prosím o kontrolu

[michal0]

prosím o kontrolu, zdá se mi pomalejší internet
Logfile of random's system information tool 1.08 (written by random/random)
Run by Boss at 2011-09-17 09:30:06
Microsoft Windows 7 Ultimate
System drive C: has 328 GB (69%) free of 477 GB
Total RAM: 4096 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:31:00, on 17.9.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Internet Download Manager\IDMan.exe
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
C:\Program Files (x86)\K-Lite Codec Pack\Media Player Classic\mpc-hc.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Boss.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com?o=14597&l=dis
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Stáhnout s IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Stáhnout s IDM obsah FLV videa - C:\Program Files (x86)\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Stáhnout s IDM všechny odkazy - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{FF951628-AE47-4EDE-B3A2-25DF81387731}: NameServer = 85.255.113.140,85.255.112.93
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll
O20 - AppInit_DLLs: prio32.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\SysWOW64\IoctlSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Prio Service (prio_svc) - Unknown owner - C:\Program Files\Prio\prio_svc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - Unknown owner - C:\Windows\System32\TuneUpDefragService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - Unknown owner - C:\Windows\System32\TUProgSt.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11684 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe"
"C:\Program Files (x86)\Internet Download Manager\IDMan.exe" /onboot
"C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
C:\Windows\SysWOW64\IoctlSvc.exe
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files\Prio\prio_svc.exe"
"C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\PowerISO\PWRISOVM.EXE"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe"
C:\Windows\System32\svchost.exe -k secsvcs
{0D03E4B9-4FFC-4495-8475-AC4CC32126EF}
{566E9346-6232-45E6-B510-9CB5BE5A8323}
"C:\Program Files (x86)\K-Lite Codec Pack\Media Player Classic\mpc-hc.exe" "C:\Users\Boss\Downloads\C0BYjnmzOnI.avi"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Users\Boss\Desktop\programy\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup

======Scheduled tasks folder======

C:\Windows\tasks\1-Click Maintenance.job
C:\Windows\tasks\Úklid 1 kliknutím.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2011-09-06 959432]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}]
IDMIEHlprObj Class - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2009-01-22 161200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files (x86)\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll [2003-05-12 50376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
Winamp Toolbar Loader - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll [2010-07-28 1267024]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\ProgramData\LangSoft\WebIE.dll [2011-02-21 798771]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-09-06 806456]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2011-05-17 1490312]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-07-17 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2011-09-06 959432]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - Winamp Toolbar - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll [2010-07-28 1267024]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\ProgramData\LangSoft\WebIE.dll [2011-02-21 798771]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2011-05-17 1490312]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-09-06 806456]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2009-06-10 16315424]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
""= []
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1475072]
"IDMan"=C:\Program Files (x86)\Internet Download Manager\IDMan.exe [2011-03-03 2745776]
"PC Suite Tray"=C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2010-05-14 1479680]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"PWRISOVM.EXE"=C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [2009-03-15 180224]
""= []
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-09-06 3722416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="prio.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"NoResolveSearch"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-09-16 12:46:18 ----SHD---- C:\Config.Msi
2011-09-16 12:45:27 ----D---- C:\Windows\B83FC356B7C0441F8A4DD71E088E7974.TMP
2011-09-16 12:44:53 ----A---- C:\Windows\system32\NVUNINST.EXE
2011-09-15 22:47:42 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2011-09-15 22:47:41 ----A---- C:\Windows\system32\aswBoot.exe
2011-09-15 22:47:07 ----D---- C:\Program Files\AVAST Software
2011-09-15 22:46:41 ----D---- C:\ProgramData\AVAST Software

======List of files/folders modified in the last 1 months======

2011-09-17 09:31:00 ----D---- C:\Windows\Prefetch
2011-09-17 09:30:58 ----D---- C:\Windows\Temp
2011-09-17 09:30:58 ----D---- C:\Program Files\trend micro
2011-09-17 09:28:31 ----D---- C:\Windows
2011-09-16 13:42:07 ----D---- C:\Users\Boss\AppData\Roaming\IDM
2011-09-16 13:42:02 ----D---- C:\Users\Boss\AppData\Roaming\DMCache
2011-09-16 13:41:58 ----D---- C:\ProgramData\NVIDIA
2011-09-16 13:38:23 ----D---- C:\Windows\system32\config
2011-09-16 12:49:04 ----D---- C:\Windows\SysWOW64
2011-09-16 12:49:04 ----D---- C:\Windows\System32
2011-09-16 12:46:55 ----D---- C:\Windows\inf
2011-09-16 12:46:47 ----SHD---- C:\Windows\Installer
2011-09-16 12:45:22 ----D---- C:\Program Files (x86)\Common Files
2011-09-16 12:45:09 ----D---- C:\Windows\system32\drivers
2011-09-16 12:45:06 ----D---- C:\Windows\system32\DriverStore
2011-09-16 12:45:06 ----D---- C:\Windows\system32\catroot
2011-09-15 22:49:23 ----D---- C:\Program Files\Alwil Software
2011-09-15 22:47:34 ----D---- C:\Windows\winsxs
2011-09-15 22:47:07 ----RD---- C:\Program Files
2011-09-15 22:47:04 ----SHD---- C:\System Volume Information
2011-09-15 22:46:41 ----HD---- C:\ProgramData
2011-09-14 16:51:18 ----D---- C:\Windows\SYSWOW64\drivers
2011-09-09 15:23:49 ----D---- C:\Windows\system32\catroot2
2011-09-07 21:34:23 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-09-06 22:45:29 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2011-08-23 21:13:09 ----D---- C:\ProgramData\Installations

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-07-07 868848]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2011-09-06 42328]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2011-09-06 601944]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2011-09-06 301912]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2011-09-06 58200]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2009-03-15 85424]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2011-09-06 24408]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2011-09-06 65368]
R3 MarvinBus;Pinnacle Marvin Bus 64; C:\Windows\system32\DRIVERS\MarvinBus64.sys [2005-09-23 261120]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x64.sys [2009-06-10 408960]
S3 7ByteIo;7ByteIo; \??\C:\Program Files (x86)\Hot CPU Tester Pro 4 LE\SysInfoX64.sys []
S3 ad9pi1kx;ad9pi1kx; C:\Windows\system32\drivers\ad9pi1kx.sys []
S3 ENTECH64;ENTECH64; \??\C:\Windows\system32\DRIVERS\ENTECH64.sys [2007-08-20 12744]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2010-07-30 19456]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2010-07-30 26624]
S3 nmwcdnsucx64;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsucx64.sys [2010-07-26 12800]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2010-07-26 171008]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-07-14 109056]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2010-07-30 9216]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-07-14 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2010-07-30 9216]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]
S3 WSDPrintDevice;Podpora tisku WSD prostřednictvím funkce UMB; C:\Windows\system32\DRIVERS\WSDPrint.sys [2009-07-14 23040]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-09-06 44768]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2008-09-24 935208]
R2 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [2009-06-10 382496]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [2006-12-19 81920]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-03-20 75136]
R2 prio_svc;Prio Service; C:\Program Files\Prio\prio_svc.exe [2010-07-28 9936]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-10-16 369256]
R3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2010-12-08 628736]
S2 TuneUp.ProgramStatisticsSvc;@%SystemRoot%\System32\TUProgSt.exe,-1; C:\Windows\System32\TUProgSt.exe [2010-11-07 841472]
S2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe []
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2009-07-16 316664]
S3 TuneUp.Defrag;@%SystemRoot%\System32\TuneUpDefragService.exe,-1; C:\Windows\System32\TuneUpDefragService.exe [2010-11-07 505600]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]

-----------------EOF-----------------

[Mc_Murphy]

Zdravím.

Jako první v nabídce Přidat nebo odebrat programy odinstaluj všechny nepotřebné toolbary. Zejména Ask.com Toolbar dokáže pěkně zpomalovat počítač!
Pak si doinstaluj Windows 7 Service Pack 1 a všechny dostupné aktualizace!
Aktualizuj MS Internet Explorer na poslední verzi. I když používáš prohlížeč Mozilla Firefox, aktualizace řeší spoustu problémů v systému samotném.
Až provedeš všechny tyto kroky, hoď mi sem log z OTL.

Pro začátek stáhni OTL z tohoto odkazu a ulož jej na Plochu.

• Pokud používáš Win Vista či Win7, klikni na OTL pravým myšítkem a dej Run As Administrator či Spustit jako správce.
• Pokud používáš 64bitový OS, zkontroluj, zda-li je zaškrtnutý čtvereček Pro 64 bitové OS. Pokud ne, zaškrtni jej.
• Zaškrtni okénko Pro všechny uživatele.
• Zaškrtni okénko Kontrola na havěť "LOP".
• Zaškrtni okénko Kontrola na havěť "Purity".
• Stáři souborů změň z 30 dnů na 7 dnů.
• Do spodního okénka Vlastní skenování/opravy vlož tento skript:

Kód: Vybrat vše

safebootminimal 
safebootnetwork
drivers32
savembr:0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
/md5start
scecli.dll
autochk.exe
csrss.exe
explorer.exe
lsass.exe
services.exe
smss.exe
spoolsv.exe
svchost.exe
userinit.exe
winlogon.exe
atapi.sys
cdrom.sys 
ndis.sys
ntfs.sys
tcpip.sys
%SystemDrive%\PhysicalMBR.bin
/md5stop
C:\windows\system32\spool\prtprocs|dll;true;true;true /FP
%systemroot%\system32\drivers\*.sys /5
%systemroot%\system32\drivers\*.sys /X 
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\system32\*.* /5
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\config\*.sav 
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\*.* /U /s
%systemroot%\*. /mp /s
%ALLUSERSPROFILE%\Data Aplikací\*.*
%ALLUSERSPROFILE%\Data Aplikací\*.exe /s
%ALLUSERSPROFILE%\Dáta aplikácií\*.*
%ALLUSERSPROFILE%\Dáta aplikácií\*.exe /s
%APPDATA%\*.
%APPDATA%\*.*
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
*crack* /s
*keygen* /s
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager" /v BootExecute /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" /v "PendingFileRenameOperations" /c
type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

• Klikni na tlačítko Prohledat.
• Po dokončení skenu se objeví logy OTL.txt a Extras.txt, oba mi sem vlož.
• Logy se nevejdou do jednoho, rozděl je tedy prosím do více příspěvků.

[michal0]

provedl jsem vše dle návodu,doba skenování cca 40 min ale logy oba prázdné txt dokumenty,udělal jsem něco špatně?

[Mc_Murphy]

Zkus to provést ještě jednou (přesně podle návodu!), ale v Nouzovém režimu.

[michal0]

teď pro změnu to vyjelo jen jeden log OTL a druhý nic.
OTL logfile created on: 18.9.2011 18:47:20 - Run 2
OTL by OldTimer - Version 3.2.29.1 Folder = C:\Users\Boss\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

4,00 Gb Total Physical Memory | 3,02 Gb Available Physical Memory | 75,52% Memory free
8,00 Gb Paging File | 7,03 Gb Available in Paging File | 87,93% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465,66 Gb Total Space | 322,54 Gb Free Space | 69,27% Space Free | Partition Type: NTFS
Drive E: | 232,88 Gb Total Space | 45,18 Gb Free Space | 19,40% Space Free | Partition Type: NTFS

Computer Name: BOSS-PC | User Name: Boss | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2011.09.18 18:37:06 | 000,582,656 | ---- | M] (OldTimer Tools) -- C:\Users\Boss\Desktop\OTL.exe


========== Modules (No Company Name) ==========


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2011.09.06 22:45:28 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Stopped] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2010.11.07 10:11:59 | 000,841,472 | ---- | M] (TuneUp Software) [Auto | Stopped] -- C:\Windows\SysNative\TUProgSt.exe -- (TuneUp.ProgramStatisticsSvc)
SRV:64bit: - [2010.11.07 10:11:45 | 000,505,600 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\Windows\SysNative\TuneUpDefragService.exe -- (TuneUp.Defrag)
SRV:64bit: - [2009.07.14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:64bit: - [2008.12.11 14:31:36 | 000,034,560 | ---- | M] (TuneUp Software) [Auto | Stopped] -- C:\Windows\SysNative\uxtuneup.dll -- (UxTuneUp)
SRV - [2010.12.08 15:31:06 | 000,628,736 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2010.10.16 12:46:40 | 000,369,256 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008.12.11 14:31:36 | 000,027,904 | ---- | M] (TuneUp Software) [Auto | Stopped] -- C:\Windows\SysWOW64\uxtuneup.dll -- (UxTuneUp)
SRV - [2008.09.24 14:32:48 | 000,935,208 | ---- | M] (Nero AG) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2007.05.28 18:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) [Auto | Stopped] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
SRV - [2006.12.19 10:30:26 | 000,081,920 | ---- | M] (Prolific Technology Inc.) [Auto | Stopped] -- C:\Windows\SysWOW64\IoctlSvc.exe -- (PLFlash DeviceIoControl Service)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2011.09.06 22:38:18 | 000,601,944 | ---- | M] (AVAST Software) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2011.09.06 22:38:16 | 000,301,912 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2011.09.06 22:36:41 | 000,058,200 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:64bit: - [2011.09.06 22:36:41 | 000,042,328 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr.sys -- (aswRdr)
DRV:64bit: - [2011.09.06 22:36:30 | 000,065,368 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2011.09.06 22:36:14 | 000,024,408 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:64bit: - [2011.07.07 15:02:41 | 000,868,848 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2010.11.20 05:33:36 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 05:32:48 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2010.11.20 05:32:48 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010.11.20 03:07:06 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.20 03:03:44 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2010.11.20 02:43:58 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:64bit: - [2010.11.20 01:37:44 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2010.07.30 15:18:04 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt)
DRV:64bit: - [2010.07.30 15:18:02 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)
DRV:64bit: - [2010.07.30 15:18:00 | 000,026,624 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc)
DRV:64bit: - [2010.07.30 15:17:56 | 000,019,456 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd)
DRV:64bit: - [2010.07.26 13:24:58 | 000,171,008 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nmwcdnsux64.sys -- (nmwcdnsux64)
DRV:64bit: - [2010.07.26 13:24:54 | 000,012,800 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nmwcdnsucx64.sys -- (nmwcdnsucx64)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.14 02:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:64bit: - [2009.06.10 22:35:35 | 000,408,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvm62x64.sys -- (NVENETFD)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.03.15 12:32:56 | 000,085,424 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\scdemu.sys -- (SCDEmu)
DRV:64bit: - [2008.08.28 12:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
DRV:64bit: - [2007.08.20 11:05:02 | 000,012,744 | R--- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Entech64.sys -- (ENTECH64)
DRV:64bit: - [2005.09.23 23:18:34 | 000,261,120 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MarvinBus64.sys -- (MarvinBus)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1904667193-2443021733-4101947669-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/
IE - HKU\S-1-5-21-1904667193-2443021733-4101947669-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = A8 AF D4 48 F2 3E CB 01 [binary data]
IE - HKU\S-1-5-21-1904667193-2443021733-4101947669-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=302398"
FF - prefs.js..browser.startup.homepage: "www.seznam.cz"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: bkmrksync@nokia.com:1.0.0.732
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..network.proxy.type: 2


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: C:\Program Files (x86)\Nokia\Nokia PC Suite 7\bkmrksync\ [2010.09.05 09:28:22 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}: C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\ [2010.12.30 23:52:46 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2011.09.15 22:47:15 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.09.07 21:34:07 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.09.17 15:49:39 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}: C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ [2010.12.30 23:52:46 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\Boss\AppData\Roaming\IDM\idmmzcc2 [2011.03.03 22:30:59 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\Boss\AppData\Roaming\IDM\idmmzcc3

[2010.04.12 21:23:07 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Boss\AppData\Roaming\Mozilla\Extensions
[2011.09.17 15:26:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Boss\AppData\Roaming\Mozilla\Firefox\Profiles\9lmqmwq2.default\extensions
[2011.02.03 22:54:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Boss\AppData\Roaming\Mozilla\Firefox\Profiles\bw07zgpy.default\extensions
[2010.05.26 16:18:50 | 000,002,333 | ---- | M] () -- C:\Users\Boss\AppData\Roaming\Mozilla\Firefox\Profiles\9lmqmwq2.default\searchplugins\askcom.xml
[2011.03.24 21:29:16 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2010.09.11 10:58:12 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010.06.22 20:40:25 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010.08.10 20:28:18 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010.09.05 09:28:22 | 000,000,000 | ---D | M] (PC Sync 2 Synchronisation Extension) -- C:\PROGRAM FILES (X86)\NOKIA\NOKIA PC SUITE 7\BKMRKSYNC
[2011.09.07 21:34:07 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2010.07.17 05:00:04 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2010.01.01 10:00:00 | 000,002,208 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\heureka-cz.xml
[2010.01.01 10:00:00 | 000,000,638 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\jyxo-cz.xml
[2010.01.01 10:00:00 | 000,001,367 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\seznam-cz.xml
[2010.01.01 10:00:00 | 000,000,654 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\slunecnice-cz.xml
[2010.01.01 10:00:00 | 000,001,179 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-cz.xml

========== Chrome ==========


O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2 - BHO: (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Tonec Inc.)
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (WebTransBHO Class) - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll ()
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (WebTranslator) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll ()
O3 - HKU\S-1-5-21-1904667193-2443021733-4101947669-1000\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4:64bit: - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [PWRISOVM.EXE] C:\Program Files (x86)\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1904667193-2443021733-4101947669-1000..\Run: [] File not found
O4 - HKU\S-1-5-21-1904667193-2443021733-4101947669-1000..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
O4 - HKU\S-1-5-21-1904667193-2443021733-4101947669-1000..\Run: [PC Suite Tray] C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\S-1-5-21-1904667193-2443021733-4101947669-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O7 - HKU\S-1-5-21-1904667193-2443021733-4101947669-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8:64bit: - Extra context menu item: Stáhnout s IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O8:64bit: - Extra context menu item: Stáhnout s IDM obsah FLV videa - C:\Program Files (x86)\Internet Download Manager\IEGetVL.htm ()
O8:64bit: - Extra context menu item: Stáhnout s IDM všechny odkazy - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8 - Extra context menu item: Stáhnout s IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O8 - Extra context menu item: Stáhnout s IDM obsah FLV videa - C:\Program Files (x86)\Internet Download Manager\IEGetVL.htm ()
O8 - Extra context menu item: Stáhnout s IDM všechny odkazy - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O9 - Extra Button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll ()
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll ()
O9 - Extra 'Tools' menuitem : &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll ()
O9 - Extra 'Tools' menuitem : Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll ()
O9 - Extra 'Tools' menuitem : Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll ()
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FF951628-AE47-4EDE-B3A2-25DF81387731}: NameServer = 85.255.113.140,85.255.112.93
O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - AppInit_DLLs: (prio.dll) - File not found
O20 - AppInit_DLLs: (prio32.dll) - File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\Autorun.exe
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\autorun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

SafeBootMin:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootMin:64bit: Base - Driver Group
SafeBootMin:64bit: Boot Bus Extender - Driver Group
SafeBootMin:64bit: Boot file system - Driver Group
SafeBootMin:64bit: File system - Driver Group
SafeBootMin:64bit: Filter - Driver Group
SafeBootMin:64bit: HelpSvc - Service
SafeBootMin:64bit: PCI Configuration - Driver Group
SafeBootMin:64bit: PNP Filter - Driver Group
SafeBootMin:64bit: Primary disk - Driver Group
SafeBootMin:64bit: sacsvr - Service
SafeBootMin:64bit: SCSI Class - Driver Group
SafeBootMin:64bit: System Bus Extender - Driver Group
SafeBootMin:64bit: vmms - Service
SafeBootMin:64bit: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootNet:64bit: Base - Driver Group
SafeBootNet:64bit: Boot Bus Extender - Driver Group
SafeBootNet:64bit: Boot file system - Driver Group
SafeBootNet:64bit: File system - Driver Group
SafeBootNet:64bit: Filter - Driver Group
SafeBootNet:64bit: HelpSvc - Service
SafeBootNet:64bit: NDIS Wrapper - Driver Group
SafeBootNet:64bit: NetBIOSGroup - Driver Group
SafeBootNet:64bit: NetDDEGroup - Driver Group
SafeBootNet:64bit: Network - Driver Group
SafeBootNet:64bit: NetworkProvider - Driver Group
SafeBootNet:64bit: PCI Configuration - Driver Group
SafeBootNet:64bit: PNP Filter - Driver Group
SafeBootNet:64bit: PNP_TDI - Driver Group
SafeBootNet:64bit: Primary disk - Driver Group
SafeBootNet:64bit: rdsessmgr - Service
SafeBootNet:64bit: sacsvr - Service
SafeBootNet:64bit: SCSI Class - Driver Group
SafeBootNet:64bit: Streams Drivers - Driver Group
SafeBootNet:64bit: System Bus Extender - Driver Group
SafeBootNet:64bit: TDI - Driver Group
SafeBootNet:64bit: vmms - Service
SafeBootNet:64bit: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet:64bit: WudfUsbccidDriver - Driver
SafeBootNet:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:64bit: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:64bit: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:64bit: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:64bit: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:64bit: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.ac3acm - C:\Windows\SysWow64\ac3acm.acm (fccHandler)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3fhg - C:\Windows\SysWow64\mp3fhg.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\Windows\SysWow64\ff_vfw.dll ()
Drivers32: vidc.mjpg - C:\Windows\SysWow64\pvmjpg30.dll (Pegasus Imaging Corporation)
Drivers32: VIDC.XVID - C:\Windows\SysWow64\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\Windows\SysWow64\yv12vfw.dll (www.helixcommunity.org)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2011.09.18 18:36:33 | 000,582,656 | ---- | C] (OldTimer Tools) -- C:\Users\Boss\Desktop\OTL.exe
[2011.09.17 21:05:32 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\SPReview
[2011.09.17 20:32:00 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSAC3ENC.DLL
[2011.09.17 20:32:00 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mprddm.dll
[2011.09.17 20:32:00 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mobsync.exe
[2011.09.17 20:32:00 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mobsync.exe
[2011.09.17 20:31:59 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2011.09.17 20:31:58 | 001,163,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc42u.dll
[2011.09.17 20:31:58 | 001,161,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
[2011.09.17 20:31:58 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll
[2011.09.17 20:31:58 | 000,419,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
[2011.09.17 20:31:58 | 000,266,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MediaMetadataHandler.dll
[2011.09.17 20:31:58 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iTVData.dll
[2011.09.17 20:31:58 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstask.dll
[2011.09.17 20:31:58 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\itircl.dll
[2011.09.17 20:31:58 | 000,125,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
[2011.09.17 20:31:58 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kstvtune.ax
[2011.09.17 20:31:58 | 000,080,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscories.dll
[2011.09.17 20:31:58 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ksxbar.ax
[2011.09.17 20:31:58 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetmib1.dll
[2011.09.17 20:31:58 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDCZ1.DLL
[2011.09.17 20:31:58 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDBLR.DLL
[2011.09.17 20:31:58 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDLT1.DLL
[2011.09.17 20:31:58 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINTEL.DLL
[2011.09.17 20:31:57 | 001,808,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pnidui.dll
[2011.09.17 20:31:57 | 001,115,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RacEngn.dll
[2011.09.17 20:31:57 | 001,050,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\printui.dll
[2011.09.17 20:31:57 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qedit.dll
[2011.09.17 20:31:57 | 000,322,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate.exe
[2011.09.17 20:31:57 | 000,318,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\raschap.dll
[2011.09.17 20:31:57 | 000,241,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Ribbons.scr
[2011.09.17 20:31:57 | 000,171,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\scsiport.sys
[2011.09.17 20:31:57 | 000,098,816 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\Robocopy.exe
[2011.09.17 20:31:57 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\logagent.exe
[2011.09.17 20:31:57 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2011.09.17 20:31:57 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pifmgr.dll
[2011.09.17 20:31:57 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\lsmproxy.dll
[2011.09.17 20:31:56 | 002,652,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netshell.dll
[2011.09.17 20:31:56 | 001,731,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2011.09.17 20:31:56 | 000,898,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OobeFldr.dll
[2011.09.17 20:31:56 | 000,850,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sbe.dll
[2011.09.17 20:31:56 | 000,762,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdcpl.dll
[2011.09.17 20:31:56 | 000,695,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netlogon.dll
[2011.09.17 20:31:56 | 000,406,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netcfgx.dll
[2011.09.17 20:31:56 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ReAgent.dll
[2011.09.17 20:31:56 | 000,212,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbctrac.dll
[2011.09.17 20:31:56 | 000,210,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpclip.exe
[2011.09.17 20:31:56 | 000,210,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncsi.dll
[2011.09.17 20:31:56 | 000,188,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netjoin.dll
[2011.09.17 20:31:56 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\schtasks.exe
[2011.09.17 20:31:56 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netiohlp.dll
[2011.09.17 20:31:56 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\perfmon.exe
[2011.09.17 20:31:56 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RDPENCDD.dll
[2011.09.17 20:31:56 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nslookup.exe
[2011.09.17 20:31:56 | 000,098,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2011.09.17 20:31:56 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nlsbres.dll
[2011.09.17 20:31:56 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ncryptui.dll
[2011.09.17 20:31:56 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MultiDigiMon.exe
[2011.09.17 20:31:56 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pdhui.dll
[2011.09.17 20:31:56 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netiougc.exe
[2011.09.17 20:31:56 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdprefdrvapi.dll
[2011.09.17 20:31:55 | 005,563,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2011.09.17 20:31:55 | 001,796,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certmgr.dll
[2011.09.17 20:31:55 | 000,460,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certcli.dll
[2011.09.17 20:31:55 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cmd.exe
[2011.09.17 20:31:55 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertPolEng.dll
[2011.09.17 20:31:54 | 003,391,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dbgeng.dll
[2011.09.17 20:31:54 | 002,067,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d9.dll
[2011.09.17 20:31:54 | 001,340,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diagperf.dll
[2011.09.17 20:31:54 | 001,087,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dbghelp.dll
[2011.09.17 20:31:54 | 001,003,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptui.dll
[2011.09.17 20:31:54 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cdosys.dll
[2011.09.17 20:31:54 | 000,594,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comdlg32.dll
[2011.09.17 20:31:54 | 000,573,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll
[2011.09.17 20:31:54 | 000,321,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll
[2011.09.17 20:31:54 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll
[2011.09.17 20:31:54 | 000,027,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys
[2011.09.17 20:31:54 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\C_ISCII.DLL
[2011.09.17 20:31:53 | 000,577,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AdmTmpl.dll
[2011.09.17 20:31:53 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
[2011.09.17 20:31:53 | 000,412,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll
[2011.09.17 20:31:53 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdedit.exe
[2011.09.17 20:31:53 | 000,337,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
[2011.09.17 20:31:53 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\activeds.dll
[2011.09.17 20:31:53 | 000,168,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdsrv.dll
[2011.09.17 20:31:53 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuxiliaryDisplayServices.dll
[2011.09.17 20:31:53 | 000,112,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe
[2011.09.17 20:31:53 | 000,107,904 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdsata.sys
[2011.09.17 20:31:53 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\acppage.dll
[2011.09.17 20:31:53 | 000,027,008 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdxata.sys
[2011.09.17 20:31:52 | 001,927,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll
[2011.09.17 20:31:52 | 001,792,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll
[2011.09.17 20:31:52 | 001,244,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imapi2fs.dll
[2011.09.17 20:31:52 | 000,665,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AuxiliaryDisplayCpl.dll
[2011.09.17 20:31:52 | 000,457,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imkr80.ime
[2011.09.17 20:31:52 | 000,392,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imapi2.dll
[2011.09.17 20:31:52 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2011.09.17 20:31:52 | 000,258,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys
[2011.09.17 20:31:52 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2011.09.17 20:31:52 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BdeHdCfg.exe
[2011.09.17 20:31:52 | 000,078,720 | ---- | C] (Hewlett-Packard Company) -- C:\Windows\SysNative\drivers\HpSAMD.sys
[2011.09.17 20:31:52 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ftp.exe
[2011.09.17 20:31:52 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\g711codc.ax
[2011.09.17 20:31:51 | 001,066,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Display.dll
[2011.09.17 20:31:51 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\evr.dll
[2011.09.17 20:31:51 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dskquoui.dll
[2011.09.17 20:31:51 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\diskpart.exe
[2011.09.17 20:31:51 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\elsTrans.dll
[2011.09.17 20:31:50 | 002,157,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\themecpl.dll
[2011.09.17 20:31:50 | 001,866,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ExplorerFrame.dll
[2011.09.17 20:31:50 | 001,493,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ExplorerFrame.dll
[2011.09.17 20:31:50 | 001,197,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskschd.dll
[2011.09.17 20:31:50 | 000,867,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchFolder.dll
[2011.09.17 20:31:50 | 000,684,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TabletPC.cpl
[2011.09.17 20:31:50 | 000,410,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\systemcpl.dll
[2011.09.17 20:31:50 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sysmon.ocx
[2011.09.17 20:31:50 | 000,355,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Faultrep.dll
[2011.09.17 20:31:50 | 000,200,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tscfgwmi.dll
[2011.09.17 20:31:50 | 000,181,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tcpipcfg.dll
[2011.09.17 20:31:50 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\thumbcache.dll
[2011.09.17 20:31:50 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tabcal.exe
[2011.09.17 20:31:49 | 000,451,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shwebsvc.dll
[2011.09.17 20:31:49 | 000,244,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spp.dll
[2011.09.17 20:31:49 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sppinst.dll
[2011.09.17 20:31:49 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spbcd.dll
[2011.09.17 20:31:48 | 001,232,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMADMOD.DLL
[2011.09.17 20:31:48 | 000,978,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMSPDMOD.DLL
[2011.09.17 20:31:48 | 000,636,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmdev.dll
[2011.09.17 20:31:48 | 000,527,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmnet.dll
[2011.09.17 20:31:48 | 000,340,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srchadmin.dll
[2011.09.17 20:31:48 | 000,244,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sqmapi.dll
[2011.09.17 20:31:48 | 000,207,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sysclass.dll
[2011.09.17 20:31:48 | 000,189,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\storport.sys
[2011.09.17 20:31:48 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpsrcwp.dll
[2011.09.17 20:31:48 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shsetup.dll
[2011.09.17 20:31:47 | 002,621,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
[2011.09.17 20:31:47 | 001,888,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL
[2011.09.17 20:31:47 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpmde.dll
[2011.09.17 20:31:47 | 000,642,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi
[2011.09.17 20:31:47 | 000,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpd_ci.dll
[2011.09.17 20:31:47 | 000,605,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpeffects.dll
[2011.09.17 20:31:47 | 000,605,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.exe
[2011.09.17 20:31:47 | 000,566,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi
[2011.09.17 20:31:47 | 000,518,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.exe
[2011.09.17 20:31:47 | 000,444,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wvc.dll
[2011.09.17 20:31:47 | 000,350,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WPDSp.dll
[2011.09.17 20:31:47 | 000,293,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsqmcons.exe
[2011.09.17 20:31:47 | 000,222,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanconn.dll
[2011.09.17 20:31:47 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpdwcn.dll
[2011.09.17 20:31:47 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll
[2011.09.17 20:31:47 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsRasterService.dll
[2011.09.17 20:31:47 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe
[2011.09.17 20:31:46 | 000,416,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wiadefui.dll
[2011.09.17 20:31:46 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll
[2011.09.17 20:31:46 | 000,346,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\untfs.dll
[2011.09.17 20:31:46 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll
[2011.09.17 20:31:46 | 000,297,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ws2_32.dll
[2011.09.17 20:31:46 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vss_ps.dll
[2011.09.17 20:31:46 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\umb.dll
[2011.09.17 20:31:46 | 000,051,200 | ---- | C] (Twain Working Group) -- C:\Windows\twain_32.dll
[2011.09.17 20:31:46 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tzutil.exe
[2011.09.17 20:31:46 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbisurf.ax
[2011.09.17 20:31:46 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\unlodctr.exe
[2011.09.17 20:31:46 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\userinit.exe
[2011.09.17 20:31:46 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsdchngr.dll
[2011.09.17 20:31:46 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WerFaultSecure.exe
[2011.09.17 20:31:45 | 001,753,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vssapi.dll
[2011.09.17 20:31:45 | 001,227,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wdc.dll
[2011.09.17 20:31:45 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc.dll
[2011.09.17 20:31:45 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wavemsp.dll
[2011.09.17 20:31:45 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setupugc.exe
[2011.09.17 20:31:45 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shacct.dll
[2011.09.17 20:31:45 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mimefilt.dll
[2011.09.17 20:31:44 | 004,120,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mf.dll
[2011.09.17 20:31:44 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40u.dll
[2011.09.17 20:31:44 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2011.09.17 20:31:44 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfds.dll
[2011.09.17 20:31:44 | 000,268,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSAC3ENC.DLL
[2011.09.17 20:31:44 | 000,240,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MFPlay.dll
[2011.09.17 20:31:44 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfps.dll
[2011.09.17 20:31:44 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mprapi.dll
[2011.09.17 20:31:44 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\itircl.dll
[2011.09.17 20:31:44 | 000,155,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscorier.dll
[2011.09.17 20:31:44 | 000,154,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mscorier.dll
[2011.09.17 20:31:44 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\logoncli.dll
[2011.09.17 20:31:44 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\logman.exe
[2011.09.17 20:31:44 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LogonUI.exe
[2011.09.17 20:31:44 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\logoff.exe
[2011.09.17 20:31:44 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDTUF.DLL
[2011.09.17 20:31:44 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDGKL.DLL
[2011.09.17 20:31:44 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINBEN.DLL
[2011.09.17 20:31:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDSF.DLL
[2011.09.17 20:31:43 | 001,911,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OpcServices.dll
[2011.09.17 20:31:43 | 000,957,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mblctr.exe
[2011.09.17 20:31:43 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nshipsec.dll
[2011.09.17 20:31:43 | 000,250,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ksproxy.ax
[2011.09.17 20:31:43 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OnLineIDCpl.dll
[2011.09.17 20:31:43 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LSCSHostPolicy.dll
[2011.09.17 20:31:43 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\luainstall.dll
[2011.09.17 20:31:43 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netutils.dll
[2011.09.17 20:31:43 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDUS.DLL
[2011.09.17 20:31:42 | 002,086,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll
[2011.09.17 20:31:42 | 000,571,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mspbda.dll
[2011.09.17 20:31:42 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msihnd.dll
[2011.09.17 20:31:42 | 000,303,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msinfo32.exe
[2011.09.17 20:31:42 | 000,221,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OnLineIDCpl.dll
[2011.09.17 20:31:42 | 000,197,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ocsetup.exe
[2011.09.17 20:31:42 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ocsetapi.dll
[2011.09.17 20:31:41 | 001,049,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstsc.exe
[2011.09.17 20:31:41 | 000,457,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdrm.dll
[2011.09.17 20:31:41 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netapi32.dll
[2011.09.17 20:31:41 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MuiUnattend.exe
[2011.09.17 20:31:41 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NAPCRYPT.DLL
[2011.09.17 20:31:41 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NAPCRYPT.DLL
[2011.09.17 20:31:41 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdmo.dll
[2011.09.17 20:31:41 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\muifontsetup.dll
[2011.09.17 20:31:41 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2011.09.17 20:31:40 | 001,401,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssrch.dll
[2011.09.17 20:31:40 | 000,902,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
[2011.09.17 20:31:40 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssvp.dll
[2011.09.17 20:31:40 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CscMig.dll
[2011.09.17 20:31:39 | 000,787,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll
[2011.09.17 20:31:39 | 000,668,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autochk.exe
[2011.09.17 20:31:39 | 000,549,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ActionCenterCPL.dll
[2011.09.17 20:31:39 | 000,363,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diskraid.exe
[2011.09.17 20:31:39 | 000,333,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3ui.dll
[2011.09.17 20:31:39 | 000,323,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drvstore.dll
[2011.09.17 20:31:39 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3cfg.dll
[2011.09.17 20:31:39 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3cfg.dll

