VIRY.CZ

Logfile of random's system information tool 1.09 (written by random/random)
Run by popino at 2012-01-20 18:30:56
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 113 GB (37%) free of 305 GB
Total RAM: 4091 MB (58% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:31:12, on 20.1.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe
C:\Users\popino\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\popino\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\popino\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
C:\Program Files\trend micro\popino.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1964065576-2339917071-4016889289-1004\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1964065576-2339917071-4016889289-1004\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Startup: Update NOD32 license.lnk = C:\Program Files (x86)\TNod User & Password Finder\TNODUP.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Search the Web - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
O9 - Extra button: Quick-Launch Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files (x86)\Acer Bio Protection\PwdBank.exe
O9 - Extra 'Tools' menuitem: Quick-Launch Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files (x86)\Acer Bio Protection\PwdBank.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files (x86)\ICQ7.7\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files (x86)\ICQ7.7\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agr64svc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AuthenTec Fingerprint Service (ATService) - AuthenTec, Inc. - C:\Program Files (x86)\Fingerprint Sensor\AtService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: EgisTec Service (IGBASVC) - Egis Technology Inc. - C:\Program Files (x86)\Acer Bio Protection\BASVC.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: Služba Windows Media Player Network Sharing (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9071 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files (x86)\Fingerprint Sensor\AtService.exe"
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
winlogon.exe
C:\Windows\System32\spoolsv.exe
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files (x86)\Acer Bio Protection\CompPtcVUI.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\LSI SoftModem\agr64svc.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Acer Bio Protection\BASVC.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
C:\Windows\system32\SearchIndexer.exe /Embedding
WLIDSvcM.exe 1868
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe"
"C:\Users\popino\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\popino\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Inactive/Prefetch/ContentPrefetchPrerender2/PrerenderFromOmniboxHeuristic/OriginalAlgorithm/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd16/SpdyImpact/npn_with_spdy/WarmSocketImpact/last_accessed_socket/ --enable-print-preview --channel=1464.059C1480.604858063 /prefetch:3
C:\Windows\system32\rundll32.exe "C:\Users\popino\AppData\Local\Google\Chrome\APPLIC~1\160912~1.75\gcswf32.dll",BrokerMain browser=chrome
"C:\Users\popino\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\popino\AppData\Local\Google\Chrome\Application\16.0.912.75\gcswf32.dll" --lang=cs --channel=1464.0509C700.1857588686 --flash-broker=2284 /prefetch:4
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Windows Live\Mail\wlmail.exe"
C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Users\popino\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1964065576-2339917071-4016889289-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1964065576-2339917071-4016889289-1001UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\popino\AppData\Roaming\Mozilla\Firefox\Profiles\umew6gaa.default

prefs.js - "browser.startup.homepage" - "www.seznam.cz"
prefs.js - "keyword.URL" - "http://search.sweetim.com/search.asp?src=2&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\popino\AppData\Roaming\Mozilla\Firefox\Profiles\umew6gaa.default\extensions\
{77d2ed30-4cd2-11e0-b8af-0800200c9a66}

C:\Users\popino\AppData\Roaming\Mozilla\Firefox\Profiles\umew6gaa.default\searchplugins\
sweetim.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-01-01 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-01-01 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{EEE6C35B-6118-11DC-9C72-001320C79847}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-12-31 1220392]
""= []
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2011-09-22 4035152]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"=C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-11-10 3514176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\popino\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-31 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files (x86)\ICQ7.7\ICQ.exe [2012-01-20 127040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSpeedUp]
C:\Program Files (x86)\Zrychleni Pocitace\PCSpeedUp.lnk []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PrnStatusMX]
C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [2007-08-29 1238528]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDVCPL]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-10-17 13307496]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM]
C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe [2011-08-01 114992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VitaKeyPdtWzd]
C:\Program Files (x86)\Acer Bio Protection\PdtWzd.exe [2009-09-05 3570176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^20Dollars2Surf.lnk]
C:\PROGRA~2\20DOLL~1\20DOLL~1.EXE [2010-01-28 89088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Aura.lnk]
C:\Windows\8SKINP~1\Aura\Aura.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TaskbarUserTile.lnk]
C:\Windows\8SKINP~1\TASKBA~1\UserTile.exe []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2011-12-31 1112072]

C:\Users\popino\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Update NOD32 license.lnk - C:\Program Files (x86)\TNod User & Password Finder\TNODUP.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=C:\Program Files (x86)\Acer Bio Protection\PwdFilterV64

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"ShutdownSessionTimeout"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-01-20 18:30:56 ----D---- C:\rsit
2012-01-20 18:25:21 ----D---- C:\Program Files\trend micro
2012-01-20 18:12:23 ----D---- C:\ProgramData\Spybot - Search & Destroy
2012-01-20 18:12:23 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy
2012-01-20 16:50:21 ----D---- C:\Program Files (x86)\ICQ7.7
2012-01-20 15:58:05 ----D---- C:\Users\popino\AppData\Roaming\Malwarebytes
2012-01-20 15:58:00 ----A---- C:\Windows\SYSWOW64\drivers\mbamswissarmy.sys
2012-01-20 15:57:59 ----D---- C:\ProgramData\Malwarebytes
2012-01-20 15:57:56 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-01-20 15:57:56 ----A---- C:\Windows\system32\drivers\mbam.sys
2012-01-18 14:00:10 ----D---- C:\Users\popino\AppData\Roaming\Skype
2012-01-18 14:00:03 ----RD---- C:\Program Files (x86)\Skype
2012-01-18 13:59:58 ----D---- C:\ProgramData\Skype
2012-01-15 15:16:33 ----D---- C:\ProgramData\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}
2012-01-15 14:35:34 ----D---- C:\Program Files (x86)\AnalogX
2012-01-15 14:21:49 ----D---- C:\Users\popino\AppData\Roaming\Reviversoft
2012-01-11 14:25:32 ----A---- C:\Windows\system32\schannel.dll
2012-01-11 14:25:31 ----A---- C:\Windows\SYSWOW64\schannel.dll
2012-01-11 14:25:31 ----A---- C:\Windows\system32\lsasrv.dll
2012-01-11 14:25:31 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2012-01-11 14:25:31 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2012-01-11 14:25:31 ----A---- C:\Windows\system32\drivers\cng.sys
2012-01-11 14:25:30 ----A---- C:\Windows\system32\lsass.exe
2012-01-11 14:25:29 ----A---- C:\Windows\SYSWOW64\webio.dll
2012-01-11 14:25:29 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2012-01-11 14:25:29 ----A---- C:\Windows\SYSWOW64\secur32.dll
2012-01-11 14:25:29 ----A---- C:\Windows\system32\webio.dll
2012-01-11 14:25:29 ----A---- C:\Windows\system32\sspisrv.dll
2012-01-11 14:25:29 ----A---- C:\Windows\system32\sspicli.dll
2012-01-11 14:25:29 ----A---- C:\Windows\system32\secur32.dll
2012-01-11 10:03:23 ----A---- C:\Windows\system32\quartz.dll
2012-01-11 10:03:22 ----A---- C:\Windows\SYSWOW64\quartz.dll
2012-01-11 10:03:22 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2012-01-11 10:03:22 ----A---- C:\Windows\system32\qdvd.dll
2012-01-11 10:03:16 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2012-01-11 10:03:16 ----A---- C:\Windows\system32\ntdll.dll
2012-01-11 10:03:00 ----A---- C:\Windows\SYSWOW64\packager.dll
2012-01-11 10:03:00 ----A---- C:\Windows\system32\packager.dll
2012-01-09 14:26:04 ----D---- C:\Users\popino\AppData\Roaming\abgx360
2012-01-09 12:59:36 ----D---- C:\Program Files (x86)\abgx360
2012-01-09 09:41:44 ----D---- C:\Program Files (x86)\Bar
2012-01-08 19:34:11 ----D---- C:\Program Files (x86)\TNod User & Password Finder
2012-01-08 19:23:41 ----D---- C:\Users\popino\AppData\Roaming\ESET
2012-01-08 19:21:22 ----D---- C:\ProgramData\ESET
2012-01-08 19:21:22 ----D---- C:\Program Files\ESET
2012-01-08 16:57:48 ----D---- C:\Program Files (x86)\20Dollars2Surf
2012-01-06 12:40:16 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2012-01-06 12:31:40 ----D---- C:\Program Files (x86)\Microsoft Works
2012-01-06 12:30:31 ----D---- C:\Windows\PCHEALTH
2012-01-06 12:28:51 ----D---- C:\Program Files\Microsoft Office
2012-01-06 12:28:44 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2012-01-06 12:28:01 ----D---- C:\Program Files (x86)\Microsoft Office
2012-01-06 12:26:36 ----RHD---- C:\MSOCache
2012-01-05 15:10:42 ----A---- C:\Windows\system32\FNTCACHE.DAT
2012-01-04 20:21:50 ----D---- C:\NVIDIA
2012-01-04 20:11:53 ----D---- C:\Windows\SYSWOW64\RTCOM
2012-01-04 20:11:53 ----D---- C:\Program Files\Realtek
2012-01-04 20:11:08 ----A---- C:\Windows\system32\R4EEP64A.dll
2012-01-04 20:11:08 ----A---- C:\Windows\system32\R4EEL64A.dll
2012-01-04 20:11:08 ----A---- C:\Windows\system32\R4EEG64A.dll
2012-01-04 20:11:08 ----A---- C:\Windows\system32\R4EED64A.dll
2012-01-04 20:11:08 ----A---- C:\Windows\system32\R4EEA64A.dll
2012-01-04 19:53:19 ----A---- C:\Windows\system32\NETwNr64.dll
2012-01-04 19:53:19 ----A---- C:\Windows\system32\NETwNc64.dll
2012-01-04 19:53:19 ----A---- C:\Windows\system32\drivers\NETwNs64.sys
2012-01-04 19:42:57 ----D---- C:\Program Files\LSI SoftModem
2012-01-04 19:41:40 ----D---- C:\ProgramData\NVIDIA
2012-01-04 19:41:35 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2012-01-04 19:41:23 ----A---- C:\Windows\system32\nvvsvc.exe
2012-01-04 19:41:23 ----A---- C:\Windows\system32\nvsvcr.dll
2012-01-04 19:41:23 ----A---- C:\Windows\system32\nvsvc64.dll
2012-01-04 19:41:23 ----A---- C:\Windows\system32\nvshext.dll
2012-01-04 19:41:23 ----A---- C:\Windows\system32\nvmctray.dll
2012-01-04 19:41:23 ----A---- C:\Windows\system32\nvhotkey.dll
2012-01-04 19:41:23 ----A---- C:\Windows\system32\nvcpl.dll
2012-01-04 19:41:23 ----A---- C:\Windows\system32\easyupdatusapiu64.dll
2012-01-04 19:40:27 ----D---- C:\ProgramData\NVIDIA Corporation
2012-01-04 19:40:18 ----D---- C:\Program Files\NVIDIA Corporation
2012-01-04 19:39:39 ----A---- C:\Windows\system32\nvgenco64.dll
2012-01-04 19:39:37 ----A---- C:\Windows\system32\nvdispco64.dll
2012-01-04 19:39:33 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2012-01-04 19:39:29 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2012-01-04 19:39:29 ----A---- C:\Windows\system32\OpenCL.dll
2012-01-04 19:39:28 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2012-01-04 19:39:28 ----A---- C:\Windows\system32\nvwgf2umx.dll
2012-01-04 19:39:27 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2012-01-04 19:39:27 ----A---- C:\Windows\system32\nvoglv64.dll
2012-01-04 19:39:25 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2012-01-04 19:39:25 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2012-01-04 19:39:25 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2012-01-04 19:39:25 ----A---- C:\Windows\system32\nvd3dumx.dll
2012-01-04 19:39:25 ----A---- C:\Windows\system32\nvcuvid.dll
2012-01-04 19:39:25 ----A---- C:\Windows\system32\nvcuvenc.dll
2012-01-04 19:39:24 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2012-01-04 19:39:24 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2012-01-04 19:39:24 ----A---- C:\Windows\system32\nvcuda.dll
2012-01-04 19:39:22 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2012-01-04 19:39:22 ----A---- C:\Windows\system32\nvcompiler.dll
2012-01-04 19:39:22 ----A---- C:\Windows\system32\nvapi64.dll
2012-01-04 19:07:20 ----D---- C:\Driver
2012-01-04 18:43:27 ----D---- C:\Program Files (x86)\Reviversoft
2012-01-04 17:36:20 ----D---- C:\AuthLog
2012-01-04 17:36:19 ----A---- C:\Windows\system32\VMC3KAPI.dll
2012-01-04 17:36:19 ----A---- C:\Windows\system32\VCryptAPI.dll
2012-01-04 17:35:43 ----D---- C:\Program Files (x86)\Acer Bio Protection
2012-01-04 17:28:03 ----D---- C:\Program Files (x86)\Fingerprint Sensor
2012-01-04 14:27:53 ----D---- C:\Users\popino\AppData\Roaming\OpenCandy
2012-01-04 14:22:35 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2012-01-04 14:22:35 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2012-01-04 14:22:35 ----A---- C:\Windows\system32\XAudio2_7.dll
2012-01-04 14:22:35 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2012-01-04 14:22:34 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2012-01-04 14:22:34 ----A---- C:\Windows\system32\xactengine3_7.dll
2012-01-04 14:22:33 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2012-01-04 14:22:33 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2012-01-04 14:22:31 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2012-01-04 14:22:31 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2012-01-04 14:22:31 ----A---- C:\Windows\system32\d3dx11_43.dll
2012-01-04 14:22:31 ----A---- C:\Windows\system32\d3dcsx_43.dll
2012-01-04 14:22:30 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2012-01-04 14:22:30 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2012-01-04 14:22:30 ----A---- C:\Windows\system32\D3DX9_43.dll
2012-01-04 14:22:30 ----A---- C:\Windows\system32\d3dx10_43.dll
2012-01-04 14:22:29 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2012-01-04 14:22:29 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2012-01-04 14:22:29 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2012-01-04 14:22:29 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2012-01-04 14:22:29 ----A---- C:\Windows\system32\XAudio2_6.dll
2012-01-04 14:22:29 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2012-01-04 14:22:29 ----A---- C:\Windows\system32\xactengine3_6.dll
2012-01-04 14:22:29 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2012-01-04 14:22:28 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2012-01-04 14:22:28 ----A---- C:\Windows\system32\XAudio2_5.dll
2012-01-04 14:22:27 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2012-01-04 14:22:27 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2012-01-04 14:22:27 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2012-01-04 14:22:27 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2012-01-04 14:22:27 ----A---- C:\Windows\system32\xactengine3_5.dll
2012-01-04 14:22:27 ----A---- C:\Windows\system32\d3dx11_42.dll
2012-01-04 14:22:27 ----A---- C:\Windows\system32\d3dcsx_42.dll
2012-01-04 14:22:27 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2012-01-04 14:22:26 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2012-01-04 14:22:26 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2012-01-04 14:22:26 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2012-01-04 14:22:26 ----A---- C:\Windows\system32\D3DX9_42.dll
2012-01-04 14:22:26 ----A---- C:\Windows\system32\D3DX9_41.dll
2012-01-04 14:22:26 ----A---- C:\Windows\system32\d3dx10_42.dll
2012-01-04 14:22:26 ----A---- C:\Windows\system32\d3dx10_41.dll
2012-01-04 14:22:26 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2012-01-04 14:22:25 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2012-01-04 14:22:25 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2012-01-04 14:22:24 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2012-01-04 14:22:24 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2012-01-04 14:22:24 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2012-01-04 14:22:24 ----A---- C:\Windows\system32\XAudio2_4.dll
2012-01-04 14:22:24 ----A---- C:\Windows\system32\xactengine3_4.dll
2012-01-04 14:22:24 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2012-01-04 14:22:23 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2012-01-04 14:22:23 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2012-01-04 14:22:23 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2012-01-04 14:22:23 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2012-01-04 14:22:23 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2012-01-04 14:22:23 ----A---- C:\Windows\system32\XAudio2_3.dll
2012-01-04 14:22:23 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2012-01-04 14:22:23 ----A---- C:\Windows\system32\D3DX9_40.dll
2012-01-04 14:22:23 ----A---- C:\Windows\system32\d3dx10_40.dll
2012-01-04 14:22:23 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2012-01-04 14:22:22 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2012-01-04 14:22:22 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2012-01-04 14:22:22 ----A---- C:\Windows\system32\xactengine3_3.dll
2012-01-04 14:22:22 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2012-01-04 14:22:21 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2012-01-04 14:22:21 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2012-01-04 14:22:21 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2012-01-04 14:22:21 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2012-01-04 14:22:21 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2012-01-04 14:22:21 ----A---- C:\Windows\system32\XAudio2_2.dll
2012-01-04 14:22:21 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2012-01-04 14:22:21 ----A---- C:\Windows\system32\xactengine3_2.dll
2012-01-04 14:22:21 ----A---- C:\Windows\system32\d3dx10_39.dll
2012-01-04 14:22:21 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2012-01-04 14:22:20 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2012-01-04 14:22:20 ----A---- C:\Windows\system32\D3DX9_39.dll
2012-01-04 14:22:19 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2012-01-04 14:22:19 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2012-01-04 14:22:19 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2012-01-04 14:22:19 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2012-01-04 14:22:19 ----A---- C:\Windows\system32\XAudio2_1.dll
2012-01-04 14:22:19 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2012-01-04 14:22:19 ----A---- C:\Windows\system32\xactengine3_1.dll
2012-01-04 14:22:19 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2012-01-04 14:22:18 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2012-01-04 14:22:18 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2012-01-04 14:22:18 ----A---- C:\Windows\system32\d3dx10_38.dll
2012-01-04 14:22:18 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2012-01-04 14:22:17 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2012-01-04 14:22:17 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2012-01-04 14:22:17 ----A---- C:\Windows\system32\XAudio2_0.dll
2012-01-04 14:22:17 ----A---- C:\Windows\system32\D3DX9_38.dll
2012-01-04 14:22:16 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2012-01-04 14:22:16 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2012-01-04 14:22:16 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2012-01-04 14:22:16 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2012-01-04 14:22:16 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2012-01-04 14:22:16 ----A---- C:\Windows\system32\xactengine3_0.dll
2012-01-04 14:22:16 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2012-01-04 14:22:16 ----A---- C:\Windows\system32\D3DX9_37.dll
2012-01-04 14:22:16 ----A---- C:\Windows\system32\d3dx10_37.dll
2012-01-04 14:22:16 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2012-01-04 14:22:15 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2012-01-04 14:22:15 ----A---- C:\Windows\system32\xactengine2_10.dll
2012-01-04 14:22:03 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2012-01-04 14:22:03 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2012-01-04 14:22:03 ----A---- C:\Windows\system32\d3dx10_36.dll
2012-01-04 14:22:03 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2012-01-04 14:22:02 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2012-01-04 14:22:02 ----A---- C:\Windows\system32\d3dx9_36.dll
2012-01-04 14:22:00 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2012-01-04 14:22:00 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2012-01-04 14:22:00 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2012-01-04 14:22:00 ----A---- C:\Windows\system32\xactengine2_9.dll
2012-01-04 14:22:00 ----A---- C:\Windows\system32\d3dx10_35.dll
2012-01-04 14:22:00 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2012-01-04 14:21:59 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2012-01-04 14:21:59 ----A---- C:\Windows\system32\d3dx9_35.dll
2012-01-04 14:21:57 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2012-01-04 14:21:57 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2012-01-04 14:21:57 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2012-01-04 14:21:57 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2012-01-04 14:21:57 ----A---- C:\Windows\system32\xactengine2_8.dll
2012-01-04 14:21:57 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2012-01-04 14:21:57 ----A---- C:\Windows\system32\d3dx10_34.dll
2012-01-04 14:21:57 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2012-01-04 14:21:56 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2012-01-04 14:21:56 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2012-01-04 14:21:56 ----A---- C:\Windows\system32\xinput1_3.dll
2012-01-04 14:21:56 ----A---- C:\Windows\system32\d3dx9_34.dll
2012-01-04 14:21:52 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2012-01-04 14:21:52 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2012-01-04 14:21:52 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2012-01-04 14:21:52 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2012-01-04 14:21:52 ----A---- C:\Windows\system32\xactengine2_7.dll
2012-01-04 14:21:52 ----A---- C:\Windows\system32\d3dx9_33.dll
2012-01-04 14:21:52 ----A---- C:\Windows\system32\d3dx10_33.dll
2012-01-04 14:21:52 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2012-01-04 14:21:51 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2012-01-04 14:21:51 ----A---- C:\Windows\system32\xactengine2_6.dll
2012-01-04 14:21:50 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2012-01-04 14:21:50 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2012-01-04 14:21:50 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2012-01-04 14:21:50 ----A---- C:\Windows\system32\xactengine2_5.dll
2012-01-04 14:21:50 ----A---- C:\Windows\system32\d3dx9_32.dll
2012-01-04 14:21:50 ----A---- C:\Windows\system32\d3dx10.dll
2012-01-04 14:21:49 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2012-01-04 14:21:49 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2012-01-04 14:21:49 ----A---- C:\Windows\system32\xactengine2_4.dll
2012-01-04 14:21:49 ----A---- C:\Windows\system32\x3daudio1_1.dll
2012-01-04 14:21:48 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2012-01-04 14:21:48 ----A---- C:\Windows\system32\d3dx9_31.dll
2012-01-04 14:21:46 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2012-01-04 14:21:46 ----A---- C:\Windows\system32\xactengine2_3.dll
2012-01-04 14:21:45 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2012-01-04 14:21:45 ----A---- C:\Windows\system32\xinput1_2.dll
2012-01-04 14:21:42 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2012-01-04 14:21:42 ----A---- C:\Windows\system32\xactengine2_2.dll
2012-01-04 14:21:41 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2012-01-04 14:21:41 ----A---- C:\Windows\system32\xinput1_1.dll
2012-01-04 14:21:39 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2012-01-04 14:21:39 ----A---- C:\Windows\system32\xactengine2_1.dll
2012-01-04 14:21:31 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2012-01-04 14:21:31 ----A---- C:\Windows\system32\d3dx9_30.dll
2012-01-04 14:21:27 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2012-01-04 14:21:27 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2012-01-04 14:21:27 ----A---- C:\Windows\system32\xactengine2_0.dll
2012-01-04 14:21:27 ----A---- C:\Windows\system32\x3daudio1_0.dll
2012-01-04 14:21:26 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2012-01-04 14:21:26 ----A---- C:\Windows\system32\d3dx9_29.dll
2012-01-04 14:21:25 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2012-01-04 14:21:25 ----A---- C:\Windows\system32\d3dx9_28.dll
2012-01-04 14:21:24 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2012-01-04 14:21:24 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2012-01-04 14:21:24 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2012-01-04 14:21:24 ----A---- C:\Windows\system32\d3dx9_27.dll
2012-01-04 14:21:24 ----A---- C:\Windows\system32\d3dx9_26.dll
2012-01-04 14:21:24 ----A---- C:\Windows\system32\d3dx9_25.dll
2012-01-04 14:21:21 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2012-01-04 14:21:21 ----A---- C:\Windows\system32\d3dx9_24.dll
2012-01-04 14:15:28 ----HD---- C:\Windows\msdownld.tmp
2012-01-04 14:15:10 ----D---- C:\Windows\SYSWOW64\directx
2012-01-04 13:36:58 ----D---- C:\Program Files\Hewlett-Packard
2012-01-04 13:36:55 ----A---- C:\Windows\system32\ZTAG.DLL
2012-01-04 13:36:55 ----A---- C:\Windows\system32\ZSPOOL.DLL
2012-01-04 13:36:54 ----A---- C:\Windows\system32\ZIMF.DLL
2012-01-04 13:36:51 ----A---- C:\Windows\system32\HPMCoSetup.dll
2012-01-04 13:36:51 ----A---- C:\Windows\system32\HPIPMXRes.dll
2012-01-04 13:36:51 ----A---- C:\Windows\system32\HPIPMX.dll
2012-01-04 13:36:45 ----A---- C:\Windows\system32\CP1215LM.DLL
2012-01-04 13:36:45 ----A---- C:\Windows\system32\CP1215LI.DLL
2012-01-04 13:36:44 ----A---- C:\Windows\system32\CP1215EWS.dll
2012-01-03 16:12:12 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2012-01-03 15:42:22 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2012-01-03 15:42:16 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2012-01-03 15:41:58 ----D---- C:\Users\popino\AppData\Roaming\DAEMON Tools Lite
2012-01-03 15:41:56 ----D---- C:\ProgramData\DAEMON Tools Lite
2012-01-03 14:56:23 ----D---- C:\ProgramData\Microsoft Help
2012-01-03 14:23:47 ----A---- C:\Windows\Disney.ini
2012-01-03 14:23:43 ----A---- C:\Windows\SYSWOW64\LMRTREND.dll
2012-01-03 14:23:42 ----A---- C:\Windows\SYSWOW64\LMRT.dll
2012-01-03 14:23:40 ----A---- C:\Windows\SYSWOW64\dxtmsft3.dll
2012-01-03 14:23:37 ----A---- C:\Windows\SYSWOW64\unam4ie.exe
2012-01-03 14:23:37 ----A---- C:\Windows\SYSWOW64\strmdll.dll
2012-01-03 14:23:28 ----A---- C:\Windows\SYSWOW64\vidx16.dll
2012-01-03 14:23:28 ----A---- C:\Windows\SYSWOW64\danim.dll
2012-01-03 14:23:26 ----A---- C:\Windows\SYSWOW64\qcut.dll
2012-01-03 14:23:15 ----A---- C:\Windows\SYSWOW64\w95inf32.dll
2012-01-03 14:23:15 ----A---- C:\Windows\SYSWOW64\w95inf16.dll
2012-01-03 13:39:57 ----D---- C:\Windows\system32\Macromed
2012-01-03 08:28:06 ----A---- C:\Windows\SYSWOW64\abgx360.exe
2012-01-02 22:50:56 ----AD---- C:\ProgramData\TEMP
2012-01-02 21:46:55 ----D---- C:\Users\popino\AppData\Roaming\Smart PC Solutions
2012-01-02 20:20:14 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2012-01-02 19:31:01 ----D---- C:\Windows\system32\appmgmt
2012-01-02 13:02:21 ----D---- C:\Program Files (x86)\Microsoft.NET
2012-01-02 11:51:47 ----D---- C:\Windows\system32\SPReview
2012-01-02 11:51:34 ----D---- C:\Windows\system32\EventProviders
2012-01-02 10:26:35 ----A---- C:\Windows\system32\netfxperf.dll
2012-01-02 10:26:35 ----A---- C:\Windows\system32\dfshim.dll
2012-01-02 10:26:27 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2012-01-02 10:26:22 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2012-01-02 10:26:22 ----A---- C:\Windows\system32\mstscax.dll
2012-01-02 10:26:22 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2012-01-02 10:26:21 ----A---- C:\Windows\system32\d3d10warp.dll
2012-01-02 10:26:18 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2012-01-02 10:26:14 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2012-01-02 10:26:14 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2012-01-02 10:26:14 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2012-01-02 10:26:14 ----A---- C:\Windows\system32\tssrvlic.dll
2012-01-02 10:26:14 ----A---- C:\Windows\system32\sysmain.dll
2012-01-02 10:26:14 ----A---- C:\Windows\system32\RDVGHelper.exe
2012-01-02 10:26:13 ----A---- C:\Windows\system32\rdpcorets.dll
2012-01-02 10:26:12 ----A---- C:\Windows\SYSWOW64\pmcsnap.dll
2012-01-02 10:26:12 ----A---- C:\Windows\system32\MSVidCtl.dll
2012-01-02 10:26:10 ----A---- C:\Windows\system32\wmp.dll
2012-01-02 10:26:08 ----A---- C:\Windows\system32\secproc_isv.dll
2012-01-02 10:26:08 ----A---- C:\Windows\system32\mscoree.dll
2012-01-02 10:26:08 ----A---- C:\Windows\system32\mmcndmgr.dll
2012-01-02 10:26:08 ----A---- C:\Windows\system32\mf.dll
2012-01-02 10:26:07 ----A---- C:\Windows\system32\RMActivate_isv.exe
2012-01-02 10:26:06 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2012-01-02 10:26:06 ----A---- C:\Windows\system32\xpsservices.dll
2012-01-02 10:26:06 ----A---- C:\Windows\system32\secproc.dll
2012-01-02 10:26:06 ----A---- C:\Windows\system32\RMActivate.exe
2012-01-02 10:26:05 ----A---- C:\Windows\SYSWOW64\secproc.dll
2012-01-02 10:26:05 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2012-01-02 10:26:05 ----A---- C:\Windows\system32\rpcrt4.dll
2012-01-02 10:26:04 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2012-01-02 10:26:04 ----A---- C:\Windows\SYSWOW64\PushPrinterConnections.exe
2012-01-02 10:26:04 ----A---- C:\Windows\SYSWOW64\ppcsnap.dll
2012-01-02 10:26:04 ----A---- C:\Windows\system32\schedsvc.dll
2012-01-02 10:26:03 ----A---- C:\Windows\system32\ole32.dll
2012-01-02 10:26:02 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2012-01-02 10:26:02 ----A---- C:\Windows\system32\spwizui.dll
2012-01-02 10:26:01 ----A---- C:\Windows\system32\taskschd.dll
2012-01-02 10:26:01 ----A---- C:\Windows\system32\RacEngn.dll
2012-01-02 10:26:00 ----A---- C:\Windows\SYSWOW64\mf.dll
2012-01-02 10:26:00 ----A---- C:\Windows\system32\wevtsvc.dll
2012-01-02 10:26:00 ----A---- C:\Windows\system32\ExplorerFrame.dll
2012-01-02 10:26:00 ----A---- C:\Windows\system32\diagperf.dll
2012-01-02 10:25:59 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2012-01-02 10:25:59 ----A---- C:\Windows\system32\vssapi.dll
2012-01-02 10:25:59 ----A---- C:\Windows\system32\msxml3.dll
2012-01-02 10:25:59 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2012-01-02 10:25:58 ----A---- C:\Windows\system32\UIRibbon.dll
2012-01-02 10:25:58 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2012-01-02 10:25:58 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2012-01-02 10:25:57 ----A---- C:\Windows\SYSWOW64\wmp.dll
2012-01-02 10:25:56 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2012-01-02 10:25:56 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2012-01-02 10:25:56 ----A---- C:\Windows\system32\WsmSvc.dll
2012-01-02 10:25:56 ----A---- C:\Windows\system32\WMVCORE.DLL
2012-01-02 10:25:55 ----A---- C:\Windows\system32\rdpudd.dll
2012-01-02 10:25:55 ----A---- C:\Windows\system32\rdpdd.dll
2012-01-02 10:25:55 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2012-01-02 10:25:55 ----A---- C:\Windows\system32\PresentationHost.exe
2012-01-02 10:25:54 ----A---- C:\Windows\system32\WinSAT.exe
2012-01-02 10:25:54 ----A---- C:\Windows\system32\spreview.exe
2012-01-02 10:25:54 ----A---- C:\Windows\system32\spinstall.exe
2012-01-02 10:25:54 ----A---- C:\Windows\system32\MPSSVC.dll
2012-01-02 10:25:54 ----A---- C:\Windows\system32\CertEnroll.dll
2012-01-02 10:25:53 ----A---- C:\Windows\system32\WMVDECOD.DLL
2012-01-02 10:25:53 ----A---- C:\Windows\system32\d3d9.dll
2012-01-02 10:25:52 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2012-01-02 10:25:52 ----A---- C:\Windows\system32\SearchFolder.dll
2012-01-02 10:25:52 ----A---- C:\Windows\system32\msxml6.dll
2012-01-02 10:25:52 ----A---- C:\Windows\system32\IKEEXT.DLL
2012-01-02 10:25:51 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2012-01-02 10:25:50 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2012-01-02 10:25:50 ----A---- C:\Windows\system32\VSSVC.exe
2012-01-02 10:25:50 ----A---- C:\Windows\system32\gpsvc.dll
2012-01-02 10:25:49 ----A---- C:\Windows\system32\dwmcore.dll
2012-01-02 10:25:49 ----A---- C:\Windows\system32\drivers\http.sys
2012-01-02 10:25:49 ----A---- C:\Windows\system32\dbgeng.dll
2012-01-02 10:25:48 ----A---- C:\Windows\SYSWOW64\rdvgumd32.dll
2012-01-02 10:25:48 ----A---- C:\Windows\system32\drivers\ndis.sys
2012-01-02 10:25:48 ----A---- C:\Windows\system32\crypt32.dll
2012-01-02 10:25:46 ----A---- C:\Windows\SYSWOW64\ole32.dll
2012-01-02 10:25:46 ----A---- C:\Windows\system32\TSWorkspace.dll
2012-01-02 10:25:46 ----A---- C:\Windows\system32\audiosrv.dll
2012-01-02 10:25:46 ----A---- C:\Windows\system32\actxprxy.dll
2012-01-02 10:25:45 ----A---- C:\Windows\system32\termsrv.dll
2012-01-02 10:25:45 ----A---- C:\Windows\system32\qmgr.dll
2012-01-02 10:25:45 ----A---- C:\Windows\system32\gpprefcl.dll
2012-01-02 10:25:44 ----A---- C:\Windows\system32\mstsc.exe
2012-01-02 10:25:43 ----A---- C:\Windows\system32\imapi2fs.dll
2012-01-02 10:25:42 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2012-01-02 10:25:42 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2012-01-02 10:25:42 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2012-01-02 10:25:42 ----A---- C:\Windows\system32\winhttp.dll
2012-01-02 10:25:42 ----A---- C:\Windows\system32\setupapi.dll
2012-01-02 10:25:42 ----A---- C:\Windows\system32\rpcss.dll
2012-01-02 10:25:42 ----A---- C:\Windows\system32\QAGENTRT.DLL
2012-01-02 10:25:42 ----A---- C:\Windows\system32\propsys.dll
2012-01-02 10:25:42 ----A---- C:\Windows\system32\netlogon.dll
2012-01-02 10:25:42 ----A---- C:\Windows\system32\msv1_0.dll
2012-01-02 10:25:42 ----A---- C:\Windows\system32\d3d11.dll
2012-01-02 10:25:41 ----A---- C:\Windows\SYSWOW64\taskschd.dll

