm
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&oslať do programu OneNote - res://C:\PROGRA~2\MICROS~3\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Acer\Acer VCM\Skype4COM.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft Limited - C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - NTI, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: Acer ODD Power Service (ODDPwrSvc) - Acer Incorporated - C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe
O23 - Service: O&O Defrag (OODefragAgent) - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Raw Socket Service (RS_Service) - Acer Incorporated - C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony Ericsson PCCompanion - Avanquest Software - C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
O23 - Service: TurboBoost - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: Updater Service - Acer Group - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13227 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe"
"C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE"
"C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE"
"C:\Program Files (x86)\Acer\Registration\GREGsvc.exe"
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe"
"C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe"
"C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe"
"C:\Program Files\OO Software\Defrag\oodag.exe"
"C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe"
"C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe"
C:\Windows\System32\tcpsvcs.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe"
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe" /TUStart /pid:2344
WLIDSvcM.exe 2436
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE3
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
"C:\Program Files\Acer\Optical Drive Power Management\ODDPWR.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\OpenDNS Updater\OpenDNSUpdater.exe" /autostart
"C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
"C:\Users\Partizan\AppData\Local\Apps\2.0\WDPZZL1M.12H\KZ98HRTK.093\odme..tion_e50b86a32720a37b_0001.0000_86e2b7ea2b24a1ab\Odmenovac.exe"
"C:\Program Files (x86)\Launch Manager\LManager.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\GIGABYTE\GHOST(6980)\GHOSTOPEN.exe"
"C:\Program Files (x86)\GIGABYTE\GHOST(6980)\Tilt.exe"
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe"
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe"
C:\Windows\system32\msiexec.exe /V
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
"c:\program files\windows defender\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey 2B8E56F6-06A6-C5C7-E06E-358C2EFE8611 -Reinvoke
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
"C:\Users\Partizan\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Partizan\AppData\Roaming\Mozilla\Firefox\Profiles\jmi9z3ac.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.svethardware.cz"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn.me/esnsonar,version=0.70.0]
"Description"=ESN Sonar browser plugin
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=1.102.0]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\1.102.0\npesnlaunch.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=1.1.10]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
FlashGet3.xpi

C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
atlas-sk.xml
azet-sk.xml
dunaj-sk.xml
eBay.xml
fcmdSrch.xml
google.xml
slovnik-sk.xml
wikipedia-sk.xml
zoznam-sk.xml

C:\Users\Partizan\AppData\Roaming\Mozilla\Firefox\Profiles\jmi9z3ac.default\extensions\
nostmp
sk@dictionaries.addons.mozilla.org
{7b13ec3e-999a-4b70-b9cb-2617b8323822}(2)
{e4a8a97b-f2ed-450b-b12d-ee082ba24781}

C:\Users\Partizan\AppData\Roaming\Mozilla\Firefox\Profiles\jmi9z3ac.default\searchplugins\
daemon-search.xml
icqplugin.xml
s-amazon.xml
sfd.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-23 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pri prihlasovaní v konte Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-11-10 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0}]
FlashGetBHO - C:\Users\Partizan\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll [2010-12-16 144944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-07-13 11046504]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2010-07-13 2103912]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2009-04-09 320000]
"ODDPwr"=C:\Program Files\Acer\Optical Drive Power Management\ODDPwr.exe [2010-04-22 223264]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-03-11 2107176]
"Acer ePower Management"=C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [2010-06-11 496160]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2011-01-12 2918656]
"OODefragTray"=C:\Program Files\OO Software\Defrag\oodtray.exe [2011-06-29 3992904]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-08-25 161304]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-08-25 386584]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-08-25 415256]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"ShowBatteryBar"=C:\Program Files\BatteryBar\ShowBatteryBar.exe [2009-05-28 89600]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912]
"OpenDNS Updater"=C:\Program Files (x86)\OpenDNS Updater\OpenDNSUpdater.exe [2010-06-16 839680]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-30 937920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-09-07 37296]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray]
C:\Program Files\OO Software\Defrag\oodtray.exe [2011-06-29 3992904]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"BackupManagerTray"=C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [2010-06-28 265984]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-08-10 975952]
"ghost"=C:\Program Files (x86)\GIGABYTE\GHOST(6980)\ghostopen.exe [2010-02-07 192000]
"Tilt"=C:\Program Files (x86)\GIGABYTE\GHOST(6980)\Tilt.exe [2009-06-25 724992]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-06-13 336384]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Acer VCM.lnk - C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe

C:\Users\Partizan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Odmenovac.appref-ms

