VIRY.CZ

Dobry den,
babylonu jsem se zatim nezbavila,
tak posilam ten RSIT log
jestli mate nejakz napad, tak sem s nim

diky

//EDIT vyosek: presun samoodpovedi do prvniho postu och, posilam omluvu za nedostatecne informace.
Problem s babylonem mam v mozille, v exploreru je koukam nastaveny jako home page, explorer nepouzivat, tak to ani nevim
diky sarka

Logfile of random's system information tool 1.09 (written by random/random)
Run by Šárka at 2012-08-21 17:38:47
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 226 GB (74%) free of 305 GB
Total RAM: 3326 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:38:58, on 21.8.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16448)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\TOSHIBA\HDMICtrlMan\HCMSoundChanger.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\eM Client\MailClient.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtProc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_271.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_271.exe
C:\Windows\system32\notepad.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\taskhost.exe
C:\Users\Šárka\Desktop\putty.exe
C:\Users\Šárka\Documents\DOWNLOAD\RSIT.exe
C:\Program Files\trend micro\Šárka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=112553 ... 2163f54086
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: eMClientToolbar BHO - {D0CF9C3B-2C4F-4C99-ACED-3CDF9AEEFF7E} - C:\Program Files\eMClientToolbar\IEToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: eM Client Toolbar - {837CC356-411E-4654-B2A2-ECA1F037979F} - C:\Program Files\eMClientToolbar\IEToolbar.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HDMICtrlMan] C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe
O4 - HKLM\..\Run: [ITSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.7\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth Manager.lnk = ?
O9 - Extra button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files\ICQ7.7\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files\ICQ7.7\ICQ.exe
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: emclienttoolbar - {33369B62-D4CB-4E08-85A4-FD093C37AB1B} - C:\Program Files\eMClientToolbar\IEToolbar.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

--
End of file - 6270 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Šárka\AppData\Roaming\Mozilla\Firefox\Profiles\jibendkh.default

prefs.js - "browser.search.suggest.enabled" - false
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.google.com/"

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.3.300.271 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_271.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
emclient_igeared.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Šárka\AppData\Roaming\Mozilla\Firefox\Profiles\jibendkh.default\extensions\
staged

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-03-26 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0CF9C3B-2C4F-4C99-ACED-3CDF9AEEFF7E}]
eMClientToolbar BHO - C:\Program Files\eMClientToolbar\IEToolbar.dll [2012-02-15 2393176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-02-24 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{837CC356-411E-4654-B2A2-ECA1F037979F} - eM Client Toolbar - C:\Program Files\eMClientToolbar\IEToolbar.dll [2012-02-15 2393176]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-08-14 1348904]
"HDMICtrlMan"=C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe [2009-08-03 832856]
"ITSecMng"=C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [2011-04-01 80840]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-07-29 98304]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-01-07 253672]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-03-27 37296]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-02 843712]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2012-03-26 931200]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ICQ"=C:\Program Files\ICQ7.7\ICQ.exe [2012-03-02 127040]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2012-02-01 17146504]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.txt - open - "C:\Program Files\PSPad editor\PSPad.exe" "%1"

======List of files/folders created in the last 1 month======

2012-08-21 17:38:48 ----D---- C:\Program Files\trend micro
2012-08-21 17:38:47 ----D---- C:\rsit
2012-08-16 23:13:50 ----A---- C:\Windows\system32\mshtmled.dll
2012-08-16 23:13:49 ----A---- C:\Windows\system32\ieUnatt.exe
2012-08-16 23:13:49 ----A---- C:\Windows\system32\ieui.dll
2012-08-16 23:13:49 ----A---- C:\Windows\system32\iertutil.dll
2012-08-16 23:13:48 ----A---- C:\Windows\system32\jsproxy.dll
2012-08-16 23:13:47 ----A---- C:\Windows\system32\wininet.dll
2012-08-16 23:13:47 ----A---- C:\Windows\system32\jscript9.dll
2012-08-16 23:13:47 ----A---- C:\Windows\system32\jscript.dll
2012-08-16 23:13:46 ----A---- C:\Windows\system32\url.dll
2012-08-16 23:13:45 ----A---- C:\Windows\system32\urlmon.dll
2012-08-16 23:13:43 ----A---- C:\Windows\system32\mshtml.dll
2012-08-16 23:13:43 ----A---- C:\Windows\system32\ieframe.dll
2012-08-16 09:08:58 ----A---- C:\Windows\system32\srcore.dll
2012-08-16 09:08:57 ----A---- C:\Windows\system32\win32k.sys
2012-08-16 09:08:56 ----A---- C:\Windows\system32\win32spl.dll
2012-08-16 09:08:55 ----A---- C:\Windows\system32\spoolsv.exe
2012-08-16 09:08:51 ----A---- C:\Windows\system32\netapi32.dll
2012-08-16 09:08:51 ----A---- C:\Windows\system32\browser.dll
2012-08-16 09:08:51 ----A---- C:\Windows\system32\browcli.dll
2012-08-16 09:08:49 ----A---- C:\Windows\system32\localspl.dll
2012-08-06 19:43:26 ----D---- C:\Users\Šárka\AppData\Roaming\Canon

======List of files/folders modified in the last 1 month======

2012-08-21 17:38:58 ----D---- C:\Windows\Prefetch
2012-08-21 17:38:48 ----RD---- C:\Program Files
2012-08-21 11:43:44 ----D---- C:\Windows\Temp
2012-08-21 07:55:58 ----SHD---- C:\System Volume Information
2012-08-21 06:06:06 ----D---- C:\Windows\system32\config
2012-08-20 00:19:17 ----D---- C:\Windows\system32\catroot2
2012-08-19 09:40:58 ----D---- C:\Users\Šárka\AppData\Roaming\Skype
2012-08-19 09:40:44 ----D---- C:\Users\Šárka\AppData\Roaming\ICQ
2012-08-17 09:58:59 ----D---- C:\Users\Šárka\AppData\Roaming\eM Client
2012-08-16 23:37:18 ----D---- C:\Windows\System32
2012-08-16 23:37:18 ----D---- C:\Windows\inf
2012-08-16 23:37:18 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-08-16 23:31:39 ----D---- C:\Windows\winsxs
2012-08-16 23:29:46 ----RSD---- C:\Windows\Fonts
2012-08-16 23:29:45 ----D---- C:\Windows\system32\migration
2012-08-16 23:29:45 ----D---- C:\Program Files\Internet Explorer
2012-08-16 23:29:44 ----D---- C:\Windows\system32\DriverStore
2012-08-16 23:15:22 ----D---- C:\Windows\debug
2012-08-16 23:15:21 ----A---- C:\Windows\system32\MRT.exe
2012-08-16 23:14:31 ----D---- C:\Windows\system32\catroot
2012-08-15 09:59:55 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2012-08-08 23:09:07 ----HD---- C:\ProgramData
2012-08-06 20:00:18 ----SHD---- C:\Windows\Installer
2012-08-06 19:59:45 ----SD---- C:\Users\Šárka\AppData\Roaming\Microsoft
2012-07-25 11:08:46 ----D---- C:\Windows\system32\drivers
2012-07-25 11:08:25 ----D---- C:\Windows\system32\drivers\UMDF
2012-07-24 01:09:43 ----D---- C:\Windows

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-05-05 14392]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2012-03-20 171064]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 TVALZ;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\Windows\system32\DRIVERS\TVALZ_O.SYS [2007-11-09 23640]
R1 Tosrfcom;Bluetooth RFCOMM; C:\Windows\System32\Drivers\tosrfcom.sys [2010-11-29 70448]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2009-09-07 48128]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2009-09-15 44544]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2009-09-15 38400]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2009-07-14 1035776]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-09-21 1218048]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-30 4994560]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-03-02 139776]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-20 84992]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-08-14 203312]
R3 tosporte;Bluetooth COM Port; C:\Windows\system32\DRIVERS\tosporte.sys [2009-06-17 46984]
R3 tosrfbd;Bluetooth RFBUS; C:\Windows\system32\DRIVERS\tosrfbd.sys [2011-08-05 236728]
R3 tosrfec;Bluetooth ACPI; C:\Windows\system32\DRIVERS\tosrfec.sys [2011-07-12 16064]
R3 Tosrfhid;Bluetooth RFHID; C:\Windows\system32\DRIVERS\Tosrfhid.sys [2010-08-30 80064]
R3 Tosrfusb;Bluetooth USB Controller; C:\Windows\system32\DRIVERS\tosrfusb.sys [2011-01-27 56888]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S2 Parvdm;Parvdm; C:\Windows\system32\drivers\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-20 74112]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmb.sys [2011-08-17 18176]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2009-07-14 8192]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 tosrfbnp;Bluetooth RFBNEP; C:\Windows\System32\Drivers\tosrfbnp.sys [2010-11-11 42672]
S3 tosrfnds;Bluetooth Personal Area Network; C:\Windows\system32\DRIVERS\tosrfnds.sys [2009-07-24 21608]
S3 TosRfSnd;Bluetooth Audio; C:\Windows\system32\drivers\tosrfsnd.sys [2010-04-26 53760]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-07-30 176128]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-03-26 11552]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 1713536]
R3 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2011-04-01 152496]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-15 250056]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-07-20 113120]
S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2012-03-26 214952]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-02-24 1343400]

-----------------EOF-----------------

Zdravim

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte na plochu.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
autochk.exe
cdrom.sys
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
explorer.exe
hal.dll
Changer.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
logevent.dll
lsass.exe
mv61xx.sys
ndis.sys
netlogon.dll
ntelogon.dll
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
scecli.dll
sceclt.dll
smss.exe
svchost.exe
symmpi.sys
tcpip.sys
userinit.exe
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
winlogon.exe
ws2_32.dll
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*AutoKMS* /s
*activator* /s
*serial* /s
*w7lxe* /s

Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).

Dobrý den,
posílám 1.část OTL.txt

OTL logfile created on: 23.8.2012 10:10:23 - Run 1
OTL by OldTimer - Version 3.2.54.0 Folder = C:\Users\Šárka\Documents\DOWNLOAD
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,25 Gb Total Physical Memory | 1,91 Gb Available Physical Memory | 58,88% Memory free
6,49 Gb Paging File | 4,87 Gb Available in Paging File | 74,98% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 297,99 Gb Total Space | 220,46 Gb Free Space | 73,98% Space Free | Partition Type: NTFS
Drive D: | 415,74 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: SARKA-NOTEBOOK | User Name: Šárka | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012.08.15 09:59:55 | 001,536,712 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_3_300_271.exe
PRC - [2012.07.20 20:47:27 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Šárka\Dokumenty\DOWNLOAD\OTL.exe
PRC - [2012.07.20 11:27:12 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2012.06.15 11:29:58 | 013,332,480 | ---- | M] () -- C:\Program Files\eM Client\MailClient.exe
PRC - [2012.03.26 17:08:12 | 000,931,200 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2012.03.26 17:03:40 | 000,011,552 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\MsMpEng.exe
PRC - [2012.02.02 04:48:48 | 000,681,472 | ---- | M] (The Document Foundation) -- C:\Program Files\LibreOffice 3.5\program\soffice.bin
PRC - [2012.02.02 04:48:48 | 000,056,832 | ---- | M] (The Document Foundation) -- C:\Program Files\LibreOffice 3.5\program\swriter.exe
PRC - [2012.02.02 04:48:48 | 000,050,688 | ---- | M] (The Document Foundation) -- C:\Program Files\LibreOffice 3.5\program\soffice.exe
PRC - [2011.08.08 14:43:58 | 000,690,072 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosA2dp.exe
PRC - [2011.08.08 14:36:58 | 000,087,960 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtHid.exe
PRC - [2011.05.09 17:06:02 | 002,750,376 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtMng.exe
PRC - [2011.04.01 18:41:44 | 000,152,496 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe
PRC - [2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2011.01.14 19:19:00 | 002,885,056 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtProc.exe
PRC - [2010.11.20 23:29:19 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2010.11.02 11:38:00 | 000,341,392 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosOBEX.exe
PRC - [2010.09.06 17:18:00 | 000,746,384 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtHSP.exe
PRC - [2009.08.03 15:03:08 | 000,832,856 | ---- | M] (TOSHIBA Corporation.) -- C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe
PRC - [2009.07.30 00:54:38 | 000,348,160 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
PRC - [2009.07.30 00:54:10 | 000,176,128 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
PRC - [2009.07.29 17:42:06 | 000,705,880 | ---- | M] (TOSHIBA Corporation.) -- C:\Program Files\TOSHIBA\HDMICtrlMan\HCMSoundChanger.exe
PRC - [2009.04.03 19:17:00 | 000,447,816 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosAVRC.exe
PRC - [1999.08.13 07:00:00 | 007,610,368 | ---- | M] (Jasc Software, Inc.) -- C:\Users\Šárka\Dokumenty\Anect\Dokumenty\Install\Paint Shop Pro 6\Psp.exe