[michal0]

4 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\choice.exe
[2011.09.17 20:31:39 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\chgusr.exe
[2011.09.17 20:31:38 | 003,727,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\accessibilitycpl.dll
[2011.09.17 20:31:38 | 001,334,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertEnroll.dll
[2011.09.17 20:31:38 | 000,899,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Bubbles.scr
[2011.09.17 20:31:38 | 000,878,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Bubbles.scr
[2011.09.17 20:31:38 | 000,438,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AdmTmpl.dll
[2011.09.17 20:31:38 | 000,342,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apphelp.dll
[2011.09.17 20:31:38 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cabview.dll
[2011.09.17 20:31:38 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cca.dll
[2011.09.17 20:31:38 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\browcli.dll
[2011.09.17 20:31:38 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\chgport.exe
[2011.09.17 20:31:38 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\chglogon.exe
[2011.09.17 20:31:38 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\change.exe
[2011.09.17 20:31:37 | 002,616,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe
[2011.09.17 20:31:37 | 001,400,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DxpTaskSync.dll
[2011.09.17 20:31:37 | 001,148,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IMJP10.IME
[2011.09.17 20:31:37 | 001,027,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IMJP10.IME
[2011.09.17 20:31:37 | 000,675,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DXPTaskRingtone.dll
[2011.09.17 20:31:37 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gpprefcl.dll
[2011.09.17 20:31:37 | 000,503,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imapi2.dll
[2011.09.17 20:31:37 | 000,345,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fveapi.dll
[2011.09.17 20:31:37 | 000,281,600 | ---- | C] (Microsoft) -- C:\Windows\SysNative\DShowRdpFilter.dll
[2011.09.17 20:31:37 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eapp3hst.dll
[2011.09.17 20:31:37 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eapphost.dll
[2011.09.17 20:31:37 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxdiagn.dll
[2011.09.17 20:31:37 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fvecpl.dll
[2011.09.17 20:31:37 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2011.09.17 20:31:37 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IcCoinstall.dll
[2011.09.17 20:31:37 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eappgnui.dll
[2011.09.17 20:31:37 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\HotStartUserAgent.dll
[2011.09.17 20:31:36 | 003,860,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIRibbon.dll
[2011.09.17 20:31:36 | 002,755,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\themeui.dll
[2011.09.17 20:31:36 | 001,698,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\esent.dll
[2011.09.17 20:31:36 | 001,548,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tquery.dll
[2011.09.17 20:31:36 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIRibbonRes.dll
[2011.09.17 20:31:36 | 000,861,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontext.dll
[2011.09.17 20:31:36 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EncDec.dll
[2011.09.17 20:31:36 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsmf.dll
[2011.09.17 20:31:36 | 000,205,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\efscore.dll
[2011.09.17 20:31:36 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fde.dll
[2011.09.17 20:31:36 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tskill.exe
[2011.09.17 20:31:36 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tscon.exe
[2011.09.17 20:31:36 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\elsTrans.dll
[2011.09.17 20:31:36 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsdiscon.exe
[2011.09.17 20:31:36 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TRAPI.dll
[2011.09.17 20:31:36 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TRAPI.dll
[2011.09.17 20:31:36 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbRedirectionGroupPolicyExtension.dll
[2011.09.17 20:31:36 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbRedirectionGroupPolicyControl.exe
[2011.09.17 20:31:35 | 002,983,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIRibbon.dll
[2011.09.17 20:31:35 | 002,146,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SyncCenter.dll
[2011.09.17 20:31:35 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIRibbonRes.dll
[2011.09.17 20:31:35 | 000,505,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskschd.dll
[2011.09.17 20:31:35 | 000,474,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sysmon.ocx
[2011.09.17 20:31:35 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskmgr.exe
[2011.09.17 20:31:35 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskbarcpl.dll
[2011.09.17 20:31:35 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll
[2011.09.17 20:31:35 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tssrvlic.dll
[2011.09.17 20:31:35 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll
[2011.09.17 20:31:35 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\takeown.exe
[2011.09.17 20:31:35 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbGDCoInstaller.dll
[2011.09.17 20:31:35 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\syssetup.dll
[2011.09.17 20:31:34 | 001,624,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPEncEn.dll
[2011.09.17 20:31:34 | 001,619,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL
[2011.09.17 20:31:34 | 001,243,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMNetMgr.dll
[2011.09.17 20:31:34 | 000,739,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMSPDMOD.DLL
[2011.09.17 20:31:33 | 003,957,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSAT.exe
[2011.09.17 20:31:33 | 002,543,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpdshext.dll
[2011.09.17 20:31:33 | 000,800,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usp10.dll
[2011.09.17 20:31:33 | 000,666,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVSDECD.DLL
[2011.09.17 20:31:33 | 000,600,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\usercpl.dll
[2011.09.17 20:31:33 | 000,594,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wvc.dll
[2011.09.17 20:31:33 | 000,470,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
[2011.09.17 20:31:33 | 000,410,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanui.dll
[2011.09.17 20:31:33 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
[2011.09.17 20:31:33 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wusa.exe
[2011.09.17 20:31:33 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
[2011.09.17 20:31:33 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsRasterService.dll
[2011.09.17 20:31:33 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\upnp.dll
[2011.09.17 20:31:33 | 000,196,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VBICodec.ax
[2011.09.17 20:31:33 | 000,178,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
[2011.09.17 20:31:33 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDShServiceObj.dll
[2011.09.17 20:31:33 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSTPager.ax
[2011.09.17 20:31:33 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UserAccountControlSettings.dll
[2011.09.17 20:31:33 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsnmp32.dll
[2011.09.17 20:31:33 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
[2011.09.17 20:31:33 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
[2011.09.17 20:31:32 | 002,262,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SyncCenter.dll
[2011.09.17 20:31:32 | 001,363,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wdc.dll
[2011.09.17 20:31:32 | 000,751,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll
[2011.09.17 20:31:32 | 000,492,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll
[2011.09.17 20:31:32 | 000,244,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmicsvc.exe
[2011.09.17 20:31:32 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wdscore.dll
[2011.09.17 20:31:32 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmicres.dll
[2011.09.17 20:31:32 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmictimeprovider.dll
[2011.09.17 20:31:31 | 001,109,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorets.dll
[2011.09.17 20:31:31 | 000,633,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\riched20.dll
[2011.09.17 20:31:31 | 000,600,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PerfCenterCPL.dll
[2011.09.17 20:31:31 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\powercpl.dll
[2011.09.17 20:31:31 | 000,406,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scesrv.dll
[2011.09.17 20:31:31 | 000,372,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rastls.dll
[2011.09.17 20:31:31 | 000,303,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scansetting.dll
[2011.09.17 20:31:31 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pdh.dll
[2011.09.17 20:31:31 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Ribbons.scr
[2011.09.17 20:31:31 | 000,183,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceSyncProvider.dll
[2011.09.17 20:31:31 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\perfmon.exe
[2011.09.17 20:31:31 | 000,162,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpudd.dll
[2011.09.17 20:31:31 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\powercfg.cpl
[2011.09.17 20:31:31 | 000,128,000 | ---- | C] (Microsoft) -- C:\Windows\SysNative\Robocopy.exe
[2011.09.17 20:31:31 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\regapi.dll
[2011.09.17 20:31:31 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rastapi.dll
[2011.09.17 20:31:31 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\runonce.exe
[2011.09.17 20:31:31 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rtutils.dll
[2011.09.17 20:31:31 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\relog.exe
[2011.09.17 20:31:31 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rwinsta.exe
[2011.09.17 20:31:31 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys
[2011.09.17 20:31:31 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\schedcli.dll
[2011.09.17 20:31:31 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\reset.exe
[2011.09.17 20:31:31 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\riched32.dll
[2011.09.17 20:31:30 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll
[2011.09.17 20:31:30 | 000,933,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SmiEngine.dll
[2011.09.17 20:31:30 | 000,755,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sud.dll
[2011.09.17 20:31:30 | 000,598,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spinstall.exe
[2011.09.17 20:31:30 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll
[2011.09.17 20:31:30 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StructuredQuery.dll
[2011.09.17 20:31:30 | 000,418,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppwinob.dll
[2011.09.17 20:31:30 | 000,349,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\slui.exe
[2011.09.17 20:31:30 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spreview.exe
[2011.09.17 20:31:30 | 000,274,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpdd.dll
[2011.09.17 20:31:30 | 000,263,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwizui.dll
[2011.09.17 20:31:30 | 000,250,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdv.dll
[2011.09.17 20:31:30 | 000,232,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppcomapi.dll
[2011.09.17 20:31:30 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sppcomapi.dll
[2011.09.17 20:31:30 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qcap.dll
[2011.09.17 20:31:30 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\splwow64.exe
[2011.09.17 20:31:30 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PushPrinterConnections.exe
[2011.09.17 20:31:30 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qprocess.exe
[2011.09.17 20:31:30 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qappsrv.exe
[2011.09.17 20:31:30 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\query.exe
[2011.09.17 20:31:30 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\slwga.dll
[2011.09.17 20:31:29 | 001,447,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2011.09.17 20:31:29 | 000,955,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll
[2011.09.17 20:31:29 | 000,653,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lpksetup.exe
[2011.09.17 20:31:29 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sharemediacpl.dll
[2011.09.17 20:31:29 | 000,272,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcbuilder.exe
[2011.09.17 20:31:29 | 000,270,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srrstr.dll
[2011.09.17 20:31:29 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setupcln.dll
[2011.09.17 20:31:29 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Kswdmcap.ax
[2011.09.17 20:31:29 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\logman.exe
[2011.09.17 20:31:29 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\manage-bde.exe
[2011.09.17 20:31:29 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mpeg2Data.ax
[2011.09.17 20:31:29 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shadow.exe
[2011.09.17 20:31:29 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shunimpl.dll
[2011.09.17 20:31:29 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDSG.DLL
[2011.09.17 20:31:29 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDTUF.DLL
[2011.09.17 20:31:29 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDSG.DLL
[2011.09.17 20:31:29 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDUGHR1.DLL
[2011.09.17 20:31:29 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDTAJIK.DLL
[2011.09.17 20:31:29 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDUGHR1.DLL
[2011.09.17 20:31:28 | 000,345,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MediaMetadataHandler.dll
[2011.09.17 20:31:28 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IPHLPAPI.DLL
[2011.09.17 20:31:28 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\migisol.dll
[2011.09.17 20:31:27 | 000,732,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imapi2fs.dll
[2011.09.17 20:31:27 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
[2011.09.17 20:31:26 | 000,919,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2011.09.17 20:31:26 | 000,720,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbc32.dll
[2011.09.17 20:31:26 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ipsmsnap.dll
[2011.09.17 20:31:26 | 000,282,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iTVData.dll
[2011.09.17 20:31:26 | 000,281,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iprtrmgr.dll
[2011.09.17 20:31:26 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iprtrmgr.dll
[2011.09.17 20:31:26 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iscsicli.exe
[2011.09.17 20:31:26 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\isoburn.exe
[2011.09.17 20:31:26 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbcconf.dll
[2011.09.17 20:31:26 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iscsium.dll
[2011.09.17 20:31:26 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kbdlk41a.dll
[2011.09.17 20:31:26 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDNEPR.DLL
[2011.09.17 20:31:26 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDPO.DLL
[2011.09.17 20:31:26 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINORI.DLL
[2011.09.17 20:31:26 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINKAN.DLL
[2011.09.17 20:31:26 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINKAN.DLL
[2011.09.17 20:31:26 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINHIN.DLL
[2011.09.17 20:31:26 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDBULG.DLL
[2011.09.17 20:31:26 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDMAORI.DLL
[2011.09.17 20:31:26 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDBLR.DLL
[2011.09.17 20:31:25 | 002,494,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netshell.dll
[2011.09.17 20:31:25 | 002,130,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\networkmap.dll
[2011.09.17 20:31:25 | 001,750,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pnidui.dll
[2011.09.17 20:31:25 | 000,758,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceApi.dll
[2011.09.17 20:31:25 | 000,656,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nshwfp.dll
[2011.09.17 20:31:25 | 000,435,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceStatus.dll
[2011.09.17 20:31:25 | 000,224,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceSyncProvider.dll
[2011.09.17 20:31:25 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netid.dll
[2011.09.17 20:31:25 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbctrac.dll
[2011.09.17 20:31:25 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\olethk32.dll
[2011.09.17 20:31:25 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nlsbres.dll
[2011.09.17 20:31:25 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PnPUnattend.exe
[2011.09.17 20:31:25 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netbtugc.exe
[2011.09.17 20:31:25 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nrpsrv.dll
[2011.09.17 20:31:24 | 000,658,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PerfCenterCPL.dll
[2011.09.17 20:31:24 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mscms.dll
[2011.09.17 20:31:24 | 000,258,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax
[2011.09.17 20:31:24 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSDvbNP.ax
[2011.09.17 20:31:23 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msnetobj.dll
[2011.09.17 20:31:23 | 000,242,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Mystify.scr
[2011.09.17 20:31:23 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NAPHLPR.DLL
[2011.09.17 20:31:23 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nci.dll
[2011.09.17 20:31:23 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\napdsnap.dll
[2011.09.17 20:31:23 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\napdsnap.dll
[2011.09.17 20:31:23 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\muifontsetup.dll
[2011.09.17 20:31:22 | 001,065,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptui.dll
[2011.09.17 20:31:22 | 000,799,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msftedit.dll
[2011.09.17 20:31:22 | 000,702,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2011.09.17 20:31:22 | 000,641,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msscp.dll
[2011.09.17 20:31:22 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\clusapi.dll
[2011.09.17 20:31:22 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msieftp.dll
[2011.09.17 20:31:22 | 000,238,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstask.dll
[2011.09.17 20:31:22 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax
[2011.09.17 20:31:22 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msorcl32.dll
[2011.09.17 20:31:22 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cabview.dll
[2011.09.17 20:31:21 | 001,975,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertEnroll.dll
[2011.09.17 20:31:21 | 000,776,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\calc.exe
[2011.09.17 20:31:21 | 000,339,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\appmgr.dll
[2011.09.17 20:31:21 | 000,240,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscobj.dll
[2011.09.17 20:31:21 | 000,225,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DevicePairingFolder.dll
[2011.09.17 20:31:21 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DevicePairingFolder.dll
[2011.09.17 20:31:21 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\desk.cpl
[2011.09.17 20:31:21 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertPolEng.dll
[2011.09.17 20:31:20 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ActionCenter.dll
[2011.09.17 20:31:20 | 000,740,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\batmeter.dll
[2011.09.17 20:31:20 | 000,537,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ActionCenterCPL.dll
[2011.09.17 20:31:20 | 000,298,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcryptprimitives.dll
[2011.09.17 20:31:20 | 000,166,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\basecsp.dll
[2011.09.17 20:31:20 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\bfsvc.exe
[2011.09.17 20:31:20 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\acppage.dll
[2011.09.17 20:31:19 | 000,934,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FirewallControlPanel.dll
[2011.09.17 20:31:19 | 000,856,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FirewallControlPanel.dll
[2011.09.17 20:31:19 | 000,840,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\blackbox.dll
[2011.09.17 20:31:19 | 000,777,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autochk.exe
[2011.09.17 20:31:19 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuxiliaryDisplayCpl.dll
[2011.09.17 20:31:19 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\biocpl.dll
[2011.09.17 20:31:19 | 000,403,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll
[2011.09.17 20:31:19 | 000,367,104 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2011.09.17 20:31:19 | 000,332,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hgcpl.dll
[2011.09.17 20:31:19 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FWPUCLNT.DLL
[2011.09.17 20:31:19 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2011.09.17 20:31:19 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fphc.dll
[2011.09.17 20:31:19 | 000,116,224 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\SysNative\fms.dll
[2011.09.17 20:31:19 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll
[2011.09.17 20:31:19 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\findstr.exe
[2011.09.17 20:31:19 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\g711codc.ax
[2011.09.17 20:31:19 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BlbEvents.dll
[2011.09.17 20:31:19 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2011.09.17 20:31:19 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ftp.exe
[2011.09.17 20:31:19 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSMON.dll
[2011.09.17 20:31:19 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSUNATD.exe
[2011.09.17 20:31:18 | 000,630,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DXPTaskRingtone.dll
[2011.09.17 20:31:18 | 000,495,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drmmgrtn.dll
[2011.09.17 20:31:18 | 000,459,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DXP.dll
[2011.09.17 20:31:18 | 000,359,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eudcedit.exe
[2011.09.17 20:31:18 | 000,313,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3ui.dll
[2011.09.17 20:31:18 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\hgcpl.dll
[2011.09.17 20:31:18 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eudcedit.exe
[2011.09.17 20:31:18 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpx.dll
[2011.09.17 20:31:18 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hgprint.dll
[2011.09.17 20:31:18 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ie4uinit.exe
[2011.09.17 20:31:18 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diskpart.exe
[2011.09.17 20:31:18 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dnscmmc.dll
[2011.09.17 20:31:18 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidclass.sys
[2011.09.17 20:31:18 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dsauth.dll
[2011.09.17 20:31:18 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpnaddr.dll
[2011.09.17 20:31:17 | 002,565,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\esent.dll
[2011.09.17 20:31:17 | 002,193,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\themecpl.dll
[2011.09.17 20:31:17 | 001,457,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DxpTaskSync.dll
[2011.09.17 20:31:17 | 000,722,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EncDec.dll
[2011.09.17 20:31:17 | 000,515,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\timedate.cpl
[2011.09.17 20:31:17 | 000,403,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\untfs.dll
[2011.09.17 20:31:17 | 000,264,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\upnp.dll
[2011.09.17 20:31:17 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tlscsp.dll
[2011.09.17 20:31:17 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tcpmonui.dll
[2011.09.17 20:31:17 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fdeploy.dll
[2011.09.17 20:31:17 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys
[2011.09.17 20:31:17 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\takeown.exe
[2011.09.17 20:31:17 | 000,032,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\USBCAMD2.sys
[2011.09.17 20:31:16 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\twext.dll
[2011.09.17 20:31:16 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\twext.dll
[2011.09.17 20:31:16 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\unimdmat.dll
[2011.09.17 20:31:16 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tzutil.exe
[2011.09.17 20:31:15 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
[2011.09.17 20:31:15 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
[2011.09.17 20:31:13 | 001,190,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll
[2011.09.17 20:31:13 | 000,870,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll
[2011.09.17 20:31:13 | 000,781,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmsdk.dll
[2011.09.17 20:31:13 | 000,695,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
[2011.09.17 20:31:13 | 000,475,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlangpui.dll
[2011.09.17 20:31:13 | 000,442,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winspool.drv
[2011.09.17 20:31:13 | 000,431,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDSp.dll
[2011.09.17 20:31:13 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanmsm.dll
[2011.09.17 20:31:13 | 000,414,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanmsm.dll
[2011.09.17 20:31:13 | 000,392,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll
[2011.09.17 20:31:13 | 000,390,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe
[2011.09.17 20:31:13 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wusa.exe
[2011.09.17 20:31:13 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsAnytimeUpgradeResults.exe
[2011.09.17 20:31:13 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpsrcwp.dll
[2011.09.17 20:31:13 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll
[2011.09.17 20:31:13 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
[2011.09.17 20:31:13 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wkscli.dll
[2011.09.17 20:31:13 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wsnmp32.dll
[2011.09.17 20:31:13 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanprotdim.dll
[2011.09.17 20:31:13 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
[2011.09.17 20:31:12 | 000,541,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVSDECD.DLL
[2011.09.17 20:31:11 | 001,281,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\werconcpl.dll
[2011.09.17 20:31:11 | 001,158,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webservices.dll
[2011.09.17 20:31:11 | 000,933,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Vault.dll
[2011.09.17 20:31:11 | 000,782,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webservices.dll
[2011.09.17 20:31:11 | 000,691,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VAN.dll
[2011.09.17 20:31:11 | 000,612,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2011.09.17 20:31:11 | 000,462,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wiadefui.dll
[2011.09.17 20:31:11 | 000,406,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wimgapi.dll
[2011.09.17 20:31:11 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wer.dll
[2011.09.17 20:31:11 | 000,327,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wimserv.exe
[2011.09.17 20:31:11 | 000,255,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wavemsp.dll
[2011.09.17 20:31:11 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vdsutil.dll
[2011.09.17 20:31:11 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wiavideo.dll
[2011.09.17 20:31:11 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\w32tm.exe
[2011.09.17 20:31:11 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\userinit.exe
[2011.09.17 20:31:10 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rastls.dll
[2011.09.17 20:31:10 | 000,423,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_isv.dll
[2011.09.17 20:31:10 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\remotepg.dll
[2011.09.17 20:31:10 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp_isv.dll
[2011.09.17 20:31:10 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpd3d.dll
[2011.09.17 20:31:10 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\relog.exe
[2011.09.17 20:31:10 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
[2011.09.17 20:31:10 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ReAgentc.exe
[2011.09.17 20:31:09 | 002,055,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Query.dll
[2011.09.17 20:31:09 | 001,219,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll
[2011.09.17 20:31:09 | 001,212,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\propsys.dll
[2011.09.17 20:31:09 | 000,337,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\raschap.dll
[2011.09.17 20:31:09 | 000,327,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_isv.exe
[2011.09.17 20:31:09 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2011.09.17 20:31:09 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe
[2011.09.17 20:31:09 | 000,266,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QAGENT.DLL
[2011.09.17 20:31:09 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scecli.dll
[2011.09.17 20:31:09 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scecli.dll
[2011.09.17 20:31:09 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QAGENT.DLL
[2011.09.17 20:31:09 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rpchttp.dll
[2011.09.17 20:31:09 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prntvpt.dll
[2011.09.17 20:31:09 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QUTIL.DLL
[2011.09.17 20:31:09 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QCLIPROV.DLL
[2011.09.17 20:31:09 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisrndr.ax
[2011.09.17 20:31:09 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QCLIPROV.DLL
[2011.09.17 20:31:09 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\proquota.exe
[2011.09.17 20:31:09 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prevhost.exe
[2011.09.17 20:31:08 | 001,556,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RacEngn.dll
[2011.09.17 20:31:08 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SndVol.exe
[2011.09.17 20:31:08 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SndVolSSO.dll
[2011.09.17 20:31:07 | 000,503,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll
[2011.09.17 20:31:07 | 000,446,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sqlcese30.dll
[2011.09.17 20:31:07 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppnp.dll
[2011.09.17 20:31:07 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spopk.dll
[2011.09.17 20:31:06 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfds.dll
[2011.09.17 20:31:06 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mcbuilder.exe
[2011.09.17 20:31:06 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciavi32.dll
[2011.09.17 20:31:06 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mapistub.dll
[2011.09.17 20:31:05 | 003,207,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mf.dll
[2011.09.17 20:31:05 | 003,205,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmcndmgr.dll
[2011.09.17 20:31:05 | 002,151,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmcndmgr.dll
[2011.09.17 20:31:05 | 000,905,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmsys.cpl
[2011.09.17 20:31:05 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmsys.cpl
[2011.09.17 20:31:05 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mprddm.dll
[2011.09.17 20:31:05 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax
[2011.09.17 20:31:05 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\logoncli.dll
[2011.09.17 20:31:05 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDGR1.DLL
[2011.09.17 20:31:05 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDNEPR.DLL
[2011.09.17 20:31:05 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDMON.DLL
[2011.09.17 20:31:05 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINMAR.DLL
[2011.09.17 20:31:05 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDGEO.DLL
[2011.09.17 20:31:05 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDGEO.DLL
[2011.09.17 20:31:04 | 003,966,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2011.09.17 20:31:04 | 003,911,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2011.09.17 20:31:04 | 000,193,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netplwiz.dll
[2011.09.17 20:31:04 | 000,133,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Kswdmcap.ax
[2011.09.17 20:31:04 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntlanman.dll
[2011.09.17 20:31:04 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netid.dll
[2011.09.17 20:31:04 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nslookup.exe
[2011.09.17 20:31:04 | 000,048,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netfxperf.dll
[2011.09.17 20:31:04 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDTUQ.DLL
[2011.09.17 20:31:04 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDSF.DLL
[2011.09.17 20:31:04 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDPO.DLL
[2011.09.17 20:31:04 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDTURME.DLL
[2011.09.17 20:31:03 | 001,111,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\onexui.dll
[2011.09.17 20:31:03 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbc32.dll
[2011.09.17 20:31:03 | 000,509,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntshrui.dll
[2011.09.17 20:31:03 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceStatus.dll
[2011.09.17 20:31:03 | 000,335,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msieftp.dll
[2011.09.17 20:31:03 | 000,319,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbcjt32.dll
[2011.09.17 20:31:03 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssphtb.dll
[2011.09.17 20:31:03 | 000,199,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\onex.dll
[2011.09.17 20:31:03 | 000,195,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2011.09.17 20:31:03 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ocsetup.exe
[2011.09.17 20:31:03 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ocsetapi.dll
[2011.09.17 20:31:03 | 000,153,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2011.09.17 20:31:03 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbcconf.dll
[2011.09.17 20:31:03 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msasn1.dll
[2011.09.17 20:31:03 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pifmgr.dll
[2011.09.17 20:31:02 | 002,223,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssrch.dll
[2011.09.17 20:31:02 | 001,116,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstsc.exe
[2011.09.17 20:31:02 | 000,778,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssvp.dll
[2011.09.17 20:31:02 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mystify.scr
[2011.09.17 20:31:02 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\net1.exe
[2011.09.17 20:31:02 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mydocs.dll
[2011.09.17 20:31:02 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvfw32.dll
[2011.09.17 20:31:02 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncryptui.dll
[2011.09.17 20:31:01 | 001,838,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
[2011.09.17 20:31:01 | 001,133,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdosys.dll
[2011.09.17 20:31:01 | 001,130,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfshim.dll
[2011.09.17 20:31:01 | 000,522,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll
[2011.09.17 20:31:01 | 000,508,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DeviceCenter.dll
[2011.09.17 20:31:01 | 000,342,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certcli.dll
[2011.09.17 20:31:01 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cfgmgr32.dll
[2011.09.17 20:31:01 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adsldp.dll
[2011.09.17 20:31:01 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\davclnt.dll
[2011.09.17 20:31:01 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cmstp.exe
[2011.09.17 20:31:00 | 003,745,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\accessibilitycpl.dll
[2011.09.17 20:31:00 | 000,958,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\actxprxy.dll
[2011.09.17 20:31:00 | 000,780,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ActionCenter.dll
[2011.09.17 20:31:00 | 000,763,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autofmt.exe
[2011.09.17 20:31:00 | 000,213,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ActionQueue.dll
[2011.09.17 20:31:00 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdboot.exe
[2011.09.17 20:31:00 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autoplay.dll
[2011.09.17 20:31:00 | 000,144,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\basecsp.dll
[2011.09.17 20:31:00 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cabinet.dll
[2011.09.17 20:30:59 | 005,066,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AuthFWSnapin.dll
[2011.09.17 20:30:59 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2011.09.17 20:30:59 | 000,345,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\intl.cpl
[2011.09.17 20:30:59 | 000,263,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hal.dll
[2011.09.17 20:30:59 | 000,166,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetpp.dll
[2011.09.17 20:30:59 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\avifil32.dll
[2011.09.17 20:30:59 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\httpapi.dll
[2011.09.17 20:30:58 | 002,872,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2011.09.17 20:30:58 | 000,630,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\evr.dll
[2011.09.17 20:30:58 | 000,422,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drvstore.dll
[2011.09.17 20:30:58 | 000,304,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\efscore.dll
[2011.09.17 20:30:58 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmredir.dll
[2011.09.17 20:30:58 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dsauth.dll
[2011.09.17 20:30:57 | 001,040,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Display.dll
[2011.09.17 20:30:57 | 000,828,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontext.dll
[2011.09.17 20:30:57 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnsapi.dll
[2011.09.17 20:30:57 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHost.exe
[2011.09.17 20:30:57 | 000,288,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS
[2011.09.17 20:30:57 | 000,253,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tcpipcfg.dll
[2011.09.17 20:30:57 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\framedynos.dll
[2011.09.17 20:30:57 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\framedyn.dll
[2011.09.17 20:30:57 | 000,200,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\syncui.dll
[2011.09.17 20:30:57 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fde.dll
[2011.09.17 20:30:57 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3msm.dll
[2011.09.17 20:30:57 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3api.dll
[2011.09.17 20:30:56 | 002,314,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tquery.dll
[2011.09.17 20:30:56 | 000,273,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SndVol.exe
[2011.09.17 20:30:56 | 000,225,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SndVolSSO.dll
[2011.09.17 20:30:56 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sppc.dll
[2011.09.17 20:30:55 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMADMOD.DLL
[2011.09.17 20:30:55 | 000,778,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sqlsrv32.dll
[2011.09.17 20:30:55 | 000,507,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmdev.dll
[2011.09.17 20:30:55 | 000,436,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmnet.dll
[2011.09.17 20:30:55 | 000,358,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpdxm.dll
[2011.09.17 20:30:55 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwizeng.dll
[2011.09.17 20:30:55 | 000,318,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll
[2011.09.17 20:30:55 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sqlcese30.dll
[2011.09.17 20:30:55 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\srchadmin.dll
[2011.09.17 20:30:55 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpdxm.dll
[2011.09.17 20:30:55 | 000,293,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ssText3d.scr
[2011.09.17 20:30:55 | 000,217,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSCard.dll
[2011.09.17 20:30:55 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2011.09.17 20:30:55 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpps.dll
[2011.09.17 20:30:55 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srvcli.dll
[2011.09.17 20:30:55 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscapi.dll
[2011.09.17 20:30:55 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wdiasqmmodule.dll
[2011.09.17 20:30:55 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwizres.dll
[2011.09.17 20:30:54 | 001,098,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Vault.dll
[2011.09.17 20:30:54 | 000,529,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wbemcomn.dll
[2011.09.17 20:30:54 | 000,321,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\unimdm.tsp
[2011.09.17 20:30:54 | 000,263,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vpnike.dll
[2011.09.17 20:30:54 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tspubwmi.dll
[2011.09.17 20:30:54 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\uxlib.dll
[2011.09.17 20:30:54 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vpnikeapi.dll
[2011.09.17 20:30:54 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmstorfltres.dll
[2011.09.17 20:30:53 | 001,572,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll
[2011.09.17 20:30:53 | 001,031,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcore.dll
[2011.09.17 20:30:53 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\schtasks.exe
[2011.09.17 20:30:53 | 000,129,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VmdCoinstall.dll
[2011.09.17 20:30:53 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp.dll
[2011.09.17 20:30:53 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\sdbus.sys
[2011.09.17 20:30:53 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QUTIL.DLL
[2011.09.17 20:30:53 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QSVRMGMT.DLL
[2011.09.17 20:30:53 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\utildll.dll
[2011.09.17 20:30:53 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\schedcli.dll
[2011.09.17 20:30:52 | 000,826,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpcore.dll
[2011.09.17 20:30:52 | 000,395,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prnfldr.dll
[2011.09.17 20:30:52 | 000,306,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp.exe
[2011.09.17 20:30:52 | 000,283,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdv.dll
[2011.09.17 20:30:52 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qasf.dll
[2011.09.17 20:30:52 | 000,187,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpchttp.dll
[2011.09.17 20:30:52 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prncache.dll
[2011.09.17 20:30:52 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationSettings.exe
[2011.09.17 20:30:52 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QSHVHOST.DLL
[2011.09.17 20:30:52 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\recovery.dll
[2011.09.17 20:30:52 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpsign.exe
[2011.09.17 20:30:52 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\proquota.exe
[2011.09.17 20:30:52 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdprefdrvapi.dll
[2011.09.17 20:30:52 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\riched32.dll
[2011.09.17 20:30:51 | 002,250,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SensorsCpl.dll
[2011.09.17 20:30:51 | 001,900,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setupapi.dll
[2011.09.17 20:30:51 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40.dll
[2011.09.17 20:30:51 | 000,497,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\main.cpl
[2011.09.17 20:30:51 | 000,448,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shlwapi.dll
[2011.09.17 20:30:51 | 000,433,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MCEWMDRMNDBootstrap.dll
[2011.09.17 20:30:51 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shdocvw.dll
[2011.09.17 20:30:51 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MdSched.exe
[2011.09.17 20:30:51 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shacct.dll
[2011.09.17 20:30:51 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setbcdlocale.dll
[2011.09.17 20:30:51 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsmproxy.dll
[2011.09.17 20:30:51 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mciqtz32.dll
[2011.09.17 20:30:51 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciqtz32.dll
[2011.09.17 20:30:51 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shimgvw.dll
[2011.09.17 20:30:50 | 001,538,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2011.09.17 20:30:50 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mimefilt.dll
[2011.09.17 20:30:49 | 003,215,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstscax.dll
[2011.09.17 20:30:49 | 001,689,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netcenter.dll
[2011.09.17 20:30:49 | 001,326,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NaturalLanguage6.dll
[2011.09.17 20:30:49 | 000,519,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netcfgx.dll
[2011.09.17 20:30:49 | 000,429,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\localsec.dll
[2011.09.17 20:30:49 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nltest.exe
[2011.09.17 20:30:49 | 000,373,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\intl.cpl
[2011.09.17 20:30:49 | 000,372,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mtxclu.dll
[2011.09.17 20:30:49 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mtxclu.dll
[2011.09.17 20:30:49 | 000,215,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netiohlp.dll
[2011.09.17 20:30:49 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\input.dll
[2011.09.17 20:30:49 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ncsi.dll
[2011.09.17 20:30:49 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iscsicli.exe
[2011.09.17 20:30:49 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mydocs.dll
[2011.09.17 20:30:49 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NAPHLPR.DLL
[2011.09.17 20:30:49 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\isoburn.exe
[2011.09.17 20:30:49 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\kstvtune.ax
[2011.09.17 20:30:49 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imagehlp.dll
[2011.09.17 20:30:49 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2011.09.17 20:30:49 | 000,049,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netfxperf.dll
[2011.09.17 20:30:49 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ksxbar.ax
[2011.09.17 20:30:49 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\httpapi.dll
[2011.09.17 20:30:49 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iscsium.dll
[2011.09.17 20:30:49 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDCZ1.DLL
[2011.09.17 20:30:49 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\kbdlk41a.dll
[2011.09.17 20:30:49 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINTAM.DLL
[2011.09.17 20:30:49 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDGR1.DLL
[2011.09.17 20:30:49 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDGKL.DLL
[2011.09.17 20:30:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDTURME.DLL
[2011.09.17 20:30:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDMAORI.DLL
[2011.09.17 20:30:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINBEN.DLL
[2011.09.17 20:30:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDBULG.DLL
[2011.09.17 20:30:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDBASH.DLL
[2011.09.17 20:30:48 | 000,344,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntprint.dll
[2011.09.17 20:30:48 | 000,297,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntprint.dll
[2011.09.17 20:30:48 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mprapi.dll
[2011.09.17 20:30:48 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netplwiz.dll
[2011.09.17 20:30:48 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netjoin.dll
[2011.09.17 20:30:48 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Mpeg2Data.ax
[2011.09.17 20:30:47 | 003,211,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msi.dll
[2011.09.17 20:30:47 | 002,217,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bootres.dll
[2011.09.17 20:30:47 | 001,555,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certmgr.dll
[2011.09.17 20:30:47 | 001,509,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdtctm.dll
[2011.09.17 20:30:47 | 001,160,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSMPEG2ENC.DLL
[2011.09.17 20:30:47 | 000,721,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bthprops.cpl
[2011.09.17 20:30:47 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msscp.dll
[2011.09.17 20:30:47 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax
[2011.09.17 20:30:47 | 000,265,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msnetobj.dll
[2011.09.17 20:30:47 | 000,230,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\clusapi.dll
[2011.09.17 20:30:47 | 000,179,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Classpnp.sys
[2011.09.17 20:30:47 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSDvbNP.ax
[2011.09.17 20:30:47 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BWUnpairElevated.dll
[2011.09.17 20:30:47 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdxm.ocx
[2011.09.17 20:30:46 | 002,522,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dbgeng.dll
[2011.09.17 20:30:46 | 001,456,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
[2011.09.17 20:30:46 | 000,854,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dbghelp.dll
[2011.09.17 20:30:46 | 000,345,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cmd.exe
[2011.09.17 20:30:46 | 000,294,400 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2011.09.17 20:30:46 | 000,233,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\defaultlocationcpl.dll
[2011.09.17 20:30:46 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\credui.dll
[2011.09.17 20:30:46 | 000,155,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ataport.sys
[2011.09.17 20:30:46 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cscobj.dll
[2011.09.17 20:30:46 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cmstp.exe
[2011.09.17 20:30:46 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2011.09.17 20:30:46 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-ums-l1-1-0.dll
[2011.09.17 20:30:45 | 002,746,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gameux.dll
[2011.09.17 20:30:45 | 001,544,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2011.09.17 20:30:45 | 000,897,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\azroles.dll
[2011.09.17 20:30:45 | 000,793,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autoconv.exe
[2011.09.17 20:30:45 | 000,762,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\azroles.dll
[2011.09.17 20:30:45 | 000,749,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\batmeter.dll
[2011.09.17 20:30:45 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\blackbox.dll
[2011.09.17 20:30:45 | 000,685,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dsuiext.dll
[2011.09.17 20:30:45 | 000,658,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxgi.dll
[2011.09.17 20:30:45 | 000,658,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autofmt.exe
[2011.09.17 20:30:45 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eapp3hst.dll
[2011.09.17 20:30:45 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Faultrep.dll
[2011.09.17 20:30:45 | 000,303,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eapphost.dll
[2011.09.17 20:30:45 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AudioSes.dll
[2011.09.17 20:30:45 | 000,279,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxdiagn.dll
[2011.09.17 20:30:45 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bitsadmin.exe
[2011.09.17 20:30:45 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autoplay.dll
[2011.09.17 20:30:45 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\aaclient.dll
[2011.09.17 20:30:45 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\audiodg.exe
[2011.09.17 20:30:45 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aitagent.exe
[2011.09.17 20:30:45 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eappgnui.dll
[2011.09.17 20:30:45 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\amstream.dll
[2011.09.17 20:30:45 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hbaapi.dll
[2011.09.17 20:30:45 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fdProxy.dll
[2011.09.17 20:30:45 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\amstream.dll
[2011.09.17 20:30:45 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AzSqlExt.dll
[2011.09.17 20:30:45 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AzSqlExt.dll
[2011.09.17 20:30:45 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bitsperf.dll
[2011.09.17 20:30:45 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxmasf.dll
[2011.09.17 20:30:44 | 001,942,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfshim.dll
[2011.09.17 20:30:44 | 000,586,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfrgui.exe
[2011.09.17 20:30:44 | 000,484,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DeviceCenter.dll
[2011.09.17 20:30:44 | 000,295,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\framedynos.dll
[2011.09.17 20:30:44 | 000,279,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\framedyn.dll
[2011.09.17 20:30:44 | 000,276,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\diskraid.exe
[2011.09.17 20:30:44 | 000,267,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSCOVER.exe
[2011.09.17 20:30:44 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fphc.dll
[2011.09.17 20:30:44 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll
[2011.09.17 20:30:44 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\djoin.exe
[2011.09.17 20:30:43 | 001,082,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppobjs.dll
[2011.09.17 20:30:43 | 001,008,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\user32.dll
[2011.09.17 20:30:43 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TSWorkspace.dll
[2011.09.17 20:30:43 | 000,478,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\timedate.cpl
[2011.09.17 20:30:43 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskcomp.dll
[2011.09.17 20:30:43 | 000,464,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskeng.exe
[2011.09.17 20:30:43 | 000,402,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drmmgrtn.dll
[2011.09.17 20:30:43 | 000,399,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpx.dll
[2011.09.17 20:30:43 | 000,333,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ssText3d.scr
[2011.09.17 20:30:43 | 000,281,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\unimdm.tsp
[2011.09.17 20:30:43 | 000,270,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tsmf.dll
[2011.09.17 20:30:43 | 000,252,928 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\DShowRdpFilter.dll
[2011.09.17 20:30:43 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbccp32.dll
[2011.09.17 20:30:43 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3msm.dll
[2011.09.17 20:30:43 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3api.dll
[2011.09.17 20:30:43 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\unimdmat.dll
[2011.09.17 20:30:43 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tlscsp.dll
[2011.09.17 20:30:43 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskhost.exe
[2011.09.17 20:30:43 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tsgqec.dll
[2011.09.17 20:30:43 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbser.sys
[2011.09.17 20:30:43 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbrpm.sys
[2011.09.17 20:30:43 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dnscacheugc.exe
[2011.09.17 20:30:43 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sscore.dll
[2011.09.17 20:30:43 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwmp.dll
[2011.09.17 20:30:42 | 000,769,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sud.dll
[2011.09.17 20:30:42 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\syncui.dll
[2011.09.17 20:30:42 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spopk.dll
[2011.09.17 20:30:42 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\syssetup.dll
[2011.09.17 20:30:41 | 014,633,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll
[2011.09.17 20:30:41 | 003,027,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVCORE.DLL
[2011.09.17 20:30:40 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL
[2011.09.17 20:30:40 | 001,441,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanpref.dll
[2011.09.17 20:30:40 | 001,326,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanpref.dll
[2011.09.17 20:30:40 | 001,024,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll
[2011.09.17 20:30:40 | 000,681,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFx.dll
[2011.09.17 20:30:40 | 000,616,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmsdk.dll
[2011.09.17 20:30:40 | 000,414,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanui.dll
[2011.09.17 20:30:40 | 000,411,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlangpui.dll
[2011.09.17 20:30:40 | 000,405,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wisptis.exe
[2011.09.17 20:30:40 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Wldap32.dll
[2011.09.17 20:30:40 | 000,283,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
[2011.09.17 20:30:40 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsta.dll
[2011.09.17 20:30:39 | 003,008,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xpsservices.dll
[2011.09.17 20:30:39 | 001,712,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xpsservices.dll
[2011.09.17 20:30:39 | 000,974,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WFS.exe
[2011.09.17 20:30:39 | 000,501,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSATAPI.dll
[2011.09.17 20:30:39 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFHost.exe
[2011.09.17 20:30:39 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wpdwcn.dll
[2011.09.17 20:30:39 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vdsbas.dll
[2011.09.17 20:30:39 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFPlatform.dll
[2011.09.17 20:30:39 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VmbusCoinstaller.dll
[2011.09.17 20:30:39 | 000,052,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\winhv.sys
[2011.09.17 20:30:39 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFCoinstaller.dll
[2011.09.17 20:30:39 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmbusres.dll
[2011.09.17 20:30:39 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vbisurf.ax
[2011.09.17 20:30:39 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WerFaultSecure.exe
[2011.09.17 20:30:39 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmbuspipe.dll
[2011.09.17 20:30:38 | 000,429,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\puiobj.dll
[2011.09.17 20:30:38 | 000,313,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ReAgent.dll
[2011.09.17 20:30:38 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpshell.exe
[2011.09.17 20:30:38 | 000,254,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qasf.dll
[2011.09.17 20:30:38 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QSHVHOST.DLL
[2011.09.17 20:30:38 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasppp.dll
[2011.09.17 20:30:38 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpencom.dll
[2011.09.17 20:30:38 | 000,178,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpinit.exe
[2011.09.17 20:30:38 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rasppp.dll
[2011.09.17 20:30:38 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpendp.dll
[2011.09.17 20:30:38 | 000,153,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\remotepg.dll
[2011.09.17 20:30:38 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorekmts.dll
[2011.09.17 20:30:38 | 000,140,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpendp.dll
[2011.09.17 20:30:38 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QSVRMGMT.DLL
[2011.09.17 20:30:38 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2011.09.17 20:30:38 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpwsx.dll
[2011.09.17 20:30:38 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\regapi.dll
[2011.09.17 20:30:38 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\resutils.dll
[2011.09.17 20:30:38 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpd3d.dll
[2011.09.17 20:30:38 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WavDest.dll
[2011.09.17 20:30:38 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vpnikeapi.dll
[2011.09.17 20:30:37 | 000,932,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\printui.dll
[2011.09.17 20:30:37 | 000,859,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OobeFldr.dll
[2011.09.17 20:30:37 | 000,486,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\powercpl.dll
[2011.09.17 20:30:37 | 000,416,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prnfldr.dll
[2011.09.17 20:30:37 | 000,409,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\photowiz.dll
[2011.09.17 20:30:37 | 000,320,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHost.exe
[2011.09.17 20:30:37 | 000,300,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pdh.dll
[2011.09.17 20:30:37 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PkgMgr.exe
[2011.09.17 20:30:37 | 000,199,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PkgMgr.exe
[2011.09.17 20:30:37 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbccp32.dll
[2011.09.17 20:30:37 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prncache.dll
[2011.09.17 20:30:37 | 000,109,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHostProxy.dll
[2011.09.17 20:30:37 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisrndr.ax
[2011.09.17 20:30:37 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHostProxy.dll
[2011.09.17 20:30:37 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setupcl.exe
[2011.09.17 20:30:37 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PrintIsolationProxy.dll
[2011.09.17 20:30:37 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prevhost.exe
[2011.09.17 20:30:37 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\perfts.dll
[2011.09.17 20:30:36 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SmartcardCredentialProvider.dll
[2011.09.17 20:30:36 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SmartcardCredentialProvider.dll
[2011.09.17 20:30:35 | 000,758,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samsrv.dll
[2011.09.17 20:30:35 | 000,568,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scrptadm.dll
[2011.09.17 20:30:35 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc.dll
[2011.09.17 20:30:35 | 000,428,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shwebsvc.dll
[2011.09.17 20:30:35 | 000,359,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate.exe
[2011.09.17 20:30:35 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scansetting.dll