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-08-25 271360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe"="C:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2011-12-07 23:20:49 ----D---- C:\Program Files\trend micro
2011-12-07 23:20:48 ----D---- C:\rsit
2011-12-07 23:14:32 ----D---- C:\Program Files (x86)\Trend Micro
2011-12-07 22:38:22 ----A---- C:\Windows\system32\drivers\sbapifs.sys
2011-12-07 22:32:40 ----A---- C:\Users\Partizan\AppData\Roaming\Jphqhz.exe
2011-12-07 12:32:05 ----A---- C:\Windows\system32\drivers\Lbd.sys
2011-12-07 12:31:26 ----D---- C:\Program Files (x86)\Lavasoft
2011-12-05 17:12:06 ----N---- C:\bootsqm.dat
2011-11-27 16:28:03 ----A---- C:\Windows\SYSWOW64\SER9PL.sys
2011-11-27 16:24:24 ----D---- C:\Program Files (x86)\WorldUnlock Codes Calculator
2011-11-26 13:28:27 ----D---- C:\Program Files (x86)\AMD APP
2011-11-26 13:27:19 ----A---- C:\Windows\SYSWOW64\atipblup.dat
2011-11-26 13:27:19 ----A---- C:\Windows\system32\atipblup.dat
2011-11-26 13:26:10 ----D---- C:\Program Files (x86)\ATI Technologies
2011-11-26 13:26:02 ----D---- C:\Program Files\ATI
2011-11-26 13:25:40 ----D---- C:\Program Files\ATI Technologies
2011-11-26 13:02:54 ----A---- C:\Windows\SYSWOW64\atiuxpag.dll
2011-11-26 13:02:54 ----A---- C:\Windows\SYSWOW64\atiumdva.dll
2011-11-26 13:02:54 ----A---- C:\Windows\SYSWOW64\atiumdmv.dll
2011-11-26 13:02:54 ----A---- C:\Windows\SYSWOW64\atiumdag.dll
2011-11-26 13:02:54 ----A---- C:\Windows\SYSWOW64\atiu9pag.dll
2011-11-26 13:02:54 ----A---- C:\Windows\SYSWOW64\atipdlxx.dll
2011-11-26 13:02:54 ----A---- C:\Windows\SYSWOW64\atipblag.dat
2011-11-26 13:02:54 ----A---- C:\Windows\SYSWOW64\atioglxx.dll
2011-11-26 13:02:54 ----A---- C:\Windows\SYSWOW64\atimpc32.dll
2011-11-26 13:02:54 ----A---- C:\Windows\SYSWOW64\atiglpxx.dll
2011-11-26 13:02:54 ----A---- C:\Windows\SYSWOW64\atigktxx.dll
2011-11-26 13:02:54 ----A---- C:\Windows\SYSWOW64\atidxx32.dll
2011-11-26 13:02:54 ----A---- C:\Windows\SYSWOW64\amdpcom32.dll
2011-11-26 13:02:54 ----A---- C:\Windows\system32\drivers\atikmpag.sys
2011-11-26 13:02:54 ----A---- C:\Windows\system32\drivers\atikmdag.sys
2011-11-26 13:02:54 ----A---- C:\Windows\system32\atiuxp64.dll
2011-11-26 13:02:54 ----A---- C:\Windows\system32\atiumd6v.dll
2011-11-26 13:02:54 ----A---- C:\Windows\system32\atiumd6a.dll
2011-11-26 13:02:54 ----A---- C:\Windows\system32\atiumd64.dll
2011-11-26 13:02:54 ----A---- C:\Windows\system32\atiu9p64.dll
2011-11-26 13:02:54 ----A---- C:\Windows\system32\atitmm64.dll
2011-11-26 13:02:54 ----A---- C:\Windows\system32\atipdl64.dll
2011-11-26 13:02:54 ----A---- C:\Windows\system32\atipblag.dat
2011-11-26 13:02:54 ----A---- C:\Windows\system32\atio6axx.dll
2011-11-26 13:02:54 ----A---- C:\Windows\system32\atimuixx.dll
2011-11-26 13:02:54 ----A---- C:\Windows\system32\atimpc64.dll
2011-11-26 13:02:54 ----A---- C:\Windows\system32\atiicdxx.dat
2011-11-26 13:02:54 ----A---- C:\Windows\system32\atig6txx.dll
2011-11-26 13:02:54 ----A---- C:\Windows\system32\atig6pxx.dll
2011-11-26 13:02:54 ----A---- C:\Windows\system32\atiesrxx.exe
2011-11-26 13:02:54 ----A---- C:\Windows\system32\atiedu64.dll
2011-11-26 13:02:54 ----A---- C:\Windows\system32\atieclxx.exe
2011-11-26 13:02:54 ----A---- C:\Windows\system32\atidxx64.dll
2011-11-26 13:02:54 ----A---- C:\Windows\system32\ATIDEMGX.dll
2011-11-26 13:02:54 ----A---- C:\Windows\system32\amdpcom64.dll
2011-11-26 13:02:53 ----A---- C:\Windows\SYSWOW64\aticfx32.dll
2011-11-26 13:02:53 ----A---- C:\Windows\SYSWOW64\aticalrt.dll
2011-11-26 13:02:53 ----A---- C:\Windows\SYSWOW64\aticaldd.dll
2011-11-26 13:02:53 ----A---- C:\Windows\SYSWOW64\aticalcl.dll
2011-11-26 13:02:53 ----A---- C:\Windows\SYSWOW64\atiadlxy.dll
2011-11-26 13:02:53 ----A---- C:\Windows\SYSWOW64\ati2edxx.dll
2011-11-26 13:02:53 ----A---- C:\Windows\system32\drivers\ati2erec.dll
2011-11-26 13:02:53 ----A---- C:\Windows\system32\aticfx64.dll
2011-11-26 13:02:53 ----A---- C:\Windows\system32\aticalrt64.dll
2011-11-26 13:02:53 ----A---- C:\Windows\system32\aticaldd64.dll
2011-11-26 13:02:53 ----A---- C:\Windows\system32\aticalcl64.dll
2011-11-26 13:02:53 ----A---- C:\Windows\system32\atibtmon.exe
2011-11-26 13:02:53 ----A---- C:\Windows\system32\atiapfxx.exe
2011-11-26 13:02:53 ----A---- C:\Windows\system32\atiadlxx.dll
2011-11-26 12:03:53 ----D---- C:\Program Files (x86)\Phyxion.net
2011-11-25 19:49:44 ----SHD---- C:\ProgramData\DSS
2011-11-20 17:29:20 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2011-11-20 17:29:14 ----D---- C:\Users\Partizan\AppData\Roaming\LogoManager
2011-11-20 17:28:50 ----D---- C:\Program Files (x86)\LogoManager Pro Suite
2011-11-20 16:15:34 ----A---- C:\Windows\system32\drivers\prodigy.sys
2011-11-20 16:15:25 ----D---- C:\Program Files (x86)\NSS
2011-11-20 14:44:31 ----D---- C:\Users\Partizan\AppData\Roaming\Nokia
2011-11-20 14:42:47 ----D---- C:\ProgramData\Installations
2011-11-20 14:22:05 ----D---- C:\Windows\system32\Macromed
2011-11-20 14:17:37 ----D---- C:\ProgramData\PC Suite
2011-11-20 14:17:36 ----D---- C:\Users\Partizan\AppData\Roaming\PC Suite
2011-11-20 14:16:49 ----D---- C:\Program Files\DIFX
2011-11-20 14:15:51 ----D---- C:\ProgramData\NokiaInstallerCache
2011-11-20 14:12:11 ----D---- C:\ProgramData\Nokia
2011-11-20 14:07:51 ----D---- C:\Program Files (x86)\Nokia
2011-11-20 14:07:51 ----A---- C:\Windows\system32\nmwcdclsX64.dll
2011-11-17 18:36:07 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2011-11-17 18:36:07 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2011-11-17 18:36:07 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2011-11-17 18:36:07 ----A---- C:\Windows\system32\XAudio2_7.dll
2011-11-17 18:36:07 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2011-11-17 18:36:07 ----A---- C:\Windows\system32\xactengine3_7.dll
2011-11-17 18:36:05 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2011-11-17 18:36:05 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2011-11-17 18:36:04 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2011-11-17 18:36:04 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2011-11-17 18:36:04 ----A---- C:\Windows\system32\d3dx11_43.dll
2011-11-17 18:36:04 ----A---- C:\Windows\system32\d3dcsx_43.dll
2011-11-17 18:36:03 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2011-11-17 18:36:03 ----A---- C:\Windows\system32\d3dx10_43.dll
2011-11-17 18:36:01 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2011-11-17 18:36:01 ----A---- C:\Windows\system32\D3DX9_43.dll
2011-11-17 18:27:50 ----D---- C:\Program Files (x86)\Mafia II
2011-11-14 19:00:14 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2011-11-14 19:00:14 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2011-11-14 19:00:14 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2011-11-14 19:00:14 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2011-11-14 19:00:14 ----A---- C:\Windows\system32\XAudio2_6.dll
2011-11-14 19:00:14 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2011-11-14 19:00:14 ----A---- C:\Windows\system32\xactengine3_6.dll
2011-11-14 19:00:14 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2011-11-14 18:52:30 ----D---- C:\Program Files (x86)\Disney Interactive Studios
2011-11-12 20:11:20 ----A---- C:\Windows\system32\TURegOpt.exe
2011-11-12 20:11:19 ----A---- C:\Windows\SYSWOW64\authuitu.dll
2011-11-12 20:11:19 ----A---- C:\Windows\system32\authuitu.dll
2011-11-12 20:11:04 ----D---- C:\Users\Partizan\AppData\Roaming\TuneUp Software
2011-11-12 20:10:54 ----D---- C:\Program Files (x86)\TuneUp Utilities 2012
2011-11-12 20:10:31 ----D---- C:\ProgramData\TuneUp Software
2011-11-12 20:10:23 ----SHD---- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2011-11-12 18:18:00 ----D---- C:\Users\Partizan\AppData\Roaming\Mozilla-Cache
2011-11-12 18:16:19 ----D---- C:\Programs
2011-11-11 21:10:34 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2011-11-11 21:10:34 ----A---- C:\Windows\system32\XAudio2_5.dll
2011-11-11 21:10:33 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2011-11-11 21:10:33 ----A---- C:\Windows\system32\xactengine3_5.dll
2011-11-11 21:10:32 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2011-11-11 21:10:32 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2011-11-11 21:10:31 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2011-11-11 21:10:31 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2011-11-11 21:10:31 ----A---- C:\Windows\system32\d3dx11_42.dll
2011-11-11 21:10:31 ----A---- C:\Windows\system32\d3dcsx_42.dll
2011-11-11 21:10:30 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2011-11-11 21:10:30 ----A---- C:\Windows\system32\d3dx10_42.dll
2011-11-11 21:10:29 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2011-11-11 21:10:29 ----A---- C:\Windows\system32\D3DX9_42.dll
2011-11-11 21:10:28 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2011-11-11 21:10:28 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2011-11-11 21:10:28 ----A---- C:\Windows\system32\d3dx10_41.dll
2011-11-11 21:10:28 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2011-11-11 21:10:26 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2011-11-11 21:10:26 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2011-11-11 21:10:26 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2011-11-11 21:10:26 ----A---- C:\Windows\system32\XAudio2_4.dll
2011-11-11 21:10:26 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2011-11-11 21:10:26 ----A---- C:\Windows\system32\D3DX9_41.dll