========== Modules (No Company Name) ==========

MOD - [2012.08.15 09:59:54 | 009,465,032 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_3_300_271.dll
MOD - [2012.07.20 11:26:59 | 002,003,424 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2012.06.26 16:14:47 | 031,364,608 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\MailClient\3a78440a68eb7c37a5e1f41539dedef5\MailClient.ni.exe
MOD - [2012.06.26 16:14:18 | 000,494,592 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\MailClient.Mail\76c807be11811fe3530de718300a75d4\MailClient.Mail.ni.dll
MOD - [2012.06.26 16:14:17 | 000,835,072 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Google.Apis\7a2c9926b126071de9dc7284985913cf\Google.Apis.ni.dll
MOD - [2012.06.26 16:14:16 | 000,116,224 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\MailClient.Collecti#\04b24db541f21778af87215aa5fdd9f1\MailClient.Collections.ni.dll
MOD - [2012.06.15 11:30:00 | 000,098,304 | ---- | M] () -- C:\Program Files\eM Client\MailClient.XmlSerializers.dll
MOD - [2012.06.15 11:29:58 | 013,332,480 | ---- | M] () -- C:\Program Files\eM Client\MailClient.exe
MOD - [2012.06.14 15:31:43 | 001,670,144 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\6c59a14a23f734093e80d6093e25302a\Microsoft.VisualBasic.ni.dll
MOD - [2012.06.14 15:31:41 | 000,107,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\NSkype\3d8adbefd40f12b2442789c31bda5475\NSkype.ni.dll
MOD - [2012.06.14 15:31:12 | 000,876,544 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\HTMLEditorControl\521ad651491d3da21a668e170d9604f2\HTMLEditorControl.ni.dll
MOD - [2012.06.14 15:31:12 | 000,104,448 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\FacebookAPI\a026da50a9d934dc7ba2a6df9f42882d\FacebookAPI.ni.dll
MOD - [2012.06.14 15:28:11 | 001,840,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\761fd1afc17f11bf6d49c3a7d16465ca\System.Web.Services.ni.dll
MOD - [2012.06.14 15:28:08 | 011,833,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\a501b7960f6c6e2e39162b83f3303aaa\System.Web.ni.dll
MOD - [2012.06.14 15:27:17 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll
MOD - [2012.06.14 15:27:01 | 001,591,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll
MOD - [2012.06.14 15:26:59 | 001,806,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\3421b96c2885b8e4137a376ff3d95fa5\System.Deployment.ni.dll
MOD - [2012.06.08 07:57:12 | 000,035,840 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Experimen#\b1260c2d4c9f50b77c20da3a3c753d5c\Microsoft.Experimental.IO.ni.dll
MOD - [2012.06.01 15:16:24 | 000,565,248 | ---- | M] () -- C:\Program Files\eM Client\cs\MailClient.resources.dll
MOD - [2012.05.18 16:37:18 | 000,032,768 | ---- | M] () -- C:\Program Files\eM Client\cs\HtmlEditorControl.resources.dll
MOD - [2012.05.12 03:32:45 | 000,220,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\626d0ac2f4ada682d7ca6c4ebf821469\CustomMarshalers.ni.dll
MOD - [2012.05.12 03:32:10 | 000,109,568 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Search.In#\e0be9cd3dff9e24a16c6a12d574a8c9d\Microsoft.Search.Interop.ni.dll
MOD - [2012.05.12 03:32:10 | 000,050,688 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\QuartzTypeLib\7409367a079b3e1ea24c4a7a82b5616b\QuartzTypeLib.ni.dll
MOD - [2012.05.12 03:32:04 | 000,240,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\SgmlReader\f8d247ceee1f26cddd51c0a9bcf82872\SgmlReader.ni.dll
MOD - [2012.05.12 03:32:04 | 000,027,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\MailClient.Exceptio#\f22a170172e8c60e57a2d4d2b57ab24a\MailClient.ExceptionUtils.ni.dll
MOD - [2012.05.12 03:32:03 | 000,140,288 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\RSS.NET\3ade383e314dfdb27abda78e7cea0099\RSS.NET.ni.dll
MOD - [2012.05.12 03:31:25 | 001,190,912 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Esent.Interop\5ff66767a10bed52227063b2e5ce1265\Esent.Interop.ni.dll
MOD - [2012.05.12 03:31:21 | 000,101,376 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\NHunspell\7fbb754440163cecb819ec8e92af9386\NHunspell.ni.dll
MOD - [2012.05.12 03:31:20 | 000,362,496 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\HtmlInterop\2847154c5aca31fd43d51ffca8c61afb\HtmlInterop.ni.dll
MOD - [2012.05.12 03:31:20 | 000,107,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\MailClient.Sasl\6ba19871ea7069103dba5d11f80220be\MailClient.Sasl.ni.dll
MOD - [2012.05.12 03:31:20 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\MailClient.Interop\dc2f2020b4be23e2d1f09e2941146236\MailClient.Interop.ni.dll
MOD - [2012.05.12 03:31:16 | 000,220,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Google.GData.Extens#\665ed53ac82e6751c15ff827b34a52c7\Google.GData.Extensions.ni.dll
MOD - [2012.05.12 03:31:16 | 000,105,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Google.GData.Contac#\481eb62ad3359d02f4004a160b7868e3\Google.GData.Contacts.ni.dll
MOD - [2012.05.12 03:31:15 | 000,668,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Google.GData.Client\7c80699dbe215712f5424a22b365aad2\Google.GData.Client.ni.dll
MOD - [2012.05.12 03:31:14 | 000,494,080 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\LinqBridge\5a127ec02974b6bee4b2591969d0c484\LinqBridge.ni.dll
MOD - [2012.05.12 03:31:13 | 001,473,024 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Newtonsoft.Json.Net#\9f2f6c6a94cd5243dfb58b6715ef2b77\Newtonsoft.Json.Net20.ni.dll
MOD - [2012.05.12 03:31:08 | 000,513,024 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data.SQLite\7b3d03943e0b9f55edd2d73c7fe34339\System.Data.SQLite.ni.dll
MOD - [2012.05.12 03:28:33 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\03dee80574f4ec770b6f77ca030ded6c\System.Runtime.Remoting.ni.dll
MOD - [2012.05.12 03:28:32 | 000,628,224 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\168755d010e5a96ac940b0ddd27616a4\System.EnterpriseServices.ni.dll
MOD - [2012.05.12 03:28:31 | 000,627,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\80fae9f16f80075535e72458ef293f7a\System.Transactions.ni.dll
MOD - [2012.05.12 03:28:30 | 006,611,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\f3814b488d9e083cbbc623e01b389f09\System.Data.ni.dll
MOD - [2012.05.12 03:27:01 | 000,680,448 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Security\054fcff18035c210487b0888e6461192\System.Security.ni.dll
MOD - [2012.05.12 03:26:57 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll
MOD - [2012.05.12 03:26:46 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll
MOD - [2012.05.12 03:26:43 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll
MOD - [2012.05.12 03:26:34 | 011,492,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll
MOD - [2012.03.26 21:47:33 | 000,016,832 | ---- | M] () -- C:\Program Files\Adobe\Reader 9.0\Reader\ViewerPS.dll
MOD - [2012.02.24 10:51:52 | 001,736,704 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.3497.38831__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll
MOD - [2012.02.24 10:51:52 | 000,491,520 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.3497.38899__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll
MOD - [2012.02.24 10:51:52 | 000,364,544 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Wizard\2.0.3497.38885__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Wizard.dll
MOD - [2012.02.24 10:51:52 | 000,339,968 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.3497.38814__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll
MOD - [2012.02.24 10:51:52 | 000,331,776 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.3497.38868__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll
MOD - [2012.02.24 10:51:52 | 000,204,800 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.3497.38833__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll
MOD - [2012.02.24 10:51:52 | 000,163,840 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MultiVPU2.Graphics.Dashboard\2.0.3497.38857__90ba9c70f846762e\CLI.Aspect.MultiVPU2.Graphics.Dashboard.dll
MOD - [2012.02.24 10:51:52 | 000,118,784 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard\2.0.3497.38898__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard.dll
MOD - [2012.02.24 10:51:52 | 000,094,208 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.3497.38868__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll
MOD - [2012.02.24 10:51:52 | 000,077,824 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.3497.38880__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll
MOD - [2012.02.24 10:51:52 | 000,073,728 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.3497.38822__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll
MOD - [2012.02.24 10:51:52 | 000,065,536 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.3497.38863__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll
MOD - [2012.02.24 10:51:52 | 000,061,440 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.3497.38867__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll
MOD - [2012.02.24 10:51:52 | 000,045,056 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.3497.38899__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll
MOD - [2012.02.24 10:51:52 | 000,045,056 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime\2.0.3497.38898__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.dll
MOD - [2012.02.24 10:51:52 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.3497.38828__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll
MOD - [2012.02.24 10:51:52 | 000,036,864 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.3497.38855__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll
MOD - [2012.02.24 10:51:52 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.3497.38823__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll
MOD - [2012.02.24 10:51:51 | 000,950,272 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager2.Graphics.Dashboard\2.0.3497.38923__90ba9c70f846762e\CLI.Aspect.DisplaysManager2.Graphics.Dashboard.dll
MOD - [2012.02.24 10:51:51 | 000,782,336 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.3497.38856__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll
MOD - [2012.02.24 10:51:51 | 000,749,568 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Dashboard\2.0.3497.38881__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Dashboard.dll
MOD - [2012.02.24 10:51:51 | 000,573,440 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.3497.38833__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll
MOD - [2012.02.24 10:51:51 | 000,409,600 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.3497.38875__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll
MOD - [2012.02.24 10:51:51 | 000,393,216 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.3497.38855__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll
MOD - [2012.02.24 10:51:51 | 000,360,448 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard\2.0.3497.38851__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll
MOD - [2012.02.24 10:51:51 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard\2.0.3497.38862__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.dll
MOD - [2012.02.24 10:51:51 | 000,307,200 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard\2.0.3497.38837__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.dll
MOD - [2012.02.24 10:51:51 | 000,270,336 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
MOD - [2012.02.24 10:51:51 | 000,196,608 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.3497.38833__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll
MOD - [2012.02.24 10:51:51 | 000,094,208 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.3497.38861__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll
MOD - [2012.02.24 10:51:51 | 000,081,920 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.3497.38856__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll
MOD - [2012.02.24 10:51:51 | 000,061,440 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.3497.38855__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll
MOD - [2012.02.24 10:51:51 | 000,045,056 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MultiVPU2.Graphics.Runtime\2.0.3497.38857__90ba9c70f846762e\CLI.Aspect.MultiVPU2.Graphics.Runtime.dll
MOD - [2012.02.24 10:51:51 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.3497.38837__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll
MOD - [2012.02.24 10:51:51 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.3497.38856__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll
MOD - [2012.02.24 10:51:51 | 000,036,864 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.3497.38860__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll
MOD - [2012.02.24 10:51:51 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\LOG.Foundation\2.0.3428.28296__90ba9c70f846762e\LOG.Foundation.dll
MOD - [2012.02.24 10:51:51 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.3497.38862__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll
MOD - [2012.02.24 10:51:51 | 000,028,672 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.3428.28297__90ba9c70f846762e\NEWAEM.Foundation.dll
MOD - [2012.02.24 10:51:51 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.3428.28304__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll
MOD - [2012.02.24 10:51:51 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.3428.28302__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll
MOD - [2012.02.24 10:51:51 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\MOM.Foundation\2.0.3428.28310__90ba9c70f846762e\MOM.Foundation.dll
MOD - [2012.02.24 10:51:51 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.WinMessages.Shared\2.0.3428.28311__90ba9c70f846762e\AEM.Plugin.WinMessages.Shared.dll
MOD - [2012.02.24 10:51:51 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.REG.Shared\2.0.3428.28329__90ba9c70f846762e\AEM.Plugin.REG.Shared.dll
MOD - [2012.02.24 10:51:51 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.3428.28327__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll
MOD - [2012.02.24 10:51:51 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.3428.28311__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll
MOD - [2012.02.24 10:51:51 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.3428.28327__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll
MOD - [2012.02.24 10:51:51 | 000,007,168 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll
MOD - [2012.02.24 10:51:50 | 000,098,304 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.3428.28305__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll
MOD - [2012.02.24 10:51:50 | 000,094,208 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Foundation\2.0.3428.28298__90ba9c70f846762e\CLI.Foundation.dll
MOD - [2012.02.24 10:51:50 | 000,065,536 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.3428.28316__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll
MOD - [2012.02.24 10:51:50 | 000,053,248 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.3428.28315__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll
MOD - [2012.02.24 10:51:50 | 000,053,248 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll
MOD - [2012.02.24 10:51:50 | 000,053,248 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll
MOD - [2012.02.24 10:51:50 | 000,049,152 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll
MOD - [2012.02.24 10:51:50 | 000,045,056 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll
MOD - [2012.02.24 10:51:50 | 000,045,056 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.3497.38904__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll
MOD - [2012.02.24 10:51:50 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.3428.28324__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll
MOD - [2012.02.24 10:51:50 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.3428.28315__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll
MOD - [2012.02.24 10:51:50 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.3428.28309__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll
MOD - [2012.02.24 10:51:50 | 000,028,672 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.3428.28354__90ba9c70f846762e\CLI.Foundation.XManifest.dll
MOD - [2012.02.24 10:51:50 | 000,028,672 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Shared\2.0.3428.28323__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.dll
MOD - [2012.02.24 10:51:50 | 000,028,672 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.3428.28313__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll
MOD - [2012.02.24 10:51:50 | 000,028,672 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll
MOD - [2012.02.24 10:51:50 | 000,028,672 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.3428.28311__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll
MOD - [2012.02.24 10:51:50 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.3428.28304__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll
MOD - [2012.02.24 10:51:50 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MultiVPU2.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.MultiVPU2.Graphics.Shared.dll
MOD - [2012.02.24 10:51:50 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll
MOD - [2012.02.24 10:51:50 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.3428.28308__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll
MOD - [2012.02.24 10:51:50 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.3428.28302__90ba9c70f846762e\CLI.Component.Client.Shared.dll
MOD - [2012.02.24 10:51:50 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll
MOD - [2012.02.24 10:51:50 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\APM.Foundation\2.0.3428.28310__90ba9c70f846762e\APM.Foundation.dll
MOD - [2012.02.24 10:51:50 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\DEM.Graphics.I0706\2.0.2743.23304__90ba9c70f846762e\DEM.Graphics.I0706.dll
MOD - [2012.02.24 10:51:50 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\DEM.Graphics\2.0.3428.28324__90ba9c70f846762e\DEM.Graphics.dll
MOD - [2012.02.24 10:51:50 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll
MOD - [2012.02.24 10:51:50 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.3428.28303__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll
MOD - [2012.02.24 10:51:50 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.3428.28313__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll
MOD - [2012.02.24 10:51:50 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll
MOD - [2012.02.24 10:51:50 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Server.Shared\2.0.3428.28304__90ba9c70f846762e\AEM.Server.Shared.dll
MOD - [2012.02.24 10:51:50 | 000,007,168 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.3497.38810__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll
MOD - [2012.02.24 10:51:49 | 001,212,416 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.3497.38819__90ba9c70f846762e\CLI.Component.Dashboard.dll
MOD - [2012.02.24 10:51:49 | 000,405,504 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.3497.38827__90ba9c70f846762e\CLI.Component.Wizard.dll
MOD - [2012.02.24 10:51:49 | 000,106,496 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\MOM.Implementation\2.0.3497.38894__90ba9c70f846762e\MOM.Implementation.dll
MOD - [2012.02.24 10:51:49 | 000,065,536 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.3497.38892__90ba9c70f846762e\LOG.Foundation.Implementation.dll
MOD - [2012.02.24 10:51:49 | 000,057,344 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.SkinFactory\2.0.3497.38813__90ba9c70f846762e\CLI.Component.SkinFactory.dll
MOD - [2012.02.24 10:51:49 | 000,057,344 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.3497.38812__90ba9c70f846762e\CLI.Component.Runtime.dll
MOD - [2012.02.24 10:51:49 | 000,045,056 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.3428.28311__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll
MOD - [2012.02.24 10:51:49 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.3428.28301__90ba9c70f846762e\CLI.Foundation.Private.dll
MOD - [2012.02.24 10:51:49 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.3428.28308__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll
MOD - [2012.02.24 10:51:49 | 000,036,864 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.3428.28303__90ba9c70f846762e\LOG.Foundation.Private.dll
MOD - [2012.02.24 10:51:49 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.3428.28311__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll
MOD - [2012.02.24 10:51:49 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\ResourceManagement.Foundation.Private\2.0.3428.28303__90ba9c70f846762e\ResourceManagement.Foundation.Private.dll
MOD - [2012.02.24 10:51:49 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.3428.28310__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll
MOD - [2012.02.24 10:51:49 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.3428.28309__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll
MOD - [2012.02.24 10:51:49 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.3428.28316__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll
MOD - [2012.02.24 10:51:48 | 000,061,440 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\APM.Server\2.0.3497.38811__90ba9c70f846762e\APM.Server.dll
MOD - [2012.02.24 10:51:48 | 000,045,056 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Server\2.0.3497.38810__90ba9c70f846762e\AEM.Server.dll
MOD - [2012.02.24 10:51:48 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll
MOD - [2012.02.24 10:51:48 | 000,019,456 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CCC.Implementation\2.0.3497.38893__90ba9c70f846762e\CCC.Implementation.dll
MOD - [2012.02.22 18:32:00 | 000,590,336 | ---- | M] () -- C:\Program Files\eM Client\SQLite\x86\sqlite3.dll
MOD - [2012.02.22 18:31:42 | 000,452,096 | ---- | M] () -- C:\Program Files\eM Client\Hunspellx86.dll
MOD - [2012.02.02 04:42:32 | 000,985,088 | ---- | M] () -- C:\Program Files\LibreOffice 3.5\program\libxml2.dll
MOD - [2012.02.02 04:42:18 | 000,976,896 | ---- | M] () -- C:\Program Files\LibreOffice 3.5\program\cairo.dll
MOD - [2012.02.01 19:02:10 | 000,043,008 | ---- | M] () -- C:\Program Files\LibreOffice 3.5\program\python-core-2.6.1\lib\_socket.pyd
MOD - [2012.02.01 19:02:10 | 000,023,040 | ---- | M] () -- C:\Program Files\LibreOffice 3.5\program\python-core-2.6.1\lib\_ssl.pyd
MOD - [2012.02.01 18:20:28 | 000,170,496 | ---- | M] () -- C:\Program Files\LibreOffice 3.5\program\libxslt.dll
MOD - [2011.04.12 03:36:53 | 000,393,216 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Deployment.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Deployment.resources.dll
MOD - [2011.04.12 03:36:52 | 000,159,744 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Xml.resources\2.0.0.0_cs_b77a5c561934e089\System.Xml.resources.dll
MOD - [2011.04.12 03:36:50 | 000,204,800 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_cs_b77a5c561934e089\System.resources.dll
MOD - [2010.11.20 23:29:11 | 002,927,616 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
MOD - [2010.11.20 23:29:07 | 000,069,120 | ---- | M] () -- C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
MOD - [2010.11.13 03:54:29 | 000,425,984 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_cs_b77a5c561934e089\System.Windows.Forms.resources.dll
MOD - [2010.11.13 03:54:19 | 000,303,104 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_cs_b77a5c561934e089\mscorlib.resources.dll
MOD - [2009.11.16 20:31:58 | 000,069,632 | ---- | M] () -- C:\Program Files\PSPad editor\PSPadShell.dll
MOD - [2009.06.10 23:23:19 | 000,261,632 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
MOD - [2009.05.04 11:45:14 | 000,016,384 | R--- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll
MOD - [1999.08.13 07:00:00 | 000,332,800 | ---- | M] () -- C:\Users\Šárka\Dokumenty\Anect\Dokumenty\Install\Paint Shop Pro 6\Fpxlib.dll
MOD - [1999.08.13 07:00:00 | 000,122,880 | ---- | M] () -- C:\Users\Šárka\Dokumenty\Anect\Dokumenty\Install\Paint Shop Pro 6\Jpeglib.dll

