Prosím o kontrolu logu

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
popino
Návštěvník
Návštěvník
Příspěvky: 56
Registrován: 06 Črv 2005 19:22

Prosím o kontrolu logu

#1 Příspěvek od popino »

Dobrý den, prosím o kontrolu zpomalení NB.Děkuji


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:47:52, on 21.1.2012
Platform: Unknown Windows (WinNT 6.01.3505 SP1)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
C:\Program Files (x86)\ICQ7.7\ICQ.exe
C:\Users\popino\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\popino\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\popino\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\popino\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Search the Web - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
O9 - Extra button: Quick-Launch Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files (x86)\Acer Bio Protection\PwdBank.exe
O9 - Extra 'Tools' menuitem: Quick-Launch Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files (x86)\Acer Bio Protection\PwdBank.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O13 - Gopher Prefix:
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agr64svc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AuthenTec Fingerprint Service (ATService) - AuthenTec, Inc. - C:\Program Files (x86)\Fingerprint Sensor\AtService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: EgisTec Service (IGBASVC) - Egis Technology Inc. - C:\Program Files (x86)\Acer Bio Protection\BASVC.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: Služba Windows Media Player Network Sharing (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7279 bytes

Avatar uživatele
Roli
VIP
VIP
Příspěvky: 13399
Registrován: 26 Lis 2006 13:37
Místo/Bydliště: ČR

Re: Prosím o kontrolu logu

#2 Příspěvek od Roli »

Zdravím, raději mi sem dej log.txt z Rsit, protože je podrobnější než HJT.

V mezičase přes Přidat odebrat programy, odinstaluj Spybot - SD který je už za zenitem.
| Rsit | Mbam | AVPTool | Cure It |

O víkendu odpočívám :all_coholic:

popino
Návštěvník
Návštěvník
Příspěvky: 56
Registrován: 06 Črv 2005 19:22

Re: Prosím o kontrolu logu

#3 Příspěvek od popino »

Logfile of random's system information tool 1.09 (written by random/random)
Run by popino at 2012-01-22 16:23:40
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 121 GB (40%) free of 305 GB
Total RAM: 4091 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:23:41, on 22.1.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
C:\Program Files (x86)\ICQ7.7\ICQ.exe
C:\Program Files (x86)\20Dollars2Surf\20dollars2surf.exe
C:\Users\popino\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\popino\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\popino\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\popino.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Search the Web - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
O9 - Extra button: Quick-Launch Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files (x86)\Acer Bio Protection\PwdBank.exe
O9 - Extra 'Tools' menuitem: Quick-Launch Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files (x86)\Acer Bio Protection\PwdBank.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agr64svc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AuthenTec Fingerprint Service (ATService) - AuthenTec, Inc. - C:\Program Files (x86)\Fingerprint Sensor\AtService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: EgisTec Service (IGBASVC) - Egis Technology Inc. - C:\Program Files (x86)\Acer Bio Protection\BASVC.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: Služba Windows Media Player Network Sharing (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7285 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files (x86)\Fingerprint Sensor\AtService.exe"
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
winlogon.exe
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files (x86)\Acer Bio Protection\CompPtcVUI.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\LSI SoftModem\agr64svc.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Acer Bio Protection\BASVC.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
C:\Windows\system32\SearchIndexer.exe /Embedding
WLIDSvcM.exe 1848
"taskhost.exe"
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
"C:\Program Files (x86)\Windows Live\Mail\wlmail.exe"
"C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe" -Embedding
"C:\Program Files (x86)\ICQ7.7\ICQ.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE"
"C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe"
"taskhost.exe"
"C:\Program Files (x86)\20Dollars2Surf\20dollars2surf.exe"
"C:\Users\popino\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\popino\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Inactive/Prefetch/ContentPrefetchPrerender2/PrerenderFromOmniboxHeuristic/ConservativeAlgorithm/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=4252.04142480.691431988 /prefetch:3
C:\Windows\system32\rundll32.exe "C:\Users\popino\AppData\Local\Google\Chrome\APPLIC~1\160912~1.75\gcswf32.dll",BrokerMain browser=chrome
"C:\Users\popino\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\popino\AppData\Local\Google\Chrome\Application\16.0.912.75\gcswf32.dll" --lang=cs --channel=4252.05675540.34776547 --flash-broker=4600 /prefetch:4
"C:\Windows\regedit.exe"
"C:\Users\popino\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1964065576-2339917071-4016889289-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1964065576-2339917071-4016889289-1001UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\popino\AppData\Roaming\Mozilla\Firefox\Profiles\umew6gaa.default

prefs.js - "browser.startup.homepage" - "www.seznam.cz"
prefs.js - "keyword.URL" - "http://search.sweetim.com/search.asp?src=2&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\popino\AppData\Roaming\Mozilla\Firefox\Profiles\umew6gaa.default\extensions\
{77d2ed30-4cd2-11e0-b8af-0800200c9a66}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-01-01 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-01-01 42272]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-12-31 1220392]
""= []
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2011-09-22 4035152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-11-10 3514176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\popino\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-31 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files (x86)\ICQ7.7\ICQ.exe [2012-01-20 127040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSpeedUp]
C:\Program Files (x86)\Zrychleni Pocitace\PCSpeedUp.lnk []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PrnStatusMX]
C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [2007-08-29 1238528]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDVCPL]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-10-17 13307496]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2011-12-09 5486464]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM]
C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VitaKeyPdtWzd]
C:\Program Files (x86)\Acer Bio Protection\PdtWzd.exe [2009-09-05 3570176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^20Dollars2Surf.lnk]
C:\PROGRA~2\20DOLL~1\20DOLL~1.EXE [2010-01-28 89088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Aura.lnk]
C:\Windows\8SKINP~1\Aura\Aura.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TaskbarUserTile.lnk]
C:\Windows\8SKINP~1\TASKBA~1\UserTile.exe []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2011-12-31 1112072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=C:\Program Files (x86)\Acer Bio Protection\PwdFilterV64

