prosim o kontrolu logu

Feroo · Příspěvekod **Feroo** » 10 zář 2011 18:41

na doporuceni z viewtopic.php?f=72&t=73185

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:39:21, on 10.9.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\David\Plocha\RSIT.exe
C:\Program Files\trend micro\David.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.toggle.com/en/index.php?rvs=hompag
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.toggle.com/en/index.php?rvs=hompag
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://mxclock.maydesign.eu/?ver=1.1.4&edt=3
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: DeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\WINDOWS\system32\dvmurl.dll
O2 - BHO: SuggestMeYesBHO - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files\AutocompletePro\AutocompletePro.dll (file missing)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: LinkAirBrowserHelper HistoryTriggerBHO - {21A88CB9-84D2-4020-A2D1-B25A21034884} - C:\Documents and Settings\David\Plocha\LG PC Suite IV\LinkAir\LinkAirBrowserHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Adobe Reader\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PCSpeedUp] C:\Program Files\Zrychleni Pocitace\PCSpeedUp.lnk
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\FlashUtil10k_ActiveX.exe -update activex (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\FlashUtil10k_ActiveX.exe -update activex (User 'Default user')
O4 - Startup: Obsah aplikace OneNote.onetoc2
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: ES lite Service for program management. (ES lite Service) - Unknown owner - C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

--
End of file - 8148 bytes

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\David\Data aplikací\Mozilla\Firefox\Profiles\lqn6i1lp.default

prefs.js - "browser.startup.homepage" - "http://google.cz/"
prefs.js - "extensions.enabledItems" - "{b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.1, {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}:6.0.18, jqs@sun.com:1.0, {2ad7e043-d360-bdbf-0fba-8c83cdade280}:4.6.6.6, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.6"
prefs.js - "keyword.URL" - "http://flvdirect.iamwired.net/websearch.php?src=tops&search="

"{4B3803EA-5230-4DC3-A7FC-33638F3D3542}"=C:\Program Files\Crawler\Toolbar\firefox\
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

C:\Program Files\Mozilla Firefox\extensions\
{2ad7e043-d360-bdbf-0fba-8c83cdade280}
{800b5000-a755-47e1-992b-48a1c1357f07}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
aboutCertError.js
aboutPrivateBrowsing.js
aboutRights.js
aboutRobots.js
aboutSessionRestore.js
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
compreg.dat
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsHandlerService.js
nsHelperAppDlg.js
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPostUpdateWin.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js
xpti.dat

C:\Program Files\Mozilla Firefox\plugins\
npdeploytk.dll
npnul32.dll
NPOFF12.DLL
nppdf32.dll

C:\Program Files\Mozilla Firefox\searchplugins\
crawlersrch.xml
google.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\David\Data aplikací\Mozilla\Firefox\Profiles\lqn6i1lp.default\extensions\
{88c7f2aa-f93f-432c-8f0e-b7d85967a527}
{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}

C:\Documents and Settings\David\Data aplikací\Mozilla\Firefox\Profiles\lqn6i1lp.default\searchplugins\
daemon-search.xml
icqplugin.xml
Search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}]
AC-Pro - C:\Program Files\AutocompletePro\AutocompletePro.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
C:\PROGRA~1\Crawler\Toolbar\ctbr.dll [2009-12-15 1218000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{21A88CB9-84D2-4020-A2D1-B25A21034884}]
HistoryTriggerBHO Class - C:\Documents and Settings\David\Plocha\LG PC Suite IV\LinkAir\LinkAirBrowserHelper.dll [2011-01-13 35688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-18 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-03-18 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2009-10-30 1019336]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler lišta - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll [2009-12-15 1218000]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-01-13 18084864]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-08-13 98304]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"SpywareTerminator"=C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2010-04-14 2176512]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"Adobe Reader Speed Launcher"=D:\Adobe Reader\Reader\Reader_sl.exe [2011-01-31 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-21 932288]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]
"SpywareTerminatorUpdate"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2009-12-26 3037696]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2006-10-09 139264]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"PCSpeedUp"=C:\Program Files\Zrychleni Pocitace\PCSpeedUp.lnk [2011-08-28 2013]

C:\Documents and Settings\David\Nabídka Start\Programy\Po spuštění
Obsah aplikace OneNote.onetoc2
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2009-08-14 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"D:\ICQ6.5\ICQ.exe"="D:\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"D:\Quake 3\quake3.exe"="D:\Quake 3\quake3.exe:*:Enabled:quake3"
"C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"="C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe:*:Enabled:Crawler Spyware Terminator"
"D:\Warcraft 3\Warcraft III\Warcraft III.exe"="D:\Warcraft 3\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III"
"D:\Battlefield 2\BF2.exe"="D:\Battlefield 2\BF2.exe:*:Enabled:Battlefield 2"
"D:\CENZURA\aTube Catcher 2.0\yct.exe"="D:\CENZURA\aTube Catcher 2.0\yct.exe:*:Enabled:aTube Catcher to download and convert videos."
"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Opera 11.10 beta\opera.exe"="C:\Program Files\Opera 11.10 beta\opera.exe:*:Enabled:Opera Internet Browser"
"D:\Warcraft 3\Warcraft III\War3.exe"="D:\Warcraft 3\Warcraft III\War3.exe:*:Enabled:Warcraft III"
"C:\Documents and Settings\David\Plocha\Garena\Garena.exe"="C:\Documents and Settings\David\Plocha\Garena\Garena.exe:*:Enabled:Garena"
"C:\Program Files\DsNET Corp\aTube Catcher 2.0\yct.exe"="C:\Program Files\DsNET Corp\aTube Catcher 2.0\yct.exe:*:Enabled:aTube Catcher to download and convert videos."

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\Temp\ms0cfg32.exe"="C:\WINDOWS\Temp\ms0cfg32.exe:*:Enabled:Application Layer Gateway Service"
"C:\WINDOWS\system32\lsass.exe"="C:\WINDOWS\system32\lsass.exe:*:Enabled:LSA Shell"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.FFDS"=C:\PROGRA~1\COMBIN~1\Filters\FFDShow\ff_vfw.dll
"VIDC.FMVC"=fmcodec.dll

======List of files/folders created in the last 1 month======

2011-09-10 10:14:12 ----D---- C:\WINDOWS\LastGood
2011-08-29 18:16:09 ----D---- C:\Documents and Settings\David\Data aplikací\TeamViewer
2011-08-28 20:22:25 ----D---- C:\Program Files\Zrychleni Pocitace
2011-08-28 20:22:02 ----D---- C:\Documents and Settings\David\Data aplikací\OpenCandy
2011-08-28 20:21:48 ----D---- C:\Program Files\DsNET Corp
2011-08-28 19:01:10 ----D---- C:\Program Files\WinPcap
2011-08-28 12:24:51 ----D---- C:\wamp
2011-08-16 10:19:17 ----D---- C:\Documents and Settings\David\Data aplikací\VitySoft
2011-08-16 09:41:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2559049$
2011-08-15 10:29:21 ----A---- C:\WINDOWS\system32\MRT.exe
2011-08-15 10:29:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2011-08-11 09:15:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2562937$

======List of files/folders modified in the last 1 month======

2011-09-10 18:39:21 ----D---- C:\WINDOWS\Prefetch
2011-09-10 18:39:20 ----D---- C:\Program Files\trend micro
2011-09-10 18:08:50 ----D---- C:\WINDOWS\Minidump
2011-09-10 18:08:50 ----D---- C:\WINDOWS\Debug
2011-09-10 18:08:50 ----D---- C:\WINDOWS
2011-09-10 18:08:49 ----D---- C:\WINDOWS\Temp
2011-09-10 18:05:22 ----D---- C:\Program Files\Mozilla Firefox
2011-09-10 12:00:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2011-09-10 11:58:50 ----SHD---- C:\WINDOWS\Installer
2011-09-10 11:58:49 ----D---- C:\Config.Msi
2011-09-10 11:58:47 ----RD---- C:\Program Files
2011-09-10 11:58:47 ----D---- C:\Program Files\Common Files
2011-09-10 11:58:47 ----D---- C:\Documents and Settings\David\Data aplikací\Skype
2011-09-10 10:25:17 ----D---- C:\Documents and Settings\David\Data aplikací\skypePM
2011-09-10 10:14:14 ----HD---- C:\WINDOWS\inf
2011-09-10 10:14:11 ----D---- C:\WINDOWS\system32\CatRoot2
2011-09-09 23:59:31 ----N---- C:\WINDOWS\SchedLgU.Txt
2011-09-09 14:29:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2011-09-04 09:59:50 ----RSD---- C:\WINDOWS\assembly
2011-09-04 09:59:29 ----D---- C:\WINDOWS\Microsoft.NET
2011-09-04 09:37:13 ----D---- C:\WINDOWS\system32
2011-09-04 09:37:13 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-09-04 09:36:59 ----D---- C:\WINDOWS\WinSxS
2011-08-29 12:37:40 ----A---- C:\WINDOWS\NeroDigital.ini
2011-08-28 19:27:05 ----D---- C:\Program Files\Internet Explorer
2011-08-28 19:01:10 ----D---- C:\WINDOWS\system32\drivers
2011-08-16 09:41:37 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-08-16 09:41:17 ----HD---- C:\WINDOWS\$hf_mig$

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2009-12-13 691696]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-05-10 30808]
R1 AmdPPM;Ovladač procesoru HwPState AMD; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-05-10 25432]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-05-10 441176]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-05-10 307928]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-05-10 49240]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-05-10 19544]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-05-10 102616]
R2 npf;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2010-01-27 50704]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2009-08-14 4485632]
R3 AtiHdmiService;ATI Function Driver for HDMI Service; C:\WINDOWS\system32\drivers\AtiHdmi.sys [2009-06-02 99856]
R3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-01-20 5027840]
R3 kbdcap;kbdcap; C:\WINDOWS\system32\drivers\kbdcap.sys [2011-07-15 109440]
R3 LgBttPort;LGE Bluetooth TransPort; C:\WINDOWS\system32\DRIVERS\lgbtport.sys [2009-09-29 12160]
R3 lgbusenum;LG Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\lgbtbus.sys [2009-09-29 10496]
R3 LGVMODEM;LGE Virtual Modem; C:\WINDOWS\system32\DRIVERS\lgvmodem.sys [2009-09-29 12928]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-10-30 117888]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 ah8u2kln;ah8u2kln; C:\WINDOWS\system32\drivers\ah8u2kln.sys []
S3 Andbus;LGE Android Platform Composite USB Device; C:\WINDOWS\system32\DRIVERS\lgandbus.sys [2010-12-07 14336]
S3 AndDiag;LGE Android Platform USB Serial Port; C:\WINDOWS\system32\DRIVERS\lganddiag.sys [2010-12-07 20736]
S3 AndGps;LGE Android Platform USB GPS NMEA Port; C:\WINDOWS\system32\DRIVERS\lgandgps.sys [2010-12-07 20096]
S3 ANDModem;LGE Android Platform USB Modem; C:\WINDOWS\system32\DRIVERS\lgandmodem.sys [2010-12-07 25088]
S3 AndNetDiag;LG AndroidNet USB Serial Port; C:\WINDOWS\system32\DRIVERS\lgandnetdiag.sys [2010-11-29 23168]
S3 AndNetGps;LG AndroidNet USB GPS NMEA Port; C:\WINDOWS\system32\DRIVERS\lgandnetgps.sys [2010-11-29 22272]
S3 ANDNetModem;LG AndroidNet USB Modem; C:\WINDOWS\system32\DRIVERS\lgandnetmodem.sys [2010-11-29 28032]
S3 andnetndis;LG AndroidNet NDIS Ethernet Adapter; C:\WINDOWS\system32\DRIVERS\lgandnetndis.sys [2010-11-29 67584]
S3 catchme;catchme; \??\C:\DOCUME~1\David\LOCALS~1\Temp\catchme.sys []
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Documents and Settings\David\Plocha\Garena\safedrv.sys []
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 RTHDMIAzAudService;Service for HDMI; C:\WINDOWS\system32\drivers\RtKHDMI.sys [2008-12-25 3721664]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2009-08-14 602112]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2011-05-10 42184]
R2 ES lite Service;ES lite Service for program management.; C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE [2009-02-05 68136]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-03-18 153376]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2010-04-14 488960]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2009-08-13 593920]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-10-09 724992]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

-----------------EOF-----------------

Reklama

Příspěvekod **memphisto** » 10 zář 2011 20:49

Odinstaluj:
Spyware Terminátor
Deamon Tools Toolbar
Crawler Toolbar

v logu fixni:
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.toggle.com/en/index.php?rvs=hompag
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.toggle.com/en/index.php?rvs=hompag
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://mxclock.maydesign.eu/?ver=1.1.4&edt=3
O2 - BHO: SuggestMeYesBHO - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files\AutocompletePro\AutocompletePro.dll (file missing)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Adobe Reader\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po probìhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Feroo · Příspěvekod **Feroo** » 10 zář 2011 21:57

Malwarebytes' Anti-Malware
www.malwarebytes.org

Verze databáze:

Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

10.9.2011 21:56:15
mbam-log-2011-09-10 (21-56-12).txt

Typ: Rychlá kontrola
Kontrolované objekty: 147761
Uplynulý čas: 1 minut, 38 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 1
Infikované soubory: 5

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
c:\documents and settings\all users\data aplikací\macromedia\swfupdate (Trojan.Agent) -> No action taken.

Infikované soubory:
c:\documents and settings\all users\data aplikací\macromedia\swfupdate\Ui.dtd (Trojan.Agent) -> No action taken.
c:\documents and settings\all users\data aplikací\macromedia\swfupdate\Flags.dtd (Trojan.Agent) -> No action taken.
c:\documents and settings\all users\data aplikací\macromedia\swfupdate\H64DATA.dtd (Trojan.Agent) -> No action taken.
c:\documents and settings\all users\data aplikací\macromedia\swfupdate\Local.dtd (Trojan.Agent) -> No action taken.
c:\documents and settings\all users\data aplikací\macromedia\swfupdate\UTemp.dtd (Trojan.Agent) -> No action taken.

Příspěvekod **memphisto** » 11 zář 2011 00:03

- Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Remove Selected
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštìní se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynù, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by mìl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah

Feroo · Příspěvekod **Feroo** » 11 zář 2011 10:52

Malwarebytes' Anti-Malware
www.malwarebytes.org

Verze databáze:

Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

11.9.2011 10:51:09
mbam-log-2011-09-11 (10-51-09).txt

Typ: Úplná kontrola (C:\|D:\|)
Kontrolované objekty: 205971
Uplynulý čas: 19 minut, 28 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 1
Infikované soubory: 5

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
c:\documents and settings\all users\data aplikací\macromedia\swfupdate (Trojan.Agent) -> Quarantined and deleted successfully.

