OTL logfile created on: 4/21/2011 12:08:13 PM - Run 
OTLPE by OldTimer - Version 3.1.46.0     Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
 
1,023.00 Mb Total Physical Memory | 768.00 Mb Available Physical Memory | 75.00% Memory free
906.00 Mb Paging File | 821.00 Mb Available in Paging File | 91.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 53.20 Gb Total Space | 3.41 Gb Free Space | 6.41% Space Free | Partition Type: NTFS
Drive D: | 53.70 Gb Total Space | 0.96 Gb Free Space | 1.80% Space Free | Partition Type: NTFS
Drive E: | 14.89 Gb Total Space | 11.46 Gb Free Space | 76.95% Space Free | Partition Type: FAT32
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet002
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Auto] --  -- (mi-raysat_3dsmax9_32) mental ray 3.5 Satellite (32-bit)
SRV - [2011/03/20 19:02:37 | 000,269,480 | ---- | M] (Avira GmbH) [Auto] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010/09/06 12:56:38 | 000,247,096 | ---- | M] () [Auto] -- C:\Program Files\ICQ6Toolbar\ICQ Service.exe -- (ICQ Service)
SRV - [2010/08/02 11:10:00 | 000,135,336 | ---- | M] (Avira GmbH) [Auto] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2010/02/19 08:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2010/01/15 08:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2009/10/18 12:49:07 | 000,085,096 | ---- | M] (Autodesk) [Auto] -- C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)
SRV - [2009/03/31 04:39:36 | 000,233,472 | ---- | M] (Teruten) [Auto] -- C:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2008/04/07 04:17:30 | 000,430,592 | ---- | M] (Nokia.) [On_Demand] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2005/09/21 08:13:44 | 000,065,536 | ---- | M] () [Auto] -- C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe -- (mi-raysat_3dsmax8)
SRV - [2004/12/27 12:12:16 | 000,036,864 | ---- | M] () [Auto] -- C:\WINDOWS\system32\acs.exe -- (ACS)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] --  -- (PDCOMP)
DRV - File not found [Kernel | System] --  -- (PCIDump)
DRV - File not found [Kernel | System] --  -- (lbrtfdc)
DRV - File not found [Kernel | System] --  -- (i2omgmt)
DRV - File not found [Kernel | System] --  -- (Changer)
DRV - [2011/03/20 19:02:38 | 000,137,656 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2010/12/05 04:42:18 | 000,061,960 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2010/11/03 11:41:22 | 000,033,824 | ---- | M] () [Kernel | System] -- C:\WINDOWS\system32\drivers\oreans32.sys -- (oreans32)
DRV - [2010/06/17 10:27:22 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010/06/17 10:27:12 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2009/03/31 04:39:36 | 000,036,608 | ---- | M] () [Kernel | Disabled] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009/03/20 05:01:26 | 000,121,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ss_bmdm.sys -- (ss_bmdm)
DRV - [2009/03/20 05:01:26 | 000,090,112 | ---- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ss_bbus.sys -- (ss_bbus) SAMSUNG USB Mobile Device (WDM)
DRV - [2009/03/20 05:01:26 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ss_bmdfl.sys -- (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter)
DRV - [2007/09/17 10:53:26 | 000,021,632 | ---- | M] (Nokia) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2006/07/24 11:15:04 | 004,353,024 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2006/03/06 23:49:36 | 000,011,136 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\nvsmu.sys -- (nvsmu)
DRV - [2006/03/04 00:31:04 | 000,013,056 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2006/03/04 00:31:02 | 000,034,176 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2006/01/28 00:04:16 | 000,099,584 | ---- | M] (NVIDIA Corporation) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\nvata.sys -- (nvata)
DRV - [2005/01/10 10:47:14 | 000,449,888 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ar5211.sys -- (AR5211)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\LocalService.NT_AUTHORITY_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\mva.MVA-R9SVY4H6EH7_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
IE - HKU\mva.MVA-R9SVY4H6EH7_ON_C\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKU\mva.MVA-R9SVY4H6EH7_ON_C\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\1104032329\ICQToolBar.dll (ICQ)
IE - HKU\mva.MVA-R9SVY4H6EH7_ON_C\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTo0.dll (Conduit Ltd.)
IE - HKU\mva.MVA-R9SVY4H6EH7_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\NetworkService.NT_AUTHORITY.000_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/04/03 03:54:38 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/04/05 09:22:04 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.9\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2011/03/07 16:54:26 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.9\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2011/04/05 09:22:04 | 000,000,000 | ---D | M]
 
