OTL logfile created on: 4/21/2011 8:55:30 PM - Run 
OTLPE by OldTimer - Version 3.1.46.0     Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
 
1,023.00 Mb Total Physical Memory | 823.00 Mb Available Physical Memory | 80.00% Memory free
906.00 Mb Paging File | 848.00 Mb Available in Paging File | 94.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 53.20 Gb Total Space | 3.42 Gb Free Space | 6.42% Space Free | Partition Type: NTFS
Drive D: | 53.70 Gb Total Space | 0.96 Gb Free Space | 1.80% Space Free | Partition Type: NTFS
Drive E: | 14.89 Gb Total Space | 11.39 Gb Free Space | 76.49% Space Free | Partition Type: FAT32
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet002
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Auto] --  -- (mi-raysat_3dsmax9_32) mental ray 3.5 Satellite (32-bit)
SRV - [2011/03/20 19:02:37 | 000,269,480 | ---- | M] (Avira GmbH) [Auto] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010/09/06 12:56:38 | 000,247,096 | ---- | M] () [Auto] -- C:\Program Files\ICQ6Toolbar\ICQ Service.exe -- (ICQ Service)
SRV - [2010/08/02 11:10:00 | 000,135,336 | ---- | M] (Avira GmbH) [Auto] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2010/02/19 08:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2010/01/15 08:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2009/10/18 12:49:07 | 000,085,096 | ---- | M] (Autodesk) [Auto] -- C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)
SRV - [2009/03/31 04:39:36 | 000,233,472 | ---- | M] (Teruten) [Auto] -- C:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2008/04/07 04:17:30 | 000,430,592 | ---- | M] (Nokia.) [On_Demand] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2005/09/21 08:13:44 | 000,065,536 | ---- | M] () [Auto] -- C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe -- (mi-raysat_3dsmax8)
SRV - [2004/12/27 12:12:16 | 000,036,864 | ---- | M] () [Auto] -- C:\WINDOWS\system32\acs.exe -- (ACS)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] --  -- (PDCOMP)
DRV - File not found [Kernel | System] --  -- (PCIDump)
DRV - File not found [Kernel | System] --  -- (lbrtfdc)
DRV - File not found [Kernel | System] --  -- (i2omgmt)
DRV - File not found [Kernel | System] --  -- (Changer)
DRV - [2011/03/20 19:02:38 | 000,137,656 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2010/12/05 04:42:18 | 000,061,960 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2010/11/03 11:41:22 | 000,033,824 | ---- | M] () [Kernel | System] -- C:\WINDOWS\system32\drivers\oreans32.sys -- (oreans32)
DRV - [2010/06/17 10:27:22 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010/06/17 10:27:12 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2009/03/31 04:39:36 | 000,036,608 | ---- | M] () [Kernel | Disabled] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009/03/20 05:01:26 | 000,121,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ss_bmdm.sys -- (ss_bmdm)
DRV - [2009/03/20 05:01:26 | 000,090,112 | ---- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ss_bbus.sys -- (ss_bbus) SAMSUNG USB Mobile Device (WDM)
DRV - [2009/03/20 05:01:26 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ss_bmdfl.sys -- (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter)
DRV - [2007/09/17 10:53:26 | 000,021,632 | ---- | M] (Nokia) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2006/07/24 11:15:04 | 004,353,024 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2006/03/06 23:49:36 | 000,011,136 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\nvsmu.sys -- (nvsmu)
DRV - [2006/03/04 00:31:04 | 000,013,056 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2006/03/04 00:31:02 | 000,034,176 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2006/01/28 00:04:16 | 000,099,584 | ---- | M] (NVIDIA Corporation) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\nvata.sys -- (nvata)
DRV - [2005/01/10 10:47:14 | 000,449,888 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ar5211.sys -- (AR5211)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\LocalService.NT_AUTHORITY_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\mva.MVA-R9SVY4H6EH7_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
IE - HKU\mva.MVA-R9SVY4H6EH7_ON_C\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKU\mva.MVA-R9SVY4H6EH7_ON_C\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\1104032329\ICQToolBar.dll (ICQ)
IE - HKU\mva.MVA-R9SVY4H6EH7_ON_C\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTo0.dll (Conduit Ltd.)
IE - HKU\mva.MVA-R9SVY4H6EH7_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\NetworkService.NT_AUTHORITY.000_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/04/03 03:54:38 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/04/05 09:22:04 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.9\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2011/03/07 16:54:26 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.9\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2011/04/05 09:22:04 | 000,000,000 | ---D | M]
 
