Prosím o kontrolu, blbne net Vyřešeno

[domitea]

Zde je log z HiJackThis

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:46:26, on 15.4.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
D:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Windows\AsScrPro.exe
D:\PROGRA~1\stickies\stickies.exe
D:\Program Files\Handy Start Menu\HandyStartMenu.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\Program Files (x86)\The KMPlayer\KMPlayer.exe
C:\Program Files (x86)\Internet Explorer\IELowutil.exe
C:\Program Files (x86)\Opera\opera.exe
C:\Users\Dominik\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - D:\Adobe Master CS5\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - D:\Adobe Master CS5\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll
O4 - HKLM\..\Run: [UpdateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [Handy Start Menu] "D:\Program Files\Handy Start Menu\HandyStartMenu.exe" /Enable
O4 - HKCU\..\Run: [PC Suite Tray] "D:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - Global Startup: FancyStart daemon.lnk = ?
O4 - Global Startup: SRS Premium Sound.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - Unknown owner - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (file missing)
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Správce úloh aplikace Autodesk Moldflow Inventor Tool Suite Integration 2011 (mitsijm2011) - Unknown owner - D:\Program Files\Autodesk\Inventor 2011\Moldflow\bin\mitsijm.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Windows\SysWOW64\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TabletServicePen - Wacom Technology, Corp. - C:\Program Files\Tablet\Pen\Pen_Tablet.exe
O23 - Service: Wacom Consumer Touch Service (TouchServicePen) - Wacom Technology, Corp. - C:\Program Files\Tablet\Pen\Pen_TouchService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11819 bytes

V dalším postu bude z Mbam

[Reklama]

[Žbeky]

Odinstaluj:
Google toolbar

V HJT fixni:

Kód: Vybrat vše

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Dodej ten mbam

[domitea]

Mbam

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Verze databáze: 6369

Windows 6.1.7601 Service Pack 1
Internet Explorer 8.0.7601.17514

15.4.2011 18:05:11
mbam-log-2011-04-15 (18-05-11).txt

Typ kontroly: Rychlý test
Testované objekty: 178698
Uplynulý čas: 2 minut, 24 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

[Žbeky]

Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah

[domitea]

Trochu déle to trvalo

ComboFix 11-04-14.03 - Dominik 15.04.2011 18:52:07.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4095.2323 [GMT 2:00]
Spuštěný z: c:\users\Dominik\Desktop\ComboFix.exe
AV: ESET Smart Security 4.2 *Disabled/Updated* {CB0F8167-5331-BA19-698E-64816B6801A5}
FW: ESET personal firewall *Disabled* {F3340042-195E-BB41-42D1-CDB495BB46DE}
SP: ESET Smart Security 4.2 *Disabled/Updated* {706E6083-750B-B597-533E-5FF310EF4B18}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\Images
c:\programdata\FullRemove.exe
c:\users\Dominik\AppData\Roaming\EurekaLog
c:\windows\Downloaded Program Files\IDropPTB.dll
c:\windows\SysWow64\html
c:\windows\SysWow64\html\calendar.html
c:\windows\SysWow64\html\calendarbottom.html
c:\windows\SysWow64\html\calendartop.html
c:\windows\SysWow64\html\crystalexportdialog.htm
c:\windows\SysWow64\html\crystalprinthost.html
c:\windows\SysWow64\images
c:\windows\SysWow64\images\toolbar\calendar.gif
c:\windows\SysWow64\images\toolbar\crlogo.gif
c:\windows\SysWow64\images\toolbar\export.gif
c:\windows\SysWow64\images\toolbar\export_over.gif
c:\windows\SysWow64\images\toolbar\exportd.gif
c:\windows\SysWow64\images\toolbar\First.gif
c:\windows\SysWow64\images\toolbar\first_over.gif
c:\windows\SysWow64\images\toolbar\Firstd.gif
c:\windows\SysWow64\images\toolbar\gotopage.gif
c:\windows\SysWow64\images\toolbar\gotopage_over.gif
c:\windows\SysWow64\images\toolbar\gotopaged.gif
c:\windows\SysWow64\images\toolbar\grouptree.gif
c:\windows\SysWow64\images\toolbar\grouptree_over.gif
c:\windows\SysWow64\images\toolbar\grouptreed.gif
c:\windows\SysWow64\images\toolbar\grouptreepressed.gif
c:\windows\SysWow64\images\toolbar\Last.gif
c:\windows\SysWow64\images\toolbar\last_over.gif
c:\windows\SysWow64\images\toolbar\Lastd.gif
c:\windows\SysWow64\images\toolbar\Next.gif
c:\windows\SysWow64\images\toolbar\next_over.gif
c:\windows\SysWow64\images\toolbar\Nextd.gif
c:\windows\SysWow64\images\toolbar\Prev.gif
c:\windows\SysWow64\images\toolbar\prev_over.gif
c:\windows\SysWow64\images\toolbar\Prevd.gif
c:\windows\SysWow64\images\toolbar\print.gif
c:\windows\SysWow64\images\toolbar\print_over.gif
c:\windows\SysWow64\images\toolbar\printd.gif
c:\windows\SysWow64\images\toolbar\Refresh.gif
c:\windows\SysWow64\images\toolbar\refresh_over.gif
c:\windows\SysWow64\images\toolbar\refreshd.gif
c:\windows\SysWow64\images\toolbar\Search.gif
c:\windows\SysWow64\images\toolbar\search_over.gif
c:\windows\SysWow64\images\toolbar\searchd.gif
c:\windows\SysWow64\images\toolbar\up.gif
c:\windows\SysWow64\images\toolbar\up_over.gif
c:\windows\SysWow64\images\toolbar\upd.gif
c:\windows\SysWow64\images\tree\begindots.gif
c:\windows\SysWow64\images\tree\beginminus.gif
c:\windows\SysWow64\images\tree\beginplus.gif
c:\windows\SysWow64\images\tree\blank.gif
c:\windows\SysWow64\images\tree\blankdots.gif
c:\windows\SysWow64\images\tree\dots.gif
c:\windows\SysWow64\images\tree\lastdots.gif
c:\windows\SysWow64\images\tree\lastminus.gif
c:\windows\SysWow64\images\tree\lastplus.gif
c:\windows\SysWow64\images\tree\Magnify.gif
c:\windows\SysWow64\images\tree\minus.gif
c:\windows\SysWow64\images\tree\minusbox.gif
c:\windows\SysWow64\images\tree\plus.gif
c:\windows\SysWow64\images\tree\plusbox.gif
c:\windows\SysWow64\images\tree\singleminus.gif
c:\windows\SysWow64\images\tree\singleplus.gif
c:\windows\SysWow64\system32
c:\windows\SysWow64\system32\DRIVERS\RTL2832U_IRHID.sys
c:\windows\SysWow64\system32\DRIVERS\RTL2832UBDA.sys
c:\windows\SysWow64\system32\DRIVERS\RTL2832UUSB.sys
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-03-15 do 2011-04-15 )))))))))))))))))))))))))))))))
.
.
2011-04-15 17:14 . 2011-04-15 17:14 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-04-15 15:45 . 2011-04-15 15:45 -------- d-----w- c:\users\Dominik\AppData\Roaming\Malwarebytes
2011-04-15 15:45 . 2010-12-20 16:09 38224 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-04-15 15:45 . 2011-04-15 15:45 -------- d-----w- c:\programdata\Malwarebytes
2011-04-15 15:45 . 2011-04-15 15:45 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2011-04-15 15:45 . 2010-12-20 16:08 24152 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-04-14 15:29 . 2011-04-14 15:30 -------- d-----w- c:\users\Dominik\AppData\Local\{5047B54F-F2F9-4024-AE5A-EFA4E04810E9}
2011-04-14 13:56 . 2011-02-05 12:41 20352 ----a-w- c:\windows\system32\kdusb.dll
2011-04-14 13:56 . 2011-02-05 12:41 19328 ----a-w- c:\windows\system32\kd1394.dll
2011-04-14 13:56 . 2011-02-05 12:41 17792 ----a-w- c:\windows\system32\kdcom.dll
2011-04-14 13:56 . 2011-03-11 06:19 1395712 ----a-w- c:\windows\system32\mfc42.dll
2011-04-14 13:56 . 2011-03-11 06:19 1359872 ----a-w- c:\windows\system32\mfc42u.dll
2011-04-14 13:56 . 2011-02-23 05:15 90624 ----a-w- c:\windows\system32\drivers\bowser.sys
2011-04-12 19:35 . 2011-04-12 19:35 -------- d-----w- c:\users\Dominik\AppData\Local\reakktor
2011-04-12 14:47 . 2011-04-14 15:53 -------- d-----w- c:\users\Dominik\AppData\Local\PMB Files
2011-04-12 14:47 . 2011-04-12 14:48 -------- d-----w- c:\programdata\PMB Files
2011-04-12 14:47 . 2011-04-12 14:47 -------- d-----w- c:\program files (x86)\Pando Networks
2011-04-12 13:35 . 2011-04-12 13:36 -------- d-----w- c:\users\Dominik\AppData\Local\{D07A8F3C-F537-45EC-9504-196950D056B7}
2011-04-10 17:32 . 2011-04-10 17:32 -------- d-----w- c:\users\Dominik\AppData\Local\{7A8D940C-62A1-45B6-A367-FD5234B01965}
2011-04-07 17:13 . 2011-04-07 17:13 -------- d-----w- c:\users\Dominik\AppData\Local\{DD49E584-9E93-4EC5-BE0F-16F2CD7D3746}
2011-04-07 06:00 . 2011-04-07 06:00 -------- d-----w- c:\users\Dominik\AppData\Local\{35D0D21E-AED3-4BC5-BD5B-64B757EAFA75}
2011-04-06 15:56 . 2011-04-06 15:56 -------- d-----w- c:\program files (x86)\Common Files\Java
2011-04-06 15:55 . 2011-04-06 15:55 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-04-06 15:55 . 2011-04-06 15:55 -------- d-----w- c:\program files (x86)\Java
2011-04-06 14:31 . 2011-04-06 14:31 -------- d-----w- c:\users\Dominik\AppData\Local\{159A3EA8-7290-4323-9779-25199DF7C23B}
2011-04-05 17:41 . 2011-04-05 17:41 -------- d-----w- c:\users\Dominik\AppData\Local\{5991F4AC-915C-4662-953A-321873FF86F3}
2011-04-04 19:19 . 2011-04-04 19:19 -------- d-----w- c:\users\Dominik\AppData\Local\{6E46D4A6-B06B-420F-BE82-6E3195F57750}
2011-04-02 10:30 . 2011-04-02 10:30 -------- d-----w- c:\program files\SystemRequirementsLab
2011-03-31 14:48 . 2011-03-31 14:48 -------- d-----w- c:\users\Dominik\AppData\Local\{73BE4F55-2BA8-4758-A6AB-8AF8EE3F3208}
2011-03-27 09:10 . 2011-03-27 09:10 -------- d-----w- c:\users\Dominik\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2011-03-27 09:08 . 2011-03-27 09:08 -------- d-----w- c:\users\Dominik\AppData\Roaming\ChemTable Software
2011-03-25 08:48 . 2011-03-25 08:48 -------- d-----w- c:\users\Dominik\AppData\Local\Microsoft_Corporation
2011-03-24 20:33 . 2011-03-24 20:33 -------- d-----w- c:\program files (x86)\Microsoft Mathematics
2011-03-24 06:52 . 2011-03-24 06:52 -------- d-----w- c:\program files (x86)\GIMP-2.0
2011-03-21 16:37 . 2011-03-21 16:37 -------- d-----w- c:\program files (x86)\Common Files\Skype
2011-03-20 13:00 . 2011-03-20 13:00 -------- d-----w- c:\users\Dominik\AppData\Local\Eric_Woodruff
2011-03-20 12:59 . 2011-03-20 12:59 -------- d-----w- c:\program files (x86)\EWSoftware
2011-03-20 12:57 . 2011-03-20 12:58 -------- d-----w- c:\program files (x86)\Sandcastle
2011-03-20 12:48 . 2011-03-20 12:50 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 2008 SDK
2011-03-18 21:23 . 2003-11-10 17:13 69715 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\ctor.dll
2011-03-18 21:23 . 2003-11-10 17:12 266240 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iscript.dll
2011-03-18 21:23 . 2003-11-10 17:12 192512 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iuser.dll
2011-03-18 21:23 . 2003-11-10 17:11 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\DotNetInstaller.exe
2011-03-18 21:23 . 2003-11-10 17:14 729088 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iKernel.dll
2011-03-18 21:23 . 2011-03-18 21:23 188548 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iGdi.dll
2011-03-18 21:23 . 2011-03-18 21:23 311428 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\setup.dll
2011-03-18 15:12 . 2011-03-18 15:12 -------- d-----w- C:\trainztmp
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-14 13:40 . 2010-05-14 10:34 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2011-04-14 13:40 . 2010-05-25 15:06 484160 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2011-04-12 13:39 . 2010-05-11 15:48 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2011-04-12 13:39 . 2010-05-11 15:48 484160 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2011-03-08 20:08 . 2010-06-24 09:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-02-23 17:53 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-02-23 17:53 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-02-17 16:21 . 2011-02-23 10:02 228272 ----a-w- c:\windows\system32\drivers\VBoxDrv.sys
2011-02-17 16:21 . 2011-02-17 16:21 156080 ----a-w- c:\windows\system32\drivers\VBoxNetAdp.sys
2011-02-17 16:21 . 2011-02-23 10:02 56688 ----a-w- c:\windows\system32\drivers\VBoxUSBMon.sys
2011-02-17 16:21 . 2011-02-17 16:21 320816 ----a-w- c:\windows\system32\VBoxNetFltNotify.dll
2011-02-17 16:21 . 2011-02-17 16:21 175664 ----a-w- c:\windows\system32\drivers\VBoxNetFlt.sys
2011-01-22 12:53 . 2011-01-22 12:53 49152 ----a-r- c:\users\Dominik\AppData\Roaming\Microsoft\Installer\{C37A0BC1-52EE-4F97-8223-5CA9FC0357B0}\ARPPRODUCTICON.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Handy Start Menu"="d:\program files\Handy Start Menu\HandyStartMenu.exe" [2011-02-28 2701056]
"PC Suite Tray"="d:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2010-05-14 1479680]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"UpdateLBPShortCut"="c:\program files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"UpdateP2GoShortCut"="c:\program files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2009-10-27 6998656]
"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2009-08-20 170624]
"HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"CLMLServer"="c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe" [2009-11-02 103720]
"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
FancyStart daemon.lnk - c:\windows\Installer\{F0DF4513-3C4C-4EB8-8012-2C5F70AF3988}\_A1DDD39913A1970387B7B3.exe [2010-3-23 12862]
SRS Premium Sound.lnk - c:\windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe [2010-3-23 156952]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-03-23 135664]
R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2010-10-07 1436424]
R3 nmwcdx64;Nokia USB Phone Parent;c:\windows\system32\drivers\ccdcmbx64.sys [x]
R3 RDPDISPM;RDPDISPM;c:\windows\system32\DRIVERS\rdpdispm.sys [x]
R3 SaiK0836;SaiK0836;c:\windows\system32\DRIVERS\SaiK0836.sys [x]
R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\DRIVERS\wacmoumonitor.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys [x]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe [x]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-03 15416]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [2010-04-07 810120]
S2 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [x]
S2 mitsijm2011;Správce úloh aplikace Autodesk Moldflow Inventor Tool Suite Integration 2011;d:\program files\Autodesk\Inventor 2011\Moldflow\bin\mitsijm.exe [2010-01-23 673792]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\windows\SysWOW64\nvSCPAPISvr.exe [2009-12-11 239208]
S2 TabletServicePen;TabletServicePen;c:\program files\Tablet\Pen\Pen_Tablet.exe [2010-10-13 5790064]
S2 TouchServicePen;Wacom Consumer Touch Service;c:\program files\Tablet\Pen\Pen_TouchService.exe [2010-10-13 487280]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [x]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 RTL2832U_IRHID;HID Infrared Remote Receiver;c:\windows\system32\DRIVERS\RTL2832U_IRHID.sys [2009-10-05 44320]
S3 RTL2832UBDA;REALTEK 2832U BDA Driver;c:\windows\system32\drivers\RTL2832UBDA.sys [2010-07-01 224488]
S3 RTL2832UUSB;REALTEK 2832U USB Driver;c:\windows\system32\Drivers\RTL2832UUSB.sys [2010-07-01 39016]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [x]
S3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2011-04-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-03-23 16:32]
.
2011-04-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-03-23 16:32]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"
[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]
2009-11-26 05:49 70656 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{64174815-8D98-4CE6-8646-4C039977D808}"
[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]
2009-11-26 05:49 70656 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ASUS WebStorage"="c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe" [2009-12-24 1736704]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-12-11 16414824]
"ETDWare"="c:\program files\Elantech\ETDCtrl.exe" [2009-09-30 621440]
"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2009-09-01 323584]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2010-04-07 2839840]
"SaiMfd"="c:\program files\Saitek\SD6\Software\SaiMfd.exe" [2009-06-03 194560]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
.
.
------- Asociace souborů -------
.
JSEFile=%SystemRoot%\SysWow64\CScript.exe "%1" %*
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
Toolbar-Locked - (no file)
AddRemove-ASUS_Screensaver - c:\windows\system32\ASUS_Screensaver.scr
AddRemove-Tilt Rotor (FS2004) - d:\flight simulator 9\Uninstal_TRFS9_wilco.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10g_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10g_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10g.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10g.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10g.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10g.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B9A09F18-45AB-4F09-A117-A4ADDA8FA8C8}]
@Denied: (A) (Everyone)
"Solution"="{36eb6792-3a29-43b3-8cd0-f67d266fb426}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane\0]
"Key"="ActionsPane"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\8.0\\ActionsPane.xsd"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2011-04-15 19:51:05
ComboFix-quarantined-files.txt 2011-04-15 17:50
.
Před spuštěním: Volných bajtů: 16 204 910 592
Po spuštění: Volných bajtů: 15 039 467 520
.
- - End Of File - - 7E7F34CEC61FA8E5E10EDDCCD797EA66