2011-11-11 21:10:25 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2011-11-11 21:10:25 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2011-11-11 21:10:25 ----A---- C:\Windows\system32\xactengine3_4.dll
2011-11-11 21:10:25 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2011-11-11 21:10:22 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2011-11-11 21:10:22 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2011-11-11 21:10:22 ----A---- C:\Windows\system32\d3dx10_40.dll
2011-11-11 21:10:22 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2011-11-11 21:10:20 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2011-11-11 21:10:20 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2011-11-11 21:10:20 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2011-11-11 21:10:20 ----A---- C:\Windows\system32\XAudio2_3.dll
2011-11-11 21:10:20 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2011-11-11 21:10:20 ----A---- C:\Windows\system32\D3DX9_40.dll
2011-11-11 21:10:19 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2011-11-11 21:10:19 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2011-11-11 21:10:19 ----A---- C:\Windows\system32\xactengine3_3.dll
2011-11-11 21:10:19 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2011-11-11 21:10:18 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2011-11-11 21:10:18 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2011-11-11 21:10:18 ----A---- C:\Windows\system32\XAudio2_2.dll
2011-11-11 21:10:18 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2011-11-11 21:10:17 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2011-11-11 21:10:17 ----A---- C:\Windows\system32\xactengine3_2.dll
2011-11-11 21:10:14 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2011-11-11 21:10:14 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2011-11-11 21:10:14 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2011-11-11 21:10:14 ----A---- C:\Windows\system32\XAudio2_1.dll
2011-11-11 21:10:14 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2011-11-11 21:10:14 ----A---- C:\Windows\system32\xactengine3_1.dll
2011-11-11 21:10:13 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2011-11-11 21:10:13 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2011-11-11 21:10:12 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2011-11-11 21:10:12 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2011-11-11 21:10:12 ----A---- C:\Windows\system32\d3dx10_38.dll
2011-11-11 21:10:12 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2011-11-11 21:10:11 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2011-11-11 21:10:11 ----A---- C:\Windows\system32\D3DX9_38.dll
2011-11-11 21:10:10 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2011-11-11 21:10:10 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2011-11-11 21:10:10 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2011-11-11 21:10:10 ----A---- C:\Windows\system32\XAudio2_0.dll
2011-11-11 21:10:10 ----A---- C:\Windows\system32\xactengine3_0.dll
2011-11-11 21:10:10 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2011-11-11 21:10:08 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2011-11-11 21:10:08 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2011-11-11 21:10:08 ----A---- C:\Windows\system32\d3dx10_37.dll
2011-11-11 21:10:08 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2011-11-11 21:10:07 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2011-11-11 21:10:07 ----A---- C:\Windows\system32\D3DX9_37.dll
2011-11-11 21:10:06 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2011-11-11 21:10:06 ----A---- C:\Windows\system32\xactengine2_10.dll
2011-11-11 21:10:04 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2011-11-11 21:10:04 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2011-11-11 21:10:04 ----A---- C:\Windows\system32\d3dx10_36.dll
2011-11-11 21:10:04 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2011-11-11 21:10:02 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2011-11-11 21:10:02 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2011-11-11 21:10:02 ----A---- C:\Windows\system32\xactengine2_9.dll
2011-11-11 21:10:02 ----A---- C:\Windows\system32\d3dx9_36.dll
2011-11-11 21:10:00 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2011-11-11 21:10:00 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2011-11-11 21:10:00 ----A---- C:\Windows\system32\d3dx10_35.dll
2011-11-11 21:10:00 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2011-11-11 21:09:58 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2011-11-11 21:09:58 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2011-11-11 21:09:58 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2011-11-11 21:09:58 ----A---- C:\Windows\system32\xactengine2_8.dll
2011-11-11 21:09:58 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2011-11-11 21:09:58 ----A---- C:\Windows\system32\d3dx9_35.dll
2011-11-11 21:09:56 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2011-11-11 21:09:56 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2011-11-11 21:09:56 ----A---- C:\Windows\system32\d3dx10_34.dll
2011-11-11 21:09:56 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2011-11-11 21:09:55 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2011-11-11 21:09:55 ----A---- C:\Windows\system32\d3dx9_34.dll
2011-11-11 21:09:54 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2011-11-11 21:09:54 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2011-11-11 21:09:54 ----A---- C:\Windows\system32\xinput1_3.dll
2011-11-11 21:09:54 ----A---- C:\Windows\system32\xactengine2_7.dll
2011-11-11 21:09:52 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2011-11-11 21:09:52 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2011-11-11 21:09:52 ----A---- C:\Windows\system32\d3dx10_33.dll
2011-11-11 21:09:52 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2011-11-11 21:09:51 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2011-11-11 21:09:51 ----A---- C:\Windows\system32\d3dx9_33.dll
2011-11-11 21:09:50 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2011-11-11 21:09:50 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2011-11-11 21:09:50 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2011-11-11 21:09:50 ----A---- C:\Windows\system32\xactengine2_6.dll
2011-11-11 21:09:50 ----A---- C:\Windows\system32\xactengine2_5.dll
2011-11-11 21:09:50 ----A---- C:\Windows\system32\d3dx10.dll
2011-11-11 21:09:48 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2011-11-11 21:09:48 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2011-11-11 21:09:48 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2011-11-11 21:09:48 ----A---- C:\Windows\system32\xactengine2_4.dll
2011-11-11 21:09:48 ----A---- C:\Windows\system32\x3daudio1_1.dll
2011-11-11 21:09:48 ----A---- C:\Windows\system32\d3dx9_32.dll
2011-11-11 21:09:46 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2011-11-11 21:09:46 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2011-11-11 21:09:46 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2011-11-11 21:09:46 ----A---- C:\Windows\system32\xinput1_2.dll
2011-11-11 21:09:46 ----A---- C:\Windows\system32\xactengine2_3.dll
2011-11-11 21:09:46 ----A---- C:\Windows\system32\d3dx9_31.dll
2011-11-11 21:09:45 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2011-11-11 21:09:45 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2011-11-11 21:09:45 ----A---- C:\Windows\system32\xinput1_1.dll
2011-11-11 21:09:45 ----A---- C:\Windows\system32\xactengine2_2.dll
2011-11-11 21:09:44 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2011-11-11 21:09:44 ----A---- C:\Windows\system32\xactengine2_1.dll
2011-11-11 21:09:39 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2011-11-11 21:09:39 ----A---- C:\Windows\system32\d3dx9_30.dll
2011-11-11 21:09:38 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2011-11-11 21:09:38 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2011-11-11 21:09:38 ----A---- C:\Windows\system32\xactengine2_0.dll
2011-11-11 21:09:38 ----A---- C:\Windows\system32\x3daudio1_0.dll
2011-11-11 21:09:37 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2011-11-11 21:09:37 ----A---- C:\Windows\system32\d3dx9_29.dll
2011-11-11 21:09:36 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2011-11-11 21:09:36 ----A---- C:\Windows\system32\d3dx9_28.dll
2011-11-11 21:09:34 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2011-11-11 21:09:34 ----A---- C:\Windows\system32\d3dx9_27.dll
2011-11-11 21:09:32 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2011-11-11 21:09:32 ----A---- C:\Windows\system32\d3dx9_26.dll
2011-11-11 21:09:31 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2011-11-11 21:09:31 ----A---- C:\Windows\system32\d3dx9_25.dll
2011-11-11 21:09:30 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2011-11-11 21:09:30 ----A---- C:\Windows\system32\d3dx9_24.dll
2011-11-11 21:01:51 ----D---- C:\Program Files (x86)\Ubisoft
2011-11-11 17:37:08 ----A---- C:\Windows\d3dx.dat
2011-11-11 17:36:52 ----D---- C:\ProgramData\AirportMania
2011-11-11 12:06:15 ----D---- C:\Users\Partizan\AppData\Roaming\Subversion
2011-11-11 11:59:09 ----D---- C:\Users\Partizan\AppData\Roaming\JavaEditor
2011-11-11 11:52:03 ----D---- C:\Program Files (x86)\JetBrains
2011-11-11 11:16:37 ----D---- C:\Program Files (x86)\JDownloader
2011-11-09 09:06:10 ----D---- C:\ProgramData\RELOADED
2011-11-09 08:48:43 ----D---- C:\Program Files (x86)\Firefly Studios
2011-11-08 22:37:11 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-11-08 22:37:10 ----A---- C:\Windows\system32\win32k.sys