[michal0]

4 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scavengeui.dll
[2011.09.17 20:30:35 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rmcast.sys
[2011.09.17 20:30:35 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp_isv.dll
[2011.09.17 20:30:35 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samcli.dll
[2011.09.17 20:30:35 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\runonce.exe
[2011.09.17 20:30:35 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shimgvw.dll
[2011.09.17 20:30:35 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shgina.dll
[2011.09.17 20:30:35 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sisbkup.dll
[2011.09.17 20:30:34 | 000,592,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msftedit.dll
[2011.09.17 20:30:34 | 000,300,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msconfig.exe
[2011.09.17 20:30:34 | 000,278,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2011.09.17 20:30:34 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RpcRtRemote.dll
[2011.09.17 20:30:34 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdmo.dll
[2011.09.17 20:30:34 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shgina.dll
[2011.09.17 20:30:34 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdxm.ocx
[2011.09.17 20:30:33 | 002,202,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SensorsCpl.dll
[2011.09.17 20:30:33 | 000,524,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmicmiplugin.dll
[2011.09.17 20:30:33 | 000,279,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sethc.exe
[2011.09.17 20:30:33 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sethc.exe
[2011.09.17 20:30:33 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wksprt.exe
[2011.09.17 20:30:33 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shsetup.dll
[2011.09.17 20:30:33 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2011.09.17 20:30:33 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2011.09.17 20:30:33 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wkscli.dll
[2011.09.17 20:30:33 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sisbkup.dll
[2011.09.17 20:30:33 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\slwga.dll
[2011.09.17 20:30:32 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL
[2011.09.17 20:30:32 | 011,410,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
[2011.09.17 20:30:32 | 002,072,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPEncEn.dll
[2011.09.17 20:30:32 | 001,003,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMNetMgr.dll
[2011.09.17 20:30:32 | 000,679,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autoconv.exe
[2011.09.17 20:30:32 | 000,481,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpps.dll
[2011.09.17 20:30:32 | 000,472,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\azroleui.dll
[2011.09.17 20:30:32 | 000,352,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpeffects.dll
[2011.09.17 20:30:32 | 000,335,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WinSATAPI.dll
[2011.09.17 20:30:32 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\azroleui.dll
[2011.09.17 20:30:32 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpshell.dll
[2011.09.17 20:30:32 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpshell.dll
[2011.09.17 20:30:31 | 005,066,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuthFWSnapin.dll
[2011.09.17 20:30:31 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appwiz.cpl
[2011.09.17 20:30:31 | 000,649,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\appwiz.cpl
[2011.09.17 20:30:31 | 000,582,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sxs.dll
[2011.09.17 20:30:31 | 000,479,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appmgr.dll
[2011.09.17 20:30:31 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\stobject.dll
[2011.09.17 20:30:31 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spbcd.dll
[2011.09.17 20:30:31 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsgqec.dll
[2011.09.17 20:30:31 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sscore.dll
[2011.09.17 20:30:30 | 002,851,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\themeui.dll
[2011.09.17 20:30:30 | 000,933,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sqlsrv32.dll
[2011.09.17 20:30:30 | 000,445,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwizeng.dll
[2011.09.17 20:30:30 | 000,421,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\termmgr.dll
[2011.09.17 20:30:30 | 000,419,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\systemcpl.dll
[2011.09.17 20:30:30 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\termmgr.dll
[2011.09.17 20:30:30 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskcomp.dll
[2011.09.17 20:30:30 | 000,227,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskmgr.exe
[2011.09.17 20:30:30 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sqmapi.dll
[2011.09.17 20:30:30 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppc.dll
[2011.09.17 20:30:30 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tdi.sys
[2011.09.17 20:30:30 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwmp.dll
[2011.09.17 20:30:30 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwizres.dll
[2011.09.17 20:30:29 | 001,160,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OpcServices.dll
[2011.09.17 20:30:29 | 001,080,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\onexui.dll
[2011.09.17 20:30:29 | 000,861,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll
[2011.09.17 20:30:29 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PhotoScreensaver.scr
[2011.09.17 20:30:29 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\onex.dll
[2011.09.17 20:30:28 | 000,477,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PhotoScreensaver.scr
[2011.09.17 20:30:27 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nshipsec.dll
[2011.09.17 20:30:27 | 000,238,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ppcsnap.dll
[2011.09.17 20:30:27 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prntvpt.dll
[2011.09.17 20:30:26 | 000,629,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pmcsnap.dll
[2011.09.17 20:30:26 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\photowiz.dll
[2011.09.17 20:30:26 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\powercfg.cpl
[2011.09.17 20:30:25 | 001,264,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdclt.exe
[2011.09.17 20:30:25 | 001,120,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdengin2.dll
[2011.09.17 20:30:24 | 001,672,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\networkexplorer.dll
[2011.09.17 20:30:23 | 002,146,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\networkmap.dll
[2011.09.17 20:30:23 | 000,238,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\recdisc.exe
[2011.09.17 20:30:23 | 000,079,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdvgumd32.dll
[2011.09.17 20:30:23 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\repair-bde.exe
[2011.09.17 20:30:22 | 000,464,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scrptadm.dll
[2011.09.17 20:30:22 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_isv.exe
[2011.09.17 20:30:22 | 000,307,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scesrv.dll
[2011.09.17 20:30:21 | 001,118,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sbe.dll
[2011.09.17 20:30:21 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp.exe
[2011.09.17 20:30:20 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\puiobj.dll
[2011.09.17 20:30:20 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpencom.dll
[2011.09.17 20:30:20 | 000,181,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qcap.dll
[2011.09.17 20:30:20 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PushPrinterConnections.exe
[2011.09.17 20:30:20 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\profprov.dll
[2011.09.17 20:30:20 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcfgex.dll
[2011.09.17 20:30:19 | 000,624,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll
[2011.09.17 20:30:19 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll
[2011.09.17 20:30:19 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscapi.dll
[2011.09.17 20:30:19 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wsdchngr.dll
[2011.09.17 20:30:18 | 000,812,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpccpl.dll
[2011.09.17 20:30:16 | 000,560,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll
[2011.09.17 20:30:16 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll
[2011.09.17 20:30:16 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSTPager.ax
[2011.09.17 20:30:16 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
[2011.09.17 20:30:16 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
[2011.09.17 20:30:16 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll
[2011.09.17 20:30:16 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshirda.dll
[2011.09.17 20:30:16 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wshirda.dll
[2011.09.17 20:30:15 | 003,715,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll
[2011.09.17 20:30:15 | 000,830,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSMPEG2ENC.DLL
[2011.09.17 20:30:15 | 000,378,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msinfo32.exe
[2011.09.17 20:30:15 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msutb.dll
[2011.09.17 20:30:15 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp.dll
[2011.09.17 20:30:14 | 001,644,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netcenter.dll
[2011.09.17 20:30:14 | 001,077,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Narrator.exe
[2011.09.17 20:30:14 | 000,485,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_isv.dll
[2011.09.17 20:30:14 | 000,376,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys
[2011.09.17 20:30:14 | 000,324,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netdiagfx.dll
[2011.09.17 20:30:14 | 000,225,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netdiagfx.dll
[2011.09.17 20:30:14 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\net1.exe
[2011.09.17 20:30:14 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nci.dll
[2011.09.17 20:30:13 | 001,466,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2011.09.17 20:30:13 | 001,465,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll
[2011.09.17 20:30:13 | 000,638,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VAN.dll
[2011.09.17 20:30:13 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ipsmsnap.dll
[2011.09.17 20:30:13 | 000,551,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localsec.dll
[2011.09.17 20:30:13 | 000,343,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsm.exe
[2011.09.17 20:30:13 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ksproxy.ax
[2011.09.17 20:30:13 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vdsbas.dll
[2011.09.17 20:30:13 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aaclient.dll
[2011.09.17 20:30:13 | 000,154,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uxlib.dll
[2011.09.17 20:30:13 | 000,153,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VBICodec.ax
[2011.09.17 20:30:13 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\userenv.dll
[2011.09.17 20:30:13 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vfwwdm32.dll
[2011.09.17 20:30:13 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetmib1.dll
[2011.09.17 20:30:13 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDTUQ.DLL
[2011.09.17 20:30:13 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDLT1.DLL
[2011.09.17 20:30:13 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINTEL.DLL
[2011.09.17 20:30:13 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINTAM.DLL
[2011.09.17 20:30:13 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINORI.DLL
[2011.09.17 20:30:13 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINMAR.DLL
[2011.09.17 20:30:13 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINHIN.DLL
[2011.09.17 20:30:13 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDBASH.DLL
[2011.09.17 20:30:13 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDUS.DLL
[2011.09.17 20:30:13 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDTAJIK.DLL
[2011.09.17 20:30:13 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDMON.DLL
[2011.09.17 20:30:12 | 001,202,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DiagCpl.dll
[2011.09.17 20:30:12 | 001,009,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcmde.dll
[2011.09.17 20:30:12 | 000,750,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TSWorkspace.dll
[2011.09.17 20:30:12 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usercpl.dll
[2011.09.17 20:30:12 | 000,516,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\main.cpl
[2011.09.17 20:30:12 | 000,312,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MCEWMDRMNDBootstrap.dll
[2011.09.17 20:30:12 | 000,299,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcupdate_GenuineIntel.dll
[2011.09.17 20:30:12 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfreadwrite.dll
[2011.09.17 20:30:12 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfreadwrite.dll
[2011.09.17 20:30:12 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MFPlay.dll
[2011.09.17 20:30:12 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wiavideo.dll
[2011.09.17 20:30:12 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mapistub.dll
[2011.09.17 20:30:12 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mapi32.dll
[2011.09.17 20:30:12 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UserAccountControlSettings.dll
[2011.09.17 20:30:12 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\luainstall.dll
[2011.09.17 20:30:11 | 001,632,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmcore.dll
[2011.09.17 20:30:11 | 001,371,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dwmcore.dll
[2011.09.17 20:30:11 | 000,960,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll
[2011.09.17 20:30:11 | 000,784,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gpprefcl.dll
[2011.09.17 20:30:11 | 000,780,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ci.dll
[2011.09.17 20:30:11 | 000,701,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dsuiext.dll
[2011.09.17 20:30:11 | 000,692,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bthprops.cpl
[2011.09.17 20:30:11 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll
[2011.09.17 20:30:11 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll
[2011.09.17 20:30:11 | 000,606,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfrgui.exe
[2011.09.17 20:30:11 | 000,498,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscui.dll
[2011.09.17 20:30:11 | 000,239,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dskquoui.dll
[2011.09.17 20:30:11 | 000,232,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bitsadmin.exe
[2011.09.17 20:30:11 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\defaultlocationcpl.dll
[2011.09.17 20:30:11 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\desk.cpl
[2011.09.17 20:30:11 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnscmmc.dll
[2011.09.17 20:30:11 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\hbaapi.dll
[2011.09.17 20:30:11 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cca.dll
[2011.09.17 20:30:11 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browcli.dll
[2011.09.17 20:30:11 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscapi.dll
[2011.09.17 20:30:11 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscdll.dll
[2011.09.17 20:30:11 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bitsperf.dll
[2011.09.17 20:30:11 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\C_ISCII.DLL
[2011.09.17 20:30:11 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxmasf.dll
[2011.09.17 20:30:11 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpnaddr.dll
[2011.09.17 20:30:10 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gameux.dll
[2011.09.17 20:30:10 | 000,623,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSAPI.dll
[2011.09.17 20:30:10 | 000,434,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSTIFF.dll
[2011.09.17 20:30:10 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imkr80.ime
[2011.09.17 20:30:10 | 000,366,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\zipfldr.dll
[2011.09.17 20:30:10 | 000,180,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ifsutil.dll
[2011.09.17 20:30:10 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ifsutil.dll
[2011.09.17 20:30:10 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EhStorAPI.dll
[2011.09.17 20:30:10 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2011.09.17 20:30:10 | 000,093,696 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\SysWow64\fms.dll
[2011.09.17 20:30:10 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\SysWow64\iccvid.dll
[2011.09.17 20:30:10 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fdeploy.dll
[2011.09.17 20:30:10 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\findstr.exe
[2011.09.17 20:30:10 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fixmapi.exe
[2011.09.17 20:12:31 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\EventProviders
[2011.09.17 15:27:35 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011.09.16 12:45:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard
[2011.09.16 12:44:53 | 000,508,448 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NVUNINST.EXE
[2011.09.15 22:47:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[2011.09.15 22:47:42 | 000,601,944 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2011.09.15 22:47:41 | 000,254,400 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2011.09.15 22:47:14 | 000,041,184 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2011.09.15 22:47:07 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2011.09.15 22:46:41 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[3 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2011.09.18 18:49:01 | 001,454,258 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.09.18 18:49:01 | 000,625,676 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2011.09.18 18:49:01 | 000,609,896 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.09.18 18:49:01 | 000,119,794 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2011.09.18 18:49:01 | 000,104,214 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.09.18 18:48:20 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2011.09.18 18:43:08 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.09.18 18:43:01 | 3220,873,216 | -HS- | M] () -- C:\hiberfil.sys
[2011.09.18 18:37:06 | 000,582,656 | ---- | M] (OldTimer Tools) -- C:\Users\Boss\Desktop\OTL.exe
[2011.09.18 18:34:50 | 000,000,496 | ---- | M] () -- C:\Windows\tasks\1-Click Maintenance.job
[2011.09.18 18:34:50 | 000,000,488 | ---- | M] () -- C:\Windows\tasks\Úklid 1 kliknutím.job
[2011.09.17 23:09:16 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.09.17 23:09:16 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.09.17 21:10:47 | 000,485,912 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011.09.17 21:02:10 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msclmd.dll
[2011.09.17 21:02:10 | 000,152,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msclmd.dll
[2011.09.15 22:47:41 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[3 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011.09.17 21:35:14 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2011.09.17 21:13:52 | 000,001,547 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
[2011.09.17 20:31:50 | 000,347,904 | ---- | C] () -- C:\Windows\SysNative\systemsf.ebd
[2011.09.17 20:31:17 | 000,001,041 | ---- | C] () -- C:\Windows\SysWow64\tcpbidi.xml
[2011.09.17 20:30:38 | 000,095,744 | ---- | C] () -- C:\Windows\SysNative\RDVGHelper.exe
[2011.09.17 20:30:27 | 000,146,389 | ---- | C] () -- C:\Windows\SysWow64\printmanagement.msc
[2011.09.17 20:30:22 | 000,010,429 | ---- | C] () -- C:\Windows\SysNative\ScavengeSpace.xml
[2011.09.17 20:30:20 | 000,105,559 | ---- | C] () -- C:\Windows\SysWow64\RacRules.xml
[2011.09.17 20:30:19 | 000,105,559 | ---- | C] () -- C:\Windows\SysNative\RacRules.xml
[2011.02.20 23:15:39 | 000,007,601 | ---- | C] () -- C:\Users\Boss\AppData\Local\Resmon.ResmonCfg
[2011.02.05 13:49:21 | 000,013,734 | ---- | C] () -- C:\Users\Boss\AppData\Roaming\UserTile.png
[2011.01.25 21:40:47 | 000,000,047 | ---- | C] () -- C:\Users\Boss\AppData\Roaming\prio.ini
[2011.01.25 11:21:14 | 000,000,293 | ---- | C] () -- C:\Windows\game.ini
[2010.12.29 15:32:44 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2010.12.29 15:32:44 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2010.12.29 15:32:42 | 000,810,496 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2010.12.29 15:32:42 | 000,183,808 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2010.12.29 15:32:42 | 000,108,032 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2010.09.11 11:08:16 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
[2010.08.10 21:57:03 | 000,000,079 | ---- | C] () -- C:\Windows\Serial.ini
[2010.08.08 20:59:29 | 000,015,360 | ---- | C] () -- C:\Users\Boss\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.08.08 20:18:46 | 000,237,568 | R--- | C] () -- C:\Windows\SysWow64\qtmlClient.dll
[2010.08.08 20:18:46 | 000,000,000 | ---- | C] () -- C:\Windows\Graffiti5.2Pin.ini
[2010.07.13 21:33:16 | 001,470,766 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010.05.06 17:54:49 | 000,000,126 | ---- | C] () -- C:\Users\Boss\AppData\Roaming\default.rss
[2010.05.06 17:54:02 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2010.04.12 21:05:28 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2010.04.11 18:31:56 | 000,007,867 | ---- | C] () -- C:\Windows\Irremote.ini
[2009.11.06 10:58:04 | 000,178,975 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2009.07.14 07:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 04:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 04:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 02:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2009.06.10 06:31:04 | 000,089,088 | ---- | C] () -- C:\Windows\SysWow64\nvimage.dll
[2007.01.26 02:04:12 | 000,138,752 | ---- | C] () -- C:\Windows\SysWow64\mase32.dll
[2007.01.26 02:04:12 | 000,027,648 | ---- | C] () -- C:\Windows\SysWow64\ma32.dll