Infikované soubory:
c:\documents and settings\all users\data aplikací\macromedia\swfupdate\Ui.dtd (Trojan.Agent) -> Quarantined and deleted successfully.
c:\documents and settings\all users\data aplikací\macromedia\swfupdate\Flags.dtd (Trojan.Agent) -> Quarantined and deleted successfully.
c:\documents and settings\all users\data aplikací\macromedia\swfupdate\H64DATA.dtd (Trojan.Agent) -> Quarantined and deleted successfully.
c:\documents and settings\all users\data aplikací\macromedia\swfupdate\Local.dtd (Trojan.Agent) -> Quarantined and deleted successfully.
c:\documents and settings\all users\data aplikací\macromedia\swfupdate\UTemp.dtd (Trojan.Agent) -> Quarantined and deleted successfully.

Feroo · Příspěvekod **Feroo** » 11 zář 2011 11:29

ComboFix 11-09-10.03 - David 11.09.2011 11:00:52.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3326.2738 [GMT 2:00]
Spuštěný z: c:\documents and settings\David\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-08-11 do 2011-09-11 )))))))))))))))))))))))))))))))
.
.
2011-09-10 19:01 . 2011-09-10 19:01 388096 ----a-r- c:\documents and settings\David\Data aplikací\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-08-29 16:16 . 2011-08-29 16:16 -------- d-----w- c:\documents and settings\David\Data aplikací\TeamViewer
2011-08-28 18:22 . 2011-08-28 18:24 -------- d-----w- c:\program files\Zrychleni Pocitace
2011-08-28 18:22 . 2011-08-29 09:03 -------- d-----w- c:\documents and settings\David\Local Settings\Data aplikací\OpenCandy
2011-08-28 18:22 . 2011-08-28 18:22 -------- d-----w- c:\documents and settings\David\Data aplikací\OpenCandy
2011-08-28 18:21 . 2011-08-28 18:21 -------- d-----w- c:\program files\DsNET Corp
2011-08-28 17:01 . 2011-08-28 17:01 -------- d-----w- c:\program files\WinPcap
2011-08-28 10:24 . 2011-08-28 16:35 -------- d-----w- C:\wamp
2011-08-16 08:19 . 2011-08-16 08:19 -------- d-----w- c:\documents and settings\David\Data aplikací\VitySoft
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-11 08:54 . 2009-12-13 18:00 16608 ----a-w- c:\windows\gdrv.sys
2011-08-11 07:13 . 2011-05-27 11:06 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-07-15 18:17 . 2011-07-15 18:17 109440 ----a-w- c:\windows\system32\drivers\KbdCap.sys
2011-07-08 14:02 . 2008-04-13 22:27 10496 ----a-w- c:\windows\system32\drivers\ndistapi.sys
2011-07-06 17:52 . 2011-04-15 10:05 41272 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-07-06 17:52 . 2011-04-15 10:05 22712 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-06-21 18:18 . 2008-04-14 06:52 668160 ----a-w- c:\windows\system32\wininet.dll
2011-06-21 18:18 . 2008-04-14 06:50 61952 ----a-w- c:\windows\system32\tdc.ocx
2011-06-21 18:18 . 2008-04-14 06:51 81920 ----a-w- c:\windows\system32\ieencode.dll
2011-06-21 18:16 . 2008-04-14 05:50 370176 ----a-w- c:\windows\system32\html.iec
.
.
((((((((((((((((((((((((((((( SnapShot@2011-07-29_10.13.23 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-09-11 08:54 . 2011-09-11 08:54 16384 c:\windows\Temp\Perflib_Perfdata_930.dat
+ 2011-09-11 08:54 . 2011-09-11 08:54 16384 c:\windows\Temp\Perflib_Perfdata_908.dat
+ 2008-04-14 06:52 . 2011-06-21 18:18 37888 c:\windows\system32\url.dll
- 2008-04-14 06:52 . 2008-04-14 06:52 37888 c:\windows\system32\url.dll
+ 2009-12-25 22:42 . 2010-02-22 14:20 18296 c:\windows\system32\spmsg.dll
- 2009-12-25 22:42 . 2010-07-05 13:13 18296 c:\windows\system32\spmsg.dll
+ 2010-01-27 02:09 . 2010-01-27 02:09 53299 c:\windows\system32\pthreadVC.dll
+ 2001-10-25 12:00 . 2011-09-04 07:37 60512 c:\windows\system32\perfc009.dat
+ 2001-10-25 12:00 . 2011-09-04 07:37 71486 c:\windows\system32\perfc005.dat
+ 2008-07-25 09:17 . 2008-07-25 09:17 15360 c:\windows\system32\mui\0409\mscorees.dll
+ 2010-01-27 02:09 . 2010-01-27 02:09 50704 c:\windows\system32\drivers\npf.sys
+ 2008-04-14 06:52 . 2011-06-21 18:18 37888 c:\windows\system32\dllcache\url.dll
- 2008-04-14 06:52 . 2008-04-14 06:52 37888 c:\windows\system32\dllcache\url.dll
+ 2008-04-13 22:27 . 2011-07-08 14:02 10496 c:\windows\system32\dllcache\ndistapi.sys
- 2008-04-14 06:51 . 2008-04-14 06:51 81920 c:\windows\system32\dllcache\ieencode.dll
+ 2008-04-14 06:51 . 2011-06-21 18:18 81920 c:\windows\system32\dllcache\ieencode.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 96760 c:\windows\system32\dfshim.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 37896 c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 81400 c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
+ 2008-07-25 09:17 . 2008-07-25 09:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 57392 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
- 2005-09-23 06:28 . 2005-09-23 06:28 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
- 2005-09-23 06:28 . 2005-09-23 06:28 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 95232 c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 16896 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 61952 c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
- 2005-09-23 06:28 . 2005-09-23 06:28 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- 2005-09-23 06:28 . 2005-09-23 06:28 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 88584 c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 24584 c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 31744 c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 19456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 18944 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 77312 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 94208 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 46592 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 83456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
- 2005-09-23 06:28 . 2005-09-23 06:28 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 97792 c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2005-09-23 06:28 . 2005-09-23 06:28 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2005-09-23 06:28 . 2005-09-23 06:28 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
- 2005-09-23 06:28 . 2005-09-23 06:28 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
- 2005-09-23 06:28 . 2005-09-23 06:28 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
- 2005-09-23 06:28 . 2005-09-23 06:28 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
- 2005-09-23 06:28 . 2005-09-23 06:28 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 65032 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
- 2005-09-23 06:28 . 2005-09-23 06:28 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 18936 c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 62968 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 35320 c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 69120 c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 27136 c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
- 2005-09-23 06:28 . 2005-09-23 06:28 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 80376 c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 89608 c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
+ 2010-03-23 03:31 . 2010-03-23 03:31 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 34312 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 33288 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 24576 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 84480 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 33800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 17416 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 22024 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
- 2005-09-23 06:28 . 2005-09-23 06:28 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 58880 c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 98808 c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
- 2005-09-23 06:28 . 2005-09-23 06:28 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 13824 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 16896 c:\windows\Microsoft.NET\Framework\SharedReg12.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 16896 c:\windows\Microsoft.NET\Framework\sbscmp10.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 82944 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
+ 2011-08-28 17:27 . 2011-08-28 17:27 88576 c:\windows\Installer\1d0cef2.msi
+ 2011-08-28 18:59 . 2011-08-28 18:59 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\36dbc4689f7c51e393504230004c9dec\Microsoft.Build.Framework.ni.dll
+ 2011-08-28 18:59 . 2011-08-28 18:59 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\a2865dcec9c5d3cc9c55f026cbad6fcc\dfsvc.ni.exe
+ 2011-08-28 18:59 . 2011-08-28 18:59 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\c2af7cfbb47c077029a2645930b4eeac\Accessibility.ni.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2011-02-15 19:31 . 2011-02-15 19:31 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2011-02-15 19:31 . 2011-02-15 19:31 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2011-02-15 19:30 . 2011-02-15 19:30 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2011-02-15 19:30 . 2011-02-15 19:30 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2011-02-15 19:30 . 2011-02-15 19:30 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2011-02-15 19:31 . 2011-02-15 19:31 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2011-02-15 19:31 . 2011-02-15 19:31 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2011-02-15 19:31 . 2011-02-15 19:31 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2011-02-15 19:31 . 2011-02-15 19:31 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2011-08-11 07:15 . 2010-07-05 13:13 26488 c:\windows\$hf_mig$\KB2562937\update\spcustom.dll
+ 2011-08-11 07:15 . 2010-07-05 13:13 18296 c:\windows\$hf_mig$\KB2562937\spmsg.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
- 2010-09-22 15:23 . 2010-09-22 15:23 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
- 2005-09-23 06:28 . 2005-09-23 06:28 7168 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 7168 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
- 2005-09-23 06:29 . 2005-09-23 06:29 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 6656 c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
- 2005-09-23 06:28 . 2005-09-23 06:28 8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 9728 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
- 2005-09-23 06:28 . 2005-09-23 06:28 9728 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 5120 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
- 2011-02-15 19:30 . 2011-02-15 19:30 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2011-02-15 19:31 . 2011-02-15 19:31 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2011-02-15 19:31 . 2011-02-15 19:31 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2011-02-15 19:31 . 2011-02-15 19:31 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 635904 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcr80.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 558080 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcp80.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcm80.dll
+ 2010-01-27 02:09 . 2010-01-27 02:09 281104 c:\windows\system32\wpcap.dll
+ 2008-04-14 06:52 . 2011-06-21 18:18 627712 c:\windows\system32\urlmon.dll
+ 2010-10-06 16:02 . 2003-07-19 14:47 278528 c:\windows\system32\pncrt.dll
+ 2001-10-25 12:00 . 2011-09-04 07:37 400100 c:\windows\system32\perfh009.dat
+ 2001-10-25 12:00 . 2011-09-04 07:37 397916 c:\windows\system32\perfh005.dat
+ 2010-01-27 02:09 . 2010-01-27 02:09 100880 c:\windows\system32\Packet.dll
+ 2008-04-14 06:51 . 2011-06-21 18:18 532480 c:\windows\system32\mstime.dll
- 2008-04-14 06:51 . 2008-04-14 06:51 532480 c:\windows\system32\mstime.dll
+ 2008-04-14 06:51 . 2011-06-21 18:18 449536 c:\windows\system32\mshtmled.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 158720 c:\windows\system32\mscorier.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 282112 c:\windows\system32\mscoree.dll
+ 2011-08-11 07:13 . 2011-08-11 07:13 243360 c:\windows\system32\Macromed\Flash\FlashUtil10v_Plugin.exe
- 2008-04-14 06:51 . 2008-04-14 06:51 251904 c:\windows\system32\iepeers.dll
+ 2008-04-14 06:51 . 2011-06-21 18:18 251904 c:\windows\system32\iepeers.dll
+ 2008-04-14 06:52 . 2011-06-21 18:18 668160 c:\windows\system32\dllcache\wininet.dll
+ 2008-04-14 06:52 . 2011-06-21 18:18 627712 c:\windows\system32\dllcache\urlmon.dll
- 2008-04-14 06:51 . 2008-04-14 06:51 532480 c:\windows\system32\dllcache\mstime.dll
+ 2008-04-14 06:51 . 2011-06-21 18:18 532480 c:\windows\system32\dllcache\mstime.dll
+ 2008-04-14 06:51 . 2011-06-21 18:18 449536 c:\windows\system32\dllcache\mshtmled.dll
- 2008-04-14 06:51 . 2008-04-14 06:51 251904 c:\windows\system32\dllcache\iepeers.dll
+ 2008-04-14 06:51 . 2011-06-21 18:18 251904 c:\windows\system32\dllcache\iepeers.dll
+ 2010-03-23 03:31 . 2010-03-23 03:31 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 839680 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 835584 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
- 2005-09-23 06:28 . 2005-09-23 06:28 835584 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 261632 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
- 2005-09-23 06:28 . 2005-09-23 06:28 114688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 114688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
- 2005-09-23 06:28 . 2005-09-23 06:28 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2010-02-09 10:22 . 2010-02-09 10:22 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 131072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
- 2005-09-23 06:28 . 2005-09-23 06:28 131072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 303104 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
- 2005-09-23 06:28 . 2005-09-23 06:28 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 113664 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
- 2005-09-23 06:28 . 2005-09-23 06:28 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 626688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
- 2005-09-23 06:28 . 2005-09-23 06:28 188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 401408 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 970752 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 745472 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 486400 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 425984 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
- 2005-09-23 06:28 . 2005-09-23 06:28 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 392184 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 118784 c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 143360 c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 100856 c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 230912 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 345600 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 114176 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 367104 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 308224 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 998408 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 659456 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
- 2005-09-23 06:29 . 2005-09-23 06:29 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
- 2005-09-23 06:29 . 2005-09-23 06:29 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 749568 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 655360 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 348160 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 230904 c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 798224 c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 575496 c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
- 2005-09-23 06:28 . 2005-09-23 06:28 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 507904 c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
- 2005-09-23 06:28 . 2005-09-23 06:28 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 147968 c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 218112 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 193016 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 145408 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
+ 2010-02-24 22:14 . 2010-02-24 22:14 543232 c:\windows\Installer\272db.msp
+ 2008-07-30 00:35 . 2008-07-30 00:35 553472 c:\windows\Installer\1d0cef7.msp
+ 2008-07-30 00:33 . 2008-07-30 00:33 506368 c:\windows\Installer\1d0cef5.msp
+ 2008-07-30 00:37 . 2008-07-30 00:37 911360 c:\windows\Installer\1d0cef4.msp
+ 2011-08-31 08:32 . 2011-08-31 08:32 303104 c:\windows\assembly\temp\8FLRY39GMT\System.Runtime.Remoting.dll
+ 2011-08-28 18:59 . 2011-08-28 18:59 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\70764208219715962d310336b5959dfa\System.Web.RegularExpressions.ni.dll
+ 2011-09-04 07:59 . 2011-09-04 07:59 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\4ddc48f3a9e6da0a995a0119eb82bdb2\System.Web.RegularExpressions.ni.dll
+ 2011-09-04 07:59 . 2011-09-04 07:59 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\57d919884c565e88ee78f3ba89b80492\System.Transactions.ni.dll
+ 2011-08-28 18:59 . 2011-08-28 18:59 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\12903c3843fe923d1977801ffa3cf26c\System.Transactions.ni.dll
+ 2011-09-04 07:59 . 2011-09-04 07:59 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\f550c0c0823bb480e3e0abd28def3652\System.ServiceProcess.ni.dll
+ 2011-08-28 18:59 . 2011-08-28 18:59 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\a9e71dda6389403be4db7b567592e3b8\System.ServiceProcess.ni.dll
+ 2011-09-04 07:59 . 2011-09-04 07:59 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\ce08ff8fe3f49b71bc97b4f9cab34248\System.Security.ni.dll
+ 2011-08-31 08:34 . 2011-08-31 08:34 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\6a74fbf28403feb768f2b0a323a4ac04\System.Security.ni.dll
+ 2011-08-28 18:59 . 2011-08-28 18:59 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\5f9cd5bfebcb94175d440ebab3aa412f\System.EnterpriseServices.Wrapper.dll
+ 2011-08-28 18:59 . 2011-08-28 18:59 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\5f9cd5bfebcb94175d440ebab3aa412f\System.EnterpriseServices.ni.dll
+ 2011-09-04 07:59 . 2011-09-04 07:59 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\094a01db75df5ae2164ac51ea6cde056\System.EnterpriseServices.Wrapper.dll
+ 2011-09-04 07:59 . 2011-09-04 07:59 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\094a01db75df5ae2164ac51ea6cde056\System.EnterpriseServices.ni.dll
+ 2011-08-28 17:29 . 2011-08-28 17:29 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\5f5d64dd0e7991aaaad2d98ee52afe42\System.Drawing.Design.ni.dll
+ 2011-09-04 07:38 . 2011-09-04 07:38 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\0e1b58f95c4b31adceafba865d899d41\System.Drawing.Design.ni.dll
+ 2011-09-04 07:59 . 2011-09-04 07:59 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\bea849864ccec3c8440854b58323fffc\System.DirectoryServices.Protocols.ni.dll
+ 2011-08-28 18:59 . 2011-08-28 18:59 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\44de75caba2b9711b3d9030a30767f8b\System.DirectoryServices.Protocols.ni.dll
+ 2011-09-04 07:59 . 2011-09-04 07:59 970752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\dc9065ff99f71d8955dece30eb917f23\System.Configuration.ni.dll
+ 2011-08-31 08:34 . 2011-08-31 08:34 970752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\8ecc7122ea648279a4af7247279b2d2b\System.Configuration.ni.dll
+ 2011-08-28 18:59 . 2011-08-28 18:59 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\43dceeb2d0601d79af40752fb20283c2\Microsoft.Build.Utilities.ni.dll
+ 2011-09-04 07:59 . 2011-09-04 07:59 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\2023c59db9fb458ffbfbd5e13a9a1a38\Microsoft.Build.Utilities.ni.dll
+ 2011-09-04 07:59 . 2011-09-04 07:59 838656 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\dceae8bba55dfcc93d87d7e67a514615\Microsoft.Build.Engine.ni.dll
+ 2011-08-28 18:59 . 2011-08-28 18:59 838656 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\daf5ff5e06c80eefa80c6fcc79aec963\Microsoft.Build.Engine.ni.dll
+ 2011-08-28 18:59 . 2011-08-28 18:59 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\e148983beeb0f30918b0564849a16456\CustomMarshalers.ni.dll
+ 2011-08-28 18:59 . 2011-08-28 18:59 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\c7ffd8c23e8de4018a88185b3b60631e\AspNetMMCExt.ni.dll
+ 2011-09-04 07:59 . 2011-09-04 07:59 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\16ecd58ea1795a05973d33ab71d7f0a3\AspNetMMCExt.ni.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2011-02-15 19:31 . 2011-02-15 19:31 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2011-02-15 19:31 . 2011-02-15 19:31 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2011-09-04 07:37 . 2011-09-04 07:37 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2011-09-04 07:37 . 2011-09-04 07:37 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2011-02-15 19:31 . 2011-02-15 19:31 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2011-02-15 19:31 . 2011-02-15 19:31 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2011-02-15 19:31 . 2011-02-15 19:31 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2011-09-04 07:37 . 2011-09-04 07:37 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2011-02-15 19:31 . 2011-02-15 19:31 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2011-09-04 07:37 . 2011-09-04 07:37 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2011-09-04 07:37 . 2011-09-04 07:37 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2011-09-04 07:37 . 2011-09-04 07:37 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2011-02-15 19:31 . 2011-02-15 19:31 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2011-02-15 19:31 . 2011-02-15 19:31 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2011-02-15 19:31 . 2011-02-15 19:31 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2011-02-15 19:31 . 2011-02-15 19:31 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2011-08-11 07:15 . 2010-07-05 13:13 391032 c:\windows\$NtUninstallKB2562937$\spuninst\updspapi.dll
+ 2011-08-11 07:15 . 2010-07-05 13:13 233848 c:\windows\$NtUninstallKB2562937$\spuninst\spuninst.exe
+ 2011-08-11 07:15 . 2010-07-05 13:13 391032 c:\windows\$hf_mig$\KB2562937\update\updspapi.dll
+ 2011-08-11 07:15 . 2010-07-05 13:13 759160 c:\windows\$hf_mig$\KB2562937\update\update.exe
+ 2011-08-11 07:15 . 2010-07-05 13:13 233848 c:\windows\$hf_mig$\KB2562937\spuninst.exe
+ 2008-04-14 06:51 . 2011-06-21 18:18 1510912 c:\windows\system32\shdocvw.dll
+ 2008-04-14 06:51 . 2011-06-27 14:43 3105792 c:\windows\system32\mshtml.dll
+ 2011-04-01 10:23 . 2011-08-11 07:13 6277280 c:\windows\system32\Macromed\Flash\NPSWF32.dll
+ 2008-04-14 06:51 . 2011-06-21 18:18 1510912 c:\windows\system32\dllcache\shdocvw.dll
+ 2008-04-14 06:51 . 2011-06-27 14:43 3105792 c:\windows\system32\dllcache\mshtml.dll
+ 2008-04-14 06:51 . 2011-06-21 18:18 1025024 c:\windows\system32\dllcache\browseui.dll
- 2008-04-14 06:51 . 2008-04-14 06:51 1025024 c:\windows\system32\dllcache\browseui.dll
- 2008-04-14 06:51 . 2008-04-14 06:51 1025024 c:\windows\system32\browseui.dll
+ 2008-04-14 06:51 . 2011-06-21 18:18 1025024 c:\windows\system32\browseui.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 1344000 c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 1172472 c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 2048000 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
+ 2010-03-23 03:32 . 2010-03-23 03:32 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2010-03-23 03:32 . 2010-03-23 03:32 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 5062656 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 2933248 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 5815296 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 4546560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 1163768 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
+ 2010-04-08 19:38 . 2010-04-08 19:38 2607104 c:\windows\Installer\2be80.msp
+ 2010-04-08 19:38 . 2010-04-08 19:38 4210688 c:\windows\Installer\2be7f.msp
+ 2011-09-10 19:01 . 2011-09-10 19:01 1094656 c:\windows\Installer\252cbb6.msi
+ 2008-07-30 00:45 . 2008-07-30 00:45 2543616 c:\windows\Installer\1d0cefb.msp
+ 2008-07-30 00:29 . 2008-07-30 00:29 2926080 c:\windows\Installer\1d0cefa.msp
+ 2008-07-30 00:41 . 2008-07-30 00:41 6487040 c:\windows\Installer\1d0cef9.msp
+ 2008-07-30 00:39 . 2008-07-30 00:39 3403264 c:\windows\Installer\1d0cef8.msp
+ 2008-07-30 00:43 . 2008-07-30 00:43 1013248 c:\windows\Installer\1d0cef6.msp
+ 2008-07-30 00:31 . 2008-07-30 00:31 6083072 c:\windows\Installer\1d0cef3.msp
+ 2011-09-04 07:36 . 2011-09-04 07:36 3182592 c:\windows\assembly\tmp\9GMSY4AG\System.dll
+ 2011-08-28 17:29 . 2011-08-28 17:29 7867392 c:\windows\assembly\NativeImages_v2.0.50727_32\System\aa7926460a336408c8041330ad90929d\System.ni.dll
+ 2011-09-04 07:37 . 2011-09-04 07:37 7948288 c:\windows\assembly\NativeImages_v2.0.50727_32\System\857b7d64acb4a36c734d7beaeef7068f\System.ni.dll
+ 2011-09-04 07:38 . 2011-09-04 07:38 5449728 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\9790e82f52035bfb2e35682d640e62f4\System.Xml.ni.dll
+ 2011-08-28 17:30 . 2011-08-28 17:30 5449728 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\36f3953f24d4f0b767bf172331ad6f3e\System.Xml.ni.dll
+ 2011-09-04 07:59 . 2011-09-04 07:59 1840128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\b4ee1aca042beb1ea075699f02a37028\System.Web.Services.ni.dll
+ 2011-08-28 18:59 . 2011-08-28 18:59 1840128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\1dad08772eb89d48a8a0cfe9b0467eb0\System.Web.Services.ni.dll
+ 2011-08-28 18:59 . 2011-08-28 18:59 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\e5995a34d44ad5af7d9f335075bded4d\System.Web.Mobile.ni.dll
+ 2011-09-04 07:59 . 2011-09-04 07:59 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\05297c6a38719ab01598bad2a6a61446\System.Web.Mobile.ni.dll
+ 2011-09-04 07:37 . 2011-09-04 07:37 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6a1bfdc29f6d9fbe2acaee4fc8469484\System.Drawing.ni.dll
+ 2011-08-28 17:29 . 2011-08-28 17:29 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6978f2e90f13bc720d57fa6895c911e2\System.Drawing.ni.dll
+ 2011-08-28 18:59 . 2011-08-28 18:59 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\6bcc481030a56c24d5990d199812c594\System.DirectoryServices.ni.dll
+ 2011-09-04 07:59 . 2011-09-04 07:59 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\67bdde137c743ae3b9f7e1c660d515cc\System.DirectoryServices.ni.dll
+ 2011-08-31 08:34 . 2011-08-31 08:34 1800704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\f6c99ab69d318c8439598023a83767e3\System.Deployment.ni.dll
+ 2011-09-04 07:59 . 2011-09-04 07:59 1800704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\5ea7cd97ab50396a4473a66a90c8ede9\System.Deployment.ni.dll
+ 2011-09-04 07:37 . 2011-09-04 07:37 6614016 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\5caf97d2defc67b6027c7f5a6968c9b7\System.Data.ni.dll
+ 2011-08-28 17:29 . 2011-08-28 17:29 6614016 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\0b40341027c01716cec1dd97592698e0\System.Data.ni.dll
+ 2011-08-28 18:59 . 2011-08-28 18:59 1711104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\5b3d048d8c003d743ea5e72caf07773a\Microsoft.VisualBasic.ni.dll
+ 2011-09-04 07:59 . 2011-09-04 07:59 1711104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\520b9511d34590f600dff0f5196c2675\Microsoft.VisualBasic.ni.dll
+ 2011-09-04 07:59 . 2011-09-04 07:59 1620480 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\8d6d9329489c9846b17bb4dca326f16c\Microsoft.Build.Tasks.ni.dll
+ 2011-08-31 08:34 . 2011-08-31 08:34 1620480 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\8b9ad7b7128a8101b1158a2e1acbeb63\Microsoft.Build.Tasks.ni.dll
+ 2011-09-04 07:37 . 2011-09-04 07:37 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2011-09-04 07:37 . 2011-09-04 07:37 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2011-09-04 07:37 . 2011-09-04 07:37 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2011-09-04 07:36 . 2011-09-04 07:36 4546560 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2011-08-15 08:29 . 2011-07-30 08:05 52390856 c:\windows\system32\MRT.exe
+ 2011-09-04 07:38 . 2011-09-04 07:38 12428800 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\a0633e5617f6301a2422a72ab90b5de2\System.Windows.Forms.ni.dll
+ 2011-08-31 08:33 . 2011-08-31 08:33 12428800 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\418f50cb29904548eabc0e4f6e788516\System.Windows.Forms.ni.dll
+ 2011-08-28 18:59 . 2011-08-28 18:59 11791360 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\50ea744ffc3cb7f09b027fd6c5c93b2b\System.Web.ni.dll
+ 2011-09-04 07:59 . 2011-09-04 07:59 11796480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\47eb8696e47a035e9a613a2d0cc7ac45\System.Web.ni.dll
+ 2011-08-28 17:29 . 2011-08-28 17:29 10681344 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\204db7071fb26343b0fd3f3d140c0bf8\System.Design.ni.dll
+ 2011-09-04 07:37 . 2011-09-04 07:37 10681344 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\18a247b793f9a8c426e9679995ff4611\System.Design.ni.dll
- 2010-09-22 15:31 . 2010-09-22 15:31 11485184 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9adb89fa22fd5b4ce433b5aca7fb1b07\mscorlib.ni.dll
+ 2011-08-28 17:29 . 2011-08-28 17:29 11485184 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9adb89fa22fd5b4ce433b5aca7fb1b07\mscorlib.ni.dll
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-05-10 12:10 122512 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-10-09 139264]
"PCSpeedUp"="c:\program files\Zrychleni Pocitace\PCSpeedUp.lnk" [2011-08-28 2013]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2009-01-13 18084864]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-08-13 98304]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"="c:\windows\system32\Macromed\Flash\FlashUtil10k_ActiveX.exe" [2011-07-25 232912]
.
c:\documents and settings\David\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Obsah aplikace OneNote.onetoc2 [2011-4-20 3656]
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"d:\\ICQ6.5\\ICQ.exe"=
"d:\\Quake 3\\quake3.exe"=
"d:\\Warcraft 3\\Warcraft III\\Warcraft III.exe"=
"d:\\Battlefield 2\\BF2.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Program Files\\Opera 11.10 beta\\opera.exe"=
"d:\\Warcraft 3\\Warcraft III\\War3.exe"=
"c:\\Documents and Settings\\David\\Plocha\\Garena\\Garena.exe"=
"c:\\Program Files\\DsNET Corp\\aTube Catcher 2.0\\yct.exe"=
.
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [13.12.2009 20:21 691696]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [27.5.2011 13:07 441176]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [13.12.2009 20:18 307928]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [13.12.2009 20:18 19544]
R2 ES lite Service;ES lite Service for program management.;c:\program files\Gigabyte\EasySaver\essvr.exe [13.12.2009 20:01 68136]
R2 npf;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [27.1.2010 4:09 50704]
R3 kbdcap;kbdcap;c:\windows\system32\drivers\KbdCap.sys [15.7.2011 20:17 109440]
R3 LgBttPort;LGE Bluetooth TransPort;c:\windows\system32\drivers\lgbtport.sys [29.9.2009 8:11 12160]
R3 lgbusenum;LG Bluetooth Bus Enumerator;c:\windows\system32\drivers\lgbtbus.sys [29.9.2009 8:11 10496]
R3 LGVMODEM;LGE Virtual Modem;c:\windows\system32\drivers\lgvmodem.sys [29.9.2009 8:11 12928]
S3 Andbus;LGE Android Platform Composite USB Device;c:\windows\system32\drivers\lgandbus.sys [7.12.2010 14:12 14336]
S3 AndDiag;LGE Android Platform USB Serial Port;c:\windows\system32\drivers\lganddiag.sys [7.12.2010 14:12 20736]
S3 AndGps;LGE Android Platform USB GPS NMEA Port;c:\windows\system32\drivers\lgandgps.sys [7.12.2010 14:12 20096]
S3 ANDModem;LGE Android Platform USB Modem;c:\windows\system32\drivers\lgandmodem.sys [7.12.2010 14:12 25088]
S3 AndNetDiag;LG AndroidNet USB Serial Port;c:\windows\system32\drivers\lgandnetdiag.sys [29.11.2010 6:21 23168]
S3 AndNetGps;LG AndroidNet USB GPS NMEA Port;c:\windows\system32\drivers\lgandnetgps.sys [29.11.2010 6:21 22272]
S3 ANDNetModem;LG AndroidNet USB Modem;c:\windows\system32\drivers\lgandnetmodem.sys [29.11.2010 6:21 28032]
S3 andnetndis;LG AndroidNet NDIS Ethernet Adapter;c:\windows\system32\drivers\lgandnetndis.sys [29.11.2010 6:57 67584]
S3 GGSAFERDriver;GGSAFER Driver;\??\c:\documents and settings\David\Plocha\Garena\safedrv.sys --> c:\documents and settings\David\Plocha\Garena\safedrv.sys [?]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [15.4.2011 12:05 41272]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.203.254 62.240.178.250
FF - ProfilePath - c:\documents and settings\David\Data aplikací\Mozilla\Firefox\Profiles\lqn6i1lp.default\
FF - prefs.js: browser.search.defaulturl - hxxp://flvdirect.iamwired.net/websearch ... ps&search=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://google.cz/
FF - prefs.js: keyword.URL - hxxp://flvdirect.iamwired.net/websearch ... ps&search=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}
FF - Ext: LoudMo Contextual Ad Assistant: {2ad7e043-d360-bdbf-0fba-8c83cdade280} - c:\program files\Mozilla Firefox\extensions\{2ad7e043-d360-bdbf-0fba-8c83cdade280}
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-09-11 11:05
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(828)
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(2392)
c:\windows\system32\msi.dll
.
Celkový čas: 2011-09-11 11:07:00
ComboFix-quarantined-files.txt 2011-09-11 09:06
ComboFix2.txt 2011-07-29 10:17
.
Před spuštěním: Volných bajtů: 63 640 244 224
Po spuštění: Volných bajtů: 63 699 062 784
.
- - End Of File - - 8D3AEA3A8C983BD92CE58F87840E27E1