======List of files/folders modified in the last 1 month======

2011-12-07 23:20:50 ----D---- C:\Windows\Temp
2011-12-07 23:20:49 ----RD---- C:\Program Files
2011-12-07 23:14:33 ----SHD---- C:\Windows\Installer
2011-12-07 23:14:32 ----RD---- C:\Program Files (x86)
2011-12-07 23:14:25 ----SHD---- C:\System Volume Information
2011-12-07 23:10:08 ----D---- C:\Windows\System32
2011-12-07 23:10:08 ----D---- C:\Windows\Prefetch
2011-12-07 23:10:08 ----D---- C:\Windows\inf
2011-12-07 23:10:07 ----D---- C:\Windows
2011-12-07 22:43:13 ----D---- C:\Windows\system32\config
2011-12-07 22:38:53 ----D---- C:\Windows\system32\Tasks
2011-12-07 22:38:33 ----D---- C:\Windows\system32\drivers
2011-12-07 22:34:23 ----A---- C:\Windows\SYSWOW64\log.txt
2011-12-07 12:32:08 ----D---- C:\Windows\system32\catroot
2011-12-07 12:32:03 ----DC---- C:\Windows\system32\DRVSTORE
2011-12-07 12:31:24 ----D---- C:\ProgramData\Lavasoft
2011-12-07 12:28:40 ----D---- C:\ProgramData\boost_interprocess
2011-12-07 08:12:37 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-12-06 11:45:36 ----A---- C:\Users\Partizan\AppData\Roaming\Network Meter_Settings.ini
2011-12-04 20:55:33 ----SD---- C:\Users\Partizan\AppData\Roaming\Microsoft
2011-12-03 16:50:26 ----SD---- C:\Downloads
2011-12-01 17:46:37 ----D---- C:\Users\Partizan\AppData\Roaming\AIMP
2011-12-01 14:58:07 ----D---- C:\Windows\winsxs
2011-11-28 12:46:04 ----D---- C:\Windows\system32\catroot2
2011-11-27 17:12:29 ----D---- C:\Users\Partizan\AppData\Roaming\BITS
2011-11-27 16:30:18 ----D---- C:\Windows\SysWOW64
2011-11-27 16:29:49 ----D---- C:\Program Files (x86)\Common Files
2011-11-27 16:29:21 ----D---- C:\Windows\system32\DriverStore
2011-11-27 16:28:02 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-11-26 13:26:45 ----D---- C:\Windows\SoftwareDistribution
2011-11-26 13:20:20 ----D---- C:\Users\Partizan\AppData\Roaming\ATI
2011-11-26 13:19:19 ----HD---- C:\ProgramData
2011-11-26 13:10:44 ----D---- C:\Users\Partizan\AppData\Roaming\DAEMON Tools Lite
2011-11-26 13:09:13 ----D---- C:\Windows\Logs
2011-11-26 13:04:29 ----D---- C:\Program Files\Common Files
2011-11-26 11:44:56 ----D---- C:\Program Files (x86)\Sony Ericsson
2011-11-26 11:33:42 ----D---- C:\Program Files (x86)\Battlelog Web Plugins
2011-11-26 11:29:57 ----D---- C:\Program Files (x86)\Acer GameZone
2011-11-26 11:27:07 ----D---- C:\Program Files (x86)\Windows Live
2011-11-26 10:11:03 ----D---- C:\Windows\Tasks
2011-11-25 19:28:02 ----RSD---- C:\Windows\assembly
2011-11-25 19:25:11 ----D---- C:\ProgramData\DAEMON Tools Lite
2011-11-23 11:37:09 ----D---- C:\Games
2011-11-20 17:54:19 ----D---- C:\Program Files (x86)\Steam
2011-11-20 14:08:30 ----RSD---- C:\Windows\Fonts
2011-11-16 14:55:50 ----D---- C:\Program Files (x86)\Activision
2011-11-14 16:13:05 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2011-11-12 19:52:21 ----D---- C:\Windows\debug
2011-11-12 18:17:54 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-11-11 17:50:22 ----AD---- C:\ProgramData\Temp
2011-11-09 08:17:39 ----D---- C:\Program Files\BatteryBar
2011-11-09 03:16:09 ----D---- C:\Program Files\Common Files\System
2011-11-08 22:42:54 ----D---- C:\ProgramData\Microsoft Help
2011-11-08 22:39:16 ----A---- C:\Windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-03-04 540696]
R0 Lbd;Lbd; C:\Windows\system32\DRIVERS\Lbd.sys [2011-10-28 69376]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-08-14 526392]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-12-21 141264]
R1 ISODrive;ISO DVD/CD-ROM Device Driver; \??\C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [2010-01-29 115600]
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 22576]
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 20016]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60464]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-12-21 170640]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-12-21 170640]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-12-21 50624]
R2 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2011-02-11 35344]
R2 RMCAST;@%SystemRoot%\system32\wshrm.dll,-102; C:\Windows\system32\DRIVERS\RMCAST.sys [2010-11-20 146432]
R2 sbapifs;sbapifs; C:\Windows\system32\DRIVERS\sbapifs.sys [2011-12-07 72280]
R2 TurboB;Turbo Boost UI Monitor driver; C:\Windows\system32\DRIVERS\TurboB.sys [2009-11-02 13784]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-06-14 9319424]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-06-13 303616]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-07-15 2350952]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2011-03-30 114704]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2010-07-29 28832]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-12-21 34144]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2010-02-10 158720]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-07-13 2424040]
R3 intelkmd;intelkmd; C:\Windows\system32\DRIVERS\igdpmd64.sys [2010-08-25 10611552]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2010-08-24 76912]
R3 Lavasoft Kernexplorer;Lavasoft helper driver; \??\C:\Program Files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys [2011-12-07 17152]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2010-04-28 18432]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-03-11 316464]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [2011-10-31 11856]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2010-04-28 17408]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 AIDA64Driver;FinalWire AIDA64 Kernel Driver; \??\C:\Program Files (x86)\FinalWire\AIDA64 Extreme Edition\kerneld.x64 [2011-06-15 27808]
S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2009-05-26 40448]
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys []
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-05 125456]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys []
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys []
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys []
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys []
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2010-07-29 270496]
S3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-22 48488]
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2009-04-06 13352]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2009-04-06 27176]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2010-08-25 10611552]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s1018bus;Sony Ericsson Device 1018 driver (WDM); C:\Windows\system32\DRIVERS\s1018bus.sys [2009-03-25 113704]
S3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s1018mdfl.sys [2009-03-25 19496]
S3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s1018mdm.sys [2009-03-25 153128]
S3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s1018mgmt.sys [2009-03-25 133160]
S3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS); C:\Windows\system32\DRIVERS\s1018nd5.sys [2009-03-25 34856]
S3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s1018obex.sys [2009-03-25 128552]
S3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM); C:\Windows\system32\DRIVERS\s1018unic.sys [2009-03-25 146472]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-06-13 203264]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2010-07-29 52896]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-08-10 321104]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2011-01-12 810144]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [2010-06-11 821792]
R2 EPSON_EB_RPCV4_01;EPSON V5 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE [2007-12-17 163840]
R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE [2007-01-11 126464]
R2 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-03-03 13336]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe [2011-10-28 2152152]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-07-01 325656]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-06-28 255744]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2010-04-17 144640]
R2 ODDPwrSvc;Acer ODD Power Service; C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe [2010-04-22 171040]
R2 OODefragAgent;O&O Defrag; C:\Program Files\OO Software\Defrag\oodag.exe [2011-06-29 3246920]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [2010-02-03 244904]
R2 RS_Service;Raw Socket Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [2010-01-30 260640]
R2 simptcp;@%SystemRoot%\system32\simptcp.dll,-200; C:\Windows\System32\tcpsvcs.exe [2009-07-14 10240]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2011-11-02 2072896]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-07-01 2533400]
R2 Updater Service;Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2010-01-29 243232]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2011-01-12 42360]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-22 1493352]
S3 MWLService;MyWinLocker Service; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-05-27 305520]
S3 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2010-04-17 50432]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion; C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [2011-06-29 155344]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2011-09-29 419624]
S3 TurboBoost;TurboBoost; C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2009-11-02 126352]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-07-02 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------

Zdravim a pekny den preji

Jedna se o domaci PC nebo nejake pracovni\firemni

Poprosim i o druhy log z RSIT s nazvem info.txt, je ulozen v c:\rsit

Jedná sa o domáce PC.