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"ShutdownSessionTimeout"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-01-22 12:23:40 ----D---- C:\Users\popino\AppData\Roaming\SUPERAntiSpyware.com
2012-01-22 12:23:11 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2012-01-22 12:23:11 ----D---- C:\Program Files\SUPERAntiSpyware
2012-01-22 10:46:46 ----D---- C:\rsit
2012-01-20 20:00:04 ----D---- C:\Program Files\Unlocker
2012-01-20 18:25:21 ----D---- C:\Program Files\trend micro
2012-01-20 18:12:23 ----D---- C:\ProgramData\Spybot - Search & Destroy
2012-01-20 16:50:21 ----D---- C:\Program Files (x86)\ICQ7.7
2012-01-20 15:58:05 ----D---- C:\Users\popino\AppData\Roaming\Malwarebytes
2012-01-20 15:58:00 ----A---- C:\Windows\SYSWOW64\drivers\mbamswissarmy.sys
2012-01-20 15:57:59 ----D---- C:\ProgramData\Malwarebytes
2012-01-20 15:57:56 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-01-20 15:57:56 ----A---- C:\Windows\system32\drivers\mbam.sys
2012-01-18 14:00:10 ----D---- C:\Users\popino\AppData\Roaming\Skype
2012-01-18 14:00:03 ----RD---- C:\Program Files (x86)\Skype
2012-01-18 13:59:58 ----D---- C:\ProgramData\Skype
2012-01-15 15:16:33 ----D---- C:\ProgramData\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}
2012-01-15 14:35:34 ----D---- C:\Program Files (x86)\AnalogX
2012-01-15 14:21:49 ----D---- C:\Users\popino\AppData\Roaming\Reviversoft
2012-01-11 14:25:32 ----A---- C:\Windows\system32\schannel.dll
2012-01-11 14:25:31 ----A---- C:\Windows\SYSWOW64\schannel.dll
2012-01-11 14:25:31 ----A---- C:\Windows\system32\lsasrv.dll
2012-01-11 14:25:31 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2012-01-11 14:25:31 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2012-01-11 14:25:31 ----A---- C:\Windows\system32\drivers\cng.sys
2012-01-11 14:25:30 ----A---- C:\Windows\system32\lsass.exe
2012-01-11 14:25:29 ----A---- C:\Windows\SYSWOW64\webio.dll
2012-01-11 14:25:29 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2012-01-11 14:25:29 ----A---- C:\Windows\SYSWOW64\secur32.dll
2012-01-11 14:25:29 ----A---- C:\Windows\system32\webio.dll
2012-01-11 14:25:29 ----A---- C:\Windows\system32\sspisrv.dll
2012-01-11 14:25:29 ----A---- C:\Windows\system32\sspicli.dll
2012-01-11 14:25:29 ----A---- C:\Windows\system32\secur32.dll
2012-01-11 10:03:23 ----A---- C:\Windows\system32\quartz.dll
2012-01-11 10:03:22 ----A---- C:\Windows\SYSWOW64\quartz.dll
2012-01-11 10:03:22 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2012-01-11 10:03:22 ----A---- C:\Windows\system32\qdvd.dll
2012-01-11 10:03:16 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2012-01-11 10:03:16 ----A---- C:\Windows\system32\ntdll.dll
2012-01-11 10:03:00 ----A---- C:\Windows\SYSWOW64\packager.dll
2012-01-11 10:03:00 ----A---- C:\Windows\system32\packager.dll
2012-01-09 14:26:04 ----D---- C:\Users\popino\AppData\Roaming\abgx360
2012-01-09 12:59:36 ----D---- C:\Program Files (x86)\abgx360
2012-01-09 09:41:44 ----D---- C:\Program Files (x86)\Bar
2012-01-08 19:23:41 ----D---- C:\Users\popino\AppData\Roaming\ESET
2012-01-08 19:21:22 ----D---- C:\ProgramData\ESET
2012-01-08 19:21:22 ----D---- C:\Program Files\ESET
2012-01-08 16:57:48 ----D---- C:\Program Files (x86)\20Dollars2Surf
2012-01-06 12:40:16 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2012-01-06 12:31:40 ----D---- C:\Program Files (x86)\Microsoft Works
2012-01-06 12:30:31 ----D---- C:\Windows\PCHEALTH
2012-01-06 12:28:51 ----D---- C:\Program Files\Microsoft Office
2012-01-06 12:28:44 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2012-01-06 12:28:01 ----D---- C:\Program Files (x86)\Microsoft Office
2012-01-06 12:26:36 ----RHD---- C:\MSOCache
2012-01-05 15:10:42 ----A---- C:\Windows\system32\FNTCACHE.DAT
2012-01-04 20:21:50 ----D---- C:\NVIDIA
2012-01-04 20:11:53 ----D---- C:\Windows\SYSWOW64\RTCOM
2012-01-04 20:11:53 ----D---- C:\Program Files\Realtek
2012-01-04 20:11:08 ----A---- C:\Windows\system32\R4EEP64A.dll
2012-01-04 20:11:08 ----A---- C:\Windows\system32\R4EEL64A.dll
2012-01-04 20:11:08 ----A---- C:\Windows\system32\R4EEG64A.dll
2012-01-04 20:11:08 ----A---- C:\Windows\system32\R4EED64A.dll
2012-01-04 20:11:08 ----A---- C:\Windows\system32\R4EEA64A.dll
2012-01-04 19:53:19 ----A---- C:\Windows\system32\NETwNr64.dll
2012-01-04 19:53:19 ----A---- C:\Windows\system32\NETwNc64.dll
2012-01-04 19:53:19 ----A---- C:\Windows\system32\drivers\NETwNs64.sys
2012-01-04 19:42:57 ----D---- C:\Program Files\LSI SoftModem
2012-01-04 19:41:40 ----D---- C:\ProgramData\NVIDIA
2012-01-04 19:41:35 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2012-01-04 19:41:23 ----A---- C:\Windows\system32\nvvsvc.exe
2012-01-04 19:41:23 ----A---- C:\Windows\system32\nvsvcr.dll
2012-01-04 19:41:23 ----A---- C:\Windows\system32\nvsvc64.dll
2012-01-04 19:41:23 ----A---- C:\Windows\system32\nvshext.dll
2012-01-04 19:41:23 ----A---- C:\Windows\system32\nvmctray.dll
2012-01-04 19:41:23 ----A---- C:\Windows\system32\nvhotkey.dll
2012-01-04 19:41:23 ----A---- C:\Windows\system32\nvcpl.dll
2012-01-04 19:41:23 ----A---- C:\Windows\system32\easyupdatusapiu64.dll
2012-01-04 19:40:27 ----D---- C:\ProgramData\NVIDIA Corporation
2012-01-04 19:40:18 ----D---- C:\Program Files\NVIDIA Corporation
2012-01-04 19:39:39 ----A---- C:\Windows\system32\nvgenco64.dll
2012-01-04 19:39:37 ----A---- C:\Windows\system32\nvdispco64.dll
2012-01-04 19:39:33 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2012-01-04 19:39:29 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2012-01-04 19:39:29 ----A---- C:\Windows\system32\OpenCL.dll
2012-01-04 19:39:28 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2012-01-04 19:39:28 ----A---- C:\Windows\system32\nvwgf2umx.dll
2012-01-04 19:39:27 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2012-01-04 19:39:27 ----A---- C:\Windows\system32\nvoglv64.dll
2012-01-04 19:39:25 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2012-01-04 19:39:25 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2012-01-04 19:39:25 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2012-01-04 19:39:25 ----A---- C:\Windows\system32\nvd3dumx.dll
2012-01-04 19:39:25 ----A---- C:\Windows\system32\nvcuvid.dll
2012-01-04 19:39:25 ----A---- C:\Windows\system32\nvcuvenc.dll
2012-01-04 19:39:24 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2012-01-04 19:39:24 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2012-01-04 19:39:24 ----A---- C:\Windows\system32\nvcuda.dll
2012-01-04 19:39:22 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2012-01-04 19:39:22 ----A---- C:\Windows\system32\nvcompiler.dll
2012-01-04 19:39:22 ----A---- C:\Windows\system32\nvapi64.dll
2012-01-04 19:07:20 ----D---- C:\Driver
2012-01-04 18:43:27 ----D---- C:\Program Files (x86)\Reviversoft
2012-01-04 17:36:20 ----D---- C:\AuthLog
2012-01-04 17:36:19 ----A---- C:\Windows\system32\VMC3KAPI.dll
2012-01-04 17:36:19 ----A---- C:\Windows\system32\VCryptAPI.dll
2012-01-04 17:35:43 ----D---- C:\Program Files (x86)\Acer Bio Protection
2012-01-04 17:28:03 ----D---- C:\Program Files (x86)\Fingerprint Sensor
2012-01-04 14:27:53 ----D---- C:\Users\popino\AppData\Roaming\OpenCandy
2012-01-04 14:22:35 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2012-01-04 14:22:35 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2012-01-04 14:22:35 ----A---- C:\Windows\system32\XAudio2_7.dll
2012-01-04 14:22:35 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2012-01-04 14:22:34 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2012-01-04 14:22:34 ----A---- C:\Windows\system32\xactengine3_7.dll
2012-01-04 14:22:33 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2012-01-04 14:22:33 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2012-01-04 14:22:31 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2012-01-04 14:22:31 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2012-01-04 14:22:31 ----A---- C:\Windows\system32\d3dx11_43.dll
2012-01-04 14:22:31 ----A---- C:\Windows\system32\d3dcsx_43.dll
2012-01-04 14:22:30 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2012-01-04 14:22:30 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2012-01-04 14:22:30 ----A---- C:\Windows\system32\D3DX9_43.dll
2012-01-04 14:22:30 ----A---- C:\Windows\system32\d3dx10_43.dll
2012-01-04 14:22:29 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2012-01-04 14:22:29 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2012-01-04 14:22:29 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2012-01-04 14:22:29 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2012-01-04 14:22:29 ----A---- C:\Windows\system32\XAudio2_6.dll
