Prosím o preventivní kontrolu. Díkes....

Zpráva

Ot@s · #1 Příspěvek od **Ot@s** » 08 úno 2012 22:03

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:49:47, on 8.2.2012
Platform: Unknown Windows (WinNT 6.01.3505 SP1)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Ask.com\Updater\Updater.exe
C:\Program Files (x86)\Common Files\Panasonic\VideoCam Suite AutoStart\VideoCamSuiteAutoStart.exe
C:\Program Files (x86)\WinZip\WZQKPICK.EXE
C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
C:\Windows\Samsung\PanelMgr\SSMMgr.exe
C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Windows Media Player\wmplayer.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\Otas\Downloads\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://packardbell.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://packardbell.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://packardbell.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [RIMBBLaunchAgent.exe] C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
O4 - HKLM\..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe /autorun
O4 - HKLM\..\Run: [3200 Scan2PC] "C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-3243394068-3903203777-451099978-1000\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3243394068-3903203777-451099978-1000\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Global Startup: VideoCam Suite.lnk = ?
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files (x86)\WinZip\WZQKPICK.EXE
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O13 - Gopher Prefix:
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Active File Monitor V9 (AdobeActiveFileMonitor9.0) - Adobe Systems Incorporated - c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Unknown owner - C:\Windows\System32\appdrvrem01.exe (file missing)
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\Windows\SysWOW64\bgsvcgen.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service 64 - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11991 bytes

#2 Příspěvek od **Mc_Murphy** » 09 úno 2012 10:09

Zdravím.

Dej mi minutku, hnedle se na to mrknu.

#3 Příspěvek od **Mc_Murphy** » 09 úno 2012 10:16

Pokud je tam najdeš, tak v nabídce Přidat nebo odebrat programy odinstaluj tyto toolbary: Bing Bar, Ask Toolbar a DAEMON Tools Toolbar.
Obrázek

Jsou to veliká "zdržovadla" systému a v případě například Ask.com Toolbar, Conduit Engine a dalších se dá hovořit už i o havěti.

Potom fixni v HJT níže uvedené položky.

Fixnout znamená, že spustíš HJT, zvolíš možnost [Do a system scan only] a zaškrtneš čtvereček vlevo od mnou vypsaných položek.
Poté klikneš na [Fix checked] a odsouhlasíš [ANO].
Položky, které v seznamu nenajdeš, prostě přeskoč.
HJT najdeš zde: C:\Users\Otas\Downloads\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://packardbell.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://packardbell.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://packardbell.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-3243394068-3903203777-451099978-1000\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3243394068-3903203777-451099978-1000\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files (x86)\WinZip\WZQKPICK.EXE
O13 - Gopher Prefix:

Dále stáhni OTL z tohoto odkazu a ulož jej na Plochu.

Pokud používáš Win Vista či Win7, klikni na OTL pravým myšítkem a dej Run As Administrator či Spustit jako správce.
Pokud používáš 64bitový OS, zkontroluj, zda-li je zaškrtnutý čtvereček Pro 64 bitové OS. Pokud ne, zaškrtni jej.
Zaškrtni okénko Pro všechny uživatele.
Zaškrtni okénko Kontrola na havěť "LOP".
Zaškrtni okénko Kontrola na havěť "Purity".
Stáři souborů změň z 30 dnů na 7 dnů!!
Do spodního okénka Vlastní skenování/opravy vlož tento script (pouze zelená písmenka v bílém poli!):

Kód: Vybrat vše

CREATERESTOREPOINT
netsvc
drivers32
savembr:0
/md5start
atapi.sys
autochk.exe
cdrom.sys
explorer.exe
hal.dll
scecli.dll
svchost.exe
tcpip.sys
userinit.exe
winlogon.exe
/md5stop
%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe
%userprofile%\Plocha\*.*
%userprofile%\Desktop\*.*
%ALLUSERSPROFILE%\Plocha\*.*
%ALLUSERSPROFILE%\Desktop\*.*
*crack* /s
*keygen* /s
*loader* /s
*RemoveWAT* /s
*minodlogin* /s
*tnod* /s
*TemDono* /s
*AutoKMS* /s
*KMSEmulator* /s
*activator* /s
*serial* /s
*w7lxe* /s
*AutoRearm* /s
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run /s
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run /s
%SystemDrive%\PhysicalMBR.bin /md5

Klikni na tlačítko [Prohledat].
Po dokončení skenu se objeví logy OTL.txt a Extras.txt, oba mi sem vlož.
Logy se nevejdou do jednoho, rozděl je tedy prosím do více příspěvků.

Ot@s · #4 Příspěvek od **Ot@s** » 09 úno 2012 19:46

OTL Extras logfile created on: 2/9/2012 7:18:58 PM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Otas\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3.86 Gb Total Physical Memory | 2.28 Gb Available Physical Memory | 59.01% Memory free
7.71 Gb Paging File | 6.03 Gb Available in Paging File | 78.19% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 100.01 Gb Total Space | 30.35 Gb Free Space | 30.34% Space Free | Partition Type: NTFS
Drive E: | 345.65 Gb Total Space | 162.69 Gb Free Space | 47.07% Space Free | Partition Type: NTFS

Computer Name: KRAM | User Name: Otas | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-3243394068-3903203777-451099978-1001\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

========== Authorized Applications List ==========

Ot@s · #5 Příspěvek od **Ot@s** » 09 úno 2012 19:47

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{031A0E14-0413-4C97-9772-2639B782F46F}" = Common Desktop Agent
"{0919C44F-F18A-4E3B-A737-03685272CE72}" = Windows Live Remote Service Resources
"{1553D712-B35F-4A82-BC72-D6B11A94BE3E}" = Windows Live Remote Service Resources
"{1685AE50-97ED-485B-80F6-145071EE14B0}" = Windows Live Remote Service Resources
"{17A4FD95-A507-43F1-BC92-D8572AF8340A}" = Windows Live Remote Service Resources
"{19F09425-3C20-4730-9E2A-FC2E17C9F362}" = Windows Live Remote Service Resources
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{1EB2CFC3-E1C5-4FC4-B1F8-549DD6242C67}" = Windows Live Remote Service Resources
"{22AB5CFD-B3DB-414E-9F99-4D024CCF1DA6}" = Windows Live Remote Client Resources
"{2426E29F-9E8C-4C0B-97FC-0DB690C1ED98}" = Windows Live Remote Client Resources
"{2C1A6191-9804-4FDC-AB01-6F9183C91A13}" = Windows Live Remote Client Resources
"{2F304EF4-0C31-47F4-8557-0641AAE4197C}" = Windows Live Remote Client Resources
"{34384A2A-2CA2-4446-AB0E-1F360BA2AAC5}" = Windows Live Remote Service Resources
"{350FD0E7-175A-4F86-84EF-05B77FCD7161}" = Windows Live Remote Service Resources
"{3921492E-82D2-4180-8124-E347AD2F2DB4}" = Windows Live Remote Client Resources
"{456FB9B5-AFBC-4761-BBDC-BA6BAFBB818F}" = Windows Live Remote Client Resources
"{4710662C-8204-4334-A977-B1AC9E547819}" = Broadcom Card Reader Driver Installer
"{480F28F0-8BCE-404A-A52E-0DBB7D1CE2EF}" = Windows Live Remote Service Resources
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{4C2E49C0-9276-4324-841D-774CCCE5DB48}" = Windows Live Remote Client Resources
"{5141AA6E-5FAC-4473-BFFB-BEE69DDC7F2B}" = Windows Live Remote Service Resources
"{5151E2DB-0748-4FD1-86A2-72E2F94F8BE7}" = Windows Live Remote Service Resources
"{57F2BD1C-14A3-4785-8E48-2075B96EB2DF}" = Windows Live Remote Service Resources
"{5E2CD4FB-4538-4831-8176-05D653C3E6D4}" = Windows Live Remote Service Resources
"{5F44A3A1-5D24-4708-8776-66B42B174C64}" = Windows Live Remote Client Resources
"{5FCD6EFE-C2E7-4D77-8212-4BA223D8DF8E}" = Windows Live Remote Client Resources
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{5FEAD3E5-A158-4B66-B92B-0C959D7CF838}" = Windows Live Remote Service Resources
"{61407251-7F7D-4303-810D-226A04D5CFF3}" = Windows Live Remote Service Resources
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{692CCE55-9EAE-4F57-A834-092882E7FE0B}" = Windows Live Remote Client Resources
"{6C9D3F1D-DBBE-46F9-96A0-726CC72935AF}" = Windows Live Remote Service Resources
"{6CBFDC3C-CF21-4C02-A6DC-A5A2707FAF55}" = Windows Live Remote Service Resources
"{6DE721A5-5E89-4D74-994C-652BB3C0672E}" = Ovladače videa společnosti Pinnacle
"{702A632F-99CE-4E2D-B8F2-BF980E9CF62F}" = Windows Live Remote Client Resources
"{790E02A1-145A-3843-8C13-A4F41C9B48B7}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{7AEC844D-448A-455E-A34E-E1032196BBCD}" = Windows Live Remote Service Resources
"{825C7D3F-D0B3-49D5-A42B-CBB0FBE85E99}" = Windows Live Remote Client Resources
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{850B8072-2EA7-4EDC-B930-7FE569495E76}" = Windows Live Remote Client Resources
"{8970AE69-40BE-4058-9916-0ACB1B974A3D}" = Windows Live Remote Client Resources
"{8DDA8647-5E1E-4433-8D2B-7F8CEE7FF56F}" = ESET Smart Security
"{8EB588BD-D398-40D0-ADF7-BE1CEEF7C116}" = Windows Live Remote Client Resources
"{8F7F2D9C-2DBE-4F10-9C7C-2724110A3339}" = Windows Live Remote Service Resources
"{90140000-006D-0405-1000-0000000FF1CE}" = Microsoft Office Klikni a spusť 2010
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{97A295A7-8840-4B35-BB61-27A8F4512CA3}" = Windows Live Remote Service Resources
"{9E9C960F-7F47-46D5-A95D-950B354DE2B8}" = Windows Live Remote Service Resources
"{A060182D-CDBE-4AD6-B9B4-860B435D6CBD}" = Windows Live Remote Client Resources
"{A508D5A2-3AC1-4594-A718-A663D6D3CF11}" = Windows Live Remote Service Resources
"{A679FBE4-BA2D-4514-8834-030982C8B31A}" = Windows Live Remote Service Resources
"{A6E0F6BE-30AC-4D36-97B0-1AC20E23CB83}" = Windows Live Remote Client Resources
"{B0BF8602-EA52-4B0A-A2BD-EDABB0977030}" = Windows Live Remote Client Resources
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 268.00
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 268.00
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.0.21
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B680A663-1A15-47A5-A07C-7DF9A97558B7}" = Windows Live Remote Client Resources
"{B750FA38-7AB0-42CB-ACBB-E7DBE9FF603F}" = Windows Live Remote Client Resources
"{C504EC13-E122-4939-BD6E-EE5A3BAA5FEC}" = Windows Live Remote Client Resources
"{C91DCB72-F5BB-410D-A91A-314F5D1B4284}" = Broadcom Gigabit NetLink Controller
"{C9F05151-95A9-4B9B-B534-1760E2D014A5}" = Windows Live Remote Client Resources
"{CFF3C688-2198-4BC3-A399-598226949C39}" = Windows Live Remote Client Resources
"{D07A61E5-A59C-433C-BCBD-22025FA2287B}" = Windows Live Language Selector
"{D1C1556C-7FF3-48A3-A5D6-7126F0FAFB66}" = Windows Live Remote Client Resources
"{D3E4F422-7E0F-49C7-8B00-F42490D7A385}" = Windows Live Remote Service Resources
"{D5876F0A-B2E9-4376-B9F5-CD47B7B8D820}" = Windows Live Remote Client Resources
"{D930AF5C-5193-4616-887D-B974CEFC4970}" = Windows Live Remote Service Resources
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DBEDAF67-C5A3-4C91-951D-31F3FE63AF3F}" = Windows Live Remote Client Resources
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{ED421F97-E1C3-4E78-9F54-A53888215D58}" = Windows Live Remote Client Resources
"{EFB20CF5-1A6D-41F3-8895-223346CE6291}" = Windows Live Remote Service Resources
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{F6CB2C5F-B2C1-4DF1-BF44-39D0DC06FE6F}" = Windows Live Remote Service Resources
"{FAA3933C-6F0D-4350-B66B-9D7F7031343E}" = Windows Live Remote Service Resources
"{FAD0EC0B-753B-4A97-AD34-32AC1EC8DB69}" = Windows Live Remote Client Resources
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX 64-bit
"Elantech" = ETDWare PS/2-X64 8.0.6.0_WHQL
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"WinRAR archiver" = WinRAR 4.01 (64-bit)
"ZonerPhotoStudio13_CZ_is1" = Zoner Photo Studio 13