========== LOP Check ==========

[2011.03.16 22:03:01 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\Ashampoo
[2011.09.17 21:14:02 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\DMCache
[2010.06.19 22:12:21 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\GHISLER
[2011.09.17 21:14:14 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\IDM
[2010.04.12 21:02:41 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\IObit
[2011.02.21 22:45:15 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\LangSoft
[2010.04.14 22:58:05 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\Leadertech
[2010.08.29 12:14:06 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\Nokia
[2010.04.11 16:34:49 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\Opera
[2010.05.04 20:47:03 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\PC Suite
[2010.05.03 17:36:43 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\PDFCreator
[2011.01.25 10:24:53 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\proDAD
[2011.03.20 18:22:09 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\PunkBuster
[2010.04.11 17:29:33 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\TuneUp Software
[2010.05.01 21:16:08 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\Ubisoft
[2011.09.18 18:34:50 | 000,000,496 | ---- | M] () -- C:\Windows\Tasks\1-Click Maintenance.job
[2011.08.11 08:37:08 | 000,032,622 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2011.09.18 18:34:50 | 000,000,488 | ---- | M] () -- C:\Windows\Tasks\Úklid 1 kliknutím.job

========== Purity Check ==========



========== Custom Scans ==========


< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"" =
"Sidebar" = C:\Program Files\Windows Sidebar\sidebar.exe /autoRun -- [2010.11.20 05:25:18 | 001,475,584 | ---- | M] (Microsoft Corporation)
"IDMan" = C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot -- [2011.03.03 22:30:29 | 002,745,776 | ---- | M] (Tonec Inc.)
"PC Suite Tray" = "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray -- [2010.05.14 10:32:30 | 001,479,680 | ---- | M] (Nokia)


< MD5 for: ATAPI.SYS >
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010.11.20 05:24:28 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010.11.20 05:24:28 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2009.07.14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2009.07.14 03:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_3de8def0db722996\autochk.exe
[2010.11.20 04:16:56 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010.11.20 04:16:56 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009.07.14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys
[2010.11.20 01:19:22 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010.11.20 01:19:22 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010.11.20 01:19:22 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: CSRSS.EXE >
[2009.07.14 03:39:02 | 000,007,680 | ---- | M] (Microsoft Corporation) MD5=60C2862B4BF0FD9F582EF344C2B1EC72 -- C:\Windows\SysNative\csrss.exe
[2009.07.14 03:39:02 | 000,007,680 | ---- | M] (Microsoft Corporation) MD5=60C2862B4BF0FD9F582EF344C2B1EC72 -- C:\Windows\winsxs\amd64_microsoft-windows-csrss_31bf3856ad364e35_6.1.7600.16385_none_b4d8d57efdc6b4f3\csrss.exe

< MD5 for: EXPLORER.EXE >
[2009.07.14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2010.11.20 04:17:10 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\SysWOW64\explorer.exe
[2010.11.20 04:17:10 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2010.11.20 05:24:46 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\explorer.exe
[2010.11.20 05:24:46 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2009.07.14 03:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe

< MD5 for: LSASS.EXE >
[2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\SysNative\lsass.exe
[2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16385_none_023f7c69767c3edd\lsass.exe
[2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_04709031736ac277\lsass.exe

< MD5 for: NDIS.SYS >
[2010.11.20 05:33:46 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\SysNative\drivers\ndis.sys
[2010.11.20 05:33:46 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_05ed313632ae9759\ndis.sys
[2009.07.14 03:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys

< MD5 for: NTFS.SYS >
[2010.11.20 05:33:48 | 001,659,776 | ---- | M] (Microsoft Corporation) MD5=05D78AA5CB5F3F5C31160BDB955D0B7C -- C:\Windows\SysNative\drivers\ntfs.sys
[2010.11.20 05:33:48 | 001,659,776 | ---- | M] (Microsoft Corporation) MD5=05D78AA5CB5F3F5C31160BDB955D0B7C -- C:\Windows\winsxs\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.17514_none_04972f2c338b23d4\ntfs.sys
[2009.07.14 03:48:27 | 001,659,984 | ---- | M] (Microsoft Corporation) MD5=356698A13C4630D5B31C37378D469196 -- C:\Windows\winsxs\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7600.16385_none_02661b64369ca03a\ntfs.sys

< MD5 for: SCECLI.DLL >
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010.11.20 04:21:06 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.20 04:21:06 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.20 05:27:26 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.20 05:27:26 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SERVICES.EXE >
[2009.07.14 03:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\SysNative\services.exe
[2009.07.14 03:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe

< MD5 for: SMSS.EXE >
[2009.07.14 03:39:41 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=1911A3356FA3F77CCC825CCBAC038C2A -- C:\Windows\SysNative\smss.exe
[2009.07.14 03:39:41 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=1911A3356FA3F77CCC825CCBAC038C2A -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_082f99a432e2a661\smss.exe

< MD5 for: SPOOLSV.EXE >
[2009.07.14 03:39:44 | 000,558,080 | ---- | M] (Microsoft Corporation) MD5=89E8550C5862999FCF482EA562B0E98E -- C:\Windows\winsxs\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7600.16385_none_324094c8db39cbbd\spoolsv.exe
[2010.11.20 05:25:22 | 000,559,104 | ---- | M] (Microsoft Corporation) MD5=B96C17B5DC1424D56EEA3A99E97428CD -- C:\Windows\SysNative\spoolsv.exe
[2010.11.20 05:25:22 | 000,559,104 | ---- | M] (Microsoft Corporation) MD5=B96C17B5DC1424D56EEA3A99E97428CD -- C:\Windows\winsxs\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7601.17514_none_3471a890d8284f57\spoolsv.exe

< MD5 for: SVCHOST.EXE >
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2010.11.20 05:33:58 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\SysNative\drivers\tcpip.sys
[2010.11.20 05:33:58 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2009.07.14 03:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.20 04:17:50 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.20 04:17:50 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010.11.20 05:25:26 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.20 05:25:26 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010.11.20 05:25:32 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010.11.20 05:25:32 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009.07.14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe

< C:\windows\system32\spool\prtprocs|dll;true;true;true /FP >
[2009.07.14 03:41:12 | 000,027,648 | ---- | M] (Microsoft Corporation) --
[2010.11.20 05:27:30 | 000,039,424 | ---- | M] (Microsoft Corporation) --
[2009.07.26 20:39:33 | 000,003,584 | ---- | M] (Lexmark International Inc.) --
[2009.07.14 04:30:16 | 000,003,584 | ---- | M] (Lexmark International Inc.) --

< %systemroot%\system32\drivers\*.sys /5 >

< %systemroot%\system32\drivers\*.sys /X >
[2009.06.10 23:14:29 | 003,440,660 | ---- | M] () -- C:\Windows\system32\drivers\gm.dls
[2009.06.10 23:14:29 | 000,000,646 | ---- | M] () -- C:\Windows\system32\drivers\gmreadme.txt

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\system32\*.* /5 >
[2011.09.15 22:47:41 | 000,000,000 | ---- | M] () -- C:\Windows\system32\config.nt
[2011.09.17 21:02:10 | 000,152,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msclmd.dll
[3 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< %systemroot%\system32\*.dll /lockedfiles >
[3 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< %systemroot%\system32\config\*.sav >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\*.* /U /s >
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[3 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[3 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[2 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[3 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[3 C:\Windows\SysWOW64\*.tmp files -> C:\Windows\SysWOW64\*.tmp -> ]

< %systemroot%\*. /mp /s >

< %ALLUSERSPROFILE%\Data Aplikací\*.* >

< %ALLUSERSPROFILE%\Data Aplikací\*.exe /s >

< %ALLUSERSPROFILE%\Dáta aplikácií\*.* >

< %ALLUSERSPROFILE%\Dáta aplikácií\*.exe /s >

< %APPDATA%\*. >
[2010.04.15 22:25:08 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\Adobe
[2010.04.15 22:25:41 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\AdobeUM
[2011.03.16 22:03:01 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\Ashampoo
[2011.09.17 21:14:02 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\DMCache
[2010.06.19 22:12:21 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\GHISLER
[2010.04.11 16:12:41 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\Identities
[2011.09.17 21:14:14 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\IDM
[2011.01.23 22:53:43 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\InstallShield
[2010.04.12 21:02:41 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\IObit
[2011.02.21 22:45:15 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\LangSoft
[2010.04.14 22:58:05 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\Leadertech
[2010.04.11 16:59:33 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\Macromedia
[2010.05.05 17:42:16 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\Malwarebytes
[2009.07.14 09:45:14 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\Media Center Programs
[2010.12.29 15:34:24 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\Media Player Classic
[2011.01.06 16:49:22 | 000,000,000 | --SD | M] -- C:\Users\Boss\AppData\Roaming\Microsoft
[2010.04.12 21:23:07 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\Mozilla
[2011.02.15 00:25:18 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\Nero
[2010.08.29 12:14:06 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\Nokia
[2010.12.05 11:35:02 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\NVIDIA
[2010.04.11 16:34:49 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\Opera
[2010.05.04 20:47:03 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\PC Suite
[2010.05.03 17:36:43 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\PDFCreator
[2011.01.25 10:24:53 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\proDAD
[2011.03.20 18:22:09 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\PunkBuster
[2010.06.26 21:46:21 | 000,000,000 | RH-D | M] -- C:\Users\Boss\AppData\Roaming\SecuROM
[2011.08.14 13:12:13 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\Skype
[2011.08.14 13:10:23 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\skypePM
[2010.04.11 17:29:33 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\TuneUp Software
[2010.05.01 21:16:08 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\Ubisoft
[2011.02.10 18:51:56 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\Winamp
[2010.04.11 17:02:45 | 000,000,000 | ---D | M] -- C:\Users\Boss\AppData\Roaming\WinRAR

< %APPDATA%\*.* >
[2010.12.12 12:08:47 | 000,000,126 | ---- | M] () -- C:\Users\Boss\AppData\Roaming\default.rss
[2011.01.25 21:41:03 | 000,000,047 | ---- | M] () -- C:\Users\Boss\AppData\Roaming\prio.ini
[2011.02.05 13:49:21 | 000,013,734 | ---- | M] () -- C:\Users\Boss\AppData\Roaming\UserTile.png

< %APPDATA%\*.exe /s >
[2010.08.08 20:16:05 | 000,029,926 | R--- | M] () -- C:\Users\Boss\AppData\Roaming\Microsoft\Installer\{5EB90C06-964F-4195-B83E-BD7E55C88415}\ARPPRODUCTICON.exe
[2011.02.17 23:46:25 | 000,835,440 | R--- | M] () -- C:\Users\Boss\AppData\Roaming\PunkBuster\pbsetup\pbsvc.exe

< %SYSTEMDRIVE%\*.exe >

< *crack* /s >
[2010.11.09 09:49:48 | 040,868,256 | ---- | M] () -- \Program Files (x86)\Activision\Call of Duty - Black Ops\zone\Common\mp_cracked.ff
[2010.11.09 09:49:48 | 000,019,296 | ---- | M] () -- \Program Files (x86)\Activision\Call of Duty - Black Ops\zone\English\en_mp_cracked.ff
File not found -- \Users\Boss\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
File not found -- \Users\Boss\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
File not found -- \Users\Boss\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
File not found -- \Users\Boss\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
[2011.03.06 14:20:50 | 000,000,495 | ---- | M] () -- \Users\Boss\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
[2011.03.06 14:20:50 | 000,000,495 | ---- | M] () -- \Users\Boss\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
[2011.03.06 14:20:50 | 000,000,495 | ---- | M] () -- \Users\Boss\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
[2011.03.06 14:20:50 | 000,000,495 | ---- | M] () -- \Users\Boss\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
[2011.03.06 14:20:50 | 000,000,495 | ---- | M] () -- \Users\Boss\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
[2011.03.06 14:20:50 | 000,000,495 | ---- | M] () -- \Users\Boss\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
[2011.03.06 14:20:50 | 000,000,495 | ---- | M] () -- \Users\Boss\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
[2011.03.06 14:20:50 | 000,000,495 | ---- | M] () -- \Users\Boss\AppData\Local\Data aplikací\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
[2011.03.06 14:20:50 | 000,000,495 | ---- | M] () -- \Users\Boss\AppData\Local\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
[2011.03.06 14:20:50 | 000,000,495 | ---- | M] () -- \Users\Boss\AppData\Local\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
File not found -- \Users\Boss\Local Settings\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
File not found -- \Users\Boss\Local Settings\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
File not found -- \Users\Boss\Local Settings\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
File not found -- \Users\Boss\Local Settings\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
[2011.03.06 14:20:50 | 000,000,495 | ---- | M] () -- \Users\Boss\Local Settings\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
[2011.03.06 14:20:50 | 000,000,495 | ---- | M] () -- \Users\Boss\Local Settings\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
[2011.03.06 14:20:50 | 000,000,495 | ---- | M] () -- \Users\Boss\Local Settings\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
[2011.03.06 14:20:50 | 000,000,495 | ---- | M] () -- \Users\Boss\Local Settings\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
[2011.03.06 14:20:50 | 000,000,495 | ---- | M] () -- \Users\Boss\Local Settings\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
[2011.03.06 14:20:50 | 000,000,495 | ---- | M] () -- \Users\Boss\Local Settings\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
[2011.03.06 14:20:50 | 000,000,495 | ---- | M] () -- \Users\Boss\Local Settings\Data aplikací\Data aplikací\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
[2011.03.06 14:20:50 | 000,000,495 | ---- | M] () -- \Users\Boss\Local Settings\Data aplikací\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
[2011.03.06 14:20:50 | 000,000,495 | ---- | M] () -- \Users\Boss\Local Settings\Data aplikací\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat
[2011.03.06 14:20:50 | 000,000,495 | ---- | M] () -- \Users\Boss\Local Settings\Opera\Opera\profile\bt_metadata\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat

< *keygen* /s >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /s >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager" /v BootExecute /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\SESSION MANAGER
BOOTEXECUTE REG_MULTI_SZ autocheck autochk *

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" /v "PendingFileRenameOperations" /c >

< type c:\boot.ini >> test.txt /c >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2011.09.18 18:48:20 | 000,000,512 | ---- | M] () MD5=A6C0C3D5803AB8F2F12A5141F3597D03 -- C:\PhysicalMBR.bin

========== Alternate Data Streams ==========

@Alternate Data Stream - 6144 bytes -> C:\Windows\Cursors\arrow_n.cur:NEDTA.DAT

< End of report >

[Mc_Murphy]

Jak první Tě upozorním, že cracky jsou nejlepším způsobem, jak si do počítače natáhnout bordel! A o porušování zákonů a licenčních podmínek se bavit nebudeme, že?

Kód: Vybrat vše

..\Atomix Virtual DJ Pro V7.02 {Precracked} + Addons {blaze69}.dat

Neaktualizoval jsi MS Internet Explorer!
Druhý log by měl být ve stejném adresáři, jak byl ten první. Ale zkoulíme to i bez něj.

Znovu spusť OTL.

• Pokud používáš Win Vista či Win7, klikni na OTL pravým myšítkem a dej Run As Administrator či Spustit jako správce.
• Pokud používáš 64bitový OS, zkontroluj, zda-li je zaškrtnutý čtvereček Pro 64 bitové OS. Pokud ne, zaškrtni jej.
• Do spodního okénka Vlastní skenování/opravy vlož tento skript:

Kód: Vybrat vše

:OTL
IE - HKU\S-1-5-21-1904667193-2443021733-4101947669-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = A8 AF D4 48 F2 3E CB 01 [binary data]
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=302398"
[2010.05.26 16:18:50 | 000,002,333 | ---- | M] () -- C:\Users\Boss\AppData\Roaming\Mozilla\Firefox\Profiles\9lmqmwq2.default\searchplugins\askcom.xml
O4 - HKU\S-1-5-21-1904667193-2443021733-4101947669-1000..\Run: [] File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O20:64bit: - AppInit_DLLs: (prio.dll) - File not found
O20 - AppInit_DLLs: (prio32.dll) - File not found
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[3 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[3 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[2 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[3 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[3 C:\Windows\SysWOW64\*.tmp files -> C:\Windows\SysWOW64\*.tmp -> ]
@Alternate Data Stream - 6144 bytes -> C:\Windows\Cursors\arrow_n.cur:NEDTA.DAT

:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
"{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2}"=-
"{BFC32E1D-EE75-4A48-BC60-104E11EE2431}"=-
"{D4027C7F-154A-4066-A1AD-4243D8127440}"=-
"{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"IDMan"=-
""=-
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
""=-

:Files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp /s
C:\Windows\tasks\1-Click Maintenance.job
C:\Windows\tasks\Úklid 1 kliknutím.job
C:\Users\Boss\AppData\Roaming\IObit

:Commands
[emptytemp]
[emptyflash]
[resethosts]
[purity]
[clearallrestorepoints]

• Klikni na tlačítko [Opravit].
• Po dokončení skenu se objeví log, ten mi sem vlož.
• Pokud se log nevejde do jednoho příspěvku, rozděl jej na více částí.

[michal0]

tak programu jsem se samozřejmně zbavil a přikládám tedy log
nevím jestli se podařil tak jak měl, protože má drahá žena během té opravy omylem vypla zásuvku od počítače,tak jsem to dělal podruhé. mimochodem u nás běžná věc, když se vytahuje žehlička ze zásuvky,tak občas padá počítač

All processes killed
========== OTL ==========
HKU\S-1-5-21-1904667193-2443021733-4101947669-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache_TIMESTAMP| /E : value set successfully!
Prefs.js: "chr-greentree_ff&type=302398" removed from browser.search.param.yahoo-fr
File C:\Users\Boss\AppData\Roaming\Mozilla\Firefox\Profiles\9lmqmwq2.default\searchplugins\askcom.xml not found.
Registry value HKEY_USERS\S-1-5-21-1904667193-2443021733-4101947669-1000\Software\Microsoft\Windows\CurrentVersion\Run\\ not found.
Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin not found.
Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\grooveLocalGWS\ not found.
File Protocol\Handler\grooveLocalGWS - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-help\ not found.
File Protocol\Handler\ms-help - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype4com\ not found.
File Protocol\Handler\skype4com - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype-ie-addon-data\ not found.
File Protocol\Handler\skype-ie-addon-data - No CLSID value found not found.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:prio.dll deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:prio32.dll deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
File/Folder C:\Windows\*.tmp not found.
File/Folder C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp not found.
File/Folder C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp not found.
File/Folder C:\Windows\Installer\*.tmp not found.
File/Folder C:\Windows\System32\*.tmp not found.
File/Folder C:\Windows\SysWOW64\*.tmp not found.
Unable to delete ADS C:\Windows\Cursors\arrow_n.cur:NEDTA.DAT .
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar\\{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar\\{BFC32E1D-EE75-4A48-BC60-104E11EE2431} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BFC32E1D-EE75-4A48-BC60-104E11EE2431}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar\\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\IDMan not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\ not found.
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
File\Folder C:\Windows\tasks\1-Click Maintenance.job not found.
File\Folder C:\Windows\tasks\Úklid 1 kliknutím.job not found.
File\Folder C:\Users\Boss\AppData\Roaming\IObit not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Boss
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 38030 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 9242757 bytes
->Google Chrome cache emptied: 0 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1900 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 9,00 mb


[EMPTYFLASH]

User: All Users

User: Boss
->Flash cache emptied: 0 bytes

User: Default

User: Default User

User: Public

Total Flash Files Cleaned = 0,00 mb

C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
Error creating restore point.

OTL by OldTimer - Version 3.2.29.1 log created on 09192011_223128

Files\Folders moved on Reboot...
File\Folder C:\Users\Boss\AppData\Local\Temp\FXSAPIDebugLogFile.txt not found!

Registry entries deleted on Reboot...

[Mc_Murphy]

tak programu jsem se samozřejmně zbavil
To je dobře.

nevím jestli se podařil tak jak měl, protože má drahá žena během té opravy omylem vypla zásuvku od počítače,tak jsem to dělal podruhé.
Podle logu to vypadá, že OTL vše udělal již napoprvé. Manželce bych za takové výpadky poděkoval - můžeš si tím krásně odpálit desku či poškodit HDD.

mimochodem u nás běžná věc, když se vytahuje žehlička ze zásuvky,tak občas padá počítač
Máte asi slabé jističe nebo nějaký problém v zásuvce (volný drát, studený spoj nebo něco podobného). Chtělo by to mít žehličku na jiném okruhu než počítač a asi minimálně bych si sehnal elektrikáře, ať se na to mrkne a proměří zátěž sítě. Ono by se pak taky mohlo stát, že to jednou vypadne a už to nenaběhne.

A jestli jsi už aktualizoval MSIE, můžeme dočistit.

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stáhni a spusť.
• Klikni na CleanUp a potvrď YES.
• Program uklidí a restartuje PC.

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stáhni a spusť.
• Klikni na Start a potvrď OK.
• Program uklidí a restartuje PC.
• Po použití utilitu smaž.

Pokud nemáš, stáhni CCleaner z tohoto odkazu.

• Panel čistič
• Vše nech jak je, jen dej Analyzovat a poté Spustit CCleaner.

• Panel registry
• Klikni na Hledej problémy.
• Následně na Opravit problémy - zálohu registrů doporučuji udělat, oprav všechny problémy.
• Postup opakuj, dokud nebude bez problémů - většinou cca 3x.

• Panel nástroje
• Zde můžeš odinstalovat nepotřebné programy.

CCleaner doporučuji používat cca jednou za týden.

A pokud nejsou žádné dotazy, je to z mé strany vše.

[michal0]

s tou žehličkou jsem měl na mysli, že místo vidlici od žehličky vytáhne tu od pc. vždy ji hrozně láká se napíchnout do čtyřzásuvky protože je tam volné jedno místo a pak se samozřejmě sekne když ji vytahuje
jinak aktualizaci msie a dočištění jsem provedl, pc šlape dobře.
děkuji za ochotu i váš čas, ať se daří.

[Mc_Murphy]

Aha, já to pochopil tak, že i když vytáhne žehličku, spadne Ti PC. No tak z toho, jak píšeš, doporučuji vařečku či opasek a manželce vysvětlit, jak moc nebezpečné je, vypínat PC takto surově.

Ale vážně - dávejte si na to oba pozor, není to legrace a jednou se taky může stát, že to například HDD neustojí a mechanicky se poškodí.

Není vůbec zač, rád jsem pomohl. Tobě i manželce přeji též pěkné dny.