2012-01-04 14:22:29 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2012-01-04 14:22:29 ----A---- C:\Windows\system32\xactengine3_6.dll
2012-01-04 14:22:29 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2012-01-04 14:22:28 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2012-01-04 14:22:28 ----A---- C:\Windows\system32\XAudio2_5.dll
2012-01-04 14:22:27 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2012-01-04 14:22:27 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2012-01-04 14:22:27 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2012-01-04 14:22:27 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2012-01-04 14:22:27 ----A---- C:\Windows\system32\xactengine3_5.dll
2012-01-04 14:22:27 ----A---- C:\Windows\system32\d3dx11_42.dll
2012-01-04 14:22:27 ----A---- C:\Windows\system32\d3dcsx_42.dll
2012-01-04 14:22:27 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2012-01-04 14:22:26 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2012-01-04 14:22:26 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2012-01-04 14:22:26 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2012-01-04 14:22:26 ----A---- C:\Windows\system32\D3DX9_42.dll
2012-01-04 14:22:26 ----A---- C:\Windows\system32\D3DX9_41.dll
2012-01-04 14:22:26 ----A---- C:\Windows\system32\d3dx10_42.dll
2012-01-04 14:22:26 ----A---- C:\Windows\system32\d3dx10_41.dll
2012-01-04 14:22:26 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2012-01-04 14:22:25 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2012-01-04 14:22:25 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2012-01-04 14:22:24 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2012-01-04 14:22:24 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2012-01-04 14:22:24 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2012-01-04 14:22:24 ----A---- C:\Windows\system32\XAudio2_4.dll
2012-01-04 14:22:24 ----A---- C:\Windows\system32\xactengine3_4.dll
2012-01-04 14:22:24 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2012-01-04 14:22:23 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2012-01-04 14:22:23 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2012-01-04 14:22:23 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2012-01-04 14:22:23 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2012-01-04 14:22:23 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2012-01-04 14:22:23 ----A---- C:\Windows\system32\XAudio2_3.dll
2012-01-04 14:22:23 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2012-01-04 14:22:23 ----A---- C:\Windows\system32\D3DX9_40.dll
2012-01-04 14:22:23 ----A---- C:\Windows\system32\d3dx10_40.dll
2012-01-04 14:22:23 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2012-01-04 14:22:22 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2012-01-04 14:22:22 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2012-01-04 14:22:22 ----A---- C:\Windows\system32\xactengine3_3.dll
2012-01-04 14:22:22 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2012-01-04 14:22:21 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2012-01-04 14:22:21 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2012-01-04 14:22:21 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2012-01-04 14:22:21 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2012-01-04 14:22:21 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2012-01-04 14:22:21 ----A---- C:\Windows\system32\XAudio2_2.dll
2012-01-04 14:22:21 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2012-01-04 14:22:21 ----A---- C:\Windows\system32\xactengine3_2.dll
2012-01-04 14:22:21 ----A---- C:\Windows\system32\d3dx10_39.dll
2012-01-04 14:22:21 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2012-01-04 14:22:20 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2012-01-04 14:22:20 ----A---- C:\Windows\system32\D3DX9_39.dll
2012-01-04 14:22:19 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2012-01-04 14:22:19 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2012-01-04 14:22:19 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2012-01-04 14:22:19 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2012-01-04 14:22:19 ----A---- C:\Windows\system32\XAudio2_1.dll
2012-01-04 14:22:19 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2012-01-04 14:22:19 ----A---- C:\Windows\system32\xactengine3_1.dll
2012-01-04 14:22:19 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2012-01-04 14:22:18 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2012-01-04 14:22:18 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2012-01-04 14:22:18 ----A---- C:\Windows\system32\d3dx10_38.dll
2012-01-04 14:22:18 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2012-01-04 14:22:17 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2012-01-04 14:22:17 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2012-01-04 14:22:17 ----A---- C:\Windows\system32\XAudio2_0.dll
2012-01-04 14:22:17 ----A---- C:\Windows\system32\D3DX9_38.dll
2012-01-04 14:22:16 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2012-01-04 14:22:16 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2012-01-04 14:22:16 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2012-01-04 14:22:16 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2012-01-04 14:22:16 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2012-01-04 14:22:16 ----A---- C:\Windows\system32\xactengine3_0.dll
2012-01-04 14:22:16 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2012-01-04 14:22:16 ----A---- C:\Windows\system32\D3DX9_37.dll
2012-01-04 14:22:16 ----A---- C:\Windows\system32\d3dx10_37.dll
2012-01-04 14:22:16 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2012-01-04 14:22:15 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2012-01-04 14:22:15 ----A---- C:\Windows\system32\xactengine2_10.dll
2012-01-04 14:22:03 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2012-01-04 14:22:03 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2012-01-04 14:22:03 ----A---- C:\Windows\system32\d3dx10_36.dll
2012-01-04 14:22:03 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2012-01-04 14:22:02 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2012-01-04 14:22:02 ----A---- C:\Windows\system32\d3dx9_36.dll
2012-01-04 14:22:00 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2012-01-04 14:22:00 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2012-01-04 14:22:00 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2012-01-04 14:22:00 ----A---- C:\Windows\system32\xactengine2_9.dll
2012-01-04 14:22:00 ----A---- C:\Windows\system32\d3dx10_35.dll
2012-01-04 14:22:00 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2012-01-04 14:21:59 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2012-01-04 14:21:59 ----A---- C:\Windows\system32\d3dx9_35.dll
2012-01-04 14:21:57 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2012-01-04 14:21:57 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2012-01-04 14:21:57 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2012-01-04 14:21:57 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2012-01-04 14:21:57 ----A---- C:\Windows\system32\xactengine2_8.dll
2012-01-04 14:21:57 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2012-01-04 14:21:57 ----A---- C:\Windows\system32\d3dx10_34.dll
2012-01-04 14:21:57 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2012-01-04 14:21:56 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2012-01-04 14:21:56 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2012-01-04 14:21:56 ----A---- C:\Windows\system32\xinput1_3.dll
2012-01-04 14:21:56 ----A---- C:\Windows\system32\d3dx9_34.dll
2012-01-04 14:21:52 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2012-01-04 14:21:52 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2012-01-04 14:21:52 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2012-01-04 14:21:52 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2012-01-04 14:21:52 ----A---- C:\Windows\system32\xactengine2_7.dll
2012-01-04 14:21:52 ----A---- C:\Windows\system32\d3dx9_33.dll
2012-01-04 14:21:52 ----A---- C:\Windows\system32\d3dx10_33.dll
2012-01-04 14:21:52 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2012-01-04 14:21:51 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2012-01-04 14:21:51 ----A---- C:\Windows\system32\xactengine2_6.dll