2012-01-02 10:25:41 ----A---- C:\Windows\system32\PushPrinterConnections.exe
2012-01-02 10:25:40 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2012-01-02 10:25:40 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2012-01-02 10:25:40 ----A---- C:\Windows\system32\werconcpl.dll
2012-01-02 10:25:40 ----A---- C:\Windows\system32\user32.dll
2012-01-02 10:25:40 ----A---- C:\Windows\system32\taskeng.exe
2012-01-02 10:25:40 ----A---- C:\Windows\system32\odbc32.dll
2012-01-02 10:25:40 ----A---- C:\Windows\system32\authui.dll
2012-01-02 10:25:39 ----A---- C:\Windows\system32\WSDApi.dll
2012-01-02 10:25:39 ----A---- C:\Windows\system32\umrdp.dll
2012-01-02 10:25:39 ----A---- C:\Windows\system32\LSCSHostPolicy.dll
2012-01-02 10:25:39 ----A---- C:\Windows\system32\drivers\tdx.sys
2012-01-02 10:25:39 ----A---- C:\Windows\system32\drivers\netio.sys
2012-01-02 10:25:39 ----A---- C:\Windows\system32\dhcpcore.dll
2012-01-02 10:25:39 ----A---- C:\Windows\system32\certmgr.dll
2012-01-02 10:25:38 ----A---- C:\Windows\SYSWOW64\wer.dll
2012-01-02 10:25:38 ----A---- C:\Windows\SYSWOW64\certcli.dll
2012-01-02 10:25:38 ----A---- C:\Windows\system32\tsmf.dll
2012-01-02 10:25:38 ----A---- C:\Windows\system32\scavengeui.dll
2012-01-02 10:25:38 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2012-01-02 10:25:38 ----A---- C:\Windows\system32\ncsi.dll
2012-01-02 10:25:38 ----A---- C:\Windows\system32\localspl.dll
2012-01-02 10:25:38 ----A---- C:\Windows\system32\drivers\netbt.sys
2012-01-02 10:25:37 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2012-01-02 10:25:37 ----A---- C:\Windows\system32\msdrm.dll
2012-01-02 10:25:36 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2012-01-02 10:25:36 ----A---- C:\Windows\system32\shlwapi.dll
2012-01-02 10:25:36 ----A---- C:\Windows\system32\rdpshell.exe
2012-01-02 10:25:36 ----A---- C:\Windows\system32\netshell.dll
2012-01-02 10:25:36 ----A---- C:\Windows\system32\msdtctm.dll
2012-01-02 10:25:36 ----A---- C:\Windows\system32\framedynos.dll
2012-01-02 10:25:35 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2012-01-02 10:25:35 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2012-01-02 10:25:35 ----A---- C:\Windows\system32\wmicmiplugin.dll
2012-01-02 10:25:35 ----A---- C:\Windows\system32\winlogon.exe
2012-01-02 10:25:35 ----A---- C:\Windows\system32\netcfgx.dll
2012-01-02 10:25:34 ----A---- C:\Windows\system32\ws2_32.dll
2012-01-02 10:25:34 ----A---- C:\Windows\system32\wmpps.dll
2012-01-02 10:25:34 ----A---- C:\Windows\system32\usp10.dll
2012-01-02 10:25:34 ----A---- C:\Windows\system32\nlasvc.dll
2012-01-02 10:25:34 ----A---- C:\Windows\system32\lsm.exe
2012-01-02 10:25:34 ----A---- C:\Windows\system32\dxgi.dll
2012-01-02 10:25:34 ----A---- C:\Windows\system32\drivers\csc.sys
2012-01-02 10:25:34 ----A---- C:\Windows\system32\comdlg32.dll
2012-01-02 10:25:34 ----A---- C:\Windows\system32\appmgr.dll
2012-01-02 10:25:34 ----A---- C:\Windows\system32\apphelp.dll
2012-01-02 10:25:33 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2012-01-02 10:25:33 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2012-01-02 10:25:33 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2012-01-02 10:25:33 ----A---- C:\Windows\system32\Query.dll
2012-01-02 10:25:33 ----A---- C:\Windows\system32\mswsock.dll
2012-01-02 10:25:33 ----A---- C:\Windows\system32\drvstore.dll
2012-01-02 10:25:33 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2012-01-02 10:25:32 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2012-01-02 10:25:32 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2012-01-02 10:25:32 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2012-01-02 10:25:32 ----A---- C:\Windows\system32\wpdshext.dll
2012-01-02 10:25:32 ----A---- C:\Windows\system32\Vault.dll
2012-01-02 10:25:32 ----A---- C:\Windows\system32\samsrv.dll
2012-01-02 10:25:32 ----A---- C:\Windows\system32\QAGENT.DLL
2012-01-02 10:25:32 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2012-01-02 10:25:32 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2012-01-02 10:25:32 ----A---- C:\Windows\system32\cmd.exe
2012-01-02 10:25:32 ----A---- C:\Windows\system32\BFE.DLL
2012-01-02 10:25:32 ----A---- C:\Windows\system32\azroles.dll
2012-01-02 10:25:31 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2012-01-02 10:25:31 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2012-01-02 10:25:31 ----A---- C:\Windows\system32\win32spl.dll
2012-01-02 10:25:31 ----A---- C:\Windows\system32\lpksetup.exe
2012-01-02 10:25:30 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2012-01-02 10:25:30 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2012-01-02 10:25:30 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2012-01-02 10:25:30 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2012-01-02 10:25:30 ----A---- C:\Windows\system32\WebClnt.dll
2012-01-02 10:25:30 ----A---- C:\Windows\system32\rdpclip.exe
2012-01-02 10:25:30 ----A---- C:\Windows\system32\cscsvc.dll
2012-01-02 10:25:29 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2012-01-02 10:25:29 ----A---- C:\Windows\SYSWOW64\Query.dll
2012-01-02 10:25:29 ----A---- C:\Windows\system32\WindowsCodecs.dll
2012-01-02 10:25:29 ----A---- C:\Windows\system32\sxs.dll
2012-01-02 10:25:29 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2012-01-02 10:25:28 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2012-01-02 10:25:28 ----A---- C:\Windows\SYSWOW64\upnp.dll
2012-01-02 10:25:28 ----A---- C:\Windows\SYSWOW64\gpprefcl.dll
2012-01-02 10:25:28 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2012-01-02 10:25:28 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2012-01-02 10:25:28 ----A---- C:\Windows\system32\Wldap32.dll
2012-01-02 10:25:28 ----A---- C:\Windows\system32\taskcomp.dll
2012-01-02 10:25:28 ----A---- C:\Windows\system32\pnidui.dll
2012-01-02 10:25:28 ----A---- C:\Windows\system32\mfds.dll
2012-01-02 10:25:28 ----A---- C:\Windows\system32\mcbuilder.exe
2012-01-02 10:25:28 ----A---- C:\Windows\system32\ipsmsnap.dll
2012-01-02 10:25:28 ----A---- C:\Windows\system32\hgprint.dll
2012-01-02 10:25:28 ----A---- C:\Windows\system32\cscobj.dll
2012-01-02 10:25:27 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2012-01-02 10:25:27 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2012-01-02 10:25:27 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2012-01-02 10:25:27 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2012-01-02 10:25:27 ----A---- C:\Windows\system32\wuaueng.dll
2012-01-02 10:25:27 ----A---- C:\Windows\system32\webservices.dll
2012-01-02 10:25:27 ----A---- C:\Windows\system32\SessEnv.dll
2012-01-02 10:25:27 ----A---- C:\Windows\system32\rdpendp.dll
2012-01-02 10:25:26 ----A---- C:\Windows\SYSWOW64\usp10.dll
2012-01-02 10:25:26 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2012-01-02 10:25:26 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2012-01-02 10:25:26 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2012-01-02 10:25:26 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2012-01-02 10:25:26 ----A---- C:\Windows\system32\winsta.dll
2012-01-02 10:25:26 ----A---- C:\Windows\system32\sqlsrv32.dll
2012-01-02 10:25:26 ----A---- C:\Windows\system32\spoolsv.exe
2012-01-02 10:25:26 ----A---- C:\Windows\system32\gdi32.dll
2012-01-02 10:25:26 ----A---- C:\Windows\system32\fveapi.dll
2012-01-02 10:25:26 ----A---- C:\Windows\system32\drivers\msrpc.sys
2012-01-02 10:25:26 ----A---- C:\Windows\system32\dot3api.dll
2012-01-02 10:25:25 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe
2012-01-02 10:25:25 ----A---- C:\Windows\system32\prncache.dll
2012-01-02 10:25:25 ----A---- C:\Windows\system32\mcmde.dll
2012-01-02 10:25:25 ----A---- C:\Windows\system32\drivers\volsnap.sys
2012-01-02 10:25:24 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2012-01-02 10:25:24 ----A---- C:\Windows\system32\WMNetMgr.dll
2012-01-02 10:25:24 ----A---- C:\Windows\system32\wlanpref.dll
2012-01-02 10:25:24 ----A---- C:\Windows\system32\schtasks.exe
2012-01-02 10:25:23 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2012-01-02 10:25:23 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2012-01-02 10:25:23 ----A---- C:\Windows\SYSWOW64\userenv.dll
2012-01-02 10:25:23 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2012-01-02 10:25:23 ----A---- C:\Windows\system32\wuapi.dll
2012-01-02 10:25:23 ----A---- C:\Windows\system32\wintrust.dll
2012-01-02 10:25:23 ----A---- C:\Windows\system32\vpnike.dll
2012-01-02 10:25:23 ----A---- C:\Windows\system32\userenv.dll
2012-01-02 10:25:23 ----A---- C:\Windows\system32\drivers\rdbss.sys
2012-01-02 10:25:22 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2012-01-02 10:25:22 ----A---- C:\Windows\system32\tspubwmi.dll
2012-01-02 10:25:22 ----A---- C:\Windows\system32\photowiz.dll
2012-01-02 10:25:22 ----A---- C:\Windows\system32\IPSECSVC.DLL
2012-01-02 10:25:22 ----A---- C:\Windows\system32\FXSSVC.exe
2012-01-02 10:25:22 ----A---- C:\Windows\system32\framedyn.dll
2012-01-02 10:25:22 ----A---- C:\Windows\system32\evr.dll
2012-01-02 10:25:22 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2012-01-02 10:25:22 ----A---- C:\Windows\system32\AudioSes.dll
2012-01-02 10:25:21 ----A---- C:\Windows\SYSWOW64\cmd.exe
2012-01-02 10:25:21 ----A---- C:\Windows\system32\wmpmde.dll
2012-01-02 10:25:21 ----A---- C:\Windows\system32\SyncCenter.dll
2012-01-02 10:25:21 ----A---- C:\Windows\system32\sppobjs.dll
2012-01-02 10:25:21 ----A---- C:\Windows\system32\aepdu.dll
2012-01-02 10:25:20 ----A---- C:\Windows\system32\WMPEncEn.dll
2012-01-02 10:25:20 ----A---- C:\Windows\system32\wmpeffects.dll
2012-01-02 10:25:20 ----A---- C:\Windows\system32\tscfgwmi.dll
2012-01-02 10:25:20 ----A---- C:\Windows\system32\srvsvc.dll
2012-01-02 10:25:20 ----A---- C:\Windows\system32\shsvcs.dll
2012-01-02 10:25:20 ----A---- C:\Windows\system32\rdpinit.exe
2012-01-02 10:25:20 ----A---- C:\Windows\system32\mfreadwrite.dll
2012-01-02 10:25:20 ----A---- C:\Windows\system32\aeinv.dll
2012-01-02 10:25:19 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2012-01-02 10:25:19 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2012-01-02 10:25:19 ----A---- C:\Windows\system32\vmicsvc.exe
2012-01-02 10:25:19 ----A---- C:\Windows\system32\fde.dll
2012-01-02 10:25:18 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2012-01-02 10:25:18 ----A---- C:\Windows\SYSWOW64\user32.dll
2012-01-02 10:25:18 ----A---- C:\Windows\SYSWOW64\rdpendp.dll
2012-01-02 10:25:18 ----A---- C:\Windows\SYSWOW64\propsys.dll
2012-01-02 10:25:18 ----A---- C:\Windows\SYSWOW64\mfds.dll
2012-01-02 10:25:18 ----A---- C:\Windows\system32\WinSATAPI.dll
2012-01-02 10:25:18 ----A---- C:\Windows\system32\stobject.dll
2012-01-02 10:25:18 ----A---- C:\Windows\system32\netdiagfx.dll
2012-01-02 10:25:18 ----A---- C:\Windows\system32\localsec.dll
2012-01-02 10:25:18 ----A---- C:\Windows\system32\iphlpsvc.dll
2012-01-02 10:25:18 ----A---- C:\Windows\system32\imapi2.dll
2012-01-02 10:25:18 ----A---- C:\Windows\system32\drivers\vmbus.sys
2012-01-02 10:25:18 ----A---- C:\Windows\system32\drivers\udfs.sys
2012-01-02 10:25:18 ----A---- C:\Windows\system32\credui.dll
2012-01-02 10:25:18 ----A---- C:\Windows\system32\cdd.dll
2012-01-02 10:25:18 ----A---- C:\Windows\system32\bcryptprimitives.dll
2012-01-02 10:25:17 ----A---- C:\Windows\system32\inetpp.dll
2012-01-02 10:25:17 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2012-01-02 10:25:16 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2012-01-02 10:25:16 ----A---- C:\Windows\SYSWOW64\azroles.dll
2012-01-02 10:25:16 ----A---- C:\Windows\SYSWOW64\appmgr.dll
2012-01-02 10:25:16 ----A---- C:\Windows\system32\tcpipcfg.dll
2012-01-02 10:25:16 ----A---- C:\Windows\system32\spp.dll
2012-01-02 10:25:16 ----A---- C:\Windows\system32\QSHVHOST.DLL
2012-01-02 10:25:16 ----A---- C:\Windows\system32\netid.dll
2012-01-02 10:25:16 ----A---- C:\Windows\system32\davclnt.dll
2012-01-02 10:25:16 ----A---- C:\Windows\system32\cscui.dll
2012-01-02 10:25:16 ----A---- C:\Windows\system32\biocpl.dll
2012-01-02 10:25:15 ----A---- C:\Windows\system32\scansetting.dll
2012-01-02 10:25:15 ----A---- C:\Windows\system32\profsvc.dll
2012-01-02 10:25:15 ----A---- C:\Windows\system32\printui.dll
2012-01-02 10:25:15 ----A---- C:\Windows\system32\mspbda.dll
2012-01-02 10:25:15 ----A---- C:\Windows\system32\msinfo32.exe
2012-01-02 10:25:15 ----A---- C:\Windows\system32\gameux.dll
2012-01-02 10:25:14 ----A---- C:\Windows\SYSWOW64\themeui.dll
2012-01-02 10:25:14 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2012-01-02 10:25:14 ----A---- C:\Windows\SYSWOW64\spp.dll
2012-01-02 10:25:14 ----A---- C:\Windows\SYSWOW64\credui.dll
2012-01-02 10:25:14 ----A---- C:\Windows\system32\pla.dll
2012-01-02 10:25:14 ----A---- C:\Windows\system32\PhotoScreensaver.scr
2012-01-02 10:25:14 ----A---- C:\Windows\splwow64.exe
2012-01-02 10:25:13 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2012-01-02 10:25:13 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2012-01-02 10:25:13 ----A---- C:\Windows\system32\wusa.exe
2012-01-02 10:25:13 ----A---- C:\Windows\system32\wiaservc.dll
2012-01-02 10:25:13 ----A---- C:\Windows\system32\vds.exe
2012-01-02 10:25:13 ----A---- C:\Windows\system32\msdri.dll
2012-01-02 10:25:13 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2012-01-02 10:25:13 ----A---- C:\Windows\system32\aitagent.exe
2012-01-02 10:25:12 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2012-01-02 10:25:12 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2012-01-02 10:25:12 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2012-01-02 10:25:12 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2012-01-02 10:25:12 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2012-01-02 10:25:12 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2012-01-02 10:25:12 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2012-01-02 10:25:12 ----A---- C:\Windows\system32\XpsRasterService.dll
2012-01-02 10:25:12 ----A---- C:\Windows\system32\wisptis.exe
2012-01-02 10:25:12 ----A---- C:\Windows\system32\rpchttp.dll
2012-01-02 10:25:12 ----A---- C:\Windows\system32\PkgMgr.exe
2012-01-02 10:25:12 ----A---- C:\Windows\system32\mscms.dll
2012-01-02 10:25:12 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2012-01-02 10:25:12 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2012-01-02 10:25:12 ----A---- C:\Windows\system32\drivers\pci.sys
2012-01-02 10:25:12 ----A---- C:\Windows\system32\cryptsvc.dll
2012-01-02 10:25:12 ----A---- C:\Windows\system32\AdmTmpl.dll
2012-01-02 10:25:11 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2012-01-02 10:25:11 ----A---- C:\Windows\SYSWOW64\evr.dll
2012-01-02 10:25:11 ----A---- C:\Windows\system32\ocsetup.exe
2012-01-02 10:25:11 ----A---- C:\Windows\system32\msi.dll
2012-01-02 10:25:10 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2012-01-02 10:25:10 ----A---- C:\Windows\SYSWOW64\calc.exe
2012-01-02 10:25:10 ----A---- C:\Windows\system32\sppwinob.dll
2012-01-02 10:25:10 ----A---- C:\Windows\system32\rdpcore.dll
2012-01-02 10:25:10 ----A---- C:\Windows\system32\ocsetapi.dll
2012-01-02 10:25:10 ----A---- C:\Windows\system32\DXP.dll
2012-01-02 10:25:10 ----A---- C:\Windows\system32\drivers\volmgr.sys
2012-01-02 10:25:10 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2012-01-02 10:25:09 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2012-01-02 10:25:09 ----A---- C:\Windows\system32\wpdbusenum.dll
2012-01-02 10:25:09 ----A---- C:\Windows\system32\ntshrui.dll
2012-01-02 10:25:09 ----A---- C:\Windows\system32\eapp3hst.dll
2012-01-02 10:25:09 ----A---- C:\Windows\system32\drivers\msdsm.sys
2012-01-02 10:25:09 ----A---- C:\Windows\system32\ci.dll
2012-01-02 10:25:08 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2012-01-02 10:25:08 ----A---- C:\Windows\system32\wcncsvc.dll
2012-01-02 10:25:08 ----A---- C:\Windows\system32\upnp.dll
2012-01-02 10:25:08 ----A---- C:\Windows\system32\Robocopy.exe
2012-01-02 10:25:08 ----A---- C:\Windows\system32\mprapi.dll
2012-01-02 10:25:08 ----A---- C:\Windows\system32\eapphost.dll
2012-01-02 10:25:07 ----A---- C:\Windows\SYSWOW64\sxs.dll
2012-01-02 10:25:07 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2012-01-02 10:25:07 ----A---- C:\Windows\system32\t2embed.dll
2012-01-02 10:25:07 ----A---- C:\Windows\system32\drivers\HpSAMD.sys
2012-01-02 10:25:06 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2012-01-02 10:25:06 ----A---- C:\Windows\SYSWOW64\stobject.dll
2012-01-02 10:25:06 ----A---- C:\Windows\SYSWOW64\netshell.dll
2012-01-02 10:25:06 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2012-01-02 10:25:06 ----A---- C:\Windows\system32\thumbcache.dll
2012-01-02 10:25:06 ----A---- C:\Windows\system32\scecli.dll
2012-01-02 10:25:06 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2012-01-02 10:25:06 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2012-01-02 10:25:06 ----A---- C:\Windows\system32\hal.dll
2012-01-02 10:25:06 ----A---- C:\Windows\system32\DxpTaskSync.dll
2012-01-02 10:25:06 ----A---- C:\Windows\system32\dwmredir.dll
2012-01-02 10:25:06 ----A---- C:\Windows\system32\drivers\fvevol.sys
2012-01-02 10:25:05 ----A---- C:\Windows\SYSWOW64\prncache.dll
2012-01-02 10:25:05 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2012-01-02 10:25:05 ----A---- C:\Windows\system32\themeui.dll
2012-01-02 10:25:05 ----A---- C:\Windows\system32\puiobj.dll
2012-01-02 10:25:05 ----A---- C:\Windows\system32\nlaapi.dll
2012-01-02 10:25:05 ----A---- C:\Windows\system32\msasn1.dll
2012-01-02 10:25:05 ----A---- C:\Windows\system32\iasrad.dll
2012-01-02 10:25:05 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys
2012-01-02 10:25:05 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2012-01-02 10:25:04 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2012-01-02 10:25:04 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2012-01-02 10:25:04 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2012-01-02 10:25:04 ----A---- C:\Windows\SYSWOW64\printui.dll
2012-01-02 10:25:04 ----A---- C:\Windows\SYSWOW64\net1.exe
2012-01-02 10:25:04 ----A---- C:\Windows\SYSWOW64\msi.dll
2012-01-02 10:25:04 ----A---- C:\Windows\system32\scrptadm.dll
2012-01-02 10:25:04 ----A---- C:\Windows\system32\onex.dll
2012-01-02 10:25:04 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2012-01-02 10:25:04 ----A---- C:\Windows\system32\aaclient.dll
2012-01-02 10:25:03 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2012-01-02 10:25:03 ----A---- C:\Windows\system32\wdc.dll
2012-01-02 10:25:02 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2012-01-02 10:25:02 ----A---- C:\Windows\system32\wlangpui.dll
2012-01-02 10:25:02 ----A---- C:\Windows\system32\wiadefui.dll
2012-01-02 10:25:02 ----A---- C:\Windows\system32\VAN.dll
2012-01-02 10:25:02 ----A---- C:\Windows\system32\StructuredQuery.dll
2012-01-02 10:25:02 ----A---- C:\Windows\system32\sdengin2.dll
2012-01-02 10:25:02 ----A---- C:\Windows\system32\scesrv.dll
2012-01-02 10:25:02 ----A---- C:\Windows\system32\rasmans.dll
2012-01-02 10:25:02 ----A---- C:\Windows\system32\netcenter.dll
2012-01-02 10:25:02 ----A---- C:\Windows\system32\msftedit.dll
2012-01-02 10:25:02 ----A---- C:\Windows\system32\dskquoui.dll
2012-01-02 10:25:01 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2012-01-02 10:25:01 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2012-01-02 10:25:01 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2012-01-02 10:25:01 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2012-01-02 10:25:01 ----A---- C:\Windows\system32\wucltux.dll
2012-01-02 10:25:01 ----A---- C:\Windows\system32\wscapi.dll
2012-01-02 10:25:01 ----A---- C:\Windows\system32\SndVol.exe
2012-01-02 10:25:01 ----A---- C:\Windows\system32\samcli.dll
2012-01-02 10:25:01 ----A---- C:\Windows\system32\regapi.dll
2012-01-02 10:25:01 ----A---- C:\Windows\system32\iasacct.dll
2012-01-02 10:25:01 ----A---- C:\Windows\system32\drivers\termdd.sys
2012-01-02 10:25:01 ----A---- C:\Windows\system32\drivers\partmgr.sys
2012-01-02 10:25:01 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2012-01-02 10:25:00 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2012-01-02 10:25:00 ----A---- C:\Windows\SYSWOW64\webservices.dll
2012-01-02 10:25:00 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2012-01-02 10:25:00 ----A---- C:\Windows\SYSWOW64\scrptadm.dll
2012-01-02 10:25:00 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2012-01-02 10:25:00 ----A---- C:\Windows\SYSWOW64\pnidui.dll
2012-01-02 10:25:00 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2012-01-02 10:25:00 ----A---- C:\Windows\SYSWOW64\fde.dll
2012-01-02 10:25:00 ----A---- C:\Windows\system32\WUDFSvc.dll
2012-01-02 10:25:00 ----A---- C:\Windows\system32\wksprt.exe
2012-01-02 10:25:00 ----A---- C:\Windows\system32\taskhost.exe
2012-01-02 10:25:00 ----A---- C:\Windows\system32\TabSvc.dll
2012-01-02 10:25:00 ----A---- C:\Windows\system32\srchadmin.dll
2012-01-02 10:25:00 ----A---- C:\Windows\system32\setupcl.exe
2012-01-02 10:25:00 ----A---- C:\Windows\system32\rastls.dll
2012-01-02 10:25:00 ----A---- C:\Windows\system32\QUTIL.DLL
2012-01-02 10:25:00 ----A---- C:\Windows\system32\drivers\msahci.sys
2012-01-02 10:25:00 ----A---- C:\Windows\system32\consent.exe
2012-01-02 10:24:59 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2012-01-02 10:24:59 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2012-01-02 10:24:59 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll
2012-01-02 10:24:59 ----A---- C:\Windows\system32\drivers\acpi.sys
2012-01-02 10:24:58 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2012-01-02 10:24:58 ----A---- C:\Windows\SYSWOW64\pla.dll
2012-01-02 10:24:58 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2012-01-02 10:24:58 ----A---- C:\Windows\SYSWOW64\cscobj.dll
2012-01-02 10:24:58 ----A---- C:\Windows\system32\tapisrv.dll
2012-01-02 10:24:58 ----A---- C:\Windows\system32\netiohlp.dll
2012-01-02 10:24:58 ----A---- C:\Windows\system32\msconfig.exe
2012-01-02 10:24:58 ----A---- C:\Windows\system32\mimefilt.dll
2012-01-02 10:24:58 ----A---- C:\Windows\system32\ListSvc.dll
2012-01-02 10:24:58 ----A---- C:\Windows\system32\hgcpl.dll
2012-01-02 10:24:58 ----A---- C:\Windows\system32\drivers\raspptp.sys
2012-01-02 10:24:57 ----A---- C:\Windows\SYSWOW64\winsta.dll
2012-01-02 10:24:57 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2012-01-02 10:24:57 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2012-01-02 10:24:57 ----A---- C:\Windows\system32\lsmproxy.dll
2012-01-02 10:24:57 ----A---- C:\Windows\system32\fdeploy.dll
2012-01-02 10:24:57 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2012-01-02 10:24:57 ----A---- C:\Windows\system32\drivers\ks.sys
2012-01-02 10:24:57 ----A---- C:\Windows\system32\clusapi.dll
2012-01-02 10:24:57 ----A---- C:\Windows\system32\basecsp.dll
2012-01-02 10:24:57 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2012-01-02 10:24:56 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2012-01-02 10:24:56 ----A---- C:\Windows\SYSWOW64\imapi2.dll
2012-01-02 10:24:56 ----A---- C:\Windows\SYSWOW64\gameux.dll
2012-01-02 10:24:56 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll
2012-01-02 10:24:56 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2012-01-02 10:24:56 ----A---- C:\Windows\system32\riched20.dll
2012-01-02 10:24:56 ----A---- C:\Windows\system32\mtxclu.dll
2012-01-02 10:24:56 ----A---- C:\Windows\system32\dnscmmc.dll
2012-01-02 10:24:55 ----A---- C:\Windows\SYSWOW64\WMPEncEn.dll
2012-01-02 10:24:55 ----A---- C:\Windows\SYSWOW64\onex.dll