Příspěvekod **jaro3** » 12 zář 2011 09:33

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Kód: Vybrat vše

Folder::
c:\documents and settings\David\Plocha\Garena

Driver::
GGSAFERDriver

Firefox::
FF - ProfilePath - c:\documents and settings\David\Data aplikací\Mozilla\Firefox\Profiles\lqn6i1lp.default\
FF - prefs.js: browser.search.defaulturl - hxxp://flvdirect.iamwired.net/websearch ... ps&search=
FF - prefs.js: keyword.URL - hxxp://flvdirect.iamwired.net/websearch ... ps&search=

Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si Registry Search

Rozbal si soubor do složky a potom poklepej na regsearch.exe ke startu programu.
Do volné linky(linek) nad Enter search string case independent zkopíruj a vlož:

Kód: Vybrat vše

Skype

A klikni na OK.Otevře se notepad s textem a celý text z něho sem vlož.

Stáhni si OTL by OldTimer
na plochu. Ujisti se , že máš zavřena všechna ostatní okna a poklepej na ikonu OTL.Nahoře v okně pod Výstup klikni na minimální výstup.Pod Běžné registry změň na Vše. Zatrhni Kontrola na havěť “LOP“ a Kontrola na havěť “ Purity“ . Klikni na Prohledat. Všechny ostatní nastavení ponech jak jsou. Sken může trvat dlouho, až skončí otevřou se dva logy:
OTL.Txt
Extras.Txt
Jsou uloženy ve stejném místě jako OTL. Oba logy sem prosím zkopíruj.