[2011/04/20 07:08:09 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/01/07 16:06:50 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2011/01/07 16:06:24 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
 
O1 HOSTS File: ([2002/10/03 12:24:10 | 000,000,737 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngin0.dll (Conduit Ltd.)
O2 - BHO: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTo0.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngin0.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\1104032329\ICQToolBar.dll (ICQ)
O3 - HKLM\..\Toolbar: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTo0.dll (Conduit Ltd.)
O3 - HKU\mva.MVA-R9SVY4H6EH7_ON_C\..\Toolbar\WebBrowser: (uTorrentBar Toolbar) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - C:\Program Files\uTorrentBar\tbuTo0.dll (Conduit Ltd.)
O4 - HKLM..\Run: [ACU] C:\Program Files\Atheros\ACU.exe (Atheros Communications, Inc.)
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [NPSStartup]  File not found
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKU\mva.MVA-R9SVY4H6EH7_ON_C..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.)
O4 - Startup: C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Po spuštění\McAfee Security Scan Plus.lnk =  File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\LocalService.NT_AUTHORITY_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\mva.MVA-R9SVY4H6EH7_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService.NT_AUTHORITY.000_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe (ICQ, LLC.)
O16 - DPF: {00000161-0000-0010-8000-00AA00389B71} http://codecs.microsoft.com/codecs/i386/msaudio.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/10/15 10:27:44 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2011/03/01 18:09:56 | 025,408,343 | ---- | M] () - E:\AutoSave_hlubocinka 2c krb 3.skp -- [ FAT32 ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
NetSvcs: 6to4 -  File not found
NetSvcs: Ias -  File not found
NetSvcs: Iprip -  File not found
NetSvcs: Irmon -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: WmdmPmSp -  File not found
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011/04/21 12:07:44 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\LocalService.NT AUTHORITY\Recent
[2011/04/21 12:07:44 | 000,000,000 | R--D | C] -- C:\Documents and Settings\LocalService.NT AUTHORITY\Dokumenty
[2011/04/20 17:00:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Unreal Development Kit
[2011/04/20 16:45:27 | 000,043,008 | ---- | C] (Advanced Micro Devices) -- C:\WINDOWS\System32\drivers\AmdK8.sys
[2011/04/20 16:45:14 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Chart Controls
[2011/04/20 16:45:00 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_43.dll
[2011/04/20 16:45:00 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_43.dll
[2011/04/20 16:45:00 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_7.dll
[2011/04/20 16:45:00 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx11_43.dll
[2011/04/20 16:45:00 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_5.dll
[2011/04/20 16:45:00 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_7.dll
[2011/04/20 16:44:59 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput1_3.dll
[2011/04/20 16:44:21 | 000,000,000 | ---D | C] -- C:\UDK
[2011/04/14 09:27:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/04/09 05:55:56 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Recent
[2011/04/09 05:52:15 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2011/04/09 05:20:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Chaos Group
[2011/04/09 05:20:48 | 000,000,000 | ---D | C] -- C:\Program Files\Chaos Group
[2011/04/03 17:29:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\ICQ7.4
[2011/04/03 17:29:04 | 000,000,000 | ---D | C] -- C:\Program Files\ICQ7.4
[2010/11/11 13:13:24 | 000,876,824 | ---- | C] (DivX, Inc. ) -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\DivXInstaller.exe
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2026/02/06 05:35:59 | 000,003,120 | ---- | M] () -- C:\WINDOWS\System32\ALLFSAF7a.ocx
[2026/02/05 10:30:40 | 000,003,120 | ---- | M] () -- C:\WINDOWS\System32\ALLFSAF8a.ocx
[2011/04/21 12:53:37 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/04/20 22:16:00 | 000,000,934 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/04/20 17:00:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Unreal Development Kit
[2011/04/20 16:45:22 | 000,000,223 | RHS- | M] () -- C:\boot.ini
[2011/04/20 16:16:01 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/04/19 02:23:18 | 000,000,254 | ---- | M] () -- C:\WINDOWS\tasks\WGASetup.job