info.txt logfile of random's system information tool 1.09 2011-12-07 23:21:00

======Uninstall list======

-->"C:\Program Files (x86)\InstallShield Installation Information\{0D7CD0D9-4A88-4A63-8F91-3F4E8F371768}\setup.exe" -runfromtemp -l0x041b -removeonly
-->"C:\Program Files (x86)\InstallShield Installation Information\{4968622A-4D3F-489E-9ACE-5FEC4CC0BDE3}\Setup.exe" /z-uninstall
-->"C:\Program Files (x86)\InstallShield Installation Information\{B906C11A-D193-4143-9FA7-E2EE8A5A8F21}\Setup.exe" /z-uninstall
-->"C:\Program Files (x86)\InstallShield Installation Information\{C2695E83-CF1D-43D1-84FE-B3BEC561012A}\setup.exe" -runfromtemp -l0x0409 -removeonly
-->MsiExec /X{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}
-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{AA4BF92B-2AAF-11DA-9D78-000129760D75}\Setup.exe" -uninstall
Acer Arcade Deluxe-->"C:\Program Files (x86)\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.exe" /z-uninstall
Acer Arcade Deluxe-->"C:\Program Files (x86)\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.exe" /z-uninstall
Acer Arcade Movie-->"C:\Program Files (x86)\InstallShield Installation Information\{B906C11A-D193-4143-9FA7-E2EE8A5A8F21}\Setup.exe" /z-uninstall
Acer Backup Manager-->C:\Program Files (x86)\InstallShield Installation Information\{72B776E5-4530-4C4B-9453-751DF87D9D93}\setup.exe -runfromtemp -l0x0409
Acer Crystal Eye webcam-->MsiExec.exe /I{51F026FA-5146-4232-A8BA-1364740BD053}
Acer eRecovery Management-->"C:\Program Files (x86)\InstallShield Installation Information\{7F811A54-5A09-4579-90E1-C93498E230D9}\setup.exe" -runfromtemp -l0x41b -removeonly
Acer GameZone Console-->"C:\Program Files (x86)\Acer GameZone\GameConsole\unins000.exe"
Acer PowerSmart Manager-->"C:\Program Files (x86)\InstallShield Installation Information\{3DB0448D-AD82-4923-B305-D001E521A964}\setup.exe" -runfromtemp -l0x41b -removeonly
Acer Registration-->C:\Program Files (x86)\Acer\Registration\Uninstall.exe
Acer ScreenSaver-->C:\Program Files (x86)\Acer\Screensaver\Uninstall.exe
Acer Updater-->"C:\Program Files (x86)\InstallShield Installation Information\{EE171732-BEB4-4576-887D-CB62727F01CA}\setup.exe" -runfromtemp -l0x41b -removeonly
Acer VCM-->"C:\Program Files (x86)\InstallShield Installation Information\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}\setup.exe" -runfromtemp -l0x41b -removeonly
Ad-Aware-->MsiExec.exe /X{E43196CF-182A-4D9E-9CE7-69616DBEE3B0}
Adobe AIR-->c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Flash Player 10 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10i_ActiveX.exe -maintain activex
Adobe Flash Player 11 Plugin 64-bit-->C:\Windows\system32\Macromed\Flash\FlashUtil64_11_1_102_Plugin.exe -maintain plugin
Adobe Reader 9.4.6 MUI-->MsiExec.exe /I{AC76BA86-7AD7-FFFF-7B44-A91000000001}
AIDA64 Extreme Edition v1.80-->"C:\Program Files (x86)\FinalWire\AIDA64 Extreme Edition\unins000.exe"
AIMP2-->C:\Program Files (x86)\AIMP2\Uninstall.exe
Airport Mania First Flight-->"C:\Program Files (x86)\Acer GameZone\Airport Mania First Flight\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Airport Mania First Flight\install.log"
Alcor Micro USB Card Reader-->C:\Program Files (x86)\InstallShield Installation Information\{5A22D889-FBDD-4AE8-86EC-089D45FC133E}\setup.exe -runfromtemp -l0x0409
Amazonia-->"C:\Program Files (x86)\Acer GameZone\Amazonia\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Amazonia\install.log"
AMD APP SDK Runtime-->MsiExec.exe /I{503F672D-6C84-448A-8F8F-4BC35AC83441}
Ant Renamer-->"C:\Program Files (x86)\Ant Renamer\unins000.exe"
Any Video Converter 3.2.6-->"C:\Program Files (x86)\AnvSoft\Any Video Converter\unins000.exe"
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver-->"C:\Program Files (x86)\InstallShield Installation Information\{3108C217-BE83-42E4-AE9E-A56A2A92E549}\setup.exe" -runfromtemp -l0x0009 -removeonly
ATI Catalyst Install Manager-->msiexec /q/x{0B674B1E-1905-4830-ABD1-F6892F1C4394} REBOOT=ReallySuppress
Avanquest update-->"C:\Program Files (x86)\InstallShield Installation Information\{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}\Setup.exe" -runfromtemp -l0x0009 -removeonly
Avidemux 2.5 (32-bit)-->C:\Program Files (x86)\Avidemux 2.5\uninstall.exe
Backup Manager Basic-->C:\Program Files (x86)\InstallShield Installation Information\{72B776E5-4530-4C4B-9453-751DF87D9D93}\setup.exe -runfromtemp -l0x0409
BatteryBar (remove only)-->"C:\Program Files\BatteryBar\Uninstall.exe"
Battlefield 3™-->"C:\Program Files (x86)\Common Files\EAInstaller\Battlefield 3\Cleanup.exe" uninstall_game -autologging
Bluetooth Win7 Suite (64)-->MsiExec.exe /X{230D1595-57DA-4933-8C4E-375797EBB7E1}
Cake Mania-->"C:\Program Files (x86)\Acer GameZone\Cake Mania\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Cake Mania\install.log"
Catalyst Control Center - Branding-->MsiExec.exe /I{57CA189D-BAEB-49BC-AE75-CE70E9B775E1}
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
Combined Community Codec Pack 2011-07-30-->"C:\Program Files (x86)\Combined Community Codec Pack\unins000.exe"
D3DX10-->MsiExec.exe /X{E09C4DB7-630C-4F06-A631-8EA7239923AF}
DAEMON Tools Lite-->C:\Program Files (x86)\DAEMON Tools Lite\uninst.exe
Definition update for Microsoft Office 2010 (KB982726) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-003D-0000-0000-0000000FF1CE}" "{0DA5C61E-18AE-4BBE-A29B-0BFACADB5C6A}" "1051" "0"
Digital Video Repair 1.0-->"C:\Program Files (x86)\Rising Research\Digital Video Repair\uninstall.exe"
Doplnok programu Messenger-->MsiExec.exe /I{6D2F0A26-ECEA-49CE-833C-9A6125F3D5E8}
Driver Sweeper verzia 3.1.0-->"C:\Program Files (x86)\Phyxion.net\Driver Sweeper\unins000.exe"
EPSON Stylus SX200 Series Printer Uninstall-->C:\Windows\system32\spool\DRIVERS\x64\3\E_IINSEFE.EXE /R /APD /P:"EPSON Stylus SX200 Series"
eSobi v2-->C:\Program Files (x86)\InstallShield Installation Information\{15D967B5-A4BE-42AE-9E84-64CD062B25AA}\setup.exe -runfromtemp -l0x0409
Farm Frenzy 2-->"C:\Program Files (x86)\Acer GameZone\Farm Frenzy 2\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Farm Frenzy 2\install.log"
FlashGet 3.7-->C:\Program Files (x86)\FlashGet Network\FlashGet 3\uninst.exe
Galapago-->"C:\Program Files (x86)\Acer GameZone\Galapago\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Galapago\install.log"
GHOST(6980)-->MsiExec.exe /I{CE7DAF08-F073-4499-AA99-FC0143DF55BB}
Gordon's Gate Flash Driver 2.2.0.5-->C:\Program Files (x86)\Sony Ericsson\Gordons Gate\uninst.exe
Heroes of Hellas-->"C:\Program Files (x86)\Acer GameZone\Heroes of Hellas\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Heroes of Hellas\install.log"
HiJackThis-->MsiExec.exe /X{45A66726-69BC-466B-A7A4-12FCBA4883D7}
Identity Card-->C:\Program Files (x86)\Acer\Identity Card\Uninstall.exe
Intel(R) Control Center-->C:\Program Files (x86)\Intel\Intel Control Center\uninstaller\SetupICC.exe -uninstall -force -confirm
Intel(R) Management Engine Components-->C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\Uninstall\setup.exe -uninstall
Intel(R) Rapid Storage Technology-->C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\Uninstall\setup.exe -uninstall
Intel(R) Turbo Boost Technology Driver-->C:\Program Files (x86)\Intel\Intel(R) Turbo Boost Technology Driver\Uninstall\setup.exe -uninstall -iips
Intel(R) Turbo Boost Technology Monitor-->MsiExec.exe /X{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}
IrfanView (remove only)-->C:\Program Files (x86)\IrfanView\iv_uninstall.exe
Java(TM) 6 Update 29-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216026FF}
JDownloader 0.9-->C:\Program Files (x86)\JDownloader\JDUninstall.exe
Junk Mail filter update-->MsiExec.exe /I{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
Launch Manager-->C:\Windows\UNINSTLMv4.EXE LMv4.UNI
Mafia II DLC Jimmy's Vendetta-->"C:\Program Files (x86)\Mafia II\unins000.exe"
Mass Effect 2-->"C:\Program Files (x86)\Common Files\BioWare\Uninstall Mass Effect 2.exe"
MediaInfo 0.7.48-->C:\Program Files\MediaInfo\uninst.exe
MediaShow Espresso-->"C:\Program Files (x86)\InstallShield Installation Information\{4968622A-4D3F-489E-9ACE-5FEC4CC0BDE3}\Setup.exe" /z-uninstall
Merriam Websters Spell Jam-->"C:\Program Files (x86)\Acer GameZone\Merriam Websters Spell Jam\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Merriam Websters Spell Jam\install.log"
Mesh Runtime-->MsiExec.exe /I{8C6D6116-B724-4810-8F2D-D047E6B7D68E}
Microsoft .NET Framework 4 Client Profile-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\Setup.exe /repair /x86 /x64 /parameterfolder Client