Ot@s · #6 Příspěvek od **Ot@s** » 09 úno 2012 19:48

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{007F778D-F15C-4EAB-AE92-071D21FAF632}" = Adobe Photoshop Elements 9
"{00884F14-05BD-4D8E-90E5-1ABF78948CA4}" = Windows Live Mesh
"{0125DB4D-98A0-4DBF-B68A-23BF08FFA6A3}" = Windows Live Messenger
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = Video Web Camera
"{039480EE-6933-4845-88B8-77FD0C3D059D}" = Windows Live Mesh
"{0557BBDA-69D3-4FA4-A93C-A5300F7034B4}" = Windows Live Writer
"{05E379CC-F626-4E7D-8354-463865B303BF}" = Windows Live UX Platform Language Pack
"{0654EA5D-308A-4196-882B-5C09744A5D81}" = Windows Live Photo Common
"{06B05153-97E4-427E-B1A8-E098F6C5E52F}" = Windows Live Essentials
"{073F306D-9851-4969-B828-7B6444D07D55}" = Windows Live Photo Common
"{0785A0B6-07DF-43CF-B147-E1EB4CEA0345}" = Windows Live Messenger
"{07A540AB-D785-11D5-8E89-0090275862A0}" = Corel Graphics Suite 11
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{09922FFE-D153-44AE-8B60-EA3CB8088F93}" = Windows Live UX Platform Language Pack
"{0A4C4B29-5A9D-4910-A13C-B920D5758744}" = بريد Windows Live
"{0A9256E0-C924-46DE-921B-F6C4548A1C64}" = Windows Live Messenger
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}" = Backup Manager V3
"{0C1931EB-8339-4837-8BEC-75029BF42734}" = Windows Live UX Platform Language Pack
"{0C975FCC-A06E-4CB6-8F54-A9B52CF37781}" = Windows Liven sähköposti
"{0D261C88-454B-46FE-B43B-640E621BDA11}" = Windows Live Mail
"{0EC0B576-90F9-43C3-8FAD-A4902DF4B8F4}" = Galeria de Fotografias do Windows Live
"{10186F1A-6A14-43DF-A404-F0105D09BB07}" = Windows Live Mail
"{110668B7-54C6-47C9-BAC4-1CE77F156AF5}" = Windows Live Mesh
"{11417707-1F72-4279-95A3-01E0B898BBF5}" = Windows Live Mesh
"{11778DA1-0495-4ED9-972F-F9E0B0367CD5}" = Windows Live Writer
"{1203DC60-D9BD-44F9-B372-2B8F227E6094}" = Windows Live Temel Parçalar
"{120C160F-F53D-4A15-A873-E79BF5B98B48}" = Windows Live Photo Common
"{128133D3-037A-4C62-B1B7-55666A10587A}" = Windows Live UX Platform Language Pack
"{133D9D67-D475-4407-AC3C-D558087B2453}" = Windows Live Movie Maker
"{14B441B7-774D-4170-98EA-A13667AE6218}" = Windows Live Writer Resources
"{168E7302-890A-4138-9109-A225ACAF7AD1}" = Windows Live Photo Common
"{17835B63-8308-427F-8CF5-D76E0D5FE457}" = Windows Live Essentials
"{17F99FCE-8F03-4439-860A-25C5A5434E18}" = Windows Live Essentials
"{198EA334-8A3F-4CB2-9D61-6C10B8168A6F}" = Windows Live Writer
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1A72337E-D126-4BAF-AC89-E6122DB71866}" = Windows Liven valokuvavalikoima
"{1A82AE99-84D3-486D-BAD6-675982603E14}" = Windows Live Writer
"{1D5EB783-25F8-495B-8B01-DE6D1BFBB8B4}" = VideoCam Suite 3.0
"{1D6C2068-807F-4B76-A0C2-62ED05656593}" = Windows Live Writer
"{1DA6D447-C54D-4833-84D4-3EA31CAECE9B}" = Windows Live UX Platform Language Pack
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{1FC83EAE-74C8-4C72-8400-2D8E40A017DE}" = Windows Live Writer
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{20381A8A-808E-4A53-B6CD-AD2B85E16365}" = Windows Live UX Platform Language Pack
"{220C7F8C-929D-4F71-9DC7-F7A6823B38E4}" = Windows Live UX Platform Language Pack
"{226F0D93-76DE-4F1C-B14D-DE10443ADB60}" = Windows Live Movie Maker
"{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10
"{249EE21B-8EDD-4F36-8A23-E580E9DBE80A}" = Windows Live Mail
"{24DF33E0-F924-4D0D-9B96-11F28F0D602D}" = Windows Live UX Platform Language Pack
"{2511AAD7-82DF-4B97-B0B3-E1B933317010}" = Windows Live Writer Resources
"{25A381E1-0AB9-4E7A-ACCE-BA49D519CF4E}" = Windows Live Mail
"{25CD4B12-8CC5-433E-B723-C9CB41FA8C5A}" = Windows Live Writer
"{26A24AE4-039D-4CA4-87B4-2F83216024FF}" = Java(TM) 6 Update 29
"{26E3C07C-7FF7-4362-9E99-9E49E383CF16}" = Windows Live Writer Resources
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{28B9D2D8-4304-483F-AD71-51890A063A74}" = Windows Live Photo Common
"{29373E24-AC72-424E-8F2A-FB0F9436F21F}" = Windows Live Photo Common
"{2A07C35B-8384-4DA4-9A95-442B6C89A073}" = Windows Live Essentials
"{2AD2DD70-27F7-4343-BB4E-DE50A32D854B}" = Windows Live Messenger
"{2BA5FD10-653F-4CAF-9CCD-F685082A1DC1}" = Windows Live Writer
"{2C4E06CC-1F04-4C25-8B3C-93A9049EC42C}" = Windows Live UX Platform Language Pack
"{2C7E8AA1-9C03-4606-BF34-5D99D07964DA}" = Windows Live Messenger
"{2C865FB0-051E-4D22-AC62-428E035AEAF0}" = Windows Live Mesh
"{2D3E034E-F76B-410A-A169-55755D2637BB}" = Windows Live Mesh
"{2E50E321-4747-4EB5-9ECB-BBC6C3AC0F31}" = Windows Live Writer Resources
"{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App" = Update Installer for WildTangent Games App
"{303143DD-1F6D-4BC5-9342-FFC2E19B2DBD}" = Windows Live Messenger
"{3125D9DE-8D7A-4987-95F3-8A42389833D8}" = Windows Live Writer Resources
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{33643918-7957-4839-92C7-EA96CB621A98}" = Nero Express 10 Help (CHM)
"{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live
"{34490F4E-48D0-492E-8249-B48BECF0537C}" = Nero DiscSpeed 10
"{34C4F5AF-D757-4E6A-ABCA-65AB5A50A1A8}" = Windows Live Messenger
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{370F888E-42A7-4911-9E34-7D74632E17EB}" = Windows Live Photo Common
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{39BDD209-5704-480C-9F4A-B69D0370DDBB}" = Windows Live Messenger
"{39F95B0B-A0B7-4FA7-BB6C-197DA2546468}" = Windows Live Mesh
"{3B72C1E0-26A1-40F6-8516-D50C651DFB3C}" = Windows Live Essentials
"{3B9A92DA-6374-4872-B646-253F18624D5F}" = Windows Live Writer
"{3D0C22FA-96D7-4789-BC5B-991A5A99BFFA}" = Windows Live Messenger
"{3DB0448D-AD82-4923-B305-D001E521A964}" = Packard Bell Power Management
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{3F4143A1-9C21-4011-8679-3BC1014C6886}" = Windows Live Mesh
"{406FB8A4-F539-48A9-809C-F94706F9C9F6}_is1" = S.T.A.L.K.E.R. - Call of Pripyat [v1.6.01]
"{40BFD84C-64CD-42CC-9909-8734C50429C6}" = Windows Live UX Platform Language Pack
"{410DF0AA-882D-450D-9E1B-F5397ACFFA80}" = Windows Live Essentials
"{423F0323-854D-4D18-BC21-EAFA16B9651E}" = BlackBerry Desktop Software 6.1
"{4264C020-850B-4F08-ACBE-98205D9C336C}" = Windows Live Writer
"{429DF1A0-3610-4E9E-8ACE-3C8AC1BA8FCA}" = Windows Live Photo Gallery
"{433EACD8-4747-4A6A-826A-FFA9F39B0D40}" = Elements 9 Organizer
"{43B43577-2514-4CE0-B14A-7E85C17C0453}" = Windows Live Essentials
"{4444F27C-B1A8-464E-9486-4C37BAB39A09}" = Фотогалерия на Windows Live
"{458F399F-62AC-4747-99F5-499BBF073D29}" = Windows Live Writer Resources
"{4664ED39-C80A-48F7-93CD-EBDCAFAB6CC5}" = Windows Live Writer Resources
"{46872828-6453-4138-BE1C-CE35FBF67978}" = Windows Live Mesh
"{4736B0ED-F6A1-48EC-A1B7-C053027648F1}" = Galeria fotogràfica del Windows Live
"{488F0347-C4A7-4374-91A7-30818BEDA710}" = Galerie de photos Windows Live
"{48C0DC5E-820A-44F2-890E-29B68EDD3C78}" = Windows Live Writer
"{48F597DD-D397-4CFA-91A0-4C033A0113BD}" = Windows Live Mail
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A04DB63-8F81-4EF4-9D09-61A2057EF419}" = Windows Live Essentials
"{4A275FD1-2F24-4274-8C01-813F5AD1A92D}" = Windows Live Messenger
"{4B28D47A-5FF0-45F8-8745-11DC2A1C9D0F}" = Windows Live Writer
"{4C378B16-46B7-4DA1-A2CE-2EE676F74680}" = Windows Live UX Platform Language Pack
"{4D141929-141B-4605-95D6-2B8650C1C6DA}" = Windows Live UX Platform Language Pack
"{4D7BAC8A-51B8-4243-8567-1415C4272D13}" = Windows Live Writer
"{4D83F339-5A5C-4B21-8FD3-5D407B981E72}" = Windows Live Photo Common
"{4E368382-C6DF-4D2C-BB63-58987F6F808F}" = DraftSight
"{50300123-F8FC-4B50-B449-E847D04F1BA2}" = Windows Live Messenger
"{506FC723-8E6C-4417-9CFF-351F99130425}" = Windows Live UX Platform Language Pack
"{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM)
"{523DF2BB-3A85-4047-9898-29DC8AEB7E69}" = Windows Live UX Platform Language Pack
"{5275D81E-83AD-4DE4-BC2B-6E6BA3A33244}" = Windows Live Writer Resources
"{5454085C-840F-4070-8FAA-441000038301}" = BioShock 2
"{5454085C-840F-4070-8FAA-441000038302}" = BioShock 2
"{5454085C-840F-4070-8FAA-441000038303}" = BioShock 2
"{5495E9A4-501A-4D4C-87C9-E80916CA9478}" = Windows Live UX Platform Language Pack
"{5545EEE1-FA36-4F76-B6BE-5696E7F4E2D6}" = VBA (2627.01)
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{5C2F5C1B-9732-4F81-8FBF-6711627DC508}" = Windows Live Fotogalleri
"{5CF5B1A5-CBC3-42F0-8533-5A5090665862}" = Windows Live Mesh
"{5D273F60-0525-48BA-A5FB-D0CAA4A952AE}" = Windows Live Movie Maker
"{5D2E7BD7-4B6F-4086-BA8A-E88484750624}" = Windows Live Writer Resources
"{5D90ABE5-8A35-4947-8269-6F40BCE47A95}" = Windows Live Messenger
"{5DA7D148-D2D2-4C67-8444-2F0F9BD88A06}" = Windows Live Writer
"{5E627606-53B9-42D1-97E1-D03F6229E248}" = Windows Live UX Platform Language Pack
"{5F6E678A-7E61-448A-86CB-BC2AD1E04138}" = Windows Live Messenger
"{6057E21C-ABE9-4059-AE3E-3BEB9925E660}" = Windows Live Messenger
"{60C3C026-DB53-4DAB-8B97-7C1241F9A847}" = Windows Live Movie Maker
"{625D45F0-5DCB-48BF-8770-C240A84DAAEB}" = Windows Live Mesh
"{62687B11-58B5-4A18-9BC3-9DF4CE03F194}" = Windows Live Writer Resources
"{62BF4BD3-B1F6-4FA2-8388-CC0647ACBF86}" = Nero Multimedia Suite 10 Essentials
"{63AE67AA-1AB1-4565-B4EF-ABBC5C841E8D}" = Windows Live Messenger
"{63CF7D0C-B6E7-4EE9-8253-816B613CC437}" = Windows Live Mail
"{640798A0-A4FB-4C52-AC72-755134767F1E}" = Windows Live Movie Maker
"{64376910-1860-4CEF-8B34-AA5D205FC5F1}" = Poczta usługi Windows Live
"{644063FA-ABA3-42AC-A8AC-3EDC0706018B}" = Windows Live Mesh
"{6491AB99-A11E-41FD-A5E7-32DE8A097B8E}" = Windows Live Essentials
"{64B2D6B3-71AC-45A7-A6A1-2E07ABF58341}" = Windows Live Movie Maker
"{64EF903E-D00A-414C-94A4-FBA368FFCDC9}" = Packard Bell Social Networks
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{677AAD91-1790-4FC5-B285-0E6A9D65F7DC}" = Windows Live Mail
"{6807427D-8D68-4D30-AF5B-0B38F8F948C8}" = Windows Live Writer Resources
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6986737B-F286-40D1-87AF-938339DCF6AB}" = Windows Live Messenger
"{69C9C672-400A-43A0-B2DE-9DB38C371282}" = Windows Live Writer
"{69CAC24D-B1DC-4B97-A1BE-FE21843108FE}" = Windows Live Writer Resources
"{6A4ABCDC-0A49-4132-944E-01FBCCB3465C}" = Windows Live UX Platform Language Pack
"{6A563426-3474-41C6-B847-42B39F1485B2}" = Windows Live Messenger
"{6ABE832B-A5C7-44C1-B697-3E123B7B4D5B}" = Windows Live Mesh
"{6B556C37-8919-4991-AC34-93D018B9EA49}" = Windows Live Photo Common
"{6CB36609-E3A6-446C-A3C1-C71E311D2B9C}" = Windows Live Movie Maker
"{6D30E864-46AE-435B-8230-8B5D42B4AE37}" = Windows Live Messenger
"{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker
"{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10
"{6EE9F44A-B8C7-4CDB-B2A9-441AF2AE315A}" = Windows Live Messenger
"{6EF2BE2C-3121-48B7-B7A6-C56046B3A588}" = Windows Live Movie Maker
"{6F37D92B-41AA-44B7-80D2-457ABDE11896}" = Windows Live Photo Common
"{70550193-1C22-445C-8FA4-564E155DB1A7}" = Nero Express 10
"{709E38A9-7F80-4598-96CC-44B0D553FECE}" = Windows Live Messenger
"{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-packardbell" = WildTangent Games App (Packard Bell Games)
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{71527C7C-5289-4CB2-88C9-23344C0FF6C1}" = Windows Live Movie Maker
"{71A81378-79D5-40CC-9BDC-380642D1A87F}" = Windows Live Writer
"{71C95134-F6A9-45E7-B7B3-07CA6012BF2A}" = Windows Live Mesh
"{7272F232-A7E0-4B2B-A5D2-71B7C5E2379C}" = Windows Live Fotótár
"{7327080F-6673-421F-BBD9-B618F357EEB3}" = Windows Live UX Platform Language Pack
"{734104DE-C2BF-412F-BB97-FCCE1EC94229}" = Windows Live Writer Resources
"{7373E17D-18E0-44A7-AC3A-6A3BFB85D3B3}" = Windows Live Movie Maker
"{73FC3510-6421-40F7-9503-EDAE4D0CF70D}" = Windows Live Photo Common
"{7465A996-0FCA-4D2D-A52C-F833B0829B5B}" = Windows Live Movie Maker
"{7496FD31-E5CB-4AE4-82D3-31099558BF6A}" = Windows Live Mesh
"{74E8A7F6-575D-42C7-9178-E87D1B3BEFE8}" = Windows Live UX Platform Language Pack
"{77477AEA-5757-47D8-8B33-939F43D82218}" = Windows Live UX Platform Language Pack
"{77F69CA1-E53D-4D77-8BA3-FA07606CC851}" = Фотоальбом Windows Live
"{78906B56-0E81-42A7-AC25-F54C946E1538}" = Windows Live Photo Common
"{78DAE910-CA72-450E-AD22-772CB1A00678}" = Windows Live Mesh
"{7A9D47BA-6D50-4087-866F-0800D8B89383}" = Podstawowe programy Windows Live
"{7ADFA72D-2A9F-4DEC-80A5-2FAA27E23F0F}" = Windows Live Photo Common
"{7AF8E500-B349-4A77-8265-9854E9A47925}" = Windows Live Movie Maker
"{7BA19818-F717-4DFB-BC11-FAF17B2B8AEE}" = Pošta Windows Live
"{7C2A3479-A5A0-412B-B0E6-6D64CBB9B251}" = Windows Live Photo Common
"{7CB529B2-6C74-4878-9C3F-C29C3C3BBDC6}" = Windows Live Writer Resources
"{7D0DE76C-874E-4BDE-A204-F4240160693E}" = Windows Live Photo Common
"{7D1C7B9F-2744-4388-B128-5C75B8BCCC84}" = Windows Live Essentials
"{7D926AD2-16D6-42C2-8CA1-AB09E96040BA}" = Windows Live Writer Resources
"{7D99B933-E29C-4599-92F0-DAED2AF041E3}" = Windows Live Essentials
"{7E017923-16F8-4E32-94EF-0A150BD196FE}" = Windows Live Writer
"{7E90B133-FF47-48BB-91B8-36FC5A548FE9}" = Windows Live Writer Resources
"{7F6021AE-E688-4D03-843A-C2260482BA0D}" = Windows Live Messenger
"{7F811A54-5A09-4579-90E1-C93498E230D9}" = Packard Bell Recovery Management
"{7FF11E53-C002-4F40-8D68-6BE751E5DD62}" = Windows Live Writer Resources
"{804DE397-F82C-4867-9085-E0AA539A3294}" = Windows Live Writer
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{80E8C65A-8F70-4585-88A2-ABC54BABD576}" = Windows Live Mesh
"{827D3E4A-0186-48B7-9801-7D1E9DD40C07}" = Windows Live Essentials
"{82803FF3-563F-414F-A403-8D4C167D4120}" = Windows Live Mail
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}" = Windows Live Mesh
"{84267681-BF16-40B6-9564-27BC57D7D71C}" = Windows Live Photo Common
"{84A411F9-40A5-4CDA-BF46-E09FBB2BC313}" = Windows Live Essentials
"{85373DA7-834E-4850-8AF5-1D99F7526857}" = Windows Live Photo Common
"{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
"{861B1145-7762-4794-B40C-3FF0A389DFE6}" = Windows Live Photo Gallery
"{86F444A5-C9B9-41DC-AF28-B5E46F5497C7}" = Windows Live Argazki Galeria
"{873E4648-6F6E-47F6-A7B2-A6F8DFABDCE6}" = Windows Live Messenger
"{885F1BCD-C344-4758-85BD-09640CF449A5}" = Windows Live Photo Gallery
"{8909CFA8-97BF-4077-AC0F-6925243FFE08}" = Windows Liven asennustyökalu
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8CF5D47D-27B7-49D6-A14F-10550B92749D}" = Windows Live UX Platform Language Pack
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E285C75-9BE2-4349-972B-DECDDF472656}" = Windows Live Writer Resources
"{90140011-0066-0405-0000-0000000FF1CE}" = Microsoft Office Starter 2010 - čeština
"{924B4D82-1B97-48EB-8F1E-55C4353C22DB}" = Windows Live Mail
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{93C4B7D5-4E00-491F-BA3E-25B7B63EE7F6}" = Windows Live Mail
"{93E464B3-D075-4989-87FD-A828B5C308B1}" = Windows Live Writer Resources
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{95140000-00AF-0405-0000-0000000FF1CE}" = Microsoft PowerPoint Viewer
"{97F77D62-5110-4FA3-A2D3-410B92D31199}" = Windows Live Fotogaléria
"{99BE7F5D-AB52-4404-9E03-4240FFAA7DE9}" = Windows Live Mesh
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BD262D0-B788-4546-A0A5-F4F56EC3834B}" = Windows Live Photo Common
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9DA3F03B-2CEE-4344-838E-117861E61FAF}" = Windows Live Mail
"{9DB90178-B5B0-45BD-B0A7-D40A6A1DF1CA}" = Windows Live Movie Maker
"{9E2C5B0E-7A2D-4767-A9B2-77469FB1873A}" = Windows Live Mesh
"{9FAE6E8D-E686-49F5-A574-0A58DFD9580C}" = Windows Live Mail
"{A0B91308-6666-4249-8FF6-1E11AFD75FE1}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A101F637-2E56-42C0-8E08-F1E9086BFAF3}" = Windows Live Movie Maker
"{A199DB88-E22D-4CE7-90AC-B8BE396D7BF4}" = Windows Live Movie Maker
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A41A708E-3BE6-4561-855D-44027C1CF0F8}" = Windows Live Photo Common
"{A60B3BF0-954B-42AF-B8D8-2C1D34B613AA}" = Windows Live Photo Gallery
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AA4BF92B-2AAF-11DA-9D78-000129760D75}" = HomeMedia
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AADD1C8F-D59F-4D55-A726-768C71A205A8}" = Pinnacle Studio 14
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AB0B2113-5B96-4B95-8AD1-44613384911F}" = Windows Live Mesh
"{AB78C965-5C67-409B-8433-D7B5BDB12073}" = Windows Live Writer Resources
"{ABD534B7-E951-470E-92C2-CD5AF1735726}" = Windows Live Essentials
"{ABE2F2AA-7ADC-4717-9573-BF3F83C696AC}" = Windows Live Mail
"{AC76BA86-7AD7-1029-7B44-AA1000000001}" = Adobe Reader X (10.1.2) - Czech
"{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
"{AD001A69-88CC-4766-B2DB-3C1DFAB9AC72}" = Windows Live Mesh
"{ADE85655-8D1E-4E4B-BF88-5E312FB2C74F}" = Windows Live Mail
"{ADFE4AED-7F8E-4658-8D6E-742B15B9F120}" = Windows Live Photo Common
"{AF01B90A-D25C-4F60-AECD-6EEDF509DC11}" = Windows Live Mesh
"{B0AD205F-60D0-4084-AFB8-34D9A706D9A8}" = Windows Live Essentials
"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{B2BCA478-EC0F-45EE-A9E9-5EABE87EA72D}" = Windows Live Photo Common
"{B33B61FE-701F-425F-98AB-2B85725CBF68}" = Windows Live Photo Common
"{B3BE54A4-8DFE-4593-8E66-56AB7133B812}" = Windows Live Writer
"{B618C3BF-5142-4630-81DD-F96864F97C7E}" = Windows Live Essentials
"{B63F0CE3-CCD0-490A-9A9C-E1A3B3A17137}" = Почта Windows Live
"{B7B67AA5-12DA-4F01-918D-B1BF66779D8A}" = Windows Live Writer Resources
"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
"{BD4EBDB5-EB14-4120-BB04-BE0A26C7FB3E}" = Windows Live Photo Common
"{BD695C2F-3EA0-4DA4-92D5-154072468721}" = Windows Live Fotoğraf Galerisi
"{BF022D76-9F72-4203-B8FA-6522DC66DFDA}" = Windows Live Movie Maker
"{BF35168D-F6F9-4202-BA87-86B5E3C9BF7A}" = Windows Live Mesh
"{BF6CF460-40C3-49BA-800A-4B934B6498B1}" = Scan Assistant
"{C00C2A91-6CB3-483F-80B3-2958E29468F1}" = Συλλογή φωτογραφιών του Windows Live
"{C01FCACE-CC3D-49A2-ADC2-583A49857C58}" = Windows Live Essentials
"{C08D5964-C42F-48EE-A893-2396F9562A7C}" = Windows Live Mesh
"{C18A0418-442A-4186-AF98-D08F5054A2FC}" = Nero DiscSpeed 10 Help (CHM)
"{C1C9D199-B4DD-4895-92DD-9A726A2FE341}" = Windows Live Writer
"{C29FC15D-E84B-4EEC-8505-4DED94414C59}" = Windows Live Writer Resources
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C454280F-3C3E-4929-B60E-9E6CED5717E7}" = Windows Live Mail
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C8421D85-CA0E-4E93-A9A9-B826C4FB88EA}" = Windows Live Mail
"{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common
"{CB3F59BB-7858-41A1-A7EA-4B8A6FC7D431}" = Galeria fotografii usługi Windows Live
"{CB66242D-12B1-4494-82D2-6F53A7E024A3}" = Galerie foto Windows Live
"{CB7224D9-6DCA-43F1-8F83-6B1E39A00F92}" = Windows Live Movie Maker
"{CD442136-9115-4236-9C14-278F6A9DCB3F}" = Windows Live Movie Maker
"{CD7CB1E6-267A-408F-877D-B532AD2C882E}" = Windows Live Photo Common
"{CDC39BF2-9697-4959-B893-A2EE05EF6ACB}" = Windows Live Writer
"{CE929F09-3853-4180-BD90-30764BFF7136}" = גלריית התמונות של Windows Live
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CF671BFE-6BA3-44E7-98C1-500D9C51D947}" = Windows Live Photo Gallery
"{D07B1FDA-876B-4914-9E9A-309732B6D44F}" = Windows Live Mail
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D299197D-CDEA-41A6-A363-F532DE4114FD}" = Windows Live UX Platform Language Pack
"{D31169F2-CD71-4337-B783-3E53F29F4CAD}" = Windows Live Mail
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D54A52A8-DF24-4CE8-850B-074CA47DFA74}" = Windows Live Messenger
"{D588365A-AE39-4F27-BDAE-B4E72C8E900C}" = Windows Live Mail
"{D6CBB3B2-F510-483D-AE0D-1CF3F43CF1EE}" = Windows Live Writer Resources
"{D6F25CF9-4E87-43EB-B324-C12BE9CDD668}" = Windows Live UX Platform Language Pack
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DA29F644-2420-4448-8128-1331BE588999}" = Windows Live Writer
"{DAEF48AD-89C8-4A93-B1DD-45B7E4FB6071}" = Windows Live Movie Maker
"{DB1208F4-B2FE-44E9-BFE6-8824DBD7891B}" = Windows Live Movie Maker
"{DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1" = ConvertXtoDVD 4.0.10.324
"{DBAA2B17-D596-4195-A169-BA2166B0D69B}" = Windows Live Mail
"{DCAB6BA7-6533-44BF-9235-E5BF33B7431C}" = Windows Live Writer
"{DDC1E1BD-7615-4186-89E1-F5F43F9B6491}" = Windows Live Movie Maker
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DE7C13A6-E4EA-4296-B0D5-5D7E8AD69501}" = Windows Live Writer
"{DE8F99FD-2FC7-4C98-AA67-2729FDE1F040}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DEF91E0F-D266-453D-B6F2-1BA002B40CB6}" = Windows Live Essentials
"{DF71ABBB-B834-41C0-BB58-80B0545D754C}" = Windows Live UX Platform Language Pack
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E2AE009D-37E5-4724-A6B8-0ED6A6BA4F68}" = Elements STI Installer
"{E2B4FE1C-2CFA-47EE-A88C-A14D0FF1F0B0}" = BBSAK
"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
"{E5377D46-83C5-445A-A1F1-830336B42A10}" = Windows Live Galerija fotografija
"{E55E0C35-AC3C-4683-BA2F-834348577B80}" = Windows Live Writer
"{E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}" = Microsoft SQL Server Compact 3.5 SP1 English
"{E59969EA-3B5B-4B24-8B94-43842A7FBFE9}" = Fotogalerija Windows Live
"{E5DD4723-FE0B-436E-A815-DC23CF902A0B}" = Windows Live UX Platform Language Pack
"{E62E0550-C098-43A2-B54B-03FB1E634483}" = Windows Live Writer
"{E727A662-AF9F-4DEE-81C5-F4A1686F3DFC}" = Windows Live Writer Resources
"{E7688C7D-DE09-4D43-9785-534EDE9BC18E}" = Windows Live Messenger
"{E83DC314-C926-4214-AD58-147691D6FE9F}" = Основные компоненты Windows Live
"{E8524B28-3BBB-4763-AC83-0E83FE31C350}" = Windows Live Writer
"{E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66}" = Galería fotográfica de Windows Live
"{E9D98402-21AB-4E9F-BF6B-47AF36EF7E97}" = Windows Live Writer Resources
"{EA777812-4905-4C08-8F6E-13BDCC734609}" = Windows Live UX Platform Language Pack
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{ED16B700-D91F-44B0-867C-7EB5253CA38D}" = Raccolta foto di Windows Live
"{EE171732-BEB4-4576-887D-CB62727F01CA}" = Packard Bell Updater
"{EE492B20-FB15-4A98-883C-3054354A11F8}" = Windows Live Messenger
"{EEF99142-3357-402C-B298-DEC303E12D92}" = Windows Live 影像中心
"{EF7EAB13-46FC-49DD-8E3C-AAF8A286C5BB}" = Windows Live 程式集
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F0F5D89A-197C-495B-827E-3E98B811CD2E}" = Windows Live Photo Common
"{F0F9505B-3ACF-4158-9311-D0285136AA00}" = Windows Live Essentials
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F13587F7-AA4C-4C2E-AE7D-F33F3CCE57A9}" = Windows Live Messenger
"{F302F4F0-588D-6501-1ACF-BE3FDCC9135D}" = Adobe Community Help
"{F4BEA6C1-AAC3-4810-AAEA-588E26E0F237}" = Windows Live UX Platform Language Pack
"{F52C5BE7-3F57-464E-8A54-908402E43CE8}" = Windows Live Writer Resources
"{F5C372A1-40F3-49DA-A049-F75CDE9177DC}" = Pinnacle Studio Ultimate Collection Plugins
"{F6117F9C-ADB5-4590-9BE4-12C7BEC28702}" = Nero StartSmart 10 Help (CHM)
"{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}" = Nero StartSmart 10
"{F694D1F7-1F12-4550-9B7A-C871273ABAD5}" = Windows Live Messenger
"{F7A46527-DF1F-4B0F-9637-98547E189442}" = Windows Live Galeria de Fotos
"{F7E80BA7-A09D-4DD1-828B-C4A0274D4720}" = Windows Live Mesh
"{F80E5450-3EF3-4270-B26C-6AC53BEC5E76}" = Windows Live Movie Maker
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"{FA6CF94F-DACF-4FE7-959D-55C421B91B17}" = Windows Live Mail
"{FB3D07AE-73D0-47A9-AC12-6F50BF8B6202}" = Windows Live Movie Maker
"{FB79FDB7-4DE1-453D-99FE-9A880F57380E}" = Windows Live Fotogalerie
"{FBCA06D2-4642-4F33-B20A-A7AB3F0D2E69}" = معرض صور Windows Live
"{FCBC19F7-E068-4B7A-ACBB-CE9CCEB4B21F}" = Windows Live Messenger
"{FCDE76CB-989D-4E32-9739-6A272D2B0ED7}" = Windows Live Mesh
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FE62C88B-425B-4BDE-8B70-CD5AE3B83176}" = Windows Live Essentials
"{FEEF7F78-5876-438B-B554-C4CC426A4302}" = Windows Live Essentials
"{FF105207-8423-4E13-B0B1-50753170B245}" = Windows Live Movie Maker
"{FF3DFA01-1E98-46B4-A065-DA8AD47C9598}" = Windows Live Movie Maker
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"{FF737490-5A2D-4269-9D82-97DB2F7C0B09}" = Windows Live Movie Maker
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Photoshop Elements 9" = Adobe Photoshop Elements 9
"AoA DVD Ripper_is1" = AoA DVD Ripper
"aTube Catcher" = aTube Catcher
"BlackBerry_Desktop" = BlackBerry Desktop Software 6.1
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"DAEMON Tools Toolbar" = DAEMON Tools Toolbar
"Game Booster_is1" = Game Booster 3
"HijackThis" = HijackThis 2.0.2
"Identity Card" = Identity Card
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = Video Web Camera
"InstallShield_{07A540AB-D785-11D5-8E89-0090275862A0}" = CorelDRAW Graphics Suite 11
"InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}" = Packard Bell MyBackup
"InstallShield_{64EF903E-D00A-414C-94A4-FBA368FFCDC9}" = Packard Bell Social Networks
"LManager" = Launch Manager
"Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3)
"Office14.Click2Run" = Microsoft Office Klikni a spusť 2010
"Packard Bell Registration" = Packard Bell Registration
"Packard Bell Screensaver" = Packard Bell ScreenSaver
"Packard Bell Welcome Center" = Welcome Center
"ProFact 3.0 Free_is1" = ProFact 3.0 Free
"Red Giant ToonIt Studio" = Red Giant ToonIt Studio
"S.T.A.L.K.E.R. - Clear Sky_is1" = S.T.A.L.K.E.R. - Clear Sky [v1.0005]
"Samsung Easy Printer Manager" = Samsung Easy Printer Manager
"Samsung SCX-3200 Series" = Samsung SCX-3200 Series
"The KMPlayer" = The KMPlayer (remove only)
"Trapcode Particular Studio" = Trapcode Particular Studio
"WildTangent packardbell Master Uninstall" = Packard Bell Games
"WinLiveSuite" = Windows Live Essentials
"WinPcapInst" = WinPcap 4.1.1
"WinZip" = WinZip
"WTA-06eb6600-64b5-47c3-b6fa-7ff1ff2f3cfc" = Jewel Quest Solitaire
"WTA-07606b8a-2b3b-4542-be1e-1fbd0fb8a291" = FATE
"WTA-08088377-5408-490f-bc00-811ab5c6a155" = Slingo Deluxe
"WTA-0f12f38c-a64a-46af-b289-be2a46c95da0" = Mystery P.I. - The London Caper
"WTA-46208327-facf-4724-b4eb-fcd31a20c91a" = Virtual Villagers - The Secret City
"WTA-71cb4c31-7f0a-4f0e-8614-b0758e707d95" = Bejeweled 2 Deluxe
"WTA-7a931507-7018-49b2-8194-f5270f35e64a" = Zuma Deluxe
"WTA-813785b6-6024-4c2d-9ceb-4ed1e8a22c86" = Torchlight
"WTA-82596a95-dbbf-4624-92d7-4a0580689489" = Polar Bowler
"WTA-82c3f7f1-e3e5-4d3e-879e-fed9df6ddd15" = Wedding Dash
"WTA-93b4139e-5995-45d6-b869-7e49ad69221d" = John Deere Drive Green
"WTA-98473aaf-1a49-4a16-86b0-e0d836409520" = Diner Dash 2 Restaurant Rescue
"WTA-9e7c7af7-67b5-4fe6-b560-e140de7c5560" = Crazy Chicken Kart 2
"WTA-aa97fe7c-8120-467e-a783-7e1ffa9a52fc" = Plants vs. Zombies - Game of the Year
"WTA-b98c8cd9-181a-464d-b6f1-2e8e061acf54" = Penguins!
"WTA-c2b35758-fa65-4d7c-9f2d-924256554958" = Agatha Christie - 4:50 from Paddington
"WTA-f63728e7-2d28-4ae0-a675-d8025ecad800" = Chuzzle Deluxe
"Xvid_is1" = Xvid 1.1.3 final uninstall