[michal0]

zdravím, tak jsem tady zase. internet mě zlobí čím dál tím víc. domovskou stánku načítá i přes minutu a o ostatních ani nemluvím. leze mi to už krkem, tak prosím o radu. přikládám log

Logfile of random's system information tool 1.08 (written by random/random)
Run by Boss at 2011-09-25 13:23:06
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 353 GB (74%) free of 477 GB
Total RAM: 4096 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:23:56, on 25.9.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files (x86)\Internet Download Manager\IDMan.exe
C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files\trend micro\Boss.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files (x86)\Seznam.cz\listicka.dll
O3 - Toolbar: Nástroje Lištičky - {1EA00BE1-6E54-4E2A-8099-680300BF23E1} - C:\Program Files (x86)\Seznam.cz\toolbar\toolbar.dll
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Stáhnout s IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Stáhnout s IDM obsah FLV videa - C:\Program Files (x86)\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Stáhnout s IDM všechny odkazy - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm
O9 - Extra button: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files (x86)\Seznam.cz\listicka.dll
O9 - Extra 'Tools' menuitem: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files (x86)\Seznam.cz\listicka.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files (x86)\Seznam.cz\listicka.dll
O9 - Extra 'Tools' menuitem: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files (x86)\Seznam.cz\listicka.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{FF951628-AE47-4EDE-B3A2-25DF81387731}: NameServer = 85.255.113.140,85.255.112.93
O17 - HKLM\System\CS1\Services\Tcpip\..\{FF951628-AE47-4EDE-B3A2-25DF81387731}: NameServer = 85.255.113.140,85.255.112.93
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\SysWOW64\IoctlSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - Unknown owner - C:\Windows\System32\TuneUpDefragService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - Unknown owner - C:\Windows\System32\TUProgSt.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10069 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
"C:\Program Files (x86)\Internet Download Manager\IDMan.exe" /onboot
"taskhost.exe"
"C:\Program Files (x86)\PowerISO\PWRISOVM.EXE"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe"
C:\Windows\SysWOW64\IoctlSvc.exe
"C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"taskhost.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=2288.4fb82f0.1895338850 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll" Mozilla.Firefox.6.0.2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.jar" 2288 "\\.\pipe\gecko-crash-server-pipe.2288" plugin
{95643D8E-2C64-4E7D-8826-1DBCDE6525F8}
{9E215098-8E90-417F-94A6-3CE31B5E5BF0}
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Boss\Desktop\programy\RSITx64.exe"

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2011-09-06 959432]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}]
IDMIEHlprObj Class - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2009-01-22 161200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files (x86)\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll [2003-05-12 50376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\ProgramData\LangSoft\WebIE.dll [2011-02-21 798771]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-07-17 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Lištička - C:\Program Files (x86)\Seznam.cz\listicka.dll [2011-03-15 2201600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2011-09-06 959432]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{1EA00BE1-6E54-4E2A-8099-680300BF23E1} - Nástroje Lištičky - C:\Program Files (x86)\Seznam.cz\toolbar\toolbar.dll [2011-03-10 183808]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2009-06-10 16315424]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"PC Suite Tray"=C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2010-05-14 1479680]
"IDMan"=C:\Program Files (x86)\Internet Download Manager\IDMan.exe [2011-09-22 2745776]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"PWRISOVM.EXE"=C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [2009-03-15 180224]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-09-06 3722416]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"NoResolveSearch"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-09-25 13:19:29 ----D---- C:\rsit
2011-09-22 11:15:48 ----D---- C:\Users\Boss\AppData\Roaming\IDM
2011-09-22 11:15:44 ----D---- C:\Program Files (x86)\Internet Download Manager
2011-09-19 23:01:07 ----D---- C:\Program Files (x86)\Seznam.cz
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\wextract.exe
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\url.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\occache.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\msrating.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\msls31.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\mshta.exe
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\inseng.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\icardie.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2011-09-19 23:00:14 ----A---- C:\Windows\SYSWOW64\admparse.dll
2011-09-19 23:00:14 ----A---- C:\Windows\system32\wininet.dll
2011-09-19 23:00:14 ----A---- C:\Windows\system32\urlmon.dll
2011-09-19 23:00:14 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2011-09-19 23:00:14 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-09-19 23:00:14 ----A---- C:\Windows\system32\pngfilt.dll
2011-09-19 23:00:14 ----A---- C:\Windows\system32\occache.dll
2011-09-19 23:00:14 ----A---- C:\Windows\system32\msrating.dll
2011-09-19 23:00:14 ----A---- C:\Windows\system32\msls31.dll
2011-09-19 23:00:14 ----A---- C:\Windows\system32\mshtmler.dll
2011-09-19 23:00:14 ----A---- C:\Windows\system32\mshtml.dll
2011-09-19 23:00:14 ----A---- C:\Windows\system32\mshta.exe
2011-09-19 23:00:14 ----A---- C:\Windows\system32\msfeedssync.exe
2011-09-19 23:00:14 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-09-19 23:00:14 ----A---- C:\Windows\system32\jsproxy.dll
2011-09-19 23:00:14 ----A---- C:\Windows\system32\jscript9.dll
2011-09-19 23:00:14 ----A---- C:\Windows\system32\jscript.dll
2011-09-19 23:00:14 ----A---- C:\Windows\system32\imgutil.dll
2011-09-19 23:00:14 ----A---- C:\Windows\system32\ieUnatt.exe
2011-09-19 23:00:14 ----A---- C:\Windows\system32\ieui.dll
2011-09-19 23:00:14 ----A---- C:\Windows\system32\iesysprep.dll
2011-09-19 23:00:14 ----A---- C:\Windows\system32\iertutil.dll
2011-09-19 23:00:14 ----A---- C:\Windows\system32\iepeers.dll
2011-09-19 23:00:14 ----A---- C:\Windows\system32\ieakui.dll
2011-09-19 23:00:14 ----A---- C:\Windows\system32\ieaksie.dll
2011-09-19 23:00:14 ----A---- C:\Windows\system32\ieakeng.dll
2011-09-19 23:00:14 ----A---- C:\Windows\system32\IEAdvpack.dll
2011-09-19 23:00:14 ----A---- C:\Windows\system32\admparse.dll
2011-09-19 23:00:13 ----A---- C:\Windows\system32\wextract.exe
2011-09-19 23:00:13 ----A---- C:\Windows\system32\webcheck.dll
2011-09-19 23:00:13 ----A---- C:\Windows\system32\vbscript.dll
2011-09-19 23:00:13 ----A---- C:\Windows\system32\url.dll
2011-09-19 23:00:13 ----A---- C:\Windows\system32\mshtmled.dll
2011-09-19 23:00:13 ----A---- C:\Windows\system32\msfeeds.dll
2011-09-19 23:00:13 ----A---- C:\Windows\system32\licmgr10.dll
2011-09-19 23:00:13 ----A---- C:\Windows\system32\inseng.dll
2011-09-19 23:00:13 ----A---- C:\Windows\system32\iexpress.exe
2011-09-19 23:00:13 ----A---- C:\Windows\system32\iesetup.dll
2011-09-19 23:00:13 ----A---- C:\Windows\system32\iernonce.dll
2011-09-19 23:00:13 ----A---- C:\Windows\system32\ieframe.dll
2011-09-19 23:00:13 ----A---- C:\Windows\system32\iedkcs32.dll
2011-09-19 23:00:13 ----A---- C:\Windows\system32\ieapfltr.dll
2011-09-19 23:00:13 ----A---- C:\Windows\system32\ie4uinit.exe
2011-09-19 23:00:13 ----A---- C:\Windows\system32\icardie.dll
2011-09-19 23:00:13 ----A---- C:\Windows\system32\dxtrans.dll
2011-09-19 23:00:13 ----A---- C:\Windows\system32\dxtmsft.dll
2011-09-19 16:46:41 ----D---- C:\Program Files (x86)\Codemasters
2011-09-19 15:50:12 ----A---- C:\Windows\SYSWOW64\rapture3d_oal.dll
2011-09-19 15:50:12 ----A---- C:\Windows\SYSWOW64\mkl_blueripple.dll
2011-09-19 15:50:11 ----D---- C:\Program Files (x86)\BRS
2011-09-19 15:50:08 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2011-09-19 15:50:08 ----A---- C:\Windows\system32\wrap_oal.dll
2011-09-19 15:50:08 ----A---- C:\Windows\system32\OpenAL32.dll
2011-09-19 15:27:10 ----A---- C:\Windows\OpenAL32.dll
2011-09-19 15:22:05 ----A---- C:\Windows\system32\roboot64.exe
2011-09-19 15:22:04 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2011-09-19 10:58:38 ----D---- C:\Program Files\Defraggler
2011-09-17 21:05:32 ----D---- C:\Windows\system32\SPReview
2011-09-17 20:32:00 ----A---- C:\Windows\SYSWOW64\MSAC3ENC.DLL
2011-09-17 20:32:00 ----A---- C:\Windows\SYSWOW64\mobsync.exe
2011-09-17 20:32:00 ----A---- C:\Windows\system32\mprddm.dll
2011-09-17 20:32:00 ----A---- C:\Windows\system32\mobsync.exe
2011-09-17 20:31:59 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2011-09-17 20:31:58 ----A---- C:\Windows\SYSWOW64\mstask.dll
2011-09-17 20:31:58 ----A---- C:\Windows\SYSWOW64\mscories.dll
2011-09-17 20:31:58 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2011-09-17 20:31:58 ----A---- C:\Windows\SYSWOW64\MediaMetadataHandler.dll
2011-09-17 20:31:58 ----A---- C:\Windows\SYSWOW64\KBDLT1.DLL
2011-09-17 20:31:58 ----A---- C:\Windows\SYSWOW64\KBDINTEL.DLL
2011-09-17 20:31:58 ----A---- C:\Windows\SYSWOW64\KBDCZ1.DLL
2011-09-17 20:31:58 ----A---- C:\Windows\SYSWOW64\iTVData.dll
2011-09-17 20:31:58 ----A---- C:\Windows\system32\msdri.dll
2011-09-17 20:31:58 ----A---- C:\Windows\system32\KernelBase.dll
2011-09-17 20:31:58 ----A---- C:\Windows\system32\kernel32.dll
2011-09-17 20:31:58 ----A---- C:\Windows\system32\kerberos.dll
2011-09-17 20:31:58 ----A---- C:\Windows\system32\KBDBLR.DLL
2011-09-17 20:31:58 ----A---- C:\Windows\system32\itircl.dll
2011-09-17 20:31:58 ----A---- C:\Windows\system32\iphlpsvc.dll
2011-09-17 20:31:58 ----A---- C:\Windows\system32\inetmib1.dll
2011-09-17 20:31:58 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2011-09-17 20:31:58 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2011-09-17 20:31:57 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2011-09-17 20:31:57 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2011-09-17 20:31:57 ----A---- C:\Windows\SYSWOW64\raschap.dll
2011-09-17 20:31:57 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2011-09-17 20:31:57 ----A---- C:\Windows\SYSWOW64\qedit.dll
2011-09-17 20:31:57 ----A---- C:\Windows\SYSWOW64\provsvc.dll
2011-09-17 20:31:57 ----A---- C:\Windows\SYSWOW64\propsys.dll
2011-09-17 20:31:57 ----A---- C:\Windows\SYSWOW64\lsmproxy.dll
2011-09-17 20:31:57 ----A---- C:\Windows\SYSWOW64\logagent.exe
2011-09-17 20:31:57 ----A---- C:\Windows\system32\printui.dll
2011-09-17 20:31:57 ----A---- C:\Windows\system32\pnidui.dll
2011-09-17 20:31:57 ----A---- C:\Windows\system32\pifmgr.dll
2011-09-17 20:31:57 ----A---- C:\Windows\system32\drivers\scsiport.sys
2011-09-17 20:31:56 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2011-09-17 20:31:56 ----A---- C:\Windows\SYSWOW64\sbe.dll
2011-09-17 20:31:56 ----A---- C:\Windows\SYSWOW64\samcli.dll
2011-09-17 20:31:56 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2011-09-17 20:31:56 ----A---- C:\Windows\SYSWOW64\rdprefdrvapi.dll
2011-09-17 20:31:56 ----A---- C:\Windows\SYSWOW64\perfmon.exe
2011-09-17 20:31:56 ----A---- C:\Windows\SYSWOW64\pdhui.dll
2011-09-17 20:31:56 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2011-09-17 20:31:56 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2011-09-17 20:31:56 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2011-09-17 20:31:56 ----A---- C:\Windows\SYSWOW64\netiougc.exe
2011-09-17 20:31:56 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2011-09-17 20:31:56 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2011-09-17 20:31:56 ----A---- C:\Windows\SYSWOW64\ncryptui.dll
2011-09-17 20:31:56 ----A---- C:\Windows\system32\sdcpl.dll
2011-09-17 20:31:56 ----A---- C:\Windows\system32\RDPENCDD.dll
2011-09-17 20:31:56 ----A---- C:\Windows\system32\rdpclip.exe
2011-09-17 20:31:56 ----A---- C:\Windows\system32\OobeFldr.dll
2011-09-17 20:31:56 ----A---- C:\Windows\system32\odbctrac.dll
2011-09-17 20:31:56 ----A---- C:\Windows\system32\ntdll.dll
2011-09-17 20:31:56 ----A---- C:\Windows\system32\nslookup.exe
2011-09-17 20:31:56 ----A---- C:\Windows\system32\nlasvc.dll
2011-09-17 20:31:56 ----A---- C:\Windows\system32\nlaapi.dll
2011-09-17 20:31:56 ----A---- C:\Windows\system32\netshell.dll
2011-09-17 20:31:56 ----A---- C:\Windows\system32\netlogon.dll
2011-09-17 20:31:56 ----A---- C:\Windows\system32\netjoin.dll
2011-09-17 20:31:56 ----A---- C:\Windows\system32\ncsi.dll
2011-09-17 20:31:56 ----A---- C:\Windows\system32\MultiDigiMon.exe
2011-09-17 20:31:56 ----A---- C:\Windows\system32\msxml6.dll
2011-09-17 20:31:55 ----A---- C:\Windows\SYSWOW64\ntlanman.dll
2011-09-17 20:31:55 ----A---- C:\Windows\SYSWOW64\cmd.exe
2011-09-17 20:31:55 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-09-17 20:31:55 ----A---- C:\Windows\system32\drivers\nvstor.sys
2011-09-17 20:31:55 ----A---- C:\Windows\system32\drivers\nvraid.sys
2011-09-17 20:31:55 ----A---- C:\Windows\system32\CertPolEng.dll
2011-09-17 20:31:55 ----A---- C:\Windows\system32\certmgr.dll
2011-09-17 20:31:55 ----A---- C:\Windows\system32\certcli.dll
2011-09-17 20:31:54 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2011-09-17 20:31:54 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2011-09-17 20:31:54 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2011-09-17 20:31:54 ----A---- C:\Windows\SYSWOW64\C_ISCII.DLL
2011-09-17 20:31:54 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2011-09-17 20:31:54 ----A---- C:\Windows\system32\drivers\cdrom.sys
2011-09-17 20:31:54 ----A---- C:\Windows\system32\diagperf.dll
2011-09-17 20:31:54 ----A---- C:\Windows\system32\dbghelp.dll
2011-09-17 20:31:54 ----A---- C:\Windows\system32\dbgeng.dll
2011-09-17 20:31:54 ----A---- C:\Windows\system32\d3d9.dll
2011-09-17 20:31:54 ----A---- C:\Windows\system32\d3d10level9.dll
2011-09-17 20:31:54 ----A---- C:\Windows\system32\d3d10_1core.dll
2011-09-17 20:31:54 ----A---- C:\Windows\system32\comdlg32.dll
2011-09-17 20:31:54 ----A---- C:\Windows\system32\cdd.dll
2011-09-17 20:31:53 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2011-09-17 20:31:53 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2011-09-17 20:31:53 ----A---- C:\Windows\SYSWOW64\activeds.dll
2011-09-17 20:31:53 ----A---- C:\Windows\system32\drivers\amdxata.sys
2011-09-17 20:31:53 ----A---- C:\Windows\system32\drivers\amdsata.sys
2011-09-17 20:31:53 ----A---- C:\Windows\system32\consent.exe
2011-09-17 20:31:53 ----A---- C:\Windows\system32\conhost.exe
2011-09-17 20:31:53 ----A---- C:\Windows\system32\bcdsrv.dll
2011-09-17 20:31:53 ----A---- C:\Windows\system32\bcdedit.exe
2011-09-17 20:31:53 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2011-09-17 20:31:53 ----A---- C:\Windows\system32\aepdu.dll
2011-09-17 20:31:53 ----A---- C:\Windows\system32\aeinv.dll
2011-09-17 20:31:53 ----A---- C:\Windows\system32\AdmTmpl.dll
2011-09-17 20:31:53 ----A---- C:\Windows\system32\acppage.dll
2011-09-17 20:31:52 ----A---- C:\Windows\SYSWOW64\imapi2.dll
2011-09-17 20:31:52 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2011-09-17 20:31:52 ----A---- C:\Windows\SYSWOW64\authui.dll
2011-09-17 20:31:52 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2011-09-17 20:31:52 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2011-09-17 20:31:52 ----A---- C:\Windows\system32\imapi2fs.dll
2011-09-17 20:31:52 ----A---- C:\Windows\system32\ftp.exe
2011-09-17 20:31:52 ----A---- C:\Windows\system32\drivers\http.sys
2011-09-17 20:31:52 ----A---- C:\Windows\system32\drivers\HpSAMD.sys
2011-09-17 20:31:52 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2011-09-17 20:31:52 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2011-09-17 20:31:52 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2011-09-17 20:31:52 ----A---- C:\Windows\system32\drivers\appid.sys
2011-09-17 20:31:52 ----A---- C:\Windows\system32\BdeHdCfg.exe
2011-09-17 20:31:52 ----A---- C:\Windows\system32\authui.dll
2011-09-17 20:31:52 ----A---- C:\Windows\system32\appinfo.dll
2011-09-17 20:31:51 ----A---- C:\Windows\SYSWOW64\evr.dll
2011-09-17 20:31:51 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2011-09-17 20:31:51 ----A---- C:\Windows\SYSWOW64\dskquoui.dll
2011-09-17 20:31:51 ----A---- C:\Windows\SYSWOW64\diskpart.exe
2011-09-17 20:31:51 ----A---- C:\Windows\system32\elsTrans.dll
2011-09-17 20:31:51 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2011-09-17 20:31:51 ----A---- C:\Windows\system32\Display.dll
2011-09-17 20:31:50 ----A---- C:\Windows\SYSWOW64\themecpl.dll
2011-09-17 20:31:50 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2011-09-17 20:31:50 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2011-09-17 20:31:50 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2011-09-17 20:31:50 ----A---- C:\Windows\system32\tscfgwmi.dll
2011-09-17 20:31:50 ----A---- C:\Windows\system32\thumbcache.dll
2011-09-17 20:31:50 ----A---- C:\Windows\system32\taskschd.dll
2011-09-17 20:31:50 ----A---- C:\Windows\system32\tabcal.exe
2011-09-17 20:31:50 ----A---- C:\Windows\system32\SearchFolder.dll
2011-09-17 20:31:50 ----A---- C:\Windows\system32\Faultrep.dll
2011-09-17 20:31:50 ----A---- C:\Windows\system32\ExplorerFrame.dll
2011-09-17 20:31:49 ----A---- C:\Windows\SYSWOW64\sppinst.dll
2011-09-17 20:31:49 ----A---- C:\Windows\SYSWOW64\spp.dll
2011-09-17 20:31:49 ----A---- C:\Windows\SYSWOW64\spbcd.dll
2011-09-17 20:31:49 ----A---- C:\Windows\system32\sppsvc.exe
2011-09-17 20:31:49 ----A---- C:\Windows\system32\spp.dll
2011-09-17 20:31:49 ----A---- C:\Windows\system32\shwebsvc.dll
2011-09-17 20:31:48 ----A---- C:\Windows\SYSWOW64\wmpsrcwp.dll
2011-09-17 20:31:48 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2011-09-17 20:31:48 ----A---- C:\Windows\SYSWOW64\srvcli.dll
2011-09-17 20:31:48 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2011-09-17 20:31:48 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2011-09-17 20:31:48 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2011-09-17 20:31:48 ----A---- C:\Windows\system32\wmdrmnet.dll
2011-09-17 20:31:48 ----A---- C:\Windows\system32\wmdrmdev.dll
2011-09-17 20:31:48 ----A---- C:\Windows\system32\WMADMOD.DLL
2011-09-17 20:31:48 ----A---- C:\Windows\system32\wkssvc.dll
2011-09-17 20:31:48 ----A---- C:\Windows\system32\sysmain.dll
2011-09-17 20:31:48 ----A---- C:\Windows\system32\sysclass.dll
2011-09-17 20:31:48 ----A---- C:\Windows\system32\srchadmin.dll
2011-09-17 20:31:48 ----A---- C:\Windows\system32\sqmapi.dll
2011-09-17 20:31:48 ----A---- C:\Windows\system32\shell32.dll
2011-09-17 20:31:48 ----A---- C:\Windows\system32\drivers\winusb.sys
2011-09-17 20:31:48 ----A---- C:\Windows\system32\drivers\storport.sys
2011-09-17 20:31:47 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2011-09-17 20:31:47 ----A---- C:\Windows\SYSWOW64\wvc.dll
2011-09-17 20:31:47 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2011-09-17 20:31:47 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2011-09-17 20:31:47 ----A---- C:\Windows\SYSWOW64\wtsapi32.dll
2011-09-17 20:31:47 ----A---- C:\Windows\SYSWOW64\WPDSp.dll
2011-09-17 20:31:47 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2011-09-17 20:31:47 ----A---- C:\Windows\system32\wwanconn.dll
2011-09-17 20:31:47 ----A---- C:\Windows\system32\wucltux.dll
2011-09-17 20:31:47 ----A---- C:\Windows\system32\wsqmcons.exe
2011-09-17 20:31:47 ----A---- C:\Windows\system32\wpdwcn.dll
2011-09-17 20:31:47 ----A---- C:\Windows\system32\wpd_ci.dll
2011-09-17 20:31:47 ----A---- C:\Windows\system32\WMVDECOD.DLL
2011-09-17 20:31:47 ----A---- C:\Windows\system32\wmpeffects.dll
2011-09-17 20:31:47 ----A---- C:\Windows\system32\winresume.exe
2011-09-17 20:31:47 ----A---- C:\Windows\system32\winload.exe
2011-09-17 20:31:47 ----A---- C:\Windows\system32\winhttp.dll
2011-09-17 20:31:46 ----A---- C:\Windows\twain_32.dll
2011-09-17 20:31:46 ----A---- C:\Windows\SYSWOW64\wiadefui.dll
2011-09-17 20:31:46 ----A---- C:\Windows\SYSWOW64\webio.dll
2011-09-17 20:31:46 ----A---- C:\Windows\SYSWOW64\untfs.dll
2011-09-17 20:31:46 ----A---- C:\Windows\SYSWOW64\unlodctr.exe
2011-09-17 20:31:46 ----A---- C:\Windows\SYSWOW64\tzutil.exe
2011-09-17 20:31:46 ----A---- C:\Windows\system32\wsdchngr.dll
2011-09-17 20:31:46 ----A---- C:\Windows\system32\ws2_32.dll
2011-09-17 20:31:46 ----A---- C:\Windows\system32\win32k.sys
2011-09-17 20:31:46 ----A---- C:\Windows\system32\WerFaultSecure.exe
2011-09-17 20:31:46 ----A---- C:\Windows\system32\webio.dll
2011-09-17 20:31:46 ----A---- C:\Windows\system32\VSSVC.exe
2011-09-17 20:31:46 ----A---- C:\Windows\system32\vss_ps.dll
2011-09-17 20:31:46 ----A---- C:\Windows\system32\userinit.exe
2011-09-17 20:31:46 ----A---- C:\Windows\system32\umrdp.dll
2011-09-17 20:31:46 ----A---- C:\Windows\system32\umb.dll
2011-09-17 20:31:46 ----A---- C:\Windows\system32\drivers\volsnap.sys
2011-09-17 20:31:46 ----A---- C:\Windows\system32\drivers\umbus.sys
2011-09-17 20:31:45 ----A---- C:\Windows\SYSWOW64\wdc.dll
2011-09-17 20:31:45 ----A---- C:\Windows\SYSWOW64\wavemsp.dll
2011-09-17 20:31:45 ----A---- C:\Windows\SYSWOW64\shacct.dll
2011-09-17 20:31:45 ----A---- C:\Windows\SYSWOW64\setupugc.exe
2011-09-17 20:31:45 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2011-09-17 20:31:45 ----A---- C:\Windows\SYSWOW64\secproc.dll
2011-09-17 20:31:45 ----A---- C:\Windows\system32\vssapi.dll
2011-09-17 20:31:45 ----A---- C:\Windows\system32\mimefilt.dll
2011-09-17 20:31:44 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2011-09-17 20:31:44 ----A---- C:\Windows\SYSWOW64\mprapi.dll
2011-09-17 20:31:44 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2011-09-17 20:31:44 ----A---- C:\Windows\SYSWOW64\logoncli.dll
2011-09-17 20:31:44 ----A---- C:\Windows\SYSWOW64\logman.exe
2011-09-17 20:31:44 ----A---- C:\Windows\SYSWOW64\KBDSF.DLL
2011-09-17 20:31:44 ----A---- C:\Windows\SYSWOW64\itircl.dll
2011-09-17 20:31:44 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2011-09-17 20:31:44 ----A---- C:\Windows\system32\mscorier.dll
2011-09-17 20:31:44 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2011-09-17 20:31:44 ----A---- C:\Windows\system32\mfps.dll
2011-09-17 20:31:44 ----A---- C:\Windows\system32\MFPlay.dll
2011-09-17 20:31:44 ----A---- C:\Windows\system32\mfds.dll
2011-09-17 20:31:44 ----A---- C:\Windows\system32\mf.dll
2011-09-17 20:31:44 ----A---- C:\Windows\system32\Mcx2Svc.dll
2011-09-17 20:31:44 ----A---- C:\Windows\system32\LogonUI.exe
2011-09-17 20:31:44 ----A---- C:\Windows\system32\logoff.exe
2011-09-17 20:31:44 ----A---- C:\Windows\system32\KBDTUF.DLL
2011-09-17 20:31:44 ----A---- C:\Windows\system32\KBDINBEN.DLL
2011-09-17 20:31:44 ----A---- C:\Windows\system32\KBDGKL.DLL
2011-09-17 20:31:44 ----A---- C:\Windows\system32\IPSECSVC.DLL
2011-09-17 20:31:44 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-09-17 20:31:43 ----A---- C:\Windows\SYSWOW64\OnLineIDCpl.dll
2011-09-17 20:31:43 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2011-09-17 20:31:43 ----A---- C:\Windows\SYSWOW64\nshipsec.dll
2011-09-17 20:31:43 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2011-09-17 20:31:43 ----A---- C:\Windows\system32\OpcServices.dll
2011-09-17 20:31:43 ----A---- C:\Windows\system32\netutils.dll
2011-09-17 20:31:43 ----A---- C:\Windows\system32\mblctr.exe
2011-09-17 20:31:43 ----A---- C:\Windows\system32\luainstall.dll
2011-09-17 20:31:43 ----A---- C:\Windows\system32\LSCSHostPolicy.dll
2011-09-17 20:31:43 ----A---- C:\Windows\system32\KBDUS.DLL
2011-09-17 20:31:42 ----A---- C:\Windows\SYSWOW64\ocsetup.exe
2011-09-17 20:31:42 ----A---- C:\Windows\SYSWOW64\ocsetapi.dll
2011-09-17 20:31:42 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2011-09-17 20:31:42 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2011-09-17 20:31:42 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2011-09-17 20:31:42 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2011-09-17 20:31:42 ----A---- C:\Windows\system32\ole32.dll
2011-09-17 20:31:42 ----A---- C:\Windows\system32\msrle32.dll
2011-09-17 20:31:42 ----A---- C:\Windows\system32\mspbda.dll
2011-09-17 20:31:41 ----A---- C:\Windows\SYSWOW64\NAPCRYPT.DLL
2011-09-17 20:31:41 ----A---- C:\Windows\SYSWOW64\MuiUnattend.exe
2011-09-17 20:31:41 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2011-09-17 20:31:41 ----A---- C:\Windows\system32\netapi32.dll