========== Win32 Services (SafeList) ==========

SRV - [2012.08.15 09:59:56 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.07.20 11:27:11 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.03.26 17:03:40 | 000,214,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV - [2012.03.26 17:03:40 | 000,011,552 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2012.02.24 14:30:33 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2011.04.01 18:41:44 | 000,152,496 | ---- | M] (TOSHIBA CORPORATION) [On_Demand | Running] -- C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
SRV - [2009.07.30 00:54:10 | 000,176,128 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

========== Driver Services (SafeList) ==========

DRV - [2012.03.20 20:44:12 | 000,074,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NisDrvWFP.sys -- (NisDrv)
DRV - [2011.08.17 09:56:22 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2011.08.05 11:21:52 | 000,236,728 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosrfbd.sys -- (tosrfbd)
DRV - [2011.07.12 20:07:40 | 000,016,064 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosrfec.sys -- (tosrfec)
DRV - [2011.01.27 16:26:16 | 000,056,888 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosrfusb.sys -- (Tosrfusb)
DRV - [2010.11.29 12:47:00 | 000,070,448 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\tosrfcom.sys -- (Tosrfcom)
DRV - [2010.11.20 23:29:24 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010.11.20 23:29:03 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010.11.20 23:29:03 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV - [2010.11.11 11:26:00 | 000,042,672 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbnp.sys -- (tosrfbnp)
DRV - [2010.08.30 11:48:00 | 000,080,064 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Tosrfhid.sys -- (Tosrfhid)
DRV - [2010.04.26 12:48:00 | 000,053,760 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TosRfSnd.sys -- (TosRfSnd)
DRV - [2009.09.21 18:58:28 | 001,218,048 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2009.09.15 05:30:08 | 000,038,400 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2009.09.15 04:36:18 | 000,044,544 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2009.09.07 10:00:28 | 000,048,128 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2009.07.30 13:06:30 | 004,994,560 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2009.07.24 12:31:00 | 000,021,608 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfnds.sys -- (tosrfnds)
DRV - [2009.07.14 01:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp)
DRV - [2009.07.14 00:13:48 | 001,035,776 | ---- | M] (LSI Corp) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2009.06.17 12:59:00 | 000,046,984 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosporte.sys -- (tosporte)
DRV - [2009.05.05 01:30:28 | 000,014,392 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\AtiPcie.sys -- (AtiPcie) AMD PCI Express (3GIO)
DRV - [2007.11.09 06:00:52 | 000,023,640 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\TVALZ_O.SYS -- (TVALZ)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=112553 ... 2163f54086
IE - HKCU\..\SearchScopes,DefaultScope = yandex.ru-214000
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE8SRC
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTer ... 2163f54086
IE - HKCU\..\SearchScopes\{91CD7B0C-FA42-45B7-AE0A-D4A8129F6BB5}: "URL" = http://search.igeared.com/dispatcher.as ... earchTerms}
IE - HKCU\..\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}: "URL" = http://www2.inbox.com/search/dispatcher ... 093&lng=cs
IE - HKCU\..\SearchScopes\{F8131967-1086-49BE-A4E8-D749B9D05B48}: "URL" = http://yandex.ru/yandsearch?clid=120040 ... earchTerms}
IE - HKCU\..\SearchScopes\yandex.ru-214000: "URL" = http://www.google.com/search?q={searchT ... utEncoding?}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)"
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.com/"

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_271.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.07.20 11:27:13 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.07.20 11:27:13 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

[2012.02.27 09:30:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Šárka\AppData\Roaming\Mozilla\Extensions
[2012.07.20 23:09:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Šárka\AppData\Roaming\Mozilla\Firefox\Profiles\jibendkh.default\extensions
[2012.04.22 21:40:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Šárka\AppData\Roaming\Mozilla\Firefox\Profiles\jibendkh.default\extensions\staged
[2012.02.27 09:30:12 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012.07.20 11:27:12 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012.02.15 23:57:58 | 000,001,478 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\emclient_igeared.xml
[2012.06.08 07:41:28 | 000,002,208 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2012.06.08 07:41:28 | 000,000,638 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2012.06.08 07:41:28 | 000,001,367 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2012.06.08 07:41:28 | 000,000,654 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2012.06.08 07:41:28 | 000,001,179 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml

========== Chrome ==========

CHR - homepage: http://www.google.com
CHR - homepage: http://www.google.com
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\20.0.1132.57\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\20.0.1132.57\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\20.0.1132.57\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_265.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.250.6 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U25 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.2.183.23\npGoogleOneClick8.dll
CHR - Extension: YouTube = C:\Users\Šárka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: \u041F\u043E\u0438\u0441\u043A Google = C:\Users\Šárka\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Gmail = C:\Users\Šárka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2009.06.10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (eMClientToolbar BHO) - {D0CF9C3B-2C4F-4C99-ACED-3CDF9AEEFF7E} - C:\Program Files\eMClientToolbar\IEToolbar.dll ()
O3 - HKLM\..\Toolbar: (eM Client Toolbar) - {837CC356-411E-4654-B2A2-ECA1F037979F} - C:\Program Files\eMClientToolbar\IEToolbar.dll ()
O4 - HKLM..\Run: [HDMICtrlMan] C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe (TOSHIBA Corporation.)
O4 - HKLM..\Run: [ITSecMng] C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe (TOSHIBA CORPORATION)
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: [ICQ] C:\Program Files\ICQ7.7\ICQ.exe (ICQ, LLC.)
O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\Windows\System32\Macromed\Flash\FlashUtil32_11_3_300_271_Plugin.exe (Adobe Systems Incorporated)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Low Rights present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files\ICQ7.7\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files\ICQ7.7\ICQ.exe (ICQ, LLC.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.10.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0BB04690-B90B-4605-B2F9-40E89DF323A0}: DhcpNameServer = 192.168.2.200 82.100.39.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A5E3ED78-A2B0-43FD-A1B7-5F1403F4097F}: DhcpNameServer = 192.168.1.1 192.168.10.1
O18 - Protocol\Handler\emclienttoolbar {33369B62-D4CB-4E08-85A4-FD093C37AB1B} - C:\Program Files\eMClientToolbar\IEToolbar.dll ()
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2012.08.21 17:38:48 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2012.08.21 17:38:47 | 000,000,000 | ---D | C] -- C:\rsit
[2012.08.16 23:13:51 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2012.08.16 23:13:49 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2012.08.16 23:13:49 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2012.08.16 23:13:48 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2012.08.16 23:13:47 | 001,800,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2012.08.16 23:13:46 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2012.08.16 23:13:44 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2012.08.16 09:08:58 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll
[2012.08.16 09:08:57 | 002,345,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2012.08.16 09:08:51 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browcli.dll
[2012.08.06 19:45:04 | 000,000,000 | ---D | C] -- C:\Users\Šárka\Desktop\NigerianScam
[2012.08.06 19:43:26 | 000,000,000 | ---D | C] -- C:\Users\Šárka\AppData\Roaming\Canon
[2012.07.25 11:09:59 | 000,000,000 | ---D | C] -- C:\Users\Šárka\Documents\NOKIA

========== Files - Modified Within 30 Days ==========

[2012.08.23 10:14:49 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012.08.23 09:59:00 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.08.22 20:33:35 | 000,020,688 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.08.22 20:33:35 | 000,020,688 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.08.22 10:36:44 | 000,000,600 | ---- | M] () -- C:\Users\Šárka\AppData\Local\PUTTY.RND
[2012.08.21 07:50:34 | 000,001,573 | ---- | M] () -- C:\Users\Šárka\Desktop\OTL.exe – zástupce.lnk
[2012.08.21 04:56:19 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.08.16 23:37:18 | 000,633,392 | ---- | M] () -- C:\Windows\System32\perfh005.dat
[2012.08.16 23:37:18 | 000,618,108 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.08.16 23:37:18 | 000,122,914 | ---- | M] () -- C:\Windows\System32\perfc005.dat
[2012.08.16 23:37:18 | 000,107,388 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.08.16 23:31:35 | 000,309,296 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.08.16 23:31:01 | 2615,541,760 | -HS- | M] () -- C:\hiberfil.sys
[2012.08.15 09:59:55 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012.08.15 09:59:55 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012.07.25 11:08:46 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_ccdcmb_01009.Wdf
[2012.07.25 11:08:29 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf

========== Files Created - No Company Name ==========

[2012.07.25 11:08:46 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_ccdcmb_01009.Wdf
[2012.07.25 11:08:29 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2012.03.08 14:17:29 | 000,000,600 | ---- | C] () -- C:\Users\Šárka\AppData\Local\PUTTY.RND
[2012.03.03 20:30:46 | 000,000,571 | ---- | C] () -- C:\Windows\System32\FeMakro.ini
[2012.03.03 20:30:46 | 000,000,497 | ---- | C] () -- C:\Windows\System32\FeAnim.ini
[2012.02.24 09:40:13 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2011.04.12 03:37:20 | 000,633,392 | ---- | C] () -- C:\Windows\System32\perfh005.dat
[2011.04.12 03:37:20 | 000,292,004 | ---- | C] () -- C:\Windows\System32\perfi005.dat
[2011.04.12 03:37:20 | 000,122,914 | ---- | C] () -- C:\Windows\System32\perfc005.dat
[2011.04.12 03:37:20 | 000,036,232 | ---- | C] () -- C:\Windows\System32\perfd005.dat

========== LOP Check ==========

[2012.04.22 21:41:09 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\Babylon
[2012.08.06 19:43:26 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\Canon
[2012.08.17 09:58:59 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\eM Client
[2012.08.19 09:40:44 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\ICQ
[2012.02.24 16:16:35 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\LibreOffice
[2012.04.22 21:40:00 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\Opera
[2012.07.14 21:05:25 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\postgresql
[2012.07.17 16:45:26 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\Visio
[2012.02.24 10:20:52 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\WinBatch
[2012.02.24 11:34:00 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\Windows Live Writer
[2012.04.22 21:46:14 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\Yandex
[2012.03.01 15:48:39 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\YourFileDownloader
[2012.06.27 19:22:03 | 000,032,610 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

========== Custom Scans ==========

< >

< >

< MD5 for: AGP440.SYS >
[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys
[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696\AGP440.sys
[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys
[2006.03.13 11:26:26 | 000,091,136 | ---- | M] (Microsoft Corporation) MD5=FA30640404376517930772D7E559AEF1 -- C:\Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\vypalit\erd\I386\system32\drivers\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2006.03.13 11:25:50 | 000,578,048 | ---- | M] (Microsoft Corporation) MD5=D372615D5E547B8A654A627DCB65CCCE -- C:\Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\vypalit\erd\I386\system32\autochk.exe
[2010.11.20 23:29:06 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\System32\autochk.exe
[2010.11.20 23:29:06 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2006.03.13 11:26:26 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=427A8153BB9EBA7FE07853C5FDE88CC5 -- C:\Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\vypalit\erd\I386\system32\drivers\cdrom.sys
[2010.11.20 23:29:03 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\System32\drivers\cdrom.sys
[2010.11.20 23:29:03 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_x86_neutral_6381e09675524225\cdrom.sys
[2010.11.20 23:29:03 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_61b0c5ce02098355\cdrom.sys

< MD5 for: CNGAUDIT.DLL >
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll

< MD5 for: CRYPTSVC.DLL >
[2012.04.24 06:36:42 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=06E771AA596B8761107AB57E99F128D7 -- C:\Windows\System32\cryptsvc.dll
[2012.04.24 06:36:42 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=06E771AA596B8761107AB57E99F128D7 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17827_none_77ff39f3f916c65f\cryptsvc.dll
[2012.04.24 06:28:22 | 000,142,336 | ---- | M] (Microsoft Corporation) MD5=21993009E0CCB9B4FA195F14D3408626 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.21979_none_7854c7b7125b248c\cryptsvc.dll
[2010.11.20 23:29:24 | 000,136,192 | ---- | M] (Microsoft Corporation) MD5=A585BEBF7D054BD9618EDA0922D5484A -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_7807034ff91166f4\cryptsvc.dll

< MD5 for: EVENTLOG.DLL >
[2004.04.13 20:28:48 | 000,032,874 | R--- | M] () MD5=16D34E1EC42956262AA217352EC90597 -- C:\Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\Install\perl\ActivePerl-5.6.1.638-MSWin32-x86\ActivePerl\Perl\site\lib\auto\Win32\EventLog\EventLog.dll

< MD5 for: EXPLORER.EXE >
[2011.02.26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2010.11.20 23:29:20 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe
[2006.03.13 11:25:56 | 000,176,128 | ---- | M] () MD5=F5431747A6E14EF82A9A156F45E74BC8 -- C:\Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\vypalit\erd\I386\system32\Explorer.exe

< MD5 for: HAL.DLL >
[2006.03.13 11:25:58 | 000,103,936 | ---- | M] (Microsoft Corporation) MD5=09DCE613C0461A6155BE6F5C3EDF71D1 -- C:\Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\vypalit\erd\I386\system32\hal.dll
[2010.11.20 23:29:19 | 000,194,432 | ---- | M] (Microsoft Corporation) MD5=1BF0D4727FDB437D513CFF8A9359C050 -- C:\Windows\System32\hal.dll
[2010.11.20 23:29:19 | 000,194,432 | ---- | M] (Microsoft Corporation) MD5=1BF0D4727FDB437D513CFF8A9359C050 -- C:\Windows\winsxs\x86_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_ad305c8fb7ec5060\hal.dll

< MD5 for: IASTORV.SYS >
[2011.03.11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\System32\drivers\iaStorV.sys
[2011.03.11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_0bcee2057afcc090\iaStorV.sys
[2011.03.11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_b0daddb9e6380745\iaStorV.sys
[2011.03.11 07:28:00 | 000,332,160 | ---- | M] (Intel Corporation) MD5=778D0E6D7D9EBA0C403BADBAAD41DB20 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_b152a892ff64119f\iaStorV.sys
[2010.11.20 23:29:03 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_668286aa35d55928\iaStorV.sys
[2010.11.20 23:29:03 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_b118bc63e60a139a\iaStorV.sys

< MD5 for: ISAPNP.SYS >
[2009.07.14 03:20:36 | 000,046,656 | ---- | M] (Microsoft Corporation) MD5=1F32BB6B38F62F7DF1A7AB7292638A35 -- C:\Windows\System32\drivers\isapnp.sys
[2009.07.14 03:20:36 | 000,046,656 | ---- | M] (Microsoft Corporation) MD5=1F32BB6B38F62F7DF1A7AB7292638A35 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696\isapnp.sys
[2009.07.14 03:20:36 | 000,046,656 | ---- | M] (Microsoft Corporation) MD5=1F32BB6B38F62F7DF1A7AB7292638A35 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\isapnp.sys
[2006.03.13 11:26:28 | 000,037,888 | ---- | M] (Microsoft Corporation) MD5=4EA2CC0CC091854FB1A07B6758BB68C0 -- C:\Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\vypalit\erd\I386\system32\drivers\isapnp.sys

< MD5 for: LSASS.EXE >
[2011.11.17 07:29:50 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=81951F51E318AECC2D68559E47485CC4 -- C:\Windows\System32\lsass.exe
[2011.11.17 07:29:50 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=81951F51E318AECC2D68559E47485CC4 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17725_none_a84828d7bb1480d7\lsass.exe
[2011.11.17 07:29:50 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=81951F51E318AECC2D68559E47485CC4 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17856_none_a828bb43bb2beb28\lsass.exe
[2006.03.13 11:26:02 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=D4B61A935670C57A0DEA81B4F4A12169 -- C:\Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\vypalit\erd\I386\system32\lsass.exe
[2009.07.14 03:14:23 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F42309C4191C506B71DB5D1126D26318 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_a851f4adbb0d5141\lsass.exe
[2012.06.02 06:51:22 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=FA7B950E4CA6AA260C4EABA19E03644D -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22010_none_a8d76e24d42eb666\lsass.exe
[2011.11.17 07:24:04 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=FBCB2DFA40862DAA7B1534C9538208A5 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.21861_none_a8a284cad4562b09\lsass.exe