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 1/7/2012 9:43:10 AM | Computer Name = kram | Source = WinMgmt | ID = 10
Description =

Error - 1/7/2012 11:20:35 AM | Computer Name = kram | Source = WinMgmt | ID = 10
Description =

Error - 1/7/2012 3:34:45 PM | Computer Name = kram | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro C:\Program Files (x86)\Common Files\Adobe
AIR\Versions\1.0\Adobe AIR.dll se nezdařilo. Chyba v souboru manifestu nebo zásady
C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll na řádku
3. Hodnota MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR atributu
version v prvku assemblyIdentity je neplatná.

Error - 1/8/2012 6:02:08 AM | Computer Name = kram | Source = WinMgmt | ID = 10
Description =

Error - 1/8/2012 9:31:11 AM | Computer Name = kram | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro C:\Program Files (x86)\Common Files\Adobe
AIR\Versions\1.0\Adobe AIR.dll se nezdařilo. Chyba v souboru manifestu nebo zásady
C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll na řádku
3. Hodnota MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR atributu
version v prvku assemblyIdentity je neplatná.

Error - 1/8/2012 12:23:29 PM | Computer Name = kram | Source = WinMgmt | ID = 10
Description =

Error - 1/8/2012 12:47:14 PM | Computer Name = kram | Source = WinMgmt | ID = 10
Description =

Error - 1/8/2012 3:16:55 PM | Computer Name = kram | Source = WinMgmt | ID = 10
Description =

Error - 1/9/2012 3:10:46 PM | Computer Name = kram | Source = WinMgmt | ID = 10
Description =

Error - 1/9/2012 3:19:57 PM | Computer Name = kram | Source = Customer Experience Improvement Program | ID = 1008
Description =

[ System Events ]
Error - 1/24/2012 2:21:42 PM | Computer Name = kram | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: ASPI32

Error - 1/24/2012 2:21:43 PM | Computer Name = kram | Source = Service Control Manager | ID = 7000
Description = Služba DgiVecp neuspěla při spuštění v důsledku následující chyby:
%%2

Error - 1/24/2012 11:58:41 PM | Computer Name = kram | Source = Application Popup | ID = 1060
Description = Načtení \SystemRoot\SysWow64\Drivers\ASPI32.SYS bylo zablokováno kvůli
nekompatibilitě s tímto systémem. Požádejte dodavatele softwaru o kompatibilní verzi
ovladače.