2012-01-02 10:24:55 ----A---- C:\Windows\system32\sharemediacpl.dll
2012-01-02 10:24:55 ----A---- C:\Windows\system32\RpcRtRemote.dll
2012-01-02 10:24:55 ----A---- C:\Windows\system32\powercpl.dll
2012-01-02 10:24:55 ----A---- C:\Windows\system32\logoncli.dll
2012-01-02 10:24:54 ----A---- C:\Windows\SYSWOW64\winmm.dll
2012-01-02 10:24:54 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2012-01-02 10:24:54 ----A---- C:\Windows\SYSWOW64\samcli.dll
2012-01-02 10:24:54 ----A---- C:\Windows\SYSWOW64\proquota.exe
2012-01-02 10:24:54 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2012-01-02 10:24:54 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2012-01-02 10:24:54 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2012-01-02 10:24:54 ----A---- C:\Windows\SYSWOW64\autochk.exe
2012-01-02 10:24:54 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2012-01-02 10:24:54 ----A---- C:\Windows\system32\wkssvc.dll
2012-01-02 10:24:54 ----A---- C:\Windows\system32\vpnikeapi.dll
2012-01-02 10:24:54 ----A---- C:\Windows\system32\themecpl.dll
2012-01-02 10:24:54 ----A---- C:\Windows\system32\sppcomapi.dll
2012-01-02 10:24:54 ----A---- C:\Windows\system32\SensorsCpl.dll
2012-01-02 10:24:54 ----A---- C:\Windows\system32\netjoin.dll
2012-01-02 10:24:54 ----A---- C:\Windows\system32\nci.dll
2012-01-02 10:24:54 ----A---- C:\Windows\system32\Narrator.exe
2012-01-02 10:24:54 ----A---- C:\Windows\system32\Faultrep.dll
2012-01-02 10:24:54 ----A---- C:\Windows\system32\eudcedit.exe
2012-01-02 10:24:54 ----A---- C:\Windows\system32\comctl32.dll
2012-01-02 10:24:53 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2012-01-02 10:24:53 ----A---- C:\Windows\SYSWOW64\regapi.dll
2012-01-02 10:24:53 ----A---- C:\Windows\SYSWOW64\msutb.dll
2012-01-02 10:24:53 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2012-01-02 10:24:53 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2012-01-02 10:24:53 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2012-01-02 10:24:53 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2012-01-02 10:24:53 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2012-01-02 10:24:53 ----A---- C:\Windows\system32\nshipsec.dll
2012-01-02 10:24:53 ----A---- C:\Windows\system32\cabview.dll
2012-01-02 10:24:53 ----A---- C:\Windows\system32\autochk.exe
2012-01-02 10:24:53 ----A---- C:\Windows\system32\autofmt.exe
2012-01-02 10:24:53 ----A---- C:\Windows\system32\autoconv.exe
2012-01-02 10:24:52 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2012-01-02 10:24:52 ----A---- C:\Windows\SYSWOW64\srchadmin.dll
2012-01-02 10:24:52 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2012-01-02 10:24:52 ----A---- C:\Windows\SYSWOW64\powercpl.dll
2012-01-02 10:24:52 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2012-01-02 10:24:52 ----A---- C:\Windows\system32\wpd_ci.dll
2012-01-02 10:24:52 ----A---- C:\Windows\system32\shsetup.dll
2012-01-02 10:24:52 ----A---- C:\Windows\system32\fms.dll
2012-01-02 10:24:52 ----A---- C:\Windows\system32\audiodg.exe
2012-01-02 10:24:51 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2012-01-02 10:24:51 ----A---- C:\Windows\system32\bcdsrv.dll
2012-01-02 10:24:50 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2012-01-02 10:24:50 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2012-01-02 10:24:50 ----A---- C:\Windows\system32\sdclt.exe
2012-01-02 10:24:49 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2012-01-02 10:24:49 ----A---- C:\Windows\system32\wwanconn.dll
2012-01-02 10:24:49 ----A---- C:\Windows\system32\wlanui.dll
2012-01-02 10:24:49 ----A---- C:\Windows\system32\prntvpt.dll
2012-01-02 10:24:49 ----A---- C:\Windows\system32\mscorier.dll
2012-01-02 10:24:49 ----A---- C:\Windows\system32\drivers\wanarp.sys
2012-01-02 10:24:49 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2012-01-02 10:24:49 ----A---- C:\Windows\system32\drivers\scsiport.sys
2012-01-02 10:24:48 ----A---- C:\Windows\SYSWOW64\wdc.dll
2012-01-02 10:24:48 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL
2012-01-02 10:24:48 ----A---- C:\Windows\SYSWOW64\netid.dll
2012-01-02 10:24:48 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2012-01-02 10:24:48 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2012-01-02 10:24:48 ----A---- C:\Windows\system32\SmiEngine.dll
2012-01-02 10:24:48 ----A---- C:\Windows\system32\rdpsign.exe
2012-01-02 10:24:48 ----A---- C:\Windows\system32\qedit.dll
2012-01-02 10:24:48 ----A---- C:\Windows\system32\mprddm.dll
2012-01-02 10:24:48 ----A---- C:\Windows\system32\mblctr.exe
2012-01-02 10:24:48 ----A---- C:\Windows\system32\fontext.dll
2012-01-02 10:24:48 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2012-01-02 10:24:48 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2012-01-02 10:24:48 ----A---- C:\Windows\system32\drivers\hidclass.sys
2012-01-02 10:24:48 ----A---- C:\Windows\system32\dps.dll
2012-01-02 10:24:48 ----A---- C:\Windows\system32\Display.dll
2012-01-02 10:24:48 ----A---- C:\Windows\system32\credssp.dll
2012-01-02 10:24:48 ----A---- C:\Windows\system32\batmeter.dll
2012-01-02 10:24:48 ----A---- C:\Windows\system32\AxInstSv.dll
2012-01-02 10:24:47 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2012-01-02 10:24:47 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2012-01-02 10:24:47 ----A---- C:\Windows\SYSWOW64\Vault.dll
2012-01-02 10:24:47 ----A---- C:\Windows\SYSWOW64\untfs.dll
2012-01-02 10:24:47 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2012-01-02 10:24:47 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2012-01-02 10:24:47 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll
2012-01-02 10:24:47 ----A---- C:\Windows\SYSWOW64\rastls.dll
2012-01-02 10:24:47 ----A---- C:\Windows\SYSWOW64\nci.dll
2012-01-02 10:24:47 ----A---- C:\Windows\system32\wmpsrcwp.dll
2012-01-02 10:24:47 ----A---- C:\Windows\system32\DiagCpl.dll
2012-01-02 10:24:46 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2012-01-02 10:24:46 ----A---- C:\Windows\system32\wpccpl.dll
2012-01-02 10:24:46 ----A---- C:\Windows\system32\usercpl.dll
2012-01-02 10:24:46 ----A---- C:\Windows\system32\sppsvc.exe
2012-01-02 10:24:46 ----A---- C:\Windows\system32\rtutils.dll
2012-01-02 10:24:46 ----A---- C:\Windows\system32\provsvc.dll
2012-01-02 10:24:46 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2012-01-02 10:24:46 ----A---- C:\Windows\system32\bootres.dll
2012-01-02 10:24:45 ----A---- C:\Windows\SYSWOW64\taskmgr.exe
2012-01-02 10:24:45 ----A---- C:\Windows\SYSWOW64\DxpTaskSync.dll
2012-01-02 10:24:45 ----A---- C:\Windows\system32\SndVolSSO.dll
2012-01-02 10:24:45 ----A---- C:\Windows\system32\rasppp.dll
2012-01-02 10:24:45 ----A---- C:\Windows\system32\drivers\winhv.sys
2012-01-02 10:24:44 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2012-01-02 10:24:44 ----A---- C:\Windows\SYSWOW64\Display.dll
2012-01-02 10:24:44 ----A---- C:\Windows\system32\dxdiagn.dll
2012-01-02 10:24:44 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2012-01-02 10:24:44 ----A---- C:\Windows\system32\dot3cfg.dll
2012-01-02 10:24:43 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2012-01-02 10:24:43 ----A---- C:\Windows\SYSWOW64\userinit.exe
2012-01-02 10:24:43 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2012-01-02 10:24:43 ----A---- C:\Windows\system32\taskmgr.exe
2012-01-02 10:24:43 ----A---- C:\Windows\system32\shdocvw.dll
2012-01-02 10:24:43 ----A---- C:\Windows\system32\prnfldr.dll
2012-01-02 10:24:43 ----A---- C:\Windows\system32\hbaapi.dll
2012-01-02 10:24:42 ----A---- C:\Windows\SYSWOW64\termmgr.dll
2012-01-02 10:24:42 ----A---- C:\Windows\SYSWOW64\eudcedit.exe
2012-01-02 10:24:42 ----A---- C:\Windows\system32\proquota.exe
2012-01-02 10:24:42 ----A---- C:\Windows\system32\pdh.dll
2012-01-02 10:24:42 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2012-01-02 10:24:42 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2012-01-02 10:24:41 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2012-01-02 10:24:41 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2012-01-02 10:24:41 ----A---- C:\Windows\system32\drivers\ataport.sys
2012-01-02 10:24:40 ----A---- C:\Windows\SYSWOW64\wiadefui.dll
2012-01-02 10:24:40 ----A---- C:\Windows\SYSWOW64\sppcomapi.dll
2012-01-02 10:24:40 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2012-01-02 10:24:40 ----A---- C:\Windows\SYSWOW64\rasppp.dll
2012-01-02 10:24:40 ----A---- C:\Windows\SYSWOW64\logoncli.dll
2012-01-02 10:24:40 ----A---- C:\Windows\SYSWOW64\cabview.dll
2012-01-02 10:24:40 ----A---- C:\Windows\system32\userinit.exe
2012-01-02 10:24:40 ----A---- C:\Windows\system32\untfs.dll
2012-01-02 10:24:40 ----A---- C:\Windows\system32\rdpcorekmts.dll
2012-01-02 10:24:40 ----A---- C:\Windows\system32\accessibilitycpl.dll
2012-01-02 10:24:39 ----A---- C:\Windows\SYSWOW64\themecpl.dll
2012-01-02 10:24:39 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll
2012-01-02 10:24:39 ----A---- C:\Windows\SYSWOW64\FirewallControlPanel.dll
2012-01-02 10:24:39 ----A---- C:\Windows\system32\slui.exe
2012-01-02 10:24:38 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2012-01-02 10:24:38 ----A---- C:\Windows\SYSWOW64\dnscmmc.dll
2012-01-02 10:24:38 ----A---- C:\Windows\system32\zipfldr.dll
2012-01-02 10:24:38 ----A---- C:\Windows\system32\drivers\storvsc.sys
2012-01-02 10:24:37 ----A---- C:\Windows\system32\msieftp.dll
2012-01-02 10:24:37 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2012-01-02 10:24:36 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2012-01-02 10:24:36 ----A---- C:\Windows\SYSWOW64\scecli.dll
2012-01-02 10:24:36 ----A---- C:\Windows\SYSWOW64\PhotoScreensaver.scr
2012-01-02 10:24:36 ----A---- C:\Windows\SYSWOW64\mscories.dll
2012-01-02 10:24:36 ----A---- C:\Windows\SYSWOW64\mscms.dll
2012-01-02 10:24:36 ----A---- C:\Windows\SYSWOW64\mprddm.dll
2012-01-02 10:24:36 ----A---- C:\Windows\SYSWOW64\localsec.dll
2012-01-02 10:24:36 ----A---- C:\Windows\SYSWOW64\hgcpl.dll
2012-01-02 10:24:36 ----A---- C:\Windows\SYSWOW64\fontext.dll
2012-01-02 10:24:36 ----A---- C:\Windows\system32\sud.dll
2012-01-02 10:24:36 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2012-01-02 10:24:36 ----A---- C:\Windows\system32\dot3svc.dll
2012-01-02 10:24:36 ----A---- C:\Windows\system32\DeviceCenter.dll
2012-01-02 10:24:35 ----A---- C:\Windows\SYSWOW64\wlanui.dll
2012-01-02 10:24:35 ----A---- C:\Windows\SYSWOW64\usercpl.dll
2012-01-02 10:24:35 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll
2012-01-02 10:24:35 ----A---- C:\Windows\SYSWOW64\qedit.dll
2012-01-02 10:24:35 ----A---- C:\Windows\SYSWOW64\PerfCenterCPL.dll
2012-01-02 10:24:35 ----A---- C:\Windows\SYSWOW64\iasacct.dll
2012-01-02 10:24:35 ----A---- C:\Windows\system32\twext.dll
2012-01-02 10:24:35 ----A---- C:\Windows\system32\taskbarcpl.dll
2012-01-02 10:24:35 ----A---- C:\Windows\system32\srcore.dll
2012-01-02 10:24:35 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2012-01-02 10:24:35 ----A---- C:\Windows\system32\networkmap.dll
2012-01-02 10:24:35 ----A---- C:\Windows\system32\cryptui.dll
2012-01-02 10:24:35 ----A---- C:\Windows\system32\ActionCenter.dll
2012-01-02 10:24:34 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2012-01-02 10:24:34 ----A---- C:\Windows\SYSWOW64\w32tm.exe
2012-01-02 10:24:34 ----A---- C:\Windows\SYSWOW64\VAN.dll
2012-01-02 10:24:34 ----A---- C:\Windows\SYSWOW64\spwizeng.dll
2012-01-02 10:24:34 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2012-01-02 10:24:34 ----A---- C:\Windows\SYSWOW64\prntvpt.dll
2012-01-02 10:24:34 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2012-01-02 10:24:34 ----A---- C:\Windows\SYSWOW64\MSAC3ENC.DLL
2012-01-02 10:24:34 ----A---- C:\Windows\SYSWOW64\fdeploy.dll
2012-01-02 10:24:34 ----A---- C:\Windows\SYSWOW64\batmeter.dll
2012-01-02 10:24:34 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2012-01-02 10:24:34 ----A---- C:\Windows\SYSWOW64\accessibilitycpl.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\uxlib.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\tzutil.exe
2012-01-02 10:24:34 ----A---- C:\Windows\system32\systemcpl.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\syncui.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\sisbkup.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\sdcpl.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\recovery.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\recdisc.exe
2012-01-02 10:24:34 ----A---- C:\Windows\system32\rdpwsx.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\OobeFldr.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\netplwiz.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\isoburn.exe
2012-01-02 10:24:34 ----A---- C:\Windows\system32\httpapi.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\efscore.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\dsuiext.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\cca.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\bcdedit.exe
2012-01-02 10:24:34 ----A---- C:\Windows\system32\azroleui.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\asycfilt.dll
2012-01-02 10:24:33 ----A---- C:\Windows\SYSWOW64\networkmap.dll
2012-01-02 10:24:33 ----A---- C:\Windows\SYSWOW64\netjoin.dll
2012-01-02 10:24:33 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2012-01-02 10:24:33 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2012-01-02 10:24:33 ----A---- C:\Windows\SYSWOW64\adsldp.dll
2012-01-02 10:24:33 ----A---- C:\Windows\system32\wlanmsm.dll
2012-01-02 10:24:33 ----A---- C:\Windows\system32\sysclass.dll
2012-01-02 10:24:33 ----A---- C:\Windows\system32\shwebsvc.dll
2012-01-02 10:24:33 ----A---- C:\Windows\system32\sdrsvc.dll
2012-01-02 10:24:33 ----A---- C:\Windows\system32\ncryptui.dll
2012-01-02 10:24:33 ----A---- C:\Windows\system32\fvecpl.dll
2012-01-02 10:24:33 ----A---- C:\Windows\system32\drivers\rdpdr.sys
2012-01-02 10:24:33 ----A---- C:\Windows\system32\drivers\mpio.sys
2012-01-02 10:24:33 ----A---- C:\Windows\system32\certcli.dll
2012-01-02 10:24:33 ----A---- C:\Windows\system32\autoplay.dll
2012-01-02 10:24:33 ----A---- C:\Windows\system32\appinfo.dll
2012-01-02 10:24:33 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\wusa.exe
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\syncui.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\sud.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\sisbkup.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\prnfldr.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\OnLineIDCpl.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\MediaMetadataHandler.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\ifsutil.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\iasrad.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\ftp.exe
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\efscore.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\dot3cfg.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\credssp.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\autoplay.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\ActionCenterCPL.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\wwanprotdim.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\wmdrmsdk.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\vdsutil.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\tsgqec.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\termmgr.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\ssText3d.scr
2012-01-02 10:24:32 ----A---- C:\Windows\system32\srvcli.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\sqlcese30.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\spwizeng.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\slwga.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\sethc.exe
2012-01-02 10:24:32 ----A---- C:\Windows\system32\rstrui.exe
2012-01-02 10:24:32 ----A---- C:\Windows\system32\ReAgent.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\rdpd3d.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\ntlanman.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\msvidc32.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\msscp.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\MFPlay.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\iyuv_32.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\iTVData.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\iprtrmgr.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\drmmgrtn.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\drivers\vmstorfl.sys
2012-01-02 10:24:32 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2012-01-02 10:24:32 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\sethc.exe
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\riched20.dll
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\ntlanman.dll
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\dskquoui.dll
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\activeds.dll
2012-01-02 10:24:31 ----A---- C:\Windows\system32\wavemsp.dll
2012-01-02 10:24:31 ----A---- C:\Windows\system32\srrstr.dll
2012-01-02 10:24:31 ----A---- C:\Windows\system32\sppnp.dll
2012-01-02 10:24:31 ----A---- C:\Windows\system32\ntprint.dll
2012-01-02 10:24:31 ----A---- C:\Windows\system32\nslookup.exe
2012-01-02 10:24:31 ----A---- C:\Windows\system32\NAPHLPR.DLL
2012-01-02 10:24:31 ----A---- C:\Windows\system32\msiexec.exe
2012-01-02 10:24:31 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2012-01-02 10:24:31 ----A---- C:\Windows\system32\certprop.dll
2012-01-02 10:24:31 ----A---- C:\Windows\system32\bcdboot.exe
2012-01-02 10:24:31 ----A---- C:\Windows\system32\acppage.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\wvc.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\wtsapi32.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\wmpsrcwp.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\wavemsp.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\tzutil.exe
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\twext.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\provsvc.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\PkgMgr.exe
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\ocsetup.exe
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\nshipsec.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\mstask.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\migisol.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\isoburn.exe
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\httpapi.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\fms.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\dsuiext.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\dpx.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\dot3ui.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\dfrgui.exe
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\AdmTmpl.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\wvc.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\wuwebv.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\wsqmcons.exe
2012-01-02 10:24:30 ----A---- C:\Windows\system32\wsnmp32.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\wmpdxm.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\wmdrmdev.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\wkscli.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\WinSCard.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\WerFaultSecure.exe
2012-01-02 10:24:30 ----A---- C:\Windows\system32\TSpkg.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\remotepg.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\PresentationSettings.exe
2012-01-02 10:24:30 ----A---- C:\Windows\system32\networkexplorer.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\net1.exe
2012-01-02 10:24:30 ----A---- C:\Windows\system32\msyuv.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\mfps.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\ftp.exe
2012-01-02 10:24:30 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2012-01-02 10:24:30 ----A---- C:\Windows\system32\dfrgui.exe
2012-01-02 10:24:30 ----A---- C:\Windows\system32\cdosys.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\cabinet.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\blackbox.dll
2012-01-02 10:24:29 ----A---- C:\Windows\twain_32.dll
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\WPDShServiceObj.dll
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\uxlib.dll
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\ssText3d.scr
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\slwga.dll
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\setupugc.exe
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\qcap.dll
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\qasf.dll
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\nslookup.exe
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\msvfw32.dll
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\DevicePairingFolder.dll
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\audiodev.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\WUDFPlatform.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\wmpshell.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2012-01-02 10:24:29 ----A---- C:\Windows\system32\unimdmat.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2012-01-02 10:24:29 ----A---- C:\Windows\system32\tsbyuv.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\seclogon.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\Ribbons.scr
2012-01-02 10:24:29 ----A---- C:\Windows\system32\rdpencom.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\perfmon.exe
2012-01-02 10:24:29 ----A---- C:\Windows\system32\OpcServices.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\Mystify.scr
2012-01-02 10:24:29 ----A---- C:\Windows\system32\muifontsetup.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\msrle32.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\mapistub.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\mapi32.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\iscsium.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\ifsutil.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\drivers\umbus.sys
2012-01-02 10:24:29 ----A---- C:\Windows\system32\diskraid.exe
2012-01-02 10:24:29 ----A---- C:\Windows\system32\d3d10level9.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\Bubbles.scr
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\wpdwcn.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\wmpdxm.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\wimserv.exe
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\vpnikeapi.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\vdsbas.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\UserAccountControlSettings.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\runonce.exe
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\remotepg.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\rdpencom.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\raschap.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\QUTIL.DLL
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\perfmon.exe
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\onexui.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\ocsetapi.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\networkexplorer.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\NAPCRYPT.DLL
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\msscp.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\logagent.exe