Feroo · Příspěvekod **Feroo** » 12 zář 2011 17:19

ComboFix 11-09-10.03 - David 12.09.2011 17:03:33.3.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3326.2729 [GMT 2:00]
Spuštěný z: c:\documents and settings\David\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\David\Plocha\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\David\Plocha\Garena
c:\documents and settings\David\Plocha\Garena\AESocket.dll
c:\documents and settings\David\Plocha\Garena\ArmyGreen\armygreen_thumbnail.bmp
c:\documents and settings\David\Plocha\Garena\ArmyGreen\armygreen_thumbnail_select.bmp
c:\documents and settings\David\Plocha\Garena\ArmyGreen\garenatv.ggz
c:\documents and settings\David\Plocha\Garena\ArmyGreen\Skin.ggz
c:\documents and settings\David\Plocha\Garena\atl71.dll
c:\documents and settings\David\Plocha\Garena\Avatar\boy.swf
c:\documents and settings\David\Plocha\Garena\Avatar\boy_s.swf
c:\documents and settings\David\Plocha\Garena\Avatar\girl.swf
c:\documents and settings\David\Plocha\Garena\Avatar\girl_s.swf
c:\documents and settings\David\Plocha\Garena\Avatar\unknown.swf
c:\documents and settings\David\Plocha\Garena\Avatar\unknown_s.swf
c:\documents and settings\David\Plocha\Garena\BlackShotLauncher\launcher.exe
c:\documents and settings\David\Plocha\Garena\BlackShotLauncher\modules\l_background.jpg
c:\documents and settings\David\Plocha\Garena\BlackShotLauncher\modules\l_loading.html
c:\documents and settings\David\Plocha\Garena\BlackShotLauncher\Skin\background.bmp
c:\documents and settings\David\Plocha\Garena\BlackShotLauncher\Skin\Header.bmp
c:\documents and settings\David\Plocha\Garena\BlackShotLauncher\Skin\images.xml
c:\documents and settings\David\Plocha\Garena\BlackShotLauncher\Skin\mouseout.bmp
c:\documents and settings\David\Plocha\Garena\BlackShotLauncher\Skin\mouseover.bmp
c:\documents and settings\David\Plocha\Garena\BlackShotLauncher\Skin\ProgressBarBgH.bmp
c:\documents and settings\David\Plocha\Garena\BlackShotLauncher\Skin\ProgressBarBgV.bmp
c:\documents and settings\David\Plocha\Garena\BlackShotLauncher\Skin\ProgressBarH.bmp
c:\documents and settings\David\Plocha\Garena\BlackShotLauncher\Skin\ProgressBarV.bmp
c:\documents and settings\David\Plocha\Garena\BlackShotLauncher\Skin\Thumbs.db
c:\documents and settings\David\Plocha\Garena\BlackShotLauncher\Skin\ui.xml
c:\documents and settings\David\Plocha\Garena\BlackShotLauncher\UpdateMove.exe
c:\documents and settings\David\Plocha\Garena\BlackShotLauncher\UpdateMove1.exe
c:\documents and settings\David\Plocha\Garena\BlackShotLauncher\XMLSkin.dll
c:\documents and settings\David\Plocha\Garena\clients2.dat
c:\documents and settings\David\Plocha\Garena\CommonLib.dll
c:\documents and settings\David\Plocha\Garena\config\bs.br.xml
c:\documents and settings\David\Plocha\Garena\config\bs.cn.xml
c:\documents and settings\David\Plocha\Garena\config\bs.en.xml
c:\documents and settings\David\Plocha\Garena\config\bs.id.xml
c:\documents and settings\David\Plocha\Garena\config\bs.pp.xml
c:\documents and settings\David\Plocha\Garena\config\bs.ru.xml
c:\documents and settings\David\Plocha\Garena\config\bs.sd.xml
c:\documents and settings\David\Plocha\Garena\config\bs.sp.xml
c:\documents and settings\David\Plocha\Garena\config\bs.th.xml
c:\documents and settings\David\Plocha\Garena\config\bs.tw.xml
c:\documents and settings\David\Plocha\Garena\config\bs.vn.xml
c:\documents and settings\David\Plocha\Garena\config\loccn.xml
c:\documents and settings\David\Plocha\Garena\config\locen.xml
c:\documents and settings\David\Plocha\Garena\config\lockr.xml
c:\documents and settings\David\Plocha\Garena\config\loctw.xml
c:\documents and settings\David\Plocha\Garena\config\locvn.xml
c:\documents and settings\David\Plocha\Garena\CrashSender.exe
c:\documents and settings\David\Plocha\Garena\Crystal\crystal_thumbnail.bmp
c:\documents and settings\David\Plocha\Garena\Crystal\crystal_thumbnail_select.bmp
c:\documents and settings\David\Plocha\Garena\Crystal\garenatv.ggz
c:\documents and settings\David\Plocha\Garena\Crystal\Skin.ggz
c:\documents and settings\David\Plocha\Garena\Crystal\Thumbs.db
c:\documents and settings\David\Plocha\Garena\CS15Hook.dll
c:\documents and settings\David\Plocha\Garena\deps\olgame.gga
c:\documents and settings\David\Plocha\Garena\deps\vww.gzp
c:\documents and settings\David\Plocha\Garena\deps\webgame.gga
c:\documents and settings\David\Plocha\Garena\dlls\CTSys.dll
c:\documents and settings\David\Plocha\Garena\dlls\flags.dll
c:\documents and settings\David\Plocha\Garena\dlls\FPSHelper.dll
c:\documents and settings\David\Plocha\Garena\dlls\GFireMan.dll
c:\documents and settings\David\Plocha\Garena\dlls\IPvR.dll
c:\documents and settings\David\Plocha\Garena\dlls\PEngine.dll
c:\documents and settings\David\Plocha\Garena\dlls\PluginLanguage.dll
c:\documents and settings\David\Plocha\Garena\dlls\Sca.dll
c:\documents and settings\David\Plocha\Garena\dlls\WC3J.dll
c:\documents and settings\David\Plocha\Garena\files\files.ggz
c:\documents and settings\David\Plocha\Garena\FPSHook.dll
c:\documents and settings\David\Plocha\Garena\Gamecn.dat
c:\documents and settings\David\Plocha\Garena\GameConfig.xml
c:\documents and settings\David\Plocha\Garena\Gameen.dat
c:\documents and settings\David\Plocha\Garena\Gametw.dat
c:\documents and settings\David\Plocha\Garena\Gamevn.dat
c:\documents and settings\David\Plocha\Garena\Garena.dat
c:\documents and settings\David\Plocha\Garena\Garena.exe
c:\documents and settings\David\Plocha\Garena\garena.log
c:\documents and settings\David\Plocha\Garena\GarenaSkin.dll
c:\documents and settings\David\Plocha\Garena\GarenaSkin1.dll
c:\documents and settings\David\Plocha\Garena\GarenaSkin2.dll
c:\documents and settings\David\Plocha\Garena\GarenaTV.xml
c:\documents and settings\David\Plocha\Garena\GarenaTV\0.bmp
c:\documents and settings\David\Plocha\Garena\GarenaTV\1.bmp
c:\documents and settings\David\Plocha\Garena\GarenaTV\2.bmp
c:\documents and settings\David\Plocha\Garena\GarenaTV\3.bmp
c:\documents and settings\David\Plocha\Garena\GarenaTV\4.bmp
c:\documents and settings\David\Plocha\Garena\GarenaTV\5.bmp
c:\documents and settings\David\Plocha\Garena\GarenaTV\6.bmp
c:\documents and settings\David\Plocha\Garena\GarenaTV\cn.ggz
c:\documents and settings\David\Plocha\Garena\GarenaTV\cn_s.ggz
c:\documents and settings\David\Plocha\Garena\GarenaTV\en.ggz
c:\documents and settings\David\Plocha\Garena\GarenaTV\en_s.ggz
c:\documents and settings\David\Plocha\Garena\GarenaTV\id_s.ggz
c:\documents and settings\David\Plocha\Garena\GarenaTV\Thumbs.db
c:\documents and settings\David\Plocha\Garena\GarenaTV\tw.ggz
c:\documents and settings\David\Plocha\Garena\GarenaTV\tw_s.ggz
c:\documents and settings\David\Plocha\Garena\GarenaTV_UI.dll
c:\documents and settings\David\Plocha\Garena\GarenaTVHook.dll
c:\documents and settings\David\Plocha\Garena\GGICON.ico
c:\documents and settings\David\Plocha\Garena\ggsec.dll
c:\documents and settings\David\Plocha\Garena\Gn.ggz
c:\documents and settings\David\Plocha\Garena\hc.xml
c:\documents and settings\David\Plocha\Garena\Inject.dll
c:\documents and settings\David\Plocha\Garena\L4DSocket.dll
c:\documents and settings\David\Plocha\Garena\langs.xml
c:\documents and settings\David\Plocha\Garena\Languages\CrashSender\br.xml
c:\documents and settings\David\Plocha\Garena\Languages\CrashSender\cn.xml
c:\documents and settings\David\Plocha\Garena\Languages\CrashSender\kr.xml
c:\documents and settings\David\Plocha\Garena\Languages\CrashSender\kz.xml
c:\documents and settings\David\Plocha\Garena\Languages\CrashSender\ru.xml
c:\documents and settings\David\Plocha\Garena\Languages\CrashSender\sp.xml
c:\documents and settings\David\Plocha\Garena\Languages\CrashSender\tw.xml
c:\documents and settings\David\Plocha\Garena\Languages\CrashSender\vn.xml
c:\documents and settings\David\Plocha\Garena\Languages\FPSGame.dll.cn
c:\documents and settings\David\Plocha\Garena\Languages\FPSGame.dll.en
c:\documents and settings\David\Plocha\Garena\Languages\FPSGame.dll.tw
c:\documents and settings\David\Plocha\Garena\Languages\GarenaTV_UI.dll.cn
c:\documents and settings\David\Plocha\Garena\Languages\GarenaTV_UI.dll.en
c:\documents and settings\David\Plocha\Garena\Languages\GarenaTV_UI.dll.id
c:\documents and settings\David\Plocha\Garena\Languages\GarenaTV_UI.dll.tw
c:\documents and settings\David\Plocha\Garena\Languages\languages.glf
c:\documents and settings\David\Plocha\Garena\Languages\OLGame.dll.en
c:\documents and settings\David\Plocha\Garena\Languages\OLGame.dll.vn
c:\documents and settings\David\Plocha\Garena\Languages\update.exe.cn
c:\documents and settings\David\Plocha\Garena\Languages\update.exe.tw
c:\documents and settings\David\Plocha\Garena\Languages\update2.exe.cn
c:\documents and settings\David\Plocha\Garena\Languages\update2.exe.tw
c:\documents and settings\David\Plocha\Garena\Languages\WC3Ass.dll.br
c:\documents and settings\David\Plocha\Garena\Languages\WC3Ass.dll.cn
c:\documents and settings\David\Plocha\Garena\Languages\WC3Ass.dll.en
c:\documents and settings\David\Plocha\Garena\Languages\WC3Ass.dll.kr
c:\documents and settings\David\Plocha\Garena\Languages\WC3Ass.dll.kz
c:\documents and settings\David\Plocha\Garena\Languages\WC3Ass.dll.ru
c:\documents and settings\David\Plocha\Garena\Languages\WC3Ass.dll.sp
c:\documents and settings\David\Plocha\Garena\Languages\WC3Ass.dll.tw
c:\documents and settings\David\Plocha\Garena\Languages\WC3Ass.dll.vn
c:\documents and settings\David\Plocha\Garena\Languages\WC3Ladder.dll.cn
c:\documents and settings\David\Plocha\Garena\Languages\WC3Ladder.dll.en
c:\documents and settings\David\Plocha\Garena\Languages\WC3Ladder.dll.tw
c:\documents and settings\David\Plocha\Garena\lib\common\Language.dll
c:\documents and settings\David\Plocha\Garena\lib\GarenaRoomSystem.dll
c:\documents and settings\David\Plocha\Garena\lib\GarenaWebService.dll
c:\documents and settings\David\Plocha\Garena\lib\HttpLayer.dll
c:\documents and settings\David\Plocha\Garena\lib\LibPlugin.ggz
c:\documents and settings\David\Plocha\Garena\lib\LoadSwf.dll
c:\documents and settings\David\Plocha\Garena\lib\MessagePumpLib.dll
c:\documents and settings\David\Plocha\Garena\lib\NetworkLayer.dll
c:\documents and settings\David\Plocha\Garena\lib\PKCS.dll
c:\documents and settings\David\Plocha\Garena\lib\RSA.dll
c:\documents and settings\David\Plocha\Garena\lib\SkinFontHelper.dll
c:\documents and settings\David\Plocha\Garena\lib\WebCache.dll
c:\documents and settings\David\Plocha\Garena\mdata.ggz
c:\documents and settings\David\Plocha\Garena\newgame.ggz
c:\documents and settings\David\Plocha\Garena\onlinegame.ggz
c:\documents and settings\David\Plocha\Garena\PluginKernel.dll
c:\documents and settings\David\Plocha\Garena\plugins\Game\GarenaTVRecorder.dll
c:\documents and settings\David\Plocha\Garena\plugins\Game\WC3Ass.dll
c:\documents and settings\David\Plocha\Garena\plugins\Game\WC3Ladder.dll
c:\documents and settings\David\Plocha\Garena\plugins\Game\WC3VC.dll
c:\documents and settings\David\Plocha\Garena\plugins\Plugins.ggz
c:\documents and settings\David\Plocha\Garena\plugins\UI\AdPlugin.dll
c:\documents and settings\David\Plocha\Garena\plugins\UI\AdPlugin\close_rollout.bmp
c:\documents and settings\David\Plocha\Garena\plugins\UI\AdPlugin\close_rollover.bmp
c:\documents and settings\David\Plocha\Garena\plugins\UI\AdPlugin\down_rollout.bmp
c:\documents and settings\David\Plocha\Garena\plugins\UI\AdPlugin\down_rollover.bmp
c:\documents and settings\David\Plocha\Garena\plugins\UI\AdPlugin\skinmsn.bmp
c:\documents and settings\David\Plocha\Garena\plugins\UI\AdPlugin\up_rollout.bmp
c:\documents and settings\David\Plocha\Garena\plugins\UI\AdPlugin\up_rollover.bmp
c:\documents and settings\David\Plocha\Garena\plugins\UI\AvoidCrackPlugin.dll
c:\documents and settings\David\Plocha\Garena\plugins\UI\BlackShotPlugin.dll
c:\documents and settings\David\Plocha\Garena\plugins\UI\CafeLogin.dll
c:\documents and settings\David\Plocha\Garena\plugins\UI\FPSGame.dll
c:\documents and settings\David\Plocha\Garena\plugins\UI\GarenaTV.dll
c:\documents and settings\David\Plocha\Garena\plugins\UI\GarenaTVRecUI.dll
c:\documents and settings\David\Plocha\Garena\plugins\UI\GEngine.dll
c:\documents and settings\David\Plocha\Garena\plugins\UI\LOLPlugin.dll
c:\documents and settings\David\Plocha\Garena\plugins\UI\M3GoUI.dll
c:\documents and settings\David\Plocha\Garena\plugins\UI\OLGame.dll
c:\documents and settings\David\Plocha\Garena\plugins\UI\Plazasafe.dll
c:\documents and settings\David\Plocha\Garena\plugins\UI\safeapi.dll
c:\documents and settings\David\Plocha\Garena\plugins\UI\StatPlugin.dll
c:\documents and settings\David\Plocha\Garena\plugins\UI\WebGameUI.dll
c:\documents and settings\David\Plocha\Garena\RecConfig.xml
c:\documents and settings\David\Plocha\Garena\Roomcn.dat
c:\documents and settings\David\Plocha\Garena\Roomen.dat
c:\documents and settings\David\Plocha\Garena\Roomtw.dat
c:\documents and settings\David\Plocha\Garena\safeapi.dll
c:\documents and settings\David\Plocha\Garena\server.xml
c:\documents and settings\David\Plocha\Garena\shop\items\1.gif
c:\documents and settings\David\Plocha\Garena\shop\items\100.gif
c:\documents and settings\David\Plocha\Garena\shop\items\105.gif
c:\documents and settings\David\Plocha\Garena\shop\items\150.gif
c:\documents and settings\David\Plocha\Garena\shop\items\151.gif
c:\documents and settings\David\Plocha\Garena\shop\items\2.gif
c:\documents and settings\David\Plocha\Garena\shop\items\200.gif
c:\documents and settings\David\Plocha\Garena\shop\items\201.gif
c:\documents and settings\David\Plocha\Garena\shop\items\202.gif
c:\documents and settings\David\Plocha\Garena\shop\items\203.gif
c:\documents and settings\David\Plocha\Garena\shop\items\204.gif
c:\documents and settings\David\Plocha\Garena\shop\items\205.gif
c:\documents and settings\David\Plocha\Garena\shop\items\206.gif
c:\documents and settings\David\Plocha\Garena\shop\items\21.gif
c:\documents and settings\David\Plocha\Garena\shop\items\22.gif
c:\documents and settings\David\Plocha\Garena\shop\items\23.gif
c:\documents and settings\David\Plocha\Garena\shop\items\24.gif
c:\documents and settings\David\Plocha\Garena\shop\items\3.gif
c:\documents and settings\David\Plocha\Garena\shop\items\300.gif
c:\documents and settings\David\Plocha\Garena\shop\items\301.gif
c:\documents and settings\David\Plocha\Garena\shop\items\302.gif
c:\documents and settings\David\Plocha\Garena\shop\items\303.gif
c:\documents and settings\David\Plocha\Garena\shop\items\304.gif
c:\documents and settings\David\Plocha\Garena\shop\items\305.gif
c:\documents and settings\David\Plocha\Garena\shop\items\306.gif
c:\documents and settings\David\Plocha\Garena\shop\items\307.gif
c:\documents and settings\David\Plocha\Garena\shop\items\308.gif
c:\documents and settings\David\Plocha\Garena\shop\items\309.gif
c:\documents and settings\David\Plocha\Garena\shop\items\310.gif
c:\documents and settings\David\Plocha\Garena\shop\items\311.gif
c:\documents and settings\David\Plocha\Garena\shop\items\312.gif
c:\documents and settings\David\Plocha\Garena\shop\items\313.gif
c:\documents and settings\David\Plocha\Garena\shop\items\4.gif
c:\documents and settings\David\Plocha\Garena\shop\items\40.gif
c:\documents and settings\David\Plocha\Garena\shop\items\60.gif
c:\documents and settings\David\Plocha\Garena\shop\items\61.gif
c:\documents and settings\David\Plocha\Garena\shop\items\62.gif
c:\documents and settings\David\Plocha\Garena\shop\items\63.gif
c:\documents and settings\David\Plocha\Garena\shop\items\64.gif
c:\documents and settings\David\Plocha\Garena\shop\items\65.gif
c:\documents and settings\David\Plocha\Garena\shop\items\66.gif
c:\documents and settings\David\Plocha\Garena\shop\items\67.gif
c:\documents and settings\David\Plocha\Garena\shop\items\68.gif
c:\documents and settings\David\Plocha\Garena\shop\items\69.gif
c:\documents and settings\David\Plocha\Garena\shop\items\70.gif
c:\documents and settings\David\Plocha\Garena\shop\items\8.gif
c:\documents and settings\David\Plocha\Garena\shop\items\Thumbs.db
c:\documents and settings\David\Plocha\Garena\Skin\Flags\-.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ad.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ae.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\af.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ag.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ai.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\al.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\am.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\an.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ao.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\aq.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ar.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\as.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\at.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\au.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\aw.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\az.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ba.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\bb.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\bd.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\be.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\bf.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\bg.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\bh.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\bi.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\bj.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\bm.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\bn.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\bo.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\br.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\bs.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\bt.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\bv.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\bw.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\by.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\bz.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ca.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\cd.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\cf.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\cg.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ci.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ck.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\cl.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\cm.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\cn.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\co.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\cr.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\cu.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\cv.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\cy.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\cz.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\de.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\dj.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\dk.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\dm.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\do.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\dz.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ec.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ee.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\eg.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\er.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\es.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\et.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\eu.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\fi.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\fj.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\fk.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\fm.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\fo.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\fr.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\fx.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ga.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\gb.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\gd.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ge.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\gh.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\gi.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\gl.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\gm.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\gn.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\gp.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\gq.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\gr.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\gt.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\gu.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\gw.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\gy.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\hk.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\hm.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\hn.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\hr.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ht.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\hu.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ch.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\id.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ie.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\il.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\im.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\in.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\io.