[Žbeky]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Kód: Vybrat vše

KillAll::

DirLook::
c:\users\Dominik\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1

Folder::
c:\users\Dominik\AppData\Local\{5047B54F-F2F9-4024-AE5A-EFA4E04810E9}
c:\users\Dominik\AppData\Local\{D07A8F3C-F537-45EC-9504-196950D056B7}
c:\users\Dominik\AppData\Local\{7A8D940C-62A1-45B6-A367-FD5234B01965}
c:\users\Dominik\AppData\Local\{DD49E584-9E93-4EC5-BE0F-16F2CD7D3746}
c:\users\Dominik\AppData\Local\{35D0D21E-AED3-4BC5-BD5B-64B757EAFA75}
c:\users\Dominik\AppData\Local\{159A3EA8-7290-4323-9779-25199DF7C23B}
c:\users\Dominik\AppData\Local\{5991F4AC-915C-4662-953A-321873FF86F3}
c:\users\Dominik\AppData\Local\{6E46D4A6-B06B-420F-BE82-6E3195F57750}
c:\users\Dominik\AppData\Local\{73BE4F55-2BA8-4758-A6AB-8AF8EE3F3208}

Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"=-
"ConsentPromptBehaviorUser"=-
"EnableUIADesktopToggle"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=-

File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

RegLock::
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

RegNull::
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu

Na Virustotal otestuj soubory ze složky
C:\Qoobox\Quarantine\c\windows\SysWow64\system32\DRIVERS

Klikni vpravo od okénka na Vybrat a v Exploreru najdi požadovaný soubor v Tvém PC. Označ ho myší a klikni na Otevřít , poté klikni na Send File. Pokud už byl soubor testován , objeví se okno ve kterém klikni na Reanalyze. Soubor se začne postupně testovat více antivirovými programy. Až skončí test posledního antiviru , objeví se nahoře result a červeně počet nákaz , např. 0/40 , nebo 1/40. Pak zkopíruj myší odkaz na tuto stránku a vlož ji do svého příspěvku.