2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\iTVData.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\input.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\dxdiagn.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\diskraid.exe
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\acppage.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\wpdwcn.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\WMVSDECD.DLL
2012-01-02 10:24:28 ----A---- C:\Windows\system32\WMADMOD.DLL
2012-01-02 10:24:28 ----A---- C:\Windows\system32\wiavideo.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\vdsbas.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\umb.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\tlscsp.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\syssetup.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\runonce.exe
2012-01-02 10:24:28 ----A---- C:\Windows\system32\raschap.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\qasf.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\nltest.exe
2012-01-02 10:24:28 ----A---- C:\Windows\system32\netutils.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2012-01-02 10:24:28 ----A---- C:\Windows\system32\mstask.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\MdSched.exe
2012-01-02 10:24:28 ----A---- C:\Windows\system32\Mcx2Svc.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\FXSAPI.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2012-01-02 10:24:28 ----A---- C:\Windows\system32\drivers\rmcast.sys
2012-01-02 10:24:28 ----A---- C:\Windows\system32\dbghelp.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\browser.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\AzSqlExt.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\ActionQueue.dll
2012-01-02 10:24:28 ----A---- C:\Windows\bfsvc.exe
2012-01-02 10:24:27 ----A---- C:\Windows\SYSWOW64\wmpshell.dll
2012-01-02 10:24:27 ----A---- C:\Windows\SYSWOW64\wmdrmdev.dll
2012-01-02 10:24:27 ----A---- C:\Windows\SYSWOW64\shacct.dll
2012-01-02 10:24:27 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2012-01-02 10:24:27 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2012-01-02 10:24:27 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2012-01-02 10:24:27 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2012-01-02 10:24:27 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2012-01-02 10:24:27 ----A---- C:\Windows\system32\wmdrmnet.dll
2012-01-02 10:24:27 ----A---- C:\Windows\system32\vss_ps.dll
2012-01-02 10:24:27 ----A---- C:\Windows\system32\tabcal.exe
2012-01-02 10:24:27 ----A---- C:\Windows\system32\shacct.dll
2012-01-02 10:24:27 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2012-01-02 10:24:27 ----A---- C:\Windows\system32\logman.exe
2012-01-02 10:24:27 ----A---- C:\Windows\system32\cscapi.dll
2012-01-02 10:24:27 ----A---- C:\Windows\system32\bitsadmin.exe
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\unimdmat.dll
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\sqlcese30.dll
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\rdpd3d.dll
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\PortableDeviceSyncProvider.dll
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\pdh.dll
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\OpcServices.dll
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\ncryptui.dll
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\mprapi.dll
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\lsmproxy.dll
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\logman.exe
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\iscsium.dll
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\Bubbles.scr
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\bitsadmin.exe
2012-01-02 10:24:26 ----A---- C:\Windows\system32\wudriver.dll
2012-01-02 10:24:26 ----A---- C:\Windows\system32\WPDSp.dll
2012-01-02 10:24:26 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2012-01-02 10:24:26 ----A---- C:\Windows\system32\vmictimeprovider.dll
2012-01-02 10:24:26 ----A---- C:\Windows\system32\spbcd.dll
2012-01-02 10:24:26 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2012-01-02 10:24:26 ----A---- C:\Windows\system32\secproc_ssp.dll
2012-01-02 10:24:26 ----A---- C:\Windows\system32\qdv.dll
2012-01-02 10:24:26 ----A---- C:\Windows\system32\qcap.dll
2012-01-02 10:24:26 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2012-01-02 10:24:26 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2012-01-02 10:24:26 ----A---- C:\Windows\system32\msnetobj.dll
2012-01-02 10:24:26 ----A---- C:\Windows\system32\CscMig.dll
2012-01-02 10:24:25 ----A---- C:\Windows\SYSWOW64\WPDSp.dll
2012-01-02 10:24:25 ----A---- C:\Windows\SYSWOW64\srvcli.dll
2012-01-02 10:24:25 ----A---- C:\Windows\SYSWOW64\Ribbons.scr
2012-01-02 10:24:25 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL
2012-01-02 10:24:25 ----A---- C:\Windows\SYSWOW64\PortableDeviceStatus.dll
2012-01-02 10:24:25 ----A---- C:\Windows\SYSWOW64\olethk32.dll
2012-01-02 10:24:25 ----A---- C:\Windows\system32\fphc.dll
2012-01-02 10:24:25 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2012-01-02 10:24:25 ----A---- C:\Windows\system32\dot3ui.dll
2012-01-02 10:24:24 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2012-01-02 10:24:24 ----A---- C:\Windows\SYSWOW64\Mystify.scr
2012-01-02 10:24:24 ----A---- C:\Windows\system32\takeown.exe
2012-01-02 10:24:24 ----A---- C:\Windows\system32\PnPUnattend.exe
2012-01-02 10:24:23 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2012-01-02 10:24:23 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2012-01-02 10:24:23 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2012-01-02 10:24:23 ----A---- C:\Windows\SYSWOW64\wiavideo.dll
2012-01-02 10:24:23 ----A---- C:\Windows\SYSWOW64\utildll.dll
2012-01-02 10:24:23 ----A---- C:\Windows\SYSWOW64\takeown.exe
2012-01-02 10:24:23 ----A---- C:\Windows\SYSWOW64\mapistub.dll
2012-01-02 10:24:23 ----A---- C:\Windows\SYSWOW64\mapi32.dll
2012-01-02 10:24:23 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2012-01-02 10:24:23 ----A---- C:\Windows\SYSWOW64\fphc.dll
2012-01-02 10:24:23 ----A---- C:\Windows\SYSWOW64\dot3msm.dll
2012-01-02 10:24:23 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2012-01-02 10:24:23 ----A---- C:\Windows\system32\WMPhoto.dll
2012-01-02 10:24:23 ----A---- C:\Windows\system32\vfwwdm32.dll
2012-01-02 10:24:23 ----A---- C:\Windows\system32\EhStorAPI.dll
2012-01-02 10:24:23 ----A---- C:\Windows\system32\amstream.dll
2012-01-02 10:24:22 ----A---- C:\Windows\SYSWOW64\wmdrmnet.dll
2012-01-02 10:24:22 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2012-01-02 10:24:21 ----A---- C:\Windows\SYSWOW64\sppinst.dll
2012-01-02 10:24:21 ----A---- C:\Windows\SYSWOW64\qdv.dll
2012-01-02 10:24:21 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2012-01-02 10:24:21 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2012-01-02 10:24:21 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2012-01-02 10:24:21 ----A---- C:\Windows\SYSWOW64\EhStorAPI.dll
2012-01-02 10:24:21 ----A---- C:\Windows\system32\WUDFx.dll
2012-01-02 10:24:21 ----A---- C:\Windows\system32\WUDFHost.exe
2012-01-02 10:24:21 ----A---- C:\Windows\system32\WavDest.dll
2012-01-02 10:24:21 ----A---- C:\Windows\system32\shimgvw.dll
2012-01-02 10:24:21 ----A---- C:\Windows\system32\QCLIPROV.DLL
2012-01-02 10:24:21 ----A---- C:\Windows\system32\nrpsrv.dll
2012-01-02 10:24:21 ----A---- C:\Windows\system32\netapi32.dll
2012-01-02 10:24:21 ----A---- C:\Windows\system32\iasrecst.dll
2012-01-02 10:24:21 ----A---- C:\Windows\system32\djoin.exe
2012-01-02 10:24:21 ----A---- C:\Windows\system32\cmstp.exe
2012-01-02 10:24:21 ----A---- C:\Windows\system32\CertPolEng.dll
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\wsnmp32.dll
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\vfwwdm32.dll
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\setupcln.dll
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\relog.exe
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\QCLIPROV.DLL
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\pdhui.dll
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\MuiUnattend.exe
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\iasrecst.dll
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\cmstp.exe
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\cca.dll
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\AzSqlExt.dll
2012-01-02 10:24:20 ----A---- C:\Windows\system32\wuauclt.exe
2012-01-02 10:24:20 ----A---- C:\Windows\system32\sscore.dll
2012-01-02 10:24:20 ----A---- C:\Windows\system32\relog.exe
2012-01-02 10:24:20 ----A---- C:\Windows\system32\mydocs.dll
2012-01-02 10:24:20 ----A---- C:\Windows\system32\MultiDigiMon.exe
2012-01-02 10:24:20 ----A---- C:\Windows\system32\mobsync.exe
2012-01-02 10:24:20 ----A---- C:\Windows\system32\KMSVC.DLL
2012-01-02 10:24:20 ----A---- C:\Windows\system32\iscsicli.exe
2012-01-02 10:24:20 ----A---- C:\Windows\system32\fdProxy.dll
2012-01-02 10:24:20 ----A---- C:\Windows\system32\drivers\pacer.sys
2012-01-02 10:24:20 ----A---- C:\Windows\system32\diskpart.exe
2012-01-02 10:24:20 ----A---- C:\Windows\system32\BWUnpairElevated.dll
2012-01-02 10:24:19 ----A---- C:\Windows\SYSWOW64\wkscli.dll
2012-01-02 10:24:19 ----A---- C:\Windows\SYSWOW64\spbcd.dll
2012-01-02 10:24:19 ----A---- C:\Windows\SYSWOW64\rastapi.dll
2012-01-02 10:24:19 ----A---- C:\Windows\SYSWOW64\netiougc.exe
2012-01-02 10:24:19 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2012-01-02 10:24:19 ----A---- C:\Windows\SYSWOW64\mydocs.dll
2012-01-02 10:24:19 ----A---- C:\Windows\SYSWOW64\iscsicli.exe
2012-01-02 10:24:19 ----A---- C:\Windows\SYSWOW64\diskpart.exe
2012-01-02 10:24:19 ----A---- C:\Windows\SYSWOW64\amstream.dll
2012-01-02 10:24:19 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2012-01-02 10:24:19 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2012-01-02 10:24:19 ----A---- C:\Windows\system32\msdmo.dll
2012-01-02 10:24:19 ----A---- C:\Windows\system32\itircl.dll
2012-01-02 10:24:19 ----A---- C:\Windows\system32\dot3msm.dll
2012-01-02 10:24:19 ----A---- C:\Windows\system32\browcli.dll
2012-01-02 10:24:19 ----A---- C:\Windows\system32\BdeHdCfg.exe
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\wmpps.dll
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\tlscsp.dll
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\syssetup.dll
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\resutils.dll
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\ReAgentc.exe
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\itircl.dll
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\findstr.exe
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\CertPolEng.dll
2012-01-02 10:24:18 ----A---- C:\Windows\system32\wuapp.exe
2012-01-02 10:24:18 ----A---- C:\Windows\system32\qprocess.exe
2012-01-02 10:24:18 ----A---- C:\Windows\system32\mciqtz32.dll
2012-01-02 10:24:18 ----A---- C:\Windows\system32\imagehlp.dll
2012-01-02 10:24:18 ----A---- C:\Windows\system32\choice.exe
2012-01-02 10:24:18 ----A---- C:\Windows\system32\FXSTIFF.dll
2012-01-02 10:24:18 ----A---- C:\Windows\system32\findstr.exe
2012-01-02 10:24:18 ----A---- C:\Windows\system32\eappgnui.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\unlodctr.exe
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\sppc.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\spopk.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\shimgvw.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\rdprefdrvapi.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\netutils.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\muifontsetup.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\msdmo.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\mobsync.exe
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\mciqtz32.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\luainstall.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\inetmib1.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\cabinet.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\vmstorfltres.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\vmicres.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\tskill.exe
2012-01-02 10:24:17 ----A---- C:\Windows\system32\tsdiscon.exe
2012-01-02 10:24:17 ----A---- C:\Windows\system32\tscon.exe
2012-01-02 10:24:17 ----A---- C:\Windows\system32\sppc.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\spopk.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\schedcli.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\rwinsta.exe
2012-01-02 10:24:17 ----A---- C:\Windows\system32\repair-bde.exe
2012-01-02 10:24:17 ----A---- C:\Windows\system32\RDPENCDD.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\qappsrv.exe
2012-01-02 10:24:17 ----A---- C:\Windows\system32\profprov.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\onexui.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\odbcconf.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\manage-bde.exe
2012-01-02 10:24:17 ----A---- C:\Windows\system32\luainstall.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\logoff.exe
2012-01-02 10:24:17 ----A---- C:\Windows\system32\inetmib1.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\chgusr.exe
2012-01-02 10:24:17 ----A---- C:\Windows\system32\chgport.exe
2012-01-02 10:24:17 ----A---- C:\Windows\system32\chglogon.exe
2012-01-02 10:24:17 ----A---- C:\Windows\system32\fixmapi.exe
2012-01-02 10:24:17 ----A---- C:\Windows\system32\drivers\tunnel.sys
2012-01-02 10:24:17 ----A---- C:\Windows\system32\drivers\dfsc.sys
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\wups.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\wsdchngr.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\TRAPI.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\sscore.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\schedcli.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\shgina.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\riched32.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\perfts.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\odbcconf.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\napdsnap.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\imm32.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\elsTrans.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\dsauth.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\browcli.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\bitsperf.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\wups2.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\wups.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\wshirda.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\wshbth.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\wsdchngr.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\vmbusres.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\UIRibbonRes.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\TRAPI.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\shgina.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\shadow.exe
2012-01-02 10:24:16 ----A---- C:\Windows\system32\reset.exe
2012-01-02 10:24:16 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\query.exe
2012-01-02 10:24:16 ----A---- C:\Windows\system32\napdsnap.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\LogonUI.exe
2012-01-02 10:24:16 ----A---- C:\Windows\system32\change.exe
2012-01-02 10:24:16 ----A---- C:\Windows\system32\FXSUNATD.exe
2012-01-02 10:24:16 ----A---- C:\Windows\system32\FXSMON.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\elsTrans.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\dsauth.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2012-01-02 10:24:16 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2012-01-02 10:24:16 ----A---- C:\Windows\system32\drivers\tdi.sys
2012-01-02 10:24:16 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2012-01-02 10:24:16 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2012-01-02 10:24:16 ----A---- C:\Windows\system32\cscdll.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\bitsperf.dll
2012-01-02 10:24:15 ----A---- C:\Windows\SYSWOW64\wshirda.dll
2012-01-02 10:24:15 ----A---- C:\Windows\system32\rdpcfgex.dll
2012-01-02 10:24:15 ----A---- C:\Windows\system32\drivers\hidusb.sys
2012-01-02 10:24:15 ----A---- C:\Windows\system32\drivers\appid.sys
2012-01-02 10:24:14 ----AH---- C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\shunimpl.dll
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\KBDTUQ.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\KBDTUF.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\KBDSG.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\kbdlk41a.dll
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\KBDGR1.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\KBDGKL.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\KBDGEO.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\KBDBLR.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\C_ISCII.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\browseui.dll
2012-01-02 10:24:14 ----A---- C:\Windows\system32\wmploc.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\system32\VmdCoinstall.dll
2012-01-02 10:24:14 ----A---- C:\Windows\system32\vmbuspipe.dll
2012-01-02 10:24:14 ----A---- C:\Windows\system32\VmbusCoinstaller.dll
2012-01-02 10:24:14 ----A---- C:\Windows\system32\spwmp.dll
2012-01-02 10:24:14 ----A---- C:\Windows\system32\shunimpl.dll
2012-01-02 10:24:14 ----A---- C:\Windows\system32\riched32.dll
2012-01-02 10:24:14 ----A---- C:\Windows\system32\KBDTUQ.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\system32\KBDTUF.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\system32\KBDSG.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\system32\KBDSF.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\system32\KBDPO.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\system32\KBDNEPR.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\system32\kbdlk41a.dll
2012-01-02 10:24:14 ----A---- C:\Windows\system32\KBDINTAM.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\system32\KBDINBEN.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\system32\KBDGR1.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\system32\KBDGKL.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\system32\IcCoinstall.dll
2012-01-02 10:24:14 ----A---- C:\Windows\system32\dxmasf.dll
2012-01-02 10:24:14 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2012-01-02 10:24:14 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2012-01-02 10:24:14 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2012-01-02 10:24:14 ----A---- C:\Windows\system32\drivers\scfilter.sys
2012-01-02 10:24:14 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2012-01-02 10:24:14 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2012-01-02 10:24:14 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2012-01-02 10:24:14 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2012-01-02 10:24:14 ----A---- C:\Windows\system32\drivers\cdrom.sys
2012-01-02 10:24:14 ----A---- C:\Windows\system32\C_ISCII.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\system32\browseui.dll
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\spwizres.dll
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\pifmgr.dll
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDUS.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDUGHR1.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDTURME.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDTAJIK.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDSF.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDPO.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDNEPR.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDMON.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDMAORI.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDLT1.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDINTEL.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDINTAM.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDINORI.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDINMAR.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDINKAN.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDINHIN.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDINBEN.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDCZ1.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDBULG.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\dpnaddr.dll
2012-01-02 10:24:13 ----A---- C:\Windows\system32\spwizres.dll
2012-01-02 10:24:13 ----A---- C:\Windows\system32\pifmgr.dll
2012-01-02 10:24:13 ----A---- C:\Windows\system32\nlsbres.dll
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDUS.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDTURME.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDMON.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDMAORI.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDLT1.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDINTEL.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDINORI.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDINMAR.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDINKAN.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDINHIN.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDGEO.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDCZ1.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDBULG.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDBLR.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDBASH.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\drivers\vms3cap.sys
2012-01-02 10:24:13 ----A---- C:\Windows\system32\drivers\VMBusHID.sys
2012-01-02 10:24:13 ----A---- C:\Windows\system32\dpnaddr.dll
2012-01-02 10:24:13 ----A---- C:\Windows\system32\BlbEvents.dll
2012-01-02 10:24:10 ----A---- C:\Windows\SYSWOW64\wdscore.dll
2012-01-02 10:24:10 ----A---- C:\Windows\system32\dpx.dll
2012-01-02 10:24:06 ----A---- C:\Windows\SYSWOW64\sqmapi.dll
2012-01-02 10:24:05 ----A---- C:\Windows\SYSWOW64\printmanagement.msc
2012-01-02 10:24:00 ----A---- C:\Windows\SYSWOW64\wbemcomn.dll
2012-01-02 10:21:50 ----A---- C:\Windows\system32\wbemcomn.dll
2012-01-02 10:21:39 ----A---- C:\Windows\system32\sqmapi.dll
2012-01-02 09:41:14 ----D---- C:\Program Files\CCleaner
2012-01-02 09:30:09 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2012-01-02 09:30:09 ----A---- C:\Windows\system32\drivers\usbport.sys
2012-01-02 09:30:09 ----A---- C:\Windows\system32\drivers\usbohci.sys
2012-01-02 09:30:09 ----A---- C:\Windows\system32\drivers\usbhub.sys
2012-01-02 09:30:09 ----A---- C:\Windows\system32\drivers\usbehci.sys
2012-01-02 09:30:09 ----A---- C:\Windows\system32\drivers\usbd.sys
2012-01-02 09:30:09 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2012-01-02 09:30:08 ----A---- C:\Windows\system32\fsquirt.exe
2012-01-02 09:30:08 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2012-01-02 09:30:08 ----A---- C:\Windows\system32\drivers\bthport.sys
2012-01-02 09:30:06 ----A---- C:\Windows\SYSWOW64\esent.dll
2012-01-02 09:30:06 ----A---- C:\Windows\system32\esent.dll
2012-01-02 09:30:06 ----A---- C:\Windows\system32\drivers\ntfs.sys
2012-01-02 09:30:05 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2012-01-02 09:30:05 ----A---- C:\Windows\system32\fsutil.exe
2012-01-02 09:30:05 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2012-01-02 09:30:05 ----A---- C:\Windows\system32\drivers\storport.sys
2012-01-02 09:30:05 ----A---- C:\Windows\system32\drivers\nvstor.sys
2012-01-02 09:30:05 ----A---- C:\Windows\system32\drivers\nvraid.sys
2012-01-02 09:30:05 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2012-01-02 09:30:05 ----A---- C:\Windows\system32\drivers\amdxata.sys
2012-01-02 09:30:05 ----A---- C:\Windows\system32\drivers\amdsata.sys
2012-01-02 09:25:36 ----D---- C:\Program Files (x86)\Adobe
2012-01-02 09:24:41 ----D---- C:\ProgramData\Adobe
2012-01-01 23:32:43 ----D---- C:\Windows\pss
2012-01-01 23:07:40 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2012-01-01 23:07:40 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2012-01-01 23:07:40 ----A---- C:\Windows\system32\FntCache.dll
2012-01-01 23:07:40 ----A---- C:\Windows\system32\DWrite.dll
2012-01-01 23:07:40 ----A---- C:\Windows\system32\d2d1.dll
2012-01-01 21:40:14 ----A---- C:\Windows\explorer.exe
2012-01-01 21:40:13 ----A---- C:\Windows\SYSWOW64\imageres.dll
2012-01-01 21:40:13 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2012-01-01 21:40:11 ----A---- C:\Windows\SYSWOW64\themeui.dll.tmp
2012-01-01 21:40:11 ----A---- C:\Windows\SYSWOW64\authui.dll
2012-01-01 21:40:10 ----A---- C:\Windows\SYSWOW64\uxtheme.dll.tmp
2012-01-01 21:40:02 ----D---- C:\ProgramData\SweetIM
2012-01-01 21:40:02 ----D---- C:\Program Files (x86)\SweetIM
2012-01-01 20:56:18 ----D---- C:\Program Files (x86)\QuestBasic
2012-01-01 20:56:14 ----D---- C:\Program Files (x86)\windows-7-themes.com
2012-01-01 20:20:21 ----D---- C:\Windows\SYSWOW64\Macromed
2012-01-01 19:32:13 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-01-01 19:31:53 ----D---- C:\Users\popino\AppData\Roaming\ICQ
2012-01-01 16:21:15 ----D---- C:\Windows\Sun
2012-01-01 16:04:45 ----D---- C:\Program Files (x86)\JDownloader
2012-01-01 15:38:16 ----D---- C:\Program Files (x86)\ImgBurn
2012-01-01 15:35:55 ----D---- C:\Program Files (x86)\uTorrent
2012-01-01 15:35:04 ----D---- C:\Users\popino\AppData\Roaming\uTorrent
2012-01-01 15:07:50 ----D---- C:\Windows\SYSWOW64\Wat
2012-01-01 15:07:50 ----D---- C:\Windows\system32\Wat
2012-01-01 15:04:50 ----D---- C:\ProgramData\Sun
2012-01-01 15:04:32 ----A---- C:\Windows\SYSWOW64\javaws.exe
2012-01-01 15:04:32 ----A---- C:\Windows\SYSWOW64\javaw.exe
2012-01-01 15:04:32 ----A---- C:\Windows\SYSWOW64\java.exe
2012-01-01 15:04:32 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2012-01-01 15:04:19 ----D---- C:\Program Files (x86)\Java
2012-01-01 14:54:36 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\wextract.exe
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\url.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\occache.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\msrating.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\msls31.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\mshta.exe
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\inseng.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\icardie.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\admparse.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\wininet.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\wextract.exe
2012-01-01 14:54:35 ----A---- C:\Windows\system32\webcheck.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\vbscript.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\urlmon.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\url.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2012-01-01 14:54:35 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2012-01-01 14:54:35 ----A---- C:\Windows\system32\pngfilt.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\occache.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\msrating.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\msls31.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\mshtmler.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\mshtmled.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\mshtml.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\mshta.exe
2012-01-01 14:54:35 ----A---- C:\Windows\system32\msfeedssync.exe
2012-01-01 14:54:35 ----A---- C:\Windows\system32\msfeedsbs.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\msfeeds.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\licmgr10.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\jsproxy.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\jscript9.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\jscript.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\inseng.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\imgutil.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\iexpress.exe
2012-01-01 14:54:35 ----A---- C:\Windows\system32\ieUnatt.exe
2012-01-01 14:54:35 ----A---- C:\Windows\system32\ieui.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\iesysprep.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\iesetup.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\iertutil.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\iernonce.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\iepeers.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\ieframe.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\iedkcs32.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\ieapfltr.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\ieapfltr.dat
2012-01-01 14:54:35 ----A---- C:\Windows\system32\ieakui.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\ieaksie.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\ieakeng.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\IEAdvpack.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\ie4uinit.exe
2012-01-01 14:54:35 ----A---- C:\Windows\system32\icardie.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\dxtrans.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\dxtmsft.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\admparse.dll
2012-01-01 14:32:50 ----A---- C:\Windows\system32\browserchoice.exe
2012-01-01 14:18:35 ----A---- C:\Windows\system32\shell32.dll
2012-01-01 14:18:34 ----A---- C:\Windows\SYSWOW64\shell32.dll
2012-01-01 12:26:27 ----A---- C:\Windows\system32\MRT.exe
2012-01-01 12:03:21 ----D---- C:\ProgramData\TrueSuite
2012-01-01 12:03:20 ----D---- C:\Windows\system32\wocaffe
2012-01-01 12:03:20 ----D---- C:\Program Files\TrueSuite
2012-01-01 12:03:16 ----D---- C:\ProgramData\Downloaded Installations
2012-01-01 10:31:23 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2012-01-01 10:31:23 ----A---- C:\Windows\system32\xmllite.dll
2012-01-01 10:31:16 ----A---- C:\Windows\SYSWOW64\explorer.exe
2012-01-01 10:31:13 ----A---- C:\Windows\system32\tquery.dll
2012-01-01 10:31:13 ----A---- C:\Windows\system32\mssrch.dll
2012-01-01 10:31:12 ----A---- C:\Windows\SYSWOW64\tquery.dll
2012-01-01 10:31:12 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2012-01-01 10:31:12 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2012-01-01 10:31:12 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2012-01-01 10:31:12 ----A---- C:\Windows\SYSWOW64\mssph.dll
2012-01-01 10:31:12 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2012-01-01 10:31:12 ----A---- C:\Windows\system32\SearchIndexer.exe
2012-01-01 10:31:12 ----A---- C:\Windows\system32\SearchFilterHost.exe
2012-01-01 10:31:12 ----A---- C:\Windows\system32\mssvp.dll
2012-01-01 10:31:12 ----A---- C:\Windows\system32\mssph.dll
2012-01-01 10:31:11 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2012-01-01 10:31:11 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2012-01-01 10:31:11 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2012-01-01 10:31:11 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2012-01-01 10:31:11 ----A---- C:\Windows\system32\mssphtb.dll
2012-01-01 10:31:11 ----A---- C:\Windows\system32\msscntrs.dll
2012-01-01 10:30:12 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2012-01-01 10:30:12 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2012-01-01 10:29:47 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2012-01-01 10:29:47 ----A---- C:\Windows\system32\XpsPrint.dll
2012-01-01 10:28:50 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2012-01-01 10:28:47 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2012-01-01 10:28:47 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2012-01-01 10:28:47 ----A---- C:\Windows\system32\d3d10_1core.dll
2012-01-01 10:28:47 ----A---- C:\Windows\system32\d3d10_1.dll
2012-01-01 10:28:27 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2012-01-01 10:28:27 ----A---- C:\Windows\system32\kerberos.dll
2012-01-01 10:27:33 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2012-01-01 10:27:33 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2012-01-01 10:27:33 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2012-01-01 10:27:33 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2012-01-01 10:27:33 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2012-01-01 10:27:33 ----A---- C:\Windows\system32\odbctrac.dll
2012-01-01 10:27:33 ----A---- C:\Windows\system32\odbccu32.dll
2012-01-01 10:27:33 ----A---- C:\Windows\system32\odbccr32.dll
2012-01-01 10:27:33 ----A---- C:\Windows\system32\odbccp32.dll
2012-01-01 10:27:10 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2012-01-01 10:27:10 ----A---- C:\Windows\system32\poqexec.exe
2012-01-01 10:26:58 ----A---- C:\Windows\SYSWOW64\sbe.dll
2012-01-01 10:26:58 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2012-01-01 10:26:58 ----A---- C:\Windows\system32\sbe.dll
2012-01-01 10:26:58 ----A---- C:\Windows\system32\CPFilters.dll
2012-01-01 10:26:30 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2012-01-01 10:26:30 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2012-01-01 10:26:30 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2012-01-01 10:26:24 ----A---- C:\Windows\system32\drivers\afd.sys
2012-01-01 10:25:18 ----A---- C:\Windows\system32\csrsrv.dll
2012-01-01 10:24:21 ----A---- C:\Windows\system32\mfc42u.dll
2012-01-01 10:24:21 ----A---- C:\Windows\system32\mfc42.dll
2012-01-01 10:24:20 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2012-01-01 10:24:20 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2012-01-01 10:23:42 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2012-01-01 10:23:42 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2012-01-01 10:23:42 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2012-01-01 10:23:42 ----A---- C:\Windows\system32\fontsub.dll
2012-01-01 10:23:42 ----A---- C:\Windows\system32\atmlib.dll
2012-01-01 10:23:42 ----A---- C:\Windows\system32\atmfd.dll
2012-01-01 10:22:18 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2012-01-01 10:22:18 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2012-01-01 10:22:18 ----A---- C:\Windows\system32\dnsrslvr.dll
2012-01-01 10:22:18 ----A---- C:\Windows\system32\dnscacheugc.exe
2012-01-01 10:22:18 ----A---- C:\Windows\system32\dnsapi.dll
2012-01-01 10:21:42 ----A---- C:\Windows\system32\drivers\srv2.sys
2012-01-01 10:21:42 ----A---- C:\Windows\system32\drivers\srv.sys
2012-01-01 10:21:41 ----A---- C:\Windows\system32\drivers\srvnet.sys
2012-01-01 10:21:25 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2012-01-01 10:21:25 ----A---- C:\Windows\system32\psisdecd.dll
2012-01-01 10:21:05 ----A---- C:\Windows\system32\winresume.exe
2012-01-01 10:21:05 ----A---- C:\Windows\system32\winload.exe
2012-01-01 10:21:04 ----A---- C:\Windows\system32\setbcdlocale.dll
2012-01-01 10:21:04 ----A---- C:\Windows\system32\kdusb.dll
2012-01-01 10:21:04 ----A---- C:\Windows\system32\kdcom.dll
2012-01-01 10:21:04 ----A---- C:\Windows\system32\kd1394.dll
2012-01-01 10:17:17 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2012-01-01 10:17:17 ----A---- C:\Windows\system32\prevhost.exe
2012-01-01 10:13:02 ----D---- C:\Users\popino\AppData\Roaming\Windows Live Writer
2012-01-01 10:09:45 ----A---- C:\Windows\system32\drivers\tcpip.sys
2012-01-01 10:09:45 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2012-01-01 10:09:33 ----D---- C:\Program Files (x86)\Windows Live
2012-01-01 10:09:29 ----D---- C:\Program Files\Windows Live
2012-01-01 10:07:33 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2012-01-01 10:07:33 ----A---- C:\Windows\system32\KernelBase.dll
2012-01-01 10:07:33 ----A---- C:\Windows\system32\kernel32.dll
2012-01-01 10:07:33 ----A---- C:\Windows\system32\conhost.exe
2012-01-01 10:07:32 ----A---- C:\Windows\SYSWOW64\setup16.exe
2012-01-01 10:07:32 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2012-01-01 10:07:32 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2012-01-01 10:07:32 ----A---- C:\Windows\system32\wow64win.dll
2012-01-01 10:07:32 ----A---- C:\Windows\system32\wow64.dll
2012-01-01 10:07:32 ----A---- C:\Windows\system32\winsrv.dll
2012-01-01 10:07:32 ----A---- C:\Windows\system32\ntvdm64.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-01-01 10:07:31 ----A---- C:\Windows\SYSWOW64\wow32.dll
2012-01-01 10:07:31 ----A---- C:\Windows\SYSWOW64\user.exe
2012-01-01 10:07:31 ----A---- C:\Windows\SYSWOW64\instnm.exe
2012-01-01 10:07:31 ----A---- C:\Windows\system32\wow64cpu.dll
2012-01-01 10:07:16 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2012-01-01 10:07:16 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2012-01-01 10:07:16 ----A---- C:\Windows\system32\umpnpmgr.dll
2012-01-01 10:07:16 ----A---- C:\Windows\system32\cfgmgr32.dll
2012-01-01 10:07:14 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2012-01-01 10:07:14 ----A---- C:\Windows\SYSWOW64\devobj.dll
2012-01-01 10:06:40 ----A---- C:\Windows\system32\inetcomm.dll
2012-01-01 10:06:39 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2012-01-01 10:06:36 ----A---- C:\Windows\system32\WFS.exe
2012-01-01 10:06:36 ----A---- C:\Windows\system32\FXSCOVER.exe
2012-01-01 10:06:29 ----A---- C:\Windows\system32\win32k.sys
2012-01-01 10:05:40 ----A---- C:\Windows\system32\drivers\bowser.sys
2012-01-01 10:05:21 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2012-01-01 10:05:21 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2012-01-01 10:05:21 ----A---- C:\Windows\system32\oleaut32.dll
2012-01-01 10:05:21 ----A---- C:\Windows\system32\oleacc.dll
2012-01-01 10:05:05 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2012-01-01 10:05:05 ----A---- C:\Windows\system32\EncDec.dll
2012-01-01 10:04:54 ----A---- C:\Windows\SYSWOW64\tzres.dll
2012-01-01 10:04:54 ----A---- C:\Windows\system32\tzres.dll
2012-01-01 10:02:20 ----SHD---- C:\Windows\Installer
2012-01-01 09:57:12 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-01-01 09:57:10 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2012-01-01 09:57:09 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2012-01-01 01:57:13 ----D---- C:\Users\popino\AppData\Roaming\WinRAR
2012-01-01 01:57:08 ----D---- C:\Program Files\WinRAR
2012-01-01 00:48:12 ----D---- C:\Users\popino\AppData\Roaming\Macromedia
2012-01-01 00:48:11 ----D---- C:\Users\popino\AppData\Roaming\Adobe
2011-12-31 23:24:21 ----D---- C:\Program Files\Synaptics
2011-12-31 23:19:47 ----D---- C:\Intel
2011-12-31 23:01:09 ----D---- C:\Program Files (x86)\Launch Manager
2011-12-31 22:21:56 ----N---- C:\Windows\system32\MpSigStub.exe
2011-12-31 22:20:34 ----A---- C:\Windows\nsreg.dat
2011-12-31 22:19:54 ----D---- C:\Users\popino\AppData\Roaming\Mozilla
2011-12-31 22:17:59 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-12-31 21:48:33 ----D---- C:\Users\popino\AppData\Roaming\Identities
2011-12-31 21:47:37 ----SD---- C:\Users\popino\AppData\Roaming\Microsoft
2011-12-31 21:47:37 ----D---- C:\Users\popino\AppData\Roaming\Media Center Programs
2011-12-31 21:44:48 ----SHD---- C:\Recovery
2011-12-31 21:44:47 ----SHD---- C:\ProgramData\Šablony
2011-12-31 21:44:47 ----SHD---- C:\ProgramData\Plocha
2011-12-31 21:44:47 ----SHD---- C:\ProgramData\Oblíbené položky
2011-12-31 21:44:47 ----SHD---- C:\ProgramData\Nabídka Start
2011-12-31 21:44:47 ----SHD---- C:\ProgramData\Dokumenty
2011-12-31 21:44:47 ----SHD---- C:\ProgramData\Data aplikací
2011-12-31 21:29:26 ----D---- C:\Windows\SoftwareDistribution
2011-12-31 21:25:57 ----D---- C:\Windows\Prefetch
2011-12-31 21:25:34 ----ASH---- C:\pagefile.sys
2011-12-31 21:25:29 ----ASH---- C:\hiberfil.sys
2011-12-31 21:24:24 ----D---- C:\Windows\Panther
2011-12-31 21:10:53 ----RASH---- C:\BOOTSECT.BAK
2011-12-31 21:10:48 ----SHD---- C:\Boot
2011-12-30 12:08:03 ----SHD---- C:\Config.Msi