2012-01-04 14:21:50 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2012-01-04 14:21:50 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2012-01-04 14:21:50 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2012-01-04 14:21:50 ----A---- C:\Windows\system32\xactengine2_5.dll
2012-01-04 14:21:50 ----A---- C:\Windows\system32\d3dx9_32.dll
2012-01-04 14:21:50 ----A---- C:\Windows\system32\d3dx10.dll
2012-01-04 14:21:49 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2012-01-04 14:21:49 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2012-01-04 14:21:49 ----A---- C:\Windows\system32\xactengine2_4.dll
2012-01-04 14:21:49 ----A---- C:\Windows\system32\x3daudio1_1.dll
2012-01-04 14:21:48 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2012-01-04 14:21:48 ----A---- C:\Windows\system32\d3dx9_31.dll
2012-01-04 14:21:46 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2012-01-04 14:21:46 ----A---- C:\Windows\system32\xactengine2_3.dll
2012-01-04 14:21:45 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2012-01-04 14:21:45 ----A---- C:\Windows\system32\xinput1_2.dll
2012-01-04 14:21:42 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2012-01-04 14:21:42 ----A---- C:\Windows\system32\xactengine2_2.dll
2012-01-04 14:21:41 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2012-01-04 14:21:41 ----A---- C:\Windows\system32\xinput1_1.dll
2012-01-04 14:21:39 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2012-01-04 14:21:39 ----A---- C:\Windows\system32\xactengine2_1.dll
2012-01-04 14:21:31 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2012-01-04 14:21:31 ----A---- C:\Windows\system32\d3dx9_30.dll
2012-01-04 14:21:27 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2012-01-04 14:21:27 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2012-01-04 14:21:27 ----A---- C:\Windows\system32\xactengine2_0.dll
2012-01-04 14:21:27 ----A---- C:\Windows\system32\x3daudio1_0.dll
2012-01-04 14:21:26 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2012-01-04 14:21:26 ----A---- C:\Windows\system32\d3dx9_29.dll
2012-01-04 14:21:25 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2012-01-04 14:21:25 ----A---- C:\Windows\system32\d3dx9_28.dll
2012-01-04 14:21:24 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2012-01-04 14:21:24 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2012-01-04 14:21:24 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2012-01-04 14:21:24 ----A---- C:\Windows\system32\d3dx9_27.dll
2012-01-04 14:21:24 ----A---- C:\Windows\system32\d3dx9_26.dll
2012-01-04 14:21:24 ----A---- C:\Windows\system32\d3dx9_25.dll
2012-01-04 14:21:21 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2012-01-04 14:21:21 ----A---- C:\Windows\system32\d3dx9_24.dll
2012-01-04 14:15:28 ----HD---- C:\Windows\msdownld.tmp
2012-01-04 14:15:10 ----D---- C:\Windows\SYSWOW64\directx
2012-01-04 13:36:58 ----D---- C:\Program Files\Hewlett-Packard
2012-01-04 13:36:55 ----A---- C:\Windows\system32\ZTAG.DLL
2012-01-04 13:36:55 ----A---- C:\Windows\system32\ZSPOOL.DLL
2012-01-04 13:36:54 ----A---- C:\Windows\system32\ZIMF.DLL
2012-01-04 13:36:51 ----A---- C:\Windows\system32\HPMCoSetup.dll
2012-01-04 13:36:51 ----A---- C:\Windows\system32\HPIPMXRes.dll
2012-01-04 13:36:51 ----A---- C:\Windows\system32\HPIPMX.dll
2012-01-04 13:36:45 ----A---- C:\Windows\system32\CP1215LM.DLL
2012-01-04 13:36:45 ----A---- C:\Windows\system32\CP1215LI.DLL
2012-01-04 13:36:44 ----A---- C:\Windows\system32\CP1215EWS.dll
2012-01-03 16:12:12 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2012-01-03 15:42:22 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2012-01-03 15:42:16 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2012-01-03 15:41:58 ----D---- C:\Users\popino\AppData\Roaming\DAEMON Tools Lite
2012-01-03 15:41:56 ----D---- C:\ProgramData\DAEMON Tools Lite
2012-01-03 14:56:23 ----D---- C:\ProgramData\Microsoft Help
2012-01-03 14:23:47 ----A---- C:\Windows\Disney.ini
2012-01-03 14:23:43 ----A---- C:\Windows\SYSWOW64\LMRTREND.dll
2012-01-03 14:23:42 ----A---- C:\Windows\SYSWOW64\LMRT.dll
2012-01-03 14:23:40 ----A---- C:\Windows\SYSWOW64\dxtmsft3.dll
2012-01-03 14:23:37 ----A---- C:\Windows\SYSWOW64\unam4ie.exe
2012-01-03 14:23:37 ----A---- C:\Windows\SYSWOW64\strmdll.dll
2012-01-03 14:23:28 ----A---- C:\Windows\SYSWOW64\vidx16.dll
2012-01-03 14:23:28 ----A---- C:\Windows\SYSWOW64\danim.dll
2012-01-03 14:23:26 ----A---- C:\Windows\SYSWOW64\qcut.dll
2012-01-03 14:23:15 ----A---- C:\Windows\SYSWOW64\w95inf32.dll
2012-01-03 14:23:15 ----A---- C:\Windows\SYSWOW64\w95inf16.dll
2012-01-03 13:39:57 ----D---- C:\Windows\system32\Macromed
2012-01-03 08:28:06 ----A---- C:\Windows\SYSWOW64\abgx360.exe
2012-01-02 22:50:56 ----AD---- C:\ProgramData\TEMP
2012-01-02 21:46:55 ----D---- C:\Users\popino\AppData\Roaming\Smart PC Solutions
2012-01-02 20:20:14 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2012-01-02 19:31:01 ----D---- C:\Windows\system32\appmgmt
2012-01-02 13:02:21 ----D---- C:\Program Files (x86)\Microsoft.NET
2012-01-02 11:51:47 ----D---- C:\Windows\system32\SPReview
2012-01-02 11:51:34 ----D---- C:\Windows\system32\EventProviders
2012-01-02 10:26:35 ----A---- C:\Windows\system32\netfxperf.dll
2012-01-02 10:26:35 ----A---- C:\Windows\system32\dfshim.dll
2012-01-02 10:26:27 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2012-01-02 10:26:22 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2012-01-02 10:26:22 ----A---- C:\Windows\system32\mstscax.dll
2012-01-02 10:26:22 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2012-01-02 10:26:21 ----A---- C:\Windows\system32\d3d10warp.dll
2012-01-02 10:26:18 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2012-01-02 10:26:14 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2012-01-02 10:26:14 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2012-01-02 10:26:14 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2012-01-02 10:26:14 ----A---- C:\Windows\system32\tssrvlic.dll
2012-01-02 10:26:14 ----A---- C:\Windows\system32\sysmain.dll
2012-01-02 10:26:14 ----A---- C:\Windows\system32\RDVGHelper.exe
2012-01-02 10:26:13 ----A---- C:\Windows\system32\rdpcorets.dll
2012-01-02 10:26:12 ----A---- C:\Windows\SYSWOW64\pmcsnap.dll
2012-01-02 10:26:12 ----A---- C:\Windows\system32\MSVidCtl.dll
2012-01-02 10:26:10 ----A---- C:\Windows\system32\wmp.dll
2012-01-02 10:26:08 ----A---- C:\Windows\system32\secproc_isv.dll
2012-01-02 10:26:08 ----A---- C:\Windows\system32\mscoree.dll
2012-01-02 10:26:08 ----A---- C:\Windows\system32\mmcndmgr.dll
2012-01-02 10:26:08 ----A---- C:\Windows\system32\mf.dll
2012-01-02 10:26:07 ----A---- C:\Windows\system32\RMActivate_isv.exe
2012-01-02 10:26:06 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2012-01-02 10:26:06 ----A---- C:\Windows\system32\xpsservices.dll
2012-01-02 10:26:06 ----A---- C:\Windows\system32\secproc.dll
2012-01-02 10:26:06 ----A---- C:\Windows\system32\RMActivate.exe
2012-01-02 10:26:05 ----A---- C:\Windows\SYSWOW64\secproc.dll
2012-01-02 10:26:05 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2012-01-02 10:26:05 ----A---- C:\Windows\system32\rpcrt4.dll
2012-01-02 10:26:04 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2012-01-02 10:26:04 ----A---- C:\Windows\SYSWOW64\PushPrinterConnections.exe
2012-01-02 10:26:04 ----A---- C:\Windows\SYSWOW64\ppcsnap.dll
2012-01-02 10:26:04 ----A---- C:\Windows\system32\schedsvc.dll
2012-01-02 10:26:03 ----A---- C:\Windows\system32\ole32.dll
2012-01-02 10:26:02 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2012-01-02 10:26:02 ----A---- C:\Windows\system32\spwizui.dll
2012-01-02 10:26:01 ----A---- C:\Windows\system32\taskschd.dll
2012-01-02 10:26:01 ----A---- C:\Windows\system32\RacEngn.dll
2012-01-02 10:26:00 ----A---- C:\Windows\SYSWOW64\mf.dll
2012-01-02 10:26:00 ----A---- C:\Windows\system32\wevtsvc.dll
2012-01-02 10:26:00 ----A---- C:\Windows\system32\ExplorerFrame.dll
2012-01-02 10:26:00 ----A---- C:\Windows\system32\diagperf.dll
2012-01-02 10:25:59 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2012-01-02 10:25:59 ----A---- C:\Windows\system32\vssapi.dll
2012-01-02 10:25:59 ----A---- C:\Windows\system32\msxml3.dll
2012-01-02 10:25:59 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2012-01-02 10:25:58 ----A---- C:\Windows\system32\UIRibbon.dll
2012-01-02 10:25:58 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2012-01-02 10:25:58 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2012-01-02 10:25:57 ----A---- C:\Windows\SYSWOW64\wmp.dll