[domitea]

Combo

ComboFix 11-04-14.03 - Dominik 15.04.2011 21:32:30.2.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4095.1925 [GMT 2:00]
Spuštěný z: c:\users\Dominik\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Dominik\Desktop\CFScript.txt
AV: ESET Smart Security 4.2 *Disabled/Updated* {CB0F8167-5331-BA19-698E-64816B6801A5}
FW: ESET personal firewall *Disabled* {F3340042-195E-BB41-42D1-CDB495BB46DE}
SP: ESET Smart Security 4.2 *Disabled/Updated* {706E6083-750B-B597-533E-5FF310EF4B18}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Dominik\AppData\Local\{159A3EA8-7290-4323-9779-25199DF7C23B}
c:\users\Dominik\AppData\Local\{35D0D21E-AED3-4BC5-BD5B-64B757EAFA75}
c:\users\Dominik\AppData\Local\{5047B54F-F2F9-4024-AE5A-EFA4E04810E9}
c:\users\Dominik\AppData\Local\{5991F4AC-915C-4662-953A-321873FF86F3}
c:\users\Dominik\AppData\Local\{6E46D4A6-B06B-420F-BE82-6E3195F57750}
c:\users\Dominik\AppData\Local\{73BE4F55-2BA8-4758-A6AB-8AF8EE3F3208}
c:\users\Dominik\AppData\Local\{7A8D940C-62A1-45B6-A367-FD5234B01965}
c:\users\Dominik\AppData\Local\{D07A8F3C-F537-45EC-9504-196950D056B7}
c:\users\Dominik\AppData\Local\{DD49E584-9E93-4EC5-BE0F-16F2CD7D3746}
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-03-15 do 2011-04-15 )))))))))))))))))))))))))))))))
.
.
2011-04-15 19:52 . 2011-04-15 19:52 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-04-15 15:45 . 2011-04-15 15:45 -------- d-----w- c:\users\Dominik\AppData\Roaming\Malwarebytes
2011-04-15 15:45 . 2010-12-20 16:09 38224 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-04-15 15:45 . 2011-04-15 15:45 -------- d-----w- c:\programdata\Malwarebytes
2011-04-15 15:45 . 2011-04-15 15:45 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2011-04-15 15:45 . 2010-12-20 16:08 24152 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-04-14 13:56 . 2011-02-05 12:41 20352 ----a-w- c:\windows\system32\kdusb.dll
2011-04-14 13:56 . 2011-02-05 12:41 19328 ----a-w- c:\windows\system32\kd1394.dll
2011-04-14 13:56 . 2011-02-05 12:41 17792 ----a-w- c:\windows\system32\kdcom.dll
2011-04-14 13:56 . 2011-03-11 06:19 1395712 ----a-w- c:\windows\system32\mfc42.dll
2011-04-14 13:56 . 2011-03-11 06:19 1359872 ----a-w- c:\windows\system32\mfc42u.dll
2011-04-14 13:56 . 2011-02-23 05:15 90624 ----a-w- c:\windows\system32\drivers\bowser.sys
2011-04-12 19:35 . 2011-04-12 19:35 -------- d-----w- c:\users\Dominik\AppData\Local\reakktor
2011-04-12 14:47 . 2011-04-14 15:53 -------- d-----w- c:\users\Dominik\AppData\Local\PMB Files
2011-04-12 14:47 . 2011-04-12 14:48 -------- d-----w- c:\programdata\PMB Files
2011-04-12 14:47 . 2011-04-12 14:47 -------- d-----w- c:\program files (x86)\Pando Networks
2011-04-06 15:56 . 2011-04-06 15:56 -------- d-----w- c:\program files (x86)\Common Files\Java
2011-04-06 15:55 . 2011-04-06 15:55 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-04-06 15:55 . 2011-04-06 15:55 -------- d-----w- c:\program files (x86)\Java
2011-04-02 10:30 . 2011-04-02 10:30 -------- d-----w- c:\program files\SystemRequirementsLab
2011-03-27 09:10 . 2011-03-27 09:10 -------- d-----w- c:\users\Dominik\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2011-03-27 09:08 . 2011-03-27 09:08 -------- d-----w- c:\users\Dominik\AppData\Roaming\ChemTable Software
2011-03-25 08:48 . 2011-03-25 08:48 -------- d-----w- c:\users\Dominik\AppData\Local\Microsoft_Corporation
2011-03-24 20:33 . 2011-03-24 20:33 -------- d-----w- c:\program files (x86)\Microsoft Mathematics
2011-03-24 06:52 . 2011-03-24 06:52 -------- d-----w- c:\program files (x86)\GIMP-2.0
2011-03-21 16:37 . 2011-03-21 16:37 -------- d-----w- c:\program files (x86)\Common Files\Skype
2011-03-20 13:00 . 2011-03-20 13:00 -------- d-----w- c:\users\Dominik\AppData\Local\Eric_Woodruff
2011-03-20 12:59 . 2011-03-20 12:59 -------- d-----w- c:\program files (x86)\EWSoftware
2011-03-20 12:57 . 2011-03-20 12:58 -------- d-----w- c:\program files (x86)\Sandcastle
2011-03-20 12:48 . 2011-03-20 12:50 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 2008 SDK
2011-03-18 21:23 . 2003-11-10 17:13 69715 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\ctor.dll
2011-03-18 21:23 . 2003-11-10 17:12 266240 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iscript.dll
2011-03-18 21:23 . 2003-11-10 17:12 192512 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iuser.dll
2011-03-18 21:23 . 2003-11-10 17:11 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\DotNetInstaller.exe
2011-03-18 21:23 . 2003-11-10 17:14 729088 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iKernel.dll
2011-03-18 21:23 . 2011-03-18 21:23 188548 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iGdi.dll
2011-03-18 21:23 . 2011-03-18 21:23 311428 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\setup.dll
2011-03-18 15:12 . 2011-03-18 15:12 -------- d-----w- C:\trainztmp
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-14 13:40 . 2010-05-14 10:34 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2011-04-14 13:40 . 2010-05-25 15:06 484160 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2011-04-12 13:39 . 2010-05-11 15:48 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2011-04-12 13:39 . 2010-05-11 15:48 484160 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2011-03-08 20:08 . 2010-06-24 09:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-02-23 17:53 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-02-23 17:53 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-02-17 16:21 . 2011-02-23 10:02 228272 ----a-w- c:\windows\system32\drivers\VBoxDrv.sys
2011-02-17 16:21 . 2011-02-17 16:21 156080 ----a-w- c:\windows\system32\drivers\VBoxNetAdp.sys
2011-02-17 16:21 . 2011-02-23 10:02 56688 ----a-w- c:\windows\system32\drivers\VBoxUSBMon.sys
2011-02-17 16:21 . 2011-02-17 16:21 320816 ----a-w- c:\windows\system32\VBoxNetFltNotify.dll
2011-02-17 16:21 . 2011-02-17 16:21 175664 ----a-w- c:\windows\system32\drivers\VBoxNetFlt.sys
2011-01-22 12:53 . 2011-01-22 12:53 49152 ----a-r- c:\users\Dominik\AppData\Roaming\Microsoft\Installer\{C37A0BC1-52EE-4F97-8223-5CA9FC0357B0}\ARPPRODUCTICON.exe
.
.
(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
---- Directory of c:\users\Dominik\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 ----
.
2011-03-27 09:10 . 2011-03-27 09:10 231 ----a-w- c:\users\Dominik\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1\Local Store\#ApplicationUpdater\state.xml
2011-03-27 09:10 . 2011-03-27 09:10 35 ----a-w- c:\users\Dominik\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1\Local Store\#SharedObjects\s_br.sol
2011-03-27 09:10 . 2011-03-27 09:10 8192 ----a-w- c:\users\Dominik\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1\Local Store\appDB.db
.
.
((((((((((((((((((((((((((((( SnapShot@2011-04-15_17.15.44 )))))))))))))))))))))))))))))))))))))))))
.
- 2010-05-11 14:31 . 2011-04-15 14:51 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-05-11 14:31 . 2011-04-15 19:57 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-05-11 14:31 . 2011-04-15 14:51 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2010-05-11 14:31 . 2011-04-15 19:57 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2010-05-11 14:31 . 2011-04-15 19:57 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2010-05-11 14:31 . 2011-04-15 14:51 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2010-05-11 20:21 . 2011-04-15 17:02 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-05-11 20:21 . 2011-04-15 20:03 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-05-11 20:21 . 2011-04-15 20:03 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2010-05-11 20:21 . 2011-04-15 17:02 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-04-15 17:34 . 2011-04-15 17:34 70656 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xaml.Hosting\63c98372cf252bca07373364c02158d7\System.Xaml.Hosting.ni.dll
+ 2011-04-15 17:36 . 2011-04-15 17:36 42496 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Pres#\c06b7da592baed92addf457aea85d406\System.Windows.Presentation.ni.dll
+ 2011-04-15 17:35 . 2011-04-15 17:35 26112 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Routing\b43381f0e455b5a52ff548e8edc74e4a\System.Web.Routing.ni.dll
+ 2011-04-15 17:35 . 2011-04-15 17:35 53760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DynamicD#\a275ccdffbbf4611d2feee399565e10d\System.Web.DynamicData.Design.ni.dll
+ 2011-04-15 17:29 . 2011-04-15 17:29 86016 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Applicat#\4ff93b18ea038ffbc6ac2be4c45cb71a\System.Web.ApplicationServices.ni.dll
+ 2011-04-15 17:35 . 2011-04-15 17:35 26112 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Abstract#\c21fe3045020f3e9b4364d512a0e8dbb\System.Web.Abstractions.ni.dll
+ 2011-04-15 17:35 . 2011-04-15 17:35 13824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\538f2f22f181e896a3080e9de24089e7\System.ServiceModel.ServiceMoniker40.ni.dll
+ 2011-04-15 17:32 . 2011-04-15 17:32 97280 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn.Contra#\5fd7b9d59094742b9c38ec0d96000335\System.AddIn.Contract.ni.dll
+ 2011-04-15 17:26 . 2011-04-15 17:26 46592 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Workflow.#\e2fe907fb2e23d733afe89ce66f18b98\Microsoft.Workflow.Compiler.ni.exe
+ 2011-04-15 17:26 . 2011-04-15 17:26 14336 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualC\9a40ba676e4fd8c1dbbf494d349f6d02\Microsoft.VisualC.ni.dll
+ 2011-04-15 19:43 . 2011-04-15 19:43 98304 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\a78462fb8bbbc190eaf64474dd53cedf\WindowsFormsIntegration.Package.ni.dll
+ 2011-04-15 17:42 . 2011-04-15 17:42 96768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\9824b202ffe88c945577effdc7fc8fc3\UIAutomationProvider.ni.dll
+ 2011-04-15 19:41 . 2011-04-15 19:41 54784 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml.Hosting\8e97109a6278b73bf4fd77b61ce6c154\System.Xaml.Hosting.ni.dll
+ 2011-04-15 19:42 . 2011-04-15 19:42 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\6474ae2cebac637025eab3cbcdc9ffe6\System.Windows.Presentation.ni.dll
+ 2011-04-15 19:42 . 2011-04-15 19:42 24064 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Routing\1070fda1dc17a4b0f121195f9c1ebcfe\System.Web.Routing.ni.dll
+ 2011-04-15 19:42 . 2011-04-15 19:42 46592 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\5a41a2282d6b6ac525073db4f0604677\System.Web.DynamicData.Design.ni.dll
+ 2011-04-15 17:42 . 2011-04-15 17:42 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\50cbf014f60fa88f67a763dfbead1fee\System.Web.ApplicationServices.ni.dll
+ 2011-04-15 19:42 . 2011-04-15 19:42 24576 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Abstract#\8aa6f2e7225a8c20edda9ee3a260692a\System.Web.Abstractions.ni.dll