======List of files/folders modified in the last 1 month======

2012-01-20 18:29:48 ----D---- C:\Windows\Temp
2012-01-20 18:25:21 ----RD---- C:\Program Files
2012-01-20 18:20:07 ----D---- C:\Windows\inf
2012-01-20 18:20:07 ----D---- C:\Windows
2012-01-20 18:12:23 ----RD---- C:\Program Files (x86)
2012-01-20 18:12:23 ----HD---- C:\ProgramData
2012-01-20 18:05:39 ----SHD---- C:\System Volume Information
2012-01-20 17:50:51 ----D---- C:\Windows\system32\config
2012-01-20 16:49:24 ----D---- C:\Windows\System32
2012-01-20 16:49:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-01-20 15:58:00 ----D---- C:\Windows\SYSWOW64\drivers
2012-01-20 15:57:56 ----D---- C:\Windows\system32\drivers
2012-01-20 14:15:49 ----D---- C:\Windows\system32\Tasks
2012-01-16 15:03:00 ----D---- C:\Windows\SysWOW64
2012-01-15 15:18:26 ----D---- C:\Windows\debug
2012-01-15 15:16:32 ----D---- C:\Windows\Tasks
2012-01-15 14:39:37 ----A---- C:\Windows\system.ini
2012-01-11 14:43:42 ----D---- C:\Windows\winsxs
2012-01-11 14:41:58 ----D---- C:\Windows\ehome
2012-01-11 14:27:54 ----D---- C:\Windows\system32\catroot2
2012-01-11 14:27:54 ----D---- C:\Windows\system32\catroot
2012-01-08 19:58:37 ----RSD---- C:\Windows\assembly
2012-01-08 19:23:23 ----D---- C:\Windows\system32\DriverStore
2012-01-08 15:34:18 ----D---- C:\Program Files\Windows Media Player
2012-01-08 15:29:04 ----D---- C:\Program Files (x86)\Windows Media Player
2012-01-06 13:00:50 ----D---- C:\Windows\ShellNew
2012-01-06 12:50:26 ----A---- C:\Windows\win.ini
2012-01-06 12:40:38 ----D---- C:\Program Files (x86)\MSBuild
2012-01-06 12:40:16 ----D---- C:\Program Files (x86)\Common Files
2012-01-06 12:39:39 ----RSD---- C:\Windows\Fonts
2012-01-06 12:30:31 ----SD---- C:\ProgramData\Microsoft
2012-01-06 12:29:41 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-01-05 16:35:32 ----D---- C:\Windows\system32\wdi
2012-01-05 12:33:08 ----D---- C:\Windows\system32\drivers\UMDF
2012-01-05 12:14:06 ----D---- C:\Windows\system32\LogFiles
2012-01-04 21:42:03 ----D---- C:\Windows\Logs
2012-01-04 19:41:40 ----RD---- C:\Users
2012-01-04 19:41:22 ----D---- C:\Windows\Help
2012-01-04 18:22:41 ----D---- C:\PerfLogs
2012-01-04 15:31:34 ----D---- C:\Windows\Microsoft.NET
2012-01-04 12:41:12 ----D---- C:\Windows\rescache
2012-01-03 00:59:20 ----HD---- C:\Windows\system32\GroupPolicy
2012-01-03 00:46:24 ----D---- C:\Windows\system32\wfp
2012-01-03 00:46:24 ----D---- C:\Windows\system32\wbem
2012-01-03 00:46:24 ----D---- C:\Windows\system32\CodeIntegrity
2012-01-03 00:46:20 ----D---- C:\Windows\security
2012-01-03 00:46:12 ----D---- C:\Windows\registration
2012-01-02 13:06:21 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-01-02 13:06:21 ----D---- C:\Windows\system32\cs-CZ
2012-01-02 13:02:22 ----D---- C:\Windows\SYSWOW64\en-US
2012-01-02 13:02:22 ----D---- C:\Windows\system32\en-US
2012-01-02 12:58:01 ----D---- C:\Windows\system32\NDF
2012-01-02 12:13:19 ----D---- C:\Program Files (x86)\Windows Sidebar
2012-01-02 12:13:19 ----D---- C:\Program Files (x86)\Windows Portable Devices
2012-01-02 12:13:19 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2012-01-02 12:13:19 ----D---- C:\Program Files (x86)\Windows Mail
2012-01-02 12:13:16 ----D---- C:\Program Files\Windows Sidebar
2012-01-02 12:13:16 ----D---- C:\Program Files\Windows Portable Devices
2012-01-02 12:13:16 ----D---- C:\Program Files\Windows Photo Viewer
2012-01-02 12:13:16 ----D---- C:\Program Files\Windows Mail
2012-01-02 12:13:16 ----D---- C:\Program Files\Windows Journal
2012-01-02 12:13:16 ----D---- C:\Program Files\DVD Maker
2012-01-02 12:13:15 ----D---- C:\Windows\servicing
2012-01-02 12:13:15 ----D---- C:\Program Files\Windows Defender
2012-01-02 12:13:15 ----D---- C:\Program Files\Common Files\System
2012-01-02 12:13:12 ----SHD---- C:\Windows\BitLockerDiscoveryVolumeContents
2012-01-02 12:13:12 ----D---- C:\Windows\SYSWOW64\oobe
2012-01-02 12:13:12 ----D---- C:\Windows\SYSWOW64\migration
2012-01-02 12:13:12 ----D---- C:\Windows\SYSWOW64\da-DK
2012-01-02 12:13:11 ----D---- C:\Windows\SYSWOW64\Setup
2012-01-02 12:13:11 ----D---- C:\Windows\SYSWOW64\cs
2012-01-02 12:13:11 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2012-01-02 12:13:10 ----D---- C:\Windows\SYSWOW64\wbem
2012-01-02 12:13:10 ----D---- C:\Windows\SYSWOW64\sppui
2012-01-02 12:13:10 ----D---- C:\Windows\SYSWOW64\migwiz
2012-01-02 12:13:10 ----D---- C:\Windows\SYSWOW64\manifeststore
2012-01-02 12:13:10 ----D---- C:\Windows\SYSWOW64\es-ES
2012-01-02 12:13:10 ----D---- C:\Windows\SYSWOW64\Dism
2012-01-02 12:12:56 ----D---- C:\Windows\system32\da-DK
2012-01-02 12:12:56 ----D---- C:\Windows\PolicyDefinitions
2012-01-02 12:12:55 ----D---- C:\Windows\system32\Setup
2012-01-02 12:12:55 ----D---- C:\Windows\system32\oobe
2012-01-02 12:12:55 ----D---- C:\Windows\system32\migration
2012-01-02 12:12:55 ----D---- C:\Windows\system32\cs
2012-01-02 12:12:55 ----D---- C:\Windows\system32\AdvancedInstallers
2012-01-02 12:12:54 ----D---- C:\Windows\system32\sppui
2012-01-02 12:12:54 ----D---- C:\Windows\system32\manifeststore
2012-01-02 12:12:54 ----D---- C:\Windows\system32\es-ES
2012-01-02 12:12:54 ----D---- C:\Windows\system32\drivers\cs-CZ
2012-01-02 12:12:53 ----D---- C:\Windows\system32\migwiz
2012-01-02 12:12:53 ----D---- C:\Windows\system32\Dism
2012-01-02 12:12:40 ----D---- C:\Windows\AppPatch
2012-01-02 12:12:25 ----D---- C:\Windows\system32\Boot
2012-01-02 12:08:09 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2012-01-02 12:08:09 ----A---- C:\Windows\system32\msclmd.dll
2012-01-02 09:43:17 ----D---- C:\Windows\SYSWOW64\LogFiles
2012-01-01 21:40:06 ----A---- C:\Windows\system32\themeservice.dll
2012-01-01 21:40:05 ----A---- C:\Windows\system32\uxtheme.dll
2012-01-01 15:07:56 ----D---- C:\Program Files\Internet Explorer
2012-01-01 15:07:56 ----D---- C:\Program Files (x86)\Internet Explorer
2012-01-01 14:22:51 ----D---- C:\Windows\system32\WinBioDatabase
2012-01-01 12:03:09 ----D---- C:\Windows\system32\WinBioPlugIns
2011-12-31 23:23:09 ----A---- C:\Windows\system32\WdfCoInstaller01000.dll
2011-12-31 23:23:08 ----A---- C:\Windows\SYSWOW64\SynTPCOM.dll
2011-12-31 23:23:07 ----A---- C:\Windows\SYSWOW64\SynCtrl.dll
2011-12-31 23:23:07 ----A---- C:\Windows\SYSWOW64\SynCOM.dll
2011-12-31 23:23:07 ----A---- C:\Windows\system32\SynTPAPI.dll
2011-12-31 23:23:07 ----A---- C:\Windows\system32\SynCtrl.dll
2011-12-31 23:23:07 ----A---- C:\Windows\system32\SynCOM.dll
2011-12-31 22:59:55 ----A---- C:\Windows\UNINST32.EXE
2011-12-31 21:55:53 ----D---- C:\Windows\system32\restore
2011-12-31 21:48:26 ----SHD---- C:\$Recycle.Bin
2011-12-31 21:44:48 ----D---- C:\Windows\system32\Recovery
2011-12-31 21:44:47 ----D---- C:\Program Files\Windows NT
2011-12-31 21:30:44 ----RASH---- C:\boot.ini
2011-12-31 21:30:03 ----D---- C:\Windows\system32\sysprep
2011-12-31 21:26:59 ----D---- C:\Windows\CSC
2011-12-31 21:23:47 ----D---- C:\Windows\Setup