Error - 1/24/2012 11:58:57 PM | Computer Name = kram | Source = Service Control Manager | ID = 7000
Description = Služba DgiVecp neuspěla při spuštění v důsledku následující chyby:
%%2

Error - 1/24/2012 11:59:18 PM | Computer Name = kram | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: ASPI32

Error - 1/24/2012 11:59:20 PM | Computer Name = kram | Source = Service Control Manager | ID = 7000
Description = Služba DgiVecp neuspěla při spuštění v důsledku následující chyby:
%%2

Error - 1/25/2012 1:17:20 PM | Computer Name = kram | Source = Application Popup | ID = 1060
Description = Načtení \SystemRoot\SysWow64\Drivers\ASPI32.SYS bylo zablokováno kvůli
nekompatibilitě s tímto systémem. Požádejte dodavatele softwaru o kompatibilní verzi
ovladače.

Error - 1/25/2012 1:17:37 PM | Computer Name = kram | Source = Service Control Manager | ID = 7000
Description = Služba DgiVecp neuspěla při spuštění v důsledku následující chyby:
%%2

Error - 1/25/2012 1:17:58 PM | Computer Name = kram | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: ASPI32

Error - 1/25/2012 1:17:59 PM | Computer Name = kram | Source = Service Control Manager | ID = 7000
Description = Služba DgiVecp neuspěla při spuštění v důsledku následující chyby:
%%2

< End of report >

Ot@s · #7 Příspěvek od **Ot@s** » 09 úno 2012 19:50

OTL logfile created on: 2/9/2012 7:18:58 PM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Otas\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3.86 Gb Total Physical Memory | 2.28 Gb Available Physical Memory | 59.01% Memory free
7.71 Gb Paging File | 6.03 Gb Available in Paging File | 78.19% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 100.01 Gb Total Space | 30.35 Gb Free Space | 30.34% Space Free | Partition Type: NTFS
Drive E: | 345.65 Gb Total Space | 162.69 Gb Free Space | 47.07% Space Free | Partition Type: NTFS

Computer Name: KRAM | User Name: Otas | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2012/02/09 19:08:57 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Otas\Desktop\OTL.exe
PRC - [2012/01/03 14:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011/07/06 12:24:37 | 000,688,128 | ---- | M] () -- C:\Windows\Samsung\PanelMgr\SSMMgr.exe
PRC - [2011/05/26 07:40:48 | 000,029,696 | ---- | M] (Acer Incorporated) -- C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
PRC - [2011/04/22 17:44:14 | 000,244,624 | ---- | M] (Acer Incorporated) -- C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
PRC - [2011/03/30 23:05:00 | 002,009,704 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011/03/14 12:44:38 | 000,414,800 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LMutilps32.exe
PRC - [2011/03/14 12:44:38 | 000,334,416 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LMworker.exe
PRC - [2011/03/14 12:44:36 | 001,081,424 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LManager.exe
PRC - [2011/03/14 12:44:36 | 000,352,336 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe
PRC - [2011/03/09 18:11:22 | 000,257,344 | ---- | M] (NTI Corporation) -- C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe
PRC - [2011/03/09 18:11:02 | 000,295,744 | ---- | M] (NTI Corporation) -- C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe
PRC - [2011/02/18 09:47:12 | 000,079,192 | ---- | M] (Research In Motion Limited) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
PRC - [2010/12/22 21:25:02 | 002,656,280 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2010/12/22 21:24:58 | 000,325,656 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2010/11/08 09:50:48 | 000,810,144 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
PRC - [2010/09/30 02:06:46 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) -- c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
PRC - [2010/09/14 02:32:32 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2010/09/14 02:32:30 | 000,283,160 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
PRC - [2010/07/29 00:40:56 | 000,311,760 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
PRC - [2010/05/18 07:46:01 | 001,989,120 | ---- | M] () -- C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe
PRC - [2010/05/04 20:07:22 | 000,503,080 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Update\NASvc.exe
PRC - [2010/04/01 18:59:58 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2009/12/26 20:02:22 | 000,349,600 | ---- | M] (Panasonic Corporation) -- C:\Program Files (x86)\Common Files\Panasonic\VideoCam Suite AutoStart\VideoCamSuiteAutoStart.exe
PRC - [2009/12/02 22:23:38 | 000,209,768 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2009/12/02 22:23:32 | 000,483,688 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2007/06/15 11:57:42 | 000,145,504 | ---- | M] (B.H.A Corporation) -- C:\Windows\SysWOW64\bgsvcgen.exe

========== Modules (No Company Name) ==========

MOD - [2012/01/01 11:18:48 | 011,833,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\b41e38edbd6dfe20997f6ea7c080aceb\System.Web.ni.dll
MOD - [2012/01/01 11:18:39 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\b559a471eef00081f0b5c2719d1d9623\System.Runtime.Remoting.ni.dll
MOD - [2011/10/16 11:11:54 | 003,347,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\d7a64c28cf0c90e6c48af4f7d6f9ed41\WindowsBase.ni.dll
MOD - [2011/10/16 11:11:54 | 000,014,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\ebfad289d9759034cd3a887802fadb5b\IAStorCommon.ni.dll
MOD - [2011/10/16 11:11:51 | 000,475,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\60c320dbe033e8ff4830cdc059933f2c\IAStorUtil.ni.dll
MOD - [2011/10/16 11:11:49 | 012,433,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6e592e424a204aafeadbe22b6b31b9db\System.Windows.Forms.ni.dll
MOD - [2011/10/16 11:11:41 | 001,587,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\3b2cfd85528a27eb71dc41d8067359a1\System.Drawing.ni.dll
MOD - [2011/10/16 11:11:34 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\130ad4d9719e566ca933ac7158a04203\System.Xml.ni.dll
MOD - [2011/10/16 11:11:30 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\2d5bcbeb9475ef62189f605bcca1cec6\System.Configuration.ni.dll
MOD - [2011/10/16 11:11:29 | 007,963,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\abab08afa60a6f06bdde0fcc9649c379\System.ni.dll
MOD - [2011/10/16 11:11:21 | 011,490,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\a1a82db68b3badc7c27ea1f6579d22c5\mscorlib.ni.dll
MOD - [2011/07/12 01:37:35 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_cs_b77a5c561934e089\System.Runtime.Remoting.resources.dll
MOD - [2011/07/06 12:24:37 | 000,688,128 | ---- | M] () -- C:\Windows\Samsung\PanelMgr\SSMMgr.exe
MOD - [2011/04/21 14:59:06 | 001,131,840 | ---- | M] () -- C:\Users\Otas\AppData\Roaming\Mozilla\Firefox\Profiles\pxmy4dub.default\extensions\DTToolbar@toolbarnet.com\components\DTToolbarFF.dll
MOD - [2011/03/09 18:13:18 | 000,465,640 | ---- | M] () -- C:\Program Files (x86)\NTI\Packard Bell MyBackup\sqlite3.dll
MOD - [2010/11/13 03:00:59 | 000,303,104 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_cs_b77a5c561934e089\mscorlib.resources.dll
MOD - [2010/05/18 07:46:01 | 001,989,120 | ---- | M] () -- C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe
MOD - [2010/04/01 18:59:58 | 001,015,256 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\js3250.dll
MOD - [2009/11/19 13:10:25 | 001,384,520 | ---- | M] () -- C:\Windows\twain_32\Samsung\SCX3200\SSOle.dll

========== Win32 Services (SafeList) ==========

SRV:64bit: - [2012/01/21 16:50:03 | 000,538,000 | ---- | M] (Protection Technology) [Auto | Stopped] -- C:\Windows\SysNative\appdrvrem01.exe -- (appdrvrem01)
SRV:64bit: - [2012/01/09 21:21:47 | 001,030,600 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)
SRV:64bit: - [2011/05/10 22:01:08 | 000,872,552 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe -- (ePowerSvc)
SRV:64bit: - [2011/04/22 17:44:14 | 000,244,624 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe -- (Live Updater Service)
SRV:64bit: - [2010/11/08 09:51:20 | 000,042,360 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv)
SRV:64bit: - [2010/11/08 09:50:48 | 000,810,144 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe -- (ekrn)
SRV:64bit: - [2010/09/23 02:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:64bit: - [2009/07/14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2012/01/03 14:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011/05/26 07:40:48 | 000,029,696 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe -- (GREGService)
SRV - [2011/03/30 23:05:00 | 002,009,704 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011/03/14 12:44:36 | 000,352,336 | ---- | M] (Dritek System Inc.) [Auto | Running] -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe -- (DsiWMIService)
SRV - [2011/03/09 18:11:22 | 000,257,344 | ---- | M] (NTI Corporation) [Auto | Running] -- C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe -- (NTI IScheduleSvc)
SRV - [2010/12/22 21:25:02 | 002,656,280 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R)
SRV - [2010/12/22 21:24:58 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R)
SRV - [2010/10/12 18:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)
SRV - [2010/09/30 02:06:46 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor9.0)
SRV - [2010/09/14 02:32:32 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel(R)
SRV - [2010/05/04 20:07:22 | 000,503,080 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2010/03/18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/12/02 22:23:38 | 000,209,768 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2009/12/02 22:23:32 | 000,483,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2009/06/10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2007/06/15 11:57:42 | 000,145,504 | ---- | M] (B.H.A Corporation) [Auto | Running] -- C:\Windows\SysWOW64\bgsvcgen.exe -- (bgsvcgen)

========== Driver Services (SafeList) ==========

DRV:64bit: - [2012/01/21 16:50:03 | 002,639,976 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\appdrv01.sys -- (appdrv01) Application Driver (01)
DRV:64bit: - [2012/01/18 17:36:21 | 000,088,480 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt)
DRV:64bit: - [2012/01/18 17:36:19 | 000,046,400 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt)
DRV:64bit: - [2011/09/18 08:24:53 | 000,082,816 | ---- | M] (VSO Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pcouffin.sys -- (pcouffin)
DRV:64bit: - [2011/09/17 19:44:40 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2011/05/16 22:57:32 | 000,051,240 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\bScsiMSa.sys -- (bScsiMSa)
DRV:64bit: - [2011/05/06 18:11:12 | 000,086,056 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\bScsiSDa.sys -- (bScsiSDa)
DRV:64bit: - [2011/04/15 19:08:28 | 012,228,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2011/03/30 23:05:00 | 000,025,960 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
DRV:64bit: - [2011/03/14 07:36:08 | 000,011,576 | ---- | M] (Samsung Electronics) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\SSPORT.sys -- (SSPORT)
DRV:64bit: - [2011/03/11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011/02/16 16:23:46 | 000,074,240 | ---- | M] (Research In Motion Limited) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RimUsb_AMD64.sys -- (RimUsb)
DRV:64bit: - [2011/01/21 02:15:30 | 000,019,496 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\b57xdmp.sys -- (b57xdmp)
DRV:64bit: - [2011/01/21 02:15:28 | 000,067,624 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\b57xdbd.sys -- (b57xdbd)
DRV:64bit: - [2011/01/17 23:56:14 | 000,412,712 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a) Broadcom NetLink (TM)
DRV:64bit: - [2010/11/21 04:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/11/21 04:23:47 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2010/11/21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/21 04:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2010/11/12 07:23:40 | 000,138,024 | ---- | M] (ELAN Microelectronics Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD)
DRV:64bit: - [2010/11/09 11:26:46 | 002,377,216 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2010/10/20 01:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) Intel(R)
DRV:64bit: - [2010/10/15 09:28:18 | 000,317,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel(R)
DRV:64bit: - [2010/09/14 02:24:26 | 000,437,272 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2010/09/03 06:13:46 | 000,170,104 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm)
DRV:64bit: - [2010/07/29 12:31:26 | 000,171,152 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfw.sys -- (epfw)
DRV:64bit: - [2010/07/29 12:31:26 | 000,141,264 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv)
DRV:64bit: - [2010/07/29 12:31:26 | 000,050,624 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfwwfp.sys -- (epfwwfp)
DRV:64bit: - [2010/07/29 12:31:26 | 000,033,632 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\epfwndis.sys -- (Epfwndis)
DRV:64bit: - [2010/03/19 02:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2010/01/27 03:09:02 | 000,047,632 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\npf.sys -- (npf)
DRV:64bit: - [2009/12/02 22:23:38 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
DRV:64bit: - [2009/12/02 22:23:34 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
DRV:64bit: - [2009/12/02 22:23:32 | 000,269,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
DRV:64bit: - [2009/12/02 22:23:26 | 000,721,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
DRV:64bit: - [2009/07/31 13:40:06 | 000,050,856 | ---- | M] (Tether) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\qrkis.sys -- (qrkis)
DRV:64bit: - [2009/07/14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/14 01:10:47 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rootmdm.sys -- (ROOTMODEM)
DRV:64bit: - [2009/06/10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/05/06 00:46:08 | 000,018,432 | ---- | M] (NewTech Infosystems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NTIDrvr.sys -- (NTIDrvr)
DRV:64bit: - [2009/05/06 00:46:08 | 000,016,896 | ---- | M] (NewTech Infosystems Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UBHelper.sys -- (UBHelper)
DRV:64bit: - [2009/01/09 15:02:08 | 000,031,744 | ---- | M] (Research in Motion Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RimSerial_AMD64.sys -- (RimVSerPort)
DRV:64bit: - [2006/08/25 13:36:52 | 000,039,208 | ---- | M] (B.H.A Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\cdrbsdrv.sys -- (cdrbsdrv)
DRV:64bit: - [2005/09/23 21:18:34 | 000,261,120 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MarvinBus64.sys -- (MarvinBus)
DRV - [2009/10/28 06:09:33 | 000,011,576 | ---- | M] (Samsung Electronics) [Kernel | Auto | Running] -- C:\Windows\SysWOW64\drivers\SSPORT.SYS -- (SSPORT)
DRV - [2009/07/14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2002/07/17 07:53:02 | 000,016,877 | ---- | M] (Adaptec) [Kernel | System | Stopped] -- C:\Windows\SysWow64\drivers\Aspi32.sys -- (ASPI32)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://packardbell.msn.com
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://packardbell.msn.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-3243394068-3903203777-451099978-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
IE - HKU\S-1-5-21-3243394068-3903203777-451099978-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Ask.com"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz"
FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.8.0191
FF - prefs.js..keyword.URL: "http://www.google.com/search?ie=UTF-8&o ... &gfns=1&q="

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@RIM.com/WebSLLauncher,version=1.0: C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll ()
FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\4\NP_wtapp.dll ()
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\PROGRAM FILES\ESET\ESET SMART SECURITY\MOZILLA THUNDERBIRD [2011/11/13 10:39:57 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/02/07 17:24:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/02/07 17:24:18 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2011/11/13 10:39:57 | 000,000,000 | ---D | M]

[2012/01/07 15:10:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Otas\AppData\Roaming\Mozilla\Extensions
[2012/02/09 19:17:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Otas\AppData\Roaming\Mozilla\Firefox\Profiles\pxmy4dub.default\extensions
[2012/02/07 16:44:53 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Users\Otas\AppData\Roaming\Mozilla\Firefox\Profiles\pxmy4dub.default\extensions\DTToolbar@toolbarnet.com
[2012/02/08 18:50:11 | 000,002,572 | ---- | M] () -- C:\Users\Otas\AppData\Roaming\Mozilla\Firefox\Profiles\pxmy4dub.default\searchplugins\askcom.xml
[2011/09/17 19:45:08 | 000,002,055 | ---- | M] () -- C:\Users\Otas\AppData\Roaming\Mozilla\Firefox\Profiles\pxmy4dub.default\searchplugins\daemon-search.xml
[2012/02/07 17:24:18 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2010/04/01 17:51:34 | 000,000,638 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\jyxo-cz.xml
[2010/04/01 17:51:34 | 000,001,687 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\mall-cz.xml
[2010/04/01 17:51:34 | 000,001,367 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\seznam-cz.xml
[2010/04/01 17:51:34 | 000,000,654 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\slunecnice-cz.xml
[2010/04/01 17:51:34 | 000,001,179 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-cz.xml