+ 2011-04-15 19:42 . 2011-04-15 19:42 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\f472171edc898ea876f14b97b4f332b8\System.ServiceModel.Channels.ni.dll
+ 2011-04-15 19:42 . 2011-04-15 19:42 12288 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\2f4398558c8128f92887fde8660f1ca8\System.ServiceModel.ServiceMoniker40.ni.dll
+ 2011-04-15 17:43 . 2011-04-15 17:43 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\473102f936b4a823e5e2b2e6282c5104\System.AddIn.Contract.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 37376 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Workflow.#\c4eae41feecde838e71941f5b7359b48\Microsoft.Workflow.Compiler.ni.exe
+ 2011-04-15 17:40 . 2011-04-15 17:40 76288 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Windows.D#\43491d0f975eeee8fedf93c725c98e59\Microsoft.Windows.Design.Host.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 39936 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VSDesigne#\2a3b6db2db258faa607bc27f0ab64b7c\Microsoft.VSDesigner.Core.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 26112 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VSDesigne#\073f2625c99f79e56c4d7aafca93f384\Microsoft.VSDesigner.ExceptionAssistant.SmartTag.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 50688 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\d61da9aa2b9a6b7411e0dddc076ff28b\Microsoft.VisualStudio.Platform.AppDomainManager.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 36864 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\a889120490bf0a53d7c0b81e61ec6d3f\Microsoft.VisualStudio.ExtensionsExplorer.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 91136 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\9960ab0143a04082425d2290abe8ef7b\Microsoft.VisualStudio.CoreUtility.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 35840 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\884760baf73873607e67dff3177f7047\Microsoft.VisualStudio.Editor.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 28160 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\71ce2c4f6337d9004aabd5410bf275c4\Microsoft.VisualStudio.Language.GenerateType.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 86016 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\70f43f4f4ffc3416e78309beb179447d\Microsoft.VisualStudio.ExtensionManager.ni.dll
+ 2011-04-15 17:38 . 2011-04-15 17:38 27136 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\30fbc56f5d55f664f649471be48487cd\Microsoft.VisualStudio.ComponentModelHost.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 16384 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\211133e80355ee438bc3b23d4a2116ef\Microsoft.VisualStudio.Shell.Immutable.10.0.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 28160 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\15a28edd2f6c8f808f6e0f51621df5ed\Microsoft.VisualStudio.Language.StandardClassification.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 17920 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\0cef38fc32d3c1a0142b0a9848c3db05\Microsoft.VisualStudio.TextTemplating.Interfaces.10.0.ni.dll
+ 2011-04-15 17:38 . 2011-04-15 17:38 11776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\1a21a54acf18fabfddb0b94d40e509a1\Microsoft.VisualC.ni.dll
+ 2011-04-15 17:38 . 2011-04-15 17:38 12800 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Data.Sche#\ab5f857de12ad005d05cabb97f9b742a\Microsoft.Data.Schema.ScriptDom.ni.dll
- 2011-04-15 14:47 . 2011-04-15 14:47 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2011-04-15 19:55 . 2011-04-15 19:55 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2011-04-15 14:47 . 2011-04-15 14:47 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2011-04-15 19:55 . 2011-04-15 19:55 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2009-07-14 05:01 . 2011-04-15 19:54 620732 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
- 2009-07-14 05:01 . 2011-04-15 14:43 620732 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-04-15 17:36 . 2011-04-15 17:36 527360 c:\windows\assembly\NativeImages_v4.0.30319_64\XamlBuildTask\79e2a9009a5829531ff15506756aaf03\XamlBuildTask.ni.dll
+ 2011-04-15 17:25 . 2011-04-15 17:25 448512 c:\windows\assembly\NativeImages_v4.0.30319_64\WsatConfig\b51886924fe21cc20ac1d0d136f69964\WsatConfig.ni.exe
+ 2011-04-15 17:36 . 2011-04-15 17:36 314368 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsFormsIntegra#\61fb9d8290fbaa8498a881f593a7a040\WindowsFormsIntegration.ni.dll
+ 2011-04-15 17:31 . 2011-04-15 17:31 231424 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationTypes\18b47d7f980b932dc902655b49ec4fbe\UIAutomationTypes.ni.dll
+ 2011-04-15 17:31 . 2011-04-15 17:31 121344 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationProvider\75099df6556d7d2c5ca67d3e2d60baac\UIAutomationProvider.ni.dll
+ 2011-04-15 17:36 . 2011-04-15 17:36 637952 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClient\0943772ed435f5c91373cd3aaf03bd73\UIAutomationClient.ni.dll
+ 2011-04-15 17:28 . 2011-04-15 17:28 523264 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Linq\9730c5e35945ca85fd5d95a115893876\System.Xml.Linq.ni.dll
+ 2011-04-15 17:31 . 2011-04-15 17:31 251904 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Inpu#\71ac43faef5b49a62312dc1328bacb3d\System.Windows.Input.Manipulations.ni.dll
+ 2011-04-15 17:36 . 2011-04-15 17:36 240128 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\f5e8d57f5ea8b92daab703eea68de5f9\System.Windows.Forms.DataVisualization.Design.ni.dll
+ 2011-04-15 17:31 . 2011-04-15 17:31 306176 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.RegularE#\9eab1ca5060f975896e6edd435e92e0e\System.Web.RegularExpressions.ni.dll
+ 2011-04-15 17:35 . 2011-04-15 17:35 442368 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Entity\8df41c0694b778e0bc3692c25ac37def\System.Web.Entity.ni.dll
+ 2011-04-15 17:35 . 2011-04-15 17:35 360960 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Entity.D#\078f7ecdf7715c2fdf1b4f26adc8670f\System.Web.Entity.Design.ni.dll
+ 2011-04-15 17:35 . 2011-04-15 17:35 950784 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DynamicD#\52205ca34ff0a7a4fe7c466d3028f9b4\System.Web.DynamicData.ni.dll
+ 2011-04-15 17:35 . 2011-04-15 17:35 323584 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DataVisu#\7ce79a89830f012a933311df06fa84c1\System.Web.DataVisualization.Design.ni.dll
+ 2011-04-15 17:28 . 2011-04-15 17:28 900096 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Transactions\af642314ce87e245d23b0b3377e17ebb\System.Transactions.ni.dll
+ 2011-04-15 17:31 . 2011-04-15 17:31 275456 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\e83b2ffdb10d5d0e220fdf321b824a0e\System.ServiceProcess.ni.dll
+ 2011-04-15 17:35 . 2011-04-15 17:35 108032 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\d290ae0296f19582e156be3b30c2a3b4\System.ServiceModel.Channels.ni.dll
+ 2011-04-15 17:35 . 2011-04-15 17:35 504832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\a58792587454d2133a0f3358a322052a\System.ServiceModel.Routing.ni.dll
+ 2011-04-15 17:34 . 2011-04-15 17:34 560640 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\4b53f0ac2387165436607905aa4a150e\System.ServiceModel.Activation.ni.dll
+ 2011-04-15 17:24 . 2011-04-15 17:24 928768 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Security\fc2ba0e20f94e3d06517953c31c8f8d3\System.Security.ni.dll
+ 2011-04-15 17:30 . 2011-04-15 17:30 374272 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\9b37a4fadc59ceebcc75c8e25fd94019\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2011-04-15 17:28 . 2011-04-15 17:28 983552 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Remo#\1602a0cde22dd303e4f6ae596b1dbba5\System.Runtime.Remoting.ni.dll
+ 2011-04-15 17:29 . 2011-04-15 17:29 306688 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Cach#\6f66aaa2acfa3698cfc33a64925dab31\System.Runtime.Caching.ni.dll
+ 2011-04-15 17:25 . 2011-04-15 17:25 176128 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Numerics\b3eba7a83ecbeb3c04b3e60a47b02691\System.Numerics.ni.dll
+ 2011-04-15 17:35 . 2011-04-15 17:35 904704 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Net\3b806d29af1d1578760b445ad76be619\System.Net.ni.dll
+ 2011-04-15 17:34 . 2011-04-15 17:34 767488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Messaging\281a91a73241f6f7da5446b5514db175\System.Messaging.ni.dll
+ 2011-04-15 17:35 . 2011-04-15 17:35 509952 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management.I#\dcd4144daf8c4d510425bdea556c7dab\System.Management.Instrumentation.ni.dll
+ 2011-04-15 17:35 . 2011-04-15 17:35 520192 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IO.Log\10939629510541abf16bab4eb543a72b\System.IO.Log.ni.dll
+ 2011-04-15 17:34 . 2011-04-15 17:34 288256 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityMode#\dc511891e93007ab478154b9f34136d7\System.IdentityModel.Selectors.ni.dll
+ 2011-04-15 17:28 . 2011-04-15 17:28 338944 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\4fa6feeaa9c0961acda505abdd7298c2\System.EnterpriseServices.Wrapper.dll
+ 2011-04-15 17:26 . 2011-04-15 17:26 489984 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Dynamic\3333b57e4660517077fc343fc2c036a1\System.Dynamic.ni.dll
+ 2011-04-15 17:30 . 2011-04-15 17:30 284672 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing.Desi#\0b318ac31500e8e076f3ae42d33adf78\System.Drawing.Design.ni.dll
+ 2011-04-15 17:31 . 2011-04-15 17:31 623104 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\93b7edc88e1753f7b7fac67375c00328\System.DirectoryServices.Protocols.ni.dll
+ 2011-04-15 17:35 . 2011-04-15 17:35 141824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Device\89bdbc0a3a4cf5e55552c517b356e6bc\System.Device.ni.dll
+ 2011-04-15 17:34 . 2011-04-15 17:34 646656 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Service#\5cbbfff2ca7ea4f8e55307359048f3be\System.Data.Services.Design.ni.dll
+ 2011-04-15 17:32 . 2011-04-15 17:32 175104 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.DataSet#\87afb56213bd1b10ee57c3381077e555\System.Data.DataSetExtensions.ni.dll
+ 2011-04-15 17:31 . 2011-04-15 17:31 179712 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\20a1fd99abd637fbfb5920402d0c9cbc\System.Configuration.Install.ni.dll
+ 2011-04-15 17:32 . 2011-04-15 17:32 997888 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\e054bb4b36d43ba46a30e42898f1ecd1\System.ComponentModel.Composition.ni.dll
+ 2011-04-15 17:32 . 2011-04-15 17:32 252416 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\cc15765b854918b113d3aa8cdfd1af21\System.ComponentModel.DataAnnotations.ni.dll