2011-09-17 20:31:41 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2011-09-17 20:31:41 ----A---- C:\Windows\system32\muifontsetup.dll
2011-09-17 20:31:41 ----A---- C:\Windows\system32\msdrm.dll
2011-09-17 20:31:41 ----A---- C:\Windows\system32\msdmo.dll
2011-09-17 20:31:41 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2011-09-17 20:31:41 ----A---- C:\Windows\system32\drivers\msdsm.sys
2011-09-17 20:31:40 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2011-09-17 20:31:40 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2011-09-17 20:31:40 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2011-09-17 20:31:40 ----A---- C:\Windows\system32\msvidc32.dll
2011-09-17 20:31:40 ----A---- C:\Windows\system32\drivers\csc.sys
2011-09-17 20:31:40 ----A---- C:\Windows\system32\d2d1.dll
2011-09-17 20:31:40 ----A---- C:\Windows\system32\CscMig.dll
2011-09-17 20:31:39 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2011-09-17 20:31:39 ----A---- C:\Windows\SYSWOW64\dot3ui.dll
2011-09-17 20:31:39 ----A---- C:\Windows\SYSWOW64\dot3cfg.dll
2011-09-17 20:31:39 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2011-09-17 20:31:39 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2011-09-17 20:31:39 ----A---- C:\Windows\SYSWOW64\credui.dll
2011-09-17 20:31:39 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2011-09-17 20:31:39 ----A---- C:\Windows\SYSWOW64\autochk.exe
2011-09-17 20:31:39 ----A---- C:\Windows\system32\choice.exe
2011-09-17 20:31:39 ----A---- C:\Windows\system32\chgusr.exe
2011-09-17 20:31:39 ----A---- C:\Windows\system32\dot3cfg.dll
2011-09-17 20:31:39 ----A---- C:\Windows\system32\diskraid.exe
2011-09-17 20:31:39 ----A---- C:\Windows\system32\d3d11.dll
2011-09-17 20:31:39 ----A---- C:\Windows\system32\cryptsvc.dll
2011-09-17 20:31:39 ----A---- C:\Windows\system32\asycfilt.dll
2011-09-17 20:31:39 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2011-09-17 20:31:38 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2011-09-17 20:31:38 ----A---- C:\Windows\SYSWOW64\cabview.dll
2011-09-17 20:31:38 ----A---- C:\Windows\SYSWOW64\browcli.dll
2011-09-17 20:31:38 ----A---- C:\Windows\SYSWOW64\AdmTmpl.dll
2011-09-17 20:31:38 ----A---- C:\Windows\SYSWOW64\accessibilitycpl.dll
2011-09-17 20:31:38 ----A---- C:\Windows\system32\chgport.exe
2011-09-17 20:31:38 ----A---- C:\Windows\system32\chglogon.exe
2011-09-17 20:31:38 ----A---- C:\Windows\system32\change.exe
2011-09-17 20:31:38 ----A---- C:\Windows\system32\cca.dll
2011-09-17 20:31:38 ----A---- C:\Windows\system32\apphelp.dll
2011-09-17 20:31:37 ----A---- C:\Windows\SYSWOW64\imm32.dll
2011-09-17 20:31:37 ----A---- C:\Windows\SYSWOW64\gpprefcl.dll
2011-09-17 20:31:37 ----A---- C:\Windows\SYSWOW64\explorer.exe
2011-09-17 20:31:37 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2011-09-17 20:31:37 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2011-09-17 20:31:37 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2011-09-17 20:31:37 ----A---- C:\Windows\SYSWOW64\DxpTaskSync.dll
2011-09-17 20:31:37 ----A---- C:\Windows\SYSWOW64\dxdiagn.dll
2011-09-17 20:31:37 ----A---- C:\Windows\system32\imapi2.dll
2011-09-17 20:31:37 ----A---- C:\Windows\system32\IcCoinstall.dll
2011-09-17 20:31:37 ----A---- C:\Windows\system32\iasrad.dll
2011-09-17 20:31:37 ----A---- C:\Windows\system32\iasacct.dll
2011-09-17 20:31:37 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2011-09-17 20:31:37 ----A---- C:\Windows\system32\fvecpl.dll
2011-09-17 20:31:37 ----A---- C:\Windows\system32\fveapi.dll
2011-09-17 20:31:37 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2011-09-17 20:31:37 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2011-09-17 20:31:37 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2011-09-17 20:31:37 ----A---- C:\Windows\system32\drivers\fvevol.sys
2011-09-17 20:31:36 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2011-09-17 20:31:36 ----A---- C:\Windows\SYSWOW64\TRAPI.dll
2011-09-17 20:31:36 ----A---- C:\Windows\SYSWOW64\tquery.dll
2011-09-17 20:31:36 ----A---- C:\Windows\SYSWOW64\themeui.dll
2011-09-17 20:31:36 ----A---- C:\Windows\SYSWOW64\fde.dll
2011-09-17 20:31:36 ----A---- C:\Windows\SYSWOW64\esent.dll
2011-09-17 20:31:36 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2011-09-17 20:31:36 ----A---- C:\Windows\SYSWOW64\elsTrans.dll
2011-09-17 20:31:36 ----A---- C:\Windows\SYSWOW64\efscore.dll
2011-09-17 20:31:36 ----A---- C:\Windows\system32\UIRibbon.dll
2011-09-17 20:31:36 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2011-09-17 20:31:36 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2011-09-17 20:31:36 ----A---- C:\Windows\system32\tsmf.dll
2011-09-17 20:31:36 ----A---- C:\Windows\system32\tskill.exe
2011-09-17 20:31:36 ----A---- C:\Windows\system32\tsdiscon.exe
2011-09-17 20:31:36 ----A---- C:\Windows\system32\tscon.exe
2011-09-17 20:31:36 ----A---- C:\Windows\system32\TRAPI.dll
2011-09-17 20:31:36 ----A---- C:\Windows\system32\fontext.dll
2011-09-17 20:31:36 ----A---- C:\Windows\system32\FntCache.dll
2011-09-17 20:31:35 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2011-09-17 20:31:35 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2011-09-17 20:31:35 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2011-09-17 20:31:35 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2011-09-17 20:31:35 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll
2011-09-17 20:31:35 ----A---- C:\Windows\system32\UIRibbonRes.dll
2011-09-17 20:31:35 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2011-09-17 20:31:35 ----A---- C:\Windows\system32\tssrvlic.dll
2011-09-17 20:31:35 ----A---- C:\Windows\system32\termsrv.dll
2011-09-17 20:31:35 ----A---- C:\Windows\system32\taskmgr.exe
2011-09-17 20:31:35 ----A---- C:\Windows\system32\taskbarcpl.dll
2011-09-17 20:31:35 ----A---- C:\Windows\system32\takeown.exe
2011-09-17 20:31:35 ----A---- C:\Windows\system32\t2embed.dll
2011-09-17 20:31:35 ----A---- C:\Windows\system32\syssetup.dll
2011-09-17 20:31:34 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2011-09-17 20:31:34 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2011-09-17 20:31:34 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2011-09-17 20:31:34 ----A---- C:\Windows\SYSWOW64\WMPEncEn.dll
2011-09-17 20:31:34 ----A---- C:\Windows\SYSWOW64\winmm.dll
2011-09-17 20:31:34 ----A---- C:\Windows\system32\WMNetMgr.dll
2011-09-17 20:31:33 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2011-09-17 20:31:33 ----A---- C:\Windows\SYSWOW64\wlanui.dll
2011-09-17 20:31:33 ----A---- C:\Windows\SYSWOW64\usercpl.dll
2011-09-17 20:31:33 ----A---- C:\Windows\SYSWOW64\upnp.dll
2011-09-17 20:31:33 ----A---- C:\Windows\system32\XpsRasterService.dll
2011-09-17 20:31:33 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-09-17 20:31:33 ----A---- C:\Windows\system32\wvc.dll
2011-09-17 20:31:33 ----A---- C:\Windows\system32\wuwebv.dll
2011-09-17 20:31:33 ----A---- C:\Windows\system32\wusa.exe
2011-09-17 20:31:33 ----A---- C:\Windows\system32\wuapp.exe
2011-09-17 20:31:33 ----A---- C:\Windows\system32\wsnmp32.dll
2011-09-17 20:31:33 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2011-09-17 20:31:33 ----A---- C:\Windows\system32\wpdshext.dll
2011-09-17 20:31:33 ----A---- C:\Windows\system32\wow64win.dll
2011-09-17 20:31:33 ----A---- C:\Windows\system32\wow64cpu.dll
2011-09-17 20:31:33 ----A---- C:\Windows\system32\wow64.dll
2011-09-17 20:31:33 ----A---- C:\Windows\system32\WMVSDECD.DLL
2011-09-17 20:31:33 ----A---- C:\Windows\system32\WinSAT.exe
2011-09-17 20:31:33 ----A---- C:\Windows\system32\usp10.dll
2011-09-17 20:31:33 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2011-09-17 20:31:33 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2011-09-17 20:31:32 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2011-09-17 20:31:32 ----A---- C:\Windows\SYSWOW64\wdscore.dll
2011-09-17 20:31:32 ----A---- C:\Windows\SYSWOW64\wbemcomn.dll
2011-09-17 20:31:32 ----A---- C:\Windows\SYSWOW64\user32.dll
2011-09-17 20:31:32 ----A---- C:\Windows\system32\win32spl.dll
2011-09-17 20:31:32 ----A---- C:\Windows\system32\wdc.dll
2011-09-17 20:31:32 ----A---- C:\Windows\system32\vmictimeprovider.dll
2011-09-17 20:31:32 ----A---- C:\Windows\system32\vmicsvc.exe
2011-09-17 20:31:32 ----A---- C:\Windows\system32\vmicres.dll
2011-09-17 20:31:32 ----A---- C:\Windows\system32\SyncCenter.dll
2011-09-17 20:31:32 ----A---- C:\Windows\system32\drivers\wanarp.sys
2011-09-17 20:31:31 ----A---- C:\Windows\SYSWOW64\schedcli.dll
2011-09-17 20:31:31 ----A---- C:\Windows\SYSWOW64\relog.exe
2011-09-17 20:31:31 ----A---- C:\Windows\SYSWOW64\rastls.dll
2011-09-17 20:31:31 ----A---- C:\Windows\SYSWOW64\rastapi.dll
2011-09-17 20:31:31 ----A---- C:\Windows\SYSWOW64\powercpl.dll
2011-09-17 20:31:31 ----A---- C:\Windows\SYSWOW64\PortableDeviceSyncProvider.dll
2011-09-17 20:31:31 ----A---- C:\Windows\SYSWOW64\pla.dll
2011-09-17 20:31:31 ----A---- C:\Windows\SYSWOW64\PerfCenterCPL.dll
2011-09-17 20:31:31 ----A---- C:\Windows\SYSWOW64\pdh.dll
2011-09-17 20:31:31 ----A---- C:\Windows\system32\schedsvc.dll
2011-09-17 20:31:31 ----A---- C:\Windows\system32\scesrv.dll
2011-09-17 20:31:31 ----A---- C:\Windows\system32\scansetting.dll
2011-09-17 20:31:31 ----A---- C:\Windows\system32\rwinsta.exe
2011-09-17 20:31:31 ----A---- C:\Windows\system32\runonce.exe
2011-09-17 20:31:31 ----A---- C:\Windows\system32\rtutils.dll
2011-09-17 20:31:31 ----A---- C:\Windows\system32\Robocopy.exe
2011-09-17 20:31:31 ----A---- C:\Windows\system32\riched32.dll
2011-09-17 20:31:31 ----A---- C:\Windows\system32\riched20.dll
2011-09-17 20:31:31 ----A---- C:\Windows\system32\reset.exe
2011-09-17 20:31:31 ----A---- C:\Windows\system32\regapi.dll
2011-09-17 20:31:31 ----A---- C:\Windows\system32\rdpudd.dll
2011-09-17 20:31:31 ----A---- C:\Windows\system32\rdpcorets.dll
2011-09-17 20:31:31 ----A---- C:\Windows\system32\rasmans.dll
2011-09-17 20:31:31 ----A---- C:\Windows\system32\perfmon.exe
2011-09-17 20:31:31 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2011-09-17 20:31:31 ----A---- C:\Windows\system32\drivers\rdbss.sys
2011-09-17 20:31:31 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2011-09-17 20:31:30 ----A---- C:\Windows\SYSWOW64\sud.dll
2011-09-17 20:31:30 ----A---- C:\Windows\SYSWOW64\sppcomapi.dll
2011-09-17 20:31:30 ----A---- C:\Windows\SYSWOW64\slwga.dll
2011-09-17 20:31:30 ----A---- C:\Windows\SYSWOW64\quartz.dll
2011-09-17 20:31:30 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2011-09-17 20:31:30 ----A---- C:\Windows\SYSWOW64\qcap.dll
2011-09-17 20:31:30 ----A---- C:\Windows\system32\StructuredQuery.dll
2011-09-17 20:31:30 ----A---- C:\Windows\system32\spwizui.dll
2011-09-17 20:31:30 ----A---- C:\Windows\system32\spreview.exe
2011-09-17 20:31:30 ----A---- C:\Windows\system32\sppwinob.dll
2011-09-17 20:31:30 ----A---- C:\Windows\system32\sppcomapi.dll
2011-09-17 20:31:30 ----A---- C:\Windows\system32\spoolsv.exe
2011-09-17 20:31:30 ----A---- C:\Windows\system32\spinstall.exe
2011-09-17 20:31:30 ----A---- C:\Windows\system32\SmiEngine.dll
2011-09-17 20:31:30 ----A---- C:\Windows\system32\slui.exe
2011-09-17 20:31:30 ----A---- C:\Windows\system32\rdpdd.dll
2011-09-17 20:31:30 ----A---- C:\Windows\system32\query.exe
2011-09-17 20:31:30 ----A---- C:\Windows\system32\qprocess.exe
2011-09-17 20:31:30 ----A---- C:\Windows\system32\qdv.dll
2011-09-17 20:31:30 ----A---- C:\Windows\system32\qappsrv.exe
2011-09-17 20:31:30 ----A---- C:\Windows\system32\PushPrinterConnections.exe
2011-09-17 20:31:30 ----A---- C:\Windows\splwow64.exe
2011-09-17 20:31:29 ----A---- C:\Windows\SYSWOW64\setupcln.dll
2011-09-17 20:31:29 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2011-09-17 20:31:29 ----A---- C:\Windows\SYSWOW64\KBDUGHR1.DLL
2011-09-17 20:31:29 ----A---- C:\Windows\SYSWOW64\KBDTUF.DLL
2011-09-17 20:31:29 ----A---- C:\Windows\SYSWOW64\KBDSG.DLL
2011-09-17 20:31:29 ----A---- C:\Windows\system32\srrstr.dll
2011-09-17 20:31:29 ----A---- C:\Windows\system32\shunimpl.dll
2011-09-17 20:31:29 ----A---- C:\Windows\system32\sharemediacpl.dll
2011-09-17 20:31:29 ----A---- C:\Windows\system32\shadow.exe
2011-09-17 20:31:29 ----A---- C:\Windows\system32\mcbuilder.exe
2011-09-17 20:31:29 ----A---- C:\Windows\system32\manage-bde.exe
2011-09-17 20:31:29 ----A---- C:\Windows\system32\lsasrv.dll
2011-09-17 20:31:29 ----A---- C:\Windows\system32\lpksetup.exe
2011-09-17 20:31:29 ----A---- C:\Windows\system32\logman.exe
2011-09-17 20:31:29 ----A---- C:\Windows\system32\localspl.dll
2011-09-17 20:31:29 ----A---- C:\Windows\system32\KMSVC.DLL
2011-09-17 20:31:29 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2011-09-17 20:31:29 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2011-09-17 20:31:29 ----A---- C:\Windows\system32\KBDSG.DLL
2011-09-17 20:31:29 ----A---- C:\Windows\system32\drivers\srv.sys
2011-09-17 20:31:29 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2011-09-17 20:31:29 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2011-09-17 20:31:28 ----A---- C:\Windows\SYSWOW64\migisol.dll
2011-09-17 20:31:28 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2011-09-17 20:31:28 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2011-09-17 20:31:28 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys
2011-09-17 20:31:27 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2011-09-17 20:31:27 ----A---- C:\Windows\system32\IKEEXT.DLL
2011-09-17 20:31:27 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2011-09-17 20:31:26 ----A---- C:\Windows\SYSWOW64\odbcconf.dll
2011-09-17 20:31:26 ----A---- C:\Windows\SYSWOW64\KBDPO.DLL
2011-09-17 20:31:26 ----A---- C:\Windows\SYSWOW64\KBDMAORI.DLL
2011-09-17 20:31:26 ----A---- C:\Windows\SYSWOW64\KBDINORI.DLL
2011-09-17 20:31:26 ----A---- C:\Windows\SYSWOW64\KBDINKAN.DLL
2011-09-17 20:31:26 ----A---- C:\Windows\SYSWOW64\KBDBLR.DLL
2011-09-17 20:31:26 ----A---- C:\Windows\SYSWOW64\isoburn.exe
2011-09-17 20:31:26 ----A---- C:\Windows\SYSWOW64\iscsium.dll
2011-09-17 20:31:26 ----A---- C:\Windows\SYSWOW64\iscsicli.exe
2011-09-17 20:31:26 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2011-09-17 20:31:26 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll
2011-09-17 20:31:26 ----A---- C:\Windows\system32\odbc32.dll
2011-09-17 20:31:26 ----A---- C:\Windows\system32\KBDNEPR.DLL
2011-09-17 20:31:26 ----A---- C:\Windows\system32\kbdlk41a.dll
2011-09-17 20:31:26 ----A---- C:\Windows\system32\KBDINKAN.DLL
2011-09-17 20:31:26 ----A---- C:\Windows\system32\KBDINHIN.DLL
2011-09-17 20:31:26 ----A---- C:\Windows\system32\KBDBULG.DLL
2011-09-17 20:31:26 ----A---- C:\Windows\system32\iTVData.dll
2011-09-17 20:31:26 ----A---- C:\Windows\system32\iprtrmgr.dll
2011-09-17 20:31:26 ----A---- C:\Windows\system32\drivers\ntfs.sys
2011-09-17 20:31:25 ----A---- C:\Windows\SYSWOW64\pnidui.dll
2011-09-17 20:31:25 ----A---- C:\Windows\SYSWOW64\olethk32.dll
2011-09-17 20:31:25 ----A---- C:\Windows\SYSWOW64\ole32.dll
2011-09-17 20:31:25 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2011-09-17 20:31:25 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2011-09-17 20:31:25 ----A---- C:\Windows\SYSWOW64\networkmap.dll
2011-09-17 20:31:25 ----A---- C:\Windows\SYSWOW64\networkexplorer.dll
2011-09-17 20:31:25 ----A---- C:\Windows\SYSWOW64\netshell.dll
2011-09-17 20:31:25 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2011-09-17 20:31:25 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2011-09-17 20:31:25 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2011-09-17 20:31:25 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2011-09-17 20:31:25 ----A---- C:\Windows\system32\PnPUnattend.exe
2011-09-17 20:31:25 ----A---- C:\Windows\system32\nrpsrv.dll
2011-09-17 20:31:25 ----A---- C:\Windows\system32\nlsbres.dll
2011-09-17 20:31:25 ----A---- C:\Windows\system32\netid.dll
2011-09-17 20:31:25 ----A---- C:\Windows\system32\drivers\netbt.sys
2011-09-17 20:31:24 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2011-09-17 20:31:24 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2011-09-17 20:31:24 ----A---- C:\Windows\system32\mscoree.dll
2011-09-17 20:31:24 ----A---- C:\Windows\system32\mscms.dll
2011-09-17 20:31:24 ----A---- C:\Windows\system32\MPSSVC.dll
2011-09-17 20:31:24 ----A---- C:\Windows\system32\drivers\partmgr.sys
2011-09-17 20:31:24 ----A---- C:\Windows\system32\drivers\mpio.sys
2011-09-17 20:31:23 ----A---- C:\Windows\SYSWOW64\nci.dll
2011-09-17 20:31:23 ----A---- C:\Windows\SYSWOW64\napdsnap.dll
2011-09-17 20:31:23 ----A---- C:\Windows\SYSWOW64\muifontsetup.dll
2011-09-17 20:31:23 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2011-09-17 20:31:23 ----A---- C:\Windows\system32\NAPHLPR.DLL
2011-09-17 20:31:23 ----A---- C:\Windows\system32\napdsnap.dll
2011-09-17 20:31:23 ----A---- C:\Windows\system32\mswsock.dll
2011-09-17 20:31:23 ----A---- C:\Windows\system32\msnetobj.dll
2011-09-17 20:31:23 ----A---- C:\Windows\system32\msiexec.exe
2011-09-17 20:31:23 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2011-09-17 20:31:22 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2011-09-17 20:31:22 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2011-09-17 20:31:22 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2011-09-17 20:31:22 ----A---- C:\Windows\SYSWOW64\credssp.dll
2011-09-17 20:31:22 ----A---- C:\Windows\system32\msv1_0.dll
2011-09-17 20:31:22 ----A---- C:\Windows\system32\mstask.dll
2011-09-17 20:31:22 ----A---- C:\Windows\system32\msscp.dll
2011-09-17 20:31:22 ----A---- C:\Windows\system32\msftedit.dll
2011-09-17 20:31:22 ----A---- C:\Windows\system32\drivers\cng.sys
2011-09-17 20:31:22 ----A---- C:\Windows\system32\cryptui.dll
2011-09-17 20:31:22 ----A---- C:\Windows\system32\clusapi.dll
2011-09-17 20:31:22 ----A---- C:\Windows\system32\cabview.dll
2011-09-17 20:31:21 ----A---- C:\Windows\SYSWOW64\DevicePairingFolder.dll
2011-09-17 20:31:21 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2011-09-17 20:31:21 ----A---- C:\Windows\SYSWOW64\CertPolEng.dll
2011-09-17 20:31:21 ----A---- C:\Windows\SYSWOW64\calc.exe
2011-09-17 20:31:21 ----A---- C:\Windows\SYSWOW64\appmgr.dll
2011-09-17 20:31:21 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2011-09-17 20:31:21 ----A---- C:\Windows\system32\drivers\dfsc.sys
2011-09-17 20:31:21 ----A---- C:\Windows\system32\dhcpcore.dll
2011-09-17 20:31:21 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2011-09-17 20:31:21 ----A---- C:\Windows\system32\cscobj.dll
2011-09-17 20:31:21 ----A---- C:\Windows\system32\certprop.dll
2011-09-17 20:31:21 ----A---- C:\Windows\system32\CertEnroll.dll
2011-09-17 20:31:21 ----A---- C:\Windows\system32\browseui.dll
2011-09-17 20:31:20 ----A---- C:\Windows\SYSWOW64\batmeter.dll
2011-09-17 20:31:20 ----A---- C:\Windows\SYSWOW64\ActionCenterCPL.dll
2011-09-17 20:31:20 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2011-09-17 20:31:20 ----A---- C:\Windows\SYSWOW64\acppage.dll
2011-09-17 20:31:20 ----A---- C:\Windows\system32\drivers\acpi.sys
2011-09-17 20:31:20 ----A---- C:\Windows\system32\BFE.DLL
2011-09-17 20:31:20 ----A---- C:\Windows\system32\bcryptprimitives.dll
2011-09-17 20:31:20 ----A---- C:\Windows\system32\basecsp.dll
2011-09-17 20:31:20 ----A---- C:\Windows\bfsvc.exe
2011-09-17 20:31:19 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2011-09-17 20:31:19 ----A---- C:\Windows\SYSWOW64\ftp.exe
2011-09-17 20:31:19 ----A---- C:\Windows\SYSWOW64\FirewallControlPanel.dll
2011-09-17 20:31:19 ----A---- C:\Windows\SYSWOW64\findstr.exe
2011-09-17 20:31:19 ----A---- C:\Windows\system32\hgcpl.dll
2011-09-17 20:31:19 ----A---- C:\Windows\system32\gdi32.dll
2011-09-17 20:31:19 ----A---- C:\Windows\system32\FXSUNATD.exe
2011-09-17 20:31:19 ----A---- C:\Windows\system32\FXSSVC.exe
2011-09-17 20:31:19 ----A---- C:\Windows\system32\FXSMON.dll
2011-09-17 20:31:19 ----A---- C:\Windows\system32\fphc.dll
2011-09-17 20:31:19 ----A---- C:\Windows\system32\fontsub.dll
2011-09-17 20:31:19 ----A---- C:\Windows\system32\fms.dll
2011-09-17 20:31:19 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2011-09-17 20:31:19 ----A---- C:\Windows\system32\drivers\hidusb.sys
2011-09-17 20:31:19 ----A---- C:\Windows\system32\BlbEvents.dll
2011-09-17 20:31:19 ----A---- C:\Windows\system32\blackbox.dll
2011-09-17 20:31:19 ----A---- C:\Windows\system32\biocpl.dll
2011-09-17 20:31:19 ----A---- C:\Windows\system32\AxInstSv.dll
2011-09-17 20:31:19 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2011-09-17 20:31:19 ----A---- C:\Windows\system32\autochk.exe
2011-09-17 20:31:19 ----A---- C:\Windows\system32\atmlib.dll
2011-09-17 20:31:19 ----A---- C:\Windows\system32\atmfd.dll
2011-09-17 20:31:18 ----A---- C:\Windows\SYSWOW64\hgcpl.dll
2011-09-17 20:31:18 ----A---- C:\Windows\SYSWOW64\eudcedit.exe
2011-09-17 20:31:18 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll
2011-09-17 20:31:18 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2011-09-17 20:31:18 ----A---- C:\Windows\SYSWOW64\dsauth.dll
2011-09-17 20:31:18 ----A---- C:\Windows\SYSWOW64\dpx.dll
2011-09-17 20:31:18 ----A---- C:\Windows\SYSWOW64\dpnaddr.dll
2011-09-17 20:31:18 ----A---- C:\Windows\SYSWOW64\dnscmmc.dll
2011-09-17 20:31:18 ----A---- C:\Windows\system32\hgprint.dll
2011-09-17 20:31:18 ----A---- C:\Windows\system32\eudcedit.exe
2011-09-17 20:31:18 ----A---- C:\Windows\system32\DXP.dll
2011-09-17 20:31:18 ----A---- C:\Windows\system32\drmmgrtn.dll
2011-09-17 20:31:18 ----A---- C:\Windows\system32\drivers\hidclass.sys
2011-09-17 20:31:18 ----A---- C:\Windows\system32\dot3ui.dll
2011-09-17 20:31:18 ----A---- C:\Windows\system32\diskpart.exe
2011-09-17 20:31:17 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2011-09-17 20:31:17 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2011-09-17 20:31:17 ----A---- C:\Windows\SYSWOW64\takeown.exe
2011-09-17 20:31:17 ----A---- C:\Windows\SYSWOW64\fdeploy.dll
2011-09-17 20:31:17 ----A---- C:\Windows\system32\upnp.dll
2011-09-17 20:31:17 ----A---- C:\Windows\system32\untfs.dll
2011-09-17 20:31:17 ----A---- C:\Windows\system32\tlscsp.dll
2011-09-17 20:31:17 ----A---- C:\Windows\system32\themecpl.dll
2011-09-17 20:31:17 ----A---- C:\Windows\system32\esent.dll
2011-09-17 20:31:17 ----A---- C:\Windows\system32\EncDec.dll
2011-09-17 20:31:17 ----A---- C:\Windows\system32\DxpTaskSync.dll
2011-09-17 20:31:17 ----A---- C:\Windows\system32\drivers\usbhub.sys
2011-09-17 20:31:17 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2011-09-17 20:31:17 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2011-09-17 20:31:17 ----A---- C:\Windows\system32\drivers\tunnel.sys
2011-09-17 20:31:17 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2011-09-17 20:31:17 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2011-09-17 20:31:16 ----A---- C:\Windows\SYSWOW64\unimdmat.dll
2011-09-17 20:31:16 ----A---- C:\Windows\SYSWOW64\twext.dll
2011-09-17 20:31:16 ----A---- C:\Windows\system32\tzutil.exe
2011-09-17 20:31:16 ----A---- C:\Windows\system32\twext.dll
2011-09-17 20:31:16 ----A---- C:\Windows\system32\drivers\udfs.sys
2011-09-17 20:31:15 ----A---- C:\Windows\SYSWOW64\stobject.dll
2011-09-17 20:31:15 ----A---- C:\Windows\system32\sspisrv.dll
2011-09-17 20:31:15 ----A---- C:\Windows\system32\sspicli.dll
2011-09-17 20:31:13 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2011-09-17 20:31:13 ----A---- C:\Windows\SYSWOW64\wusa.exe
2011-09-17 20:31:13 ----A---- C:\Windows\SYSWOW64\wsnmp32.dll
2011-09-17 20:31:13 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2011-09-17 20:31:13 ----A---- C:\Windows\SYSWOW64\WPDShServiceObj.dll
2011-09-17 20:31:13 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2011-09-17 20:31:13 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2011-09-17 20:31:13 ----A---- C:\Windows\system32\wwanprotdim.dll
2011-09-17 20:31:13 ----A---- C:\Windows\system32\wups.dll
2011-09-17 20:31:13 ----A---- C:\Windows\system32\wudriver.dll
2011-09-17 20:31:13 ----A---- C:\Windows\system32\wuapi.dll
2011-09-17 20:31:13 ----A---- C:\Windows\system32\WPDSp.dll
2011-09-17 20:31:13 ----A---- C:\Windows\system32\wmpsrcwp.dll
2011-09-17 20:31:13 ----A---- C:\Windows\system32\WMPhoto.dll
2011-09-17 20:31:13 ----A---- C:\Windows\system32\wmdrmsdk.dll
2011-09-17 20:31:13 ----A---- C:\Windows\system32\wlanmsm.dll
2011-09-17 20:31:13 ----A---- C:\Windows\system32\wlangpui.dll
2011-09-17 20:31:13 ----A---- C:\Windows\system32\wkscli.dll
2011-09-17 20:31:13 ----A---- C:\Windows\system32\wintrust.dll
2011-09-17 20:31:13 ----A---- C:\Windows\system32\winlogon.exe
2011-09-17 20:31:13 ----A---- C:\Windows\system32\WindowsCodecs.dll
2011-09-17 20:31:13 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2011-09-17 20:31:12 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2011-09-17 20:31:12 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2011-09-17 20:31:12 ----A---- C:\Windows\system32\WsmSvc.dll
2011-09-17 20:31:12 ----A---- C:\Windows\system32\WSDApi.dll
2011-09-17 20:31:12 ----A---- C:\Windows\system32\vfwwdm32.dll
2011-09-17 20:31:12 ----A---- C:\Windows\system32\drivers\volmgrx.sys