2012-01-02 10:25:56 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2012-01-02 10:25:56 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2012-01-02 10:25:56 ----A---- C:\Windows\system32\WsmSvc.dll
2012-01-02 10:25:56 ----A---- C:\Windows\system32\WMVCORE.DLL
2012-01-02 10:25:55 ----A---- C:\Windows\system32\rdpudd.dll
2012-01-02 10:25:55 ----A---- C:\Windows\system32\rdpdd.dll
2012-01-02 10:25:55 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2012-01-02 10:25:55 ----A---- C:\Windows\system32\PresentationHost.exe
2012-01-02 10:25:54 ----A---- C:\Windows\system32\WinSAT.exe
2012-01-02 10:25:54 ----A---- C:\Windows\system32\spreview.exe
2012-01-02 10:25:54 ----A---- C:\Windows\system32\spinstall.exe
2012-01-02 10:25:54 ----A---- C:\Windows\system32\MPSSVC.dll
2012-01-02 10:25:54 ----A---- C:\Windows\system32\CertEnroll.dll
2012-01-02 10:25:53 ----A---- C:\Windows\system32\WMVDECOD.DLL
2012-01-02 10:25:53 ----A---- C:\Windows\system32\d3d9.dll
2012-01-02 10:25:52 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2012-01-02 10:25:52 ----A---- C:\Windows\system32\SearchFolder.dll
2012-01-02 10:25:52 ----A---- C:\Windows\system32\msxml6.dll
2012-01-02 10:25:52 ----A---- C:\Windows\system32\IKEEXT.DLL
2012-01-02 10:25:51 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2012-01-02 10:25:50 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2012-01-02 10:25:50 ----A---- C:\Windows\system32\VSSVC.exe
2012-01-02 10:25:50 ----A---- C:\Windows\system32\gpsvc.dll
2012-01-02 10:25:49 ----A---- C:\Windows\system32\dwmcore.dll
2012-01-02 10:25:49 ----A---- C:\Windows\system32\drivers\http.sys
2012-01-02 10:25:49 ----A---- C:\Windows\system32\dbgeng.dll
2012-01-02 10:25:48 ----A---- C:\Windows\SYSWOW64\rdvgumd32.dll
2012-01-02 10:25:48 ----A---- C:\Windows\system32\drivers\ndis.sys
2012-01-02 10:25:48 ----A---- C:\Windows\system32\crypt32.dll
2012-01-02 10:25:46 ----A---- C:\Windows\SYSWOW64\ole32.dll
2012-01-02 10:25:46 ----A---- C:\Windows\system32\TSWorkspace.dll
2012-01-02 10:25:46 ----A---- C:\Windows\system32\audiosrv.dll
2012-01-02 10:25:46 ----A---- C:\Windows\system32\actxprxy.dll
2012-01-02 10:25:45 ----A---- C:\Windows\system32\termsrv.dll
2012-01-02 10:25:45 ----A---- C:\Windows\system32\qmgr.dll
2012-01-02 10:25:45 ----A---- C:\Windows\system32\gpprefcl.dll
2012-01-02 10:25:44 ----A---- C:\Windows\system32\mstsc.exe
2012-01-02 10:25:43 ----A---- C:\Windows\system32\imapi2fs.dll
2012-01-02 10:25:42 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2012-01-02 10:25:42 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2012-01-02 10:25:42 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2012-01-02 10:25:42 ----A---- C:\Windows\system32\winhttp.dll
2012-01-02 10:25:42 ----A---- C:\Windows\system32\setupapi.dll
2012-01-02 10:25:42 ----A---- C:\Windows\system32\rpcss.dll
2012-01-02 10:25:42 ----A---- C:\Windows\system32\QAGENTRT.DLL
2012-01-02 10:25:42 ----A---- C:\Windows\system32\propsys.dll
2012-01-02 10:25:42 ----A---- C:\Windows\system32\netlogon.dll
2012-01-02 10:25:42 ----A---- C:\Windows\system32\msv1_0.dll
2012-01-02 10:25:42 ----A---- C:\Windows\system32\d3d11.dll
2012-01-02 10:25:41 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2012-01-02 10:25:41 ----A---- C:\Windows\system32\wbengine.exe
2012-01-02 10:25:41 ----A---- C:\Windows\system32\PushPrinterConnections.exe
2012-01-02 10:25:40 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2012-01-02 10:25:40 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2012-01-02 10:25:40 ----A---- C:\Windows\system32\werconcpl.dll
2012-01-02 10:25:40 ----A---- C:\Windows\system32\user32.dll
2012-01-02 10:25:40 ----A---- C:\Windows\system32\taskeng.exe
2012-01-02 10:25:40 ----A---- C:\Windows\system32\odbc32.dll
2012-01-02 10:25:40 ----A---- C:\Windows\system32\authui.dll
2012-01-02 10:25:39 ----A---- C:\Windows\system32\WSDApi.dll
2012-01-02 10:25:39 ----A---- C:\Windows\system32\umrdp.dll
2012-01-02 10:25:39 ----A---- C:\Windows\system32\LSCSHostPolicy.dll
2012-01-02 10:25:39 ----A---- C:\Windows\system32\drivers\tdx.sys
2012-01-02 10:25:39 ----A---- C:\Windows\system32\drivers\netio.sys
2012-01-02 10:25:39 ----A---- C:\Windows\system32\dhcpcore.dll
2012-01-02 10:25:39 ----A---- C:\Windows\system32\certmgr.dll
2012-01-02 10:25:38 ----A---- C:\Windows\SYSWOW64\wer.dll
2012-01-02 10:25:38 ----A---- C:\Windows\SYSWOW64\certcli.dll
2012-01-02 10:25:38 ----A---- C:\Windows\system32\tsmf.dll
2012-01-02 10:25:38 ----A---- C:\Windows\system32\scavengeui.dll
2012-01-02 10:25:38 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2012-01-02 10:25:38 ----A---- C:\Windows\system32\ncsi.dll
2012-01-02 10:25:38 ----A---- C:\Windows\system32\localspl.dll
2012-01-02 10:25:38 ----A---- C:\Windows\system32\drivers\netbt.sys
2012-01-02 10:25:37 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2012-01-02 10:25:37 ----A---- C:\Windows\system32\msdrm.dll
2012-01-02 10:25:36 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2012-01-02 10:25:36 ----A---- C:\Windows\system32\shlwapi.dll
2012-01-02 10:25:36 ----A---- C:\Windows\system32\rdpshell.exe
2012-01-02 10:25:36 ----A---- C:\Windows\system32\netshell.dll
2012-01-02 10:25:36 ----A---- C:\Windows\system32\msdtctm.dll
2012-01-02 10:25:36 ----A---- C:\Windows\system32\framedynos.dll
2012-01-02 10:25:35 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2012-01-02 10:25:35 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2012-01-02 10:25:35 ----A---- C:\Windows\system32\wmicmiplugin.dll
2012-01-02 10:25:35 ----A---- C:\Windows\system32\winlogon.exe
2012-01-02 10:25:35 ----A---- C:\Windows\system32\netcfgx.dll
2012-01-02 10:25:34 ----A---- C:\Windows\system32\ws2_32.dll
2012-01-02 10:25:34 ----A---- C:\Windows\system32\wmpps.dll
2012-01-02 10:25:34 ----A---- C:\Windows\system32\usp10.dll
2012-01-02 10:25:34 ----A---- C:\Windows\system32\nlasvc.dll
2012-01-02 10:25:34 ----A---- C:\Windows\system32\lsm.exe
2012-01-02 10:25:34 ----A---- C:\Windows\system32\dxgi.dll
2012-01-02 10:25:34 ----A---- C:\Windows\system32\drivers\csc.sys
2012-01-02 10:25:34 ----A---- C:\Windows\system32\comdlg32.dll
2012-01-02 10:25:34 ----A---- C:\Windows\system32\appmgr.dll
2012-01-02 10:25:34 ----A---- C:\Windows\system32\apphelp.dll
2012-01-02 10:25:33 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2012-01-02 10:25:33 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2012-01-02 10:25:33 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2012-01-02 10:25:33 ----A---- C:\Windows\system32\Query.dll
2012-01-02 10:25:33 ----A---- C:\Windows\system32\mswsock.dll
2012-01-02 10:25:33 ----A---- C:\Windows\system32\drvstore.dll
2012-01-02 10:25:33 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2012-01-02 10:25:32 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2012-01-02 10:25:32 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2012-01-02 10:25:32 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2012-01-02 10:25:32 ----A---- C:\Windows\system32\wpdshext.dll
2012-01-02 10:25:32 ----A---- C:\Windows\system32\Vault.dll
2012-01-02 10:25:32 ----A---- C:\Windows\system32\samsrv.dll
2012-01-02 10:25:32 ----A---- C:\Windows\system32\QAGENT.DLL
2012-01-02 10:25:32 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2012-01-02 10:25:32 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2012-01-02 10:25:32 ----A---- C:\Windows\system32\cmd.exe
2012-01-02 10:25:32 ----A---- C:\Windows\system32\BFE.DLL
2012-01-02 10:25:32 ----A---- C:\Windows\system32\azroles.dll
2012-01-02 10:25:31 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2012-01-02 10:25:31 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2012-01-02 10:25:31 ----A---- C:\Windows\system32\win32spl.dll
2012-01-02 10:25:31 ----A---- C:\Windows\system32\lpksetup.exe
2012-01-02 10:25:30 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2012-01-02 10:25:30 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2012-01-02 10:25:30 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2012-01-02 10:25:30 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2012-01-02 10:25:30 ----A---- C:\Windows\system32\WebClnt.dll
2012-01-02 10:25:30 ----A---- C:\Windows\system32\rdpclip.exe
2012-01-02 10:25:30 ----A---- C:\Windows\system32\cscsvc.dll
2012-01-02 10:25:29 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2012-01-02 10:25:29 ----A---- C:\Windows\SYSWOW64\Query.dll
2012-01-02 10:25:29 ----A---- C:\Windows\system32\WindowsCodecs.dll