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\iq.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ir.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\is.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\it.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\je.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\jm.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\jo.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\jp.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ke.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\kg.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\kh.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ki.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\km.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\kn.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\kp.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\kr.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\kw.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ky.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\kz.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\la.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\lb.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\lc.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\li.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\lk.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\lr.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ls.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\lt.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\lu.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\lv.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ly.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ma.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\mc.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\md.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\me.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\mg.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\mh.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\mk.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ml.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\mm.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\mn.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\mo.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\mp.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\mq.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\mr.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ms.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\mt.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\mu.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\mv.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\mw.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\mx.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\my.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\mz.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\na.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\nc.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ne.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\nf.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ng.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ni.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\nl.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\no.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\np.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\nr.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\nz.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\om.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\pa.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\pe.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\pf.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\pg.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ph.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\pk.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\pl.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\pm.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\pr.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ps.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\pt.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\pw.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\py.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\qa.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\re.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ro.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\rs.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ru.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\rw.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\sa.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\sb.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\sc.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\sd.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\se.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\sg.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\si.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\sk.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\sl.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\sm.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\sn.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\so.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\sr.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\st.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\sv.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\sy.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\sz.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\tc.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\td.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\tf.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\tg.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\th.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\Thumbs.db
c:\documents and settings\David\Plocha\Garena\Skin\Flags\tj.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\tm.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\tn.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\to.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\tp.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\tr.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\tt.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\tv.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\tw.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\tz.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ua.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ug.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\uk.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\um.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\us.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\uy.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\uz.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\va.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\vc.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ve.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\vg.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\vi.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\vn.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\vu.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ws.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\ye.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\yu.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\za.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\zm.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\zr.gif
c:\documents and settings\David\Plocha\Garena\Skin\Flags\zw.gif
c:\documents and settings\David\Plocha\Garena\Skin\garenatv.ggz
c:\documents and settings\David\Plocha\Garena\Skin\red_thumbnail.bmp
c:\documents and settings\David\Plocha\Garena\Skin\red_thumbnail_select.bmp
c:\documents and settings\David\Plocha\Garena\Skin\Skin.ggz
c:\documents and settings\David\Plocha\Garena\Skin\SkinSwitcher\skinselect_Logo.bmp
c:\documents and settings\David\Plocha\Garena\Skin\SkinSwitcher\skinselect_main_bg.bmp
c:\documents and settings\David\Plocha\Garena\Skin\SkinSwitcher\skinselect_ok_btn.bmp
c:\documents and settings\David\Plocha\Garena\Skin\SkinSwitcher\skinselect_thumbnail_bg.bmp
c:\documents and settings\David\Plocha\Garena\Skin\Thumbs.db
c:\documents and settings\David\Plocha\Garena\SkinBlack\black_thumbnail.bmp
c:\documents and settings\David\Plocha\Garena\SkinBlack\black_thumbnail_select.bmp
c:\documents and settings\David\Plocha\Garena\SkinBlack\garenatv.ggz
c:\documents and settings\David\Plocha\Garena\SkinBlack\Skin.ggz
c:\documents and settings\David\Plocha\Garena\Skins.xml
c:\documents and settings\David\Plocha\Garena\slotmachine.ggz
c:\documents and settings\David\Plocha\Garena\SocketHook.dll
c:\documents and settings\David\Plocha\Garena\sound\folder.wav
c:\documents and settings\David\Plocha\Garena\sound\game.wav
c:\documents and settings\David\Plocha\Garena\sound\msg.wav
c:\documents and settings\David\Plocha\Garena\sound\nudge.wav
c:\documents and settings\David\Plocha\Garena\sound\quit.wav
c:\documents and settings\David\Plocha\Garena\sound\ring.wav
c:\documents and settings\David\Plocha\Garena\sound\sysmsg.wav
c:\documents and settings\David\Plocha\Garena\source.xml
c:\documents and settings\David\Plocha\Garena\sqlite3.dll
c:\documents and settings\David\Plocha\Garena\uninst.exe
c:\documents and settings\David\Plocha\Garena\update.dat
c:\documents and settings\David\Plocha\Garena\update.exe
c:\documents and settings\David\Plocha\Garena\update2.exe
c:\documents and settings\David\Plocha\Garena\user.xml
c:\documents and settings\David\Plocha\Garena\user\61456199\ban.dat
c:\documents and settings\David\Plocha\Garena\user\61456199\data.dat
c:\documents and settings\David\Plocha\Garena\user\61456199\fps.dat
c:\documents and settings\David\Plocha\Garena\user\61456199\recent.txt
c:\documents and settings\David\Plocha\Garena\user\61481503\ban.dat
c:\documents and settings\David\Plocha\Garena\user\61481503\data.dat
c:\documents and settings\David\Plocha\Garena\user\61481503\fps.dat
c:\documents and settings\David\Plocha\Garena\user\61481503\recent.txt
c:\documents and settings\David\Plocha\Garena\War3Hook.dll
c:\documents and settings\David\Plocha\Garena\web\1.cn.html
c:\documents and settings\David\Plocha\Garena\web\1.en.html
c:\documents and settings\David\Plocha\Garena\web\1.tw.html
c:\documents and settings\David\Plocha\Garena\web\2.cn.html
c:\documents and settings\David\Plocha\Garena\web\2.en.html
c:\documents and settings\David\Plocha\Garena\web\2.tw.html
c:\documents and settings\David\Plocha\Garena\web\3.cn.html
c:\documents and settings\David\Plocha\Garena\web\3.en.html
c:\documents and settings\David\Plocha\Garena\web\3.tw.html
c:\documents and settings\David\Plocha\Garena\web\6.cn.html
c:\documents and settings\David\Plocha\Garena\web\6.en.html
c:\documents and settings\David\Plocha\Garena\web\6.tw.html
c:\documents and settings\David\Plocha\Garena\web\cache\Freesky\css\foemb_2.css
c:\documents and settings\David\Plocha\Garena\web\cache\Freesky\img\do_bg2.jpg
c:\documents and settings\David\Plocha\Garena\web\cache\Freesky\img\do_btn.jpg
c:\documents and settings\David\Plocha\Garena\web\cache\Freesky\img\ggbackground.jpg
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\config\css\screen.css
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\config\images\bgd_body.gif
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\config\images\bgd_dotted_hevertical.gif
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\config\images\bgd_dotted_vertical.gif
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\config\images\bgd_footer.gif
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\config\images\bgd_html.gif
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\config\images\header.jpg
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\config\images\ico_bullet.gif
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\config\images\Thumbs.db
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\config\images\visu_download.jpg
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\config\images\visu_line.gif
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\config\images\visu_logo-garena.gif
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\config\images\visu_run.gif
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\config\images\visu_setting.gif
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\css\screen.css
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\images\bgd_body.jpg
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\images\bgd_html.gif
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\images\bgd_news.gif
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\images\btn_forum_n.gif
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\images\btn_forum_o.gif
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\images\btn_support_n.gif
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\images\btn_support_o.gif
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\images\btn_webiste_n.gif
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\images\btn_webiste_o.gif
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\images\ico-01.gif
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\images\slogan_rom.jpg
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\images\Thumbs.db
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\images\topupbanner.jpg
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\images\visu_banner.gif
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\images\visu_banner_01.gif
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\images\visu_forum.gif
c:\documents and settings\David\Plocha\Garena\web\cache\ROM\images\visu_garena.gif
c:\documents and settings\David\Plocha\Garena\web\cache\RUpoker\css\pokerembed.css
c:\documents and settings\David\Plocha\Garena\web\cache\RUpoker\img\bg.jpg
c:\documents and settings\David\Plocha\Garena\web\cache\RUpoker\img\btn.jpg
c:\documents and settings\David\Plocha\Garena\web\cache\RUpoker\img\ggbackground.jpg
c:\documents and settings\David\Plocha\Garena\web\embed_game.jpg
c:\documents and settings\David\Plocha\Garena\web\embed_game_cn.jpg
c:\documents and settings\David\Plocha\Garena\web\embed_game_tw.jpg
c:\documents and settings\David\Plocha\Garena\web\embed_garenafire_ZH.jpg
c:\documents and settings\David\Plocha\Garena\web\embed_gfire.jpg
c:\documents and settings\David\Plocha\Garena\web\gfire.cn.html
c:\documents and settings\David\Plocha\Garena\web\gfire.en.html
c:\documents and settings\David\Plocha\Garena\web\gfire.tw.html
c:\documents and settings\David\Plocha\Garena\web\ggbackground.jpg
c:\documents and settings\David\Plocha\Garena\web\loading.gif
c:\documents and settings\David\Plocha\Garena\web\loading.html
c:\documents and settings\David\Plocha\Garena\YYFileSystem.dll
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_GGSAFERDRIVER
-------\Service_GGSAFERDriver
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-08-12 do 2011-09-12 )))))))))))))))))))))))))))))))
.
.
2011-09-10 19:01 . 2011-09-10 19:01 388096 ----a-r- c:\documents and settings\David\Data aplikací\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-08-29 16:16 . 2011-08-29 16:16 -------- d-----w- c:\documents and settings\David\Data aplikací\TeamViewer
2011-08-28 18:22 . 2011-08-28 18:24 -------- d-----w- c:\program files\Zrychleni Pocitace
2011-08-28 18:22 . 2011-08-29 09:03 -------- d-----w- c:\documents and settings\David\Local Settings\Data aplikací\OpenCandy
2011-08-28 18:22 . 2011-08-28 18:22 -------- d-----w- c:\documents and settings\David\Data aplikací\OpenCandy
2011-08-28 18:21 . 2011-08-28 18:21 -------- d-----w- c:\program files\DsNET Corp
2011-08-28 17:01 . 2011-08-28 17:01 -------- d-----w- c:\program files\WinPcap
2011-08-28 10:24 . 2011-08-28 16:35 -------- d-----w- C:\wamp
2011-08-16 08:19 . 2011-08-16 08:19 -------- d-----w- c:\documents and settings\David\Data aplikací\VitySoft
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-12 15:14 . 2009-12-13 18:00 16608 ----a-w- c:\windows\gdrv.sys
2011-08-11 07:13 . 2011-05-27 11:06 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-07-15 18:17 . 2011-07-15 18:17 109440 ----a-w- c:\windows\system32\drivers\KbdCap.sys
2011-07-08 14:02 . 2008-04-13 22:27 10496 ----a-w- c:\windows\system32\drivers\ndistapi.sys
2011-07-06 17:52 . 2011-04-15 10:05 41272 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-07-06 17:52 . 2011-04-15 10:05 22712 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-06-21 18:18 . 2008-04-14 06:52 668160 ----a-w- c:\windows\system32\wininet.dll
2011-06-21 18:18 . 2008-04-14 06:50 61952 ----a-w- c:\windows\system32\tdc.ocx
2011-06-21 18:18 . 2008-04-14 06:51 81920 ----a-w- c:\windows\system32\ieencode.dll
2011-06-21 18:16 . 2008-04-14 05:50 370176 ----a-w- c:\windows\system32\html.iec
.
.
((((((((((((((((((((((((((((( SnapShot_2011-09-11_09.05.13 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-09-12 15:14 . 2011-09-12 15:14 16384 c:\windows\Temp\Perflib_Perfdata_7d4.dat
+ 2011-09-12 15:14 . 2011-09-12 15:14 16384 c:\windows\Temp\Perflib_Perfdata_13c.dat
+ 2009-12-25 22:42 . 2007-11-30 03:39 18296 c:\windows\system32\spmsg.dll
- 2009-12-25 22:42 . 2010-02-22 14:20 18296 c:\windows\system32\spmsg.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-05-10 12:10 122512 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-10-09 139264]
"PCSpeedUp"="c:\program files\Zrychleni Pocitace\PCSpeedUp.lnk" [2011-08-28 2013]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2009-01-13 18084864]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-08-13 98304]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"="c:\windows\system32\Macromed\Flash\FlashUtil10k_ActiveX.exe" [2011-07-25 232912]
.
c:\documents and settings\David\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Obsah aplikace OneNote.onetoc2 [2011-4-20 3656]
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"d:\\ICQ6.5\\ICQ.exe"=
"d:\\Quake 3\\quake3.exe"=
"d:\\Warcraft 3\\Warcraft III\\Warcraft III.exe"=
"d:\\Battlefield 2\\BF2.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Program Files\\Opera 11.10 beta\\opera.exe"=
"d:\\Warcraft 3\\Warcraft III\\War3.exe"=
"c:\\Program Files\\DsNET Corp\\aTube Catcher 2.0\\yct.exe"=
.
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [13.12.2009 20:21 691696]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [27.5.2011 13:07 441176]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [13.12.2009 20:18 307928]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [13.12.2009 20:18 19544]
R2 ES lite Service;ES lite Service for program management.;c:\program files\Gigabyte\EasySaver\essvr.exe [13.12.2009 20:01 68136]
R2 npf;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [27.1.2010 4:09 50704]
R3 kbdcap;kbdcap;c:\windows\system32\drivers\KbdCap.sys [15.7.2011 20:17 109440]
R3 LgBttPort;LGE Bluetooth TransPort;c:\windows\system32\drivers\lgbtport.sys [29.9.2009 8:11 12160]
R3 lgbusenum;LG Bluetooth Bus Enumerator;c:\windows\system32\drivers\lgbtbus.sys [29.9.2009 8:11 10496]
R3 LGVMODEM;LGE Virtual Modem;c:\windows\system32\drivers\lgvmodem.sys [29.9.2009 8:11 12928]
S3 Andbus;LGE Android Platform Composite USB Device;c:\windows\system32\drivers\lgandbus.sys [7.12.2010 14:12 14336]
S3 AndDiag;LGE Android Platform USB Serial Port;c:\windows\system32\drivers\lganddiag.sys [7.12.2010 14:12 20736]
S3 AndGps;LGE Android Platform USB GPS NMEA Port;c:\windows\system32\drivers\lgandgps.sys [7.12.2010 14:12 20096]
S3 ANDModem;LGE Android Platform USB Modem;c:\windows\system32\drivers\lgandmodem.sys [7.12.2010 14:12 25088]
S3 AndNetDiag;LG AndroidNet USB Serial Port;c:\windows\system32\drivers\lgandnetdiag.sys [29.11.2010 6:21 23168]
S3 AndNetGps;LG AndroidNet USB GPS NMEA Port;c:\windows\system32\drivers\lgandnetgps.sys [29.11.2010 6:21 22272]
S3 ANDNetModem;LG AndroidNet USB Modem;c:\windows\system32\drivers\lgandnetmodem.sys [29.11.2010 6:21 28032]
S3 andnetndis;LG AndroidNet NDIS Ethernet Adapter;c:\windows\system32\drivers\lgandnetndis.sys [29.11.2010 6:57 67584]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [15.4.2011 12:05 41272]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.203.254 62.240.178.250
FF - ProfilePath - c:\documents and settings\David\Data aplikací\Mozilla\Firefox\Profiles\lqn6i1lp.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://google.cz/
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}
FF - Ext: LoudMo Contextual Ad Assistant: {2ad7e043-d360-bdbf-0fba-8c83cdade280} - c:\program files\Mozilla Firefox\extensions\{2ad7e043-d360-bdbf-0fba-8c83cdade280}
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-Garena - c:\documents and settings\David\Plocha\Garena\uninst.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-09-12 17:14
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(820)
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(4064)
c:\windows\system32\msi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\RTHDCPL.EXE
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
c:\windows\system32\wbem\wmiapsrv.exe
.
**************************************************************************
.
Celkový čas: 2011-09-12 17:17:53 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-09-12 15:17
ComboFix2.txt 2011-09-11 09:07
ComboFix3.txt 2011-07-29 10:17
.
Před spuštěním: Volných bajtů: 63 472 939 008
Po spuštění: Volných bajtů: 63 358 705 664
.
- - End Of File - - DFE0F1AB1EA21F6EF0B962728D9FCFC3