[2011/04/20 07:08:09 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/01/07 16:06:50 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2011/01/07 16:06:24 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
 
O1 HOSTS File: ([2002/10/03 12:24:10 | 000,000,737 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngin0.dll (Conduit Ltd.)
O2 - BHO: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTo0.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngin0.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\1104032329\ICQToolBar.dll (ICQ)
O3 - HKLM\..\Toolbar: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTo0.dll (Conduit Ltd.)
O3 - HKU\mva.MVA-R9SVY4H6EH7_ON_C\..\Toolbar\WebBrowser: (uTorrentBar Toolbar) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - C:\Program Files\uTorrentBar\tbuTo0.dll (Conduit Ltd.)
O4 - HKLM..\Run: [ACU] C:\Program Files\Atheros\ACU.exe (Atheros Communications, Inc.)
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [NPSStartup]  File not found
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKU\mva.MVA-R9SVY4H6EH7_ON_C..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.)
O4 - Startup: C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Po spuštění\McAfee Security Scan Plus.lnk =  File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\LocalService.NT_AUTHORITY_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\mva.MVA-R9SVY4H6EH7_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService.NT_AUTHORITY.000_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe (ICQ, LLC.)
O16 - DPF: {00000161-0000-0010-8000-00AA00389B71} http://codecs.microsoft.com/codecs/i386/msaudio.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/10/15 10:27:44 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2011/03/01 18:09:56 | 025,408,343 | ---- | M] () - E:\AutoSave_hlubocinka 2c krb 3.skp -- [ FAT32 ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
NetSvcs: 6to4 -  File not found
NetSvcs: Ias -  File not found
NetSvcs: Iprip -  File not found
NetSvcs: Irmon -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: WmdmPmSp -  File not found
 