Ot@s · #8 Příspěvek od **Ot@s** » 09 úno 2012 19:51

O1 HOSTS File: ([2009/06/10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-3243394068-3903203777-451099978-1001\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [CDAServer] C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe ()
O4:64bit: - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4:64bit: - HKLM..\Run: [ETDCtrl] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [Power Management] C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe (Acer Incorporated)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [3200 Scan2PC] C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe ()
O4 - HKLM..\Run: [BackupManagerTray] C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe (NTI Corporation)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.)
O4 - HKLM..\Run: [RIMBBLaunchAgent.exe] C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe (Research In Motion Limited)
O4 - HKLM..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe ()
O4 - HKU\S-1-5-21-3243394068-3903203777-451099978-1000..\RunOnce: [ScrSav] C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\S-1-5-21-3243394068-3903203777-451099978-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O1364bit: - gopher Prefix: missing
O15 - HKLM\..Trusted Domains: mojebanka.cz ([*] https in Trusted sites)
O15 - HKU\S-1-5-21-3243394068-3903203777-451099978-1001\..Trusted Domains: mojebanka.cz ([*] https in Trusted sites)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_29)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.240.239.1 89.203.152.3
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BE7C7AAF-315F-4366-BF12-71197C33332E}: DhcpNameServer = 10.240.239.1 89.203.152.3
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O20:64bit: - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) -C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{5ae5f9b0-e15d-11e0-8161-b870f4a77181}\Shell - "" = AutoRun
O33 - MountPoints2\{5ae5f9b0-e15d-11e0-8161-b870f4a77181}\Shell\AutoRun\command - "" = F:\setup.exe
O33 - MountPoints2\{d89c3fb6-e6be-11e0-afe2-b870f4a77181}\Shell - "" = AutoRun
O33 - MountPoints2\{d89c3fb6-e6be-11e0-afe2-b870f4a77181}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FMVC - C:\Windows\SysWow64\fmcodec.DLL (Fox Magic Software)
Drivers32: vidc.mjpg - pvmjpg30.dll File not found
Drivers32: vidc.XVID - C:\Windows\SysWow64\xvidvfw.dll ()
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2012/02/09 19:08:43 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\Otas\Desktop\OTL.exe
[2012/02/09 18:15:53 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{6D6BF3CE-976B-4600-8D8A-77E4211F5DA7}
[2012/02/08 21:42:43 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{247C7F07-38A9-47B6-82D5-C5D65E8D2BD8}
[2012/02/08 21:42:29 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{5F5A003A-593B-49EB-BD9F-4ADE50AB6182}
[2012/02/08 18:56:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher
[2012/02/08 18:55:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DsNET Corp
[2012/02/08 18:06:49 | 000,000,000 | ---D | C] -- C:\Program Files\WinPcap
[2012/02/08 18:06:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VDownloader
[2012/02/08 17:07:32 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{AA503D0F-05D6-40AC-A36F-B2AEB081F22A}
[2012/02/08 17:07:17 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{A6CD3FC1-28CF-4E03-BC49-0FF83DA21B60}
[2012/02/07 17:34:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Windows Genuine Advantage
[2012/02/07 17:24:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox
[2012/02/07 16:39:39 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{235B79DE-F9BE-43EF-933E-FD9568EBE608}
[2012/02/07 16:39:22 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{D999BE44-0C25-4E59-BDAD-82B91A1DB6EA}
[2012/02/07 04:29:52 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{2DE914F5-C7CA-40B6-9769-6D9D3C86CC49}
[2012/02/07 04:29:33 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{14CF3BE3-F88F-48EC-BE6C-47C208442BAA}
[2012/02/06 17:35:13 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{EFB6FAFB-C693-4AB4-876A-DC169654E9BA}
[2012/02/06 17:34:55 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{0D580626-1972-47AE-AC79-E15DC29116BF}
[2012/02/06 07:55:17 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{C9DFA8DF-B897-433F-BADB-82DAAA074143}
[2012/02/05 20:33:35 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{9D736393-ACE7-47D8-8646-C39C7DD4E353}
[2012/02/05 20:32:45 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{C3367FAD-FE2A-4CF3-9156-E870B2F6FFDC}
[2012/02/05 14:10:11 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{2A05070D-C789-4033-B26E-83374F538B6E}
[2012/02/05 13:36:36 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{20A8032F-FDBB-4FEE-BB0A-CC13B8D38C14}
[2012/02/05 13:35:54 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{C12BF06D-CDBC-40DD-A4B2-F7EC2F414032}
[2012/02/05 09:22:53 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{094815D3-E556-49D8-855C-69906758F2D1}
[2012/02/05 09:22:15 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{BBA43982-9AC5-42DB-AFD9-432C66AB9B49}
[2012/02/04 16:24:14 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{20E64614-D449-4E13-8F61-6D2CF2B1E074}
[2012/02/04 10:30:00 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{E6E617EA-4960-46C9-93E3-56FA3D98C519}
[2012/02/04 10:10:57 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{959ACAFD-8526-48D2-906F-DBFBE492A438}
[2012/02/04 10:10:40 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{2D487DE3-3B16-41CE-9FB3-5FAE7FB95427}
[2012/02/04 08:37:24 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{E229EA2E-F17E-4226-9ABC-596DDC6E829B}
[2012/02/04 08:37:07 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{CB66A0B4-AFF5-442E-B643-9D0116219C91}
[2012/02/03 14:01:05 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{A3D9DFE0-120D-4344-8AC0-92AC20B7D303}
[2012/02/03 14:00:52 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{C3D06283-6155-44DF-9758-57722735E17D}
[2012/02/03 09:06:42 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{DFAF17BF-2708-4C51-A5A6-70394B674135}
[2012/02/03 09:06:15 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{95C82B34-1C98-48AD-BA82-A4BDE30F8D66}
[2012/02/02 23:07:11 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{44F6AF65-E823-4CBB-A3EC-E78C9A66078D}
[2012/02/02 23:06:53 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Local\{91D49A7B-53BE-4460-AA0C-9EA2521A458D}
[2011/09/18 08:24:53 | 000,082,816 | ---- | C] (VSO Software) -- C:\Users\Otas\AppData\Roaming\pcouffin.sys

========== Files - Modified Within 7 Days ==========

[2012/02/09 19:20:44 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012/02/09 19:13:41 | 000,016,976 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/02/09 19:13:41 | 000,016,976 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/02/09 19:10:31 | 001,471,574 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012/02/09 19:10:31 | 000,631,736 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2012/02/09 19:10:31 | 000,616,452 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012/02/09 19:10:31 | 000,122,100 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2012/02/09 19:10:31 | 000,106,574 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012/02/09 19:08:57 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Otas\Desktop\OTL.exe
[2012/02/09 19:05:57 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/02/09 19:05:50 | 3104,722,944 | -HS- | M] () -- C:\hiberfil.sys
[2012/02/08 19:57:59 | 000,001,057 | ---- | M] () -- C:\Users\Otas\AppData\Roaming\vso_ts_preview.xml
[2012/02/08 18:56:22 | 000,001,198 | ---- | M] () -- C:\Users\Public\Desktop\aTube Catcher.lnk
[2012/02/03 14:26:49 | 000,002,055 | ---- | M] () -- C:\Users\Public\Desktop\Zoner Photo Studio 13 x64.lnk

========== Files Created - No Company Name ==========

[2012/02/09 19:20:44 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012/02/08 18:56:22 | 000,001,198 | ---- | C] () -- C:\Users\Public\Desktop\aTube Catcher.lnk
[2012/01/19 21:17:04 | 000,210,032 | ---- | C] () -- C:\Windows\SysWow64\DBCLIENT.DLL
[2011/12/04 13:34:18 | 000,000,016 | ---- | C] () -- C:\Windows\popcinfo.dat
[2011/10/16 19:16:07 | 014,851,106 | ---- | C] () -- C:\Windows\SysWow64\ArtD - Grafický atelier Černý_Book-Maker_uninstaller.exe
[2011/10/08 21:33:00 | 000,000,090 | ---- | C] () -- C:\Windows\AoADVDRipper.INI
[2011/10/08 21:32:54 | 000,765,952 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2011/10/08 21:32:54 | 000,180,224 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2011/10/06 20:00:02 | 000,493,432 | ---- | C] () -- C:\Windows\ssndii.exe
[2011/10/06 19:59:35 | 000,116,600 | ---- | C] () -- C:\Windows\Wiainst.exe
[2011/09/18 08:25:33 | 000,001,057 | ---- | C] () -- C:\Users\Otas\AppData\Roaming\vso_ts_preview.xml
[2011/09/18 08:24:53 | 000,099,384 | ---- | C] () -- C:\Users\Otas\AppData\Roaming\inst.exe
[2011/09/18 08:24:53 | 000,007,859 | ---- | C] () -- C:\Users\Otas\AppData\Roaming\pcouffin.cat
[2011/09/18 08:24:53 | 000,001,167 | ---- | C] () -- C:\Users\Otas\AppData\Roaming\pcouffin.inf
[2011/09/14 20:10:23 | 001,471,654 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011/09/13 19:32:25 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2011/05/31 11:11:46 | 000,963,116 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin
[2011/05/31 11:11:45 | 000,218,304 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin
[2011/05/31 11:11:44 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
[2011/05/31 11:11:43 | 013,359,616 | ---- | C] () -- C:\Windows\SysWow64\ig4icd32.dll
[2011/05/31 11:11:43 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin
[2010/01/27 03:09:02 | 000,053,299 | ---- | C] () -- C:\Windows\SysWow64\pthreadVC.dll
[2009/07/14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009/07/14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009/07/14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009/07/14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009/07/14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat

========== LOP Check ==========

[2012/01/09 21:24:55 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Autodesk
[2011/11/09 20:44:01 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Bioshock2
[2011/10/05 19:25:20 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/09/17 19:51:43 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\DAEMON Tools Lite
[2012/01/16 19:53:43 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\DraftSight
[2011/11/13 10:40:30 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\ESET
[2011/09/14 21:39:27 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Research In Motion
[2012/01/17 18:36:56 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Samsung
[2011/09/15 19:27:55 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\SNS
[2012/02/09 19:05:16 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\SoftGrid Client
[2011/09/17 18:40:59 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Tific
[2011/09/14 20:11:39 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\TP
[2012/02/08 19:58:00 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Vso
[2011/12/09 19:03:16 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Windows Live Writer
[2012/01/29 15:59:38 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\XRay Engine
[2011/09/16 22:49:07 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Zoner
[2012/01/31 06:48:28 | 000,032,604 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

========== Custom Scans ==========

< netsvc >

< MD5 for: ATAPI.SYS >
[2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010/11/21 04:24:27 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010/11/21 04:24:27 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2010/11/21 04:23:53 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010/11/21 04:23:53 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2010/11/21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010/11/21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010/11/21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2011/02/26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2011/02/25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011/02/25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011/02/26 07:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010/11/21 04:24:25 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2011/02/25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011/02/25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010/11/21 04:24:11 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe

< MD5 for: HAL.DLL >
[2010/11/21 04:24:08 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010/11/21 04:24:08 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: SCECLI.DLL >
[2010/11/21 04:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010/11/21 04:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010/11/21 04:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010/11/21 04:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SVCHOST.EXE >
[2009/07/14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009/07/14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009/07/14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009/07/14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2011/09/29 18:41:37 | 001,912,176 | ---- | M] (Microsoft Corporation) MD5=3810F06A4D74A7D62641EE73D6B3C660 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21828_none_11c6e9949627e69c\tcpip.sys
[2010/11/21 04:24:08 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2011/04/25 06:33:51 | 001,923,968 | ---- | M] (Microsoft Corporation) MD5=92CE29D95AC9DD2D0EE9061D551BA250 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17603_none_114de9497cfe9316\tcpip.sys
[2011/06/21 07:20:30 | 001,914,752 | ---- | M] (Microsoft Corporation) MD5=A0EB71E0DC047C7CC95CD6AB4036296E -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21754_none_11a276c29643d7ec\tcpip.sys
[2011/04/25 07:16:34 | 001,927,552 | ---- | M] (Microsoft Corporation) MD5=B77977AEB2FF159D01DB08A309989C5F -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21712_none_11cbb5de9625357a\tcpip.sys
[2011/03/19 08:45:16 | 001,927,552 | ---- | M] (Microsoft Corporation) MD5=CB6A53EF141CC3DA32DA54F7E75D301B -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21687_none_118505f696597a9d\tcpip.sys
[2011/03/19 08:39:54 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=DC08410DB2D0CC542DACAC7A90E6CB7A -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17582_none_10f667b97d405c20\tcpip.sys
[2011/06/21 07:34:00 | 001,923,968 | ---- | M] (Microsoft Corporation) MD5=F0E98C00A09FDF791525829A1D14240F -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17638_none_11327af77d12659c\tcpip.sys
[2011/09/29 17:29:28 | 001,923,952 | ---- | M] (Microsoft Corporation) MD5=FC62769E7BFF2896035AEED399108162 -- C:\Windows\SysNative\drivers\tcpip.sys
[2011/09/29 17:29:28 | 001,923,952 | ---- | M] (Microsoft Corporation) MD5=FC62769E7BFF2896035AEED399108162 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17697_none_10f09b257d43f3eb\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010/11/21 04:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010/11/21 04:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2010/11/21 04:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010/11/21 04:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010/11/21 04:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010/11/21 04:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe

< %systemroot%*.* /U /s >
[1 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[6 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[21 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

Ot@s · #9 Příspěvek od **Ot@s** » 09 úno 2012 19:52

< %APPDATA%\*. >
[2011/12/15 22:15:39 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Adobe
[2012/01/09 21:24:55 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Autodesk
[2011/11/09 20:44:01 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Bioshock2
[2011/10/05 19:25:20 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/09/18 07:47:46 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Corel
[2011/10/01 18:59:28 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\CyberLink
[2011/09/17 19:51:43 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\DAEMON Tools Lite
[2012/01/16 19:53:43 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\DraftSight
[2011/11/13 10:40:30 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\ESET
[2011/09/13 18:35:33 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Identities
[2011/09/13 18:36:01 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Intel Corporation
[2011/09/13 18:35:49 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Macromedia
[2010/11/21 08:16:41 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Media Center Programs
[2012/01/15 11:19:13 | 000,000,000 | --SD | M] -- C:\Users\Otas\AppData\Roaming\Microsoft
[2011/09/13 19:32:31 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Mozilla
[2011/10/23 14:41:22 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Nero
[2011/09/14 21:39:27 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Research In Motion
[2012/01/17 18:36:56 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Samsung
[2011/09/20 17:48:10 | 000,000,000 | RH-D | M] -- C:\Users\Otas\AppData\Roaming\SecuROM
[2012/02/09 19:07:15 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Skype
[2011/09/15 19:27:55 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\SNS
[2012/02/09 19:05:16 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\SoftGrid Client
[2011/09/17 18:40:59 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Tific
[2011/09/14 20:11:39 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\TP
[2012/01/07 17:56:55 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\U3
[2012/02/08 19:58:00 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Vso
[2011/12/09 19:03:16 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Windows Live Writer
[2011/09/15 21:19:35 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\WinRAR
[2012/01/29 15:59:38 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\XRay Engine
[2011/09/16 22:49:07 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Zoner

< %APPDATA%\*.exe /s >
[2011/09/18 08:39:45 | 000,099,384 | ---- | M] () -- C:\Users\Otas\AppData\Roaming\inst.exe
[2011/09/13 18:46:27 | 000,038,784 | ---- | M] () -- C:\Users\Otas\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
[2011/09/17 20:12:56 | 000,029,926 | R--- | M] () -- C:\Users\Otas\AppData\Roaming\Microsoft\Installer\{6DE721A5-5E89-4D74-994C-652BB3C0672E}\ARPPRODUCTICON.exe
[2011/11/04 19:52:52 | 000,099,678 | R--- | M] () -- C:\Users\Otas\AppData\Roaming\Microsoft\Installer\{E2B4FE1C-2CFA-47EE-A88C-A14D0FF1F0B0}\_FA1973C448F0CDEF5FD499.exe
[2007/10/23 09:27:20 | 000,110,592 | ---- | M] () -- C:\Users\Otas\AppData\Roaming\U3\temp\cleanup.exe
[2008/05/02 10:41:48 | 003,493,888 | -H-- | M] (SanDisk Corporation) -- C:\Users\Otas\AppData\Roaming\U3\temp\Launchpad Removal.exe
[2011/09/16 23:13:36 | 012,505,560 | ---- | M] (ZONER software ) -- C:\Users\Otas\AppData\Roaming\Zoner\NLMDB\product.0034\autoupdate.cz\ZPS13_Update_Build07.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2012/02/09 19:08:33 | 000,000,018 | ---- | M] () -- C:\Windows\system32\log.txt