[2011/04/19 02:23:11 | 000,051,048 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2011/04/18 14:39:50 | 000,432,554 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/04/18 14:39:50 | 000,428,988 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2011/04/18 14:39:50 | 000,078,070 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2011/04/18 14:39:50 | 000,067,510 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011/04/18 05:03:09 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/04/15 21:26:56 | 003,512,112 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011/04/15 21:10:08 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011/04/15 15:45:22 | 000,138,608 | ---- | M] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2011/04/15 15:44:52 | 000,234,576 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.xtr
[2011/04/15 07:32:43 | 000,091,136 | ---- | M] () -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/04/13 21:07:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Autodesk
[2011/04/13 21:02:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Chaos Group
[2011/04/10 16:05:23 | 000,002,265 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Skype.lnk
[2011/04/09 12:06:40 | 000,001,698 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Autodesk 3ds Max 8.lnk
[2011/04/09 06:29:53 | 000,000,283 | ---- | M] () -- C:\Zástupce - ACERDATA (D).lnk
[2011/04/09 05:52:16 | 000,000,686 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\CCleaner.lnk
[2011/04/05 09:22:05 | 000,002,347 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Adobe Reader 9.lnk
[2011/04/05 00:23:28 | 000,001,324 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011/04/03 17:29:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\ICQ7.4
[2011/04/02 07:35:21 | 000,041,837 | ---- | M] () -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Plocha\recept--veprove-vypecky-z-bucku--6011.html
[2011/04/02 04:51:54 | 000,061,880 | ---- | M] () -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Plocha\Kamyk 01.dwg
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2026/02/06 05:35:59 | 000,003,120 | ---- | C] () -- C:\WINDOWS\System32\ALLFSAF7a.ocx
[2026/02/05 10:30:40 | 000,003,120 | ---- | C] () -- C:\WINDOWS\System32\ALLFSAF8a.ocx
[2011/04/15 21:01:02 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2011/04/09 12:01:38 | 000,001,698 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Autodesk 3ds Max 8.lnk
[2011/04/09 06:29:53 | 000,000,283 | ---- | C] () -- C:\Zástupce - ACERDATA (D).lnk
[2011/04/09 05:52:16 | 000,000,686 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\CCleaner.lnk
[2011/04/02 07:35:20 | 000,041,837 | ---- | C] () -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Plocha\recept--veprove-vypecky-z-bucku--6011.html
[2011/04/02 04:51:54 | 000,061,880 | ---- | C] () -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Plocha\Kamyk 01.dwg
[2011/02/27 08:40:37 | 000,319,488 | R--- | C] () -- C:\WINDOWS\System32\MafiaSetup.exe
[2011/01/15 13:02:22 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2011/01/15 13:02:22 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2011/01/15 13:02:12 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\$_hpcst$.hpc
[2011/01/09 00:00:20 | 000,001,324 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010/12/27 11:19:20 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\acs.exe
[2010/12/27 11:18:50 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\AegisI5.exe
[2010/11/05 09:10:07 | 000,000,247 | ---- | C] () -- C:\WINDOWS\Brpfx04a.ini
[2010/11/05 09:10:07 | 000,000,094 | ---- | C] () -- C:\WINDOWS\brpcfx.ini
[2010/11/05 09:09:48 | 000,000,419 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI
[2010/11/05 09:09:48 | 000,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI
[2010/11/05 09:09:26 | 000,000,050 | ---- | C] () -- C:\WINDOWS\System32\bridf09a.dat
[2010/11/05 09:09:22 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\BrMuSNMP.dll
[2010/11/05 09:09:22 | 000,000,094 | ---- | C] () -- C:\WINDOWS\Brfaxrx.ini
[2010/11/05 09:09:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\brdfxspd.dat
[2010/11/03 11:41:22 | 000,033,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\oreans32.sys
[2010/11/03 09:37:37 | 000,176,235 | ---- | C] () -- C:\WINDOWS\System32\Primomonnt.dll