Microsoft .NET Framework 4 Client Profile-->MsiExec.exe /X{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}
Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{F2508213-9989-4E85-A078-72BE483917EF}
Microsoft Games for Windows Marketplace-->MsiExec.exe /X{4CB0307C-565E-4441-86BE-0DF2E4FB828C}
Microsoft Office 2010 pre podnikateľov-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\setup.exe" /uninstall SINGLEIMAGE /dll OSETUP.DLL
Microsoft Office 2010 Service Pack 1 (SP1)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0015-041B-0000-0000000FF1CE}" "{9C5E0700-7189-470B-A02E-7FFE75C8BD43}" "1051" "0"
Microsoft Office 2010 Service Pack 1 (SP1)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0016-041B-0000-0000000FF1CE}" "{9C5E0700-7189-470B-A02E-7FFE75C8BD43}" "1051" "0"
Microsoft Office 2010 Service Pack 1 (SP1)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0018-041B-0000-0000000FF1CE}" "{9C5E0700-7189-470B-A02E-7FFE75C8BD43}" "1051" "0"
Microsoft Office 2010 Service Pack 1 (SP1)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0019-041B-0000-0000000FF1CE}" "{9C5E0700-7189-470B-A02E-7FFE75C8BD43}" "1051" "0"
Microsoft Office 2010 Service Pack 1 (SP1)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001A-041B-0000-0000000FF1CE}" "{9C5E0700-7189-470B-A02E-7FFE75C8BD43}" "1051" "0"
Microsoft Office 2010 Service Pack 1 (SP1)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001B-041B-0000-0000000FF1CE}" "{9C5E0700-7189-470B-A02E-7FFE75C8BD43}" "1051" "0"
Microsoft Office 2010 Service Pack 1 (SP1)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0405-0000-0000000FF1CE}" "{2304F942-79D2-46F7-A512-269A7F5B7EFC}" "1051" "0"
Microsoft Office 2010 Service Pack 1 (SP1)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0407-0000-0000000FF1CE}" "{65A2328E-FDFB-4CA3-8582-357EA6825FEA}" "1051" "0"
Microsoft Office 2010 Service Pack 1 (SP1)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0409-0000-0000000FF1CE}" "{99ACCA38-6DD3-48A8-96AE-A283C9759279}" "1051" "0"
Microsoft Office 2010 Service Pack 1 (SP1)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-040E-0000-0000000FF1CE}" "{71431694-851E-4BC7-92A9-4BB9D196E24F}" "1051" "0"
Microsoft Office 2010 Service Pack 1 (SP1)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-041B-0000-0000000FF1CE}" "{A162C5E6-7778-4D5B-9F0A-38F0122DD859}" "1051" "0"
Microsoft Office 2010 Service Pack 1 (SP1)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" "1051" "0"
Microsoft Office 2010 Service Pack 1 (SP1)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-041B-1000-0000000FF1CE}" "{6AD0855C-A3FC-4B71-907A-D4372C6F75DB}" "1051" "0"
Microsoft Office 2010 Service Pack 1 (SP1)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002C-041B-0000-0000000FF1CE}" "{93F2D01D-F7E6-46E5-9A7C-316262461F9F}" "1051" "0"
Microsoft Office 2010 Service Pack 1 (SP1)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-003D-0000-0000-0000000FF1CE}" "{047B0968-E622-4FAA-9B4B-121FA109EDDE}" "1051" "0"
Microsoft Office 2010 Service Pack 1 (SP1)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-006E-041B-0000-0000000FF1CE}" "{56405E5D-9583-4644-B183-AFB3E19D80B3}" "1051" "0"
Microsoft Office 2010 Service Pack 1 (SP1)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-00A1-041B-0000-0000000FF1CE}" "{9C5E0700-7189-470B-A02E-7FFE75C8BD43}" "1051" "0"
Microsoft Office Access MUI (Slovak) 2010-->MsiExec.exe /X{90140000-0015-041B-0000-0000000FF1CE}
Microsoft Office Excel MUI (Slovak) 2010-->MsiExec.exe /X{90140000-0016-041B-0000-0000000FF1CE}
Microsoft Office Office 64-bit Components 2010-->MsiExec.exe /X{90140000-002A-0000-1000-0000000FF1CE}
Microsoft Office OneNote MUI (Slovak) 2010-->MsiExec.exe /X{90140000-00A1-041B-0000-0000000FF1CE}
Microsoft Office Outlook Connector-->MsiExec.exe /X{95140000-007A-041B-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Slovak) 2010-->MsiExec.exe /X{90140000-001A-041B-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Slovak) 2010-->MsiExec.exe /X{90140000-0018-041B-0000-0000000FF1CE}
Microsoft Office Proof (Czech) 2010-->MsiExec.exe /X{90140000-001F-0405-0000-0000000FF1CE}
Microsoft Office Proof (English) 2010-->MsiExec.exe /X{90140000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2010-->MsiExec.exe /X{90140000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Hungarian) 2010-->MsiExec.exe /X{90140000-001F-040E-0000-0000000FF1CE}
Microsoft Office Proof (Slovak) 2010-->MsiExec.exe /X{90140000-001F-041B-0000-0000000FF1CE}
Microsoft Office Proofing (Slovak) 2010-->MsiExec.exe /X{90140000-002C-041B-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Slovak) 2010-->MsiExec.exe /X{90140000-0019-041B-0000-0000000FF1CE}
Microsoft Office Shared 64-bit MUI (Slovak) 2010-->MsiExec.exe /X{90140000-002A-041B-1000-0000000FF1CE}
Microsoft Office Shared MUI (Slovak) 2010-->MsiExec.exe /X{90140000-006E-041B-0000-0000000FF1CE}
Microsoft Office Single Image 2010-->MsiExec.exe /X{90140000-003D-0000-0000-0000000FF1CE}
Microsoft Office Word MUI (Slovak) 2010-->MsiExec.exe /X{90140000-001B-041B-0000-0000000FF1CE}
Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit-->MsiExec.exe /X{95140000-007D-0409-0000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161-->MsiExec.exe /X{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161-->MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319-->MsiExec.exe /X{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}
Microsoft_VC100_CRT_SP1_x64-->MsiExec.exe /I{680EDA59-9266-44B4-949E-0C24F65DFF82}
Microsoft_VC100_CRT_SP1_x86-->MsiExec.exe /I{E3B64CC5-C011-40C0-92BC-7316CD5E5688}
MozBackup 1.5.1-->C:\Program Files (x86)\MozBackup\Uninstall.exe
Mozilla Firefox 8.0 (x86 sk)-->C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
Mozilla Thunderbird (8.0)-->C:\Program Files (x86)\Mozilla Thunderbird\uninstall\helper.exe
MSVC80_x64_v2-->MsiExec.exe /I{4D668D4F-FAA2-4726-834C-31F4614F312E}
MSVC80_x86_v2-->MsiExec.exe /I{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}
MSVC90_x64-->MsiExec.exe /I{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}
MSVC90_x86-->MsiExec.exe /I{AF111648-99A1-453E-81DD-80DBBF6DAD0D}
MSVCRT_amd64-->MsiExec.exe /I{D0B44725-3666-492D-BEF6-587A14BD9BD9}
MSVCRT-->MsiExec.exe /I{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
MyWinLocker Suite-->"C:\Program Files (x86)\InstallShield Installation Information\{738BF5C3-AF7B-4BB0-B7EF-E505EFC756BE}\setup.exe" -runfromtemp -l0x041b -removeonly
MyWinLocker Suite-->MsiExec.exe /X{738BF5C3-AF7B-4BB0-B7EF-E505EFC756BE}
MyWinLocker-->MsiExec.exe /X{0D7CD0D9-4A88-4A63-8F91-3F4E8F371768}
Need for Speed™ Undercover-->MsiExec.exe /X{E6D22FE1-AB5F-42CA-9480-6F70B96DDD88}
Nokia Connectivity Cable Driver-->MsiExec.exe /I{9544BF15-E7AB-43EA-B8D4-159C7DA17FC9}
Nokia Flashing Cable Driver-->MsiExec.exe /X{2A0A6470-FD0F-4F45-9B11-85F3167DB943}
NTI Backup Now 5-->C:\Program Files (x86)\InstallShield Installation Information\{12EFA1A4-AC3B-443C-8143-237EDE760403}\setup.exe -runfromtemp -l0x0409
NTI Media Maker 8-->C:\Program Files (x86)\InstallShield Installation Information\{2413930C-8309-47A6-BC61-5EF27A4222BC}\setup.exe -runfromtemp -l0x0409
NVIDIA PhysX-->MsiExec.exe /X{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}
O&O Defrag Professional-->MsiExec.exe /I{7D088FD6-67B8-4186-947C-5FB4CC7227B5}
OpenDNS Updater 2.2.1-->"C:\Program Files (x86)\OpenDNS Updater\Uninstall.exe"
Optical Drive Power Management-->"C:\Program Files (x86)\InstallShield Installation Information\{AE09C972-EEB2-4DA5-8090-0FCF54576854}\setup.exe" -runfromtemp -l0x41b -removeonly
Origin-->C:\Program Files (x86)\Origin\OriginUninstall.exe
Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia-->MsiExec.exe /I{C2FD7DB5-FE30-49B6-8A2F-C5652E053C31}
PDFCreator-->C:\Program Files (x86)\PDFCreator\unins000.exe
Phoenix Service Software-->MsiExec.exe /I{385B0FD6-3B09-4852-86E5-887397784152}
PL-2303 USB-to-Serial-->"C:\Program Files (x86)\InstallShield Installation Information\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}\setup.exe" -runfromtemp -l0x0009 -removeonly
Poker Pop-->"C:\Program Files (x86)\Acer GameZone\Poker Pop\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Poker Pop\install.log"
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -removeonly
Scorpions WinCheater-->"C:\Program Files (x86)\Scorpions WinCheater\unins000.exe"