+ 2011-04-15 17:32 . 2011-04-15 17:32 827392 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn\0a55ba9f43c0f613a31eab0f36699b03\System.AddIn.ni.dll
+ 2011-04-15 17:31 . 2011-04-15 17:31 537600 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.D#\f877a0af35e321f5ee688c486499e071\System.Activities.DurableInstancing.ni.dll
+ 2011-04-15 17:25 . 2011-04-15 17:25 424960 c:\windows\assembly\NativeImages_v4.0.30319_64\SMSvcHost\04cecedd1b95f94953ccb0c5c56e12d7\SMSvcHost.ni.exe
+ 2011-04-15 17:28 . 2011-04-15 17:28 182272 c:\windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\97de59073e43ae5d0204d29de02a5a06\SMDiagnostics.ni.dll
+ 2011-04-15 17:28 . 2011-04-15 17:28 330240 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\d76fe6f0cec13117368275ff13de5b37\PresentationFramework.Classic.ni.dll
+ 2011-04-15 17:28 . 2011-04-15 17:28 553984 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\b26979a8e48281b409b22d51a8ce5ab8\PresentationFramework.Aero.ni.dll
+ 2011-04-15 17:28 . 2011-04-15 17:28 745472 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\7593b88a9eee7f888411a6b279ebb2ac\PresentationFramework.Luna.ni.dll
+ 2011-04-15 17:28 . 2011-04-15 17:28 387072 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\378f098660135718355db3aafea16411\PresentationFramework.Royale.ni.dll
+ 2011-04-15 17:25 . 2011-04-15 17:25 357888 c:\windows\assembly\NativeImages_v4.0.30319_64\MSBuild\fa19f82132787d1c7f62da193e8ba8a4\MSBuild.ni.exe
+ 2011-04-15 17:26 . 2011-04-15 17:26 417280 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\f8bf958832e5ad10d92c8753fe0a738f\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2011-04-15 17:26 . 2011-04-15 17:26 595456 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\57a4a6e73ab36b555fca58c807f5d6ff\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2011-04-15 17:26 . 2011-04-15 17:26 833024 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Uti#\80b97520edcfe0554b27daa8853e86b4\Microsoft.Build.Utilities.v4.0.ni.dll
+ 2011-04-15 17:24 . 2011-04-15 17:24 350720 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Fra#\4145345933e09f31d3bca115d384fa36\Microsoft.Build.Framework.ni.dll
+ 2011-04-15 17:25 . 2011-04-15 17:25 276992 c:\windows\assembly\NativeImages_v4.0.30319_64\CustomMarshalers\f27fbe7dcc5517a2d9b5f15906271eaf\CustomMarshalers.ni.dll
+ 2011-04-15 19:43 . 2011-04-15 19:43 399360 c:\windows\assembly\NativeImages_v4.0.30319_32\XamlBuildTask\071230a3e7b1d19779210ed709761da4\XamlBuildTask.ni.dll
+ 2011-04-15 17:37 . 2011-04-15 17:37 353792 c:\windows\assembly\NativeImages_v4.0.30319_32\WsatConfig\308200c3a43e5cd40f7ca07328be5d56\WsatConfig.ni.exe
+ 2011-04-15 19:43 . 2011-04-15 19:43 245760 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\c854ff737035c79fdf1b56b95e28fdbc\WindowsFormsIntegration.ni.dll
+ 2011-04-15 19:43 . 2011-04-15 19:43 203264 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\a5a411ad346224240f40d5092c3700de\WindowsFormsIntegration.Design.ni.dll
+ 2011-04-15 17:42 . 2011-04-15 17:42 195584 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\c085fc0d222fb39afe14cc8e5eb32eee\UIAutomationTypes.ni.dll
+ 2011-04-15 19:43 . 2011-04-15 19:43 481792 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\974f99cb0c5b67484ce5a3fd1fc5e7dd\UIAutomationClient.ni.dll
+ 2011-04-15 17:41 . 2011-04-15 17:41 391680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\6d7c87b19bf40f2bc57ec4429b628c9a\System.Xml.Linq.ni.dll
+ 2011-04-15 17:43 . 2011-04-15 17:43 187904 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\21eb4743be4fdd8df5f0a9cd0dd52f5d\System.Windows.Input.Manipulations.ni.dll
+ 2011-04-15 19:42 . 2011-04-15 19:42 192512 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\506e5c072114a604751e589a03818287\System.Windows.Forms.DataVisualization.Design.ni.dll
+ 2011-04-15 17:42 . 2011-04-15 17:42 218624 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.RegularE#\4f6ed094f67cf65019b24b7ae4950047\System.Web.RegularExpressions.ni.dll
+ 2011-04-15 19:42 . 2011-04-15 19:42 858112 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\e48ad421c99a1dff1680d775abf7fdec\System.Web.Extensions.Design.ni.dll
+ 2011-04-15 19:42 . 2011-04-15 19:42 332288 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity\25f74ac76ed1a5762f05984a8e8f675c\System.Web.Entity.ni.dll
+ 2011-04-15 19:42 . 2011-04-15 19:42 296448 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity.D#\022f7f8e65394aab269df0a14f3f8757\System.Web.Entity.Design.ni.dll
+ 2011-04-15 19:42 . 2011-04-15 19:42 705536 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\c1a917d7d45e2e5731ab1a2c69bc3c79\System.Web.DynamicData.ni.dll
+ 2011-04-15 19:42 . 2011-04-15 19:42 256512 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\79696f4c00767d1db7c4a93b9e417359\System.Web.DataVisualization.Design.ni.dll
+ 2011-04-15 17:41 . 2011-04-15 17:41 645632 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\1fac5b5769af4e4dd0aa3f09d9834734\System.Transactions.ni.dll
+ 2011-04-15 17:42 . 2011-04-15 17:42 220672 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\4e5c6a1e261c43961b19f4712359234f\System.ServiceProcess.ni.dll
+ 2011-04-15 19:41 . 2011-04-15 19:41 421888 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\d1f5920c45a89d29bfcaaf3e913f5b43\System.ServiceModel.Activation.ni.dll
+ 2011-04-15 19:42 . 2011-04-15 19:42 365056 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\9fc58e83505ef6bf05a4529665c7737d\System.ServiceModel.Routing.ni.dll
+ 2011-04-15 17:37 . 2011-04-15 17:37 310272 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\7de8fccb064fff0d219e8594a014b600\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2011-04-15 17:41 . 2011-04-15 17:41 767488 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\585f1cfab91fc0c2c3e2a9f483a2a4a2\System.Runtime.Remoting.ni.dll
+ 2011-04-15 17:42 . 2011-04-15 17:42 239616 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Cach#\46ecc1e6de3fba31062fe27e5bc2ef9c\System.Runtime.Caching.ni.dll
+ 2011-04-15 19:41 . 2011-04-15 19:41 651264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\56158e581a3dfce8f930fe7388cfe156\System.Net.ni.dll
+ 2011-04-15 19:41 . 2011-04-15 19:41 625152 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\8b3e59239912537657fc7f9c6b88dd8a\System.Messaging.ni.dll
+ 2011-04-15 19:41 . 2011-04-15 19:41 392704 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\117067671949b80852b0a7c112888b7b\System.Management.Instrumentation.ni.dll
+ 2011-04-15 19:41 . 2011-04-15 19:41 405504 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\a483116d4df8444911c9d47fd99b8b95\System.IO.Log.ni.dll
+ 2011-04-15 19:41 . 2011-04-15 19:41 228352 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\3891b868ee83ca630686d547c328da31\System.IdentityModel.Selectors.ni.dll
+ 2011-04-15 17:41 . 2011-04-15 17:41 230912 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\547669d593c2ac7c94391e153ea6068f\System.EnterpriseServices.Wrapper.dll
+ 2011-04-15 17:41 . 2011-04-15 17:41 784896 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\547669d593c2ac7c94391e153ea6068f\System.EnterpriseServices.ni.dll
+ 2011-04-15 19:41 . 2011-04-15 19:41 911872 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\8a7ceaec74327e2be758e7291b8a5849\System.DirectoryServices.AccountManagement.ni.dll
+ 2011-04-15 17:42 . 2011-04-15 17:42 461824 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\698dd101afeceb8ffc4a435b9be82038\System.DirectoryServices.Protocols.ni.dll
+ 2011-04-15 19:41 . 2011-04-15 19:41 112128 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\65b4592d5d04a0c5b6f102f8d1e065e8\System.Device.ni.dll
+ 2011-04-15 19:41 . 2011-04-15 19:41 499712 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\1cebe528201f40151fb29cb835f76ef2\System.Data.Services.Design.ni.dll
+ 2011-04-15 17:43 . 2011-04-15 17:43 134656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\ee0a48c4f9340f1002baa71004a14932\System.Data.DataSetExtensions.ni.dll
+ 2011-04-15 17:42 . 2011-04-15 17:42 145920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\9a074aee02c2c27bd8a64bd39bb0f954\System.Configuration.Install.ni.dll
+ 2011-04-15 17:43 . 2011-04-15 17:43 193536 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\f02a6c23986ba9eee3699717437b0f94\System.ComponentModel.DataAnnotations.ni.dll
+ 2011-04-15 17:43 . 2011-04-15 17:43 613888 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\d5de48c1c29a8498c89ed5da48e40690\System.AddIn.ni.dll
+ 2011-04-15 17:43 . 2011-04-15 17:43 402944 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\d60de251f6401ab42fe195f6bf25ca73\System.Activities.DurableInstancing.ni.dll
+ 2011-04-15 17:37 . 2011-04-15 17:37 316928 c:\windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\d42aded7e797fe07a002cec27071b509\SMSvcHost.ni.exe
+ 2011-04-15 17:41 . 2011-04-15 17:41 142336 c:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\22f477b2dad8700e564daead57f5b825\SMDiagnostics.ni.dll
+ 2011-04-15 17:41 . 2011-04-15 17:41 164352 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\9f257744e1ddfc1d32ceff26235f3783\PresentationFramework.VisualStudio.Design.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 406528 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Windows.D#\2fbf9a8b4a30539d7dfcff66f04cfe3b\Microsoft.Windows.Design.Developer.WPF.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 196608 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\f3332ce79ebeef738f17077c5da9f2aa\Microsoft.VisualStudio.Language.Intellisense.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 917504 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\ed3e3f83071f01129217fbe063747b6c\Microsoft.VisualStudio.Shell.9.0.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 404480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\ea983747b074e37fbe6797e9d76985c8\Microsoft.VisualStudio.Text.UI.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 112128 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\e52cfa12ce6ed83340aa64355f84ed1f\Microsoft.VisualStudio.WCFReference.Interop.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 129536 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\dcbb61f6271264b7811d7bf9dbb7bd6a\Microsoft.VisualStudio.FileDiscovery.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 202752 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\d37da64e34567858b8971f215cf60d20\Microsoft.VisualStudio.Modeling.Sdk.Integration.10.0.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 266240 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\cc4790d0a917faaf5a8e718f3068e4ac\Microsoft.VisualStudio.TextTemplating.10.0.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 695808 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\b8ccfe9cb48f0e1214537c8163d913c6\Microsoft.VisualStudio.Diagnostics.Common.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 783872 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\b89ec9d70f964adc63a4ffa0cf9934d7\Microsoft.VisualStudio.ExtensibilityHosting.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 198144 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\af4d1c0e928538a32e2113c4051fceb0\Microsoft.VisualStudio.TemplateWizard.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 846336 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\9ceeb97b38e0418f7b9a6590dd004079\Microsoft.VisualStudio.Shell.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 284160 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\7cb198d226f0ece44e655aaf5f483104\Microsoft.VisualStudio.Text.UI.Wpf.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 207360 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\6fc0bfe82d23ee85058f86bb9c131df8\Microsoft.VisualStudio.Language.GenerateType.Implementation.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 432640 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\67002aaaab6ab9712872db4b0038bfac\Microsoft.VisualStudio.Text.Data.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 273408 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\555b27254a334df2245125b6ab6a391f\Microsoft.VisualStudio.Text.Logic.ni.dll