2012-01-02 10:25:29 ----A---- C:\Windows\system32\sxs.dll
2012-01-02 10:25:29 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2012-01-02 10:25:28 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2012-01-02 10:25:28 ----A---- C:\Windows\SYSWOW64\upnp.dll
2012-01-02 10:25:28 ----A---- C:\Windows\SYSWOW64\gpprefcl.dll
2012-01-02 10:25:28 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2012-01-02 10:25:28 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2012-01-02 10:25:28 ----A---- C:\Windows\system32\Wldap32.dll
2012-01-02 10:25:28 ----A---- C:\Windows\system32\taskcomp.dll
2012-01-02 10:25:28 ----A---- C:\Windows\system32\pnidui.dll
2012-01-02 10:25:28 ----A---- C:\Windows\system32\mfds.dll
2012-01-02 10:25:28 ----A---- C:\Windows\system32\mcbuilder.exe
2012-01-02 10:25:28 ----A---- C:\Windows\system32\ipsmsnap.dll
2012-01-02 10:25:28 ----A---- C:\Windows\system32\hgprint.dll
2012-01-02 10:25:28 ----A---- C:\Windows\system32\cscobj.dll
2012-01-02 10:25:27 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2012-01-02 10:25:27 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2012-01-02 10:25:27 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2012-01-02 10:25:27 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2012-01-02 10:25:27 ----A---- C:\Windows\system32\wuaueng.dll
2012-01-02 10:25:27 ----A---- C:\Windows\system32\webservices.dll
2012-01-02 10:25:27 ----A---- C:\Windows\system32\SessEnv.dll
2012-01-02 10:25:27 ----A---- C:\Windows\system32\rdpendp.dll
2012-01-02 10:25:26 ----A---- C:\Windows\SYSWOW64\usp10.dll
2012-01-02 10:25:26 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2012-01-02 10:25:26 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2012-01-02 10:25:26 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2012-01-02 10:25:26 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2012-01-02 10:25:26 ----A---- C:\Windows\system32\winsta.dll
2012-01-02 10:25:26 ----A---- C:\Windows\system32\sqlsrv32.dll
2012-01-02 10:25:26 ----A---- C:\Windows\system32\spoolsv.exe
2012-01-02 10:25:26 ----A---- C:\Windows\system32\gdi32.dll
2012-01-02 10:25:26 ----A---- C:\Windows\system32\fveapi.dll
2012-01-02 10:25:26 ----A---- C:\Windows\system32\drivers\msrpc.sys
2012-01-02 10:25:26 ----A---- C:\Windows\system32\dot3api.dll
2012-01-02 10:25:25 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe
2012-01-02 10:25:25 ----A---- C:\Windows\system32\prncache.dll
2012-01-02 10:25:25 ----A---- C:\Windows\system32\mcmde.dll
2012-01-02 10:25:25 ----A---- C:\Windows\system32\drivers\volsnap.sys
2012-01-02 10:25:24 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2012-01-02 10:25:24 ----A---- C:\Windows\system32\WMNetMgr.dll
2012-01-02 10:25:24 ----A---- C:\Windows\system32\wlanpref.dll
2012-01-02 10:25:24 ----A---- C:\Windows\system32\schtasks.exe
2012-01-02 10:25:23 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2012-01-02 10:25:23 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2012-01-02 10:25:23 ----A---- C:\Windows\SYSWOW64\userenv.dll
2012-01-02 10:25:23 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2012-01-02 10:25:23 ----A---- C:\Windows\system32\wuapi.dll
2012-01-02 10:25:23 ----A---- C:\Windows\system32\wintrust.dll
2012-01-02 10:25:23 ----A---- C:\Windows\system32\vpnike.dll
2012-01-02 10:25:23 ----A---- C:\Windows\system32\userenv.dll
2012-01-02 10:25:23 ----A---- C:\Windows\system32\drivers\rdbss.sys
2012-01-02 10:25:22 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2012-01-02 10:25:22 ----A---- C:\Windows\system32\tspubwmi.dll
2012-01-02 10:25:22 ----A---- C:\Windows\system32\photowiz.dll
2012-01-02 10:25:22 ----A---- C:\Windows\system32\IPSECSVC.DLL
2012-01-02 10:25:22 ----A---- C:\Windows\system32\FXSSVC.exe
2012-01-02 10:25:22 ----A---- C:\Windows\system32\framedyn.dll
2012-01-02 10:25:22 ----A---- C:\Windows\system32\evr.dll
2012-01-02 10:25:22 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2012-01-02 10:25:22 ----A---- C:\Windows\system32\AudioSes.dll
2012-01-02 10:25:21 ----A---- C:\Windows\SYSWOW64\cmd.exe
2012-01-02 10:25:21 ----A---- C:\Windows\system32\wmpmde.dll
2012-01-02 10:25:21 ----A---- C:\Windows\system32\SyncCenter.dll
2012-01-02 10:25:21 ----A---- C:\Windows\system32\sppobjs.dll
2012-01-02 10:25:21 ----A---- C:\Windows\system32\aepdu.dll
2012-01-02 10:25:20 ----A---- C:\Windows\system32\WMPEncEn.dll
2012-01-02 10:25:20 ----A---- C:\Windows\system32\wmpeffects.dll
2012-01-02 10:25:20 ----A---- C:\Windows\system32\tscfgwmi.dll
2012-01-02 10:25:20 ----A---- C:\Windows\system32\srvsvc.dll
2012-01-02 10:25:20 ----A---- C:\Windows\system32\shsvcs.dll
2012-01-02 10:25:20 ----A---- C:\Windows\system32\rdpinit.exe
2012-01-02 10:25:20 ----A---- C:\Windows\system32\mfreadwrite.dll
2012-01-02 10:25:20 ----A---- C:\Windows\system32\aeinv.dll
2012-01-02 10:25:19 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2012-01-02 10:25:19 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2012-01-02 10:25:19 ----A---- C:\Windows\system32\vmicsvc.exe
2012-01-02 10:25:19 ----A---- C:\Windows\system32\fde.dll
2012-01-02 10:25:18 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2012-01-02 10:25:18 ----A---- C:\Windows\SYSWOW64\user32.dll
2012-01-02 10:25:18 ----A---- C:\Windows\SYSWOW64\rdpendp.dll
2012-01-02 10:25:18 ----A---- C:\Windows\SYSWOW64\propsys.dll
2012-01-02 10:25:18 ----A---- C:\Windows\SYSWOW64\mfds.dll
2012-01-02 10:25:18 ----A---- C:\Windows\system32\WinSATAPI.dll
2012-01-02 10:25:18 ----A---- C:\Windows\system32\stobject.dll
2012-01-02 10:25:18 ----A---- C:\Windows\system32\netdiagfx.dll
2012-01-02 10:25:18 ----A---- C:\Windows\system32\localsec.dll
2012-01-02 10:25:18 ----A---- C:\Windows\system32\iphlpsvc.dll
2012-01-02 10:25:18 ----A---- C:\Windows\system32\imapi2.dll
2012-01-02 10:25:18 ----A---- C:\Windows\system32\drivers\vmbus.sys
2012-01-02 10:25:18 ----A---- C:\Windows\system32\drivers\udfs.sys
2012-01-02 10:25:18 ----A---- C:\Windows\system32\credui.dll
2012-01-02 10:25:18 ----A---- C:\Windows\system32\cdd.dll
2012-01-02 10:25:18 ----A---- C:\Windows\system32\bcryptprimitives.dll
2012-01-02 10:25:17 ----A---- C:\Windows\system32\inetpp.dll
2012-01-02 10:25:17 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2012-01-02 10:25:16 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2012-01-02 10:25:16 ----A---- C:\Windows\SYSWOW64\azroles.dll
2012-01-02 10:25:16 ----A---- C:\Windows\SYSWOW64\appmgr.dll
2012-01-02 10:25:16 ----A---- C:\Windows\system32\tcpipcfg.dll
2012-01-02 10:25:16 ----A---- C:\Windows\system32\spp.dll
2012-01-02 10:25:16 ----A---- C:\Windows\system32\QSHVHOST.DLL
2012-01-02 10:25:16 ----A---- C:\Windows\system32\netid.dll
2012-01-02 10:25:16 ----A---- C:\Windows\system32\davclnt.dll
2012-01-02 10:25:16 ----A---- C:\Windows\system32\cscui.dll
2012-01-02 10:25:16 ----A---- C:\Windows\system32\biocpl.dll
2012-01-02 10:25:15 ----A---- C:\Windows\system32\scansetting.dll
2012-01-02 10:25:15 ----A---- C:\Windows\system32\profsvc.dll
2012-01-02 10:25:15 ----A---- C:\Windows\system32\printui.dll
2012-01-02 10:25:15 ----A---- C:\Windows\system32\mspbda.dll
2012-01-02 10:25:15 ----A---- C:\Windows\system32\msinfo32.exe
2012-01-02 10:25:15 ----A---- C:\Windows\system32\gameux.dll
2012-01-02 10:25:14 ----A---- C:\Windows\SYSWOW64\themeui.dll
2012-01-02 10:25:14 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2012-01-02 10:25:14 ----A---- C:\Windows\SYSWOW64\spp.dll
2012-01-02 10:25:14 ----A---- C:\Windows\SYSWOW64\credui.dll
2012-01-02 10:25:14 ----A---- C:\Windows\system32\pla.dll
2012-01-02 10:25:14 ----A---- C:\Windows\system32\PhotoScreensaver.scr
2012-01-02 10:25:14 ----A---- C:\Windows\splwow64.exe
2012-01-02 10:25:13 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2012-01-02 10:25:13 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2012-01-02 10:25:13 ----A---- C:\Windows\system32\wusa.exe
2012-01-02 10:25:13 ----A---- C:\Windows\system32\wiaservc.dll
2012-01-02 10:25:13 ----A---- C:\Windows\system32\vds.exe
2012-01-02 10:25:13 ----A---- C:\Windows\system32\msdri.dll
2012-01-02 10:25:13 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2012-01-02 10:25:13 ----A---- C:\Windows\system32\aitagent.exe
2012-01-02 10:25:12 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2012-01-02 10:25:12 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2012-01-02 10:25:12 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2012-01-02 10:25:12 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2012-01-02 10:25:12 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2012-01-02 10:25:12 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2012-01-02 10:25:12 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2012-01-02 10:25:12 ----A---- C:\Windows\system32\XpsRasterService.dll