< MD5 for: NDIS.SYS >
[2006.03.13 11:26:30 | 000,229,888 | ---- | M] (Microsoft Corporation) MD5=0108D1A29D2BD8EC4885FEDC8CDCF4D9 -- C:\Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\vypalit\erd\I386\system32\drivers\ndis.sys
[2010.11.20 23:29:12 | 000,712,576 | ---- | M] (Microsoft Corporation) MD5=E7C54812A2AAF43316EB6930C1FFA108 -- C:\Windows\System32\drivers\ndis.sys
[2010.11.20 23:29:12 | 000,712,576 | ---- | M] (Microsoft Corporation) MD5=E7C54812A2AAF43316EB6930C1FFA108 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_a9ce95b27a512623\ndis.sys

< MD5 for: NETLOGON.DLL >
[2006.03.13 11:26:06 | 000,418,816 | ---- | M] (Microsoft Corporation) MD5=4B7021EFC4323AA4949DB2E53AD1052C -- C:\Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\vypalit\erd\I386\system32\netlogon.dll
[2010.11.20 23:29:12 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\System32\netlogon.dll
[2010.11.20 23:29:12 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_ffbf212e963c0162\netlogon.dll

< MD5 for: NVRAID.SYS >
[2010.11.20 23:29:03 | 000,117,120 | ---- | M] (NVIDIA Corporation) MD5=AF2EEC9580C1D32FB7EAF105D9784061 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14\nvraid.sys
[2010.11.20 23:29:03 | 000,117,120 | ---- | M] (NVIDIA Corporation) MD5=AF2EEC9580C1D32FB7EAF105D9784061 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvraid.sys
[2011.03.11 07:39:00 | 000,117,120 | ---- | M] (NVIDIA Corporation) MD5=B3E25EE28883877076E0E1FF877D02E0 -- C:\Windows\System32\drivers\nvraid.sys
[2011.03.11 07:39:00 | 000,117,120 | ---- | M] (NVIDIA Corporation) MD5=B3E25EE28883877076E0E1FF877D02E0 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_0276fc3b3ea60d41\nvraid.sys
[2011.03.11 07:39:00 | 000,117,120 | ---- | M] (NVIDIA Corporation) MD5=B3E25EE28883877076E0E1FF877D02E0 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_3ba44e691d6eb11d\nvraid.sys
[2011.03.11 07:28:10 | 000,117,120 | ---- | M] (NVIDIA Corporation) MD5=E3B840350A72CA6F39BD2BEF85A2BCFB -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_3c1c1942369abb77\nvraid.sys

< MD5 for: NVSTOR.SYS >
[2011.03.11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\System32\drivers\nvstor.sys
[2011.03.11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_0276fc3b3ea60d41\nvstor.sys
[2011.03.11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_3ba44e691d6eb11d\nvstor.sys
[2011.03.11 07:28:10 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=66D468654A58594F5F3BA63D5AD5B1AF -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_3c1c1942369abb77\nvstor.sys
[2010.11.20 23:29:03 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14\nvstor.sys
[2010.11.20 23:29:03 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvstor.sys

< MD5 for: SCECLI.DLL >
[2010.11.20 23:29:07 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll
[2010.11.20 23:29:07 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll
[2006.03.13 11:26:12 | 000,183,808 | ---- | M] (Microsoft Corporation) MD5=A927F6B1F40B0F5323EA7B9FED7164CB -- C:\Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\vypalit\erd\I386\system32\scecli.dll

< MD5 for: SMSS.EXE >
[2009.07.14 03:14:39 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=16742790895960690237A5143CEDEC8B -- C:\Windows\System32\smss.exe
[2009.07.14 03:14:39 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=16742790895960690237A5143CEDEC8B -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_ac10fe207a85352b\smss.exe
[2006.03.13 11:26:16 | 000,047,616 | ---- | M] (Microsoft Corporation) MD5=DB238613945B51ECB4E50E74FAC407A7 -- C:\Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\vypalit\erd\I386\system32\smss.exe

posílám 2.část OTL

< MD5 for: SVCHOST.EXE >
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\System32\svchost.exe
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2006.03.13 11:26:16 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=6BAE362DCB0951BE6D8F50B0FD17BA12 -- C:\Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\vypalit\erd\I386\system32\svchost.exe

< MD5 for: SYMMPI.SYS >
[2006.03.13 11:26:32 | 000,026,496 | ---- | M] (LSI Logic) MD5=1F754D0B8CC3058370D4CEF712E3A3A7 -- C:\Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\vypalit\erd\I386\system32\drivers\symmpi.sys

< MD5 for: TCPIP.SYS >
[2011.04.25 06:31:30 | 001,290,624 | ---- | M] (Microsoft Corporation) MD5=24326784DF8F3D5F5BBB9F878CE33C14 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17603_none_b52f4dc5c4a121e0\tcpip.sys
[2010.11.20 23:29:20 | 001,290,112 | ---- | M] (Microsoft Corporation) MD5=37E8FA3779668837CA9E2C36D2415949 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_b5257c3dc4a85a01\tcpip.sys
[2011.09.29 18:17:18 | 001,303,920 | ---- | M] (Microsoft Corporation) MD5=3C1C41E317710F74CEC1E7F0D5325993 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21828_none_b5a84e10ddca7566\tcpip.sys
[2011.09.29 18:03:04 | 001,290,608 | ---- | M] (Microsoft Corporation) MD5=65D10B191C59C5501A1263FC33F6894B -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17697_none_b4d1ffa1c4e682b5\tcpip.sys
[2011.04.25 08:31:09 | 001,301,376 | ---- | M] (Microsoft Corporation) MD5=6D4728CFF2724FF3A4654971D61D0F1C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21712_none_b5ad1a5addc7c444\tcpip.sys
[2012.03.30 12:23:11 | 001,291,632 | ---- | M] (Microsoft Corporation) MD5=7FA2E0F8B072BD04B77B421480B6CC22 -- C:\Windows\System32\drivers\tcpip.sys
[2012.03.30 12:23:11 | 001,291,632 | ---- | M] (Microsoft Corporation) MD5=7FA2E0F8B072BD04B77B421480B6CC22 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17802_none_b52e5147c4a202d7\tcpip.sys
[2012.03.30 11:04:23 | 001,306,480 | ---- | M] (Microsoft Corporation) MD5=88FCDB9923EFECA207B3CEBD24407126 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21954_none_b583df0adde66104\tcpip.sys
[2006.03.13 11:26:32 | 000,334,336 | ---- | M] (Microsoft Corporation) MD5=958EF45FFA5DAF1E7F7806D1312FFB2F -- C:\Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\vypalit\erd\I386\system32\drivers\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.20 23:29:06 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe
[2010.11.20 23:29:06 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010.11.20 23:29:06 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe
[2010.11.20 23:29:06 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2006.03.13 11:26:22 | 000,549,376 | ---- | M] (Microsoft Corporation) MD5=8186BCCC56231204E798252EF2EDF9AF -- C:\Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\vypalit\erd\I386\system32\winlogon.exe

< MD5 for: WS2_32.DLL >
[2006.03.13 11:26:22 | 000,089,600 | ---- | M] (Microsoft Corporation) MD5=0CDBD0021A17E721DFAD567772F5FE79 -- C:\Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\vypalit\erd\I386\system32\ws2_32.dll
[2010.11.20 23:29:06 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\System32\ws2_32.dll
[2010.11.20 23:29:06 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll

< >

< %systemroot%*.* /U /s >
[5 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2012.02.27 09:34:41 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\Adobe
[2012.02.24 15:14:16 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\ATI
[2012.04.22 21:41:09 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\Babylon
[2012.08.06 19:43:26 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\Canon
[2012.08.17 09:58:59 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\eM Client
[2012.05.25 12:00:17 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\Google
[2012.08.19 09:40:44 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\ICQ
[2012.02.24 09:47:43 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\Identities
[2012.02.24 10:20:55 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\InstallShield
[2012.02.24 16:16:35 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\LibreOffice
[2012.02.24 11:04:53 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\Macromedia
[2011.04.12 03:46:13 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\Media Center Programs
[2012.08.06 19:59:45 | 000,000,000 | --SD | M] -- C:\Users\Šárka\AppData\Roaming\Microsoft
[2012.02.27 09:30:27 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\Mozilla
[2012.04.22 21:40:00 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\Opera
[2012.07.14 21:05:25 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\postgresql
[2012.05.10 14:41:13 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\PSpad
[2012.08.19 09:40:58 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\Skype
[2012.07.17 16:45:26 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\Visio
[2012.02.24 10:20:52 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\WinBatch
[2012.02.24 11:34:00 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\Windows Live Writer
[2012.04.22 21:46:14 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\Yandex
[2012.03.01 15:48:39 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\YourFileDownloader

< %APPDATA%\*.exe /s >
[2012.08.06 19:59:45 | 000,010,134 | R--- | M] () -- C:\Users\Šárka\AppData\Roaming\Microsoft\Installer\{C5A15C68-0DF3-8A13-352E-E605491D7E3D}\ARPPRODUCTICON.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2012.08.22 20:33:35 | 000,020,688 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.08.22 20:33:35 | 000,020,688 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"ICQ" = "C:\Program Files\ICQ7.7\ICQ.exe" silent loginmode=4 -- [2012.03.02 12:25:58 | 000,127,040 | ---- | M] (ICQ, LLC.)
"Skype" = "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun -- [2012.02.01 00:06:28 | 017,146,504 | R--- | M] (Skype Technologies S.A.)

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
No captured output from command...

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
No captured output from command...

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
No captured output from command...

< >

< type c:\boot.ini >> test.txt /c >
No captured output from command...

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2012.08.23 10:14:49 | 000,000,512 | ---- | M] () MD5=94494632402C2D40938197591ED5CF81 -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2009.03.20 23:20:08 | 000,038,346 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\Install\cygwin\ftp%3a%2f%2fmirror.mcs.anl.gov%2fpub%2fcygwin\release\fcrackzip\fcrackzip-0.3-1.tar.bz2
[1999.08.13 07:00:00 | 000,120,054 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\Install\Paint Shop Pro 6\Patterns\Cracked Emerald.pat
[1999.08.13 07:00:00 | 000,011,078 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\Install\Paint Shop Pro 6\Textures\Cracked Cement.tex
[2007.06.25 23:09:46 | 000,040,960 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\Install\WIFI-cisco-Ales\aircrack-ng-win-0.9.1\bin\Aircrack-ng GUI.exe
[2007.06.25 23:06:40 | 000,231,447 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\Install\WIFI-cisco-Ales\aircrack-ng-win-0.9.1\bin\aircrack-ng.exe
[2007.06.25 20:27:32 | 000,079,365 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\Install\WIFI-cisco-Ales\aircrack-ng-win-0.9.1\src\aircrack-ng.c
[2007.05.04 20:21:14 | 000,005,963 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\Install\WIFI-cisco-Ales\aircrack-ng-win-0.9.1\src\aircrack-ng.h
[2007.06.16 01:23:30 | 000,012,755 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\Install\WIFI-cisco-Ales\aircrack-ng-win-0.9.1\src\aircrack-ptw-lib.c
[2007.04.29 23:54:06 | 000,001,819 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\Install\WIFI-cisco-Ales\aircrack-ng-win-0.9.1\src\aircrack-ptw-lib.h
[2007.06.25 23:14:28 | 000,000,922 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\Install\WIFI-cisco-Ales\aircrack-ng-win-0.9.1\src\GUI\Aircrack-ng.sln
[2007.06.25 23:14:28 | 000,018,432 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\Install\WIFI-cisco-Ales\aircrack-ng-win-0.9.1\src\GUI\Aircrack-ng.suo
[2007.06.25 23:14:28 | 000,003,341 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\Install\WIFI-cisco-Ales\aircrack-ng-win-0.9.1\src\GUI\Aircrack-ng\Aircrack-ng.csproj
[2007.06.25 23:14:28 | 000,000,538 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\Install\WIFI-cisco-Ales\aircrack-ng-win-0.9.1\src\GUI\Aircrack-ng\Aircrack-ng.csproj.user