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {F66C3466-1FDB-347C-B3AE-FB6C50627B10} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {B5BD3CA1-11AB-35A6-B22A-6A219DC0668E} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {E720AD01-93D5-3E8E-BB8D-E4EF5AF4E5DD} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {BCD37DCB-F479-3D4D-A90E-A0F7575549C4} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {FF811680-AECE-3F35-A98C-1B84B6E09168} /parameterfolder Client
Security Update for Microsoft Excel 2010 (KB2553070)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-003D-0000-0000-0000000FF1CE}" "{294BAA9E-9209-497F-A71F-7E52EFB194D4}" "1051" "0"
Security Update for Microsoft Office 2010 (KB2553091)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-003D-0000-0000-0000000FF1CE}" "{07CA44F3-F5B3-4D12-8C91-EDC5FE91D45C}" "1051" "0"
Security Update for Microsoft Office 2010 (KB2553096)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-003D-0000-0000-0000000FF1CE}" "{10802A6D-EDBF-4383-BCBD-9D5B32F56D35}" "1051" "0"
Security Update for Microsoft SharePoint Workspace 2010 (KB2566445)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{337A3FB9-281D-4EC8-9CC1-7F6DDAC2359F}" "1051" "0"
Serials 64-->"C:\Program Files (x86)\Scorpions WinCheater\unins001.exe"
Shredder-->MsiExec.exe /I{C2695E83-CF1D-43D1-84FE-B3BEC561012A}
Sony Ericsson PC Companion 2.01.231-->"C:\Program Files (x86)\InstallShield Installation Information\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}\setup.exe" -runfromtemp -l0x0009 -removeonly
Spin & Win-->"C:\Program Files (x86)\Acer GameZone\Spin & Win\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Spin & Win\install.log"
Star Wars: The Old Republic-->C:\Program Files (x86)\Common Files\BioWare\Uninstall Star Wars - The Old Republic.exe
StarCraft II-->C:\Program Files (x86)\Common Files\Blizzard Entertainment\StarCraft II\Uninstall.exe
Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
Synaptics Pointing Device Driver-->rundll32.exe "%ProgramFiles%\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
System Requirements Lab for Intel-->MsiExec.exe /I{CD41B576-4787-4D5C-95EE-24A4ABD89CD3}
The Settlers 7 - Paths to a Kingdom-->"C:\Program Files (x86)\InstallShield Installation Information\{9C916142-C18C-429D-BFED-40094A7E0BEB}\setup.exe" -runfromtemp -l0x0009 -removeonly
TNod User & Password Finder-->"C:\Program Files (x86)\TNod User & Password Finder\uninst-TNod.exe"
Total Commander (Remove or Repair)-->C:\Program Files (x86)\totalcmd\tcuninst.exe
TuneUp Utilities 2012-->C:\Program Files (x86)\TuneUp Utilities 2012\TUInstallHelper.exe --Trigger-Uninstall
Ubisoft Game Launcher-->"C:\Program Files (x86)\InstallShield Installation Information\{888F1505-C2B3-4FDE-835D-36353EBD4754}\setup.exe" -runfromtemp -l0x0409 -removeonly
UltraISO Premium V9.36-->"C:\Program Files (x86)\UltraISO\unins000.exe"
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {29C7BE97-DE59-37A2-A687-2ADD5321948A} /parameterfolder Client
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {7D799A81-5661-3159-BF92-754161CED6E6} /parameterfolder Client
Update for Microsoft Office 2010 (KB2494150)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-003D-0000-0000-0000000FF1CE}" "{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}" "1051" "0"
Update for Microsoft Office 2010 (KB2553065)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-003D-0000-0000-0000000FF1CE}" "{A8686D24-1E89-43A1-973E-05A258D2B3F8}" "1051" "0"
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-003D-0000-0000-0000000FF1CE}" "{48E1B6C2-7299-4F3F-AA63-42F0ACE55AA4}" "1051" "0"
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-003D-0000-0000-0000000FF1CE}" "{C8694FF0-8203-483B-A07A-2BC40433167D}" "1051" "0"
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-006E-041B-0000-0000000FF1CE}" "{45BC4A6A-9337-4276-AF51-6481A747BB32}" "1051" "0"
Update for Microsoft Office 2010 (KB2553455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{147E3669-1EA6-454C-B53E-A2BE51D8E520}" "1051" "0"
Update for Microsoft Office 2010 (KB2553455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-003D-0000-0000-0000000FF1CE}" "{147E3669-1EA6-454C-B53E-A2BE51D8E520}" "1051" "0"
Update for Microsoft Office 2010 (KB2566458)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-003D-0000-0000-0000000FF1CE}" "{EFB525A0-E1C0-4E32-9968-FE401BC87363}" "1051" "0"
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{BEBC2484-290C-46AD-9834-6DAD1FA80273}" "1051" "0"
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-003D-0000-0000-0000000FF1CE}" "{BEBC2484-290C-46AD-9834-6DAD1FA80273}" "1051" "0"
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-00A1-041B-0000-0000000FF1CE}" "{B4E15135-5272-4194-9724-5FA19F72296D}" "1051" "0"
Update for Microsoft Outlook 2010 (KB2553323) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-003D-0000-0000-0000000FF1CE}" "{29E94638-D92F-4C40-BDA1-FEDCC92F478D}" "1051" "0"
Update for Microsoft Outlook Social Connector (KB2583935)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001A-041B-0000-0000000FF1CE}" "{6A3A7BAA-D4A1-4B5E-9F0C-AC1F9E6A9D06}" "1051" "0"
Update for Microsoft Outlook Social Connector (KB2583935)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-003D-0000-0000-0000000FF1CE}" "{EDF9874C-9E37-4110-9FC3-094247E114DF}" "1051" "0"
VLC media player 1.1.10-->C:\Program Files (x86)\VideoLAN\VLC\uninstall.exe
Warhammer® 40,000™: Dawn of War® II-->"C:\Program Files (x86)\Steam\steam.exe" steam://uninstall/15620
Welcome Center-->C:\Program Files (x86)\Acer\Welcome Center\Uninstall.exe
Windows Live Communications Platform-->MsiExec.exe /I{D45240D3-B6B3-4FF9-B243-54ECE3E10066}
Windows Live Essentials-->C:\Program Files (x86)\Windows Live\Installer\wlarp.exe
Windows Live Essentials-->MsiExec.exe /I{6491AB99-A11E-41FD-A5E7-32DE8A097B8E}
Windows Live Family Safety-->MsiExec.exe /I{8068ACF9-B398-4C14-BEF6-817F12024707}
Windows Live Family Safety-->MsiExec.exe /X{46A5FBE9-ADB3-4493-A1CC-B4CFFD24D26A}
Windows Live Fotogaléria-->MsiExec.exe /X{97F77D62-5110-4FA3-A2D3-410B92D31199}
Windows Live ID Sign-in Assistant-->MsiExec.exe /I{1B8ABA62-74F0-47ED-B18C-A43128E591B8}
Windows Live Installer-->MsiExec.exe /I{0B0F231F-CE6A-483D-AA23-77B364F75917}
Windows Live Language Selector-->MsiExec.exe /I{5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}
Windows Live Mail-->MsiExec.exe /I{9D56775A-93F3-44A3-8092-840E3826DE30}
Windows Live Mail-->MsiExec.exe /I{FA6CF94F-DACF-4FE7-959D-55C421B91B17}
Windows Live Mesh-->MsiExec.exe /I{AD001A69-88CC-4766-B2DB-3C1DFAB9AC72}
Windows Live Mesh-->MsiExec.exe /I{DECDCB7C-58CC-4865-91AF-627F9798FE48}
Windows Live Messenger Companion Core-->MsiExec.exe /I{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}
Windows Live MIME IFilter-->MsiExec.exe /I{DA54F80E-261C-41A2-A855-549A144F2F59}
Windows Live Movie Maker-->MsiExec.exe /X{92EA4134-10D1-418A-91E1-5A0453131A38}
Windows Live Movie Maker-->MsiExec.exe /X{FB3D07AE-73D0-47A9-AC12-6F50BF8B6202}
Windows Live Photo Common-->MsiExec.exe /X{6F37D92B-41AA-44B7-80D2-457ABDE11896}
Windows Live Photo Common-->MsiExec.exe /X{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}
Windows Live Photo Gallery-->MsiExec.exe /X{3336F667-9049-4D46-98B6-4C743EEBC5B1}
Windows Live PIMT Platform-->MsiExec.exe /I{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}
Windows Live Remote Client Resources-->MsiExec.exe /I{5F44A3A1-5D24-4708-8776-66B42B174C64}
Windows Live Remote Client-->MsiExec.exe /I{DF6D988A-EEA0-4277-AAB8-158E086E439B}
Windows Live Remote Service Resources-->MsiExec.exe /I{5141AA6E-5FAC-4473-BFFB-BEE69DDC7F2B}
Windows Live Remote Service-->MsiExec.exe /I{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}
Windows Live SOXE Definitions-->MsiExec.exe /I{200FEC62-3C34-4D60-9CE8-EC372E01C08F}
Windows Live SOXE-->MsiExec.exe /I{682B3E4F-696A-42DE-A41C-4C07EA1678B4}
Windows Live UX Platform Language Pack-->MsiExec.exe /I{02C0A02E-AB30-446C-B4C3-A03310D95F53}
Windows Live UX Platform-->MsiExec.exe /I{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}
Windows Live Writer Resources-->MsiExec.exe /X{7CB529B2-6C74-4878-9C3F-C29C3C3BBDC6}
Windows Live Writer-->MsiExec.exe /X{11778DA1-0495-4ED9-972F-F9E0B0367CD5}
Windows Live Writer-->MsiExec.exe /X{A726AE06-AAA3-43D1-87E3-70F510314F04}
Windows Live Writer-->MsiExec.exe /X{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
WinPcap 4.1.2-->"C:\Program Files\WinPcap\uninstall.exe"
WinRAR 4.01 (64-bit)-->C:\Program Files\WinRAR\uninstall.exe
World of Tanks v.0.6.5-->"C:\Games\World_of_Tanks\unins000.exe"
WorldUnlock Codes Calculator-->"C:\Program Files (x86)\WorldUnlock Codes Calculator\uninst.exe"