2012-01-02 10:25:12 ----A---- C:\Windows\system32\wisptis.exe
2012-01-02 10:25:12 ----A---- C:\Windows\system32\rpchttp.dll
2012-01-02 10:25:12 ----A---- C:\Windows\system32\PkgMgr.exe
2012-01-02 10:25:12 ----A---- C:\Windows\system32\mscms.dll
2012-01-02 10:25:12 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2012-01-02 10:25:12 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2012-01-02 10:25:12 ----A---- C:\Windows\system32\drivers\pci.sys
2012-01-02 10:25:12 ----A---- C:\Windows\system32\cryptsvc.dll
2012-01-02 10:25:12 ----A---- C:\Windows\system32\AdmTmpl.dll
2012-01-02 10:25:11 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2012-01-02 10:25:11 ----A---- C:\Windows\SYSWOW64\evr.dll
2012-01-02 10:25:11 ----A---- C:\Windows\system32\ocsetup.exe
2012-01-02 10:25:11 ----A---- C:\Windows\system32\msi.dll
2012-01-02 10:25:10 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2012-01-02 10:25:10 ----A---- C:\Windows\SYSWOW64\calc.exe
2012-01-02 10:25:10 ----A---- C:\Windows\system32\sppwinob.dll
2012-01-02 10:25:10 ----A---- C:\Windows\system32\rdpcore.dll
2012-01-02 10:25:10 ----A---- C:\Windows\system32\ocsetapi.dll
2012-01-02 10:25:10 ----A---- C:\Windows\system32\DXP.dll
2012-01-02 10:25:10 ----A---- C:\Windows\system32\drivers\volmgr.sys
2012-01-02 10:25:10 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2012-01-02 10:25:09 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2012-01-02 10:25:09 ----A---- C:\Windows\system32\wpdbusenum.dll
2012-01-02 10:25:09 ----A---- C:\Windows\system32\ntshrui.dll
2012-01-02 10:25:09 ----A---- C:\Windows\system32\eapp3hst.dll
2012-01-02 10:25:09 ----A---- C:\Windows\system32\drivers\msdsm.sys
2012-01-02 10:25:09 ----A---- C:\Windows\system32\ci.dll
2012-01-02 10:25:08 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2012-01-02 10:25:08 ----A---- C:\Windows\system32\wcncsvc.dll
2012-01-02 10:25:08 ----A---- C:\Windows\system32\upnp.dll
2012-01-02 10:25:08 ----A---- C:\Windows\system32\Robocopy.exe
2012-01-02 10:25:08 ----A---- C:\Windows\system32\mprapi.dll
2012-01-02 10:25:08 ----A---- C:\Windows\system32\eapphost.dll
2012-01-02 10:25:07 ----A---- C:\Windows\SYSWOW64\sxs.dll
2012-01-02 10:25:07 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2012-01-02 10:25:07 ----A---- C:\Windows\system32\t2embed.dll
2012-01-02 10:25:07 ----A---- C:\Windows\system32\drivers\HpSAMD.sys
2012-01-02 10:25:06 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2012-01-02 10:25:06 ----A---- C:\Windows\SYSWOW64\stobject.dll
2012-01-02 10:25:06 ----A---- C:\Windows\SYSWOW64\netshell.dll
2012-01-02 10:25:06 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2012-01-02 10:25:06 ----A---- C:\Windows\system32\thumbcache.dll
2012-01-02 10:25:06 ----A---- C:\Windows\system32\scecli.dll
2012-01-02 10:25:06 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2012-01-02 10:25:06 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2012-01-02 10:25:06 ----A---- C:\Windows\system32\hal.dll
2012-01-02 10:25:06 ----A---- C:\Windows\system32\DxpTaskSync.dll
2012-01-02 10:25:06 ----A---- C:\Windows\system32\dwmredir.dll
2012-01-02 10:25:06 ----A---- C:\Windows\system32\drivers\fvevol.sys
2012-01-02 10:25:05 ----A---- C:\Windows\SYSWOW64\prncache.dll
2012-01-02 10:25:05 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2012-01-02 10:25:05 ----A---- C:\Windows\system32\themeui.dll
2012-01-02 10:25:05 ----A---- C:\Windows\system32\puiobj.dll
2012-01-02 10:25:05 ----A---- C:\Windows\system32\nlaapi.dll
2012-01-02 10:25:05 ----A---- C:\Windows\system32\msasn1.dll
2012-01-02 10:25:05 ----A---- C:\Windows\system32\iasrad.dll
2012-01-02 10:25:05 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys
2012-01-02 10:25:05 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2012-01-02 10:25:04 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2012-01-02 10:25:04 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2012-01-02 10:25:04 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2012-01-02 10:25:04 ----A---- C:\Windows\SYSWOW64\printui.dll
2012-01-02 10:25:04 ----A---- C:\Windows\SYSWOW64\net1.exe
2012-01-02 10:25:04 ----A---- C:\Windows\SYSWOW64\msi.dll
2012-01-02 10:25:04 ----A---- C:\Windows\system32\scrptadm.dll
2012-01-02 10:25:04 ----A---- C:\Windows\system32\onex.dll
2012-01-02 10:25:04 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2012-01-02 10:25:04 ----A---- C:\Windows\system32\aaclient.dll
2012-01-02 10:25:03 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2012-01-02 10:25:03 ----A---- C:\Windows\system32\wdc.dll
2012-01-02 10:25:02 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2012-01-02 10:25:02 ----A---- C:\Windows\system32\wlangpui.dll
2012-01-02 10:25:02 ----A---- C:\Windows\system32\wiadefui.dll
2012-01-02 10:25:02 ----A---- C:\Windows\system32\VAN.dll
2012-01-02 10:25:02 ----A---- C:\Windows\system32\StructuredQuery.dll
2012-01-02 10:25:02 ----A---- C:\Windows\system32\sdengin2.dll
2012-01-02 10:25:02 ----A---- C:\Windows\system32\scesrv.dll
2012-01-02 10:25:02 ----A---- C:\Windows\system32\rasmans.dll
2012-01-02 10:25:02 ----A---- C:\Windows\system32\netcenter.dll
2012-01-02 10:25:02 ----A---- C:\Windows\system32\msftedit.dll
2012-01-02 10:25:02 ----A---- C:\Windows\system32\dskquoui.dll
2012-01-02 10:25:01 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2012-01-02 10:25:01 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2012-01-02 10:25:01 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2012-01-02 10:25:01 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2012-01-02 10:25:01 ----A---- C:\Windows\system32\wucltux.dll
2012-01-02 10:25:01 ----A---- C:\Windows\system32\wscapi.dll
2012-01-02 10:25:01 ----A---- C:\Windows\system32\SndVol.exe
2012-01-02 10:25:01 ----A---- C:\Windows\system32\samcli.dll
2012-01-02 10:25:01 ----A---- C:\Windows\system32\regapi.dll
2012-01-02 10:25:01 ----A---- C:\Windows\system32\iasacct.dll
2012-01-02 10:25:01 ----A---- C:\Windows\system32\drivers\termdd.sys
2012-01-02 10:25:01 ----A---- C:\Windows\system32\drivers\partmgr.sys
2012-01-02 10:25:01 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2012-01-02 10:25:00 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2012-01-02 10:25:00 ----A---- C:\Windows\SYSWOW64\webservices.dll
2012-01-02 10:25:00 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2012-01-02 10:25:00 ----A---- C:\Windows\SYSWOW64\scrptadm.dll
2012-01-02 10:25:00 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2012-01-02 10:25:00 ----A---- C:\Windows\SYSWOW64\pnidui.dll
2012-01-02 10:25:00 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2012-01-02 10:25:00 ----A---- C:\Windows\SYSWOW64\fde.dll
2012-01-02 10:25:00 ----A---- C:\Windows\system32\WUDFSvc.dll
2012-01-02 10:25:00 ----A---- C:\Windows\system32\wksprt.exe
2012-01-02 10:25:00 ----A---- C:\Windows\system32\taskhost.exe
2012-01-02 10:25:00 ----A---- C:\Windows\system32\TabSvc.dll
2012-01-02 10:25:00 ----A---- C:\Windows\system32\srchadmin.dll
2012-01-02 10:25:00 ----A---- C:\Windows\system32\setupcl.exe
2012-01-02 10:25:00 ----A---- C:\Windows\system32\rastls.dll
2012-01-02 10:25:00 ----A---- C:\Windows\system32\QUTIL.DLL
2012-01-02 10:25:00 ----A---- C:\Windows\system32\drivers\msahci.sys
2012-01-02 10:25:00 ----A---- C:\Windows\system32\consent.exe
2012-01-02 10:24:59 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2012-01-02 10:24:59 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2012-01-02 10:24:59 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll
2012-01-02 10:24:59 ----A---- C:\Windows\system32\drivers\acpi.sys
2012-01-02 10:24:58 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2012-01-02 10:24:58 ----A---- C:\Windows\SYSWOW64\pla.dll
2012-01-02 10:24:58 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2012-01-02 10:24:58 ----A---- C:\Windows\SYSWOW64\cscobj.dll
2012-01-02 10:24:58 ----A---- C:\Windows\system32\tapisrv.dll
2012-01-02 10:24:58 ----A---- C:\Windows\system32\netiohlp.dll
2012-01-02 10:24:58 ----A---- C:\Windows\system32\msconfig.exe
2012-01-02 10:24:58 ----A---- C:\Windows\system32\mimefilt.dll
2012-01-02 10:24:58 ----A---- C:\Windows\system32\ListSvc.dll