< *keygen* /s >

< *loader* /s >
[2012.05.11 14:44:18 | 000,004,176 | ---- | M] () -- \Program Files\Google\Google SketchUp 8\Resources\en-US\searching\ajax-loader.gif
[2012.05.11 14:44:20 | 000,000,500 | ---- | M] () -- \Program Files\Google\Google SketchUp 8\Tools\DynamicComponents\ruby\dcloader.rb
[2012.05.11 14:44:20 | 000,001,871 | ---- | M] () -- \Program Files\Google\Google SketchUp 8\Tools\ShadowStringsFix\shadowstringsfix_loader.rb
[2012.05.11 14:44:20 | 000,003,949 | ---- | M] () -- \Program Files\Google\Google SketchUp 8\Tools\SolarNorth\solarnorth_loader.rb
[2012.05.11 14:44:20 | 000,029,567 | ---- | M] () -- \Program Files\Google\Google SketchUp 8\Tools\WebTextures\webtextures_loader.rb
[2012.03.02 12:25:55 | 000,005,795 | ---- | M] () -- \Program Files\ICQ7.7\imApp\theme\IMAGES\XtraPreloader\loader.jpg
[2012.03.02 12:25:56 | 000,004,180 | ---- | M] () -- \Program Files\ICQ7.7\imApp\theme\IMAGES\XtraPreloader\zlango-preloader.png
[2012.03.02 12:25:55 | 000,005,520 | ---- | M] () -- \Program Files\ICQ7.7\imApp\theme\MUICoreLib\xtraLoader.swf
[2012.03.02 12:27:25 | 000,000,402 | ---- | M] () -- \Program Files\ICQ7.7\Xtraz\icq\content\profile_lightboxs\preloader.html
[2012.02.02 04:45:22 | 000,007,024 | ---- | M] () -- \Program Files\LibreOffice 3.5\program\pythonloader.py
[2012.02.02 04:42:14 | 000,022,528 | ---- | M] () -- \Program Files\LibreOffice 3.5\program\pythonloader.uno.dll
[2012.02.02 04:49:28 | 000,000,171 | ---- | M] () -- \Program Files\LibreOffice 3.5\program\pythonloader.uno.ini
[2012.02.02 04:36:28 | 000,124,234 | ---- | M] () -- \Program Files\LibreOffice 3.5\share\extensions\report-builder\libloader-1.1.6.jar
[2012.02.02 04:42:12 | 000,029,696 | ---- | M] () -- \Program Files\LibreOffice 3.5\URE\bin\javaloader.uno.dll
[2012.02.02 04:31:54 | 000,003,871 | ---- | M] () -- \Program Files\LibreOffice 3.5\URE\java\unoloader.jar
[2012.02.01 00:01:14 | 000,072,638 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.gif
[2012.02.01 00:01:14 | 000,003,032 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.png
[2012.02.01 00:01:14 | 000,072,638 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.gif
[2012.02.01 00:01:14 | 000,003,032 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.png
[2012.08.10 08:23:26 | 000,105,903 | ---- | M] () -- \Users\Šárka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UO6YJ3MN\AdLoader-427d9fd2a91e2f2c023aefe9f69a01d0.min[1].js
[2012.08.10 08:23:26 | 000,000,753 | ---- | M] () -- \Users\Šárka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UO6YJ3MN\AdLoader[2].htm
[2012.07.24 01:10:29 | 000,010,519 | ---- | M] () -- \Users\Šárka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W188SD8S\AdLoader-aee74f28845638b42a47bb02dc06a7c6.min[1].js
[2007.08.16 10:55:16 | 000,010,914 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\Products.ZenUtils.BasicLoader.BasicLoader-class.html
[2007.08.16 10:55:20 | 000,001,155 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\toc-ZenModel.BasicDeviceLoader-module.html
[2007.08.16 10:55:20 | 000,000,947 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\toc-ZenModel.BatchDeviceLoader-module.html
[2007.08.16 10:55:20 | 000,001,107 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\toc-ZenModel.CiscoLoader-module.html
[2007.08.16 10:55:20 | 000,001,139 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\toc-ZenModel.CmdDeviceLoader-module.html
[2007.08.16 10:55:20 | 000,001,139 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\toc-ZenModel.IpServiceLoader-module.html
[2007.08.16 10:55:20 | 000,000,919 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\toc-ZenModel.XmlDataLoader-module.html
[2007.08.16 10:55:20 | 000,001,433 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\toc-ZenModel.ZDeviceLoader-module.html
[2007.08.16 10:55:20 | 000,002,487 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\toc-ZenModel.ZenPackLoader-module.html
[2007.08.16 10:55:20 | 000,001,107 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\toc-ZenUtils.BasicLoader-module.html
[2007.08.16 10:55:16 | 000,005,430 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenModel.BasicDeviceLoader-module.html
[2007.08.16 10:55:10 | 000,011,516 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenModel.BasicDeviceLoader.BasicDeviceLoader-class.html
[2007.08.16 10:55:14 | 000,003,779 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenModel.BatchDeviceLoader-module.html
[2007.08.16 10:55:12 | 000,008,957 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenModel.BatchDeviceLoader.BatchDeviceLoader-class.html
[2007.08.16 10:55:10 | 000,005,122 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenModel.CiscoLoader-module.html
[2007.08.16 10:55:16 | 000,015,631 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenModel.CiscoLoader.CiscoLoader-class.html
[2007.08.16 10:55:10 | 000,005,110 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenModel.CmdDeviceLoader-module.html
[2007.08.16 10:55:12 | 000,010,777 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenModel.CmdDeviceLoader.cmdDeviceLoader-class.html
[2007.08.16 10:55:14 | 000,005,099 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenModel.IpServiceLoader-module.html
[2007.08.16 10:55:16 | 000,010,495 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenModel.IpServiceLoader.IpServiceLoader-class.html
[2007.08.16 10:55:10 | 000,003,505 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenModel.XmlDataLoader-module.html
[2007.08.16 10:55:08 | 000,011,463 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenModel.XmlDataLoader.XmlDataLoader-class.html
[2007.08.16 10:55:10 | 000,007,393 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenModel.ZDeviceLoader-module.html
[2007.08.16 10:55:12 | 000,074,971 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenModel.ZDeviceLoader.ZDeviceLoader-class.html
[2007.08.16 10:55:14 | 000,010,040 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenModel.ZenPackLoader-module.html
[2007.08.16 10:55:08 | 000,009,281 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenModel.ZenPackLoader.ZenPackLoader-class.html
[2007.08.16 10:55:14 | 000,009,103 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenModel.ZenPackLoader.ZPLAbout-class.html
[2007.08.16 10:55:14 | 000,011,063 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenModel.ZenPackLoader.ZPLDaemons-class.html
[2007.08.16 10:55:08 | 000,006,936 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenModel.ZenPackLoader.ZPLDataSources-class.html
[2007.08.16 10:55:14 | 000,006,916 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenModel.ZenPackLoader.ZPLLibraries-class.html
[2007.08.16 10:55:08 | 000,006,925 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenModel.ZenPackLoader.ZPLModelers-class.html
[2007.08.16 10:55:10 | 000,009,625 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenModel.ZenPackLoader.ZPLObject-class.html
[2007.08.16 10:55:14 | 000,009,083 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenModel.ZenPackLoader.ZPLReport-class.html
[2007.08.16 10:55:14 | 000,008,800 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenModel.ZenPackLoader.ZPLSkins-class.html
[2007.08.16 10:55:16 | 000,005,210 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenUtils.BasicLoader-module.html
[2007.08.16 10:55:14 | 000,010,289 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\ZenUtils.BasicLoader.BasicLoader-class.html
[2007.08.16 10:55:16 | 000,010,915 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\Products.ZenUtils.BasicLoader.BasicLoader-class.html
[2007.08.16 10:55:20 | 000,001,156 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\toc-ZenModel.BasicDeviceLoader-module.html
[2007.08.16 10:55:20 | 000,000,948 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\toc-ZenModel.BatchDeviceLoader-module.html
[2007.08.16 10:55:20 | 000,001,108 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\toc-ZenModel.CiscoLoader-module.html
[2007.08.16 10:55:20 | 000,001,140 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\toc-ZenModel.CmdDeviceLoader-module.html
[2007.08.16 10:55:20 | 000,001,140 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\toc-ZenModel.IpServiceLoader-module.html
[2007.08.16 10:55:20 | 000,000,920 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\toc-ZenModel.XmlDataLoader-module.html
[2007.08.16 10:55:20 | 000,001,434 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\toc-ZenModel.ZDeviceLoader-module.html
[2007.08.16 10:55:20 | 000,002,488 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\toc-ZenModel.ZenPackLoader-module.html
[2007.08.16 10:55:20 | 000,001,108 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\toc-ZenUtils.BasicLoader-module.html
[2007.08.16 10:55:16 | 000,005,431 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenModel.BasicDeviceLoader-module.html
[2007.08.16 10:55:10 | 000,011,517 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenModel.BasicDeviceLoader.BasicDeviceLoader-class.html
[2007.08.16 10:55:14 | 000,003,780 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenModel.BatchDeviceLoader-module.html
[2007.08.16 10:55:12 | 000,008,958 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenModel.BatchDeviceLoader.BatchDeviceLoader-class.html
[2007.08.16 10:55:10 | 000,005,123 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenModel.CiscoLoader-module.html
[2007.08.16 10:55:16 | 000,015,632 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenModel.CiscoLoader.CiscoLoader-class.html
[2007.08.16 10:55:10 | 000,005,111 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenModel.CmdDeviceLoader-module.html
[2007.08.16 10:55:12 | 000,010,778 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenModel.CmdDeviceLoader.cmdDeviceLoader-class.html
[2007.08.16 10:55:14 | 000,005,100 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenModel.IpServiceLoader-module.html
[2007.08.16 10:55:16 | 000,010,496 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenModel.IpServiceLoader.IpServiceLoader-class.html
[2007.08.16 10:55:10 | 000,003,506 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenModel.XmlDataLoader-module.html
[2007.08.16 10:55:08 | 000,011,464 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenModel.XmlDataLoader.XmlDataLoader-class.html
[2007.08.16 10:55:10 | 000,007,394 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenModel.ZDeviceLoader-module.html
[2007.08.16 10:55:12 | 000,070,523 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenModel.ZDeviceLoader.ZDeviceLoader-class.html
[2007.08.16 10:55:14 | 000,010,041 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenModel.ZenPackLoader-module.html
[2007.08.16 10:55:08 | 000,009,282 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenModel.ZenPackLoader.ZenPackLoader-class.html
[2007.08.16 10:55:14 | 000,009,104 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenModel.ZenPackLoader.ZPLAbout-class.html
[2007.08.16 10:55:14 | 000,011,064 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenModel.ZenPackLoader.ZPLDaemons-class.html
[2007.08.16 10:55:08 | 000,006,937 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenModel.ZenPackLoader.ZPLDataSources-class.html
[2007.08.16 10:55:14 | 000,006,917 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenModel.ZenPackLoader.ZPLLibraries-class.html
[2007.08.16 10:55:08 | 000,006,926 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenModel.ZenPackLoader.ZPLModelers-class.html
[2007.08.16 10:55:10 | 000,009,626 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenModel.ZenPackLoader.ZPLObject-class.html
[2007.08.16 10:55:14 | 000,009,084 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenModel.ZenPackLoader.ZPLReport-class.html
[2007.08.16 10:55:14 | 000,008,801 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenModel.ZenPackLoader.ZPLSkins-class.html
[2007.08.16 10:55:16 | 000,005,211 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenUtils.BasicLoader-module.html
[2007.08.16 10:55:14 | 000,010,290 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\ZenUtils.BasicLoader.BasicLoader-class.html
[2005.01.14 16:24:48 | 000,003,095 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\Install\ibm-netcool\Micromuse\Netcool\install\platform\win32\bin\components\uriloader.xpt
[2005.01.14 17:24:48 | 000,003,095 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\Install\netcool\NCISetup-1.0.127-Win32\Micromuse\Netcool\install\platform\win32\bin\components\uriloader.xpt
[2004.04.13 20:22:06 | 000,011,013 | R--- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\Install\perl\ActivePerl-5.6.1.638-MSWin32-x86\ActivePerl\Perl\lib\AutoLoader.pm
[2004.04.13 20:22:02 | 000,000,643 | R--- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\Install\perl\ActivePerl-5.6.1.638-MSWin32-x86\ActivePerl\Perl\lib\ByteLoader.pm
[2004.04.13 20:25:02 | 000,028,119 | R--- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\Install\perl\ActivePerl-5.6.1.638-MSWin32-x86\ActivePerl\Perl\lib\DynaLoader.pm
[2004.04.13 20:22:08 | 000,012,442 | R--- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\Install\perl\ActivePerl-5.6.1.638-MSWin32-x86\ActivePerl\Perl\lib\SelfLoader.pm
[2004.04.13 20:25:02 | 000,003,749 | R--- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\Install\perl\ActivePerl-5.6.1.638-MSWin32-x86\ActivePerl\Perl\lib\XSLoader.pm
[2004.04.13 20:26:28 | 000,000,000 | R--- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\Install\perl\ActivePerl-5.6.1.638-MSWin32-x86\ActivePerl\Perl\lib\auto\ByteLoader\ByteLoader.bs
[2004.04.13 20:26:30 | 000,028,758 | R--- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\Install\perl\ActivePerl-5.6.1.638-MSWin32-x86\ActivePerl\Perl\lib\auto\ByteLoader\ByteLoader.dll
[2004.04.13 20:26:30 | 000,000,817 | R--- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\Install\perl\ActivePerl-5.6.1.638-MSWin32-x86\ActivePerl\Perl\lib\auto\ByteLoader\ByteLoader.exp
[2004.04.13 20:26:30 | 000,002,212 | R--- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\Install\perl\ActivePerl-5.6.1.638-MSWin32-x86\ActivePerl\Perl\lib\auto\ByteLoader\ByteLoader.lib
[2003.10.27 16:27:17 | 000,001,325 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOcam\reloc\CSCOpx\www\classpath\com\cisco\nm\cam\registry\AppletResourceLoader$1.class
[2003.10.27 16:27:17 | 000,006,759 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOcam\reloc\CSCOpx\www\classpath\com\cisco\nm\cam\registry\AppletResourceLoader.class
[2003.10.27 16:27:17 | 000,000,554 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOcam\reloc\CSCOpx\www\classpath\com\cisco\nm\cam\registry\RegClassLoader.class
[2003.10.27 16:27:18 | 000,002,231 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOcam\reloc\CSCOpx\www\classpath\com\cisco\nm\cam\registry\RsrcLoader$Rsrc$Downloader.class
[2003.10.27 16:27:18 | 000,002,461 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOcam\reloc\CSCOpx\www\classpath\com\cisco\nm\cam\registry\RsrcLoader$Rsrc.class
[2003.10.27 16:27:18 | 000,005,975 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOcam\reloc\CSCOpx\www\classpath\com\cisco\nm\cam\registry\RsrcLoader.class
[2003.10.27 16:28:09 | 000,000,799 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOcvw1\reloc\CSCOpx\www\classpath\com\cisco\nm\cvw\guiservice\ClassLoaderWrapper$1.class
[2003.10.27 16:28:09 | 000,000,870 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOcvw1\reloc\CSCOpx\www\classpath\com\cisco\nm\cvw\guiservice\ClassLoaderWrapper$2.class
[2003.10.27 16:28:09 | 000,000,851 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOcvw1\reloc\CSCOpx\www\classpath\com\cisco\nm\cvw\guiservice\ClassLoaderWrapper.class
[2003.10.27 16:28:09 | 000,005,889 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOcvw1\reloc\CSCOpx\www\classpath\com\cisco\nm\cvw\guiservice\CvClassLoader.class
[2003.10.27 16:28:16 | 000,003,620 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOcvw1\reloc\CSCOpx\www\classpath\com\cisco\nm\cvw\util\CustomClassLoader.class
[2003.10.27 16:28:16 | 000,002,247 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOcvw1\reloc\CSCOpx\www\classpath\com\cisco\nm\cvw\util\ImageLoader$1.class
[2003.10.27 16:28:16 | 000,003,267 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOcvw1\reloc\CSCOpx\www\classpath\com\cisco\nm\cvw\util\ImageLoader$2.class
[2003.10.27 16:28:16 | 000,002,541 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOcvw1\reloc\CSCOpx\www\classpath\com\cisco\nm\cvw\util\ImageLoader.class
[2003.10.27 16:28:16 | 000,000,380 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOcvw1\reloc\CSCOpx\www\classpath\com\cisco\nm\cvw\util\Loader.class
[2003.10.27 16:28:19 | 000,002,634 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOcvw1\reloc\CSCOpx\www\classpath\com\cisco\nm\dsu\engine\repository\RemoteSrcRepository$Downloader.class
[2003.10.27 16:28:23 | 000,008,112 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOcvw1\reloc\CSCOpx\www\classpath\com\cisco\nm\dsu\util\loader\DsuClassLoader.class
[2003.10.27 16:29:05 | 000,004,581 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOeds\reloc\CSCOpx\www\classpath\com\cisco\nm\cmf\eds\loader\EDSClassLoader.class
[2003.10.27 16:29:05 | 000,001,999 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOeds\reloc\CSCOpx\www\classpath\com\cisco\nm\cmf\eds\loader\EDSClassLoaderLW.class
[2003.10.27 16:29:05 | 000,000,923 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOeds\reloc\CSCOpx\www\classpath\com\cisco\nm\cmf\eds\loader\LoaderMainAC$1.class
[2003.10.27 16:29:05 | 000,001,662 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOeds\reloc\CSCOpx\www\classpath\com\cisco\nm\cmf\eds\loader\LoaderMainAC.class
[2003.10.27 16:29:05 | 000,000,289 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOeds\reloc\CSCOpx\www\classpath\com\cisco\nm\cmf\eds\loader\LoaderObject.class
[2003.10.27 16:29:05 | 000,004,702 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOeds\reloc\CSCOpx\www\classpath\com\cisco\nm\cmf\eds\loader\LoaderObjectHelper.class
[2003.10.27 16:29:05 | 000,001,009 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOeds\reloc\CSCOpx\www\classpath\com\cisco\nm\cmf\eds\loader\LoaderObjectHolder.class
[2003.10.27 16:29:05 | 000,010,715 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOeds\reloc\CSCOpx\www\classpath\com\cisco\nm\cmf\eds\loader\LoaderObjectImpl.class
[2003.10.27 16:29:05 | 000,000,562 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOeds\reloc\CSCOpx\www\classpath\com\cisco\nm\cmf\eds\loader\LoaderObjectOperations.class
[2003.10.27 16:29:05 | 000,003,891 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOeds\reloc\CSCOpx\www\classpath\com\cisco\nm\cmf\eds\loader\LoaderObjectPOA.class
[2003.10.27 16:29:05 | 000,001,531 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOeds\reloc\CSCOpx\www\classpath\com\cisco\nm\cmf\eds\loader\LoaderObjectPOATie.class
[2003.10.27 16:29:05 | 000,001,448 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOeds\reloc\CSCOpx\www\classpath\com\cisco\nm\cmf\eds\loader\_LoaderObjectImplBase.class
[2003.10.27 16:29:05 | 000,004,479 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOeds\reloc\CSCOpx\www\classpath\com\cisco\nm\cmf\eds\loader\_LoaderObjectStub.class
[2003.10.27 16:29:05 | 000,001,290 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOeds\reloc\CSCOpx\www\classpath\com\cisco\nm\cmf\eds\loader\_tie_LoaderObject.class
[2003.10.27 16:30:02 | 000,001,658 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOjcht\reloc\CSCOpx\www\classpath\com\klg\jclass\util\swing\JCHTMLPane$PageLoader.class
[2003.10.27 16:31:08 | 000,009,979 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOperl\reloc\CSCOpx\objects\perl\lib\AutoLoader.pm
[2003.10.27 16:31:13 | 000,011,707 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOperl\reloc\CSCOpx\objects\perl\lib\SelfLoader.pm
[2003.10.27 16:31:08 | 000,003,922 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOperl\reloc\CSCOpx\objects\perl\lib\Apache\RegistryLoader.pm
[2003.10.27 16:31:43 | 000,023,659 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOperl\reloc\CSCOpx\objects\perl\lib\sun4-solaris\5.00502\DynaLoader.pm
[2003.10.27 16:31:45 | 000,009,696 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOperl\reloc\CSCOpx\objects\perl\lib\sun4-solaris\5.00502\auto\DynaLoader\DynaLoader.a
[2003.10.27 16:32:22 | 000,004,297 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOsnmp\reloc\CSCOpx\www\classpath\com\cisco\nm\lib\snmp\futureapi\SnmpCommunityLoader.class
[2003.10.27 16:32:22 | 000,003,574 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOsnmp\reloc\CSCOpx\www\classpath\com\cisco\nm\lib\snmp\lib\MibStore$MibStoreLoader.class
[2003.10.27 16:32:45 | 000,000,379 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\HIOP\servlets\FileLoader.class
[2003.10.27 16:32:45 | 000,001,135 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\HIOP\servlets\PathFileLoader.class
[2003.10.27 16:32:45 | 000,000,959 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\HIOP\servlets\ZipFileLoader.class
[2003.10.27 16:32:59 | 000,000,247 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\interceptor\ServiceLoader.class
[2003.10.27 16:32:59 | 000,003,688 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\ir\IRbeLoader.class
[2003.10.27 16:33:01 | 000,000,643 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\ir\ast\IRbeLoaderNodeFactory.class
[2003.10.27 16:33:01 | 000,003,268 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\ir\ast\IRbeLoaderOptions.class
[2003.10.27 16:33:06 | 000,002,489 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\rmi\CORBA\Java2UtilDelegate$SetContextClassLoaderAction.class
[2003.10.27 16:34:35 | 000,004,610 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOxrts\reloc\CSCOpx\www\classpath\com\cisco\nm\cmf\desktop\CsIconLoaderThread.class
[2003.10.27 16:49:53 | 001,608,192 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOavail\reloc\CSCOpx\objects\availability\bin\avloader
[2003.10.27 16:50:02 | 000,003,053 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOccli\reloc\CSCOpx\www\classpath\com\cisco\nm\config\cli\CwcCommandLoader.class
[2003.10.27 16:51:23 | 000,017,628 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOinv\reloc\CSCOpx\IDS\inventory\scripts\devtypeLoader.pl
[2003.10.27 16:52:07 | 000,022,692 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOncfg\reloc\CSCOpx\www\classpath\com\cisco\nm\config\cjm\downloader\ConfigArchDownloader.class
[2003.10.27 16:52:07 | 000,043,668 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOncfg\reloc\CSCOpx\www\classpath\com\cisco\nm\config\cjm\downloader\ConfigDownloader.class
[2003.10.27 16:52:08 | 000,000,314 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOncfg\reloc\CSCOpx\www\classpath\com\cisco\nm\config\cjm\downloader\downloader.properties
[2003.10.27 16:52:08 | 000,002,899 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOncfg\reloc\CSCOpx\www\classpath\com\cisco\nm\config\cjm\downloader\DownloaderConst.class
[2003.10.27 16:52:08 | 000,003,999 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOncfg\reloc\CSCOpx\www\classpath\com\cisco\nm\config\cjm\downloader\DownloaderEDSListener.class
[2003.10.27 16:52:08 | 000,001,647 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOncfg\reloc\CSCOpx\www\classpath\com\cisco\nm\config\cjm\downloader\DownloaderEventCB.class
[2003.10.27 16:52:08 | 000,001,528 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOncfg\reloc\CSCOpx\www\classpath\com\cisco\nm\config\cjm\downloader\DownloaderEventFilter.class
[2003.10.27 16:52:08 | 000,006,267 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOncfg\reloc\CSCOpx\www\classpath\com\cisco\nm\config\cjm\downloader\DownloaderObject.class
[2012.03.01 15:47:47 | 004,110,768 | ---- | M] () -- \Users\Šárka\Downloads\file_downloader_98902a.exe
[2012.03.01 15:39:04 | 004,110,768 | ---- | M] () -- \Users\Šárka\Downloads\Us_Action_Home_Designer_downloader_133a.exe
[2011.07.16 06:15:45 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2009.07.14 06:54:01 | 000,003,532 | ---- | M] () -- \Windows\System32\Tasks\Microsoft\Windows\WindowsColorSystem\Calibration Loader
[2011.04.12 03:37:09 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86.manifest
[2011.04.12 03:37:09 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86_winload.exe.mui_3bc5b827
[2011.04.12 03:37:09 | 000,030,272 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86_winresume.exe.mui_ff8b5358
[2010.11.20 23:31:02 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953.manifest
[2010.11.20 23:31:02 | 000,508,904 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953_winload.exe_75835076
[2010.11.20 23:31:02 | 000,442,720 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953_winresume.exe_85cd1215
[2009.07.14 04:17:38 | 000,002,894 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23.manifest
[2009.07.14 04:17:38 | 000,017,472 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23_spldr.sys_98bd87a0
[2011.04.12 03:36:26 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86.manifest
[2010.11.20 23:23:54 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953.manifest
[2009.07.14 03:52:31 | 000,002,894 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23.manifest
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 03:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:15:45 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_0c8b1b39da352d2d\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:36:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_0d001876f3621e30\api-ms-win-core-libraryloader-l1-1-0.dll