======Hosts File======

Code: Select all | Line number On/Off | Expand/Contract
1. 127.0.0.1 static3.cdn.ubi.com
2. 127.0.0.1 ubisoft-orbit.s3.amazonaws.com
3. #127.0.0.1 onlineconfigservice.ubi.com
4. 127.0.0.1 orbitservice.ubi.com
5. #127.0.0.1 ubisoft-orbit-savegames.s3.amazonaws.com

======System event log======

Computer Name: 5820TG
Event Code: 7034
Message: Služba TuneUp Utilities Service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.
Record Number: 94500
Source Name: Service Control Manager
Time Written: 20111112191418.009621-000
Event Type: Error
User:

Computer Name: 5820TG
Event Code: 4001
Message: Služba automatickej konfigurácie siete WLAN sa úspešne zastavila.

Record Number: 94131
Source Name: Microsoft-Windows-WLAN-AutoConfig
Time Written: 20111112125130.763771-000
Event Type: Warning
User: NT AUTHORITY\SYSTEM

Computer Name: 5820TG
Event Code: 10010
Message: The server {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} did not register with DCOM within the required timeout.
Record Number: 94081
Source Name: Microsoft-Windows-DistributedCOM
Time Written: 20111112125123.000000-000
Event Type: Error
User:

Computer Name: 5820TG
Event Code: 4001
Message: Služba automatickej konfigurácie siete WLAN sa úspešne zastavila.

Record Number: 93901
Source Name: Microsoft-Windows-WLAN-AutoConfig
Time Written: 20111111234713.236207-000
Event Type: Warning
User: NT AUTHORITY\SYSTEM

Computer Name: 5820TG
Event Code: 10010
Message: The server {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} did not register with DCOM within the required timeout.
Record Number: 93847
Source Name: Microsoft-Windows-DistributedCOM
Time Written: 20111111234649.000000-000
Event Type: Error
User:

=====Application event log=====

Computer Name: 5820TG
Event Code: 3036
Message: The content source <file:C:/Users/> cannot be accessed.

Context: Windows Application, SystemIndex Catalog

Details:
Prístup je odmietnutý. Skontrolujte správnosť predvoleného konta na prístup k obsahu v rámci centrálnej správy služby Windows Search alebo kliknite na prepojenie Vylúčiť a zahrnúť obsah a pridajte pravidlo na zadanie správneho konta na prehľadávanie obsahu na prístup k tejto adrese URL. (HRESULT : 0x80041205) (0x80041205)

Record Number: 930
Source Name: Microsoft-Windows-Search
Time Written: 20110627200415.000000-000
Event Type: Warning
User:

Computer Name: 5820TG
Event Code: 3036
Message: The content source <file:C:/ProgramData/Microsoft/Windows/Start Menu/> cannot be accessed.

Context: Windows Application, SystemIndex Catalog

Details:
Prístup je odmietnutý. Skontrolujte správnosť predvoleného konta na prístup k obsahu v rámci centrálnej správy služby Windows Search alebo kliknite na prepojenie Vylúčiť a zahrnúť obsah a pridajte pravidlo na zadanie správneho konta na prehľadávanie obsahu na prístup k tejto adrese URL. (HRESULT : 0x80041205) (0x80041205)

Record Number: 920
Source Name: Microsoft-Windows-Search
Time Written: 20110627200116.000000-000
Event Type: Warning
User:

Computer Name: 5820TG
Event Code: 1008
Message: Služba Windows Search sa spúšťa a pokúša sa odstrániť starý index hľadania. {Dôvod: Full Index Reset}.

Record Number: 914
Source Name: Microsoft-Windows-Search
Time Written: 20110627200100.000000-000
Event Type: Warning
User:

Computer Name: 5820TG
Event Code: 1008
Message: Služba Windows Search sa spúšťa a pokúša sa odstrániť starý index hľadania. {Dôvod: Full Index Reset}.

Record Number: 894
Source Name: Microsoft-Windows-Search
Time Written: 20110627195846.000000-000
Event Type: Warning
User:

Computer Name: 5820TG
Event Code: 3006
Message: Unable to read the performance counter strings defined for the 01b language ID. The first DWORD in the Data section contains the Win32 error code.
Record Number: 887
Source Name: Microsoft-Windows-LoadPerf
Time Written: 20110627195840.267140-000
Event Type: Error
User: NT AUTHORITY\SYSTEM

=====Security event log=====

Computer Name: WIN-79IJLII8J9V
Event Code: 4624
Message: An account was successfully logged on.

Subject:
Security ID: S-1-5-18
Account Name: WIN-79IJLII8J9V$
Account Domain: WORKGROUP
Logon ID: 0x3e7

Logon Type: 5

New Logon:
Security ID: S-1-5-18
Account Name: SYSTEM
Account Domain: NT AUTHORITY
Logon ID: 0x3e7
Logon GUID: {00000000-0000-0000-0000-000000000000}

Process Information:
Process ID: 0x2a8
Process Name: C:\Windows\System32\services.exe

Network Information:
Workstation Name:
Source Network Address: -
Source Port: -

Detailed Authentication Information:
Logon Process: Advapi
Authentication Package: Negotiate
Transited Services: -
Package Name (NTLM only): -
Key Length: 0

This event is generated when a logon session is created. It is generated on the computer that was accessed.

The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.

The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).

The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.

The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.

The authentication information fields provide detailed information about this specific logon request.
- Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.
- Transited services indicate which intermediate services have participated in this logon request.
- Package name indicates which sub-protocol was used among the NTLM protocols.
- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
Record Number: 539
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20101216005614.855114-000
Event Type: Audit Success
User:

Computer Name: WIN-79IJLII8J9V
Event Code: 4738
Message: A user account was changed.

Subject:
Security ID: S-1-5-21-1199988807-137008708-1487091555-500
Account Name: Administrator
Account Domain: WIN-79IJLII8J9V
Logon ID: 0x319e5

Target Account:
Security ID: S-1-5-21-1199988807-137008708-1487091555-500
Account Name: Administrator
Account Domain: WIN-79IJLII8J9V

Changed Attributes:
SAM Account Name: -
Display Name: -
User Principal Name: -
Home Directory: -
Home Drive: -
Script Path: -
Profile Path: -
User Workstations: -
Password Last Set: -
Account Expires: -
Primary Group ID: -
AllowedToDelegateTo: -
Old UAC Value: 0x211
New UAC Value: 0x211
User Account Control: -
User Parameters: -
SID History: -
Logon Hours: -

Additional Information:
Privileges: -
Record Number: 538
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20101216005613.482312-000
Event Type: Audit Success
User:

Computer Name: WIN-79IJLII8J9V
Event Code: 4672
Message: Special privileges assigned to new logon.

Subject:
Security ID: S-1-5-18
Account Name: SYSTEM
Account Domain: NT AUTHORITY
Logon ID: 0x3e7

Privileges: SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 537
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20101216005608.927104-000
Event Type: Audit Success
User:

Computer Name: WIN-79IJLII8J9V
Event Code: 4624
Message: An account was successfully logged on.

Subject:
Security ID: S-1-5-18
Account Name: WIN-79IJLII8J9V$
Account Domain: WORKGROUP
Logon ID: 0x3e7

Logon Type: 5

New Logon:
Security ID: S-1-5-18
Account Name: SYSTEM
Account Domain: NT AUTHORITY
Logon ID: 0x3e7
Logon GUID: {00000000-0000-0000-0000-000000000000}

Process Information:
Process ID: 0x2a8
Process Name: C:\Windows\System32\services.exe

Network Information:
Workstation Name:
Source Network Address: -
Source Port: -

Detailed Authentication Information:
Logon Process: Advapi
Authentication Package: Negotiate
Transited Services: -
Package Name (NTLM only): -
Key Length: 0

This event is generated when a logon session is created. It is generated on the computer that was accessed.

The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.

The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).

The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.

The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.

The authentication information fields provide detailed information about this specific logon request.
- Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.
- Transited services indicate which intermediate services have participated in this logon request.
- Package name indicates which sub-protocol was used among the NTLM protocols.
- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
Record Number: 536
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20101216005608.927104-000
Event Type: Audit Success
User:

Computer Name: WIN-79IJLII8J9V
Event Code: 1102
Message: The audit log was cleared.
Subject:
Security ID: S-1-5-21-1199988807-137008708-1487091555-500
Account Name: Administrator
Domain Name: WIN-79IJLII8J9V
Logon ID: 0x319e5
Record Number: 535
Source Name: Microsoft-Windows-Eventlog
Time Written: 20101216005609.753905-000
Event Type: Audit Success
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=C:\Program Files (x86)\AMD APP\bin\x86_64;C:\Program Files (x86)\AMD APP\bin\x86;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;c:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\EgisTec MyWinLocker\x86;C:\Program Files (x86)\EgisTec MyWinLocker\x64;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files (x86)\Windows Live\Shared
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=4
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 37 Stepping 5, GenuineIntel
"PROCESSOR_REVISION"=2505
"Pathtem"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\EgisTec MyWinLocker\x86;C:\Program Files (x86)\EgisTec MyWinLocker\x64
"NTIPath"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\EgisTec MyWinLocker\x86;C:\Program Files (x86)\EgisTec MyWinLocker\x64;C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\;
"AMDAPPSDKROOT"=C:\Program Files (x86)\AMD APP\

-----------------EOF-----------------

Co budem delat s tim nelegalni ESET Smart Security Dle pravidel fora (viz zde a a zde bod c.3 ) se vsak nelegalnim SW nezabyvame, jelikoz nelegalni programy jsou vetsinou zdrojem haveti. Navic tim porusujete i autorska prava , pachate trestny cin a ten jako takovy nebude nasim forem podporovan. Uvedomte si, ze jste na bezpecnostnim foru - podpora warezu (zvlaste bezpecnostnich programu) by byla zcela proti logice fora