< %SYSTEMDRIVE%\*.exe >

< %userprofile%\Plocha\*.* >

< %userprofile%\Desktop\*.* >
[2011/10/08 21:32:56 | 000,001,005 | ---- | M] () -- C:\Users\Otas\Desktop\AoA DVD Ripper.lnk
[2011/11/04 19:52:52 | 000,003,015 | ---- | M] () -- C:\Users\Otas\Desktop\BBSAK.lnk
[2011/12/28 17:45:58 | 000,057,771 | ---- | M] () -- C:\Users\Otas\Desktop\Call Of Pripyat - NÁVOD.docx
[2012/01/22 12:59:53 | 000,033,273 | ---- | M] () -- C:\Users\Otas\Desktop\Clear Sky.docx
[2012/01/22 12:13:25 | 000,001,030 | ---- | M] () -- C:\Users\Otas\Desktop\clear_sky_v1.5.05_tr+8 – zástupce.lnk
[2011/09/18 08:39:44 | 000,001,240 | ---- | M] () -- C:\Users\Otas\Desktop\ConvertXtoDVD 4.lnk
[2011/09/18 07:51:28 | 000,002,649 | ---- | M] () -- C:\Users\Otas\Desktop\Corel PHOTO-PAINT 11.lnk
[2011/09/18 07:51:40 | 000,002,633 | ---- | M] () -- C:\Users\Otas\Desktop\CorelDRAW 11.lnk
[2011/09/13 18:35:44 | 000,000,282 | -HS- | M] () -- C:\Users\Otas\Desktop\desktop.ini
[2012/01/11 17:55:33 | 000,561,080 | ---- | M] () -- C:\Users\Otas\Desktop\Manual SiPhone.pdf
[2011/11/04 18:49:38 | 000,002,475 | ---- | M] () -- C:\Users\Otas\Desktop\Microsoft Excel Starter 2010.lnk
[2011/11/04 18:49:45 | 000,002,473 | ---- | M] () -- C:\Users\Otas\Desktop\Microsoft Word Starter 2010.lnk
[2011/12/25 11:05:23 | 000,000,085 | ---- | M] () -- C:\Users\Otas\Desktop\MP4.txt
[2011/12/06 21:44:27 | 000,008,240 | ---- | M] () -- C:\Users\Otas\Desktop\Náměty na vtipy....jnt
[2012/02/09 19:08:57 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Otas\Desktop\OTL.exe
[2012/01/08 22:25:10 | 000,001,810 | ---- | M] () -- C:\Users\Otas\Desktop\Platba vizitky.txt
[2012/01/01 13:31:02 | 003,414,400 | ---- | M] () -- C:\Users\Otas\Desktop\preview.mp3
[2012/01/19 21:16:12 | 000,001,094 | ---- | M] () -- C:\Users\Otas\Desktop\ProFact 3.0 Free.lnk
[2010/02/09 03:24:29 | 001,077,697 | ---- | M] () -- C:\Users\Otas\Desktop\S.T.A.L.K.E.R. COP Trainer +10_.exe

< %ALLUSERSPROFILE%\Plocha\*.* >

< %ALLUSERSPROFILE%\Desktop\*.* >

< *crack* /s >
[1999/06/11 19:18:36 | 000,092,827 | ---- | M] () -- \Program Files (x86)\Corel\Corel Graphics 11\Custom Data\Bumpmap\Cracks.cpt
[2002/01/30 17:31:34 | 000,016,068 | ---- | M] () -- \Program Files (x86)\Corel\Corel Graphics 11\Custom Data\Canvas\cracks2c.pcx
[2002/01/30 18:15:39 | 000,010,560 | ---- | M] () -- \Program Files (x86)\Corel\Corel Graphics 11\Custom Data\Tiles\CRACKS2M.CPT
[2008/04/25 17:51:06 | 000,016,978 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\sounds\firecrackle.ogg
[2011/12/04 13:33:21 | 000,165,972 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\sounds\cached_firecrackle.wav
[2003/06/24 21:49:00 | 000,016,978 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\sounds\firecrackle.ogg
[2008/04/25 17:51:06 | 000,016,978 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\sounds\firecrackle.ogg
[2008/04/25 17:51:06 | 000,016,978 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\sounds\firecrackle.ogg
[2008/04/25 17:51:06 | 000,016,978 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\sounds\firecrackle.ogg
[2005/10/28 05:07:42 | 000,016,978 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\sounds\firecrackle.ogg
[2005/10/28 05:07:42 | 000,016,978 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\sounds\firecrackle.ogg
[2010/09/30 00:06:32 | 001,674,383 | ---- | M] () -- \ProgramData\Adobe\Photoshop Elements\9.0\Photo Creations\backgrounds\BG_Creamcrackled.jpg
[2010/09/30 00:06:32 | 000,001,560 | ---- | M] () -- \ProgramData\Adobe\Photoshop Elements\9.0\Photo Creations\backgrounds\BG_Creamcrackled.metadata.xml
[2010/09/30 00:06:32 | 000,001,344 | ---- | M] () -- \ProgramData\Adobe\Photoshop Elements\9.0\Photo Creations\backgrounds\BG_Creamcrackled.thumbnail.jpg
[2010/09/30 00:07:10 | 000,448,049 | ---- | M] () -- \ProgramData\Adobe\Photoshop Elements\9.0\Photo Creations\backgrounds\Cracked Paint.jpg
[2010/09/30 00:07:10 | 000,001,014 | ---- | M] () -- \ProgramData\Adobe\Photoshop Elements\9.0\Photo Creations\backgrounds\Cracked Paint.metadata.xml
[2010/09/30 00:07:10 | 000,002,577 | ---- | M] () -- \ProgramData\Adobe\Photoshop Elements\9.0\Photo Creations\backgrounds\Cracked Paint.thumbnail.jpg
[2010/09/30 00:06:32 | 001,674,383 | ---- | M] () -- \Users\All Users\Adobe\Photoshop Elements\9.0\Photo Creations\backgrounds\BG_Creamcrackled.jpg
[2010/09/30 00:06:32 | 000,001,560 | ---- | M] () -- \Users\All Users\Adobe\Photoshop Elements\9.0\Photo Creations\backgrounds\BG_Creamcrackled.metadata.xml
[2010/09/30 00:06:32 | 000,001,344 | ---- | M] () -- \Users\All Users\Adobe\Photoshop Elements\9.0\Photo Creations\backgrounds\BG_Creamcrackled.thumbnail.jpg
[2010/09/30 00:07:10 | 000,448,049 | ---- | M] () -- \Users\All Users\Adobe\Photoshop Elements\9.0\Photo Creations\backgrounds\Cracked Paint.jpg
[2010/09/30 00:07:10 | 000,001,014 | ---- | M] () -- \Users\All Users\Adobe\Photoshop Elements\9.0\Photo Creations\backgrounds\Cracked Paint.metadata.xml
[2010/09/30 00:07:10 | 000,002,577 | ---- | M] () -- \Users\All Users\Adobe\Photoshop Elements\9.0\Photo Creations\backgrounds\Cracked Paint.thumbnail.jpg
[2012/01/10 21:10:45 | 000,000,759 | ---- | M] () -- \Users\Otas\AppData\Roaming\Microsoft\Windows\Recent\Crack y Keygen AutoCAD 2010.lnk
[2012/01/10 21:14:32 | 000,000,892 | ---- | M] () -- \Users\Otas\AppData\Roaming\Microsoft\Windows\Recent\Crack-CYGiSO.lnk
[2012/01/10 21:08:27 | 000,000,711 | ---- | M] () -- \Users\Otas\AppData\Roaming\Microsoft\Windows\Recent\Crack-y-Keygen-AutoCAD-2010.lnk
[2012/01/21 17:24:35 | 000,000,309 | ---- | M] () -- \Users\Otas\AppData\Roaming\Microsoft\Windows\Recent\Crack.lnk
[2012/01/19 21:09:48 | 734,003,200 | ---- | M] () -- \Users\Otas\Downloads\Stalker - Clear Sky\Stalker--S.t.a.l.k.e.r-Clear-Sky.CZdub-(+CRACK).part1.rar
[2012/01/21 02:56:14 | 734,003,200 | ---- | M] () -- \Users\Otas\Downloads\Stalker - Clear Sky\Stalker--S.t.a.l.k.e.r-Clear-Sky.CZdub-(+CRACK).part2.rar
[2012/01/21 02:52:05 | 734,003,200 | ---- | M] () -- \Users\Otas\Downloads\Stalker - Clear Sky\Stalker--S.t.a.l.k.e.r-Clear-Sky.CZdub-(+CRACK).part3.rar
[2012/01/21 02:52:09 | 710,296,149 | ---- | M] () -- \Users\Otas\Downloads\Stalker - Clear Sky\Stalker--S.t.a.l.k.e.r-Clear-Sky.CZdub-(+CRACK).part4.rar

< *keygen* /s >
[2012/01/10 21:10:45 | 000,000,759 | ---- | M] () -- \Users\Otas\AppData\Roaming\Microsoft\Windows\Recent\Crack y Keygen AutoCAD 2010.lnk
[2012/01/10 21:08:27 | 000,000,711 | ---- | M] () -- \Users\Otas\AppData\Roaming\Microsoft\Windows\Recent\Crack-y-Keygen-AutoCAD-2010.lnk