< *minodlogin* /s >

< *tnod* /s >
[2003.10.27 16:30:11 | 000,000,416 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOjgl\reloc\CSCOpx\www\classpath\com\objectspace\jgl\DList$DListNode.class
[2003.10.27 16:30:11 | 000,000,430 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOjgl\reloc\CSCOpx\www\classpath\com\objectspace\jgl\HashSet$HashSetNode.class
[2003.10.27 16:30:11 | 000,000,397 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOjgl\reloc\CSCOpx\www\classpath\com\objectspace\jgl\SList$SListNode.class
[2003.10.27 16:33:00 | 000,000,405 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\ir\ast\IRConstantNode.class
[2003.10.27 16:33:01 | 000,000,448 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\ir\ast\IRStructNode.class

< *AutoKMS* /s >

< *activator* /s >
[2003.10.27 16:32:53 | 000,000,387 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\extension\Activator.class
[2003.10.27 16:33:01 | 000,001,911 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\naming\DxActivator.class
[2003.10.27 16:33:01 | 000,001,749 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\naming\DxClusterActivator.class
[2003.10.27 16:33:01 | 000,001,714 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\naming\InMemoryActivator.class
[2003.10.27 16:33:01 | 000,001,388 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\naming\InMemoryClusterActivator.class
[2003.10.27 16:33:01 | 000,001,724 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\naming\InMemoryDBActivator.class
[2003.10.27 16:33:01 | 000,001,398 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\naming\InMemoryDBClusterActivator.class
[2003.10.27 16:33:02 | 000,001,736 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\naming\JDBCActivator.class
[2003.10.27 16:33:02 | 000,001,751 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\naming\JDBCClusterActivator.class
[2003.10.27 16:33:02 | 000,002,198 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\naming\JNDIActivator.class
[2003.10.27 16:33:02 | 000,001,988 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\naming\JNDIClusterActivator.class
[2003.10.27 16:33:02 | 000,001,689 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\naming\UDFActivator.class
[2003.10.27 16:33:02 | 000,001,363 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\naming\UDFClusterActivator.class
[2003.10.27 16:33:05 | 000,001,950 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\poa\BOAImpl$BOAServantActivator.class
[2003.10.27 16:33:05 | 000,001,773 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\poa\BOAImpl$PersistentAdapterActivator.class
[2003.10.27 16:33:05 | 000,000,976 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\poa\BOAImpl$ServiceAdapterActivator.class
[2003.10.27 16:33:05 | 000,001,412 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\com\inprise\vbroker\poa\VBAdapterActivator.class
[2003.10.27 16:33:23 | 000,000,279 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\org\omg\PortableServer\AdapterActivator.class
[2003.10.27 16:33:23 | 000,003,589 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\org\omg\PortableServer\AdapterActivatorHelper.class
[2003.10.27 16:33:23 | 000,000,259 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\org\omg\PortableServer\AdapterActivatorOperations.class
[2003.10.27 16:33:23 | 000,002,856 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\org\omg\PortableServer\AdapterActivatorPOA.class
[2003.10.27 16:33:23 | 000,001,116 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\org\omg\PortableServer\AdapterActivatorPOATie.class
[2003.10.27 16:33:25 | 000,000,296 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\org\omg\PortableServer\ServantActivator.class
[2003.10.27 16:33:25 | 000,003,589 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\org\omg\PortableServer\ServantActivatorHelper.class
[2003.10.27 16:33:25 | 000,000,481 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\org\omg\PortableServer\ServantActivatorOperations.class
[2003.10.27 16:33:25 | 000,003,904 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\org\omg\PortableServer\ServantActivatorPOA.class
[2003.10.27 16:33:25 | 000,001,344 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\org\omg\PortableServer\ServantActivatorPOATie.class
[2003.10.27 16:33:26 | 000,003,024 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\org\omg\PortableServer\_AdapterActivatorStub.class
[2003.10.27 16:33:26 | 000,004,171 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOvorb\reloc\CSCOpx\www\classpath\org\omg\PortableServer\_ServantActivatorStub.class
[2005.01.19 16:35:22 | 000,000,609 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\Netcool\Impact\ExampleOld\NCI_9_BatchDelete_usingPolicyActivator.ipl
[2005.09.09 20:02:42 | 000,000,609 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\Netcool\Impact\ImpactByExample\NCI_9_BatchDelete_usingPolicyActivator.ipl

< *serial* /s >
[2012.06.15 11:30:00 | 000,098,304 | ---- | M] () -- \Program Files\eM Client\MailClient.XmlSerializers.dll
[2012.02.02 04:36:28 | 000,021,761 | ---- | M] () -- \Program Files\LibreOffice 3.5\share\extensions\report-builder\libserializer-1.1.6.jar
[2010.11.20 23:29:48 | 000,970,752 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2011.04.12 03:36:58 | 000,090,112 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\cs\System.RunTime.Serialization.Resources.dll
[2006.04.21 09:28:10 | 000,000,003 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\Certifikaty\Axello\openssl\CA\serial
[2006.04.21 09:28:10 | 000,000,003 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\Certifikaty\Axello\openssl\CA\serial.old
[2007.08.16 10:55:16 | 000,009,058 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\private\twisted.spread.flavors.Serializable-class.html
[2007.08.16 10:55:16 | 000,009,059 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\DohledoveAplikace\Zenos\public\twisted.spread.flavors.Serializable-class.html
[2009.02.18 13:50:23 | 000,000,029 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\Install\Win_2003\serial_number.txt
[2007.01.11 01:07:00 | 000,000,378 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\pujcenynb\CUOS+SM\dependency\jre\lib\serialver.properties
[2006.12.13 07:15:43 | 000,000,378 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\pujcenynb\CUSM\dependency\jre\lib\serialver.properties
[2004.11.26 08:15:58 | 000,000,041 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\BlazeVideo\blazedvdserial.txt
[2007.01.11 01:07:00 | 000,000,378 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\Install\CUOS+SM\dependency\jre\lib\serialver.properties
[2006.12.13 07:15:43 | 000,000,378 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\Install\CUSM\dependency\jre\lib\serialver.properties
[2002.02.02 14:02:02 | 000,000,394 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\Install\FlashFXP\serial.txt
[2003.10.27 16:27:54 | 000,000,473 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOcvw1\reloc\CSCOpx\lib\classpath\Acme\Serializable.class
[2003.10.27 16:27:54 | 000,012,596 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOcvw1\reloc\CSCOpx\lib\classpath\Acme\SerialUtils.class
[2003.10.27 16:27:54 | 000,004,314 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOcvw1\reloc\CSCOpx\lib\classpath\Acme\SerialUtilsTest.class
[2003.10.27 16:28:23 | 000,002,356 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOcvw1\reloc\CSCOpx\www\classpath\com\cisco\nm\dsu\util\SerializeUtils.class
[2003.10.27 16:29:01 | 000,000,842 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOeds\reloc\CSCOpx\www\classpath\com\cisco\nm\cmf\eds\exceptions\SerializationError.class
[2003.10.27 16:29:01 | 000,002,812 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOeds\reloc\CSCOpx\www\classpath\com\cisco\nm\cmf\eds\exceptions\SerializationErrorHelper.class
[2003.10.27 16:29:01 | 000,001,075 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOeds\reloc\CSCOpx\www\classpath\com\cisco\nm\cmf\eds\exceptions\SerializationErrorHolder.class
[2003.10.27 16:30:18 | 000,002,290 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\cs2_2\packages\CSCOjpwr\reloc\CSCOpx\lib\classpath\COM\jscape\util\image\ImageSerializer.class
[2003.10.27 16:50:53 | 000,000,292 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOincat\reloc\CSCOpx\IDS\inventory\desfiles\catalyst\catalyst_serialNumber.des
[2003.10.27 16:50:48 | 000,000,212 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOincts\reloc\CSCOpx\IDS\inventory\desfiles\cat2600\cat2600_serialNumber.des
[2003.10.27 16:51:00 | 000,000,192 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOinfsm\reloc\CSCOpx\IDS\inventory\desfiles\fastswitch_wmod\fastswitch_wmod_serialNumber.des
[2003.10.27 16:50:48 | 000,000,180 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOinfsw\reloc\CSCOpx\IDS\inventory\desfiles\fastswitch\fastswitch_serialNumber.des
[2003.10.27 16:51:02 | 000,000,189 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOinisw\reloc\CSCOpx\IDS\inventory\desfiles\iosswitch\iosswitch_serialNumber.des
[2003.10.27 16:51:02 | 000,000,190 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOinlsw\reloc\CSCOpx\IDS\inventory\desfiles\l2l3switch\l2l3switch_serialNumber.des
[2003.10.27 16:51:03 | 000,000,180 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOinltn\reloc\CSCOpx\IDS\inventory\desfiles\ls1010\ls1010_serialNumber.des
[2003.10.27 16:51:10 | 000,000,189 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOinnsh\reloc\CSCOpx\IDS\inventory\desfiles\nashoba\nashoba_serialNumber.des
[2003.10.27 16:51:12 | 000,000,174 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOinrtr\reloc\CSCOpx\IDS\inventory\desfiles\router\router_serialNumber.des
[2003.10.27 16:51:13 | 000,000,216 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOintsi\reloc\CSCOpx\IDS\inventory\desfiles\cat2600_ibm\cat2600_ibm_serialNumber.des
[2003.10.27 16:51:16 | 000,009,802 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOinv\reloc\CSCOpx\cgi-bin\inventory\pinventory\editMultiSeed_SerialNumber.pl
[2003.10.27 16:51:20 | 000,016,105 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOinv\reloc\CSCOpx\htdocs\help\invmgr\devices_serial_num_rep.html
[2003.10.27 16:51:22 | 000,003,078 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOinv\reloc\CSCOpx\htdocs\help\invmgr\invc_serial-number_rep.html
[2003.10.27 16:51:23 | 000,004,859 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOinv\reloc\CSCOpx\IDS\inventory\scripts\loadSerialNumber.pl
[2003.10.27 16:51:27 | 000,004,778 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOinv\reloc\CSCOpx\lib\classpath\com\cisco\nm\inventory\postdc\mss\igxbpx\IgxBpxSerialDataModuleTableEntry.class
[2003.10.27 16:51:33 | 000,000,840 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOinvc\reloc\CSCOpx\www\classpath\com\cisco\nm\inv\invcst\InvCstSerialNumberTypeInfo.class
[2003.10.27 16:51:33 | 000,004,042 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOinvc\reloc\CSCOpx\www\classpath\com\cisco\nm\inv\invcst\InvCstSerialNumberTypeSelectorPage.class
[2003.10.27 16:51:33 | 000,003,211 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\MF\ZalohySystemu\CW10\Instalacky\rme3_5\packages\CSCOinvc\reloc\CSCOpx\www\classpath\com\cisco\nm\inv\invcst\InvCstSerialNumberTypeVisitor.class
[2006.03.13 11:26:30 | 000,077,824 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\StaryNB\Dokumenty\vypalit\erd\I386\system32\drivers\serial.sys
[2008.09.23 15:14:26 | 000,002,146 | ---- | M] () -- \Users\Šárka\Documents\Anect\Dokumenty\unicredit\Serial10.txt
[2 \Users\Šárka\Documents\Anect\Dokumenty\unicredit\*.tmp files -> \Users\Šárka\Documents\Anect\Dokumenty\unicredit\*.tmp -> ]
[2011.04.12 03:36:53 | 000,011,776 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.06.10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2011.04.12 03:36:58 | 000,090,112 | ---- | M] () -- \Windows\assembly\GAC_MSIL\system.runtime.serialization.resources\3.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.Resources.dll
[2010.11.20 23:29:48 | 000,970,752 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2012.05.12 03:27:47 | 000,310,784 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\2ff4e90c5842525f7a7456639de090d8\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2012.05.12 03:32:41 | 002,347,008 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\72a24b45e11d64eb2bc840aae9419ba5\System.Runtime.Serialization.ni.dll
[2012.05.12 03:09:46 | 000,311,296 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\5a4d233916a69d48fa12a9f7f103d893\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2012.05.12 03:09:38 | 002,647,040 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\8a9fac9cb825b5d2db0bdb867fff940e\System.Runtime.Serialization.ni.dll
[2012.05.12 03:12:48 | 000,009,216 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Serializ#\4b540b784465ca3f0742990e5af444e3\System.Xml.Serialization.ni.dll
[2012.02.26 11:42:29 | 000,017,840 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\v4.0_4.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2012.06.14 15:08:03 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2012.02.26 11:42:28 | 000,099,208 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.RunTime.Serialization.resources\v4.0_4.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.resources.dll
[2012.06.14 15:08:01 | 001,026,936 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2012.06.14 15:08:09 | 000,011,120 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
[2009.06.10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2011.04.12 03:36:49 | 000,011,776 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.11.20 23:29:48 | 000,970,752 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2010.03.18 14:16:28 | 001,026,936 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
[2010.03.18 14:16:28 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2011.04.06 17:48:20 | 000,011,120 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.Serialization.dll
[2010.06.15 03:33:16 | 000,017,840 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.06.15 03:33:16 | 000,099,208 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\cs\System.RunTime.Serialization.resources.dll
[2009.07.14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\System32\serialui.dll
[2011.04.12 03:36:50 | 000,005,120 | ---- | M] () -- \Windows\System32\cs-CZ\serialui.dll.mui
[2009.07.14 01:45:33 | 000,083,456 | ---- | M] () -- \Windows\System32\drivers\serial.sys
[2011.04.12 03:36:55 | 000,009,728 | ---- | M] () -- \Windows\System32\drivers\cs-CZ\serial.sys.mui
[2009.07.14 00:13:45 | 001,068,032 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\mdmmotsm.inf_x86_neutral_c1415d9789c54b89\smserial.sys
[2009.07.14 01:45:33 | 000,083,456 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\msports.inf_x86_neutral_c1a802e06677f73f\serial.sys
[2009.07.14 00:09:18 | 000,031,232 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\smartcrd.inf_x86_neutral_63e72c669d043f14\grserial.sys
[2009.07.14 04:18:03 | 000,002,762 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_118be3420dfe8486.manifest
[2009.07.14 04:18:03 | 000,015,952 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_118be3420dfe8486_kdcom.dll_db5e7744
[2011.04.12 03:37:09 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed_serialui.dll.mui_7d29d2a3
[2009.07.14 04:18:51 | 000,015,360 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a_serialui.dll_bea29328
[2010.11.20 23:24:56 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c.manifest
[2011.04.12 03:36:33 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0.manifest
[2010.11.20 23:24:56 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f.manifest
[2009.07.14 03:49:26 | 000,002,762 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_118be3420dfe8486.manifest
[2009.07.14 03:45:27 | 000,000,866 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft.windows.h..tserial-driverclass_31bf3856ad364e35_6.1.7600.16385_none_2c93290b67c98d09.manifest
[2010.11.20 23:24:56 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1.manifest
[2009.06.10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_1c9a3ec1e01c684b\System.Runtime.Serialization.Formatters.Soap.dll
[2011.04.12 03:36:53 | 000,011,776 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ters.soap.resources_b03f5f7f11d50a3a_6.1.7600.16385_cs-cz_d5c3552dd9b47144\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.11.20 23:29:48 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c\System.Runtime.Serialization.dll
[2011.04.12 03:36:58 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0\System.RunTime.Serialization.Resources.dll
[2010.11.20 23:29:48 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f\System.Runtime.Serialization.dll
[2009.07.14 00:13:45 | 001,068,032 | ---- | M] () -- \Windows\winsxs\x86_mdmmotsm.inf_31bf3856ad364e35_6.1.7600.16385_none_7a97936f8a972896\smserial.sys
[2011.04.12 03:36:49 | 000,011,776 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_c233d4df09982c29\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2011.04.12 03:36:50 | 000,005,120 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed\serialui.dll.mui
[2009.07.14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a\serialui.dll
[2011.04.12 03:36:58 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_5f7b7c7cb0c0f266\System.RunTime.Serialization.Resources.dll
[2011.04.12 03:36:55 | 000,009,728 | ---- | M] () -- \Windows\winsxs\x86_msports.inf.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_c48c78a9ad8ff996\serial.sys.mui
[2009.07.14 01:45:33 | 000,083,456 | ---- | M] () -- \Windows\winsxs\x86_msports.inf_31bf3856ad364e35_6.1.7600.16385_none_f86e06d519b1d9a4\serial.sys
[2009.07.14 00:09:18 | 000,031,232 | ---- | M] () -- \Windows\winsxs\x86_smartcrd.inf_31bf3856ad364e35_6.1.7600.16385_none_7280378295916274\grserial.sys
[2010.11.20 23:29:48 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1\System.Runtime.Serialization.dll