[2010/11/02 06:18:57 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010/11/01 18:32:55 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010/11/01 18:32:55 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010/11/01 18:32:54 | 000,790,528 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010/11/01 18:32:53 | 000,134,144 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010/11/01 18:32:53 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010/10/29 14:37:34 | 000,138,608 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2010/10/29 14:37:27 | 000,234,576 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2010/10/29 14:37:20 | 000,075,064 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2010/10/29 14:33:28 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010/10/29 12:45:21 | 000,091,136 | ---- | C] () -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/10/29 11:08:18 | 000,004,265 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010/10/29 11:06:35 | 003,512,112 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/10/29 10:19:20 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2010/10/29 10:19:20 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2010/10/29 09:54:43 | 001,519,616 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2010/10/29 09:54:41 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2010/10/29 09:54:40 | 001,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2010/10/29 09:54:38 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2010/10/29 09:54:34 | 001,470,464 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2010/10/29 09:54:34 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2010/10/29 09:54:29 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2010/10/29 09:54:29 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll
[2010/10/29 09:54:27 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2010/10/29 09:25:19 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010/10/29 09:15:21 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009/07/30 21:58:42 | 000,000,314 | ---- | C] () -- C:\WINDOWS\primopdf.ini
[2007/10/25 12:26:10 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2004/08/02 09:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2002/10/03 12:24:54 | 000,432,554 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2002/10/03 12:24:54 | 000,428,988 | ---- | C] () -- C:\WINDOWS\System32\perfh005.dat
[2002/10/03 12:24:54 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2002/10/03 12:24:54 | 000,269,162 | ---- | C] () -- C:\WINDOWS\System32\perfi005.dat
[2002/10/03 12:24:54 | 000,078,070 | ---- | C] () -- C:\WINDOWS\System32\perfc005.dat
[2002/10/03 12:24:54 | 000,067,510 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2002/10/03 12:24:54 | 000,032,072 | ---- | C] () -- C:\WINDOWS\System32\perfd005.dat
[2002/10/03 12:24:54 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2002/10/03 12:24:50 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2002/10/03 12:24:50 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2002/10/03 12:24:44 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2002/10/03 12:24:26 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2002/10/03 12:24:26 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2002/10/03 12:23:56 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2002/10/03 12:22:46 | 000,013,824 | ---- | C] () -- C:\WINDOWS\System32\convert.exe
[2002/09/20 14:19:36 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010/11/05 05:51:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\Autodesk
[2011/04/14 09:27:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/04/20 13:21:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\ICQ
[2010/11/03 12:57:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\OpenCandy
[2010/11/02 07:29:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\OpenOffice.org
[2011/01/15 13:05:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\PC Suite
[2011/04/06 11:11:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\PriceGong
[2011/04/15 09:10:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\PrimoPDF
[2011/01/15 13:02:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\Samsung
[2010/11/23 00:29:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2010/12/19 05:46:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\Subtitle Edit
[2010/11/02 06:22:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\Thunderbird
[2011/04/20 15:23:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mva.MVA-R9SVY4H6EH7\Data aplikací\uTorrent
[2010/11/04 12:42:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Autodesk
[2011/04/03 17:29:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\ICQ
[2011/01/15 13:05:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\PC Suite
[2010/11/03 12:05:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\regid.1986-12.com.adobe
[2011/03/31 16:07:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\WinZip
[2011/04/19 02:23:18 | 000,000,254 | ---- | M] () -- C:\WINDOWS\Tasks\WGASetup.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Custom Scans ==========[/color]
 