+ 2011-04-15 17:38 . 2011-04-15 17:38 912896 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\51890eb5c3dc355570ab000eefe574b8\Microsoft.VisualStudio.AppDesigner.ni.dll
+ 2011-04-15 17:38 . 2011-04-15 17:38 306688 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\47a47570ea710652ff1d2bf4092681bf\Microsoft.VisualStudio.ComponentModelHost.Implementation.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 552448 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\4611836b55595325073f3177c1f7ef92\Microsoft.VisualStudio.Dialogs.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 272896 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\451153143d150bd99e36afef22ba7751\Microsoft.VisualStudio.CSharp.SmartTags.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 147968 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\430a358fe790d08cbf27ec8046166ee2\Microsoft.VisualStudio.WizardFramework.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 255488 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\3f8e13bb7dcd1344e5f4b2f0f94de13d\Microsoft.VisualStudio.TextTemplating.VSHost.10.0.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 115200 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\25bc3e2efa2103286cbb5c5fedb8841d\Microsoft.VisualStudio.Text.Internal.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 223744 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\1bd2f609695aaad77a0cb98850961cc8\Microsoft.VisualStudio.ExtensionsExplorer.UI.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 309760 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\0fe24dc92236190c3c47a89f597077c0\Microsoft.VisualStudio.Configuration.ni.dll
+ 2011-04-15 17:38 . 2011-04-15 17:38 812544 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\0e91616c50ffbfdf87ceacd8c1e6642f\Microsoft.VisualStudio.ni.dll
+ 2011-04-15 17:38 . 2011-04-15 17:38 302592 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\b712187c3f99b10d824905380eaabcf1\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2011-04-15 17:38 . 2011-04-15 17:38 418304 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\a78fa250714cf42472bc22d0b7ea14e5\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2011-04-15 17:38 . 2011-04-15 17:38 752128 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Data.Sche#\feca7885ab9cbb778dacc75f7f5c1972\Microsoft.Data.Schema.Utilities.ni.dll
+ 2011-04-15 17:37 . 2011-04-15 17:37 629248 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Uti#\9c42659b778392df8680d350075a2e5b\Microsoft.Build.Utilities.v4.0.ni.dll
+ 2011-04-15 17:37 . 2011-04-15 17:37 135680 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Con#\c9519340c17ccff490727172072a7ff7\Microsoft.Build.Conversion.v4.0.ni.dll
+ 2011-04-15 17:37 . 2011-04-15 17:37 193024 c:\windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\e665571fbfd43f6f3f715b715dd01f14\CustomMarshalers.ni.dll
+ 2011-04-15 17:26 . 2011-04-15 17:26 5060608 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\9dc9f4b88ccbc7c26faaf073368d10e8\WindowsBase.ni.dll
+ 2011-04-15 17:36 . 2011-04-15 17:36 1424896 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClients#\1baece3209975181c5fa1c851d24e86c\UIAutomationClientsideProviders.ni.dll
+ 2011-04-15 17:24 . 2011-04-15 17:24 6972928 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml\09aeb4c336ecf6237674e72fdc915292\System.Xml.ni.dll
+ 2011-04-15 17:25 . 2011-04-15 17:25 2406400 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xaml\2c08c18315f43e0774546863c18268b6\System.Xaml.ni.dll
+ 2011-04-15 17:36 . 2011-04-15 17:36 1564160 c:\windows\assembly\NativeImages_v4.0.30319_64\System.WorkflowServ#\0cdb981aba87057a3ec9cc4f8fd5e68c\System.WorkflowServices.ni.dll
+ 2011-04-15 17:36 . 2011-04-15 17:36 2758144 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Run#\7c4bfb84bceb34ebf538016702c348a0\System.Workflow.Runtime.ni.dll
+ 2011-04-15 17:36 . 2011-04-15 17:36 5749760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Com#\ce3f203ca4c95a1d86c9f5ce2a1efbc6\System.Workflow.ComponentModel.ni.dll
+ 2011-04-15 17:36 . 2011-04-15 17:36 3664384 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Act#\06eacff5942cc03ca91572fa3e9ac042\System.Workflow.Activities.ni.dll
+ 2011-04-15 17:36 . 2011-04-15 17:36 5587456 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\541d06f19794895241928a8851408c6b\System.Windows.Forms.DataVisualization.ni.dll
+ 2011-04-15 17:29 . 2011-04-15 17:29 2268160 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Services\5882cb1a5a98d50961e980dadc2130ff\System.Web.Services.ni.dll
+ 2011-04-15 17:35 . 2011-04-15 17:35 2925568 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Mobile\c5de00037d0766d4ac16c76659ad7471\System.Web.Mobile.ni.dll
+ 2011-04-15 17:35 . 2011-04-15 17:35 1083392 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Extensio#\b94ba4f1bf90c3787570e1f00bd25cff\System.Web.Extensions.Design.ni.dll
+ 2011-04-15 17:34 . 2011-04-15 17:34 3732992 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Extensio#\39f9131a8a1da1c634f1876147c4141a\System.Web.Extensions.ni.dll
+ 2011-04-15 17:35 . 2011-04-15 17:35 5501952 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DataVisu#\53a285ec2596e15762ac4d9e276b7932\System.Web.DataVisualization.ni.dll
+ 2011-04-15 17:35 . 2011-04-15 17:35 2653696 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Speech\a0c5a5a8c3579c1692385eac048b7350\System.Speech.ni.dll
+ 2011-04-15 17:33 . 2011-04-15 17:33 1426944 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\ec50ca796d8c0d028d3f5c5c7b4aa71a\System.ServiceModel.Web.ni.dll
+ 2011-04-15 17:34 . 2011-04-15 17:34 1885184 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\cbe6b184d880020ef9fea96347d3b10a\System.ServiceModel.Activities.ni.dll
+ 2011-04-15 17:35 . 2011-04-15 17:35 1547776 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\365472df290a28ed18da91dca8cc712b\System.ServiceModel.Discovery.ni.dll
+ 2011-04-15 17:28 . 2011-04-15 17:28 3375616 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\0877eb3e6ef55103312dc8ba3dc5245d\System.Runtime.Serialization.ni.dll
+ 2011-04-15 17:28 . 2011-04-15 17:28 1327616 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Dura#\5ec79675d490aec86462f3eb24da5459\System.Runtime.DurableInstancing.ni.dll
+ 2011-04-15 17:31 . 2011-04-15 17:31 1396224 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Printing\4851db77ca90ae967b23e188d1d5630e\System.Printing.ni.dll
+ 2011-04-15 17:34 . 2011-04-15 17:34 1438720 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management\aa26202cb958ed3d8e768a77599a5839\System.Management.ni.dll
+ 2011-04-15 17:34 . 2011-04-15 17:34 1401856 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityModel\2732fbe9f3ed7212b80cb989f716e5a3\System.IdentityModel.ni.dll
+ 2011-04-15 17:28 . 2011-04-15 17:28 1051136 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\4fa6feeaa9c0961acda505abdd7298c2\System.EnterpriseServices.ni.dll
+ 2011-04-15 17:28 . 2011-04-15 17:28 2248192 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\a6927eb868b45e595123549eb33e709b\System.Drawing.ni.dll
+ 2011-04-15 17:35 . 2011-04-15 17:35 1193472 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\e0b4f1d645805f5b7d9848e80509003d\System.DirectoryServices.AccountManagement.ni.dll
+ 2011-04-15 17:28 . 2011-04-15 17:28 1587200 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\de321120508ef1a53dbf3c169d6216d1\System.DirectoryServices.ni.dll
+ 2011-04-15 17:30 . 2011-04-15 17:30 2353152 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Deployment\67732c66b4db4c82333de18685455e55\System.Deployment.ni.dll
+ 2011-04-15 17:29 . 2011-04-15 17:29 8485376 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data\501f793a47e8873fd7d017650658f55c\System.Data.ni.dll
+ 2011-04-15 17:24 . 2011-04-15 17:24 3323392 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.SqlXml\5f447dc1bfea82509dd474bdfb528ce5\System.Data.SqlXml.ni.dll
+ 2011-04-15 17:33 . 2011-04-15 17:33 2636800 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Services\d77e1b6c3ccb14ea670e991b0399e294\System.Data.Services.ni.dll
+ 2011-04-15 17:34 . 2011-04-15 17:34 1750016 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Service#\33067ffbeaf66c7ab78a0d2b6daf2cf0\System.Data.Services.Client.ni.dll
+ 2011-04-15 17:30 . 2011-04-15 17:30 1481728 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.OracleC#\6d52f094c696fcc63605a7ecc0f69474\System.Data.OracleClient.ni.dll
+ 2011-04-15 17:33 . 2011-04-15 17:33 3320832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Linq\c19945497aa308f593cf182dc862be9b\System.Data.Linq.ni.dll
+ 2011-04-15 17:33 . 2011-04-15 17:33 1694720 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity.#\f009a4a6f19c36eda7b0b85d88414dae\System.Data.Entity.Design.ni.dll
+ 2011-04-15 17:24 . 2011-04-15 17:24 1247232 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\e4ebe73ce507eba626d0b198568371dd\System.Configuration.ni.dll
+ 2011-04-15 17:31 . 2011-04-15 17:31 5633536 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities\b090d846e0e186c63f73c07fba39cab4\System.Activities.ni.dll
+ 2011-04-15 17:31 . 2011-04-15 17:31 4817408 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.P#\a53bf4cb16ff6459ac44b41f9d1372b5\System.Activities.Presentation.ni.dll