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2011-08-04 62496]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2011-08-04 146432]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2011-08-04 38288]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2011-08-09 202576]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2011-08-04 187632]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys [2009-12-03 1224192]
R3 ATSwpWDF;AuthenTec TruePrint USB WBF WDF Driver; C:\Windows\System32\Drivers\ATSwpWDF.sys [2009-12-03 716872]
R3 DKbFltr;Dritek Keyboard Filter Driver (64-bit); C:\Windows\SysWOW64\Drivers\DKbFltr.sys [2011-12-31 25608]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-01-06 279616]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-10-18 2957544]
R3 Ltn_stk7070P;PCTV LITEON based TV tuner device; C:\Windows\system32\DRIVERS\Ltn_stk7070P.sys [2009-05-23 625152]
R3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys [2011-09-18 8604672]
R3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-12-31 322608]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 NETw5s64;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\NETw5s64.sys [2009-09-15 6952960]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 64bitový systém Windows Vista; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agr64svc.exe [2009-12-03 28672]
R2 ATService;AuthenTec Fingerprint Service; C:\Program Files (x86)\Fingerprint Sensor\AtService.exe [2009-08-05 1807608]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2011-09-22 974944]
R2 IGBASVC;EgisTec Service; C:\Program Files (x86)\Acer Bio Protection\BASVC.exe [2009-09-05 3449856]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2011-10-15 1640768]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-15 2253120]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096]
R3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-01-01 1255736]

-----------------EOF-----------------

Zdravim a pekny vecer preji

Doporucuji odinstalovat Spybot - Search & Destroy - program ma uz nejlepsi leta davno za sebou a posledni cca 3 roky neni schopen celit aktualnim hrozbam

• Nahrady za Spybota:
  • Spyware Terminator - info o nem http://www.viry.cz/forum/viewtopic.php?f=29&t=44730
  • SuperAntiSpyare - info o nem http://www.viry.cz/forum/viewtopic.php?f=29&t=51359
• Samozrejme pouzivejte jen jeden z nich
• Osobne doporucuji SuperAntiSpyware

Stahnete OTL (viz muj podpis) a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
• Zaskrtnete okenko Pro vsechny uzivatele
• Zaskrtnete okenko Kontrola na havet "LOP"
• Zaskrtnete okenko Kontrola na havet "Purity"
• Stari souboru zmente z 30 dnu na 7 dnu
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  CREATERESTOREPOINT
  
  netsvcs
  drivers32
  savembr:0
  
  /md5start
  atapi.sys
  autochk.exe
  cdrom.sys
  explorer.exe
  hal.dll
  scecli.dll
  svchost.exe
  tcpip.sys
  userinit.exe
  winlogon.exe
  /md5stop
  
  %systemroot%*.* /U /s
  %SYSTEMDRIVE%\*.exe
  %ALLUSERSPROFILE%\Application Data\*.
  %ALLUSERSPROFILE%\Application Data\*.exe /s
  %APPDATA%\*.
  %APPDATA%\*.exe /s
  %systemroot%\*. /mp /s
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\Tasks\*.job
  %systemroot%\system32\drivers\*.sys /lockedfiles
  %systemroot%\System32\config\*.sav
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\system32\drivers\*.sys /3
  %systemroot%\system32\*.* /3
  %SYSTEMDRIVE%\*.exe
  
  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
  reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
  reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
  reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c
  
  %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
  %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
  %PROGRAMFILES%\Opera\opera.exe /md5
  %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5
  
  type c:\boot.ini >> test.txt /c
  %SystemDrive%\PhysicalMBR.bin /md5 
  
  *crack* /s
  *keygen* /s
  *loader* /s

• Kliknete na tlacitko Prohledat
• Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte

Pri skenovani asi po 12 min. to vyhodi hlasku: Cannot create file C:\Users\popino\Desktop\cmd.bat.

OTL Extras logfile created on: 22.1.2012 11:51:56 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\popino\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,99 Gb Total Physical Memory | 2,41 Gb Available Physical Memory | 60,34% Memory free
7,99 Gb Paging File | 6,13 Gb Available in Paging File | 76,72% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 298,08 Gb Total Space | 119,24 Gb Free Space | 40,00% Space Free | Partition Type: NTFS
Drive Z: | 465,76 Gb Total Space | 269,50 Gb Free Space | 57,86% Space Free | Partition Type: NTFS

Computer Name: POPINO-PC | User Name: popino | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-1964065576-2339917071-4016889289-1001\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

========== Authorized Applications List ==========


========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{180C8888-50F1-426B-A9DC-AB83A1989C65}" = Windows Live Language Selector
"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant
"{790E02A1-145A-3843-8C13-A4F41C9B48B7}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0405-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Czech) 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Ovládací panel NVIDIA 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Ovladače grafiky 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Systémový software PhysX 9.11.0621
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizace NVIDIA 1.5.20
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{D326BA84-C743-4303-9274-C4EC1E55F2FF}" = ESET Smart Security
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{E6C44758-FF49-47D1-8182-65E3818ACE23}" = AuthenTec TrueSuite
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX 64-bit
"LSI Soft Modem" = LSI HDA Modem
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Unlocker" = Unlocker 1.9.0-x64
"WinRAR archiver" = WinRAR 4.01 (64-bit)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{1DA6D447-C54D-4833-84D4-3EA31CAECE9B}" = Windows Live UX Platform Language Pack
"{1EE9BBA1-312F-4EC0-9DEA-A8FE22BBABAA}_is1" = 20Dollars2Surf 1.1
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{26A24AE4-039D-4CA4-87B4-2F83216030FF}" = Java(TM) 6 Update 30
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6E810309-4B18-4DC4-A383-F0FB830B02B1}" = AuthenTec Fingerprint Software
"{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE}" = ICQ7.7
"{78906B56-0E81-42A7-AC25-F54C946E1538}" = Windows Live Photo Common
"{7F6D7FD9-648D-4DD9-BB6E-3990C675ECA4}" = NVIDIA PhysX
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0015-0405-0000-0000000FF1CE}_OMUI.cs-cz_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_OMUI.cs-cz_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0017-0405-0000-0000000FF1CE}" = Microsoft Office SharePoint Designer MUI (Czech) 2007
"{90120000-0017-0405-0000-0000000FF1CE}_OMUI.cs-cz_{10545811-A0FE-4F20-AF19-7F85937E9E59}" = Microsoft Office SharePoint Designer 2007 Service Pack 2 (SP2)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_OMUI.cs-cz_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}_OMUI.cs-cz_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}_OMUI.cs-cz_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_OMUI.cs-cz_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_OMUI.cs-cz_{294B4278-CF7B-40B9-86A1-2D3FF0C2C524}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_OMUI.cs-cz_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}_OMUI.cs-cz_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_OMUI.cs-cz_{10EC59E5-9BCE-4884-BB1A-E28627220232}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0405-1000-0000000FF1CE}_OMUI.cs-cz_{E12F9D31-4025-4BC6-B1B2-AB262C5580B0}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0409-1000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2007
"{90120000-0044-0405-0000-0000000FF1CE}_OMUI.cs-cz_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_OMUI.cs-cz_{E12F9D31-4025-4BC6-B1B2-AB262C5580B0}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}_OMUI.cs-cz_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2007
"{90120000-00BA-0405-0000-0000000FF1CE}_OMUI.cs-cz_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0100-0405-0000-0000000FF1CE}" = Microsoft Office O MUI (Czech) 2007
"{90120000-0100-0405-0000-0000000FF1CE}_OMUI.cs-cz_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0101-0405-0000-0000000FF1CE}" = Microsoft Office X MUI (Czech) 2007
"{90120000-0101-0405-0000-0000000FF1CE}_OMUI.cs-cz_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0116-0409-1000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{9170B2A2-FC44-4ec2-AEB6-9052626B2A2E}_is1" = Driver Reviver
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A81A974F-8A22-43E6-9243-5198FF758DA1}" = SweetIM for Messenger 3.6
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AB78C965-5C67-409B-8433-D7B5BDB12073}" = Windows Live Writer Resources
"{AC76BA86-7AD7-1029-7B44-AA1000000001}" = Adobe Reader X (10.1.2) - Czech
"{C454280F-3C3E-4929-B60E-9E6CED5717E7}" = Windows Live Mail
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{E09664BB-BB08-45FA-87D1-33EAB0E017F5}" = Fingerprint Solution
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{FE62C88B-425B-4BDE-8B70-CD5AE3B83176}" = Windows Live Essentials
"abgx360" = abgx360 v1.0.6
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"AnalogX CacheBooster" = AnalogX CacheBooster
"ENTERPRISE" = Microsoft Office Enterprise 2007
"HijackThis" = HijackThis 2.0.2
"InstallShield_{E09664BB-BB08-45FA-87D1-33EAB0E017F5}" = Acer Bio Protection
"LManager" = Launch Manager
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Mozilla Firefox 9.0.1 (x86 cs)" = Mozilla Firefox 9.0.1 (x86 cs)
"OMUI.cs-cz" = Microsoft Office Language Pack 2007 - Czech/èeština
"uTorrent" = µTorrent
"WinLiveSuite" = Windows Live Essentials

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1964065576-2339917071-4016889289-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 15.1.2012 9:41:40 | Computer Name = popino-PC | Source = SideBySide | ID = 16842787
Description = Generování kontextu aktivace pro C:\Program Files (x86)\Reviversoft\Driver
Reviver\mfc90u.dll se nezdařilo. Chyba v souboru manifestu nebo zásady C:\Program
Files (x86)\Reviversoft\Driver Reviver\Microsoft.VC90.MFCLOC.MANIFEST na řádku
4. Identita komponenty nalezená v manifestu nesouhlasí s identitou požadované komponenty.
Odkaz
je Microsoft.VC90.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8".
Definice
je Microsoft.VC90.MFCLOC,processorArchitecture="x86",type="win32",version="9.0.30729.1".
Podrobnější
diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 15.1.2012 9:41:51 | Computer Name = popino-PC | Source = SideBySide | ID = 16842787
Description = Generování kontextu aktivace pro C:\Program Files (x86)\Reviversoft\Driver
Reviver\mfc90u.dll se nezdařilo. Chyba v souboru manifestu nebo zásady C:\Program
Files (x86)\Reviversoft\Driver Reviver\Microsoft.VC90.MFCLOC.MANIFEST na řádku
4. Identita komponenty nalezená v manifestu nesouhlasí s identitou požadované komponenty.
Odkaz
je Microsoft.VC90.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8".
Definice
je Microsoft.VC90.MFCLOC,processorArchitecture="x86",type="win32",version="9.0.30729.1".
Podrobnější
diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 15.1.2012 9:43:15 | Computer Name = popino-PC | Source = SideBySide | ID = 16842787
Description = Generování kontextu aktivace pro C:\Program Files (x86)\Reviversoft\Driver
Reviver\mfc90u.dll se nezdařilo. Chyba v souboru manifestu nebo zásady C:\Program
Files (x86)\Reviversoft\Driver Reviver\Microsoft.VC90.MFCLOC.MANIFEST na řádku
4. Identita komponenty nalezená v manifestu nesouhlasí s identitou požadované komponenty.
Odkaz
je Microsoft.VC90.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8".
Definice
je Microsoft.VC90.MFCLOC,processorArchitecture="x86",type="win32",version="9.0.30729.1".
Podrobnější
diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 15.1.2012 9:43:17 | Computer Name = popino-PC | Source = SideBySide | ID = 16842787
Description = Generování kontextu aktivace pro C:\Program Files (x86)\Reviversoft\Driver
Reviver\mfc90u.dll se nezdařilo. Chyba v souboru manifestu nebo zásady C:\Program
Files (x86)\Reviversoft\Driver Reviver\Microsoft.VC90.MFCLOC.MANIFEST na řádku
4. Identita komponenty nalezená v manifestu nesouhlasí s identitou požadované komponenty.
Odkaz
je Microsoft.VC90.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8".
Definice
je Microsoft.VC90.MFCLOC,processorArchitecture="x86",type="win32",version="9.0.30729.1".
Podrobnější
diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 20.1.2012 7:06:47 | Computer Name = popino-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: ICQ7.exe, verze: 14.0.0.162, časové razítko:
0x4626b2f4 Název chybujícího modulu: MoveIt.dll_unloaded, verze: 0.0.0.0, časové
razítko: 0x4ee6373f Kód výjimky: 0xc0000005 Posun chyby: 0x6b51cf4e ID chybujícího
procesu: 0x11a4 Čas spuštění chybující aplikace: 0x01ccd76370908774 Cesta k chybující
aplikaci: C:\Users\popino\AppData\Local\Temp\{4EEC79BA-7BF5-49A6-85D8-3DABA228F4FF}\ICQ7.exe
Cesta
k chybujícímu modulu: MoveIt.dll ID zprávy: d7f52cb6-4356-11e1-83cb-001d72c81263

Error - 20.1.2012 9:22:45 | Computer Name = popino-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: ICQ7.exe, verze: 14.0.0.162, časové razítko:
0x4626b2f4 Název chybujícího modulu: MoveIt.dll_unloaded, verze: 0.0.0.0, časové
razítko: 0x4ee6373f Kód výjimky: 0xc0000005 Posun chyby: 0x6bf2cf4e ID chybujícího
procesu: 0xa04 Čas spuštění chybující aplikace: 0x01ccd7766101db0c Cesta k chybující
aplikaci: C:\Users\popino\AppData\Local\Temp\{170B1770-AE3A-44B8-AFD2-5934925FCD98}\ICQ7.exe
Cesta
k chybujícímu modulu: MoveIt.dll ID zprávy: d6505605-4369-11e1-8054-001d72c81263

Error - 20.1.2012 10:33:21 | Computer Name = popino-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: ICQ7.exe, verze: 14.0.0.162, časové razítko:
0x4626b2f4 Název chybujícího modulu: MoveIt.dll_unloaded, verze: 0.0.0.0, časové
razítko: 0x4ee6373f Kód výjimky: 0xc0000005 Posun chyby: 0x6beecf4e ID chybujícího
procesu: 0x1130 Čas spuštění chybující aplikace: 0x01ccd77ffc0d53d6 Cesta k chybující
aplikaci: C:\Users\popino\AppData\Local\Temp\{DA8E5791-F2DE-4057-9D3F-25A184BA0AAA}\ICQ7.exe
Cesta
k chybujícímu modulu: MoveIt.dll ID zprávy: b308b766-4373-11e1-9a09-001d72c81263

Error - 20.1.2012 13:05:00 | Computer Name = popino-PC | Source = System Restore | ID = 8200
Description =

Error - 20.1.2012 14:51:56 | Computer Name = popino-PC | Source = SPP | ID = 16388
Description =

Error - 21.1.2012 6:32:42 | Computer Name = popino-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro c:\program files (x86)\spybot - search
& destroy\DelZip179.dll se nezdařilo. Chyba v souboru manifestu nebo zásady c:\program
files (x86)\spybot - search & destroy\DelZip179.dll na řádku 8. Hodnota * atributu
language v prvku assemblyIdentity je neplatná.

[ System Events ]
Error - 8.1.2012 10:41:25 | Computer Name = popino-PC | Source = Service Control Manager | ID = 7034
Description = Služba Služba Windows Media Player Network Sharing byla neočekávaně
ukončena. Tento stav nastal již 3krát.

Error - 8.1.2012 14:53:11 | Computer Name = popino-PC | Source = Service Control Manager | ID = 7009
Description = Při čekání na připojení služby Windows Search bylo dosaženo časového
limitu (60000 ms).

Error - 8.1.2012 14:53:11 | Computer Name = popino-PC | Source = Service Control Manager | ID = 7000
Description = Služba Windows Search neuspěla při spuštění v důsledku následující
chyby: %%1053

Error - 8.1.2012 14:56:42 | Computer Name = popino-PC | Source = Service Control Manager | ID = 7009
Description = Při čekání na připojení služby Windows Search bylo dosaženo časového
limitu (60000 ms).

Error - 8.1.2012 14:56:42 | Computer Name = popino-PC | Source = Service Control Manager | ID = 7000
Description = Služba Windows Search neuspěla při spuštění v důsledku následující
chyby: %%1053

Error - 8.1.2012 14:58:24 | Computer Name = popino-PC | Source = Service Control Manager | ID = 7009
Description = Při čekání na připojení služby Windows Search bylo dosaženo časového
limitu (60000 ms).

Error - 8.1.2012 14:58:24 | Computer Name = popino-PC | Source = Service Control Manager | ID = 7000
Description = Služba Windows Search neuspěla při spuštění v důsledku následující
chyby: %%1053

Error - 10.1.2012 6:47:14 | Computer Name = popino-PC | Source = BTHUSB | ID = 327697
Description = Místní adaptér Bluetooth selhal. Důvod selhaní nebylo možno určit
a adaptér nebude používán. Ovladač vysílače byl vyjmut z paměti.

Error - 15.1.2012 10:01:00 | Computer Name = popino-PC | Source = Service Control Manager | ID = 7030
Description = Služba BootRacerServ je označena jako interaktivní služba. Avšak systém
je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude
fungovat správně.

Error - 20.1.2012 11:44:51 | Computer Name = popino-PC | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (16:43:23, ?20.?1.?2012) bylo neočekávané.


< End of report >

OTL logfile created on: 22.1.2012 11:51:56 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\popino\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,99 Gb Total Physical Memory | 2,41 Gb Available Physical Memory | 60,34% Memory free
7,99 Gb Paging File | 6,13 Gb Available in Paging File | 76,72% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 298,08 Gb Total Space | 119,24 Gb Free Space | 40,00% Space Free | Partition Type: NTFS
Drive Z: | 465,76 Gb Total Space | 269,50 Gb Free Space | 57,86% Space Free | Partition Type: NTFS

Computer Name: POPINO-PC | User Name: popino | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2012.01.22 10:51:23 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\popino\Desktop\OTL.exe
PRC - [2012.01.20 16:50:28 | 000,127,040 | ---- | M] (ICQ, LLC.) -- C:\Program Files (x86)\ICQ7.7\ICQ.exe
PRC - [2012.01.03 14:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011.12.31 22:59:54 | 001,112,072 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LManager.exe
PRC - [2011.10.15 09:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011.09.22 12:03:30 | 000,974,944 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
PRC - [2009.09.05 16:29:06 | 003,449,856 | ---- | M] (Egis Technology Inc.) -- C:\Program Files (x86)\Acer Bio Protection\BASVC.exe
PRC - [2009.09.05 16:28:52 | 003,360,768 | ---- | M] (Egis Technology Inc.) -- C:\Program Files (x86)\Acer Bio Protection\CompPtcVUI.exe
PRC - [2009.08.05 04:40:10 | 001,807,608 | ---- | M] (AuthenTec, Inc.) -- C:\Program Files (x86)\Fingerprint Sensor\AtService.exe