Drivers32: msacm.ac3acm - C:\WINDOWS\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3fhg - C:\WINDOWS\System32\mp3fhg.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)
Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll ()
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: VIDC.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011/04/21 12:07:44 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\LocalService.NT AUTHORITY\Recent
[2011/04/21 12:07:44 | 000,000,000 | R--D | C] -- C:\Documents and Settings\LocalService.NT AUTHORITY\Dokumenty
[2011/04/20 17:00:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Unreal Development Kit
[2011/04/20 16:45:27 | 000,043,008 | ---- | C] (Advanced Micro Devices) -- C:\WINDOWS\System32\drivers\AmdK8.sys
[2011/04/20 16:45:14 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Chart Controls
[2011/04/20 16:45:00 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_43.dll
[2011/04/20 16:45:00 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_43.dll
[2011/04/20 16:45:00 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_7.dll
[2011/04/20 16:45:00 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx11_43.dll
[2011/04/20 16:45:00 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_5.dll
[2011/04/20 16:45:00 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_7.dll
[2011/04/20 16:44:59 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput1_3.dll
[2011/04/20 16:44:21 | 000,000,000 | ---D | C] -- C:\UDK
[2011/04/14 09:27:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/04/09 05:55:56 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Recent
[2011/04/09 05:52:15 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2011/04/09 05:20:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Chaos Group
[2011/04/09 05:20:48 | 000,000,000 | ---D | C] -- C:\Program Files\Chaos Group
[2011/04/03 17:29:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\ICQ7.4
[2011/04/03 17:29:04 | 000,000,000 | ---D | C] -- C:\Program Files\ICQ7.4
[2010/11/11 13:13:24 | 000,876,824 | ---- | C] (DivX, Inc. ) -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\DivXInstaller.exe
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011/04/20 23:09:41 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/04/20 22:16:00 | 000,000,934 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/04/20 17:00:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Unreal Development Kit
[2011/04/20 16:45:22 | 000,000,223 | RHS- | M] () -- C:\boot.ini
[2011/04/20 16:16:01 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/04/19 02:23:18 | 000,000,254 | ---- | M] () -- C:\WINDOWS\tasks\WGASetup.job
[2011/04/19 02:23:11 | 000,051,048 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2011/04/18 14:39:50 | 000,432,554 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/04/18 14:39:50 | 000,428,988 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2011/04/18 14:39:50 | 000,078,070 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2011/04/18 14:39:50 | 000,067,510 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011/04/18 05:03:09 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/04/15 21:26:56 | 003,512,112 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011/04/15 21:10:08 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011/04/15 15:45:22 | 000,138,608 | ---- | M] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2011/04/15 15:44:52 | 000,234,576 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.xtr
[2011/04/15 07:32:43 | 000,091,136 | ---- | M] () -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/04/13 21:07:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Autodesk
[2011/04/13 21:02:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Chaos Group
[2011/04/10 16:05:23 | 000,002,265 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Skype.lnk
[2011/04/09 12:06:40 | 000,001,698 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Autodesk 3ds Max 8.lnk
[2011/04/09 06:29:53 | 000,000,283 | ---- | M] () -- C:\Zástupce - ACERDATA (D).lnk
[2011/04/09 05:52:16 | 000,000,686 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\CCleaner.lnk
[2011/04/05 09:22:05 | 000,002,347 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Adobe Reader 9.lnk
[2011/04/05 00:23:28 | 000,001,324 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011/04/03 17:29:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\ICQ7.4
[2011/04/02 07:35:21 | 000,041,837 | ---- | M] () -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Plocha\recept--veprove-vypecky-z-bucku--6011.html
[2011/04/02 04:51:54 | 000,061,880 | ---- | M] () -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Plocha\Kamyk 01.dwg
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011/04/15 21:01:02 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2011/04/09 12:01:38 | 000,001,698 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Autodesk 3ds Max 8.lnk
[2011/04/09 06:29:53 | 000,000,283 | ---- | C] () -- C:\Zástupce - ACERDATA (D).lnk
[2011/04/09 05:52:16 | 000,000,686 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\CCleaner.lnk
[2011/04/02 07:35:20 | 000,041,837 | ---- | C] () -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Plocha\recept--veprove-vypecky-z-bucku--6011.html
[2011/04/02 04:51:54 | 000,061,880 | ---- | C] () -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Plocha\Kamyk 01.dwg
[2011/02/27 08:40:37 | 000,319,488 | R--- | C] () -- C:\WINDOWS\System32\MafiaSetup.exe
[2011/01/15 13:02:22 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2011/01/15 13:02:22 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2011/01/15 13:02:12 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\$_hpcst$.hpc
[2011/01/09 00:00:20 | 000,001,324 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010/12/27 11:19:20 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\acs.exe
[2010/12/27 11:18:50 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\AegisI5.exe