 
[color=#A23BEC]<             set /c >[/color]
ALLUSERSPROFILE=B:\Documents and Settings\All Users
APPDATA=B:\Documents and Settings\Default User\Application Data
ComputerName=Reatogo
ComSpec=X:\i386\system32\cmd.exe
DEVMGR_SHOW_DETAILS=1
DEVMGR_SHOW_NONPRESENT_DEVICES=1
OS=Windows_NT
Path=X:\i386;X:\i386\System32;X:\Bin;X:\i386\system32\com;X:\i386\system32\wbem;X:\i386\system32\wbem\snmp;X:\i386\PCHealth\HelpCtr\Binaries
PATHEXT=.COM;.EXE;.BAT;.CMD
ProfilesDir=B:\Documents and Settings
ProgramFiles=X:\Programs
PROMPT=$P$G
ramdrv=B:
RunScannerDir=X:\i386\System32
SystemDrive=X:
SystemRoot=X:\i386
TARGET_ROOT=C:\WINDOWS
temp=B:
tmp=B:
USBroot=Y:
USERPROFILE=B:\Documents and Settings\Default User
windir=X:\i386
 
 
[color=#A23BEC]< MD5 for: AGP440.SYS  >[/color]
[2004/08/17 10:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2010/11/04 04:30:26 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2004/08/17 10:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:AGP440.sys
[2010/11/04 04:30:26 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008/04/13 14:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008/04/13 14:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
[2004/08/03 18:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\$NtServicePackUninstall$\agp440.sys
[2004/08/04 02:07:41 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\agp440.sys
 
[color=#A23BEC]< MD5 for: ATAPI.SYS  >[/color]
[2002/09/20 14:17:54 | 010,174,968 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:atapi.sys
[2004/08/17 10:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2010/11/04 04:30:26 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2004/08/17 10:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:atapi.sys
[2010/11/04 04:30:26 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2002/08/28 21:27:50 | 000,086,912 | ---- | M] (Microsoft Corporation) MD5=95B858761A00E1D4F81F79A0DA019ACA -- C:\WINDOWS\system32\ReinstallBackups\0035\DriverFiles\i386\atapi.sys
[2008/04/13 14:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008/04/13 14:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004/08/03 17:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
[2004/08/04 01:59:42 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\atapi.sys
 
[color=#A23BEC]< MD5 for: EVENTLOG.DLL  >[/color]
[2008/04/13 23:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008/04/13 23:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
[2004/08/17 10:49:08 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=6EB66066D5C0175320CFEA0A4C74C88F -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll
[2004/08/17 18:49:06 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=6EB66066D5C0175320CFEA0A4C74C88F -- C:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\eventlog.dll
 
[color=#A23BEC]< MD5 for: LSASS.EXE  >[/color]
[2004/08/17 10:49:24 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=82A362FE1D4980B71B588D9C10748511 -- C:\WINDOWS\$NtServicePackUninstall$\lsass.exe
[2004/08/17 18:49:23 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=82A362FE1D4980B71B588D9C10748511 -- C:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\lsass.exe
[2008/04/13 23:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ServicePackFiles\i386\lsass.exe
[2008/04/13 23:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\lsass.exe
 
[color=#A23BEC]< MD5 for: NETLOGON.DLL  >[/color]
[2009/02/06 14:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\$hf_mig$\KB968389\SP2QFE\netlogon.dll
[2009/02/06 14:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\$hf_mig$\KB975467\SP2QFE\netlogon.dll
[2004/08/17 10:49:14 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=2591CADAEF7D2242039255028E577688 -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2004/08/17 18:49:13 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=2591CADAEF7D2242039255028E577688 -- C:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\netlogon.dll
[2008/04/13 23:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008/04/13 23:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll
 
[color=#A23BEC]< MD5 for: NVATA.SYS  >[/color]
[2006/01/28 00:04:16 | 000,099,584 | ---- | M] (NVIDIA Corporation) MD5=3AC5EEDD35B7437D53960F3998BFA462 -- C:\ELEMENTS\install\LAN_NVIDIA_8.62_XPx86\IDE\Win2K\sata_ide\nvata.sys
[2006/01/28 00:04:16 | 000,099,584 | ---- | M] (NVIDIA Corporation) MD5=3AC5EEDD35B7437D53960F3998BFA462 -- C:\ELEMENTS\install\LAN_NVIDIA_8.62_XPx86\IDE\WinXP\sata_ide\nvata.sys
[2006/01/28 00:04:16 | 000,099,584 | ---- | M] (NVIDIA Corporation) MD5=3AC5EEDD35B7437D53960F3998BFA462 -- C:\WINDOWS\system32\drivers\nvata.sys
 