========== Modules (No Company Name) ==========

MOD - [2012.01.05 10:48:44 | 000,411,120 | ---- | M] () -- C:\Users\popino\AppData\Local\Google\Chrome\Application\16.0.912.75\ppgooglenaclpluginchrome.dll
MOD - [2012.01.05 10:48:43 | 003,767,792 | ---- | M] () -- C:\Users\popino\AppData\Local\Google\Chrome\Application\16.0.912.75\pdf.dll
MOD - [2012.01.05 10:47:19 | 000,122,880 | ---- | M] () -- C:\Users\popino\AppData\Local\Google\Chrome\Application\16.0.912.75\avutil-51.dll
MOD - [2012.01.05 10:47:18 | 000,222,208 | ---- | M] () -- C:\Users\popino\AppData\Local\Google\Chrome\Application\16.0.912.75\avformat-53.dll
MOD - [2012.01.05 10:47:17 | 001,746,432 | ---- | M] () -- C:\Users\popino\AppData\Local\Google\Chrome\Application\16.0.912.75\avcodec-53.dll
MOD - [2012.01.05 08:06:01 | 008,593,056 | ---- | M] () -- C:\Users\popino\AppData\Local\Google\Chrome\Application\16.0.912.75\gcswf32.dll
MOD - [2012.01.03 14:24:33 | 012,433,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6e592e424a204aafeadbe22b6b31b9db\System.Windows.Forms.ni.dll
MOD - [2012.01.03 14:24:26 | 001,587,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\3b2cfd85528a27eb71dc41d8067359a1\System.Drawing.ni.dll
MOD - [2012.01.03 14:24:24 | 000,025,600 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Accessibility\31fce331fded94dd06627603f6fe4562\Accessibility.ni.dll
MOD - [2012.01.03 14:24:04 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\130ad4d9719e566ca933ac7158a04203\System.Xml.ni.dll
MOD - [2012.01.03 14:24:01 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\2d5bcbeb9475ef62189f605bcca1cec6\System.Configuration.ni.dll
MOD - [2012.01.03 14:24:00 | 007,963,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\abab08afa60a6f06bdde0fcc9649c379\System.ni.dll
MOD - [2012.01.03 14:23:29 | 011,490,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\a1a82db68b3badc7c27ea1f6579d22c5\mscorlib.ni.dll
MOD - [2011.05.13 14:58:48 | 000,024,936 | ---- | M] () -- C:\Program Files (x86)\Windows Live\Shared\cs\uxctlloc.dll.mui
MOD - [2010.11.05 02:54:38 | 000,204,800 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_cs_b77a5c561934e089\System.resources.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2011.09.22 12:03:30 | 000,974,944 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe -- (ekrn)
SRV:64bit: - [2009.12.03 15:27:24 | 000,028,672 | ---- | M] (LSI Corporation) [Auto | Running] -- C:\Program Files\LSI SoftModem\agr64svc.exe -- (AgereModemAudio)
SRV:64bit: - [2009.07.14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009.07.14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2012.01.03 14:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011.10.15 09:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.09.05 16:29:06 | 003,449,856 | ---- | M] (Egis Technology Inc.) [Auto | Running] -- C:\Program Files (x86)\Acer Bio Protection\BASVC.exe -- (IGBASVC)
SRV - [2009.08.05 04:40:10 | 001,807,608 | ---- | M] (AuthenTec, Inc.) [Auto | Running] -- C:\Program Files (x86)\Fingerprint Sensor\AtService.exe -- (ATService)
SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2012.01.06 12:55:14 | 000,279,616 | ---- | M] (DT Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2011.12.31 23:23:07 | 000,322,608 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2011.09.18 17:26:52 | 008,604,672 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64) ___ Ovladač adaptéru řady Intel(R)
DRV:64bit: - [2011.08.09 14:24:52 | 000,202,576 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm)
DRV:64bit: - [2011.08.04 09:20:38 | 000,187,632 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfw.sys -- (epfw)
DRV:64bit: - [2011.08.04 09:20:38 | 000,146,432 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv)
DRV:64bit: - [2011.08.04 09:20:38 | 000,062,496 | ---- | M] (ESET) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\epfwwfp.sys -- (epfwwfp)
DRV:64bit: - [2011.08.04 09:20:38 | 000,038,288 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\EpfwLWF.sys -- (EpfwLWF)
DRV:64bit: - [2011.03.11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010.11.20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 12:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.20 12:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2009.12.03 16:48:32 | 000,716,872 | ---- | M] (AuthenTec, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ATSwpWDF.sys -- (ATSwpWDF)
DRV:64bit: - [2009.12.03 16:07:04 | 001,224,192 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem)
DRV:64bit: - [2009.09.28 09:22:00 | 000,395,264 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)
DRV:64bit: - [2009.09.15 19:40:42 | 006,952,960 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NETw5s64.sys -- (NETw5s64) Ovladač adaptéru Intel(R)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 21:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64) Intel(R)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.23 11:43:08 | 000,625,152 | ---- | M] (LiteOn) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Ltn_stk7070P.sys -- (Ltn_stk7070P)
DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========



IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1964065576-2339917071-4016889289-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default Download Directory = C:\Users\popino\Desktop
IE - HKU\S-1-5-21-1964065576-2339917071-4016889289-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
IE - HKU\S-1-5-21-1964065576-2339917071-4016889289-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "SweetIM Search"
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "www.seznam.cz"
FF - prefs.js..keyword.URL: "http://search.sweetim.com/search.asp?src=2&q="
FF - prefs.js..network.proxy.type: 4

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\popino\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\popino\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)

64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\PROGRAM FILES\ESET\ESET SMART SECURITY\MOZILLA THUNDERBIRD [2012.01.08 19:21:43 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.01.20 15:05:56 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2012.01.08 19:21:43 | 000,000,000 | ---D | M]

[2011.12.31 22:20:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\popino\AppData\Roaming\Mozilla\Extensions
[2012.01.01 21:49:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\popino\AppData\Roaming\Mozilla\Firefox\Profiles\umew6gaa.default\extensions
[2012.01.01 20:24:04 | 000,000,000 | ---D | M] (FT DeepDark) -- C:\Users\popino\AppData\Roaming\Mozilla\Firefox\Profiles\umew6gaa.default\extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66}
[2012.01.20 15:05:57 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
() (No name found) -- C:\USERS\POPINO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\UMEW6GAA.DEFAULT\EXTENSIONS\CHECK4CHANGE-OWNER@MOZDEV.ORG.XPI
[2012.01.20 15:05:55 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012.01.20 15:05:51 | 000,002,208 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\heureka-cz.xml
[2012.01.20 15:05:51 | 000,000,638 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\jyxo-cz.xml
[2012.01.20 15:05:51 | 000,001,367 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\seznam-cz.xml
[2012.01.20 15:05:51 | 000,000,654 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\slunecnice-cz.xml
[2012.01.20 15:05:51 | 000,001,179 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-cz.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\popino\AppData\Local\Google\Chrome\Application\16.0.912.75\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\popino\AppData\Local\Google\Chrome\Application\16.0.912.75\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\popino\AppData\Local\Google\Chrome\Application\16.0.912.75\gcswf32.dll
CHR - plugin: Google Update (Enabled) = C:\Users\popino\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Users\popino\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.3_0\
CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Users\popino\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.16_0\
CHR - Extension: MaxDark Theme (AERO) = C:\Users\popino\AppData\Local\Google\Chrome\User Data\Default\Extensions\mapjapllioihmnbmmbflnndnmambmbpl\7.1_2\
CHR - Extension: Gmail = C:\Users\popino\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O4:64bit: - HKLM..\Run: [] File not found
O4:64bit: - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4 - HKLM..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ShutdownSessionTimeout = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1964065576-2339917071-4016889289-1001\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1964065576-2339917071-4016889289-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1964065576-2339917071-4016889289-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8:64bit: - Extra context menu item: Search the Web - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html File not found
O8 - Extra context menu item: Search the Web - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html File not found
O9:64bit: - Extra Button: Quick-Launch Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files (x86)\Acer Bio Protection\PwdBank.exe (Egis Technology Inc.)
O9:64bit: - Extra 'Tools' menuitem : Quick-Launch Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files (x86)\Acer Bio Protection\PwdBank.exe (Egis Technology Inc.)
O9 - Extra Button: Quick-Launch Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files (x86)\Acer Bio Protection\PwdBank.exe (Egis Technology Inc.)
O9 - Extra 'Tools' menuitem : Quick-Launch Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files (x86)\Acer Bio Protection\PwdBank.exe (Egis Technology Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_30)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.68.36.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7E09FFFF-9D28-4E61-A9D5-66196523A29D}: DhcpNameServer = 10.68.36.1
O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2012.01.22 10:51:08 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\popino\Desktop\OTL.exe
[2012.01.22 10:46:46 | 000,000,000 | ---D | C] -- C:\rsit
[2012.01.22 10:40:14 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Local\{BBEFE832-195B-4D78-AECB-C9861AB05EE5}
[2012.01.22 10:39:52 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Local\{59AC3F12-EC7D-4832-B4A9-4A4477F8E3C0}
[2012.01.21 12:51:49 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Local\{EEACE96C-72FE-40E8-9130-89B28543241A}
[2012.01.21 12:51:35 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Local\{2927BB56-98A9-4DBB-B24B-28D44C653EFB}
[2012.01.21 10:47:34 | 000,401,720 | ---- | C] (Trend Micro Inc.) -- C:\Users\popino\Desktop\HijackThis.exe
[2012.01.21 00:51:32 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Local\{A2343D2E-31C5-4229-A9CD-85718FF5BDAF}
[2012.01.21 00:51:18 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Local\{3A51AC3B-31A9-4A39-A26A-30330BF6C79C}
[2012.01.20 20:00:04 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
[2012.01.20 20:00:04 | 000,000,000 | ---D | C] -- C:\Program Files\Unlocker
[2012.01.20 18:25:21 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2012.01.20 18:12:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2012.01.20 16:59:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ICQ7.7
[2012.01.20 16:50:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ICQ7.7
[2012.01.20 15:58:05 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Roaming\Malwarebytes
[2012.01.20 15:58:00 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2012.01.20 15:58:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.01.20 15:57:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.01.20 15:57:56 | 000,024,152 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012.01.20 15:57:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012.01.20 13:59:46 | 000,000,000 | ---D | C] -- C:\Users\popino\Desktop\Satelit
[2012.01.20 11:10:22 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Local\{0BFDC0E5-0CFD-4DAA-8F0F-8EAC74F1DD65}
[2012.01.20 11:10:20 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Local\{85421CD6-6F5B-424F-BBA4-8B86942A0275}
[2012.01.19 22:28:39 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Local\{1FC5CE53-7C8D-4C36-8640-DB71C43A547B}
[2012.01.19 22:28:25 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Local\{D96D8E7E-6A7D-4FE3-9424-9A564705A686}
[2012.01.19 10:28:21 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Local\{EE7EA08F-BB87-4938-BC7D-DE1030BD78A6}
[2012.01.19 10:28:19 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Local\{19D1DA25-9F08-4479-BB0B-A96D95C5BB37}
[2012.01.18 14:00:10 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Roaming\Skype
[2012.01.18 14:00:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2012.01.18 14:00:03 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2012.01.18 13:59:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2012.01.18 11:34:23 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Local\{2042BFE2-7DAF-424D-A464-EDE8E5380EE3}
[2012.01.18 11:34:11 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Local\{DB068BA6-E40B-4B41-A9C3-96694B9B6C88}
[2012.01.17 14:20:00 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Local\{7D873FB1-C2CB-4AA5-8658-4B382494324E}
[2012.01.17 14:19:56 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Local\{E16A5D9A-F2C8-4753-9044-74F9ACCAAB76}
[2012.01.16 21:51:32 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Local\{51D3A073-2440-49D2-82D7-9CC971B6005A}
[2012.01.16 21:51:23 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Local\{C677B72F-89DA-4F04-BA07-913DE2319E3A}
[2012.01.16 09:51:19 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Local\{592C811E-0EB8-4B63-AF8F-795A832E57FF}
[2012.01.16 09:51:05 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Local\{22C84FA5-8026-4AFB-ABAC-CFF6130827A6}
[2012.01.15 15:16:33 | 000,000,000 | ---D | C] -- C:\ProgramData\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}
[2012.01.15 15:08:01 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Local\PackageAware
[2012.01.15 14:38:06 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnalogX
[2012.01.15 14:35:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AnalogX
[2012.01.15 14:21:49 | 000,000,000 | ---D | C] -- C:\Users\popino\AppData\Roaming\Reviversoft
[2012.01.15 14:21:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reviversoft
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2012.01.22 11:54:30 | 001,679,680 | ---- | M] () -- C:\Users\popino\Desktop\Nepotvrzeno 71828.crdownload
[2012.01.22 11:53:40 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012.01.22 11:48:00 | 000,000,966 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1964065576-2339917071-4016889289-1001UA.job
[2012.01.22 10:51:23 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\popino\Desktop\OTL.exe
[2012.01.22 10:39:35 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.01.21 22:48:00 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1964065576-2339917071-4016889289-1001Core.job
[2012.01.21 22:38:13 | 009,865,998 | ---- | M] () -- C:\Users\popino\Desktop\Taio-Cruz-ft.-Flo-Rida---Hangover.mp3
[2012.01.21 22:35:24 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2012.01.21 22:31:40 | 010,809,502 | ---- | M] () -- C:\Users\popino\Desktop\Flo-Rida-Good-Feeling-Official-Video-[mp3s.nadruhou.net].mp3
[2012.01.21 12:27:32 | 000,634,546 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2012.01.21 12:27:32 | 000,618,912 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.01.21 12:27:32 | 000,123,104 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2012.01.21 12:27:32 | 000,107,232 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.01.21 12:27:31 | 001,478,586 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.01.21 11:02:16 | 000,935,175 | ---- | M] () -- C:\Users\popino\Desktop\RSITx64.exe
[2012.01.21 10:59:14 | 000,014,224 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.01.21 10:59:14 | 000,014,224 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.01.21 10:47:34 | 000,401,720 | ---- | M] (Trend Micro Inc.) -- C:\Users\popino\Desktop\HijackThis.exe
[2012.01.20 19:53:39 | 3217,182,720 | -HS- | M] () -- C:\hiberfil.sys
[2012.01.20 13:33:41 | 000,000,456 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2012.01.15 15:17:17 | 000,001,563 | ---- | M] () -- C:\Windows\uninstall_bootracer
[2012.01.15 15:07:50 | 000,000,189 | -H-- | M] () -- C:\Users\Public\Documents\bootracer.ini
[2012.01.15 15:03:58 | 000,004,096 | -H-- | M] () -- C:\Users\Public\Documents\bootracer.his
[2012.01.15 15:01:01 | 000,001,563 | ---- | M] () -- C:\Windows\bootracer
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.01.22 10:56:14 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012.01.21 22:36:41 | 009,865,998 | ---- | C] () -- C:\Users\popino\Desktop\Taio-Cruz-ft.-Flo-Rida---Hangover.mp3
[2012.01.21 22:35:24 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2012.01.21 22:31:00 | 010,809,502 | ---- | C] () -- C:\Users\popino\Desktop\Flo-Rida-Good-Feeling-Official-Video-[mp3s.nadruhou.net].mp3
[2012.01.21 11:02:16 | 000,935,175 | ---- | C] () -- C:\Users\popino\Desktop\RSITx64.exe
[2012.01.15 15:17:11 | 000,001,563 | ---- | C] () -- C:\Windows\uninstall_bootracer
[2012.01.15 15:03:19 | 000,004,096 | -H-- | C] () -- C:\Users\Public\Documents\bootracer.his
[2012.01.15 15:01:02 | 000,000,189 | -H-- | C] () -- C:\Users\Public\Documents\bootracer.ini
[2012.01.15 15:00:51 | 000,001,563 | ---- | C] () -- C:\Windows\bootracer
[2012.01.03 16:12:12 | 001,495,982 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012.01.03 14:23:47 | 000,000,011 | ---- | C] () -- C:\Windows\Disney.ini
[2012.01.03 14:23:28 | 000,010,240 | ---- | C] () -- C:\Windows\SysWow64\vidx16.dll
[2012.01.03 08:28:06 | 002,570,286 | ---- | C] () -- C:\Windows\SysWow64\abgx360.exe
[2012.01.03 01:00:22 | 000,000,456 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2012.01.02 20:04:24 | 000,007,598 | ---- | C] () -- C:\Users\popino\AppData\Local\Resmon.ResmonCfg
[2012.01.01 20:56:14 | 000,000,000 | ---- | C] () -- C:\ProgramData\505b78ea5f5316c12eab859dad61d532_c
[2011.12.31 22:20:34 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat

========== LOP Check ==========

[2012.01.09 14:29:44 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\abgx360
[2012.01.15 15:18:54 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\DAEMON Tools Lite
[2012.01.08 19:23:41 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\ESET
[2012.01.20 16:59:47 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\ICQ
[2012.01.04 14:28:01 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\OpenCandy
[2012.01.15 14:21:49 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\Reviversoft
[2012.01.02 23:28:55 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\Smart PC Solutions
[2012.01.02 09:43:20 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\uTorrent
[2012.01.01 10:31:38 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\Windows Live Writer
[2009.07.14 06:08:49 | 000,016,374 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========


< >

< >


< MD5 for: ATAPI.SYS >
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010.11.20 14:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010.11.20 14:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2009.07.14 02:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2009.07.14 02:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_3de8def0db722996\autochk.exe
[2008.04.14 08:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\cmdcons\autochk.exe
[2010.11.20 13:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010.11.20 13:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009.07.14 00:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys
[2010.11.20 10:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010.11.20 10:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010.11.20 10:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2011.02.26 07:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\explorer.exe
[2011.02.26 07:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011.02.26 06:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011.02.26 07:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010.11.20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2009.08.03 07:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2009.10.31 07:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009.08.03 06:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010.11.20 14:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2009.10.31 07:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009.08.03 06:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009.07.14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009.10.31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2011.02.26 07:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2009.08.03 07:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe

< MD5 for: HAL.DLL >
[2009.07.14 02:47:48 | 000,263,232 | ---- | M] (Microsoft Corporation) MD5=C0A6F6E05E14FBCAEDE7796C8590B7AC -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_071de44b735b3dfc\hal.dll
[2010.11.20 14:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010.11.20 14:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: SCECLI.DLL >
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 02:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.20 14:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.20 14:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SVCHOST.EXE >
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009.07.14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009.07.14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2011.04.25 06:28:24 | 001,893,248 | ---- | M] (Microsoft Corporation) MD5=1F748D5439B65E0BEBD92F65048F030D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20951_none_0fb918de99201ffb\tcpip.sys
[2011.09.29 18:41:37 | 001,912,176 | ---- | M] (Microsoft Corporation) MD5=3810F06A4D74A7D62641EE73D6B3C660 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21828_none_11c6e9949627e69c\tcpip.sys
[2010.11.20 14:33:57 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2011.04.25 06:32:22 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=61DC720BB065D607D5823F13D2A64321 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16802_none_0f668bf97fd90dd3\tcpip.sys
[2009.07.14 02:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys
[2011.04.25 06:33:51 | 001,923,968 | ---- | M] (Microsoft Corporation) MD5=92CE29D95AC9DD2D0EE9061D551BA250 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17603_none_114de9497cfe9316\tcpip.sys
[2011.09.29 17:17:51 | 001,886,064 | ---- | M] (Microsoft Corporation) MD5=AC3E29880DB5659532A1AA3439304A43 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21060_none_0fad20ca992955d7\tcpip.sys
[2011.04.25 07:16:34 | 001,927,552 | ---- | M] (Microsoft Corporation) MD5=B77977AEB2FF159D01DB08A309989C5F -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21712_none_11cbb5de9625357a\tcpip.sys
[2011.09.29 17:24:44 | 001,897,328 | ---- | M] (Microsoft Corporation) MD5=F18F56EFC0BFB9C87BA01C37B27F4DA5 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16889_none_0f170e9f80139ebc\tcpip.sys
[2011.09.29 17:29:28 | 001,923,952 | ---- | M] (Microsoft Corporation) MD5=FC62769E7BFF2896035AEED399108162 -- C:\Windows\SysNative\drivers\tcpip.sys
[2011.09.29 17:29:28 | 001,923,952 | ---- | M] (Microsoft Corporation) MD5=FC62769E7BFF2896035AEED399108162 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17697_none_10f09b257d43f3eb\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010.11.20 14:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.20 14:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010.11.20 14:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010.11.20 14:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009.07.14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2009.10.28 08:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2009.10.28 07:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

< >

< %systemroot%*.* /U /s >
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[2 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[8 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\0046bd816e918e1cd23bfc35d0bf4738\*.tmp files -> C:\Windows\SoftwareDistribution\Download\0046bd816e918e1cd23bfc35d0bf4738\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\00d92fe5ddc61506122252f4568ca10b\*.tmp files -> C:\Windows\SoftwareDistribution\Download\00d92fe5ddc61506122252f4568ca10b\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\0ad334ca22963efa20822ed19c83876a\*.tmp files -> C:\Windows\SoftwareDistribution\Download\0ad334ca22963efa20822ed19c83876a\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\0b4b6e4db76f2d7019ac95940ccaeb10\*.tmp files -> C:\Windows\SoftwareDistribution\Download\0b4b6e4db76f2d7019ac95940ccaeb10\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\0bd68b79d208b69b1d2a1704d6f571f3\*.tmp files -> C:\Windows\SoftwareDistribution\Download\0bd68b79d208b69b1d2a1704d6f571f3\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\0c84742169a0e6fc9830e49da6f14881\*.tmp files -> C:\Windows\SoftwareDistribution\Download\0c84742169a0e6fc9830e49da6f14881\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\1a16e82ccf2aedd4f14721f030887c10\*.tmp files -> C:\Windows\SoftwareDistribution\Download\1a16e82ccf2aedd4f14721f030887c10\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\22686afa759ad1bbc0b88b3b40ceeeeb\*.tmp files -> C:\Windows\SoftwareDistribution\Download\22686afa759ad1bbc0b88b3b40ceeeeb\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\24f0c1a84ac34455cd6e96fb81e3bd9c\*.tmp files -> C:\Windows\SoftwareDistribution\Download\24f0c1a84ac34455cd6e96fb81e3bd9c\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\2e9f90c1fc608e5b6592b4315a89bd7e\*.tmp files -> C:\Windows\SoftwareDistribution\Download\2e9f90c1fc608e5b6592b4315a89bd7e\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\2f00439d478ad76fc0ba49d018ea7d78\*.tmp files -> C:\Windows\SoftwareDistribution\Download\2f00439d478ad76fc0ba49d018ea7d78\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\3d3d81025e02e7b37166619681b26bc7\*.tmp files -> C:\Windows\SoftwareDistribution\Download\3d3d81025e02e7b37166619681b26bc7\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\4a3c94505d5ed5e2b3f2257fcc1a8b4a\*.tmp files -> C:\Windows\SoftwareDistribution\Download\4a3c94505d5ed5e2b3f2257fcc1a8b4a\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\4fb77267f77150068cd93c98c7ed6725\*.tmp files -> C:\Windows\SoftwareDistribution\Download\4fb77267f77150068cd93c98c7ed6725\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\5b7181b3b2cead4e46dc6404a74548f1\*.tmp files -> C:\Windows\SoftwareDistribution\Download\5b7181b3b2cead4e46dc6404a74548f1\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\5ecc958cf1888c0eb658783767e72ab0\*.tmp files -> C:\Windows\SoftwareDistribution\Download\5ecc958cf1888c0eb658783767e72ab0\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\5f6328e4ae044e83f1e8acc2207be577\*.tmp files -> C:\Windows\SoftwareDistribution\Download\5f6328e4ae044e83f1e8acc2207be577\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\5f685afc546781b0d6c810b43e47e8a4\*.tmp files -> C:\Windows\SoftwareDistribution\Download\5f685afc546781b0d6c810b43e47e8a4\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\62436a59c786a147ce2be50abb2ec760\*.tmp files -> C:\Windows\SoftwareDistribution\Download\62436a59c786a147ce2be50abb2ec760\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\6254b0afb75738dfecf8aae26fe4d2a4\*.tmp files -> C:\Windows\SoftwareDistribution\Download\6254b0afb75738dfecf8aae26fe4d2a4\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\664db1ae97b7a3678983f78252ecab85\*.tmp files -> C:\Windows\SoftwareDistribution\Download\664db1ae97b7a3678983f78252ecab85\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\7a55920cd0a5face70167670a3a1b10c\*.tmp files -> C:\Windows\SoftwareDistribution\Download\7a55920cd0a5face70167670a3a1b10c\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\813a71b311aa45770defbffab439fdb7\*.tmp files -> C:\Windows\SoftwareDistribution\Download\813a71b311aa45770defbffab439fdb7\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\821770186b2275f82265ae996d339310\*.tmp files -> C:\Windows\SoftwareDistribution\Download\821770186b2275f82265ae996d339310\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\87a15898dcf7537edc861f08d69b550c\*.tmp files -> C:\Windows\SoftwareDistribution\Download\87a15898dcf7537edc861f08d69b550c\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\89022a070100f44a14cc08c69201840a\*.tmp files -> C:\Windows\SoftwareDistribution\Download\89022a070100f44a14cc08c69201840a\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\932c29bfb6b98dc70ded67928a871195\*.tmp files -> C:\Windows\SoftwareDistribution\Download\932c29bfb6b98dc70ded67928a871195\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\9af7b9da07f7666f7dfdfac9095bcd5a\*.tmp files -> C:\Windows\SoftwareDistribution\Download\9af7b9da07f7666f7dfdfac9095bcd5a\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\a412981cbad7898153c8ce7f0c075440\*.tmp files -> C:\Windows\SoftwareDistribution\Download\a412981cbad7898153c8ce7f0c075440\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\a557e10302b2f62aa18c7b4e8222e449\*.tmp files -> C:\Windows\SoftwareDistribution\Download\a557e10302b2f62aa18c7b4e8222e449\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\aad570e66ed99476ffc34f33ccbc37c7\*.tmp files -> C:\Windows\SoftwareDistribution\Download\aad570e66ed99476ffc34f33ccbc37c7\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\aeeccf5c490ac3daa8c43fdff4de8226\*.tmp files -> C:\Windows\SoftwareDistribution\Download\aeeccf5c490ac3daa8c43fdff4de8226\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\af2a9aaceb2ef618ea08ce81659857b2\*.tmp files -> C:\Windows\SoftwareDistribution\Download\af2a9aaceb2ef618ea08ce81659857b2\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\b331b5cc58ca0235f3454d37bcb34d86\*.tmp files -> C:\Windows\SoftwareDistribution\Download\b331b5cc58ca0235f3454d37bcb34d86\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\b7dc53891d2c2a9eb3326342c2894d1e\*.tmp files -> C:\Windows\SoftwareDistribution\Download\b7dc53891d2c2a9eb3326342c2894d1e\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\bf113fb7e83bb9aff81ee89f6f722e57\*.tmp files -> C:\Windows\SoftwareDistribution\Download\bf113fb7e83bb9aff81ee89f6f722e57\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\c20a9125d57fc9edbd48bd80e0026711\*.tmp files -> C:\Windows\SoftwareDistribution\Download\c20a9125d57fc9edbd48bd80e0026711\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\c54b64b251072f2dff7333213bbf6385\*.tmp files -> C:\Windows\SoftwareDistribution\Download\c54b64b251072f2dff7333213bbf6385\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\c736709f4588b90de21ce555b085f95b\*.tmp files -> C:\Windows\SoftwareDistribution\Download\c736709f4588b90de21ce555b085f95b\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\d55a14789bec06b41b5bf4303a9e3241\*.tmp files -> C:\Windows\SoftwareDistribution\Download\d55a14789bec06b41b5bf4303a9e3241\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\d8c68badd7342cedbe21fa7b2c7fb391\*.tmp files -> C:\Windows\SoftwareDistribution\Download\d8c68badd7342cedbe21fa7b2c7fb391\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\dedb0e931c1338c5e605dbd9edfadd4f\*.tmp files -> C:\Windows\SoftwareDistribution\Download\dedb0e931c1338c5e605dbd9edfadd4f\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\e030863d1d53835df3d8d9730f4db89a\*.tmp files -> C:\Windows\SoftwareDistribution\Download\e030863d1d53835df3d8d9730f4db89a\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\e73746ab9933d0c32701f5327579409e\*.tmp files -> C:\Windows\SoftwareDistribution\Download\e73746ab9933d0c32701f5327579409e\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\ec5650d535594938fe1aa37c3e884d75\*.tmp files -> C:\Windows\SoftwareDistribution\Download\ec5650d535594938fe1aa37c3e884d75\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\ece4dba0e091883db28d2711324ac3f7\*.tmp files -> C:\Windows\SoftwareDistribution\Download\ece4dba0e091883db28d2711324ac3f7\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\f0e45ab57c22256147a8ec1cb04ff502\*.tmp files -> C:\Windows\SoftwareDistribution\Download\f0e45ab57c22256147a8ec1cb04ff502\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\f5e8bd4a529c7016d8aca70084481201\*.tmp files -> C:\Windows\SoftwareDistribution\Download\f5e8bd4a529c7016d8aca70084481201\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\fe949a49f0c30491d8f81136cc3166df\*.tmp files -> C:\Windows\SoftwareDistribution\Download\fe949a49f0c30491d8f81136cc3166df\*.tmp -> ]
[2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[2 C:\Windows\SysWOW64\*.tmp files -> C:\Windows\SysWOW64\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2012.01.09 14:29:44 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\abgx360
[2012.01.02 09:27:05 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\Adobe
[2012.01.15 15:18:54 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\DAEMON Tools Lite
[2012.01.08 19:23:41 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\ESET
[2012.01.20 16:59:47 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\ICQ
[2011.12.31 21:48:33 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\Identities
[2012.01.01 00:48:12 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\Macromedia
[2012.01.20 15:58:05 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\Malwarebytes
[2009.07.14 16:36:38 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\Media Center Programs
[2012.01.03 17:11:44 | 000,000,000 | --SD | M] -- C:\Users\popino\AppData\Roaming\Microsoft
[2011.12.31 22:20:55 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\Mozilla
[2012.01.04 14:28:01 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\OpenCandy
[2012.01.15 14:21:49 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\Reviversoft
[2012.01.18 14:34:52 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\Skype
[2012.01.02 23:28:55 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\Smart PC Solutions
[2012.01.02 09:43:20 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\uTorrent
[2012.01.01 10:31:38 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\Windows Live Writer
[2012.01.01 10:02:52 | 000,000,000 | ---D | M] -- C:\Users\popino\AppData\Roaming\WinRAR