[2010/11/05 09:10:07 | 000,000,247 | ---- | C] () -- C:\WINDOWS\Brpfx04a.ini
[2010/11/05 09:10:07 | 000,000,094 | ---- | C] () -- C:\WINDOWS\brpcfx.ini
[2010/11/05 09:09:48 | 000,000,419 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI
[2010/11/05 09:09:48 | 000,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI
[2010/11/05 09:09:26 | 000,000,050 | ---- | C] () -- C:\WINDOWS\System32\bridf09a.dat
[2010/11/05 09:09:22 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\BrMuSNMP.dll
[2010/11/05 09:09:22 | 000,000,094 | ---- | C] () -- C:\WINDOWS\Brfaxrx.ini
[2010/11/05 09:09:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\brdfxspd.dat
[2010/11/03 11:41:22 | 000,033,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\oreans32.sys
[2010/11/03 09:37:37 | 000,176,235 | ---- | C] () -- C:\WINDOWS\System32\Primomonnt.dll
[2010/11/02 06:18:57 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010/11/01 18:32:55 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010/11/01 18:32:55 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010/11/01 18:32:54 | 000,790,528 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010/11/01 18:32:53 | 000,134,144 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010/11/01 18:32:53 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010/10/29 14:37:34 | 000,138,608 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2010/10/29 14:37:27 | 000,234,576 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2010/10/29 14:37:20 | 000,075,064 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2010/10/29 14:33:28 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010/10/29 12:45:21 | 000,091,136 | ---- | C] () -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/10/29 11:08:18 | 000,004,265 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010/10/29 11:06:35 | 003,512,112 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/10/29 10:19:20 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2010/10/29 10:19:20 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2010/10/29 09:54:43 | 001,519,616 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2010/10/29 09:54:41 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2010/10/29 09:54:40 | 001,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2010/10/29 09:54:38 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2010/10/29 09:54:34 | 001,470,464 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2010/10/29 09:54:34 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2010/10/29 09:54:29 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2010/10/29 09:54:29 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll
[2010/10/29 09:54:27 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2010/10/29 09:25:19 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010/10/29 09:15:21 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009/07/30 21:58:42 | 000,000,314 | ---- | C] () -- C:\WINDOWS\primopdf.ini
[2007/10/25 12:26:10 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2004/08/02 09:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2002/10/03 12:24:54 | 000,432,554 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2002/10/03 12:24:54 | 000,428,988 | ---- | C] () -- C:\WINDOWS\System32\perfh005.dat
[2002/10/03 12:24:54 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2002/10/03 12:24:54 | 000,269,162 | ---- | C] () -- C:\WINDOWS\System32\perfi005.dat
[2002/10/03 12:24:54 | 000,078,070 | ---- | C] () -- C:\WINDOWS\System32\perfc005.dat
[2002/10/03 12:24:54 | 000,067,510 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2002/10/03 12:24:54 | 000,032,072 | ---- | C] () -- C:\WINDOWS\System32\perfd005.dat
[2002/10/03 12:24:54 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2002/10/03 12:24:50 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2002/10/03 12:24:50 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2002/10/03 12:24:44 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2002/10/03 12:24:26 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2002/10/03 12:24:26 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2002/10/03 12:23:56 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2002/10/03 12:22:46 | 000,013,824 | ---- | C] () -- C:\WINDOWS\System32\convert.exe
[2002/09/20 14:19:36 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010/11/05 05:51:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\Autodesk
[2011/04/14 09:27:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/04/20 13:21:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\ICQ
[2010/11/03 12:57:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\OpenCandy
[2010/11/02 07:29:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\OpenOffice.org
[2011/01/15 13:05:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\PC Suite
[2011/04/06 11:11:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\PriceGong
[2011/04/15 09:10:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\PrimoPDF
[2011/01/15 13:02:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\Samsung
[2010/11/23 00:29:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2010/12/19 05:46:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\Subtitle Edit
[2010/11/02 06:22:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\Thunderbird
[2011/04/20 15:23:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\uTorrent
[2010/11/04 12:42:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Autodesk
[2011/04/03 17:29:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\ICQ
[2011/01/15 13:05:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\PC Suite
[2010/11/03 12:05:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\regid.1986-12.com.adobe
[2011/03/31 16:07:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\WinZip
[2011/04/19 02:23:18 | 000,000,254 | ---- | M] () -- C:\WINDOWS\Tasks\WGASetup.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Custom Scans ==========[/color]
 