[domitea]

+ 2011-04-15 17:31 . 2011-04-15 17:31 1948160 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.C#\1868640986b129262f0094407666330f\System.Activities.Core.Presentation.ni.dll
+ 2011-04-15 17:31 . 2011-04-15 17:31 3910656 c:\windows\assembly\NativeImages_v4.0.30319_64\ReachFramework\311a3ca673e6366fe0ab181f9b76e0be\ReachFramework.ni.dll
+ 2011-04-15 17:28 . 2011-04-15 17:28 1987584 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationUI\559817d3613bfd3fb3a0aa261b892be0\PresentationUI.ni.dll
+ 2011-04-15 17:26 . 2011-04-15 17:26 1861632 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationBuildTa#\3fa43d6fb38c2e1e092448e21874503d\PresentationBuildTasks.ni.dll
+ 2011-04-15 17:26 . 2011-04-15 17:26 1821696 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\70714b30a1a8741f353be5ae62c146d8\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2011-04-15 17:26 . 2011-04-15 17:26 2269696 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\6a6098e5bef4eb29b7e0c4fdd83fea6b\Microsoft.VisualBasic.ni.dll
+ 2011-04-15 17:26 . 2011-04-15 17:26 1612800 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\379bcca927c177470d96ab6ca296ba52\Microsoft.VisualBasic.Activities.Compiler.ni.dll
+ 2011-04-15 17:26 . 2011-04-15 17:26 1490944 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\276dc5052b36548fba49544c4efa7ac6\Microsoft.Transactions.Bridge.ni.dll
+ 2011-04-15 17:34 . 2011-04-15 17:34 3288064 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.JScript\e9795ad3782ba917640cfd93379b387b\Microsoft.JScript.ni.dll
+ 2011-04-15 17:26 . 2011-04-15 17:26 1968640 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.CSharp\97efa02b74efa644ed98cbf309d6ccb2\Microsoft.CSharp.ni.dll
+ 2011-04-15 17:25 . 2011-04-15 17:25 5853184 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build\5cef31560f5bea2d661bbdb18e07d751\Microsoft.Build.ni.dll
+ 2011-04-15 17:31 . 2011-04-15 17:31 3726848 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Tas#\a6ea2bcd14a3db108473838ca334134e\Microsoft.Build.Tasks.v4.0.ni.dll
+ 2011-04-15 17:25 . 2011-04-15 17:25 2490880 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Eng#\bc09c3c0c4cf0a856623593fb0ede836\Microsoft.Build.Engine.ni.dll
+ 2011-04-15 19:43 . 2011-04-15 19:43 3981824 c:\windows\assembly\NativeImages_v4.0.30319_32\VsDebugPresentation#\12b455e2d84c49e7b5c33a67aeb1de02\VsDebugPresentationPackage.ni.dll
+ 2011-04-15 19:43 . 2011-04-15 19:43 1055744 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\28121866e3d6d8b0dc72d9e250b0af1c\UIAutomationClientsideProviders.ni.dll
+ 2011-04-15 17:44 . 2011-04-15 17:44 2008576 c:\windows\assembly\NativeImages_v4.0.30319_32\Temp\a24-0\System.Data.Services.dll
+ 2011-04-15 17:37 . 2011-04-15 17:37 1776640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\738a078bc59722d6b06b5ae5e99569f9\System.Xaml.ni.dll
+ 2011-04-15 19:43 . 2011-04-15 19:43 1203712 c:\windows\assembly\NativeImages_v4.0.30319_32\System.WorkflowServ#\304d3a73f1164fd6a479d2ce3ce92eeb\System.WorkflowServices.ni.dll
+ 2011-04-15 19:43 . 2011-04-15 19:43 1956352 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Run#\2ad10d83d89a523c6de788549af858d7\System.Workflow.Runtime.ni.dll
+ 2011-04-15 19:42 . 2011-04-15 19:42 4428800 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Com#\8195c01c967fc24ccb087de40259b8f9\System.Workflow.ComponentModel.ni.dll
+ 2011-04-15 19:42 . 2011-04-15 19:42 2839552 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Act#\2d7c20df276d8353c5816f4bc765859d\System.Workflow.Activities.ni.dll
+ 2011-04-15 19:42 . 2011-04-15 19:42 4496384 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\eec21f9b08bbed54d9e36038badaf289\System.Windows.Forms.DataVisualization.ni.dll
+ 2011-04-15 17:42 . 2011-04-15 17:42 1864704 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\9a95136bec3e5267c7577404920d1d45\System.Web.Services.ni.dll
+ 2011-04-15 19:42 . 2011-04-15 19:42 2324992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Mobile\12fe8461716ebb37f3c239be705a3346\System.Web.Mobile.ni.dll
+ 2011-04-15 19:41 . 2011-04-15 19:41 3079168 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\aeb23319f1c21615a69b9dabb3eed1e5\System.Web.Extensions.ni.dll
+ 2011-04-15 19:42 . 2011-04-15 19:42 4429312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\5eb25b0fc92317024404b1c2f2c47e01\System.Web.DataVisualization.ni.dll
+ 2011-04-15 19:42 . 2011-04-15 19:42 1992192 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Speech\01a3b3bf7fadd971e17400c8502ec886\System.Speech.ni.dll
+ 2011-04-15 19:40 . 2011-04-15 19:40 1046528 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\809ed279c5eecfa3e211dfe4c3d891e1\System.ServiceModel.Web.ni.dll
+ 2011-04-15 19:42 . 2011-04-15 19:42 1127424 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\6856341eadab4c3ace0e39182649bba2\System.ServiceModel.Discovery.ni.dll
+ 2011-04-15 19:41 . 2011-04-15 19:41 1388032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\4048a5620b0fa66a7414cff30155d30c\System.ServiceModel.Activities.ni.dll
+ 2011-04-15 17:41 . 2011-04-15 17:41 2625024 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\c46375bba06671d2a9369e630752987a\System.Runtime.Serialization.ni.dll
+ 2011-04-15 17:41 . 2011-04-15 17:41 1011200 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\6b6309a2e7f384bac4ccbdf1eca34c30\System.Runtime.DurableInstancing.ni.dll
+ 2011-04-15 17:43 . 2011-04-15 17:43 1047040 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\24f97354b0a95ef77b2db8de9e7374fe\System.Printing.ni.dll
+ 2011-04-15 19:41 . 2011-04-15 19:41 1159168 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management\05a0937d76f565aa728348fc24f6c2eb\System.Management.ni.dll
+ 2011-04-15 19:41 . 2011-04-15 19:41 1065984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\1f045fc92d6402b27f6b9fb9291d44c3\System.IdentityModel.ni.dll
+ 2011-04-15 17:41 . 2011-04-15 17:41 1151488 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\6dc0ed081400ec315f895bdc7fd016c4\System.DirectoryServices.ni.dll
+ 2011-04-15 17:37 . 2011-04-15 17:37 1872384 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\2a2a921350a9651e9bd681197edeb88d\System.Deployment.ni.dll
+ 2011-04-15 19:40 . 2011-04-15 19:40 2008576 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Services\f6a18d8564d85567667671e65c1fac93\System.Data.Services.ni.dll
+ 2011-04-15 19:41 . 2011-04-15 19:41 1332736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\aa778d274523b93d389e581e58698918\System.Data.Services.Client.ni.dll
+ 2011-04-15 17:42 . 2011-04-15 17:42 1183744 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.OracleC#\f1dd156de604f1a10aeea7108afd5e1f\System.Data.OracleClient.ni.dll
+ 2011-04-15 17:44 . 2011-04-15 17:44 1398272 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity.#\579e5f92bb6bcc68549c796d2650ea8c\System.Data.Entity.Design.ni.dll
+ 2011-04-15 17:43 . 2011-04-15 17:43 4103168 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities\ec488a50a47246a625159744ad8e0931\System.Activities.ni.dll
+ 2011-04-15 17:43 . 2011-04-15 17:43 3691520 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\00fb4f96c610880aeee34d8670347a6d\System.Activities.Presentation.ni.dll
+ 2011-04-15 17:43 . 2011-04-15 17:43 1506304 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\a965a0f825fb91ce7cf78d99263968b4\System.Activities.Core.Presentation.ni.dll
+ 2011-04-15 17:43 . 2011-04-15 17:43 2842624 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\3f04b2ab8961aceac03f8ae2ccabe947\ReachFramework.ni.dll
+ 2011-04-15 17:41 . 2011-04-15 17:41 1622528 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\3aebfb1497141c9466ee8ce68a3bf805\PresentationUI.ni.dll
+ 2011-04-15 17:41 . 2011-04-15 17:41 1467904 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationBuildTa#\04c896ef9acdfb2e0f068d78f3bb2dfc\PresentationBuildTasks.ni.dll
+ 2011-04-15 17:41 . 2011-04-15 17:41 3270656 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.XmlEditor\3ae6b72ef5213965fce3e956ff1bcc4b\Microsoft.XmlEditor.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 1336832 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Windows.D#\8dfb39ca8706c561ba5e2e4e25e6e2cb\Microsoft.Windows.Design.Platform.WPF.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 2823680 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Windows.D#\6b4723eae4a37064f18fa3cadea38f1b\Microsoft.Windows.Design.Developer.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 2540544 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Windows.D#\52f11c2128ab18c300d9f0f3ca4085e6\Microsoft.Windows.Design.Markup.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 2849280 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Windows.D#\1f3b71ce1529313c2e3c4516718f7b57\Microsoft.Windows.Design.Platform.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 6846976 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\fa32dabdaa486d4b89002c6112c27676\Microsoft.VisualStudio.CSharp.Services.Language.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 1167872 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\dcb5cb079a14ba6661fed6760bef0047\Microsoft.VisualStudio.Modeling.Sdk.Shell.10.0.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 1361408 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\c72b92d9db629b5106994b12dbbd7c0f\Microsoft.VisualStudio.ExtensionManager.Implementation.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 5988352 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\b88ee773daae367076d468c766b5523e\Microsoft.VisualStudio.Editors.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 1418240 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\a97ee585179b57dcb82137fb4c3097f5\Microsoft.VisualStudio.Modeling.Sdk.Diagrams.GraphObject.10.0.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 1846272 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\a289266cd949109b9afc154c39f6f42b\Microsoft.VisualStudio.Shell.UI.Internal.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 6972928 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\94efc41670dac4baa72119025ef531a6\Microsoft.VisualStudio.Xaml.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 1455616 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\8f5420ec5377d27e91f407fc7e7bb84a\Microsoft.VisualStudio.Shell.Design.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 1808896 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\818075e9a1456734a8954c6babcefb11\Microsoft.VisualStudio.Design.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 5496320 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\784a87f4834d28496aaf3a7c8277d271\Microsoft.VisualStudio.Platform.VSEditor.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 1286144 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\72df832f029e41aad2f0f8dcb1aa19b5\Microsoft.VisualStudio.Shell.ViewManager.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 2629632 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\71061016ff2fc8a8110f366c2b12f809\Microsoft.VisualStudio.Editor.Implementation.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 2872320 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\5af4e3020a3cf9c75957e77cdbee0dbe\Microsoft.VisualStudio.Modeling.Sdk.Diagrams.10.0.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 2689024 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\528d1a66f5b42af976122efe9b0a9633\Microsoft.VisualStudio.Shell.10.0.ni.dll