< *w7lxe* /s >

< End of report >

Extras.txt

OTL Extras logfile created on: 23.8.2012 10:10:23 - Run 1
OTL by OldTimer - Version 3.2.54.0 Folder = C:\Users\Šárka\Documents\DOWNLOAD
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,25 Gb Total Physical Memory | 1,91 Gb Available Physical Memory | 58,88% Memory free
6,49 Gb Paging File | 4,87 Gb Available in Paging File | 74,98% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 297,99 Gb Total Space | 220,46 Gb Free Space | 73,98% Space Free | Partition Type: NTFS
Drive D: | 415,74 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: SARKA-NOTEBOOK | User Name: Šárka | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- Reg Error: Key error.
https [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{07EB616D-8DB1-46F7-B64F-15D5378BFB5D}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{0A3C4D0A-1F6F-40A2-BE18-5669FEBC3DA3}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{0AE16158-1F45-4F26-881F-9CB08A11D66C}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{10273EBE-CD2B-4D77-AC31-5851602890BD}" = lport=138 | protocol=17 | dir=in | app=system |
"{274F4E60-3723-4938-87AC-CFDD843E1140}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{31589B10-60CF-4D3D-98CF-19596977E696}" = lport=445 | protocol=6 | dir=in | app=system |
"{36CDB599-4F76-4B6F-AD01-7632715F8FEC}" = lport=139 | protocol=6 | dir=in | app=system |
"{39A8FD62-9A76-4C1F-98A6-F32F3EC1AE11}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{41F936D2-EDB1-4C42-8C33-8A35A2BAF49E}" = rport=445 | protocol=6 | dir=out | app=system |
"{43B6C513-A1FA-4039-80F2-0AC006FD5EFD}" = lport=2869 | protocol=6 | dir=in | app=system |
"{53C61C63-AC2E-4CEA-952C-8F6A51F26941}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{5E095274-410C-4EBF-A237-94DEE9D8AD0E}" = rport=10243 | protocol=6 | dir=out | app=system |
"{74407270-5B98-4B80-8FAB-6444D2525067}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{8FCCE65B-476C-484E-B172-F0159FA2185A}" = rport=139 | protocol=6 | dir=out | app=system |
"{97974583-4DF2-40C9-A900-C09CB200A2E2}" = rport=137 | protocol=17 | dir=out | app=system |
"{AC9C9A74-69A6-4353-B1FD-5D8E2D87F19C}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{B068A349-6BDA-43EE-96F3-2B85C075F482}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{B160A15F-D989-4C3D-BEC9-B1E2A604A276}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{BC8014D4-ED25-484D-A54D-A1C641144FFE}" = rport=138 | protocol=17 | dir=out | app=system |
"{C13F8109-6643-4158-A2D3-3D96C90401E2}" = lport=137 | protocol=17 | dir=in | app=system |
"{C3C48E67-0F8E-4669-834F-73B6AAE6FF8E}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{DF0ECFCE-1B9F-4CA9-ADA8-FCED6EEF44EC}" = lport=10243 | protocol=6 | dir=in | app=system |
"{F26EC106-FF2F-4418-905B-9F8633EBEDC4}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{07093769-5B8A-4D0D-B31F-D371B923735E}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{0DA77BB6-E56D-4791-8C61-08A607053CB8}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{0E93EF5A-9FDD-419E-99DF-A84B499348FC}" = protocol=17 | dir=in | app=c:\program files\icq7.7\icq.exe |
"{10F3B0F0-0766-4CCF-99C9-E18F5600B646}" = protocol=6 | dir=in | app=c:\program files\icq7.7\icq.exe |
"{15F88D3F-F135-499A-AC5E-4B2E2CBA86DC}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{16B2750A-EBAD-4A85-A9E6-067BCFD48DF7}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{333DD7A9-326E-4C80-98C4-A0FCE72B620A}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{39C4F90A-E743-4FED-AA21-60FD1AAE3D1D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{3AD5DD78-201E-4AEA-A9C1-CDEF0D0F04D6}" = protocol=6 | dir=out | app=system |
"{43A90258-EDA1-4B03-B71E-BFFB564D63AD}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{55705BF9-4133-472B-90B9-6DC3E3139B96}" = protocol=17 | dir=in | app=c:\program files\yourfiledownloader\downloader.exe |
"{5C258BBF-9373-43FD-9F7D-53E995755D0C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{61549809-7B73-4B57-83EC-950DB57F050D}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{66CCF23B-ED95-4064-98DA-693E99C92E4F}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{6B45252C-48B1-4D54-9538-81DBAF2B1FE4}" = protocol=6 | dir=in | app=c:\program files\yourfiledownloader\downloader.exe |
"{7126FF87-9C59-45C1-B7AF-90FCF8B7D16E}" = protocol=17 | dir=in | app=c:\program files\yourfiledownloader\yourfile.exe |
"{77266D92-B3DE-4EB9-A8DE-4FB7A51D7491}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{84469AE3-2F0C-4A0A-A1BC-ED608A4856C9}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{88C24196-6D9A-47BC-87C3-6B5EF044A726}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{8E69FFB6-8D17-4525-AF21-DA572B76B1BA}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{9894BD89-8B0C-41A8-B18D-F56550892F70}" = protocol=17 | dir=in | app=c:\program files\icq7.7\icq.exe |
"{9A560D59-874C-4671-B799-ACD62F2ACCFF}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{9D8DD9C3-F3B7-4B38-ACEC-C8DD5C6BBA27}" = protocol=6 | dir=in | app=c:\program files\yourfiledownloader\yourfile.exe |
"{A1C42D10-0903-476C-8DD2-C1E0D306E6DB}" = protocol=6 | dir=in | app=c:\program files\icq7.7\icq.exe |
"{C33A5BEA-C614-4717-B65A-ED2324AAD3AE}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{F1AD3407-3D9F-4E24-AE26-06E048A6DB8F}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"TCP Query User{E4338ECA-1F2F-4FE4-9337-AA0385510F56}C:\program files\icq7.7\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq7.7\icq.exe |
"UDP Query User{616783E2-70F7-4427-A624-7C1E1DA4D85F}C:\program files\icq7.7\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq7.7\icq.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0B5E0886-BC91-4E83-BB29-A664ED8F0285}" = Project Schedules Help
"{0DB8F853-899A-8628-E0D7-29FB190CF848}" = Catalyst Control Center Graphics Full Existing
"{0F842B77-56EA-4AAF-8295-81A022350B5E}" = Microsoft Security Client
"{117BCF94-6A1E-6741-39F5-09444381445E}" = CCC Help Italian
"{1211D6B0-B7B5-CB9A-99A2-066473FC35CA}" = CCC Help Swedish
"{14956199-1890-C3D4-F8B8-3C0C6FD82993}" = ccc-core-static
"{16C586A1-4ACB-11D3-8662-00C04F8DBAD9}" = Release Notes
"{172ED890-6982-4CCF-BD23-6949E553B860}" = Save as HTML
"{17CA32D1-73BD-4990-B8F6-369D8D34B05D}" = Microsoft Antimalware Service CS-CZ Language Pack
"{1845470B-EB14-4ABC-835B-E36C693DC07D}" = Skype™ 5.8
"{18A5DFF2-8A95-49F3-873F-743CB5549F3D}" = Canon ScanGear Starter
"{19B29943-2A85-11D3-8F74-00C04F8DD7E3}" = Solutions
"{1D210042-41EE-4472-2219-6A900366B9A3}" = CCC Help French
"{1D66C1EB-9FC0-4363-A4B9-E44DDCBACD00}" = Organization Charts
"{1DA6D447-C54D-4833-84D4-3EA31CAECE9B}" = Windows Live UX Platform Language Pack
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{241957BD-4436-42B1-ADCF-AE18144358D7}" = Office Layout
"{268FC299-C0BD-4230-9D00-FD7BBB71A2C7}" = Organization Charts Help
"{26A24AE4-039D-4CA4-87B4-2F83216025FF}" = Java(TM) 6 Update 25
"{2ABB6396-785C-E2CB-579E-79BAF98E0527}" = Catalyst Control Center Graphics Previews Vista
"{2D329298-7BDD-476B-8F68-AE3F66EB6F8F}" = Flowcharts
"{3379BB86-49C2-11D3-80AC-00C04F6B854D}" = Network Diagrams Help
"{3388E964-4C4F-11D3-9F66-006008A88EC8}" = Microsoft Visio 2000 (IE)
"{3544DED1-07DB-40C0-98F3-435A6DA195C7}" = Google SketchUp 8
"{380E3211-4549-42B3-8EE8-2B0561530061}" = Custom Properties Editor
"{390927CA-7D1F-44EB-95FF-FBB4B20822B4}" = Borders and Backgrounds Help
"{3A71AF7E-705C-40D3-9024-B63C00AB1772}" = Program Files Help
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3E1B8E31-9692-207B-77B7-A8339AF03795}" = Catalyst Control Center Graphics Full New
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{50779A29-834E-4E36-BBEB-B7CABC67A825}" = Microsoft Security Client CS-CZ Language Pack
"{51196320-99A0-4737-AE71-5BAF9489A855}" = Database Wizard
"{51C77E17-3337-6409-16A9-A90CA8B9BBF6}" = ccc-utility
"{55B39A89-795A-4E9F-AB38-15AB66125914}" = Borders and Backgrounds
"{58630658-9DF7-E873-9F5D-0EAF87D25DAA}" = CCC Help Norwegian
"{58D1EDF1-038E-4F62-A08E-C47581465A57}" = pgAdmin III 1.14
"{594A3C2C-19B3-E02E-359C-B8D134F6B939}" = CCC Help Korean
"{5BF9AE5B-D635-4BB6-9229-F863B28F9107}" = Graphics Filters
"{6055830B-40E4-C794-3F04-2D0CD8AF1AAC}" = CCC Help Russian
"{60692A39-4C61-11D3-A339-006097B6ECD2}" = Program Files
"{60692A40-4C61-11D3-A339-006097B6ECD2}" = Visio
"{60C8D1EA-CB39-44FF-BECA-9B1457898C9B}" = Office Layout Help
"{61E1C9F0-3AFE-11D3-9F4B-006008A88EC8}" = DAO
"{62E98CB2-2B1E-4E7D-8C3B-F6E7A3CB14E0}" = Network Diagrams
"{639B050E-9ADC-44C4-B7FE-BA7DB59D4E4B}" = Forms and Charts
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6A4EABDC-B3AA-421D-AB8B-5678293C9235}" = Callouts and Connectors Help
"{6E932CA6-FD17-7694-FD7C-14CE25770EA5}" = Catalyst Control Center Graphics Previews Common
"{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{739A6E9D-5D7D-8A5D-EC8A-4BD11E5749AA}" = CCC Help Hungarian
"{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE}" = ICQ7.7
"{78906B56-0E81-42A7-AC25-F54C946E1538}" = Windows Live Photo Common
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{8C72927B-7410-131A-E641-B9C505F4973C}" = CCC Help Japanese
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{911AB6CA-E04C-1E98-523D-8FCFAB4F456C}" = CCC Help Czech
"{9216C6A7-694A-4437-BD00-BD1CF58E1839}" = CCC Help Spanish
"{92DE68CE-BC3E-7323-EA53-99490C8BD34D}" = Catalyst Control Center Graphics Light
"{93D1FE53-905C-4EE7-AE18-4B13AC0069AD}" = Shape Explorer Help
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9668AE11-E05C-8169-F6D8-FBF7B507D7DB}" = CCC Help German
"{979587FD-F264-3C71-B0BE-6FC8DA993790}" = CCC Help Thai
"{999307CD-D57D-8C98-27ED-07F384ACFAA1}" = CCC Help Turkish
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9EC41026-8399-47E4-9FE9-CFCCCB71F8C3}" = Property Reporting Wizard
"{A7594D38-0B7E-BCF7-A938-1AC03A6477FB}" = CCC Help English
"{A8323532-49A2-4055-B424-EEB547E3D02E}" = Project Schedules
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AB78C965-5C67-409B-8433-D7B5BDB12073}" = Windows Live Writer Resources
"{AC76BA86-7AD7-1029-7B44-A95000000001}" = Adobe Reader 9.5.1 - Czech
"{AC7BE07B-14D3-6EB5-814A-EB0A63CBFB47}" = CCC Help Polish
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B06E51F3-D04E-4898-9700-2E48788D5274}" = Clip Art and Symbols
"{B1CDB3C6-8DD8-4864-8589-BDFBDA033941}" = CCC Help Chinese Traditional
"{B3EBF7DE-2A5B-4E10-9438-931EE6B22C05}" = eM Client
"{B4BB4CF2-F475-FB20-7AFA-F8AED032BFF8}" = ATI Catalyst Install Manager
"{B80DA153-D56F-4D80-AC29-CEBC8BB263B9}" = Callouts and Connectors
"{B9EF1B56-2E87-11D3-80A5-00C04F6B854D}" = Maps
"{BA04FFF0-F3A5-4D48-BD32-003D7E901178}" = Page Layout Wizard
"{BB21B808-F784-4883-A4D4-B1473384C1C6}" = LibreOffice 3.5
"{BBE93891-6608-11d3-9F6A-006008A88EC8}" = Help for Visio 2000 (HTML Help)
"{BDABF8CD-7436-EC6C-DD82-439225E22557}" = CCC Help Finnish
"{C454280F-3C3E-4929-B60E-9E6CED5717E7}" = Windows Live Mail
"{C5A15C68-0DF3-8A13-352E-E605491D7E3D}" = Catalyst Control Center InstallProxy
"{C5E69312-4354-11D3-B0BC-00C04FC2B1B9}" = CAD Drawing Display
"{C6150D8A-86ED-41D3-87BB-F3BB51B0B77F}" = Windows Live ID Sign-in Assistant
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows by Toshiba
"{CFAE78A9-A7A4-537E-7CC0-5A794FFBF73F}" = Catalyst Control Center Core Implementation
"{D19A1978-2FB2-B39A-5D30-C1EA38F788DD}" = CCC Help Danish
"{D2D89191-1BB5-42BF-863D-991347B36641}" = Block Diagrams
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D537C817-BF8E-4746-9E1E-E2A67DAECE4E}" = Add-ons
"{D8634D93-03DD-01F1-AC7D-EE468AA24F45}" = CCC Help Dutch
"{D982E7B4-4C62-11D3-A339-006097B6ECD2}" = Visio Core Files
"{DFB8D937-5CC3-4555-9150-90E57459AF00}" = Block Diagrams Help
"{DFE81EB6-0287-4DFF-AE7D-14E664586905}" = Clip Art and Symbols Help
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E151E679-4EC8-36F9-A691-C7600688A1CA}" = CCC Help Chinese Standard
"{E2057EE6-A559-40E3-AF8B-437866E0EDA9}" = Flowcharts Help
"{E3D63B95-4B21-414A-A2C7-D6D6A6AC6D79}" = Catalyst Control Center - Branding
"{E44BD710-B71A-11d3-9F79-006008A88EC8}" = VBA
"{E7DE3D60-3FB8-11D3-8F79-00C04F8DD7E3}" = Developing Visio Solutions Help
"{E8814A8F-3B06-11D3-8CD7-00C04F72C04D}" = Microsoft Visual Studio Service Pack 3
"{EBC6193C-ED23-E332-9A9C-D5CB83CDDE2B}" = Catalyst Control Center Localization All
"{F28D0D4C-D522-43B1-9700-C896A76C6130}" = Maps Help
"{F544CA20-6810-E275-D288-F0D92CFADE4A}" = CCC Help Greek
"{F81AB80B-5BB7-4E36-8BA5-E07541CE1BFC}" = HDMI Control Manager
"{FC588207-9B40-4800-92AD-EB4D48FB7726}" = Forms and Charts Help
"{FE62C88B-425B-4BDE-8B70-CD5AE3B83176}" = Windows Live Essentials
"{FEED29DD-7BF3-582C-3353-1F2634C2323D}" = CCC Help Portuguese
"7-Zip" = 7-Zip 3.13
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"CCleaner" = CCleaner
"eM Client Toolbar_is1" = eM Client Toolbar 2.102.016.002
"FTP Commander Pro_is1" = FTP Commander Pro 8.03
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft Security Client" = Microsoft Security Essentials
"Mozilla Firefox 14.0.1 (x86 cs)" = Mozilla Firefox 14.0.1 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"PSPad editor_is1" = PSPad editor
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"WinLiveSuite" = Windows Live Essentials