 
 
[color=#A23BEC]< MD5 for: EXPLORER.EXE  >[/color]
[2008/04/13 23:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008/04/13 23:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2004/08/17 10:49:24 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
[2004/08/17 18:49:22 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- C:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\explorer.exe
 
[color=#A23BEC]< MD5 for: SVCHOST.EXE  >[/color]
[2008/04/13 23:22:48 | 000,014,336 | ---- | M] () MD5=597E920BFCEF412C9E8109973D73E1CA -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008/04/13 23:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
[2004/08/17 10:49:28 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe
[2004/08/17 18:49:27 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- C:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\svchost.exe
 
[color=#A23BEC]< MD5 for: USERINIT.EXE  >[/color]
[2008/04/13 23:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008/04/13 23:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
[2004/08/17 10:49:28 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe
[2004/08/17 18:49:27 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- C:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\userinit.exe
 
[color=#A23BEC]< MD5 for: WINLOGON.EXE  >[/color]
[2004/08/17 10:49:28 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2004/08/17 18:49:27 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- C:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\winlogon.exe
[2008/04/13 23:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008/04/13 23:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe
 
[color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
[2009/10/15 10:27:44 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2011/04/20 16:45:22 | 000,000,223 | RHS- | M] () -- C:\boot.ini
[2002/10/03 12:22:38 | 000,004,952 | RHS- | M] () -- C:\Bootfont.bin
[2005/03/17 00:32:40 | 000,000,512 | -HS- | M] () -- C:\BOOTSECT.DOS
[2009/10/15 10:27:44 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2009/10/15 11:13:44 | 1072,345,088 | -HS- | M] () -- C:\hiberfil.sys
[2005/03/17 00:56:08 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2005/03/17 00:56:08 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2010/11/01 17:21:50 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2010/11/04 04:33:21 | 000,250,576 | RHS- | M] () -- C:\ntldr
[2011/04/20 23:09:31 | 1610,612,736 | -HS- | M] () -- C:\pagefile.sys
[2006/09/21 09:43:50 | 000,000,063 | RHS- | M] () -- C:\preload.aaa
[2006/09/21 09:43:50 | 000,000,063 | RHS- | M] () -- C:\Preload.rev
[2011/04/19 05:00:00 | 000,000,655 | ---- | M] () -- C:\vraylog.txt
[2011/04/09 12:20:53 | 000,001,134 | ---- | M] () -- C:\VRLServer.txt
[2011/04/09 06:29:53 | 000,000,283 | ---- | M] () -- C:\Zástupce - ACERDATA (D).lnk
 
[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
 
[color=#A23BEC]< c:\windows\minidump\*.* >[/color]
 
[color=#A23BEC]< CREATERESTOREPOINT >[/color]
 
[color=#A23BEC]< %systemroot%\System32\config\*.sav  >[/color]
[2010/10/29 11:05:38 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2010/10/29 11:05:37 | 000,630,784 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2010/10/29 11:05:37 | 000,421,888 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav
 
[color=#A23BEC]< c:\system volume information|_REGISTRY_MACHINE_SYSTEM;true;true;true /FP >[/color]
[2011/04/15 04:16:02 | 005,541,888 | ---- | M] () -- c:\system volume information\_restore{315DD197-8880-4957-A6E4-5D46C928410F}\RP304\snapshot\_REGISTRY_MACHINE_SYSTEM
[2011/04/15 21:00:18 | 005,541,888 | ---- | M] () -- c:\system volume information\_restore{315DD197-8880-4957-A6E4-5D46C928410F}\RP305\snapshot\_REGISTRY_MACHINE_SYSTEM
[2011/04/16 13:36:50 | 005,541,888 | ---- | M] () -- c:\system volume information\_restore{315DD197-8880-4957-A6E4-5D46C928410F}\RP306\snapshot\_REGISTRY_MACHINE_SYSTEM
[2011/04/16 13:43:57 | 005,541,888 | ---- | M] () -- c:\system volume information\_restore{315DD197-8880-4957-A6E4-5D46C928410F}\RP307\snapshot\_REGISTRY_MACHINE_SYSTEM
[2011/04/16 21:00:19 | 005,541,888 | ---- | M] () -- c:\system volume information\_restore{315DD197-8880-4957-A6E4-5D46C928410F}\RP308\snapshot\_REGISTRY_MACHINE_SYSTEM
[2011/04/17 21:00:18 | 005,541,888 | ---- | M] () -- c:\system volume information\_restore{315DD197-8880-4957-A6E4-5D46C928410F}\RP309\snapshot\_REGISTRY_MACHINE_SYSTEM
[2011/04/18 14:35:43 | 005,541,888 | ---- | M] () -- c:\system volume information\_restore{315DD197-8880-4957-A6E4-5D46C928410F}\RP310\snapshot\_REGISTRY_MACHINE_SYSTEM
[2011/04/19 15:06:27 | 005,541,888 | ---- | M] () -- c:\system volume information\_restore{315DD197-8880-4957-A6E4-5D46C928410F}\RP311\snapshot\_REGISTRY_MACHINE_SYSTEM
[2011/04/19 21:00:15 | 005,541,888 | ---- | M] () -- c:\system volume information\_restore{315DD197-8880-4957-A6E4-5D46C928410F}\RP312\snapshot\_REGISTRY_MACHINE_SYSTEM
[2011/04/20 16:44:49 | 005,541,888 | ---- | M] () -- c:\system volume information\_restore{315DD197-8880-4957-A6E4-5D46C928410F}\RP313\snapshot\_REGISTRY_MACHINE_SYSTEM
[2011/04/20 21:00:18 | 005,541,888 | ---- | M] () -- c:\system volume information\_restore{315DD197-8880-4957-A6E4-5D46C928410F}\RP314\snapshot\_REGISTRY_MACHINE_SYSTEM
 