< %APPDATA%\*.exe /s >
[2011.11.18 05:30:06 | 002,081,208 | ---- | M] (Speedchecker Limited ) -- C:\Users\popino\AppData\Roaming\OpenCandy\7B6A5E6FB2404C6897DC7A66149F4D56\pcspeedup_oc.exe
[2012.01.15 14:33:10 | 131,619,416 | ---- | M] (NVIDIA Corporation) -- C:\Users\popino\AppData\Roaming\Reviversoft\DRST\Driver Reviver\Download\hdaudiofunc_01&ven_10de&dev_0006.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[2 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job >
[2012.01.21 22:48:00 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1964065576-2339917071-4016889289-1001Core.job
[2012.01.22 11:48:00 | 000,000,966 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1964065576-2339917071-4016889289-1001UA.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >
[2 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >
[2012.01.20 15:05:54 | 000,924,632 | ---- | M] (Mozilla Corporation) MD5=11CCA710674739E3DB8F7450A5B650B6 -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2012.01.01 14:54:36 | 000,748,336 | ---- | M] (Microsoft Corporation) MD5=904E13BA41AF2E353A32CF351CA53639 -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >

< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >

< >

< type c:\boot.ini >> test.txt /c >
[boot loader]
timeout=3
default=C:\CMDCONS\BOOTSECT.DAT
[operating systems]
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2012.01.22 11:53:40 | 000,000,512 | ---- | M] () MD5=5E4BE6C65D0EA84BC2DDC2CD45211108 -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2012.01.01 16:50:31 | 000,004,328 | ---- | M] () -- \Users\popino\Desktop\Jdownloader\jd\plugins\hoster\CrackedCom.class
[2012.01.04 19:04:42 | 005,310,378 | ---- | M] () -- \Users\popino\Documents\Programy\Aktualizace Driver\ReviverSoft Driver Reviver 3.1.648 + Crack.rar

< *keygen* /s >
[2010.12.22 08:18:03 | 000,082,298 | ---- | M] () -- \Users\popino\Documents\Programy\Malwarebytes\KEYGEN-FFF.rar
[2010.12.22 08:18:07 | 000,407,430 | ---- | M] () -- \Users\popino\Documents\Programy\Malwarebytes\keygen-SND.rar
[2011.03.07 18:01:49 | 000,287,232 | ---- | M] () -- \Users\popino\Documents\Programy\Malwarebytes\lznnpb01\lznnpb01\Linezer0\Lz0\Keygen.exe

< *loader* /s >
[2006.10.26 13:40:34 | 000,057,344 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\coloader.dll
[2006.10.26 13:40:34 | 000,005,120 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\coloader.tlb
[2012.01.20 16:50:23 | 000,005,795 | ---- | M] () -- \Program Files (x86)\ICQ7.7\imApp\theme\IMAGES\XtraPreloader\loader.jpg
[2012.01.20 16:50:24 | 000,004,180 | ---- | M] () -- \Program Files (x86)\ICQ7.7\imApp\theme\IMAGES\XtraPreloader\zlango-preloader.png
[2012.01.20 16:50:22 | 000,005,520 | ---- | M] () -- \Program Files (x86)\ICQ7.7\imApp\theme\MUICoreLib\xtraLoader.swf
[2012.01.20 17:01:05 | 000,000,402 | ---- | M] () -- \Program Files (x86)\ICQ7.7\Xtraz\icq\content\profile_lightboxs\preloader.html
[2009.10.26 21:52:34 | 000,214,528 | ---- | M] () -- \Program Files (x86)\JDownloader\JDownloader.exe
[2009.10.06 23:48:58 | 000,000,113 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\img\hosterlogos\uploader.pl.png
[2009.10.30 19:18:06 | 000,003,264 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\plugins\hoster\IPAUploaderCom.class
[2009.10.30 19:18:06 | 000,006,360 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\plugins\hoster\UploaderPl.class
[2009.10.26 21:48:22 | 000,032,222 | ---- | M] () -- \Program Files (x86)\JDownloader\licenses\jdownloader.license
[2009.05.31 03:21:00 | 000,071,008 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2009.05.31 18:21:00 | 000,073,568 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader64.dll
[2011.01.07 17:32:18 | 000,272,192 | ---- | M] () -- \Program Files (x86)\Reviversoft\Driver Reviver\Downloader.dll
[2011.05.28 22:04:04 | 000,054,784 | ---- | M] () -- \Program Files\WinRAR\Formats\ace32loader.exe
[2012.01.04 16:37:04 | 000,001,104 | ---- | M] () -- \Users\popino\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\JDownloader – zástupce.lnk
[2012.01.02 09:59:18 | 000,001,104 | ---- | M] () -- \Users\popino\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\JDownloader – zástupce.lnk
[2012.01.01 16:26:26 | 000,000,396 | ---- | M] () -- \Users\popino\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader\JDownloader Support.lnk
[2012.01.01 16:26:26 | 000,000,831 | ---- | M] () -- \Users\popino\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader\JDownloader.lnk
[2012.01.01 16:26:27 | 000,000,821 | ---- | M] () -- \Users\popino\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader\Uninstall JDownloader.lnk
[2009.10.26 21:52:34 | 000,214,528 | ---- | M] () -- \Users\popino\Desktop\Jdownloader\JDownloader.exe
[2012.01.01 16:47:54 | 000,593,293 | ---- | M] () -- \Users\popino\Desktop\Jdownloader\JDownloader.jar
[2012.01.08 18:16:18 | 000,000,105 | ---- | M] () -- \Users\popino\Desktop\Jdownloader\jd\img\hosterlogos\jdupdateloader.png
[2009.10.06 23:48:58 | 000,000,113 | ---- | M] () -- \Users\popino\Desktop\Jdownloader\jd\img\hosterlogos\uploader.pl.png
[2009.10.30 19:18:06 | 000,003,264 | ---- | M] () -- \Users\popino\Desktop\Jdownloader\jd\plugins\hoster\IPAUploaderCom.class
[2012.01.01 16:48:54 | 000,007,073 | ---- | M] () -- \Users\popino\Desktop\Jdownloader\jd\plugins\hoster\UploaderPl.class
[2009.10.26 21:48:22 | 000,032,222 | ---- | M] () -- \Users\popino\Desktop\Jdownloader\licenses\jdownloader.license
[2010.02.05 23:27:16 | 000,000,015 | ---- | M] () -- \Users\popino\Documents\Programy\Eset Smart Security a ESET NOD32 Antivirus 5.0.94.0 CZ (x86,x64Bit) Complet\3) TNODUP 1.4.1 Final\TNod User & Password Finder\Licenses Downloader.bat
[2010.02.06 00:27:16 | 000,000,015 | ---- | M] () -- \Users\popino\Documents\Programy\ESET Smart Security\5.0.93.8-x32Bit\TNod-1.4.1\Licenses Downloader.bat
[2011.01.14 16:51:57 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part01.rar
[2011.01.14 17:06:53 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part02.rar
[2011.01.14 17:22:13 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part03.rar
[2011.01.14 17:35:31 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part04.rar
[2011.01.14 17:48:36 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part05.rar
[2011.01.14 18:01:48 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part06.rar
[2011.01.14 18:15:45 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part07.rar
[2011.01.14 18:45:35 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part08.rar
[2011.01.14 18:41:05 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part09.rar
[2011.01.14 18:59:14 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part10.rar
[2011.01.14 19:13:13 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part11.rar
[2011.01.14 19:26:31 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part12.rar
[2011.01.14 19:40:24 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part13.rar
[2011.01.14 19:53:44 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part14.rar
[2011.01.14 20:24:03 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part15.rar
[2011.01.14 20:23:47 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part16.rar
[2011.01.14 20:38:27 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part17.rar
[2011.01.14 20:52:19 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part18.rar
[2011.01.14 21:08:17 | 174,699,814 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part19.rar
[2009.11.28 23:34:24 | 000,001,463 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove - DVD 5\Pahyl.of.sMs.Uploaders.lnk
[2009.11.28 10:05:50 | 000,000,117 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove - DVD 5\sMs Uploaders Forum.url
[2012.01.06 12:31:32 | 000,082,784 | ---- | M] () -- \Windows\assembly\GAC\IALoader\1.7.6223.0__31bf3856ad364e35\IALoader.dll
[2009.07.14 13:25:34 | 002,202,645 | R--- | M] () -- \Windows\Setup\SCRIPTS\Windows7Loader.exe
[2011.02.05 14:09:50 | 000,005,799 | ---- | M] () -- \Windows\SoftwareDistribution\Download\c20a9125d57fc9edbd48bd80e0026711\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_9c05f879842e1792.manifest
[2011.02.05 14:05:03 | 000,005,799 | ---- | M] () -- \Windows\SoftwareDistribution\Download\c20a9125d57fc9edbd48bd80e0026711\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7600.20897_none_9c6455949d6c2720.manifest
[2011.02.05 18:34:40 | 000,005,799 | ---- | M] () -- \Windows\SoftwareDistribution\Download\c20a9125d57fc9edbd48bd80e0026711\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_9deb553581556a27.manifest
[2011.02.05 14:10:12 | 000,005,799 | ---- | M] () -- \Windows\SoftwareDistribution\Download\c20a9125d57fc9edbd48bd80e0026711\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_9e73f1b69a73f09a.manifest
[2 \Windows\SoftwareDistribution\Download\c20a9125d57fc9edbd48bd80e0026711\*.tmp files -> \Windows\SoftwareDistribution\Download\c20a9125d57fc9edbd48bd80e0026711\*.tmp -> ]
[2011.07.16 05:15:45 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2 \Windows\System32\*.tmp files -> \Windows\System32\*.tmp -> ]
[2011.07.16 05:15:45 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[2 \Windows\SysWOW64\*.tmp files -> \Windows\SysWOW64\*.tmp -> ]
[2009.07.14 02:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009.07.14 02:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:04:54 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16850_none_66c2596d956d1920\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:06:43 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21010_none_67770e0aae6a7c68\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:21:03 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_68a9b6bd92929e63\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:12:44 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_691eb3faabbf8f66\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 16:17:49 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009.07.14 16:17:49 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.efi.mui_35ee487d
[2009.07.14 16:17:49 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.exe.mui_3bc5b827
[2009.07.14 16:17:49 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.efi.mui_f412814e
[2009.07.14 16:17:49 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.exe.mui_ff8b5358
[2012.01.02 12:09:27 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2012.01.02 12:09:27 | 000,642,944 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.efi_75834aa0
[2012.01.02 12:09:27 | 000,605,552 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.exe_75835076
[2012.01.02 12:09:27 | 000,566,208 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.efi_85cd069f
[2012.01.02 12:09:27 | 000,518,672 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.exe_85cd1215
[2009.07.14 03:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 03:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2009.07.14 16:15:51 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009.07.14 03:13:42 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_b71babd98657e6ef.manifest
[2011.02.05 14:09:31 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_b73e23c9863dba66.manifest
[2011.02.05 14:04:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.20897_none_b79c80e49f7bc9f4.manifest
[2010.11.20 06:12:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011.02.05 18:34:23 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011.02.05 14:09:57 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2009.07.14 03:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 02:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:19:58 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16850_none_0aa3bde9dd0fa7ea\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:12:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21010_none_0b587286f60d0b32\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:15:45 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_0c8b1b39da352d2d\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:36:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_0d001876f3621e30\api-ms-win-core-libraryloader-l1-1-0.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 6248 bytes -> C:\Windows\PLA\System\System Diagnostics.xml:0v1ieca3Feahez0jAwxjjk5uRh
@Alternate Data Stream - 137 bytes -> C:\ProgramData\TEMP:CC2DDA0D

< End of report >

popino píše:< *loader* /s >
[2006.10.26 13:40:34 | 000,057,344 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\coloader.dll
[2006.10.26 13:40:34 | 000,005,120 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\coloader.tlb
[2012.01.20 16:50:23 | 000,005,795 | ---- | M] () -- \Program Files (x86)\ICQ7.7\imApp\theme\IMAGES\XtraPreloader\loader.jpg
[2012.01.20 16:50:24 | 000,004,180 | ---- | M] () -- \Program Files (x86)\ICQ7.7\imApp\theme\IMAGES\XtraPreloader\zlango-preloader.png
[2012.01.20 16:50:22 | 000,005,520 | ---- | M] () -- \Program Files (x86)\ICQ7.7\imApp\theme\MUICoreLib\xtraLoader.swf
[2012.01.20 17:01:05 | 000,000,402 | ---- | M] () -- \Program Files (x86)\ICQ7.7\Xtraz\icq\content\profile_lightboxs\preloader.html
[2009.10.26 21:52:34 | 000,214,528 | ---- | M] () -- \Program Files (x86)\JDownloader\JDownloader.exe
[2009.10.06 23:48:58 | 000,000,113 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\img\hosterlogos\uploader.pl.png
[2009.10.30 19:18:06 | 000,003,264 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\plugins\hoster\IPAUploaderCom.class
[2009.10.30 19:18:06 | 000,006,360 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\plugins\hoster\UploaderPl.class
[2009.10.26 21:48:22 | 000,032,222 | ---- | M] () -- \Program Files (x86)\JDownloader\licenses\jdownloader.license
[2009.05.31 03:21:00 | 000,071,008 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2009.05.31 18:21:00 | 000,073,568 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader64.dll
[2011.01.07 17:32:18 | 000,272,192 | ---- | M] () -- \Program Files (x86)\Reviversoft\Driver Reviver\Downloader.dll
[2011.05.28 22:04:04 | 000,054,784 | ---- | M] () -- \Program Files\WinRAR\Formats\ace32loader.exe
[2012.01.04 16:37:04 | 000,001,104 | ---- | M] () -- \Users\popino\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\JDownloader – zástupce.lnk
[2012.01.02 09:59:18 | 000,001,104 | ---- | M] () -- \Users\popino\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\JDownloader – zástupce.lnk
[2012.01.01 16:26:26 | 000,000,396 | ---- | M] () -- \Users\popino\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader\JDownloader Support.lnk
[2012.01.01 16:26:26 | 000,000,831 | ---- | M] () -- \Users\popino\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader\JDownloader.lnk
[2012.01.01 16:26:27 | 000,000,821 | ---- | M] () -- \Users\popino\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader\Uninstall JDownloader.lnk
[2009.10.26 21:52:34 | 000,214,528 | ---- | M] () -- \Users\popino\Desktop\Jdownloader\JDownloader.exe
[2012.01.01 16:47:54 | 000,593,293 | ---- | M] () -- \Users\popino\Desktop\Jdownloader\JDownloader.jar
[2012.01.08 18:16:18 | 000,000,105 | ---- | M] () -- \Users\popino\Desktop\Jdownloader\jd\img\hosterlogos\jdupdateloader.png
[2009.10.06 23:48:58 | 000,000,113 | ---- | M] () -- \Users\popino\Desktop\Jdownloader\jd\img\hosterlogos\uploader.pl.png
[2009.10.30 19:18:06 | 000,003,264 | ---- | M] () -- \Users\popino\Desktop\Jdownloader\jd\plugins\hoster\IPAUploaderCom.class
[2012.01.01 16:48:54 | 000,007,073 | ---- | M] () -- \Users\popino\Desktop\Jdownloader\jd\plugins\hoster\UploaderPl.class
[2009.10.26 21:48:22 | 000,032,222 | ---- | M] () -- \Users\popino\Desktop\Jdownloader\licenses\jdownloader.license
[2010.02.05 23:27:16 | 000,000,015 | ---- | M] () -- \Users\popino\Documents\Programy\Eset Smart Security a ESET NOD32 Antivirus 5.0.94.0 CZ (x86,x64Bit) Complet\3) TNODUP 1.4.1 Final\TNod User & Password Finder\Licenses Downloader.bat
[2010.02.06 00:27:16 | 000,000,015 | ---- | M] () -- \Users\popino\Documents\Programy\ESET Smart Security\5.0.93.8-x32Bit\TNod-1.4.1\Licenses Downloader.bat
[2011.01.14 16:51:57 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part01.rar
[2011.01.14 17:06:53 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part02.rar
[2011.01.14 17:22:13 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part03.rar
[2011.01.14 17:35:31 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part04.rar
[2011.01.14 17:48:36 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part05.rar
[2011.01.14 18:01:48 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part06.rar
[2011.01.14 18:15:45 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part07.rar
[2011.01.14 18:45:35 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part08.rar
[2011.01.14 18:41:05 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part09.rar
[2011.01.14 18:59:14 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part10.rar
[2011.01.14 19:13:13 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part11.rar
[2011.01.14 19:26:31 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part12.rar
[2011.01.14 19:40:24 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part13.rar
[2011.01.14 19:53:44 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part14.rar
[2011.01.14 20:24:03 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part15.rar
[2011.01.14 20:23:47 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part16.rar
[2011.01.14 20:38:27 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part17.rar
[2011.01.14 20:52:19 | 200,000,000 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part18.rar
[2011.01.14 21:08:17 | 174,699,814 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders.part19.rar
[2009.11.28 23:34:24 | 000,001,463 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove - DVD 5\Pahyl.of.sMs.Uploaders.lnk
[2009.11.28 10:05:50 | 000,000,117 | ---- | M] () -- \Users\popino\Videos\Avi\Mizerove_-_DVD_5-Pahyl.of.sMs.Uploaders\Mizerove - DVD 5\sMs Uploaders Forum.url
[2012.01.06 12:31:32 | 000,082,784 | ---- | M] () -- \Windows\assembly\GAC\IALoader\1.7.6223.0__31bf3856ad364e35\IALoader.dll
[2009.07.14 13:25:34 | 002,202,645 | R--- | M] () -- \Windows\Setup\SCRIPTS\Windows7Loader.exe
[2011.02.05 14:09:50 | 000,005,799 | ---- | M] () -- \Windows\SoftwareDistribution\Download\c20a9125d57fc9edbd48bd80e0026711\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_9c05f879842e1792.manifest
[2011.02.05 14:05:03 | 000,005,799 | ---- | M] () -- \Windows\SoftwareDistribution\Download\c20a9125d57fc9edbd48bd80e0026711\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7600.20897_none_9c6455949d6c2720.manifest
[2011.02.05 18:34:40 | 000,005,799 | ---- | M] () -- \Windows\SoftwareDistribution\Download\c20a9125d57fc9edbd48bd80e0026711\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_9deb553581556a27.manifest
[2011.02.05 14:10:12 | 000,005,799 | ---- | M] () -- \Windows\SoftwareDistribution\Download\c20a9125d57fc9edbd48bd80e0026711\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_9e73f1b69a73f09a.manifest
[2 \Windows\SoftwareDistribution\Download\c20a9125d57fc9edbd48bd80e0026711\*.tmp files -> \Windows\SoftwareDistribution\Download\c20a9125d57fc9edbd48bd80e0026711\*.tmp -> ]
[2011.07.16 05:15:45 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2 \Windows\System32\*.tmp files -> \Windows\System32\*.tmp -> ]
[2011.07.16 05:15:45 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[2 \Windows\SysWOW64\*.tmp files -> \Windows\SysWOW64\*.tmp -> ]
[2009.07.14 02:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009.07.14 02:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:04:54 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16850_none_66c2596d956d1920\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:06:43 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21010_none_67770e0aae6a7c68\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:21:03 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_68a9b6bd92929e63\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:12:44 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_691eb3faabbf8f66\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 16:17:49 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009.07.14 16:17:49 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.efi.mui_35ee487d
[2009.07.14 16:17:49 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.exe.mui_3bc5b827
[2009.07.14 16:17:49 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.efi.mui_f412814e
[2009.07.14 16:17:49 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.exe.mui_ff8b5358
[2012.01.02 12:09:27 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2012.01.02 12:09:27 | 000,642,944 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.efi_75834aa0
[2012.01.02 12:09:27 | 000,605,552 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.exe_75835076
[2012.01.02 12:09:27 | 000,566,208 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.efi_85cd069f
[2012.01.02 12:09:27 | 000,518,672 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.exe_85cd1215
[2009.07.14 03:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 03:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2009.07.14 16:15:51 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009.07.14 03:13:42 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_b71babd98657e6ef.manifest
[2011.02.05 14:09:31 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_b73e23c9863dba66.manifest
[2011.02.05 14:04:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.20897_none_b79c80e49f7bc9f4.manifest
[2010.11.20 06:12:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011.02.05 18:34:23 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011.02.05 14:09:57 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2009.07.14 03:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 02:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:19:58 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16850_none_0aa3bde9dd0fa7ea\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:12:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21010_none_0b587286f60d0b32\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:15:45 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_0c8b1b39da352d2d\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:36:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_0d001876f3621e30\api-ms-win-core-libraryloader-l1-1-0.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 6248 bytes -> C:\Windows\PLA\System\System Diagnostics.xml:0v1ieca3Feahez0jAwxjjk5uRh
@Alternate Data Stream - 137 bytes -> C:\ProgramData\TEMP:CC2DDA0D

< End of report >

Musel jsem to rozdelit

Nic se nedeje, rozdeleni v poradku...

Nelegalni ESET, nelegalni Windows - licencni podminky, autorsky zakon ci dorbnost v podobe pravidel fora Vam asi moc nerikaji, ze