+ 2011-04-15 17:38 . 2011-04-15 17:38 1150464 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\517b861b68f77284bd515d290fdb7907\Microsoft.VisualStudio.CommonIDE.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 1030144 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\3ab05f5a5f3bf158def86cb3ac536e68\Microsoft.VisualStudio.VirtualTreeGrid.ni.dll
+ 2011-04-15 17:39 . 2011-04-15 17:39 2266624 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\2c469fcf2059b53bc3a22a8ddb358e4d\Microsoft.VisualStudio.Modeling.Sdk.10.0.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 1312256 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\1643b040d1ec4199b4a8e37dbb0e858e\Microsoft.VisualStudio.Windows.Forms.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 2322432 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\07058f36e32ccf6abe8337689ac0d0d7\Microsoft.VisualStudio.Platform.WindowManagement.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 1579008 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\036d7cd4f4ed22b7de4863bb32348501\Microsoft.VisualStudio.Shell.StartPage.ni.dll
+ 2011-04-15 17:38 . 2011-04-15 17:38 1819648 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\ff572ca3a119cd72903df8c6ed667b62\Microsoft.VisualBasic.ni.dll
+ 2011-04-15 17:38 . 2011-04-15 17:38 1135104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\c454984474d9b5ec98faf99805e45bed\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2011-04-15 17:38 . 2011-04-15 17:38 1167872 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\320f1578082f1de1f8562ce92c0c2dab\Microsoft.VisualBasic.Activities.Compiler.ni.dll
+ 2011-04-15 17:38 . 2011-04-15 17:38 1079808 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\ac03be8a96bd10965da87208d81eb07d\Microsoft.Transactions.Bridge.ni.dll
+ 2011-04-15 19:41 . 2011-04-15 19:41 2441728 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\d4572ad085979b16261058f1433e73e9\Microsoft.JScript.ni.dll
+ 2011-04-15 17:37 . 2011-04-15 17:37 2666496 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Data.Sche#\c60eb873c7f8ee917dc6cfdf2add7ebc\Microsoft.Data.Schema.ni.dll
+ 2011-04-15 17:38 . 2011-04-15 17:38 1031168 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Data.Sche#\05f59edc05d0543dfe0a5481fe03f227\Microsoft.Data.Schema.Generators.Sql.ni.dll
+ 2011-04-15 17:37 . 2011-04-15 17:37 4226560 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build\9eb482fd45d38ed674a400e280532e83\Microsoft.Build.ni.dll
+ 2011-04-15 17:37 . 2011-04-15 17:37 2850816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Tas#\dfdc36ac2dd7d51f61a05e15fe35c721\Microsoft.Build.Tasks.v4.0.ni.dll
+ 2011-04-15 17:37 . 2011-04-15 17:37 1914368 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Eng#\bb1cb4e6b20acc14abb6850cd4eecd0a\Microsoft.Build.Engine.ni.dll
+ 2011-04-15 17:30 . 2011-04-15 17:30 17046528 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\89ddcbe739742a3f73f41bcb7f0edb80\System.Windows.Forms.ni.dll
+ 2011-04-15 17:29 . 2011-04-15 17:29 15508480 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web\a32ded15e5b1ba87b442a507fd6f1163\System.Web.ni.dll
+ 2011-04-15 17:34 . 2011-04-15 17:34 24146944 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel\4dea6e07f4fd5017aff0ee8e9fd4ffc0\System.ServiceModel.ni.dll
+ 2011-04-15 17:30 . 2011-04-15 17:30 13076480 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Design\e4f11109f023eaf0806f37999f42fa9b\System.Design.ni.dll
+ 2011-04-15 17:33 . 2011-04-15 17:33 18089472 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity\4c79cc6f58d9abfa97649b19db76448c\System.Data.Entity.ni.dll
+ 2011-04-15 17:25 . 2011-04-15 17:25 10199552 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Core\0f8acbbcf441aa1668be9caec43c8cda\System.Core.ni.dll
+ 2011-04-15 17:28 . 2011-04-15 17:28 22967808 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\af51c794f48eeb736b92d9887b35dfff\PresentationFramework.ni.dll
+ 2011-04-15 17:27 . 2011-04-15 17:27 14810112 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\8af70bf74f77932786db0d4a4fce0ccc\PresentationCore.ni.dll
+ 2011-04-15 17:42 . 2011-04-15 17:42 11917312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web\cbb8ea4c34417e0f8bb28173fa144b15\System.Web.ni.dll
+ 2011-04-15 19:40 . 2011-04-15 19:40 17919488 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\8964b15d32028ef9dfe776216af8524d\System.ServiceModel.ni.dll
+ 2011-04-15 17:44 . 2011-04-15 17:44 13273600 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\38409bc0ee7cdb9fbc981fefea83ab23\System.Data.Entity.ni.dll
+ 2011-04-15 17:40 . 2011-04-15 17:40 10504704 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VSDesigner\a558b902a9d469b1ad8f5a885f7fd0d9\Microsoft.VSDesigner.ni.dll
+ 2011-04-15 17:38 . 2011-04-15 17:38 10202624 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Data.Sche#\d368bf7ee8c291db338e8449be239970\Microsoft.Data.Schema.ScriptDom.Sql.ni.dll
+ 2011-04-15 17:38 . 2011-04-15 17:38 14960128 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Data.Sche#\bec3655226afd5a27e0e802519063a8d\Microsoft.Data.Schema.Sql.ni.dll
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Handy Start Menu"="d:\program files\Handy Start Menu\HandyStartMenu.exe" [2011-02-28 2701056]
"PC Suite Tray"="d:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2010-05-14 1479680]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"UpdateLBPShortCut"="c:\program files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"UpdateP2GoShortCut"="c:\program files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2009-10-27 6998656]
"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2009-08-20 170624]
"HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"CLMLServer"="c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe" [2009-11-02 103720]
"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
FancyStart daemon.lnk - c:\windows\Installer\{F0DF4513-3C4C-4EB8-8012-2C5F70AF3988}\_A1DDD39913A1970387B7B3.exe [2010-3-23 12862]
SRS Premium Sound.lnk - c:\windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe [2010-3-23 156952]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-03-23 135664]
R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2010-10-07 1436424]
R3 nmwcdx64;Nokia USB Phone Parent;c:\windows\system32\drivers\ccdcmbx64.sys [x]
R3 RDPDISPM;RDPDISPM;c:\windows\system32\DRIVERS\rdpdispm.sys [x]
R3 RTL2832U_IRHID;HID Infrared Remote Receiver;c:\windows\system32\DRIVERS\RTL2832U_IRHID.sys [2009-10-05 44320]
R3 RTL2832UBDA;REALTEK 2832U BDA Driver;c:\windows\system32\drivers\RTL2832UBDA.sys [2010-07-01 224488]
R3 RTL2832UUSB;REALTEK 2832U USB Driver;c:\windows\system32\Drivers\RTL2832UUSB.sys [2010-07-01 39016]
R3 SaiK0836;SaiK0836;c:\windows\system32\DRIVERS\SaiK0836.sys [x]
R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\DRIVERS\wacmoumonitor.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys [x]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe [x]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-03 15416]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [2010-04-07 810120]
S2 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [x]
S2 mitsijm2011;Správce úloh aplikace Autodesk Moldflow Inventor Tool Suite Integration 2011;d:\program files\Autodesk\Inventor 2011\Moldflow\bin\mitsijm.exe [2010-01-23 673792]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\windows\SysWOW64\nvSCPAPISvr.exe [2009-12-11 239208]
S2 TabletServicePen;TabletServicePen;c:\program files\Tablet\Pen\Pen_Tablet.exe [2010-10-13 5790064]
S2 TouchServicePen;Wacom Consumer Touch Service;c:\program files\Tablet\Pen\Pen_TouchService.exe [2010-10-13 487280]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [x]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [x]
S3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
.
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"
[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]
2009-11-26 05:49 70656 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{64174815-8D98-4CE6-8646-4C039977D808}"
[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]
2009-11-26 05:49 70656 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ASUS WebStorage"="c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe" [2009-12-24 1736704]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-12-11 16414824]
"ETDWare"="c:\program files\Elantech\ETDCtrl.exe" [2009-09-30 621440]
"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2009-09-01 323584]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2010-04-07 2839840]
"SaiMfd"="c:\program files\Saitek\SD6\Software\SaiMfd.exe" [2009-06-03 194560]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B9A09F18-45AB-4F09-A117-A4ADDA8FA8C8}]
@Denied: (A) (Everyone)
"Solution"="{36eb6792-3a29-43b3-8cd0-f67d266fb426}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane\0]
"Key"="ActionsPane"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\8.0\\ActionsPane.xsd"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
c:\program files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
c:\program files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\program files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\program files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
c:\program files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
c:\program files (x86)\ASUS\SmartLogon\sensorsrv.exe
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
c:\program files (x86)\PC Connectivity Solution\ServiceLayer.exe
c:\program files (x86)\PC Connectivity Solution\Transports\NclRSSrv.exe
c:\program files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
c:\windows\AsScrPro.exe
d:\progra~1\stickies\stickies.exe
.
**************************************************************************
.
Celkový čas: 2011-04-15 22:28:55 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-04-15 20:28
ComboFix2.txt 2011-04-15 17:51
.
Před spuštěním: Volných bajtů: 15 015 989 248
Po spuštění: Volných bajtů: 15 334 051 840
.
- - End Of File - - 44B454C78E4370ADE8FA6F4DE55DBFB6

[domitea]

VirusTotal

http://www.virustotal.com/file-scan/rep ... 1302892226
http://www.virustotal.com/file-scan/rep ... 1302892294
http://www.virustotal.com/file-scan/rep ... 1302892402

[Žbeky]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Kód: Vybrat vše

KillAll::

DeQuarantine::
C:\Qoobox\Quarantine\c\windows\SysWow64\system32\DRIVERS

Quit::


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu

[domitea]

C:\Qoobox\Quarantine\c\windows\SysWow64\system32\DRIVERS\RTL2832UBDA.sys -> C:\windows\SysWow64\system32\DRIVERS\RTL2832UBDA.sys
C:\Qoobox\Quarantine\c\windows\SysWow64\system32\DRIVERS\RTL2832UUSB.sys -> C:\windows\SysWow64\system32\DRIVERS\RTL2832UUSB.sys
C:\Qoobox\Quarantine\c\windows\SysWow64\system32\DRIVERS\RTL2832U_IRHID.sys -> C:\windows\SysWow64\system32\DRIVERS\RTL2832U_IRHID.sys
Zkopˇrovan‚ soubory: 3

[Žbeky]

Paráda. Zkus jestli ti funguje TV karta.