< *loader* /s >
[2010/09/30 02:06:40 | 005,326,272 | ---- | M] () -- \Program Files (x86)\Adobe\Elements 9 Organizer\PhotoDownloader.exe
[2011/09/13 18:45:41 | 000,000,025 | ---- | M] () -- \Program Files (x86)\Adobe\Elements 9 Organizer\PhotoDownloader.ini
[2010/09/30 01:42:50 | 000,011,161 | ---- | M] () -- \Program Files (x86)\Adobe\Elements 9 Organizer\apd\shared_assets\bitmaps\main_window\C_LoadError.png
[2010/09/30 02:01:34 | 000,000,273 | ---- | M] () -- \Program Files (x86)\Adobe\Elements 9 Organizer\apd\shared_assets\locales\cs_CZ\Photodownloader.ini
[2010/09/30 01:42:54 | 000,011,196 | ---- | M] () -- \Program Files (x86)\Adobe\Elements 9 Organizer\Assets\bitmaps\main_window\C_LoadError.PNG
[2010/09/30 01:44:14 | 000,002,713 | ---- | M] () -- \Program Files (x86)\Adobe\Elements 9 Organizer\Mozilla\components\uriloader.xpt
[2010/08/11 18:35:04 | 000,161,792 | ---- | M] () -- \Program Files (x86)\BBSAK\javaloader.exe
[2011/03/14 16:12:58 | 010,020,184 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\Loader.exe
[2011/03/14 16:13:02 | 000,635,224 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderClient.dll
[2011/03/14 16:13:04 | 000,876,888 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1025.dll
[2011/03/14 16:13:04 | 000,827,736 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1028.dll
[2011/03/14 16:13:06 | 000,889,176 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1029.dll
[2011/03/14 16:13:08 | 000,908,632 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1031.dll
[2011/03/14 16:13:08 | 000,910,168 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1032.dll
[2011/03/14 16:13:10 | 000,910,680 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1034.dll
[2011/03/14 16:13:10 | 000,910,168 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1036.dll
[2011/03/14 16:13:12 | 000,865,624 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1037.dll
[2011/03/14 16:13:12 | 000,896,344 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1038.dll
[2011/03/14 16:13:14 | 000,906,072 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1040.dll
[2011/03/14 16:13:16 | 000,848,216 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1041.dll
[2011/03/14 16:13:16 | 000,844,120 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1042.dll
[2011/03/14 16:13:18 | 000,897,880 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1043.dll
[2011/03/14 16:13:18 | 000,900,440 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1045.dll
[2011/03/14 16:13:20 | 000,899,416 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1046.dll
[2011/03/14 16:13:20 | 000,894,808 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1049.dll
[2011/03/14 16:13:22 | 000,888,152 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1055.dll
[2011/03/14 16:13:24 | 000,893,272 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1057.dll
[2011/03/14 16:13:24 | 000,823,640 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes2052.dll
[2011/03/14 16:13:26 | 000,906,072 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes2070.dll
[2011/01/20 20:44:20 | 000,011,710 | ---- | M] () -- \Program Files (x86)\CyberLink\HomeMedia\mm\MediaCtrl\ImageLoader.kc
[2011/01/20 20:44:26 | 000,003,489 | ---- | M] () -- \Program Files (x86)\CyberLink\HomeMedia\widget\langloader.kc
[2011/01/20 20:44:26 | 000,012,539 | ---- | M] () -- \Program Files (x86)\CyberLink\HomeMedia\widget\layoutloader.kc
[2011/08/24 14:13:34 | 001,015,128 | ---- | M] () -- \Program Files (x86)\IObit\Game Booster 3\Freeware\GB_FreeSoftwareDownloader.exe
[2009/05/31 11:21:00 | 000,071,008 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2009/05/31 11:21:00 | 000,073,568 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader64.dll
[2008/04/25 17:51:02 | 000,002,116 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\blue-Loader.jpg
[2008/04/25 17:51:04 | 000,007,604 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\Flash-Loader.jpg
[2008/04/25 17:51:04 | 000,007,963 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\Flash-Loader_.jpg
[2008/04/25 17:50:58 | 000,006,428 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\Loader.jpg
[2008/04/25 17:51:00 | 000,028,201 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\loaderbar.png
[2008/04/25 17:51:00 | 000,002,693 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\Loader_.jpg
[2008/04/25 17:51:04 | 000,110,633 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\nr_reloader.gif
[2009/02/16 20:19:46 | 000,043,117 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\nr_reloader_overlay.jpg
[2008/04/25 17:50:58 | 000,003,973 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\nr_reloader_overlaylit.jpg
[2008/04/25 17:51:02 | 000,001,932 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\nr_reloader_overlaylit_.gif
[2009/02/16 20:19:46 | 000,004,525 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\nr_reloader_overlay_.gif
[2008/04/25 17:51:00 | 000,006,343 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\purple-Loader.jpg
[2008/04/25 17:51:02 | 000,006,979 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\title_loaderbar.jpg
[2008/04/25 17:50:58 | 000,004,691 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\title_loaderbarlit.jpg
[2008/04/25 17:51:02 | 000,002,208 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\title_loaderbarlit_.gif
[2008/04/25 17:51:02 | 000,003,075 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\title_loaderbar_.gif
[2009/02/16 20:19:46 | 000,034,066 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\title_loaderbar_clickhere.jpg
[2009/02/16 20:19:46 | 000,037,271 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\title_loaderbar_clickhere_over.jpg
[2004/04/08 22:29:00 | 000,002,116 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\blue-Loader.jpg
[2004/04/08 02:08:00 | 000,007,604 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\Flash-Loader.jpg
[2004/04/08 02:13:00 | 000,007,963 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\Flash-Loader_.jpg
[2004/04/08 02:11:00 | 000,006,428 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\Loader.jpg
[2003/12/17 20:32:00 | 000,028,201 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\loaderbar.png
[2004/04/08 02:12:00 | 000,002,693 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\Loader_.jpg
[2004/03/12 02:25:00 | 000,110,633 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\nr_reloader.gif
[2004/03/11 00:08:00 | 000,011,370 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\nr_reloader_overlay.jpg
[2004/03/12 02:36:00 | 000,003,973 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\nr_reloader_overlaylit.jpg
[2004/03/12 02:36:00 | 000,001,932 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\nr_reloader_overlaylit_.gif
[2004/05/07 01:35:00 | 000,003,829 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\nr_reloader_overlay_.gif
[2004/04/14 18:17:00 | 000,006,343 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\purple-Loader.jpg
[2004/03/11 19:29:00 | 000,006,979 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\title_loaderbar.jpg
[2004/03/17 22:20:00 | 000,004,691 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\title_loaderbarlit.jpg
[2004/03/17 22:20:00 | 000,002,208 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\title_loaderbarlit_.gif
[2004/03/11 19:30:00 | 000,003,075 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\title_loaderbar_.gif
[2004/04/06 00:45:00 | 000,008,190 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\title_loaderbar_clickhere.jpg
[2004/04/06 00:40:00 | 000,008,725 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\title_loaderbar_clickhere_over.jpg
[2011/12/04 13:33:19 | 000,013,218 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\sm_images\blue-Loader.tga
[2011/12/04 13:33:19 | 000,263,570 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\sm_images\flash-Loader.tga
[2011/12/04 13:33:19 | 000,073,938 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\sm_images\Loader.tga
[2011/12/04 13:33:19 | 000,060,562 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\sm_images\purple-Loader.tga
[2008/04/25 17:51:02 | 000,002,116 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\blue-Loader.jpg
[2008/04/25 17:51:04 | 000,007,604 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\Flash-Loader.jpg
[2008/04/25 17:51:04 | 000,007,963 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\Flash-Loader_.jpg
[2008/04/25 17:50:58 | 000,006,428 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\Loader.jpg
[2008/04/25 17:51:00 | 000,028,201 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\loaderbar.png
[2008/04/25 17:51:00 | 000,002,693 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\Loader_.jpg
[2008/04/25 17:51:04 | 000,110,633 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\nr_reloader.gif
[2009/02/16 20:20:00 | 000,044,676 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\nr_reloader_overlay.jpg
[2008/04/25 17:50:58 | 000,003,973 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\nr_reloader_overlaylit.jpg
[2008/04/25 17:51:02 | 000,001,932 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\nr_reloader_overlaylit_.gif
[2009/02/16 20:20:00 | 000,003,291 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\nr_reloader_overlay_.gif
[2008/04/25 17:51:00 | 000,006,343 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\purple-Loader.jpg
[2008/04/25 17:51:02 | 000,006,979 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\title_loaderbar.jpg
[2008/04/25 17:50:58 | 000,004,691 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\title_loaderbarlit.jpg
[2008/04/25 17:51:02 | 000,002,208 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\title_loaderbarlit_.gif
[2008/04/25 17:51:02 | 000,003,075 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\title_loaderbar_.gif
[2009/02/16 20:20:00 | 000,035,513 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\title_loaderbar_clickhere.jpg
[2009/02/16 20:20:00 | 000,038,007 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\title_loaderbar_clickhere_over.jpg
[2008/04/25 17:51:02 | 000,002,116 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\blue-Loader.jpg
[2008/04/25 17:51:04 | 000,007,604 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\Flash-Loader.jpg
[2008/04/25 17:51:04 | 000,007,963 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\Flash-Loader_.jpg
[2008/04/25 17:50:58 | 000,006,428 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\Loader.jpg
[2008/04/25 17:51:00 | 000,028,201 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\loaderbar.png
[2008/04/25 17:51:00 | 000,002,693 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\Loader_.jpg
[2008/04/25 17:51:04 | 000,110,633 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\nr_reloader.gif
[2009/02/16 20:19:40 | 000,042,889 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\nr_reloader_overlay.jpg
[2008/04/25 17:50:58 | 000,003,973 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\nr_reloader_overlaylit.jpg
[2008/04/25 17:51:02 | 000,001,932 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\nr_reloader_overlaylit_.gif
[2009/02/16 20:19:40 | 000,004,018 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\nr_reloader_overlay_.gif
[2008/04/25 17:51:00 | 000,006,343 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\purple-Loader.jpg
[2008/04/25 17:51:02 | 000,006,979 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\title_loaderbar.jpg
[2008/04/25 17:50:58 | 000,004,691 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\title_loaderbarlit.jpg
[2008/04/25 17:51:02 | 000,002,208 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\title_loaderbarlit_.gif
[2008/04/25 17:51:02 | 000,003,075 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\title_loaderbar_.gif
[2009/02/16 20:19:40 | 000,008,190 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\title_loaderbar_clickhere.jpg
[2009/02/16 20:19:40 | 000,008,725 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\title_loaderbar_clickhere_over.jpg
[2008/04/25 17:51:02 | 000,002,116 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\blue-Loader.jpg
[2008/04/25 17:51:04 | 000,007,604 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\Flash-Loader.jpg
[2008/04/25 17:51:04 | 000,007,963 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\Flash-Loader_.jpg
[2008/04/25 17:50:58 | 000,006,428 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\Loader.jpg
[2008/04/25 17:51:00 | 000,028,201 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\loaderbar.png
[2008/04/25 17:51:00 | 000,002,693 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\Loader_.jpg
[2008/04/25 17:51:04 | 000,110,633 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\nr_reloader.gif
[2009/02/16 20:19:52 | 000,045,772 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\nr_reloader_overlay.jpg
[2008/04/25 17:50:58 | 000,003,973 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\nr_reloader_overlaylit.jpg
[2008/04/25 17:51:02 | 000,001,932 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\nr_reloader_overlaylit_.gif
[2009/02/16 20:19:52 | 000,004,495 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\nr_reloader_overlay_.gif
[2008/04/25 17:51:00 | 000,006,343 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\purple-Loader.jpg
[2008/04/25 17:51:02 | 000,006,979 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\title_loaderbar.jpg
[2008/04/25 17:50:58 | 000,004,691 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\title_loaderbarlit.jpg
[2008/04/25 17:51:02 | 000,002,208 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\title_loaderbarlit_.gif
[2008/04/25 17:51:02 | 000,003,075 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\title_loaderbar_.gif
[2009/02/16 20:19:54 | 000,034,040 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\title_loaderbar_clickhere.jpg
[2009/02/16 20:19:54 | 000,036,601 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\title_loaderbar_clickhere_over.jpg
[2005/10/28 05:07:42 | 000,002,116 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\blue-Loader.jpg
[2005/10/28 05:07:42 | 000,007,604 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\Flash-Loader.jpg
[2005/10/28 05:07:42 | 000,007,963 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\Flash-Loader_.jpg
[2005/10/28 05:07:42 | 000,006,428 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\Loader.jpg
[2005/10/28 05:07:42 | 000,028,201 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\loaderbar.png
[2005/10/28 05:07:42 | 000,002,693 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\Loader_.jpg
[2005/10/28 05:07:42 | 000,110,633 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\nr_reloader.gif
[2006/01/11 01:07:08 | 000,035,413 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\nr_reloader_overlay.jpg
[2005/10/28 05:07:42 | 000,003,973 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\nr_reloader_overlaylit.jpg
[2005/10/28 05:07:42 | 000,001,932 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\nr_reloader_overlaylit_.gif
[2006/01/11 01:06:48 | 000,002,373 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\nr_reloader_overlay_.gif
[2005/10/28 05:07:42 | 000,006,343 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\purple-Loader.jpg
[2005/10/28 05:07:42 | 000,006,979 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\title_loaderbar.jpg
[2005/10/28 05:07:42 | 000,004,691 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\title_loaderbarlit.jpg
[2005/10/28 05:07:42 | 000,002,208 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\title_loaderbarlit_.gif
[2005/10/28 05:07:42 | 000,003,075 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\title_loaderbar_.gif
[2006/01/11 02:01:20 | 000,032,145 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\title_loaderbar_clickhere.jpg
[2006/01/11 02:01:04 | 000,034,542 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\title_loaderbar_clickhere_over.jpg
[2005/10/28 05:07:42 | 000,002,116 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\blue-Loader.jpg
[2005/10/28 05:07:42 | 000,007,604 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\Flash-Loader.jpg
[2005/10/28 05:07:42 | 000,007,963 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\Flash-Loader_.jpg
[2005/10/28 05:07:42 | 000,006,428 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\Loader.jpg
[2005/10/28 05:07:42 | 000,028,201 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\loaderbar.png
[2005/10/28 05:07:42 | 000,002,693 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\Loader_.jpg
[2005/10/28 05:07:42 | 000,110,633 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\nr_reloader.gif
[2006/02/04 02:34:26 | 000,040,450 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\nr_reloader_overlay.jpg
[2005/10/28 05:07:42 | 000,003,973 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\nr_reloader_overlaylit.jpg
[2005/10/28 05:07:42 | 000,001,932 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\nr_reloader_overlaylit_.gif
[2006/02/04 02:34:28 | 000,002,506 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\nr_reloader_overlay_.gif
[2005/10/28 05:07:42 | 000,006,343 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\purple-Loader.jpg
[2005/10/28 05:07:42 | 000,006,979 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\title_loaderbar.jpg
[2005/10/28 05:07:42 | 000,004,691 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\title_loaderbarlit.jpg
[2005/10/28 05:07:42 | 000,002,208 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\title_loaderbarlit_.gif
[2005/10/28 05:07:42 | 000,003,075 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\title_loaderbar_.gif
[2006/02/04 21:12:56 | 000,030,006 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\title_loaderbar_clickhere.jpg
[2006/02/04 21:13:00 | 000,031,549 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\title_loaderbar_clickhere_over.jpg
[2009/12/26 20:02:26 | 000,054,688 | ---- | M] () -- \Program Files (x86)\Panasonic\VideoCam Suite 3.0\YouTubeUploaderMain.exe
[2009/12/26 19:58:00 | 003,361,792 | ---- | M] () -- \Program Files (x86)\Panasonic\VideoCam Suite 3.0\YTUploader.dll
[2009/11/26 09:56:24 | 000,000,112 | ---- | M] () -- \Program Files (x86)\Panasonic\VideoCam Suite 3.0\YTUploader.ini
[2009/12/26 19:45:24 | 000,150,016 | ---- | M] () -- \Program Files (x86)\Panasonic\VideoCam Suite 3.0\Core\Spec\AVCHD\BDCore\MediaLoader.dll
[2011/03/18 13:00:34 | 000,000,500 | ---- | M] () -- \Program Files (x86)\Research In Motion\BlackBerry Desktop\DataUploaderConfig.xml
[2011/05/13 19:27:58 | 000,058,600 | ---- | M] () -- \Program Files (x86)\Social Networks\Koan\pyloader.dll
[2011/05/13 19:28:02 | 000,015,587 | ---- | M] () -- \Program Files (x86)\Social Networks\System\KernelCtrl\ImageLoader2.kc
[2008/02/25 07:05:22 | 000,856,064 | ---- | M] () -- \Program Files (x86)\The KMPlayer\ImLoader.dll
[2011/03/23 22:04:26 | 000,124,200 | ---- | M] () -- \Program Files (x86)\Video Web Camera\Koan\pyloader.dll
[2012/01/07 15:37:20 | 000,416,896 | ---- | M] () -- \Program Files (x86)\WildTangent Games\App\WTDownloader.exe
[2011/09/14 21:32:33 | 000,002,191 | ---- | M] () -- \Program Files (x86)\WildTangent Games\App\UI\GamePlay_Loader.html
[2011/09/14 21:32:34 | 000,009,072 | ---- | M] () -- \Program Files (x86)\WildTangent Games\App\UI\Scripts\gameplay_loader.js
[2010/11/03 22:17:00 | 000,002,355 | ---- | M] () -- \Program Files (x86)\WildTangent Games\App\UI\Skins\default\gameplay_loader.css
[2011/05/28 21:04:04 | 000,054,784 | ---- | M] () -- \Program Files\WinRAR\Formats\ace32loader.exe
[2010/04/29 14:12:38 | 000,673,160 | ---- | M] () -- \Program Files\zoner\Photo Studio 13\Plugins\Facebook\ZPSFacebookUploader.exe
[2010/04/29 14:12:40 | 000,053,640 | ---- | M] () -- \Program Files\zoner\Photo Studio 13\Plugins\Facebook\ZPSPluginLoader.exe
[2010/04/29 14:12:42 | 000,686,984 | ---- | M] () -- \Program Files\zoner\Photo Studio 13\Plugins\Flickr\ZPSFlickrUploader.exe
[2010/04/29 14:12:42 | 000,053,640 | ---- | M] () -- \Program Files\zoner\Photo Studio 13\Plugins\Flickr\ZPSPluginLoader.exe
[2011/03/08 17:09:04 | 000,194,048 | ---- | M] () -- \Program Files\zoner\Photo Studio 13\Plugins\Picasa\ZPSPicasaUploader.exe
[2010/04/29 14:12:40 | 000,053,640 | ---- | M] () -- \Program Files\zoner\Photo Studio 13\Plugins\Picasa\ZPSPluginLoader.exe
[2011/06/08 14:20:02 | 000,102,792 | ---- | M] () -- \Program Files\zoner\Photo Studio 13\Program32\8bfLoader.exe
[2011/06/08 14:20:16 | 000,019,336 | ---- | M] () -- \Program Files\zoner\Photo Studio 13\Program32\WICLoader.exe
[2011/06/08 14:21:16 | 000,021,896 | ---- | M] () -- \Program Files\zoner\Photo Studio 13\Program64\WICLoader.exe
[2011/10/09 18:02:16 | 000,000,024 | ---- | M] () -- \ProgramData\__FileUploader.log
[2011/10/09 18:02:16 | 000,000,024 | ---- | M] () -- \Users\All Users\__FileUploader.log
[2012/01/22 09:13:08 | 005,232,131 | ---- | M] () -- \Users\Otas\AppData\Local\CrashDumps\Loader.exe.2684.dmp
[2012/02/07 04:47:10 | 000,004,176 | ---- | M] () -- \Users\Otas\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\017M7X0J\loader-spin[1].gif
[2012/02/07 04:47:10 | 000,010,819 | ---- | M] () -- \Users\Otas\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\017M7X0J\loader-wide[1].gif
[2012/02/07 04:46:44 | 000,000,776 | ---- | M] () -- \Users\Otas\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\017M7X0J\_loader[1].htm
[2012/02/06 20:04:54 | 000,000,542 | ---- | M] () -- \Users\Otas\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JKHBHG3G\downloader[1].js
[2012/02/07 04:46:44 | 000,000,780 | ---- | M] () -- \Users\Otas\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ULX0K40F\_loader_v[1].htm
[39 \Users\Otas\AppData\Local\Temp\*.tmp files -> \Users\Otas\AppData\Local\Temp\*.tmp -> ]
[2009/08/02 13:55:44 | 000,001,804 | ---- | M] () -- \Users\Otas\AppData\Local\Temp\ckz_1H5A\Lang\Czech\AlbumFTPUploaderDialogs.txt
[2009/08/02 13:55:42 | 000,001,752 | ---- | M] () -- \Users\Otas\AppData\Local\Temp\ckz_1H5A\Lang\English\AlbumFTPUploaderDialogs.txt
[2011/10/16 11:13:01 | 000,149,504 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\YouTubeUploaderMain\a50c19b750a7889b09e6c8963f50d8f7\YouTubeUploaderMain.ni.exe
[2011/10/16 11:13:02 | 003,770,368 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\YTUploader\f16b83f17b2820e66e0d7b8fdd7c57e0\YTUploader.ni.dll
[2011/07/16 05:15:45 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009/07/14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2011/07/16 05:15:45 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009/07/14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[2009/07/14 02:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009/07/14 02:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 06:21:03 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_68a9b6bd92929e63\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 06:12:44 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_691eb3faabbf8f66\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/12 01:38:22 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2011/07/12 01:38:22 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.efi.mui_35ee487d
[2011/07/12 01:38:22 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.exe.mui_3bc5b827
[2011/07/12 01:38:22 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.efi.mui_f412814e
[2011/07/12 01:38:22 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.exe.mui_ff8b5358
[2011/05/31 10:29:30 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011/05/31 10:29:30 | 000,642,944 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.efi_75834aa0
[2011/05/31 10:29:30 | 000,605,552 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.exe_75835076
[2011/05/31 10:29:30 | 000,566,208 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.efi_85cd069f
[2011/05/31 10:29:30 | 000,518,672 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.exe_85cd1215
[2009/07/14 03:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009/07/14 03:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2011/07/12 01:33:42 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2010/11/21 04:16:35 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011/02/05 18:34:23 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011/02/05 14:09:57 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2009/07/14 03:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009/07/14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009/07/14 02:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 05:15:45 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_0c8b1b39da352d2d\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 05:36:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_0d001876f3621e30\api-ms-win-core-libraryloader-l1-1-0.dll