[color=#A23BEC]< c:\system volume information|_REGISTRY_MACHINE_SOFTWARE;true;true;true /FP >[/color]
[2011/04/15 04:16:02 | 029,175,808 | ---- | M] () -- c:\system volume information\_restore{315DD197-8880-4957-A6E4-5D46C928410F}\RP304\snapshot\_REGISTRY_MACHINE_SOFTWARE
[2011/04/15 21:00:17 | 029,175,808 | ---- | M] () -- c:\system volume information\_restore{315DD197-8880-4957-A6E4-5D46C928410F}\RP305\snapshot\_REGISTRY_MACHINE_SOFTWARE
[2011/04/16 13:36:50 | 029,175,808 | ---- | M] () -- c:\system volume information\_restore{315DD197-8880-4957-A6E4-5D46C928410F}\RP306\snapshot\_REGISTRY_MACHINE_SOFTWARE
[2011/04/16 13:43:56 | 029,175,808 | ---- | M] () -- c:\system volume information\_restore{315DD197-8880-4957-A6E4-5D46C928410F}\RP307\snapshot\_REGISTRY_MACHINE_SOFTWARE
[2011/04/16 21:00:17 | 029,175,808 | ---- | M] () -- c:\system volume information\_restore{315DD197-8880-4957-A6E4-5D46C928410F}\RP308\snapshot\_REGISTRY_MACHINE_SOFTWARE
[2011/04/17 21:00:17 | 029,175,808 | ---- | M] () -- c:\system volume information\_restore{315DD197-8880-4957-A6E4-5D46C928410F}\RP309\snapshot\_REGISTRY_MACHINE_SOFTWARE
[2011/04/18 14:35:43 | 029,175,808 | ---- | M] () -- c:\system volume information\_restore{315DD197-8880-4957-A6E4-5D46C928410F}\RP310\snapshot\_REGISTRY_MACHINE_SOFTWARE
[2011/04/19 15:06:26 | 029,175,808 | ---- | M] () -- c:\system volume information\_restore{315DD197-8880-4957-A6E4-5D46C928410F}\RP311\snapshot\_REGISTRY_MACHINE_SOFTWARE
[2011/04/19 21:00:15 | 029,175,808 | ---- | M] () -- c:\system volume information\_restore{315DD197-8880-4957-A6E4-5D46C928410F}\RP312\snapshot\_REGISTRY_MACHINE_SOFTWARE
[2011/04/20 16:44:47 | 029,175,808 | ---- | M] () -- c:\system volume information\_restore{315DD197-8880-4957-A6E4-5D46C928410F}\RP313\snapshot\_REGISTRY_MACHINE_SOFTWARE
[2011/04/20 21:00:17 | 029,175,808 | ---- | M] () -- c:\system volume information\_restore{315DD197-8880-4957-A6E4-5D46C928410F}\RP314\snapshot\_REGISTRY_MACHINE_SOFTWARE
 
 
< End of report >