[color=#A23BEC]< MD5 for: NVATABUS.SYS  >[/color]
[2006/01/28 00:04:16 | 000,099,584 | ---- | M] (NVIDIA Corporation) MD5=3AC5EEDD35B7437D53960F3998BFA462 -- C:\ELEMENTS\install\LAN_NVIDIA_8.62_XPx86\IDE\Win2K\sataraid\nvatabus.sys
[2006/01/28 00:04:16 | 000,099,584 | ---- | M] (NVIDIA Corporation) MD5=3AC5EEDD35B7437D53960F3998BFA462 -- C:\ELEMENTS\install\LAN_NVIDIA_8.62_XPx86\IDE\WinXP\sataraid\nvatabus.sys
 
[color=#A23BEC]< MD5 for: REGEDIT.EXE  >[/color]
[2004/08/17 10:49:28 | 000,147,968 | ---- | M] (Microsoft Corporation) MD5=CB5A91928D94224E7E30EE277B45E8A3 -- C:\WINDOWS\$NtServicePackUninstall$\regedit.exe
[2004/08/17 18:49:26 | 000,147,968 | ---- | M] (Microsoft Corporation) MD5=CB5A91928D94224E7E30EE277B45E8A3 -- C:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\regedit.exe
[2008/04/13 23:22:42 | 000,147,968 | ---- | M] (Microsoft Corporation) MD5=FDEB1D02CAE38665CBF114F44E6B997E -- C:\WINDOWS\regedit.exe
[2008/04/13 23:22:42 | 000,147,968 | ---- | M] (Microsoft Corporation) MD5=FDEB1D02CAE38665CBF114F44E6B997E -- C:\WINDOWS\ServicePackFiles\i386\regedit.exe
 
[color=#A23BEC]< MD5 for: SCECLI.DLL  >[/color]
[2004/08/17 10:49:18 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2004/08/17 18:49:16 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\scecli.dll
[2008/04/13 23:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008/04/13 23:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll
 
[color=#A23BEC]< MD5 for: UXTHEME.DLL  >[/color]
[2004/08/17 10:49:20 | 000,219,648 | ---- | M] (Microsoft Corporation) MD5=0D3C98F2D11978D67DD4102471CFBFAC -- C:\WINDOWS\$NtServicePackUninstall$\uxtheme.dll
[2004/08/17 18:49:19 | 000,219,648 | ---- | M] (Microsoft Corporation) MD5=0D3C98F2D11978D67DD4102471CFBFAC -- C:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\uxtheme.dll
[2008/04/13 23:22:04 | 000,219,648 | ---- | M] (Microsoft Corporation) MD5=E04A8DC5C740C679EF62A614D9339ECF -- C:\WINDOWS\ServicePackFiles\i386\uxtheme.dll
[2008/04/13 23:22:04 | 000,219,648 | ---- | M] (Microsoft Corporation) MD5=E04A8DC5C740C679EF62A614D9339ECF -- C:\WINDOWS\system32\uxtheme.dll
 
[color=#A23BEC]<             %systemroot%\System32\config\*.sav >[/color]
[2010/10/29 11:05:38 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2010/10/29 11:05:37 | 000,630,784 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2010/10/29 11:05:37 | 000,421,888 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav
 
[color=#A23BEC]<             %systemroot%\*. /mp /s >[/color]
 
[color=#A23BEC]<             %systemroot%\system32\*.dll /lockedfiles >[/color]
[2011/01/21 10:44:07 | 008,466,432 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\WINDOWS\system32\shell32.dll
[2 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
 
[color=#A23BEC]<             %systemroot%\Tasks\*.job >[/color]
[2011/04/20 16:16:01 | 000,000,930 | ---- | M] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
[2011/04/20 22:16:00 | 000,000,934 | ---- | M] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
[2011/04/19 02:23:18 | 000,000,254 | ---- | M] () -- C:\WINDOWS\Tasks\WGASetup.job
< End of report >