Feroo · Příspěvekod **Feroo** » 12 zář 2011 17:20

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:20:18, on 12.9.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\explorer.exe
C:\Program Files\trend micro\HiJackThis\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: DeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\WINDOWS\system32\dvmurl.dll
O2 - BHO: LinkAirBrowserHelper HistoryTriggerBHO - {21A88CB9-84D2-4020-A2D1-B25A21034884} - C:\Documents and Settings\David\Plocha\LG PC Suite IV\LinkAir\LinkAirBrowserHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [PCSpeedUp] C:\Program Files\Zrychleni Pocitace\PCSpeedUp.lnk
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\FlashUtil10k_ActiveX.exe -update activex (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\FlashUtil10k_ActiveX.exe -update activex (User 'Default user')
O4 - Startup: Obsah aplikace OneNote.onetoc2
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: ES lite Service for program management. (ES lite Service) - Unknown owner - C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe

--
End of file - 5740 bytes

Feroo · Příspěvekod **Feroo** » 12 zář 2011 17:24

Windows Registry Editor Version 5.00

; Registry Search 2.0 by Bobbi Flekman © 2005
; Version: 2.0.6.0

; Results at 12.9.2011 17:22:08 for strings:
; 'skype'
; Strings excluded from search:
; (None)
; Search in:
; Registry Keys Registry Values Registry Data
; HKEY_LOCAL_MACHINE HKEY_USERS

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\callto\DefaultIcon]
@="\"C:\\Program Files\\Skype\\Phone\\Skype.exe\",0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\callto\shell\open\command]
@="\"C:\\Program Files\\Skype\\Phone\\Skype.exe\" \"/callto:\"%l\"\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32]
@="C:\\Program Files\\Skype\\Plugin Manager\\ezPMUtils.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32]
@="C:\\Program Files\\Skype\\Plugin Manager\\ezPMUtils.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BB6410D8-F879-4184-9C5C-6A02D16AE0B3}\InprocServer32]
@="C:\\Program Files\\Skype\\Plugin Manager\\ezPMUtils.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CA1073A2-5F3F-4445-8E5E-7109BDCEDDBE}\InprocServer32]
@="C:\\Program Files\\Skype\\Plugin Manager\\ezPMUtils.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D0D38C6E-BF64-4C42-840D-3E0019D9F7A6}\InprocServer32]
@="C:\\Program Files\\Skype\\Plugin Manager\\ezPMUtils.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D5A55D2D-C59D-42C3-A5BF-4C08EEE74339}\InprocServer32]
@="C:\\Program Files\\Skype\\Plugin Manager\\ezPMUtils.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\skype-plugin]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\skype-plugin\shell]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\skype-plugin\shell\open]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\skype-plugin\shell\open\command]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\skype-plugin\shell\open\command]
@="\"C:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe\" \"/uri:%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{506B4C1F-587D-4CD3-94A3-00354CF6EFEF}\1.0\0\win32]
@="C:\\Program Files\\Skype\\Plugin Manager\\ezPMUtils.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{506B4C1F-587D-4CD3-94A3-00354CF6EFEF}\1.0\HELPDIR]
@="C:\\Program Files\\Skype\\Plugin Manager"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B0A632A5-B0D1-41E8-A84A-A502B3341363}\1.0\0\win32]
@="C:\\Program Files\\Skype\\Plugin Manager\\ezPMUtils.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B0A632A5-B0D1-41E8-A84A-A502B3341363}\1.0\HELPDIR]
@="C:\\Program Files\\Skype\\Plugin Manager"