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 5.8.2012 4:41:04 | Computer Name = Sarka-Notebook | Source = WinMgmt | ID = 10
Description =

Error - 5.8.2012 16:43:41 | Computer Name = Sarka-Notebook | Source = WinMgmt | ID = 10
Description =

Error - 6.8.2012 3:56:15 | Computer Name = Sarka-Notebook | Source = WinMgmt | ID = 10
Description =

Error - 6.8.2012 14:25:15 | Computer Name = Sarka-Notebook | Source = Application Hang | ID = 1002
Description = Program ICQ.exe verze 7.7.0.6547 přestal spolupracovat se systémem
Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto
problému, vyhledejte historii problému v ovládacím panelu Centrum akcí. ID procesu:
b34 Čas spuštění: 01cd73a8be1e874d Čas ukončení: 16 Cesta k aplikaci: C:\Program Files\ICQ7.7\ICQ.exe

ID
hlášení: 0722a749-dff4-11e1-97f1-001e33969abf

Error - 10.8.2012 2:24:26 | Computer Name = Sarka-Notebook | Source = WinMgmt | ID = 10
Description =

Error - 11.8.2012 2:46:21 | Computer Name = Sarka-Notebook | Source = WinMgmt | ID = 10
Description =

Error - 14.8.2012 1:50:00 | Computer Name = Sarka-Notebook | Source = WinMgmt | ID = 10
Description =

Error - 15.8.2012 0:42:39 | Computer Name = Sarka-Notebook | Source = WinMgmt | ID = 10
Description =

Error - 16.8.2012 3:04:49 | Computer Name = Sarka-Notebook | Source = WinMgmt | ID = 10
Description =

Error - 16.8.2012 17:32:53 | Computer Name = Sarka-Notebook | Source = WinMgmt | ID = 10
Description =

[ System Events ]
Error - 15.8.2012 0:40:56 | Computer Name = Sarka-Notebook | Source = atikmdag | ID = 52236
Description = CPLIB :: General - Invalid Parameter

Error - 15.8.2012 0:40:56 | Computer Name = Sarka-Notebook | Source = atikmdag | ID = 43029
Description = Display is not active

Error - 16.8.2012 3:03:05 | Computer Name = Sarka-Notebook | Source = atikmdag | ID = 52236
Description = CPLIB :: General - Invalid Parameter

Error - 16.8.2012 3:03:05 | Computer Name = Sarka-Notebook | Source = atikmdag | ID = 43029
Description = Display is not active

Error - 16.8.2012 17:29:30 | Computer Name = Sarka-Notebook | Source = atikmdag | ID = 52236
Description = CPLIB :: General - Invalid Parameter

Error - 16.8.2012 17:29:30 | Computer Name = Sarka-Notebook | Source = atikmdag | ID = 43029
Description = Display is not active

Error - 16.8.2012 17:31:25 | Computer Name = Sarka-Notebook | Source = atikmdag | ID = 52236
Description = CPLIB :: General - Invalid Parameter

Error - 16.8.2012 17:31:25 | Computer Name = Sarka-Notebook | Source = atikmdag | ID = 43029
Description = Display is not active

Error - 19.8.2012 14:48:22 | Computer Name = Sarka-Notebook | Source = atikmdag | ID = 43029
Description = Display is not active

Error - 20.8.2012 22:56:16 | Computer Name = Sarka-Notebook | Source = atikmdag | ID = 43029
Description = Display is not active

< End of report >

Dala jsem Vám sem oba soubory.
Je to trochu dlouhé, ale bohužel se mi nepodařilo najít způsob, jak Vám to poslat formou textu.
Není akceptována žádná přípona, která mne napadla, jako vhodná
V každém případě děkuji a přeji hezký den
šárka

Jinak ještě taková maličkost pro informaci:
otevřela jsem si regedit a upravila jsem případně smazala všechny záznamy, které obsahovaly "babylon"
a stále se objevuje v mozille při otevření nového panelu
fakt to nechapu ...

mějte se
šárka

Dobry vecer

Bohuzel tento tyden se k pc skoro nedostanu, takze reakce budou opozdene

Ale budou

sarka píše:Je to trochu dlouhé, ale bohužel se mi nepodařilo najít způsob, jak Vám to poslat formou textu.

To je dobre, takhle je to pro mne nejlepsi a nejprehlednejsi

Toto znate? A pouzivate?
O3 - Toolbar: eM Client Toolbar - {837CC356-411E-4654-B2A2-ECA1F037979F} - C:\Program Files\eMClientToolbar\IEToolbar.dll

Znovu spustte OTL jako spravce
Do spodniho okna vlozte nasledujici text (vcetne te dvojtecky pred slovem commands)

Kód: Vybrat vše

:commands
[EMPTYTEMP]
[EMPTYFLASH]
[RESETHOSTS]
[Purity]

:services
AdobeFlashPlayerUpdateSvc

:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp
C:\Windows\tasks\Adobe Flash Player Updater.job

:otl
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=112553 ... 2163f54086
IE - HKCU\..\SearchScopes,DefaultScope = yandex.ru-214000
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=112553&babsrc=SP_ss&mntrId=d06b1d56000000000000002163f54086
IE - HKCU\..\SearchScopes\{91CD7B0C-FA42-45B7-AE0A-D4A8129F6BB5}: "URL" = http://search.igeared.com/dispatcher.as ... =chrome&q={searchTerms}
IE - HKCU\..\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}: "URL" = http://www2.inbox.com/search/dispatcher.aspx?tp=bs&qkw={searchTerms}&tbid=80093&lng=cs
IE - HKCU\..\SearchScopes\{F8131967-1086-49BE-A4E8-D749B9D05B48}: "URL" = http://yandex.ru/yandsearch?clid=1200403&text={searchTerms}
FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)"
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.search.useDBForOrder: true
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
[2012.08.16 23:37:18 | 000,633,392 | ---- | M] () -- C:\Windows\System32\perfh005.dat
[2012.08.16 23:37:18 | 000,618,108 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.08.16 23:37:18 | 000,122,914 | ---- | M] () -- C:\Windows\System32\perfc005.dat
[2012.08.16 23:37:18 | 000,107,388 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.04.22 21:41:09 | 000,000,000 | ---D | M] -- C:\Users\Šárka\AppData\Roaming\Babylon
[5 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=-
"SunJavaUpdateSched"=-
"Adobe Reader Speed Launcher"=-
"Adobe ARM"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ICQ"=-
"Skype"=-

Kliknete na Opravit a nechte program pracovat. Pri otazce na restart souhlaste.
Po restartu se objevi novy log, ten sem dejte.

Pak spustte mozillu a do adresniho radku napiste about:config a odentrujte. Slibte ji, ze budete opatrna

a najedte tam.
Pak napiste babylon a pokud se neco objevi, smazte to. Pripadne, pokud to nepujde smazat, tak resetujte hodnoty na default.

Zitra se tu dostanu na chvili dopoledne a pak jeste na chvili pozde vecer. Jinak jsem cely den v praci.

Dobrý večer,
EM client je můj mailový klient, je s ním něco v nepořádku?

Jinak moc děkuju tohle pomohlo.
Babylon vypadá že je v čudu.

Tuším, že jsem mohla tu konfiguraci mozilly projít hned a byl by asi taky pokoj.
Ale ten BabylonToolbar tam nějak stejně zůstal. Jen má ty default hodnoty.

V každém případě moc děkuji.
Přeji krásný víkend, mějte se.
šárka

Posílám ještě ten log, kdyby Vás náhodou zajímal pro studijní účely:

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

User: Šárka
->Temp folder emptied: 180441102 bytes
->Temporary Internet Files folder emptied: 198807145 bytes
->Java cache emptied: 9954380 bytes
->FireFox cache emptied: 1085434510 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 7007 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 344944 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 1 407,00 mb

[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Public

User: Šárka
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb

C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
========== SERVICES/DRIVERS ==========
Service AdobeFlashPlayerUpdateSvc stopped successfully!
Service AdobeFlashPlayerUpdateSvc deleted successfully!
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
C:\Windows\tasks\Adobe Flash Player Updater.job moved successfully.
========== OTL ==========
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{91CD7B0C-FA42-45B7-AE0A-D4A8129F6BB5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{91CD7B0C-FA42-45B7-AE0A-D4A8129F6BB5}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C04B7D22-5AEC-4561-8F49-27F6269208F6}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{F8131967-1086-49BE-A4E8-D749B9D05B48}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F8131967-1086-49BE-A4E8-D749B9D05B48}\ not found.
Prefs.js: "Search the web (Babylon)" removed from browser.search.defaultenginename
Prefs.js: "Search the web (Babylon)" removed from browser.search.order.1
Prefs.js: false removed from browser.search.suggest.enabled
Prefs.js: true removed from browser.search.useDBForOrder
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
C:\Windows\System32\perfh005.dat moved successfully.
C:\Windows\System32\perfh009.dat moved successfully.
C:\Windows\System32\perfc005.dat moved successfully.
C:\Windows\System32\perfc009.dat moved successfully.
C:\Users\Šárka\AppData\Roaming\Babylon folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5E64.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP64F5.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7C7F.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP8545.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE687.tmp folder deleted successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\StartCCC deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ICQ deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Skype deleted successfully.

OTL by OldTimer - Version 3.2.54.0 log created on 08232012_224159

Files\Folders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

sarka píše:EM client je můj mailový klient, je s ním něco v nepořádku?

Ne, jen ho vidim poprve, tak se radeji ptam

sarka píše:Ale ten BabylonToolbar tam nějak stejně zůstal. Jen má ty default hodnoty

Tak jeste by mozna slo zmenit ty hodnoty treba na google, ale jestli to nebude otravovat, nestoural bych se v tom.
OTLko neco smazlo, ale ty dalsi veci uz bohuzel zadnym skriptem smazat nemuzu. Pokud byste se chtela zbavit vsech zbytku, bylo by nejlepsi mozillu preinstalovat

Kazdopadne, kdyby se vratil, ozvete se, nakonec ho nejak znicime

No a jeste maly dobrovolny uklid.

Vsechny tyto programy - vcetne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce)

Stahnete OTC http://oldtimer.geekstogo.com/OTC.exe , ulozte a spustte.
Kliknete na napis CleanUp a pote OK - Po uklidu dojde k restartu pc.

Stahnete TFC http://oldtimer.geekstogo.com/TFC.exe , ulozte a spustte
Kliknete na START a pote OK - Po uklidu dojde k restartu pc.
Po pouziti muzete programek smazat

Stahnete Ccleaner http://www.stahuj.centrum.cz/utility_a_ ... /ccleaner/ a spustte.
Pri instalaci pozor na toolbar, jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete

Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!

Defragmentujte disk
Stahnete napriklad program Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
Pri instalaci opet pozor na toolbar
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci

A pokud nenastane nejaky problem, bude to vse.

Nemate vubec zac! Mejte se krasne a treba zase nekdy

VIRY.CZ

Babylon pro Marty84

Babylon pro Marty84

Re: Babylon pro Marty84

Re: Babylon pro Marty84

Re: Babylon pro Marty84

Re: Babylon pro Marty84

Re: Babylon pro Marty84

Re: Babylon pro Marty84

Re: Babylon pro Marty84

Re: Babylon pro Marty84

Re: Babylon pro Marty84