< *RemoveWAT* /s >

< *minodlogin* /s >

< *tnod* /s >

< *TemDono* /s >

< *AutoKMS* /s >

< *KMSEmulator* /s >

< *activator* /s >

Ot@s · #10 Příspěvek od **Ot@s** » 09 úno 2012 19:53

< *serial* /s >
[2008/07/24 03:10:21 | 000,000,077 | ---- | M] () -- \$Recycle.Bin\S-1-5-21-3243394068-3903203777-451099978-1001\$RD949S7\noDVD.Fixed.EXE\serial.txt
[2011/10/01 20:11:27 | 000,009,127 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\Modem Drivers\rimserial.cat
[2011/10/01 20:11:27 | 000,001,594 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\Modem Drivers\RimSerial.inf
[2009/01/09 15:18:02 | 000,027,136 | R--- | M] () -- \Program Files (x86)\Common Files\Research In Motion\Modem Drivers\RimSerial.sys
[2009/01/09 14:02:08 | 000,031,744 | R--- | M] () -- \Program Files (x86)\Common Files\Research In Motion\Modem Drivers\RimSerial_AMD64.sys
[2009/06/18 16:59:04 | 000,176,128 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\RIMDeviceManager\rim_serial.dll
[2011/08/30 16:58:34 | 000,413,696 | ---- | M] () -- \Program Files (x86)\Microsoft Silverlight\4.0.60831.0\System.Runtime.Serialization.dll
[2011/10/13 19:47:10 | 001,186,816 | ---- | M] () -- \Program Files (x86)\Microsoft Silverlight\4.0.60831.0\System.Runtime.Serialization.ni.dll
[2010/11/21 04:25:11 | 000,970,752 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2011/07/12 01:37:48 | 000,090,112 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\cs\System.RunTime.Serialization.Resources.dll
[2011/03/14 07:35:26 | 000,236,032 | ---- | M] () -- \Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\W2PSerializer.dll
[2010/04/15 02:20:46 | 000,415,592 | ---- | M] () -- \Program Files (x86)\Windows Live\Mesh\System.Runtime.Serialization.dll
[2010/04/15 02:20:46 | 000,141,168 | ---- | M] () -- \Program Files (x86)\Windows Live\Mesh\System.Runtime.Serialization.Json.dll
[2010/04/15 02:20:46 | 000,321,376 | ---- | M] () -- \Program Files (x86)\Windows Live\Mesh\System.Xml.Serialization.dll
[2010/11/21 04:24:53 | 000,847,872 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2011/07/12 01:37:48 | 000,090,112 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\cs\System.RunTime.Serialization.Resources.dll
[2008/09/04 08:06:40 | 000,079,120 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\HfxSerial.exe
[2008/09/04 08:07:02 | 000,010,512 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-CHS.dll
[2008/09/04 08:07:04 | 000,011,024 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-DEU.dll
[2008/09/04 08:07:04 | 000,011,024 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-ESP.dll
[2008/09/04 08:07:06 | 000,011,024 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-FRA.dll
[2008/09/04 08:07:10 | 000,011,024 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-ITA.dll
[2008/09/04 08:07:14 | 000,010,512 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-JPN.dll
[2008/09/04 08:07:14 | 000,010,512 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-KOR.dll
[2008/09/04 08:07:16 | 000,011,024 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-NLD.dll
[2011/07/12 01:37:31 | 000,011,776 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009/06/10 22:23:19 | 000,131,072 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2011/07/12 01:37:48 | 000,090,112 | ---- | M] () -- \Windows\assembly\GAC_MSIL\system.runtime.serialization.resources\3.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.Resources.dll
[2010/11/21 04:24:53 | 000,970,752 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2011/10/16 11:11:40 | 000,310,784 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\680689b01ddb7fbe11478caf8cb71d3c\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2011/10/16 11:13:44 | 002,347,008 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\76692f411b404f1db0c95d81dd537c37\System.Runtime.Serialization.ni.dll
[2011/10/16 11:39:12 | 003,073,536 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\1377c29b871c7eb768769b5f4bdbb15d\System.Runtime.Serialization.ni.dll
[2011/10/16 11:38:16 | 000,396,288 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\b3b42692707c0f555807def0c4acefe3\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2011/10/16 11:17:24 | 002,647,040 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\993f89ba22499c379d2a9dd25d13cd94\System.Runtime.Serialization.ni.dll
[2011/10/16 11:17:34 | 000,311,296 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\bed774dde4b62ed1d2d55c2d1769d600\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2011/10/16 11:20:03 | 000,009,216 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Serializ#\3a2ab56bb224b871516526753985ff69\System.Xml.Serialization.ni.dll
[2011/10/16 11:50:19 | 000,376,832 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\6cd778cd2c8c61130ff71ee7a685222b\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2011/10/16 11:50:05 | 003,412,992 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\f68180d9f4ade9c313f9ad20422eb1c0\System.Runtime.Serialization.ni.dll
[2011/10/16 11:54:21 | 000,010,240 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Serializ#\59e70022e798ce28f9f5b8870c5c8bf2\System.Xml.Serialization.ni.dll
[2011/10/13 19:38:39 | 000,017,840 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\v4.0_4.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2012/01/01 11:17:35 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2011/10/13 19:38:38 | 000,099,208 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.RunTime.Serialization.resources\v4.0_4.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.resources.dll
[2012/01/01 11:17:34 | 001,026,936 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2012/01/01 11:17:38 | 000,011,120 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
[2009/06/10 22:23:19 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2011/07/12 01:37:35 | 000,011,776 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010/11/21 04:24:53 | 000,970,752 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2010/03/18 12:16:28 | 001,026,936 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
[2010/03/18 12:16:28 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2011/04/06 15:48:20 | 000,011,120 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.Serialization.dll
[2010/06/15 01:33:16 | 000,017,840 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010/06/15 01:33:16 | 000,099,208 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\cs\System.RunTime.Serialization.resources.dll
[2009/06/10 21:40:06 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2011/07/12 01:37:29 | 000,011,776 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.Resources.dll
[2010/11/21 04:24:53 | 000,847,872 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2010/03/18 12:16:28 | 001,026,936 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.dll
[2010/03/18 12:16:28 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2011/04/06 15:48:20 | 000,011,120 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.Serialization.dll
[2010/06/15 01:48:20 | 000,017,840 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010/06/15 01:48:20 | 000,099,208 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\cs\System.RunTime.Serialization.resources.dll
[2009/07/14 02:16:13 | 000,015,360 | ---- | M] () -- \Windows\System32\serialui.dll
[2011/07/12 01:37:19 | 000,005,120 | ---- | M] () -- \Windows\System32\cs-CZ\serialui.dll.mui
[2009/07/14 01:00:40 | 000,094,208 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\msports.inf_amd64_neutral_fdcfb86ce78678d1\serial.sys
[2011/09/14 20:38:11 | 000,009,127 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\rimserial.inf_amd64_neutral_095f8f326d5d196a\RimSerial.cat
[2011/09/14 20:38:11 | 000,001,594 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\rimserial.inf_amd64_neutral_095f8f326d5d196a\rimserial.inf
[2011/09/14 20:38:13 | 000,007,584 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\rimserial.inf_amd64_neutral_095f8f326d5d196a\rimserial.PNF
[2009/01/09 15:02:08 | 000,031,744 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\rimserial.inf_amd64_neutral_095f8f326d5d196a\RimSerial_AMD64.sys
[2009/06/10 21:37:50 | 000,038,400 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\smartcrd.inf_amd64_neutral_6fb75ea318f84fe5\grserial.sys
[2009/07/14 02:16:13 | 000,015,360 | ---- | M] () -- \Windows\SysWOW64\serialui.dll
[2011/07/12 01:37:19 | 000,005,120 | ---- | M] () -- \Windows\SysWOW64\cs-CZ\serialui.dll.mui
[2011/07/12 01:37:29 | 000,011,776 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_1e527062c1f59d5f\System.Runtime.Serialization.Formatters.Soap.Resources.dll
[2011/07/12 01:37:35 | 000,005,120 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_aa5fd338fd5bcb23\serialui.dll.mui
[2009/07/14 02:41:54 | 000,017,920 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_50f69335385bc360\serialui.dll
[2011/07/12 01:37:48 | 000,090,112 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_bb9a1800691e639c\System.RunTime.Serialization.Resources.dll
[2011/07/12 01:37:38 | 000,009,728 | ---- | M] () -- \Windows\winsxs\amd64_msports.inf.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_20ab142d65ed6acc\serial.sys.mui
[2009/07/14 01:00:40 | 000,094,208 | ---- | M] () -- \Windows\winsxs\amd64_msports.inf_31bf3856ad364e35_6.1.7600.16385_none_548ca258d20f4ada\serial.sys
[2009/06/10 21:40:06 | 000,131,072 | ---- | M] () -- \Windows\winsxs\amd64_netfx-system.runtim..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_a9d1bee515273f56\System.Runtime.Serialization.Formatters.Soap.dll
[2009/06/10 21:37:50 | 000,038,400 | ---- | M] () -- \Windows\winsxs\amd64_smartcrd.inf_31bf3856ad364e35_6.1.7600.16385_none_ce9ed3064deed3aa\grserial.sys
[2010/11/21 04:24:53 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17514_none_5918bfde74e3f722\System.Runtime.Serialization.dll
[2010/11/21 04:24:53 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_93efcca8c8dbf1bb\System.Runtime.Serialization.dll
[2011/05/31 10:29:30 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8.manifest
[2011/05/31 10:29:30 | 000,017,792 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8_kdcom.dll_db5e7744
[2011/07/12 01:38:22 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_aa5fd338fd5bcb23_serialui.dll.mui_7d29d2a3
[2009/07/14 03:57:29 | 000,017,920 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_50f69335385bc360_serialui.dll_bea29328
[2011/07/12 01:38:21 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed_serialui.dll.mui_7d29d2a3
[2009/07/14 03:58:37 | 000,015,360 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a_serialui.dll_bea29328
[2009/07/14 03:15:17 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_6daa7ec5c65bf5bc.manifest
[2011/02/05 18:35:45 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8.manifest
[2011/02/05 14:11:05 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.21655_none_703aeff2dc87a23b.manifest
[2009/07/14 03:11:30 | 000,000,868 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft.windows.h..tserial-driverclass_31bf3856ad364e35_6.1.7600.16385_none_88b1c48f2026fe3f.manifest
[2010/11/21 04:17:50 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17514_none_5918bfde74e3f722.manifest
[2010/11/21 04:17:50 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_93efcca8c8dbf1bb.manifest
[2010/11/21 04:17:50 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c.manifest
[2011/07/12 01:35:41 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0.manifest
[2010/11/21 04:17:50 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f.manifest
[2010/11/21 04:18:20 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1.manifest
[2009/06/10 22:23:19 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_1c9a3ec1e01c684b\System.Runtime.Serialization.Formatters.Soap.dll
[2011/07/12 01:37:31 | 000,011,776 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ters.soap.resources_b03f5f7f11d50a3a_6.1.7600.16385_cs-cz_d5c3552dd9b47144\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010/11/21 04:24:53 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c\System.Runtime.Serialization.dll
[2011/07/12 01:37:48 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0\System.RunTime.Serialization.Resources.dll
[2010/11/21 04:24:53 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f\System.Runtime.Serialization.dll
[2011/07/12 01:37:35 | 000,011,776 | ---- | M] () -- \Windows\winsxs\wow64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_28a71ab4f6565f5a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2011/07/12 01:37:19 | 000,005,120 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed\serialui.dll.mui
[2009/07/14 02:16:13 | 000,015,360 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a\serialui.dll
[2011/07/12 01:37:48 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_5f7b7c7cb0c0f266\System.RunTime.Serialization.Resources.dll
[2010/11/21 04:25:11 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1\System.Runtime.Serialization.dll

< *w7lxe* /s >

< *AutoRearm* /s >

< HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run /s >
"IAStorIcon" = C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe -- [2010/09/14 02:32:30 | 000,283,160 | ---- | M] (Intel Corporation)
"BackupManagerTray" = "C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe" -h -k -- [2011/03/09 18:11:02 | 000,295,744 | ---- | M] (NTI Corporation)
"LManager" = C:\Program Files (x86)\Launch Manager\LManager.exe -- [2011/03/14 12:44:36 | 001,081,424 | ---- | M] (Dritek System Inc.)
"RIMBBLaunchAgent.exe" = C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe -- [2011/02/18 09:47:12 | 000,079,192 | ---- | M] (Research In Motion Limited)
"Samsung PanelMgr" = C:\Windows\Samsung\PanelMgr\SSMMgr.exe /autorun -- [2011/07/06 12:24:37 | 000,688,128 | ---- | M] ()
"3200 Scan2PC" = "C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe" -- [2010/05/18 07:46:01 | 001,989,120 | ---- | M] ()

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"Sidebar" = C:\Program Files\Windows Sidebar\sidebar.exe /autoRun -- [2010/11/21 04:24:51 | 001,475,584 | ---- | M] (Microsoft Corporation)
"Skype" = "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized -- [2011/10/13 08:27:14 | 017,351,304 | R--- | M] (Skype Technologies S.A.)

< HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run /s >
"IAStorIcon" = C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe -- [2010/09/14 02:32:30 | 000,283,160 | ---- | M] (Intel Corporation)
"BackupManagerTray" = "C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe" -h -k -- [2011/03/09 18:11:02 | 000,295,744 | ---- | M] (NTI Corporation)
"LManager" = C:\Program Files (x86)\Launch Manager\LManager.exe -- [2011/03/14 12:44:36 | 001,081,424 | ---- | M] (Dritek System Inc.)
"RIMBBLaunchAgent.exe" = C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe -- [2011/02/18 09:47:12 | 000,079,192 | ---- | M] (Research In Motion Limited)
"Samsung PanelMgr" = C:\Windows\Samsung\PanelMgr\SSMMgr.exe /autorun -- [2011/07/06 12:24:37 | 000,688,128 | ---- | M] ()
"3200 Scan2PC" = "C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe" -- [2010/05/18 07:46:01 | 001,989,120 | ---- | M] ()

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2012/02/09 19:20:44 | 000,000,512 | ---- | M] () MD5=1E1482CCEDFBA055B75520430B18F807 -- C:\PhysicalMBR.bin

========== Alternate Data Streams ==========

@Alternate Data Stream - 143 bytes -> C:\ProgramData\Temp:30FD0CBD

< End of report >

#11 Příspěvek od **Mc_Murphy** » 10 úno 2012 13:23

Cracky nejsou nejlepší cestou k úspěchu. Obrázek

Odinstaluj Game Booster 3 od IOBit - je to čínský šmejd.

Znovu spusť OTL.

Pokud používáš Win Vista či Win7, klikni na OTL pravým myšítkem a dej Run As Administrator či Spustit jako správce.
Pokud používáš 64bitový OS, zkontroluj, zda-li je zaškrtnutý čtvereček Pro 64 bitové OS. Pokud ne, zaškrtni jej.
Do spodního okénka Vlastní skenování/opravy vlož tento script (pouze zelená písmenka v bílém poli!):

Kód: Vybrat vše

:Commands
[emptytemp]
[emptyflash]
[resethosts]
[purity]
[clearallrestorepoints]

:Services
AdobeARMservice
NAUpdate

:OTL
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://packardbell.msn.com
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://packardbell.msn.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Ask.com"
FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.8.0191
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
[2012/02/07 16:44:53 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Users\Otas\AppData\Roaming\Mozilla\Firefox\Profiles\pxmy4dub.default\extensions\DTToolbar@toolbarnet.com
O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-3243394068-3903203777-451099978-1001\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O1364bit: - gopher Prefix: missing
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
[1 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[6 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[21 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]
[39 \Users\Otas\AppData\Local\Temp\*.tmp files -> \Users\Otas\AppData\Local\Temp\*.tmp -> ]
@Alternate Data Stream - 143 bytes -> C:\ProgramData\Temp:30FD0CBD

:Files
C:\$Recycle.Bin
C:\Program Files (x86)\IObit
C:\Users\Otas\AppData\Roaming\Microsoft\Windows\Recent\*crack*.* /s /d
C:\Users\Otas\AppData\Roaming\Microsoft\Windows\Recent\*keygen*.* /s /d
C:\Users\Otas\Downloads\Stalker - Clear Sky /d
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp /s

Klikni na tlačítko [Opravit].
Po dokončení skenu se objeví log, ten mi sem vlož.
Pokud se log nevejde do jednoho příspěvku, rozděl jej na více částí.

Ot@s · #12 Příspěvek od **Ot@s** » 10 úno 2012 20:27

[.ShellClassInfo]
LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21799
[LocalizedFileNames]
WildTangent Games App - packardbell.lnk=@C:\PROGRA~2\WILDTA~1\TOUCHP~1\PACKAR~1\MUILink.exe,-105
Packard Bell Registration.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Enregistrement Packard Bell.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Registrazione Packard Bell.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Registro de Packard Bell.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Packard Bell Registratie.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Packard Bell Registrierung.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Registo Packard Bell.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Registrering af Packard Bell.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Packard Bell Rekisteröinti.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Packard Bell-registrering.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Registrace Packard Bell.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Packard Bell Εγγραφή.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Packard Bell Regisztráció.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Rejestracja — Packard Bell.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Packard Bell Kayıt.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Înregistrare Packard Bell.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Регистрация Packard Bell.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Packard Bell ユーザー登録.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Packard Bell 注册.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Packard Bell 註冊.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Packard Bell Registreerimine.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Packard Bell Registracija.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Packard Bell Reģistrācija.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Packard Bell Регистрация.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
การลงทะเบียน Packard Bell.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Packard Bell تسجيل.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Packard Bell - Registrácia.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Registracija Packard Bell.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Packard Bell 등록.lnk=@C:\Program Files (x86)\Packard Bell\Registration\GlobalRegistrationMUI.dll,-104
Norton Internet Security.lnk=@C:\PROGRA~2\NORTON~2\Branding\muis.dll,-102
Video Web Camera.lnk=@C:\PROGRA~2\VIDEOW~1\MUITRA~1\Resource.dll,-221
[.ShellClassInfo]
LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21769
IconResource=%SystemRoot%\system32\imageres.dll,-183

#13 Příspěvek od **Mc_Murphy** » 11 úno 2012 07:02

Cos mi to sem hodil?

To není ono.

Ot@s · #14 Příspěvek od **Ot@s** » 11 úno 2012 10:03

Mě to nic jiného nevyblilo...po té opravě to chtělo restart a na ploše bylo toto...

#15 Příspěvek od **Mc_Murphy** » 11 úno 2012 11:44

To prostě není ono. Zkus tu opravu spustit ještě jednou, ale v Nouzovém režimu.

VIRY.CZ

Prosím o preventivní kontrolu. Díkes....

Prosím o preventivní kontrolu. Díkes....

Re: Prosím o preventivní kontrolu. Díkes....

Re: Prosím o preventivní kontrolu. Díkes....

Re: Prosím o preventivní kontrolu. Díkes....

Re: Prosím o preventivní kontrolu. Díkes....

Re: Prosím o preventivní kontrolu. Díkes....

Re: Prosím o preventivní kontrolu. Díkes....

Re: Prosím o preventivní kontrolu. Díkes....

Re: Prosím o preventivní kontrolu. Díkes....

Re: Prosím o preventivní kontrolu. Díkes....

Re: Prosím o preventivní kontrolu. Díkes....

Re: Prosím o preventivní kontrolu. Díkes....

Re: Prosím o preventivní kontrolu. Díkes....

Re: Prosím o preventivní kontrolu. Díkes....

Re: Prosím o preventivní kontrolu. Díkes....