[HKEY_LOCAL_MACHINE\SOFTWARE\Google\No Chrome Offer Until]
"Skype Technologies S.A."=dword:0132de38

[HKEY_LOCAL_MACHINE\SOFTWARE\Google\No Toolbar Offer Until]
"Skype Technologies S.A."=dword:013302f7

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\\Documents and Settings\\All Users\\Data aplikací\\Skype\\Plugins\\"="1"
"C:\\Documents and Settings\\All Users\\Data aplikací\\Skype\\Plugins\\Local Cache\\Categories\\"=""
"C:\\Documents and Settings\\All Users\\Data aplikací\\Skype\\Plugins\\Local Cache\\"=""
"C:\\Documents and Settings\\All Users\\Data aplikací\\Skype\\Plugins\\Plugins\\F57B48ADF2224F088EDD1A2B9BAD84E8\\Local Cache\\"=""
"C:\\Documents and Settings\\All Users\\Data aplikací\\Skype\\Plugins\\Plugins\\F57B48ADF2224F088EDD1A2B9BAD84E8\\"=""
"C:\\Documents and Settings\\All Users\\Data aplikací\\Skype\\Plugins\\Plugins\\"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4798A54961FC00B4A87CD89B5D651E30]
"00000000000000000000000000000000"="C:\\Documents and Settings\\All Users\\Data aplikací\\Skype\\Plugins\\Plugins\\F57B48ADF2224F088EDD1A2B9BAD84E8\\Game List.swf"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8A465E5F79715FD48ABDBCF50B10F81B]
"00000000000000000000000000000000"="C:\\Documents and Settings\\All Users\\Data aplikací\\Skype\\Plugins\\Local Cache\\~Please do not delete files from this folder"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C245BC6AB0D0E544EB25C7502C6D388F]
"00000000000000000000000000000000"="C:\\Documents and Settings\\All Users\\Data aplikací\\Skype\\Plugins\\Local Cache\\Categories\\Business.png"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DAF4C00772E1ED448926118C256717A7]
"00000000000000000000000000000000"="C:\\Documents and Settings\\All Users\\Data aplikací\\Skype\\Plugins\\Plugins\\F57B48ADF2224F088EDD1A2B9BAD84E8\\Local Cache\\~Please do not delete files from this folder"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeLineInWave]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeLineInWave]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\\SkypeLineInWave"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeLineInWave\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeLineInWave\Device Parameters]
"FriendlyName"="Realtek HD Audio Skype Input"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeVoiceInWave]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeVoiceInWave]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\\SkypeVoiceInWave"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeVoiceInWave\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeVoiceWave]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeVoiceWave]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\\SkypeVoiceWave"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeVoiceWave\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{65E8773E-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773e-8f56-11d0-a3b9-00a0c9223196}\#SkypeLineOutWave]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{65E8773E-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773e-8f56-11d0-a3b9-00a0c9223196}\#SkypeLineOutWave]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773e-8f56-11d0-a3b9-00a0c9223196}\\SkypeLineOutWave"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{65E8773E-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773e-8f56-11d0-a3b9-00a0c9223196}\#SkypeLineOutWave\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{65E8773E-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773e-8f56-11d0-a3b9-00a0c9223196}\#SkypeLineOutWave\Device Parameters]
"FriendlyName"="Realtek HD Audio Skype Output"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineInTopo]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineInTopo]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\SkypeLineInTopo"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineInTopo\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineInTopo\Device Parameters]
"FriendlyName"="Realtek HD Skype Input mixer"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineInWave]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineInWave]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\SkypeLineInWave"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineInWave\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineInWave\Device Parameters]
"FriendlyName"="Realtek HD Audio Skype Input"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineOutTopo]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineOutTopo]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\SkypeLineOutTopo"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineOutTopo\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineOutTopo\Device Parameters]
"FriendlyName"="Realtek HD Skype Ontput mixer"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineOutWave]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineOutWave]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\SkypeLineOutWave"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineOutWave\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineOutWave\Device Parameters]
"FriendlyName"="Realtek HD Audio Skype Output"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceInTopo]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceInTopo]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\SkypeVoiceInTopo"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceInTopo\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceInTopo\Device Parameters\EP]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceInTopo\Device Parameters\EP\0]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceInWave]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceInWave]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\SkypeVoiceInWave"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceInWave\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceTopo]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceTopo]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\SkypeVoiceTopo"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceTopo\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceTopo\Device Parameters\EP]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceTopo\Device Parameters\EP\0]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceWave]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceWave]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\SkypeVoiceWave"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceWave\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeLineInTopo]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeLineInTopo]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\\SkypeLineInTopo"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeLineInTopo\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeLineInTopo\Device Parameters]
"FriendlyName"="Realtek HD Skype Input mixer"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeLineOutTopo]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeLineOutTopo]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\\SkypeLineOutTopo"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeLineOutTopo\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeLineOutTopo\Device Parameters]
"FriendlyName"="Realtek HD Skype Ontput mixer"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeVoiceInTopo]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeVoiceInTopo]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\\SkypeVoiceInTopo"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeVoiceInTopo\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeVoiceTopo]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeVoiceTopo]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\\SkypeVoiceTopo"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeVoiceTopo\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeLineInWave]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeLineInWave]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\\SkypeLineInWave"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeLineInWave\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeLineInWave\Device Parameters]
"FriendlyName"="Realtek HD Audio Skype Input"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeVoiceInWave]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeVoiceInWave]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\\SkypeVoiceInWave"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeVoiceInWave\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeVoiceWave]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeVoiceWave]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\\SkypeVoiceWave"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeVoiceWave\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{65E8773E-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773e-8f56-11d0-a3b9-00a0c9223196}\#SkypeLineOutWave]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{65E8773E-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773e-8f56-11d0-a3b9-00a0c9223196}\#SkypeLineOutWave]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773e-8f56-11d0-a3b9-00a0c9223196}\\SkypeLineOutWave"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{65E8773E-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773e-8f56-11d0-a3b9-00a0c9223196}\#SkypeLineOutWave\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{65E8773E-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773e-8f56-11d0-a3b9-00a0c9223196}\#SkypeLineOutWave\Device Parameters]
"FriendlyName"="Realtek HD Audio Skype Output"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineInTopo]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineInTopo]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\SkypeLineInTopo"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineInTopo\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineInTopo\Device Parameters]
"FriendlyName"="Realtek HD Skype Input mixer"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineInWave]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineInWave]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\SkypeLineInWave"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineInWave\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineInWave\Device Parameters]
"FriendlyName"="Realtek HD Audio Skype Input"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineOutTopo]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineOutTopo]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\SkypeLineOutTopo"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineOutTopo\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineOutTopo\Device Parameters]
"FriendlyName"="Realtek HD Skype Ontput mixer"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineOutWave]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineOutWave]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\SkypeLineOutWave"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineOutWave\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineOutWave\Device Parameters]
"FriendlyName"="Realtek HD Audio Skype Output"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceInTopo]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceInTopo]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\SkypeVoiceInTopo"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceInTopo\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceInTopo\Device Parameters\EP]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceInTopo\Device Parameters\EP\0]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceInWave]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceInWave]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\SkypeVoiceInWave"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceInWave\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceTopo]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceTopo]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\SkypeVoiceTopo"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceTopo\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceTopo\Device Parameters\EP]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceTopo\Device Parameters\EP\0]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceWave]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceWave]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\SkypeVoiceWave"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceWave\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeLineInTopo]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeLineInTopo]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\\SkypeLineInTopo"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeLineInTopo\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeLineInTopo\Device Parameters]
"FriendlyName"="Realtek HD Skype Input mixer"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeLineOutTopo]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeLineOutTopo]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\\SkypeLineOutTopo"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeLineOutTopo\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeLineOutTopo\Device Parameters]
"FriendlyName"="Realtek HD Skype Ontput mixer"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeVoiceInTopo]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeVoiceInTopo]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\\SkypeVoiceInTopo"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeVoiceInTopo\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeVoiceTopo]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeVoiceTopo]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\\SkypeVoiceTopo"

Feroo · Příspěvekod **Feroo** » 12 zář 2011 17:24

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeVoiceTopo\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeLineInWave]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeLineInWave]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\\SkypeLineInWave"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeLineInWave\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeLineInWave\Device Parameters]
"FriendlyName"="Realtek HD Audio Skype Input"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeVoiceInWave]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeVoiceInWave]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\\SkypeVoiceInWave"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeVoiceInWave\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeVoiceWave]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeVoiceWave]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\\SkypeVoiceWave"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{65E8773D-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\#SkypeVoiceWave\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{65E8773E-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773e-8f56-11d0-a3b9-00a0c9223196}\#SkypeLineOutWave]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{65E8773E-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773e-8f56-11d0-a3b9-00a0c9223196}\#SkypeLineOutWave]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773e-8f56-11d0-a3b9-00a0c9223196}\\SkypeLineOutWave"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{65E8773E-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773e-8f56-11d0-a3b9-00a0c9223196}\#SkypeLineOutWave\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{65E8773E-8F56-11D0-A3B9-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{65e8773e-8f56-11d0-a3b9-00a0c9223196}\#SkypeLineOutWave\Device Parameters]
"FriendlyName"="Realtek HD Audio Skype Output"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineInTopo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineInTopo]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\SkypeLineInTopo"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineInTopo\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineInTopo\Device Parameters]
"FriendlyName"="Realtek HD Skype Input mixer"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineInWave]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineInWave]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\SkypeLineInWave"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineInWave\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineInWave\Device Parameters]
"FriendlyName"="Realtek HD Audio Skype Input"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineOutTopo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineOutTopo]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\SkypeLineOutTopo"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineOutTopo\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineOutTopo\Device Parameters]
"FriendlyName"="Realtek HD Skype Ontput mixer"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineOutWave]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineOutWave]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\SkypeLineOutWave"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineOutWave\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeLineOutWave\Device Parameters]
"FriendlyName"="Realtek HD Audio Skype Output"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceInTopo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceInTopo]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\SkypeVoiceInTopo"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceInTopo\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceInTopo\Device Parameters\EP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceInTopo\Device Parameters\EP\0]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceInWave]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceInWave]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\SkypeVoiceInWave"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceInWave\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceTopo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceTopo]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\SkypeVoiceTopo"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceTopo\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceTopo\Device Parameters\EP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceTopo\Device Parameters\EP\0]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceWave]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceWave]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\SkypeVoiceWave"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#SkypeVoiceWave\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeLineInTopo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeLineInTopo]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\\SkypeLineInTopo"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeLineInTopo\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeLineInTopo\Device Parameters]
"FriendlyName"="Realtek HD Skype Input mixer"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeLineOutTopo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeLineOutTopo]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\\SkypeLineOutTopo"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeLineOutTopo\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeLineOutTopo\Device Parameters]
"FriendlyName"="Realtek HD Skype Ontput mixer"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeVoiceInTopo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeVoiceInTopo]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\\SkypeVoiceInTopo"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeVoiceInTopo\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeVoiceTopo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeVoiceTopo]
"SymbolicLink"="\\\\?\\HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\\SkypeVoiceTopo"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{DDA54A40-1E4C-11D1-A050-405705C10000}\##?#HDAUDIO#FUNC_01&VEN_10EC&DEV_0888&SUBSYS_1458E601&REV_1000#4&126B8476&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\#SkypeVoiceTopo\Device Parameters]

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\*]
"b"="C:\\Documents and Settings\\David\\Plocha\\skypee.JPG"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\JPG]
"a"="C:\\Documents and Settings\\David\\Plocha\\skypee.JPG"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.7z\OpenWithList]
"a"="Skype.exe"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\OpenWithList]
"a"="Skype.exe"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.doc\OpenWithList]
"a"="Skype.exe"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.docx\OpenWithList]
"b"="Skype.exe"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\OpenWithList]
"a"="Skype.exe"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\OpenWithList]
"d"="Skype.exe"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.js\OpenWithList]
"a"="Skype.exe"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lnk\OpenWithList]
"a"="Skype.exe"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp3\OpenWithList]
"c"="Skype.exe"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\OpenWithList]
"a"="Skype.exe"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rar\OpenWithList]
"c"="Skype.exe"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithList]
"a"="Skype.exe"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.txt\OpenWithList]
"b"="Skype.exe"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wm\OpenWithList]
"a"="Skype.exe"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmv\OpenWithList]
"a"="Skype.exe"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xls\OpenWithList]
"b"="Skype.exe"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xlsx\OpenWithList]
"a"="Skype.exe"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Skype]

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Documents and Settings\\David\\Plocha\\SkypeSetup.exe"="Skype "
"C:\\Documents and Settings\\David\\Plocha\\SkypeSetupFull.exe"="Skype "
"C:\\Documents and Settings\\David\\Plocha\\SkypeSetup(4).exe"="Skype "
"C:\\Documents and Settings\\David\\Plocha\\SkypeSetupFull(2).exe"="Skype "
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="Skype "
"C:\\Documents and Settings\\David\\Plocha\\SkypeSetup(2).exe"="Skype "
"C:\\Documents and Settings\\David\\Plocha\\SkypeSetup(3).exe"="Skype "
"C:\\Documents and Settings\\David\\Plocha\\SkypeSetupFull.exe.exe"="Skype "

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Piriform\CCleaner]
"(App)Skype"="False"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Skype]

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Skype\Installer]

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Skype\Phone]

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Skype\Phone]
"SkypePath"="C:\\Program Files\\Skype\\Phone\\Skype.exe"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Skype\Phone\UI]

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Skype\Phone\UI\General]

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Skype\ProtectedStorage]

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Classes\skype-plugin]

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Classes\skype-plugin]
@="Skype Plugin Protocol Handler"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Classes\skype-plugin\shell]

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Classes\TypeLib\{506B4C1F-587D-4CD3-94A3-00354CF6EFEF}\1.0\0\win32]
@="C:\\Program Files\\Skype\\Plugin Manager\\ezPMUtils.dll"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Classes\TypeLib\{506B4C1F-587D-4CD3-94A3-00354CF6EFEF}\1.0\HELPDIR]
@="C:\\Program Files\\Skype\\Plugin Manager"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Classes\TypeLib\{B0A632A5-B0D1-41E8-A84A-A502B3341363}\1.0\0\win32]
@="C:\\Program Files\\Skype\\Plugin Manager\\ezPMUtils.dll"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003\Software\Classes\TypeLib\{B0A632A5-B0D1-41E8-A84A-A502B3341363}\1.0\HELPDIR]
@="C:\\Program Files\\Skype\\Plugin Manager"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003_Classes\skype-plugin]

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003_Classes\skype-plugin]
@="Skype Plugin Protocol Handler"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003_Classes\skype-plugin\shell]

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003_Classes\TypeLib\{506B4C1F-587D-4CD3-94A3-00354CF6EFEF}\1.0\0\win32]
@="C:\\Program Files\\Skype\\Plugin Manager\\ezPMUtils.dll"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003_Classes\TypeLib\{506B4C1F-587D-4CD3-94A3-00354CF6EFEF}\1.0\HELPDIR]
@="C:\\Program Files\\Skype\\Plugin Manager"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003_Classes\TypeLib\{B0A632A5-B0D1-41E8-A84A-A502B3341363}\1.0\0\win32]
@="C:\\Program Files\\Skype\\Plugin Manager\\ezPMUtils.dll"

[HKEY_USERS\S-1-5-21-1645522239-1035525444-682003330-1003_Classes\TypeLib\{B0A632A5-B0D1-41E8-A84A-A502B3341363}\1.0\HELPDIR]
@="C:\\Program Files\\Skype\\Plugin Manager"

; End Of The Log...