[michal0]

2011-09-17 20:31:11 ----A---- C:\Windows\SYSWOW64\wimserv.exe
2011-09-17 20:31:11 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2011-09-17 20:31:11 ----A---- C:\Windows\SYSWOW64\wiavideo.dll
2011-09-17 20:31:11 ----A---- C:\Windows\SYSWOW64\wer.dll
2011-09-17 20:31:11 ----A---- C:\Windows\SYSWOW64\webservices.dll
2011-09-17 20:31:11 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2011-09-17 20:31:11 ----A---- C:\Windows\SYSWOW64\w32tm.exe
2011-09-17 20:31:11 ----A---- C:\Windows\SYSWOW64\Vault.dll
2011-09-17 20:31:11 ----A---- C:\Windows\SYSWOW64\userinit.exe
2011-09-17 20:31:11 ----A---- C:\Windows\SYSWOW64\userenv.dll
2011-09-17 20:31:11 ----A---- C:\Windows\system32\wiadefui.dll
2011-09-17 20:31:11 ----A---- C:\Windows\system32\wevtsvc.dll
2011-09-17 20:31:11 ----A---- C:\Windows\system32\werconcpl.dll
2011-09-17 20:31:11 ----A---- C:\Windows\system32\webservices.dll
2011-09-17 20:31:11 ----A---- C:\Windows\system32\wcncsvc.dll
2011-09-17 20:31:11 ----A---- C:\Windows\system32\wavemsp.dll
2011-09-17 20:31:11 ----A---- C:\Windows\system32\vdsutil.dll
2011-09-17 20:31:11 ----A---- C:\Windows\system32\vds.exe
2011-09-17 20:31:11 ----A---- C:\Windows\system32\VAN.dll
2011-09-17 20:31:10 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2011-09-17 20:31:10 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2011-09-17 20:31:10 ----A---- C:\Windows\SYSWOW64\remotepg.dll
2011-09-17 20:31:10 ----A---- C:\Windows\SYSWOW64\ReAgentc.exe
2011-09-17 20:31:10 ----A---- C:\Windows\SYSWOW64\rdpd3d.dll
2011-09-17 20:31:10 ----A---- C:\Windows\system32\schannel.dll
2011-09-17 20:31:10 ----A---- C:\Windows\system32\secur32.dll
2011-09-17 20:31:10 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2011-09-17 20:31:10 ----A---- C:\Windows\system32\relog.exe
2011-09-17 20:31:10 ----A---- C:\Windows\system32\rastls.dll
2011-09-17 20:31:10 ----A---- C:\Windows\system32\drivers\scfilter.sys
2011-09-17 20:31:10 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2011-09-17 20:31:09 ----A---- C:\Windows\SYSWOW64\scecli.dll
2011-09-17 20:31:09 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2011-09-17 20:31:09 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll
2011-09-17 20:31:09 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2011-09-17 20:31:09 ----A---- C:\Windows\SYSWOW64\QUTIL.DLL
2011-09-17 20:31:09 ----A---- C:\Windows\SYSWOW64\QCLIPROV.DLL
2011-09-17 20:31:09 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL
2011-09-17 20:31:09 ----A---- C:\Windows\SYSWOW64\prntvpt.dll
2011-09-17 20:31:09 ----A---- C:\Windows\system32\scecli.dll
2011-09-17 20:31:09 ----A---- C:\Windows\system32\rstrui.exe
2011-09-17 20:31:09 ----A---- C:\Windows\system32\rpcrt4.dll
2011-09-17 20:31:09 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2011-09-17 20:31:09 ----A---- C:\Windows\system32\raschap.dll
2011-09-17 20:31:09 ----A---- C:\Windows\system32\Query.dll
2011-09-17 20:31:09 ----A---- C:\Windows\system32\qmgr.dll
2011-09-17 20:31:09 ----A---- C:\Windows\system32\QCLIPROV.DLL
2011-09-17 20:31:09 ----A---- C:\Windows\system32\QAGENTRT.DLL
2011-09-17 20:31:09 ----A---- C:\Windows\system32\QAGENT.DLL
2011-09-17 20:31:09 ----A---- C:\Windows\system32\proquota.exe
2011-09-17 20:31:09 ----A---- C:\Windows\system32\propsys.dll
2011-09-17 20:31:09 ----A---- C:\Windows\system32\prevhost.exe
2011-09-17 20:31:08 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll
2011-09-17 20:31:08 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2011-09-17 20:31:08 ----A---- C:\Windows\system32\shsvcs.dll
2011-09-17 20:31:08 ----A---- C:\Windows\system32\RacEngn.dll
2011-09-17 20:31:07 ----A---- C:\Windows\system32\srcore.dll
2011-09-17 20:31:07 ----A---- C:\Windows\system32\sqlcese30.dll
2011-09-17 20:31:07 ----A---- C:\Windows\system32\sppnp.dll
2011-09-17 20:31:07 ----A---- C:\Windows\system32\spopk.dll
2011-09-17 20:31:07 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-09-17 20:31:06 ----A---- C:\Windows\SYSWOW64\mfds.dll
2011-09-17 20:31:06 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2011-09-17 20:31:06 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe
2011-09-17 20:31:06 ----A---- C:\Windows\SYSWOW64\mapistub.dll
2011-09-17 20:31:05 ----A---- C:\Windows\SYSWOW64\mprddm.dll
2011-09-17 20:31:05 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2011-09-17 20:31:05 ----A---- C:\Windows\SYSWOW64\mf.dll
2011-09-17 20:31:05 ----A---- C:\Windows\SYSWOW64\mapi32.dll
2011-09-17 20:31:05 ----A---- C:\Windows\SYSWOW64\KBDNEPR.DLL
2011-09-17 20:31:05 ----A---- C:\Windows\SYSWOW64\KBDGR1.DLL
2011-09-17 20:31:05 ----A---- C:\Windows\SYSWOW64\KBDGEO.DLL
2011-09-17 20:31:05 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2011-09-17 20:31:05 ----A---- C:\Windows\system32\mmcndmgr.dll
2011-09-17 20:31:05 ----A---- C:\Windows\system32\logoncli.dll
2011-09-17 20:31:05 ----A---- C:\Windows\system32\KBDMON.DLL
2011-09-17 20:31:05 ----A---- C:\Windows\system32\KBDINMAR.DLL
2011-09-17 20:31:05 ----A---- C:\Windows\system32\KBDGEO.DLL
2011-09-17 20:31:05 ----A---- C:\Windows\system32\iyuv_32.dll
2011-09-17 20:31:04 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-09-17 20:31:04 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-09-17 20:31:04 ----A---- C:\Windows\SYSWOW64\nslookup.exe
2011-09-17 20:31:04 ----A---- C:\Windows\SYSWOW64\netid.dll
2011-09-17 20:31:04 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2011-09-17 20:31:04 ----A---- C:\Windows\SYSWOW64\KBDTURME.DLL
2011-09-17 20:31:04 ----A---- C:\Windows\SYSWOW64\KBDTUQ.DLL
2011-09-17 20:31:04 ----A---- C:\Windows\system32\ntlanman.dll
2011-09-17 20:31:04 ----A---- C:\Windows\system32\netplwiz.dll
2011-09-17 20:31:04 ----A---- C:\Windows\system32\netfxperf.dll
2011-09-17 20:31:04 ----A---- C:\Windows\system32\KBDSF.DLL
2011-09-17 20:31:04 ----A---- C:\Windows\system32\KBDPO.DLL
2011-09-17 20:31:03 ----A---- C:\Windows\SYSWOW64\PortableDeviceStatus.dll
2011-09-17 20:31:03 ----A---- C:\Windows\SYSWOW64\pifmgr.dll
2011-09-17 20:31:03 ----A---- C:\Windows\SYSWOW64\onexui.dll
2011-09-17 20:31:03 ----A---- C:\Windows\SYSWOW64\onex.dll
2011-09-17 20:31:03 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2011-09-17 20:31:03 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2011-09-17 20:31:03 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2011-09-17 20:31:03 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2011-09-17 20:31:03 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2011-09-17 20:31:03 ----A---- C:\Windows\system32\odbcconf.dll
2011-09-17 20:31:03 ----A---- C:\Windows\system32\ocsetup.exe
2011-09-17 20:31:03 ----A---- C:\Windows\system32\ocsetapi.dll
2011-09-17 20:31:03 ----A---- C:\Windows\system32\ntshrui.dll
2011-09-17 20:31:03 ----A---- C:\Windows\system32\mssphtb.dll
2011-09-17 20:31:03 ----A---- C:\Windows\system32\msieftp.dll
2011-09-17 20:31:03 ----A---- C:\Windows\system32\msasn1.dll
2011-09-17 20:31:02 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2011-09-17 20:31:02 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2011-09-17 20:31:02 ----A---- C:\Windows\SYSWOW64\msvfw32.dll
2011-09-17 20:31:02 ----A---- C:\Windows\system32\net1.exe
2011-09-17 20:31:02 ----A---- C:\Windows\system32\ncryptui.dll
2011-09-17 20:31:02 ----A---- C:\Windows\system32\mydocs.dll
2011-09-17 20:31:02 ----A---- C:\Windows\system32\msyuv.dll
2011-09-17 20:31:02 ----A---- C:\Windows\system32\mstsc.exe
2011-09-17 20:31:02 ----A---- C:\Windows\system32\mssvp.dll
2011-09-17 20:31:02 ----A---- C:\Windows\system32\mssrch.dll
2011-09-17 20:31:01 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2011-09-17 20:31:01 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2011-09-17 20:31:01 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2011-09-17 20:31:01 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2011-09-17 20:31:01 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2011-09-17 20:31:01 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2011-09-17 20:31:01 ----A---- C:\Windows\SYSWOW64\certcli.dll
2011-09-17 20:31:01 ----A---- C:\Windows\SYSWOW64\adsldp.dll
2011-09-17 20:31:01 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2011-09-17 20:31:01 ----A---- C:\Windows\system32\drivers\afd.sys
2011-09-17 20:31:01 ----A---- C:\Windows\system32\DeviceCenter.dll
2011-09-17 20:31:01 ----A---- C:\Windows\system32\davclnt.dll
2011-09-17 20:31:01 ----A---- C:\Windows\system32\d3d10warp.dll
2011-09-17 20:31:01 ----A---- C:\Windows\system32\cmstp.exe
2011-09-17 20:31:01 ----A---- C:\Windows\system32\cfgmgr32.dll
2011-09-17 20:31:01 ----A---- C:\Windows\system32\cdosys.dll
2011-09-17 20:31:00 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2011-09-17 20:31:00 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2011-09-17 20:31:00 ----A---- C:\Windows\system32\cabinet.dll
2011-09-17 20:31:00 ----A---- C:\Windows\system32\browser.dll
2011-09-17 20:31:00 ----A---- C:\Windows\system32\bcdboot.exe
2011-09-17 20:31:00 ----A---- C:\Windows\system32\autoplay.dll
2011-09-17 20:31:00 ----A---- C:\Windows\system32\autofmt.exe
2011-09-17 20:31:00 ----A---- C:\Windows\system32\actxprxy.dll
2011-09-17 20:31:00 ----A---- C:\Windows\system32\ActionQueue.dll
2011-09-17 20:31:00 ----A---- C:\Windows\system32\ActionCenter.dll
2011-09-17 20:31:00 ----A---- C:\Windows\system32\accessibilitycpl.dll
2011-09-17 20:30:59 ----A---- C:\Windows\SYSWOW64\iasrad.dll
2011-09-17 20:30:59 ----A---- C:\Windows\SYSWOW64\iasacct.dll
2011-09-17 20:30:59 ----A---- C:\Windows\SYSWOW64\httpapi.dll
2011-09-17 20:30:59 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2011-09-17 20:30:59 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2011-09-17 20:30:59 ----A---- C:\Windows\system32\inetpp.dll
2011-09-17 20:30:59 ----A---- C:\Windows\system32\inetcomm.dll
2011-09-17 20:30:59 ----A---- C:\Windows\system32\hal.dll
2011-09-17 20:30:59 ----A---- C:\Windows\system32\gpsvc.dll
2011-09-17 20:30:59 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2011-09-17 20:30:58 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2011-09-17 20:30:58 ----A---- C:\Windows\system32\evr.dll
2011-09-17 20:30:58 ----A---- C:\Windows\system32\efscore.dll
2011-09-17 20:30:58 ----A---- C:\Windows\system32\dwmredir.dll
2011-09-17 20:30:58 ----A---- C:\Windows\system32\dsauth.dll
2011-09-17 20:30:58 ----A---- C:\Windows\system32\drvstore.dll
2011-09-17 20:30:58 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-09-17 20:30:58 ----A---- C:\Windows\explorer.exe
2011-09-17 20:30:57 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2011-09-17 20:30:57 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2011-09-17 20:30:57 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2011-09-17 20:30:57 ----A---- C:\Windows\SYSWOW64\fontext.dll
2011-09-17 20:30:57 ----A---- C:\Windows\SYSWOW64\Display.dll
2011-09-17 20:30:57 ----A---- C:\Windows\system32\tcpipcfg.dll
2011-09-17 20:30:57 ----A---- C:\Windows\system32\syncui.dll
2011-09-17 20:30:57 ----A---- C:\Windows\system32\fde.dll
2011-09-17 20:30:57 ----A---- C:\Windows\system32\drivers\tdx.sys
2011-09-17 20:30:57 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-09-17 20:30:57 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2011-09-17 20:30:57 ----A---- C:\Windows\system32\dot3svc.dll
2011-09-17 20:30:57 ----A---- C:\Windows\system32\dot3msm.dll
2011-09-17 20:30:57 ----A---- C:\Windows\system32\dot3api.dll
2011-09-17 20:30:57 ----A---- C:\Windows\system32\dnsapi.dll
2011-09-17 20:30:56 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2011-09-17 20:30:56 ----A---- C:\Windows\SYSWOW64\sppc.dll
2011-09-17 20:30:56 ----A---- C:\Windows\system32\tquery.dll
2011-09-17 20:30:56 ----A---- C:\Windows\system32\SndVolSSO.dll
2011-09-17 20:30:56 ----A---- C:\Windows\system32\SndVol.exe
2011-09-17 20:30:55 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2011-09-17 20:30:55 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2011-09-17 20:30:55 ----A---- C:\Windows\SYSWOW64\wmpps.dll
2011-09-17 20:30:55 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2011-09-17 20:30:55 ----A---- C:\Windows\SYSWOW64\wmpdxm.dll
2011-09-17 20:30:55 ----A---- C:\Windows\SYSWOW64\wmdrmnet.dll
2011-09-17 20:30:55 ----A---- C:\Windows\SYSWOW64\wmdrmdev.dll
2011-09-17 20:30:55 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2011-09-17 20:30:55 ----A---- C:\Windows\SYSWOW64\srchadmin.dll
2011-09-17 20:30:55 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2011-09-17 20:30:55 ----A---- C:\Windows\SYSWOW64\sqlcese30.dll
2011-09-17 20:30:55 ----A---- C:\Windows\SYSWOW64\spwizres.dll
2011-09-17 20:30:55 ----A---- C:\Windows\SYSWOW64\spwizeng.dll
2011-09-17 20:30:55 ----A---- C:\Windows\system32\wmpdxm.dll
2011-09-17 20:30:55 ----A---- C:\Windows\system32\winsrv.dll
2011-09-17 20:30:55 ----A---- C:\Windows\system32\WinSCard.dll
2011-09-17 20:30:55 ----A---- C:\Windows\system32\WebClnt.dll
2011-09-17 20:30:55 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2011-09-17 20:30:55 ----A---- C:\Windows\system32\wbengine.exe
2011-09-17 20:30:55 ----A---- C:\Windows\system32\srvcli.dll
2011-09-17 20:30:55 ----A---- C:\Windows\system32\drivers\storvsc.sys
2011-09-17 20:30:55 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-09-17 20:30:54 ----A---- C:\Windows\SYSWOW64\uxlib.dll
2011-09-17 20:30:54 ----A---- C:\Windows\system32\wbemcomn.dll
2011-09-17 20:30:54 ----A---- C:\Windows\system32\vpnikeapi.dll
2011-09-17 20:30:54 ----A---- C:\Windows\system32\vpnike.dll
2011-09-17 20:30:54 ----A---- C:\Windows\system32\vmstorfltres.dll
2011-09-17 20:30:54 ----A---- C:\Windows\system32\Vault.dll
2011-09-17 20:30:54 ----A---- C:\Windows\system32\umpnpmgr.dll
2011-09-17 20:30:54 ----A---- C:\Windows\system32\tzres.dll
2011-09-17 20:30:54 ----A---- C:\Windows\system32\tspubwmi.dll
2011-09-17 20:30:54 ----A---- C:\Windows\system32\tsbyuv.dll
2011-09-17 20:30:54 ----A---- C:\Windows\system32\drivers\vmstorfl.sys
2011-09-17 20:30:54 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2011-09-17 20:30:53 ----A---- C:\Windows\SYSWOW64\utildll.dll
2011-09-17 20:30:53 ----A---- C:\Windows\SYSWOW64\usp10.dll
2011-09-17 20:30:53 ----A---- C:\Windows\SYSWOW64\schannel.dll
2011-09-17 20:30:53 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2011-09-17 20:30:53 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2011-09-17 20:30:53 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL
2011-09-17 20:30:53 ----A---- C:\Windows\system32\VmdCoinstall.dll
2011-09-17 20:30:53 ----A---- C:\Windows\system32\schtasks.exe
2011-09-17 20:30:53 ----A---- C:\Windows\system32\schedcli.dll
2011-09-17 20:30:53 ----A---- C:\Windows\system32\secproc_ssp.dll
2011-09-17 20:30:53 ----A---- C:\Windows\system32\rdpcore.dll
2011-09-17 20:30:53 ----A---- C:\Windows\system32\QUTIL.DLL
2011-09-17 20:30:53 ----A---- C:\Windows\system32\quartz.dll
2011-09-17 20:30:53 ----A---- C:\Windows\system32\drivers\sdbus.sys
2011-09-17 20:30:52 ----A---- C:\Windows\SYSWOW64\riched32.dll
2011-09-17 20:30:52 ----A---- C:\Windows\SYSWOW64\riched20.dll
2011-09-17 20:30:52 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2011-09-17 20:30:52 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2011-09-17 20:30:52 ----A---- C:\Windows\SYSWOW64\qdv.dll
2011-09-17 20:30:52 ----A---- C:\Windows\SYSWOW64\qasf.dll
2011-09-17 20:30:52 ----A---- C:\Windows\SYSWOW64\proquota.exe
2011-09-17 20:30:52 ----A---- C:\Windows\SYSWOW64\prnfldr.dll
2011-09-17 20:30:52 ----A---- C:\Windows\system32\rpchttp.dll
2011-09-17 20:30:52 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2011-09-17 20:30:52 ----A---- C:\Windows\system32\recovery.dll
2011-09-17 20:30:52 ----A---- C:\Windows\system32\rdpsign.exe
2011-09-17 20:30:52 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2011-09-17 20:30:52 ----A---- C:\Windows\system32\prncache.dll
2011-09-17 20:30:52 ----A---- C:\Windows\system32\PresentationSettings.exe
2011-09-17 20:30:51 ----A---- C:\Windows\SYSWOW64\shimgvw.dll
2011-09-17 20:30:51 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2011-09-17 20:30:51 ----A---- C:\Windows\SYSWOW64\mciqtz32.dll
2011-09-17 20:30:51 ----A---- C:\Windows\system32\shlwapi.dll
2011-09-17 20:30:51 ----A---- C:\Windows\system32\shdocvw.dll
2011-09-17 20:30:51 ----A---- C:\Windows\system32\shacct.dll
2011-09-17 20:30:51 ----A---- C:\Windows\system32\setupapi.dll
2011-09-17 20:30:51 ----A---- C:\Windows\system32\setbcdlocale.dll
2011-09-17 20:30:51 ----A---- C:\Windows\system32\SensorsCpl.dll
2011-09-17 20:30:51 ----A---- C:\Windows\system32\MdSched.exe
2011-09-17 20:30:51 ----A---- C:\Windows\system32\mciqtz32.dll
2011-09-17 20:30:51 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2011-09-17 20:30:51 ----A---- C:\Windows\system32\lsmproxy.dll
2011-09-17 20:30:50 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2011-09-17 20:30:50 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2011-09-17 20:30:49 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2011-09-17 20:30:49 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2011-09-17 20:30:49 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2011-09-17 20:30:49 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL
2011-09-17 20:30:49 ----A---- C:\Windows\SYSWOW64\mydocs.dll
2011-09-17 20:30:49 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2011-09-17 20:30:49 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2011-09-17 20:30:49 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2011-09-17 20:30:49 ----A---- C:\Windows\SYSWOW64\localsec.dll
2011-09-17 20:30:49 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2011-09-17 20:30:49 ----A---- C:\Windows\SYSWOW64\kbdlk41a.dll
2011-09-17 20:30:49 ----A---- C:\Windows\SYSWOW64\KBDINBEN.DLL
2011-09-17 20:30:49 ----A---- C:\Windows\SYSWOW64\KBDGKL.DLL
2011-09-17 20:30:49 ----A---- C:\Windows\SYSWOW64\KBDBULG.DLL
2011-09-17 20:30:49 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2011-09-17 20:30:49 ----A---- C:\Windows\SYSWOW64\input.dll
2011-09-17 20:30:49 ----A---- C:\Windows\system32\nltest.exe
2011-09-17 20:30:49 ----A---- C:\Windows\system32\netiohlp.dll
2011-09-17 20:30:49 ----A---- C:\Windows\system32\netcfgx.dll
2011-09-17 20:30:49 ----A---- C:\Windows\system32\netcenter.dll
2011-09-17 20:30:49 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2011-09-17 20:30:49 ----A---- C:\Windows\system32\mtxclu.dll
2011-09-17 20:30:49 ----A---- C:\Windows\system32\msxml3.dll
2011-09-17 20:30:49 ----A---- C:\Windows\system32\MSVidCtl.dll
2011-09-17 20:30:49 ----A---- C:\Windows\system32\ListSvc.dll
2011-09-17 20:30:49 ----A---- C:\Windows\system32\KBDTURME.DLL
2011-09-17 20:30:49 ----A---- C:\Windows\system32\KBDMAORI.DLL
2011-09-17 20:30:49 ----A---- C:\Windows\system32\KBDINTAM.DLL
2011-09-17 20:30:49 ----A---- C:\Windows\system32\KBDGR1.DLL
2011-09-17 20:30:49 ----A---- C:\Windows\system32\KBDCZ1.DLL
2011-09-17 20:30:49 ----A---- C:\Windows\system32\isoburn.exe
2011-09-17 20:30:49 ----A---- C:\Windows\system32\iscsium.dll
2011-09-17 20:30:49 ----A---- C:\Windows\system32\iscsicli.exe
2011-09-17 20:30:49 ----A---- C:\Windows\system32\imagehlp.dll
2011-09-17 20:30:49 ----A---- C:\Windows\system32\iasrecst.dll
2011-09-17 20:30:49 ----A---- C:\Windows\system32\httpapi.dll
2011-09-17 20:30:48 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2011-09-17 20:30:48 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2011-09-17 20:30:48 ----A---- C:\Windows\SYSWOW64\netutils.dll
2011-09-17 20:30:48 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2011-09-17 20:30:48 ----A---- C:\Windows\SYSWOW64\netjoin.dll
2011-09-17 20:30:48 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2011-09-17 20:30:48 ----A---- C:\Windows\system32\ntprint.dll
2011-09-17 20:30:48 ----A---- C:\Windows\system32\mprapi.dll
2011-09-17 20:30:48 ----A---- C:\Windows\system32\drivers\msahci.sys
2011-09-17 20:30:48 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-09-17 20:30:47 ----A---- C:\Windows\SYSWOW64\msscp.dll
2011-09-17 20:30:47 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2011-09-17 20:30:47 ----A---- C:\Windows\SYSWOW64\msi.dll
2011-09-17 20:30:47 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2011-09-17 20:30:47 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2011-09-17 20:30:47 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2011-09-17 20:30:47 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2011-09-17 20:30:47 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2011-09-17 20:30:47 ----A---- C:\Windows\system32\msi.dll
2011-09-17 20:30:47 ----A---- C:\Windows\system32\msdtctm.dll
2011-09-17 20:30:47 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2011-09-17 20:30:47 ----A---- C:\Windows\system32\BWUnpairElevated.dll
2011-09-17 20:30:47 ----A---- C:\Windows\system32\bootres.dll
2011-09-17 20:30:46 ----AH---- C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
2011-09-17 20:30:46 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2011-09-17 20:30:46 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2011-09-17 20:30:46 ----A---- C:\Windows\SYSWOW64\cscobj.dll
2011-09-17 20:30:46 ----A---- C:\Windows\SYSWOW64\cmstp.exe
2011-09-17 20:30:46 ----A---- C:\Windows\SYSWOW64\audiodev.dll
2011-09-17 20:30:46 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2011-09-17 20:30:46 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2011-09-17 20:30:46 ----A---- C:\Windows\system32\drivers\ataport.sys
2011-09-17 20:30:46 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2011-09-17 20:30:46 ----A---- C:\Windows\system32\crypt32.dll
2011-09-17 20:30:46 ----A---- C:\Windows\system32\credui.dll
2011-09-17 20:30:46 ----A---- C:\Windows\system32\cmd.exe
2011-09-17 20:30:45 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2011-09-17 20:30:45 ----A---- C:\Windows\SYSWOW64\dsuiext.dll
2011-09-17 20:30:45 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2011-09-17 20:30:45 ----A---- C:\Windows\SYSWOW64\bitsadmin.exe
2011-09-17 20:30:45 ----A---- C:\Windows\SYSWOW64\AzSqlExt.dll
2011-09-17 20:30:45 ----A---- C:\Windows\SYSWOW64\azroles.dll
2011-09-17 20:30:45 ----A---- C:\Windows\SYSWOW64\autoplay.dll
2011-09-17 20:30:45 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2011-09-17 20:30:45 ----A---- C:\Windows\SYSWOW64\amstream.dll
2011-09-17 20:30:45 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2011-09-17 20:30:45 ----A---- C:\Windows\system32\hbaapi.dll
2011-09-17 20:30:45 ----A---- C:\Windows\system32\gameux.dll
2011-09-17 20:30:45 ----A---- C:\Windows\system32\fdProxy.dll
2011-09-17 20:30:45 ----A---- C:\Windows\system32\eapphost.dll
2011-09-17 20:30:45 ----A---- C:\Windows\system32\eappgnui.dll
2011-09-17 20:30:45 ----A---- C:\Windows\system32\eapp3hst.dll
2011-09-17 20:30:45 ----A---- C:\Windows\system32\dxmasf.dll
2011-09-17 20:30:45 ----A---- C:\Windows\system32\dxgi.dll
2011-09-17 20:30:45 ----A---- C:\Windows\system32\dxdiagn.dll
2011-09-17 20:30:45 ----A---- C:\Windows\system32\DWrite.dll
2011-09-17 20:30:45 ----A---- C:\Windows\system32\bitsperf.dll
2011-09-17 20:30:45 ----A---- C:\Windows\system32\batmeter.dll
2011-09-17 20:30:45 ----A---- C:\Windows\system32\AzSqlExt.dll
2011-09-17 20:30:45 ----A---- C:\Windows\system32\azroles.dll
2011-09-17 20:30:45 ----A---- C:\Windows\system32\autoconv.exe
2011-09-17 20:30:45 ----A---- C:\Windows\system32\audiosrv.dll
2011-09-17 20:30:45 ----A---- C:\Windows\system32\AudioSes.dll
2011-09-17 20:30:45 ----A---- C:\Windows\system32\audiodg.exe
2011-09-17 20:30:45 ----A---- C:\Windows\system32\amstream.dll
2011-09-17 20:30:45 ----A---- C:\Windows\system32\aitagent.exe
2011-09-17 20:30:44 ----A---- C:\Windows\SYSWOW64\fphc.dll
2011-09-17 20:30:44 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2011-09-17 20:30:44 ----A---- C:\Windows\SYSWOW64\diskraid.exe
2011-09-17 20:30:44 ----A---- C:\Windows\SYSWOW64\dfrgui.exe
2011-09-17 20:30:44 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll
2011-09-17 20:30:44 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-09-17 20:30:44 ----A---- C:\Windows\system32\framedynos.dll
2011-09-17 20:30:44 ----A---- C:\Windows\system32\framedyn.dll
2011-09-17 20:30:44 ----A---- C:\Windows\system32\djoin.exe
2011-09-17 20:30:44 ----A---- C:\Windows\system32\dfshim.dll
2011-09-17 20:30:43 ----A---- C:\Windows\SYSWOW64\tzres.dll
2011-09-17 20:30:43 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2011-09-17 20:30:43 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2011-09-17 20:30:43 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2011-09-17 20:30:43 ----A---- C:\Windows\SYSWOW64\tlscsp.dll
2011-09-17 20:30:43 ----A---- C:\Windows\SYSWOW64\sxs.dll
2011-09-17 20:30:43 ----A---- C:\Windows\SYSWOW64\sscore.dll
2011-09-17 20:30:43 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2011-09-17 20:30:43 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2011-09-17 20:30:43 ----A---- C:\Windows\SYSWOW64\dot3msm.dll
2011-09-17 20:30:43 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2011-09-17 20:30:43 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2011-09-17 20:30:43 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2011-09-17 20:30:43 ----A---- C:\Windows\system32\user32.dll
2011-09-17 20:30:43 ----A---- C:\Windows\system32\unimdmat.dll
2011-09-17 20:30:43 ----A---- C:\Windows\system32\taskhost.exe
2011-09-17 20:30:43 ----A---- C:\Windows\system32\taskeng.exe
2011-09-17 20:30:43 ----A---- C:\Windows\system32\taskcomp.dll
2011-09-17 20:30:43 ----A---- C:\Windows\system32\TabSvc.dll
2011-09-17 20:30:43 ----A---- C:\Windows\system32\spwmp.dll
2011-09-17 20:30:43 ----A---- C:\Windows\system32\sppobjs.dll
2011-09-17 20:30:43 ----A---- C:\Windows\system32\odbccp32.dll
2011-09-17 20:30:43 ----A---- C:\Windows\system32\drivers\usbser.sys
2011-09-17 20:30:43 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2011-09-17 20:30:43 ----A---- C:\Windows\system32\drivers\termdd.sys
2011-09-17 20:30:43 ----A---- C:\Windows\system32\dpx.dll
2011-09-17 20:30:43 ----A---- C:\Windows\system32\dps.dll
2011-09-17 20:30:42 ----A---- C:\Windows\SYSWOW64\syssetup.dll
2011-09-17 20:30:42 ----A---- C:\Windows\SYSWOW64\syncui.dll
2011-09-17 20:30:42 ----A---- C:\Windows\SYSWOW64\spopk.dll
2011-09-17 20:30:42 ----A---- C:\Windows\system32\sud.dll
2011-09-17 20:30:41 ----A---- C:\Windows\system32\WMVCORE.DLL
2011-09-17 20:30:41 ----A---- C:\Windows\system32\wmp.dll
2011-09-17 20:30:40 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2011-09-17 20:30:40 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2011-09-17 20:30:40 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2011-09-17 20:30:40 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2011-09-17 20:30:40 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2011-09-17 20:30:40 ----A---- C:\Windows\system32\WUDFx.dll
2011-09-17 20:30:40 ----A---- C:\Windows\system32\wmpmde.dll
2011-09-17 20:30:40 ----A---- C:\Windows\system32\wmploc.DLL
2011-09-17 20:30:40 ----A---- C:\Windows\system32\Wldap32.dll
2011-09-17 20:30:40 ----A---- C:\Windows\system32\wlanui.dll
2011-09-17 20:30:40 ----A---- C:\Windows\system32\wlanpref.dll
2011-09-17 20:30:40 ----A---- C:\Windows\system32\wisptis.exe
2011-09-17 20:30:40 ----A---- C:\Windows\system32\winsta.dll
2011-09-17 20:30:39 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2011-09-17 20:30:39 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2011-09-17 20:30:39 ----A---- C:\Windows\SYSWOW64\wpdwcn.dll
2011-09-17 20:30:39 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2011-09-17 20:30:39 ----A---- C:\Windows\system32\xpsservices.dll
2011-09-17 20:30:39 ----A---- C:\Windows\system32\WUDFSvc.dll
2011-09-17 20:30:39 ----A---- C:\Windows\system32\WUDFPlatform.dll
2011-09-17 20:30:39 ----A---- C:\Windows\system32\WUDFHost.exe
2011-09-17 20:30:39 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2011-09-17 20:30:39 ----A---- C:\Windows\system32\wshbth.dll
2011-09-17 20:30:39 ----A---- C:\Windows\system32\WinSATAPI.dll
2011-09-17 20:30:39 ----A---- C:\Windows\system32\WFS.exe
2011-09-17 20:30:39 ----A---- C:\Windows\system32\vmbusres.dll
2011-09-17 20:30:39 ----A---- C:\Windows\system32\vmbuspipe.dll
2011-09-17 20:30:39 ----A---- C:\Windows\system32\VmbusCoinstaller.dll
2011-09-17 20:30:39 ----A---- C:\Windows\system32\vdsbas.dll
2011-09-17 20:30:39 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2011-09-17 20:30:39 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2011-09-17 20:30:39 ----A---- C:\Windows\system32\drivers\winhv.sys
2011-09-17 20:30:39 ----A---- C:\Windows\system32\drivers\volmgr.sys
2011-09-17 20:30:39 ----A---- C:\Windows\system32\drivers\vmbus.sys
2011-09-17 20:30:38 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2011-09-17 20:30:38 ----A---- C:\Windows\SYSWOW64\vpnikeapi.dll
2011-09-17 20:30:38 ----A---- C:\Windows\SYSWOW64\resutils.dll
2011-09-17 20:30:38 ----A---- C:\Windows\SYSWOW64\regapi.dll
2011-09-17 20:30:38 ----A---- C:\Windows\SYSWOW64\rdpendp.dll
2011-09-17 20:30:38 ----A---- C:\Windows\SYSWOW64\rdpencom.dll
2011-09-17 20:30:38 ----A---- C:\Windows\SYSWOW64\rasppp.dll
2011-09-17 20:30:38 ----A---- C:\Windows\system32\WavDest.dll
2011-09-17 20:30:38 ----A---- C:\Windows\system32\remotepg.dll
2011-09-17 20:30:38 ----A---- C:\Windows\system32\ReAgent.dll
2011-09-17 20:30:38 ----A---- C:\Windows\system32\RDVGHelper.exe
2011-09-17 20:30:38 ----A---- C:\Windows\system32\rdpwsx.dll
2011-09-17 20:30:38 ----A---- C:\Windows\system32\rdpshell.exe
2011-09-17 20:30:38 ----A---- C:\Windows\system32\rdpinit.exe
2011-09-17 20:30:38 ----A---- C:\Windows\system32\rdpendp.dll
2011-09-17 20:30:38 ----A---- C:\Windows\system32\rdpd3d.dll
2011-09-17 20:30:38 ----A---- C:\Windows\system32\rdpcorekmts.dll
2011-09-17 20:30:38 ----A---- C:\Windows\system32\rasppp.dll
2011-09-17 20:30:38 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2011-09-17 20:30:38 ----A---- C:\Windows\system32\QSHVHOST.DLL
2011-09-17 20:30:38 ----A---- C:\Windows\system32\qasf.dll
2011-09-17 20:30:38 ----A---- C:\Windows\system32\puiobj.dll
2011-09-17 20:30:38 ----A---- C:\Windows\system32\drivers\rdpdr.sys
2011-09-17 20:30:38 ----A---- C:\Windows\system32\drivers\raspptp.sys
2011-09-17 20:30:37 ----A---- C:\Windows\SYSWOW64\prncache.dll
2011-09-17 20:30:37 ----A---- C:\Windows\SYSWOW64\printui.dll
2011-09-17 20:30:37 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2011-09-17 20:30:37 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2011-09-17 20:30:37 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2011-09-17 20:30:37 ----A---- C:\Windows\SYSWOW64\PkgMgr.exe
2011-09-17 20:30:37 ----A---- C:\Windows\SYSWOW64\perfts.dll
2011-09-17 20:30:37 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll
2011-09-17 20:30:37 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2011-09-17 20:30:37 ----A---- C:\Windows\system32\setupcl.exe
2011-09-17 20:30:37 ----A---- C:\Windows\system32\SessEnv.dll
2011-09-17 20:30:37 ----A---- C:\Windows\system32\provsvc.dll
2011-09-17 20:30:37 ----A---- C:\Windows\system32\prnfldr.dll
2011-09-17 20:30:37 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2011-09-17 20:30:37 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2011-09-17 20:30:37 ----A---- C:\Windows\system32\PresentationHost.exe
2011-09-17 20:30:37 ----A---- C:\Windows\system32\powercpl.dll
2011-09-17 20:30:37 ----A---- C:\Windows\system32\pla.dll
2011-09-17 20:30:37 ----A---- C:\Windows\system32\PkgMgr.exe
2011-09-17 20:30:37 ----A---- C:\Windows\system32\photowiz.dll
2011-09-17 20:30:37 ----A---- C:\Windows\system32\pdh.dll
2011-09-17 20:30:37 ----A---- C:\Windows\system32\drivers\pci.sys
2011-09-17 20:30:37 ----A---- C:\Windows\system32\drivers\pacer.sys
2011-09-17 20:30:36 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2011-09-17 20:30:36 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2011-09-17 20:30:35 ----A---- C:\Windows\SYSWOW64\sisbkup.dll
2011-09-17 20:30:35 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll
2011-09-17 20:30:35 ----A---- C:\Windows\SYSWOW64\shunimpl.dll
2011-09-17 20:30:35 ----A---- C:\Windows\SYSWOW64\shell32.dll
2011-09-17 20:30:35 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2011-09-17 20:30:35 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2011-09-17 20:30:35 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2011-09-17 20:30:35 ----A---- C:\Windows\SYSWOW64\runonce.exe
2011-09-17 20:30:35 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2011-09-17 20:30:35 ----A---- C:\Windows\system32\shimgvw.dll
2011-09-17 20:30:35 ----A---- C:\Windows\system32\shgina.dll
2011-09-17 20:30:35 ----A---- C:\Windows\system32\secproc.dll
2011-09-17 20:30:35 ----A---- C:\Windows\system32\scrptadm.dll
2011-09-17 20:30:35 ----A---- C:\Windows\system32\scavengeui.dll
2011-09-17 20:30:35 ----A---- C:\Windows\system32\samsrv.dll
2011-09-17 20:30:35 ----A---- C:\Windows\system32\samcli.dll
2011-09-17 20:30:35 ----A---- C:\Windows\system32\RMActivate.exe
2011-09-17 20:30:35 ----A---- C:\Windows\system32\drivers\rmcast.sys
2011-09-17 20:30:34 ----A---- C:\Windows\SYSWOW64\shgina.dll
2011-09-17 20:30:34 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2011-09-17 20:30:34 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2011-09-17 20:30:34 ----A---- C:\Windows\SYSWOW64\msdmo.dll
2011-09-17 20:30:34 ----A---- C:\Windows\SYSWOW64\mscms.dll
2011-09-17 20:30:34 ----A---- C:\Windows\system32\RpcRtRemote.dll
2011-09-17 20:30:34 ----A---- C:\Windows\system32\msconfig.exe
2011-09-17 20:30:34 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-09-17 20:30:33 ----A---- C:\Windows\SYSWOW64\wkscli.dll
2011-09-17 20:30:33 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2011-09-17 20:30:33 ----A---- C:\Windows\SYSWOW64\winsta.dll
2011-09-17 20:30:33 ----A---- C:\Windows\SYSWOW64\sethc.exe
2011-09-17 20:30:33 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll
2011-09-17 20:30:33 ----A---- C:\Windows\system32\wmicmiplugin.dll
2011-09-17 20:30:33 ----A---- C:\Windows\system32\wksprt.exe
2011-09-17 20:30:33 ----A---- C:\Windows\system32\slwga.dll
2011-09-17 20:30:33 ----A---- C:\Windows\system32\sisbkup.dll
2011-09-17 20:30:33 ----A---- C:\Windows\system32\shsetup.dll
2011-09-17 20:30:33 ----A---- C:\Windows\system32\sethc.exe
2011-09-17 20:30:33 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2011-09-17 20:30:32 ----A---- C:\Windows\SYSWOW64\wmpshell.dll
2011-09-17 20:30:32 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2011-09-17 20:30:32 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2011-09-17 20:30:32 ----A---- C:\Windows\SYSWOW64\wmp.dll
2011-09-17 20:30:32 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2011-09-17 20:30:32 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2011-09-17 20:30:32 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2011-09-17 20:30:32 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2011-09-17 20:30:32 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2011-09-17 20:30:32 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2011-09-17 20:30:32 ----A---- C:\Windows\system32\wmpshell.dll
2011-09-17 20:30:32 ----A---- C:\Windows\system32\wmpps.dll
2011-09-17 20:30:32 ----A---- C:\Windows\system32\WMPEncEn.dll
2011-09-17 20:30:32 ----A---- C:\Windows\system32\azroleui.dll
2011-09-17 20:30:31 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2011-09-17 20:30:31 ----A---- C:\Windows\system32\TSpkg.dll
2011-09-17 20:30:31 ----A---- C:\Windows\system32\tsgqec.dll
2011-09-17 20:30:31 ----A---- C:\Windows\system32\sxs.dll
2011-09-17 20:30:31 ----A---- C:\Windows\system32\stobject.dll
2011-09-17 20:30:31 ----A---- C:\Windows\system32\sscore.dll
2011-09-17 20:30:31 ----A---- C:\Windows\system32\spbcd.dll
2011-09-17 20:30:31 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2011-09-17 20:30:31 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2011-09-17 20:30:31 ----A---- C:\Windows\system32\appmgr.dll
2011-09-17 20:30:30 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2011-09-17 20:30:30 ----A---- C:\Windows\SYSWOW64\termmgr.dll
2011-09-17 20:30:30 ----A---- C:\Windows\SYSWOW64\taskmgr.exe
2011-09-17 20:30:30 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2011-09-17 20:30:30 ----A---- C:\Windows\SYSWOW64\sqmapi.dll
2011-09-17 20:30:30 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2011-09-17 20:30:30 ----A---- C:\Windows\system32\themeui.dll
2011-09-17 20:30:30 ----A---- C:\Windows\system32\termmgr.dll
2011-09-17 20:30:30 ----A---- C:\Windows\system32\tapisrv.dll
2011-09-17 20:30:30 ----A---- C:\Windows\system32\systemcpl.dll
2011-09-17 20:30:30 ----A---- C:\Windows\system32\srvsvc.dll
2011-09-17 20:30:30 ----A---- C:\Windows\system32\sqlsrv32.dll
2011-09-17 20:30:30 ----A---- C:\Windows\system32\spwizres.dll
2011-09-17 20:30:30 ----A---- C:\Windows\system32\spwizeng.dll
2011-09-17 20:30:30 ----A---- C:\Windows\system32\sppc.dll
2011-09-17 20:30:30 ----A---- C:\Windows\system32\drivers\tdi.sys
2011-09-17 20:30:29 ----A---- C:\Windows\SYSWOW64\OpcServices.dll
2011-09-17 20:30:29 ----A---- C:\Windows\system32\onexui.dll
2011-09-17 20:30:29 ----A---- C:\Windows\system32\onex.dll
2011-09-17 20:30:29 ----A---- C:\Windows\system32\oleaut32.dll
2011-09-17 20:30:27 ----A---- C:\Windows\SYSWOW64\printmanagement.msc
2011-09-17 20:30:27 ----A---- C:\Windows\SYSWOW64\ppcsnap.dll
2011-09-17 20:30:27 ----A---- C:\Windows\system32\prntvpt.dll
2011-09-17 20:30:27 ----A---- C:\Windows\system32\nshipsec.dll
2011-09-17 20:30:26 ----A---- C:\Windows\SYSWOW64\pmcsnap.dll
2011-09-17 20:30:26 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2011-09-17 20:30:25 ----A---- C:\Windows\system32\seclogon.dll
2011-09-17 20:30:25 ----A---- C:\Windows\system32\sdrsvc.dll
2011-09-17 20:30:25 ----A---- C:\Windows\system32\sdengin2.dll
2011-09-17 20:30:25 ----A---- C:\Windows\system32\sdclt.exe
2011-09-17 20:30:24 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2011-09-17 20:30:24 ----A---- C:\Windows\system32\networkexplorer.dll
2011-09-17 20:30:23 ----A---- C:\Windows\SYSWOW64\rdvgumd32.dll
2011-09-17 20:30:23 ----A---- C:\Windows\system32\repair-bde.exe
2011-09-17 20:30:23 ----A---- C:\Windows\system32\recdisc.exe
2011-09-17 20:30:23 ----A---- C:\Windows\system32\networkmap.dll
2011-09-17 20:30:22 ----A---- C:\Windows\SYSWOW64\scrptadm.dll
2011-09-17 20:30:22 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2011-09-17 20:30:22 ----A---- C:\Windows\system32\rpcss.dll
2011-09-17 20:30:22 ----A---- C:\Windows\system32\RMActivate_isv.exe
2011-09-17 20:30:22 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2011-09-17 20:30:21 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2011-09-17 20:30:21 ----A---- C:\Windows\system32\sbe.dll
2011-09-17 20:30:21 ----A---- C:\Windows\system32\profsvc.dll
2011-09-17 20:30:20 ----A---- C:\Windows\SYSWOW64\PushPrinterConnections.exe
2011-09-17 20:30:20 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2011-09-17 20:30:20 ----A---- C:\Windows\system32\rdpencom.dll
2011-09-17 20:30:20 ----A---- C:\Windows\system32\rdpcfgex.dll
2011-09-17 20:30:20 ----A---- C:\Windows\system32\qcap.dll
2011-09-17 20:30:20 ----A---- C:\Windows\system32\profprov.dll
2011-09-17 20:30:20 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2011-09-17 20:30:19 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2011-09-17 20:30:19 ----A---- C:\Windows\SYSWOW64\wsdchngr.dll
2011-09-17 20:30:19 ----A---- C:\Windows\SYSWOW64\Query.dll
2011-09-17 20:30:19 ----A---- C:\Windows\system32\wscapi.dll
2011-09-17 20:30:19 ----A---- C:\Windows\system32\wpdbusenum.dll
2011-09-17 20:30:19 ----A---- C:\Windows\system32\qedit.dll
2011-09-17 20:30:19 ----A---- C:\Windows\system32\qdvd.dll
2011-09-17 20:30:18 ----A---- C:\Windows\system32\wpccpl.dll
2011-09-17 20:30:16 ----A---- C:\Windows\SYSWOW64\wups.dll
2011-09-17 20:30:16 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2011-09-17 20:30:16 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2011-09-17 20:30:16 ----A---- C:\Windows\SYSWOW64\wshirda.dll
2011-09-17 20:30:16 ----A---- C:\Windows\system32\wups2.dll
2011-09-17 20:30:16 ----A---- C:\Windows\system32\wuaueng.dll
2011-09-17 20:30:16 ----A---- C:\Windows\system32\wuauclt.exe
2011-09-17 20:30:16 ----A---- C:\Windows\system32\wshirda.dll
2011-09-17 20:30:16 ----A---- C:\Windows\system32\drivers\msrpc.sys
2011-09-17 20:30:15 ----A---- C:\Windows\SYSWOW64\secur32.dll
2011-09-17 20:30:15 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2011-09-17 20:30:15 ----A---- C:\Windows\SYSWOW64\msutb.dll
2011-09-17 20:30:15 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2011-09-17 20:30:15 ----A---- C:\Windows\system32\mstscax.dll
2011-09-17 20:30:15 ----A---- C:\Windows\system32\msinfo32.exe
2011-09-17 20:30:14 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2011-09-17 20:30:14 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2011-09-17 20:30:14 ----A---- C:\Windows\SYSWOW64\net1.exe
2011-09-17 20:30:14 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2011-09-17 20:30:14 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2011-09-17 20:30:14 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2011-09-17 20:30:14 ----A---- C:\Windows\system32\secproc_isv.dll
2011-09-17 20:30:14 ----A---- C:\Windows\system32\netdiagfx.dll
2011-09-17 20:30:14 ----A---- C:\Windows\system32\nci.dll
2011-09-17 20:30:14 ----A---- C:\Windows\system32\Narrator.exe
2011-09-17 20:30:14 ----A---- C:\Windows\system32\drivers\netio.sys
2011-09-17 20:30:14 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2011-09-17 20:30:14 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2011-09-17 20:30:14 ----A---- C:\Windows\system32\drivers\ndis.sys
2011-09-17 20:30:13 ----A---- C:\Windows\SYSWOW64\vfwwdm32.dll
2011-09-17 20:30:13 ----A---- C:\Windows\SYSWOW64\vdsbas.dll
2011-09-17 20:30:13 ----A---- C:\Windows\SYSWOW64\VAN.dll
2011-09-17 20:30:13 ----A---- C:\Windows\SYSWOW64\KBDUS.DLL
2011-09-17 20:30:13 ----A---- C:\Windows\SYSWOW64\KBDTAJIK.DLL
2011-09-17 20:30:13 ----A---- C:\Windows\SYSWOW64\KBDMON.DLL
2011-09-17 20:30:13 ----A---- C:\Windows\SYSWOW64\KBDINTAM.DLL
2011-09-17 20:30:13 ----A---- C:\Windows\SYSWOW64\KBDINMAR.DLL
2011-09-17 20:30:13 ----A---- C:\Windows\SYSWOW64\KBDINHIN.DLL
2011-09-17 20:30:13 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2011-09-17 20:30:13 ----A---- C:\Windows\SYSWOW64\inetmib1.dll
2011-09-17 20:30:13 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2011-09-17 20:30:13 ----A---- C:\Windows\system32\XpsPrint.dll
2011-09-17 20:30:13 ----A---- C:\Windows\system32\uxlib.dll
2011-09-17 20:30:13 ----A---- C:\Windows\system32\userenv.dll
2011-09-17 20:30:13 ----A---- C:\Windows\system32\lsm.exe
2011-09-17 20:30:13 ----A---- C:\Windows\system32\localsec.dll
2011-09-17 20:30:13 ----A---- C:\Windows\system32\KBDTUQ.DLL
2011-09-17 20:30:13 ----A---- C:\Windows\system32\KBDLT1.DLL
2011-09-17 20:30:13 ----A---- C:\Windows\system32\KBDINTEL.DLL
2011-09-17 20:30:13 ----A---- C:\Windows\system32\KBDINORI.DLL
2011-09-17 20:30:13 ----A---- C:\Windows\system32\KBDBASH.DLL
2011-09-17 20:30:13 ----A---- C:\Windows\system32\ipsmsnap.dll
2011-09-17 20:30:13 ----A---- C:\Windows\system32\drivers\vms3cap.sys
2011-09-17 20:30:13 ----A---- C:\Windows\system32\drivers\VMBusHID.sys
2011-09-17 20:30:13 ----A---- C:\Windows\system32\drivers\ks.sys
2011-09-17 20:30:13 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2011-09-17 20:30:13 ----A---- C:\Windows\system32\aaclient.dll
2011-09-17 20:30:12 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2011-09-17 20:30:12 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2011-09-17 20:30:12 ----A---- C:\Windows\SYSWOW64\UserAccountControlSettings.dll
2011-09-17 20:30:12 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2011-09-17 20:30:12 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2011-09-17 20:30:12 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2011-09-17 20:30:12 ----A---- C:\Windows\SYSWOW64\luainstall.dll
2011-09-17 20:30:12 ----A---- C:\Windows\system32\wiavideo.dll
2011-09-17 20:30:12 ----A---- C:\Windows\system32\wiaservc.dll
2011-09-17 20:30:12 ----A---- C:\Windows\system32\usercpl.dll
2011-09-17 20:30:12 ----A---- C:\Windows\system32\TSWorkspace.dll
2011-09-17 20:30:12 ----A---- C:\Windows\system32\mfreadwrite.dll
2011-09-17 20:30:12 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2011-09-17 20:30:12 ----A---- C:\Windows\system32\mcmde.dll
2011-09-17 20:30:12 ----A---- C:\Windows\system32\mapistub.dll
2011-09-17 20:30:12 ----A---- C:\Windows\system32\mapi32.dll
2011-09-17 20:30:12 ----A---- C:\Windows\system32\DiagCpl.dll
2011-09-17 20:30:11 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2011-09-17 20:30:11 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2011-09-17 20:30:11 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2011-09-17 20:30:11 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll
2011-09-17 20:30:11 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2011-09-17 20:30:11 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2011-09-17 20:30:11 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2011-09-17 20:30:11 ----A---- C:\Windows\SYSWOW64\cca.dll
2011-09-17 20:30:11 ----A---- C:\Windows\SYSWOW64\cabinet.dll
2011-09-17 20:30:11 ----A---- C:\Windows\SYSWOW64\browseui.dll
2011-09-17 20:30:11 ----A---- C:\Windows\SYSWOW64\bitsperf.dll
2011-09-17 20:30:11 ----A---- C:\Windows\system32\gpprefcl.dll
2011-09-17 20:30:11 ----A---- C:\Windows\system32\dwmcore.dll
2011-09-17 20:30:11 ----A---- C:\Windows\system32\dsuiext.dll
2011-09-17 20:30:11 ----A---- C:\Windows\system32\dskquoui.dll
2011-09-17 20:30:11 ----A---- C:\Windows\system32\dpnaddr.dll
2011-09-17 20:30:11 ----A---- C:\Windows\system32\dnscmmc.dll
2011-09-17 20:30:11 ----A---- C:\Windows\system32\dfrgui.exe
2011-09-17 20:30:11 ----A---- C:\Windows\system32\cscui.dll
2011-09-17 20:30:11 ----A---- C:\Windows\system32\cscsvc.dll
2011-09-17 20:30:11 ----A---- C:\Windows\system32\cscdll.dll
2011-09-17 20:30:11 ----A---- C:\Windows\system32\cscapi.dll
2011-09-17 20:30:11 ----A---- C:\Windows\system32\credssp.dll
2011-09-17 20:30:11 ----A---- C:\Windows\system32\CPFilters.dll
2011-09-17 20:30:11 ----A---- C:\Windows\system32\comctl32.dll
2011-09-17 20:30:11 ----A---- C:\Windows\system32\ci.dll
2011-09-17 20:30:11 ----A---- C:\Windows\system32\C_ISCII.DLL
2011-09-17 20:30:11 ----A---- C:\Windows\system32\browcli.dll
2011-09-17 20:30:11 ----A---- C:\Windows\system32\bitsadmin.exe
2011-09-17 20:30:10 ----A---- C:\Windows\SYSWOW64\ifsutil.dll
2011-09-17 20:30:10 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2011-09-17 20:30:10 ----A---- C:\Windows\SYSWOW64\iasrecst.dll
2011-09-17 20:30:10 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2011-09-17 20:30:10 ----A---- C:\Windows\SYSWOW64\gameux.dll
2011-09-17 20:30:10 ----A---- C:\Windows\SYSWOW64\fms.dll
2011-09-17 20:30:10 ----A---- C:\Windows\SYSWOW64\EhStorAPI.dll
2011-09-17 20:30:10 ----A---- C:\Windows\system32\zipfldr.dll
2011-09-17 20:30:10 ----A---- C:\Windows\system32\ifsutil.dll
2011-09-17 20:30:10 ----A---- C:\Windows\system32\FXSTIFF.dll
2011-09-17 20:30:10 ----A---- C:\Windows\system32\FXSAPI.dll
2011-09-17 20:30:10 ----A---- C:\Windows\system32\fixmapi.exe
2011-09-17 20:30:10 ----A---- C:\Windows\system32\findstr.exe
2011-09-17 20:30:10 ----A---- C:\Windows\system32\fdeploy.dll
2011-09-17 20:30:10 ----A---- C:\Windows\system32\EhStorAPI.dll
2011-09-17 20:30:10 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2011-09-17 20:12:31 ----D---- C:\Windows\system32\EventProviders
2011-09-16 12:44:53 ----A---- C:\Windows\system32\NVUNINST.EXE
2011-09-15 22:47:42 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2011-09-15 22:47:41 ----A---- C:\Windows\system32\aswBoot.exe
2011-09-15 22:47:07 ----D---- C:\Program Files\AVAST Software
2011-09-15 22:46:41 ----D---- C:\ProgramData\AVAST Software