Feroo · Příspěvekod **Feroo** » 12 zář 2011 17:36

OTL logfile created on: 12.9.2011 17:31:02 - Run 1
OTL by OldTimer - Version 3.2.27.0 Folder = C:\Documents and Settings\David\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,25 Gb Total Physical Memory | 2,79 Gb Available Physical Memory | 85,80% Memory free
5,09 Gb Paging File | 4,75 Gb Available in Paging File | 93,28% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 97,65 Gb Total Space | 59,03 Gb Free Space | 60,45% Space Free | Partition Type: NTFS
Drive D: | 195,31 Gb Total Space | 173,73 Gb Free Space | 88,95% Space Free | Partition Type: NTFS
Drive E: | 172,79 Gb Total Space | 171,90 Gb Free Space | 99,49% Space Free | Partition Type: NTFS

Computer Name: DAVID-C49CE9843 | User Name: David | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\David\Plocha\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
PRC - C:\Program Files\Gigabyte\EasySaver\essvr.exe ()
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)
PRC - C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe (Nero AG)

========== Modules (No Company Name) ==========

MOD - C:\Program Files\Alwil Software\Avast5\defs\11091200\algo.dll ()
MOD - C:\Program Files\Alwil Software\Avast5\defs\11091200\aswRep.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\47eb8696e47a035e9a613a2d0cc7ac45\System.Web.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\dc9065ff99f71d8955dece30eb917f23\System.Configuration.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\9790e82f52035bfb2e35682d640e62f4\System.Xml.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\a0633e5617f6301a2422a72ab90b5de2\System.Windows.Forms.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\6a1bfdc29f6d9fbe2acaee4fc8469484\System.Drawing.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\857b7d64acb4a36c734d7beaeef7068f\System.ni.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\c2af7cfbb47c077029a2645930b4eeac\Accessibility.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\9adb89fa22fd5b4ce433b5aca7fb1b07\mscorlib.ni.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.3512.36822__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.3512.36804__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HydraVision.Wizard\2.0.3512.36913__90ba9c70f846762e\CLI.Aspect.HydraVision.Wizard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiDesk.HydraVision.Dashboard\2.0.3512.36913__90ba9c70f846762e\CLI.Aspect.MultiDesk.HydraVision.Dashboard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MDProp.HydraVision.Dashboard\2.0.3512.36912__90ba9c70f846762e\CLI.Aspect.MDProp.HydraVision.Dashboard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.3512.36823__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeskMan.HydraVision.Dashboard\2.0.3512.36911__90ba9c70f846762e\CLI.Aspect.DeskMan.HydraVision.Dashboard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Grid.HydraVision.Dashboard\2.0.3512.36907__90ba9c70f846762e\CLI.Aspect.Grid.HydraVision.Dashboard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.3512.36875__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.3512.36818__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Grid.HydraVision.Runtime\2.0.3512.36908__90ba9c70f846762e\CLI.Aspect.Grid.HydraVision.Runtime.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.3512.36847__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeskMan.HydraVision.Runtime\2.0.3512.36911__90ba9c70f846762e\CLI.Aspect.DeskMan.HydraVision.Runtime.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiDesk.HydraVision.Runtime\2.0.3512.36912__90ba9c70f846762e\CLI.Aspect.MultiDesk.HydraVision.Runtime.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MDProp.HydraVision.Runtime\2.0.3512.36912__90ba9c70f846762e\CLI.Aspect.MDProp.HydraVision.Runtime.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.3512.36812__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeskMan.HydraVision.Shared\2.0.3512.36911__90ba9c70f846762e\CLI.Aspect.DeskMan.HydraVision.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.HydraVision.Runtime\2.0.3512.36907__90ba9c70f846762e\CLI.Caste.HydraVision.Runtime.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MDProp.HydraVision.Shared\2.0.3512.36911__90ba9c70f846762e\CLI.Aspect.MDProp.HydraVision.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Grid.HydraVision.Shared\2.0.3512.36907__90ba9c70f846762e\CLI.Aspect.Grid.HydraVision.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiDesk.HydraVision.Shared\2.0.3512.36912__90ba9c70f846762e\CLI.Aspect.MultiDesk.HydraVision.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.HydraVision.Shared\2.0.3512.36906__90ba9c70f846762e\CLI.Caste.HydraVision.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.HydraVision.Wizard\2.0.3512.36910__90ba9c70f846762e\CLI.Caste.HydraVision.Wizard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.HydraVision.Dashboard\2.0.3512.36906__90ba9c70f846762e\CLI.Caste.HydraVision.Dashboard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.3512.36894__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.3512.36861__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.3512.36862__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.3512.36812__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.3512.36856__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Dashboard\2.0.3512.36823__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Dashboard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.3512.36861__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.3512.36895__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Runtime\2.0.3512.36822__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Runtime.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.3512.36849__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive5.Graphics.Dashboard\2.0.3512.36905__90ba9c70f846762e\CLI.Aspect.OverDrive5.Graphics.Dashboard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.3512.36824__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.3512.36869__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Dashboard\2.0.3512.36813__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard\2.0.3512.36843__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.3512.36824__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.3512.36854__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.3512.36848__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive5.Graphics.Runtime\2.0.3512.36905__90ba9c70f846762e\CLI.Aspect.OverDrive5.Graphics.Runtime.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.3512.36854__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.3512.36828__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.3512.36855__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.3512.36848__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.3512.36847__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.3512.36848__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation\2.0.3498.37515__90ba9c70f846762e\LOG.Foundation.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.3498.37517__90ba9c70f846762e\NEWAEM.Foundation.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0703\2.0.2651.18802__90ba9c70f846762e\DEM.Graphics.I0703.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.3498.37534__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.3498.37533__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\MOM.Foundation\2.0.3498.37551__90ba9c70f846762e\MOM.Foundation.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0706\2.0.2743.23304__90ba9c70f846762e\DEM.Graphics.I0706.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.WinMessages.Shared\2.0.3498.37558__90ba9c70f846762e\AEM.Plugin.WinMessages.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.REG.Shared\2.0.3498.37615__90ba9c70f846762e\AEM.Plugin.REG.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.3498.37612__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.3498.37554__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.3498.37610__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\ResourceManagement.Foundation.Implementation\2.0.3512.36919__90ba9c70f846762e\ResourceManagement.Foundation.Implementation.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.3498.37541__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation\2.0.3498.37518__90ba9c70f846762e\CLI.Foundation.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.3498.37583__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive5.Graphics.Shared\2.0.3498.37614__90ba9c70f846762e\CLI.Aspect.OverDrive5.Graphics.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.3498.37579__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.3498.37582__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.3498.37578__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.3498.37577__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.3512.36900__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.3498.37603__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.3498.37582__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.3498.37557__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.3498.37674__90ba9c70f846762e\CLI.Foundation.XManifest.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.3498.37575__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.3498.37572__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.3498.37552__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.3498.37536__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.3498.37580__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.3498.37540__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.3498.37526__90ba9c70f846762e\CLI.Component.Client.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Shared\2.0.3498.37575__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.3498.37555__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\APM.Foundation\2.0.3498.37553__90ba9c70f846762e\APM.Foundation.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics\2.0.3498.37571__90ba9c70f846762e\DEM.Graphics.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.3498.37544__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.3498.37574__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.3498.37547__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\AEM.Server.Shared\2.0.3498.37535__90ba9c70f846762e\AEM.Server.Shared.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.3512.36801__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.3512.36808__90ba9c70f846762e\CLI.Component.Dashboard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Systemtray\2.0.3512.36883__90ba9c70f846762e\CLI.Component.Systemtray.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.3512.36817__90ba9c70f846762e\CLI.Component.Wizard.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\MOM.Implementation\2.0.3512.36889__90ba9c70f846762e\MOM.Implementation.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.3512.36887__90ba9c70f846762e\LOG.Foundation.Implementation.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.SkinFactory\2.0.3512.36803__90ba9c70f846762e\CLI.Component.SkinFactory.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.3512.36801__90ba9c70f846762e\CLI.Component.Runtime.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.3498.37546__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.3498.37522__90ba9c70f846762e\CLI.Foundation.Private.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.3498.37528__90ba9c70f846762e\LOG.Foundation.Private.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.3498.37548__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\ResourceManagement.Foundation.Private\2.0.3498.37531__90ba9c70f846762e\ResourceManagement.Foundation.Private.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.3498.37547__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.3498.37549__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\AxInterop.WBOCXLib\1.0.0.0__90ba9c70f846762e\AxInterop.WBOCXLib.dll ()
MOD - C:\WINDOWS\assembly\GAC\Interop.WBOCXLib\1.0.0.0__90ba9c70f846762e\Interop.WBOCXLib.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\APM.Server\2.0.3512.36800__90ba9c70f846762e\APM.Server.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\AEM.Server\2.0.3512.36801__90ba9c70f846762e\AEM.Server.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.3498.37538__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.3498.37585__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CCC.Implementation\2.0.3512.36889__90ba9c70f846762e\CCC.Implementation.dll ()
MOD - C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll ()
MOD - C:\Program Files\Gigabyte\EasySaver\essvr.exe ()
MOD - C:\Program Files\Gigabyte\EasySaver\ycc.dll ()
MOD - C:\Program Files\WinRAR\rarlng.dll ()
MOD - C:\Program Files\WinRAR\RarExt.dll ()

========== Win32 Services (SafeList) ==========

SRV - (avast! Antivirus) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (ES lite Service) -- C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE ()

========== Driver Services (SafeList) ==========

DRV - (catchme) -- File not found
DRV - (gdrv) -- C:\WINDOWS\gdrv.sys (Windows (R) 2000 DDK provider)
DRV - (kbdcap) -- C:\WINDOWS\System32\drivers\KbdCap.sys ()
DRV - (MBAMSwissArmy) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys (Malwarebytes Corporation)
DRV - (aswSnx) -- C:\WINDOWS\System32\drivers\aswSnx.sys (AVAST Software)
DRV - (aswSP) -- C:\WINDOWS\System32\drivers\aswSP.sys (AVAST Software)
DRV - (aswTdi) -- C:\WINDOWS\System32\drivers\aswTdi.sys (AVAST Software)
DRV - (aswMon2) -- C:\WINDOWS\System32\drivers\aswmon2.sys (AVAST Software)
DRV - (aswRdr) -- C:\WINDOWS\System32\drivers\aswRdr.sys (AVAST Software)
DRV - (Aavmker4) -- C:\WINDOWS\System32\drivers\aavmker4.sys (AVAST Software)
DRV - (aswFsBlk) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys (AVAST Software)
DRV - (ANDModem) -- C:\WINDOWS\system32\drivers\lgandmodem.sys (LG Electronics Inc.)
DRV - (AndGps) -- C:\WINDOWS\system32\drivers\lgandgps.sys (LG Electronics Inc.)
DRV - (AndDiag) -- C:\WINDOWS\system32\drivers\lganddiag.sys (LG Electronics Inc.)
DRV - (Andbus) -- C:\WINDOWS\system32\drivers\lgandbus.sys (LG Electronics Inc.)
DRV - (andnetndis) -- C:\WINDOWS\system32\drivers\lgandnetndis.sys (LG Electronics Inc)
DRV - (AndNetGps) -- C:\WINDOWS\system32\drivers\lgandnetgps.sys (LG Electronics Inc.)
DRV - (ANDNetModem) -- C:\WINDOWS\system32\drivers\lgandnetmodem.sys (LG Electronics Inc.)
DRV - (AndNetDiag) -- C:\WINDOWS\system32\drivers\lgandnetdiag.sys (LG Electronics Inc.)
DRV - (npf) -- C:\WINDOWS\system32\drivers\npf.sys (CACE Technologies, Inc.)
DRV - (sptd) -- C:\WINDOWS\System32\Drivers\sptd.sys ()
DRV - (LgBttPort) -- C:\WINDOWS\system32\drivers\lgbtport.sys (LG Electronics Inc.)
DRV - (LGVMODEM) -- C:\WINDOWS\system32\drivers\lgvmodem.sys (LG Electronics Inc.)
DRV - (lgbusenum) -- C:\WINDOWS\system32\drivers\lgbtbus.sys (LG Electronics Inc.)
DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (AtiHdmiService) -- C:\WINDOWS\system32\drivers\AtiHdmi.sys (ATI Research Inc.)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (RTHDMIAzAudService) -- C:\WINDOWS\system32\drivers\RtKHDMI.sys (Realtek Semiconductor Corp.)
DRV - (RTLE8023xp) -- C:\WINDOWS\system32\drivers\Rtenicxp.sys (Realtek Semiconductor Corporation )
DRV - (AmdPPM) -- C:\WINDOWS\system32\drivers\AmdPPM.sys (Advanced Micro Devices)

========== Standard Registry (All) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKCU\..\URLSearchHook: {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\WINDOWS\system32\dvmurl.dll (DeviceVM Inc.)
IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\shdocvw.dll (Microsoft Corporation)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://google.cz/"
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}:6.0.18
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {2ad7e043-d360-bdbf-0fba-8c83cdade280}:4.6.6.6
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.6

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\David\Local Settings\Data aplikací\Google\Update\1.3.21.57\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\David\Local Settings\Data aplikací\Google\Update\1.3.21.57\npGoogleUpdate3.dll (Google Inc.)

prosim o kontrolu logu Vyřešeno

prosim o kontrolu logu

Re: prosim o kontrolu logu

Re: prosim o kontrolu logu

Re: prosim o kontrolu logu

Re: prosim o kontrolu logu

Re: prosim o kontrolu logu

Re: prosim o kontrolu logu

Re: prosim o kontrolu logu

Re: prosim o kontrolu logu

1. cast regserach

2. cast regserach

1. cast OTL

Kdo je online