======List of files/folders modified in the last 1 months======

2011-09-25 13:23:55 ----D---- C:\Windows\Temp
2011-09-25 13:23:55 ----D---- C:\Program Files\trend micro
2011-09-25 13:20:22 ----D---- C:\Windows\Prefetch
2011-09-25 13:13:20 ----SHD---- C:\Windows\Installer
2011-09-25 13:13:19 ----D---- C:\Windows\system32\Tasks
2011-09-25 13:13:17 ----D---- C:\ProgramData\Skype
2011-09-25 13:13:17 ----D---- C:\Program Files (x86)\Common Files
2011-09-25 13:13:17 ----D---- C:\Program Files (x86)
2011-09-25 13:13:03 ----SHD---- C:\System Volume Information
2011-09-25 13:10:10 ----D---- C:\Windows\system32\NDF
2011-09-23 11:28:54 ----D---- C:\Users\Boss\AppData\Roaming\DMCache
2011-09-22 21:53:11 ----D---- C:\Windows\System32
2011-09-22 21:53:11 ----D---- C:\Windows\inf
2011-09-22 21:53:11 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-09-22 14:48:18 ----D---- C:\Windows\system32\catroot2
2011-09-22 14:47:48 ----D---- C:\ProgramData\NVIDIA
2011-09-22 14:47:18 ----D---- C:\Windows
2011-09-22 12:55:54 ----D---- C:\Windows\system32\config
2011-09-22 11:15:45 ----D---- C:\Windows\SysWOW64
2011-09-20 09:10:55 ----D---- C:\Windows\rescache
2011-09-19 23:08:44 ----D---- C:\Windows\winsxs
2011-09-19 23:06:50 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-09-19 23:06:50 ----D---- C:\Windows\system32\cs-CZ
2011-09-19 23:06:50 ----D---- C:\Program Files\Internet Explorer
2011-09-19 23:06:50 ----D---- C:\Program Files (x86)\Internet Explorer
2011-09-19 23:06:49 ----D---- C:\Windows\SYSWOW64\sk-SK
2011-09-19 23:06:49 ----D---- C:\Windows\SYSWOW64\migration
2011-09-19 23:06:49 ----D---- C:\Windows\SYSWOW64\en-US
2011-09-19 23:06:48 ----D---- C:\Windows\system32\sk-SK
2011-09-19 23:06:48 ----D---- C:\Windows\system32\migration
2011-09-19 23:06:48 ----D---- C:\Windows\system32\en-US
2011-09-19 23:06:48 ----D---- C:\Windows\PolicyDefinitions
2011-09-19 23:01:16 ----RD---- C:\Program Files
2011-09-19 23:01:06 ----D---- C:\Windows\Logs
2011-09-19 23:00:51 ----D---- C:\Windows\system32\catroot
2011-09-19 22:32:22 ----D---- C:\Windows\system32\drivers\etc
2011-09-19 21:29:18 ----D---- C:\Windows\Tasks
2011-09-19 16:53:13 ----RSD---- C:\Windows\assembly
2011-09-19 16:31:28 ----A---- C:\RTFO.TXT
2011-09-19 16:31:28 ----A---- C:\RTF.TXT
2011-09-19 11:02:49 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-09-19 11:02:49 ----D---- C:\Program Files (x86)\Ubisoft
2011-09-19 10:51:32 ----HD---- C:\ProgramData
2011-09-19 10:50:07 ----D---- C:\Program Files (x86)\VirtualDJ
2011-09-19 10:50:05 ----RSD---- C:\Windows\Fonts
2011-09-19 10:49:12 ----D---- C:\Program Files (x86)\Opera
2011-09-17 22:08:56 ----D---- C:\Windows\Microsoft.NET
2011-09-17 21:12:02 ----D---- C:\Windows\system32\DriverStore
2011-09-17 21:10:06 ----D---- C:\Program Files\Prio
2011-09-17 21:07:36 ----D---- C:\Program Files (x86)\Windows Sidebar
2011-09-17 21:07:36 ----D---- C:\Program Files (x86)\Windows Portable Devices
2011-09-17 21:07:36 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2011-09-17 21:07:36 ----D---- C:\Program Files (x86)\Windows Media Player
2011-09-17 21:07:36 ----D---- C:\Program Files (x86)\Windows Mail
2011-09-17 21:07:35 ----D---- C:\Program Files\Windows Sidebar
2011-09-17 21:07:35 ----D---- C:\Program Files\Windows Portable Devices
2011-09-17 21:07:35 ----D---- C:\Program Files\Windows Photo Viewer
2011-09-17 21:07:35 ----D---- C:\Program Files\Windows Media Player
2011-09-17 21:07:35 ----D---- C:\Program Files\Windows Mail
2011-09-17 21:07:35 ----D---- C:\Program Files\Windows Journal
2011-09-17 21:07:35 ----D---- C:\Program Files\DVD Maker
2011-09-17 21:07:33 ----D---- C:\Windows\servicing
2011-09-17 21:07:33 ----D---- C:\Windows\ehome
2011-09-17 21:07:33 ----D---- C:\Program Files\Windows Defender
2011-09-17 21:07:27 ----SHD---- C:\Windows\BitLockerDiscoveryVolumeContents
2011-09-17 21:07:27 ----D---- C:\Windows\SYSWOW64\da-DK
2011-09-17 21:07:25 ----D---- C:\Windows\SYSWOW64\Setup
2011-09-17 21:07:25 ----D---- C:\Windows\SYSWOW64\oobe
2011-09-17 21:07:25 ----D---- C:\Windows\SYSWOW64\cs
2011-09-17 21:07:25 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2011-09-17 21:07:24 ----D---- C:\Windows\SYSWOW64\sppui
2011-09-17 21:07:24 ----D---- C:\Windows\SYSWOW64\manifeststore
2011-09-17 21:07:24 ----D---- C:\Windows\SYSWOW64\es-ES
2011-09-17 21:07:24 ----D---- C:\Windows\SYSWOW64\en
2011-09-17 21:07:23 ----D---- C:\Windows\SYSWOW64\wbem
2011-09-17 21:07:23 ----D---- C:\Windows\SYSWOW64\migwiz
2011-09-17 21:07:23 ----D---- C:\Windows\SYSWOW64\Dism
2011-09-17 21:07:14 ----D---- C:\Windows\system32\da-DK
2011-09-17 21:07:12 ----D---- C:\Windows\system32\oobe
2011-09-17 21:07:11 ----D---- C:\Windows\system32\Setup
2011-09-17 21:07:11 ----D---- C:\Windows\system32\cs
2011-09-17 21:07:11 ----D---- C:\Windows\system32\AdvancedInstallers
2011-09-17 21:07:10 ----D---- C:\Windows\system32\sppui
2011-09-17 21:07:10 ----D---- C:\Windows\system32\manifeststore
2011-09-17 21:07:10 ----D---- C:\Windows\system32\es-ES
2011-09-17 21:07:09 ----D---- C:\Windows\system32\wbem
2011-09-17 21:07:09 ----D---- C:\Windows\system32\drivers\UMDF
2011-09-17 21:07:09 ----D---- C:\Windows\system32\drivers\en-US
2011-09-17 21:07:09 ----D---- C:\Windows\system32\drivers\cs-CZ
2011-09-17 21:07:09 ----D---- C:\Windows\system32\drivers
2011-09-17 21:07:08 ----D---- C:\Windows\system32\migwiz
2011-09-17 21:07:08 ----D---- C:\Windows\system32\Dism
2011-09-17 21:06:58 ----D---- C:\Windows\AppPatch
2011-09-17 21:06:51 ----D---- C:\Windows\system32\Boot
2011-09-17 21:02:10 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2011-09-17 21:02:10 ----A---- C:\Windows\system32\msclmd.dll
2011-09-17 15:48:10 ----D---- C:\Program Files (x86)\FreeTime
2011-09-17 15:47:50 ----D---- C:\Program Files (x86)\CDex
2011-09-15 22:49:23 ----D---- C:\Program Files\Alwil Software
2011-09-14 16:51:18 ----D---- C:\Windows\SYSWOW64\drivers
2011-09-07 21:34:23 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-09-06 22:45:29 ----A---- C:\Windows\SYSWOW64\aswBoot.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-07-07 868848]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2011-09-06 42328]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2011-09-06 601944]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2011-09-06 301912]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2011-09-06 58200]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2009-03-15 85424]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2011-09-06 24408]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2011-09-06 65368]
R3 MarvinBus;Pinnacle Marvin Bus 64; C:\Windows\system32\DRIVERS\MarvinBus64.sys [2005-09-23 261120]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x64.sys [2009-06-10 408960]
S3 7ByteIo;7ByteIo; \??\C:\Program Files (x86)\Hot CPU Tester Pro 4 LE\SysInfoX64.sys []
S3 am6wtj60;am6wtj60; C:\Windows\system32\drivers\am6wtj60.sys []
S3 ENTECH64;ENTECH64; \??\C:\Windows\system32\DRIVERS\ENTECH64.sys [2007-08-20 12744]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2010-07-30 19456]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2010-07-30 26624]
S3 nmwcdnsucx64;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsucx64.sys [2010-07-26 12800]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2010-07-26 171008]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2010-07-30 9216]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2010-07-30 9216]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
S3 WSDPrintDevice;Podpora tisku WSD prostřednictvím funkce UMB; C:\Windows\system32\DRIVERS\WSDPrint.sys [2009-07-14 23040]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-09-06 44768]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2008-09-24 935208]
R2 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [2009-06-10 382496]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [2006-12-19 81920]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-10-16 369256]
R3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2010-12-08 628736]
S2 TuneUp.ProgramStatisticsSvc;@%SystemRoot%\System32\TUProgSt.exe,-1; C:\Windows\System32\TUProgSt.exe [2010-11-07 841472]
S2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe []
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 TuneUp.Defrag;@%SystemRoot%\System32\TuneUpDefragService.exe,-1; C:\Windows\System32\TuneUpDefragService.exe [2010-11-07 505600]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]

-----------------EOF-----------------

[Mc_Murphy]

V logu už nic špatného nevidím.

Maximálně, co se týče TuneUp Software. Docela dost se zakousává do systému, občas promázne i to, co nemá.
Navíc je tento soft placený (což jistě víš, když sis jej kupoval, že?) a dle mého je naprosto zbytečné za něj dávat peníze. CCleaner dělá daleko lepší práci a zadarmo.