2012-01-02 10:24:58 ----A---- C:\Windows\system32\hgcpl.dll
2012-01-02 10:24:58 ----A---- C:\Windows\system32\drivers\raspptp.sys
2012-01-02 10:24:57 ----A---- C:\Windows\SYSWOW64\winsta.dll
2012-01-02 10:24:57 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2012-01-02 10:24:57 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2012-01-02 10:24:57 ----A---- C:\Windows\system32\lsmproxy.dll
2012-01-02 10:24:57 ----A---- C:\Windows\system32\fdeploy.dll
2012-01-02 10:24:57 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2012-01-02 10:24:57 ----A---- C:\Windows\system32\drivers\ks.sys
2012-01-02 10:24:57 ----A---- C:\Windows\system32\clusapi.dll
2012-01-02 10:24:57 ----A---- C:\Windows\system32\basecsp.dll
2012-01-02 10:24:57 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2012-01-02 10:24:56 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2012-01-02 10:24:56 ----A---- C:\Windows\SYSWOW64\imapi2.dll
2012-01-02 10:24:56 ----A---- C:\Windows\SYSWOW64\gameux.dll
2012-01-02 10:24:56 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll
2012-01-02 10:24:56 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2012-01-02 10:24:56 ----A---- C:\Windows\system32\riched20.dll
2012-01-02 10:24:56 ----A---- C:\Windows\system32\mtxclu.dll
2012-01-02 10:24:56 ----A---- C:\Windows\system32\dnscmmc.dll
2012-01-02 10:24:55 ----A---- C:\Windows\SYSWOW64\WMPEncEn.dll
2012-01-02 10:24:55 ----A---- C:\Windows\SYSWOW64\onex.dll
2012-01-02 10:24:55 ----A---- C:\Windows\system32\sharemediacpl.dll
2012-01-02 10:24:55 ----A---- C:\Windows\system32\RpcRtRemote.dll
2012-01-02 10:24:55 ----A---- C:\Windows\system32\powercpl.dll
2012-01-02 10:24:55 ----A---- C:\Windows\system32\logoncli.dll
2012-01-02 10:24:54 ----A---- C:\Windows\SYSWOW64\winmm.dll
2012-01-02 10:24:54 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2012-01-02 10:24:54 ----A---- C:\Windows\SYSWOW64\samcli.dll
2012-01-02 10:24:54 ----A---- C:\Windows\SYSWOW64\proquota.exe
2012-01-02 10:24:54 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2012-01-02 10:24:54 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2012-01-02 10:24:54 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2012-01-02 10:24:54 ----A---- C:\Windows\SYSWOW64\autochk.exe
2012-01-02 10:24:54 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2012-01-02 10:24:54 ----A---- C:\Windows\system32\wkssvc.dll
2012-01-02 10:24:54 ----A---- C:\Windows\system32\vpnikeapi.dll
2012-01-02 10:24:54 ----A---- C:\Windows\system32\themecpl.dll
2012-01-02 10:24:54 ----A---- C:\Windows\system32\sppcomapi.dll
2012-01-02 10:24:54 ----A---- C:\Windows\system32\SensorsCpl.dll
2012-01-02 10:24:54 ----A---- C:\Windows\system32\netjoin.dll
2012-01-02 10:24:54 ----A---- C:\Windows\system32\nci.dll
2012-01-02 10:24:54 ----A---- C:\Windows\system32\Narrator.exe
2012-01-02 10:24:54 ----A---- C:\Windows\system32\Faultrep.dll
2012-01-02 10:24:54 ----A---- C:\Windows\system32\eudcedit.exe
2012-01-02 10:24:54 ----A---- C:\Windows\system32\comctl32.dll
2012-01-02 10:24:53 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2012-01-02 10:24:53 ----A---- C:\Windows\SYSWOW64\regapi.dll
2012-01-02 10:24:53 ----A---- C:\Windows\SYSWOW64\msutb.dll
2012-01-02 10:24:53 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2012-01-02 10:24:53 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2012-01-02 10:24:53 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2012-01-02 10:24:53 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2012-01-02 10:24:53 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2012-01-02 10:24:53 ----A---- C:\Windows\system32\nshipsec.dll
2012-01-02 10:24:53 ----A---- C:\Windows\system32\cabview.dll
2012-01-02 10:24:53 ----A---- C:\Windows\system32\autochk.exe
2012-01-02 10:24:53 ----A---- C:\Windows\system32\autofmt.exe
2012-01-02 10:24:53 ----A---- C:\Windows\system32\autoconv.exe
2012-01-02 10:24:52 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2012-01-02 10:24:52 ----A---- C:\Windows\SYSWOW64\srchadmin.dll
2012-01-02 10:24:52 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2012-01-02 10:24:52 ----A---- C:\Windows\SYSWOW64\powercpl.dll
2012-01-02 10:24:52 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2012-01-02 10:24:52 ----A---- C:\Windows\system32\wpd_ci.dll
2012-01-02 10:24:52 ----A---- C:\Windows\system32\shsetup.dll
2012-01-02 10:24:52 ----A---- C:\Windows\system32\fms.dll
2012-01-02 10:24:52 ----A---- C:\Windows\system32\audiodg.exe
2012-01-02 10:24:51 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2012-01-02 10:24:51 ----A---- C:\Windows\system32\bcdsrv.dll
2012-01-02 10:24:50 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2012-01-02 10:24:50 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2012-01-02 10:24:50 ----A---- C:\Windows\system32\sdclt.exe
2012-01-02 10:24:49 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2012-01-02 10:24:49 ----A---- C:\Windows\system32\wwanconn.dll
2012-01-02 10:24:49 ----A---- C:\Windows\system32\wlanui.dll
2012-01-02 10:24:49 ----A---- C:\Windows\system32\prntvpt.dll
2012-01-02 10:24:49 ----A---- C:\Windows\system32\mscorier.dll
2012-01-02 10:24:49 ----A---- C:\Windows\system32\drivers\winusb.sys
2012-01-02 10:24:49 ----A---- C:\Windows\system32\drivers\wanarp.sys
2012-01-02 10:24:49 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2012-01-02 10:24:49 ----A---- C:\Windows\system32\drivers\scsiport.sys
2012-01-02 10:24:48 ----A---- C:\Windows\SYSWOW64\wdc.dll
2012-01-02 10:24:48 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL
2012-01-02 10:24:48 ----A---- C:\Windows\SYSWOW64\netid.dll
2012-01-02 10:24:48 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2012-01-02 10:24:48 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2012-01-02 10:24:48 ----A---- C:\Windows\system32\SmiEngine.dll
2012-01-02 10:24:48 ----A---- C:\Windows\system32\rdpsign.exe
2012-01-02 10:24:48 ----A---- C:\Windows\system32\qedit.dll
2012-01-02 10:24:48 ----A---- C:\Windows\system32\mprddm.dll
2012-01-02 10:24:48 ----A---- C:\Windows\system32\mblctr.exe
2012-01-02 10:24:48 ----A---- C:\Windows\system32\fontext.dll
2012-01-02 10:24:48 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2012-01-02 10:24:48 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2012-01-02 10:24:48 ----A---- C:\Windows\system32\drivers\hidclass.sys
2012-01-02 10:24:48 ----A---- C:\Windows\system32\dps.dll
2012-01-02 10:24:48 ----A---- C:\Windows\system32\Display.dll
2012-01-02 10:24:48 ----A---- C:\Windows\system32\credssp.dll
2012-01-02 10:24:48 ----A---- C:\Windows\system32\batmeter.dll
2012-01-02 10:24:48 ----A---- C:\Windows\system32\AxInstSv.dll
2012-01-02 10:24:47 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2012-01-02 10:24:47 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2012-01-02 10:24:47 ----A---- C:\Windows\SYSWOW64\Vault.dll
2012-01-02 10:24:47 ----A---- C:\Windows\SYSWOW64\untfs.dll
2012-01-02 10:24:47 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2012-01-02 10:24:47 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2012-01-02 10:24:47 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll
2012-01-02 10:24:47 ----A---- C:\Windows\SYSWOW64\rastls.dll
2012-01-02 10:24:47 ----A---- C:\Windows\SYSWOW64\nci.dll
2012-01-02 10:24:47 ----A---- C:\Windows\system32\wmpsrcwp.dll
2012-01-02 10:24:47 ----A---- C:\Windows\system32\DiagCpl.dll
2012-01-02 10:24:46 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2012-01-02 10:24:46 ----A---- C:\Windows\system32\wpccpl.dll
2012-01-02 10:24:46 ----A---- C:\Windows\system32\usercpl.dll
2012-01-02 10:24:46 ----A---- C:\Windows\system32\sppsvc.exe
2012-01-02 10:24:46 ----A---- C:\Windows\system32\rtutils.dll
2012-01-02 10:24:46 ----A---- C:\Windows\system32\provsvc.dll
2012-01-02 10:24:46 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2012-01-02 10:24:46 ----A---- C:\Windows\system32\bootres.dll
2012-01-02 10:24:45 ----A---- C:\Windows\SYSWOW64\taskmgr.exe
2012-01-02 10:24:45 ----A---- C:\Windows\SYSWOW64\DxpTaskSync.dll
2012-01-02 10:24:45 ----A---- C:\Windows\system32\SndVolSSO.dll
2012-01-02 10:24:45 ----A---- C:\Windows\system32\rasppp.dll
2012-01-02 10:24:45 ----A---- C:\Windows\system32\drivers\winhv.sys
2012-01-02 10:24:44 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2012-01-02 10:24:44 ----A---- C:\Windows\SYSWOW64\Display.dll
2012-01-02 10:24:44 ----A---- C:\Windows\system32\dxdiagn.dll
2012-01-02 10:24:44 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2012-01-02 10:24:44 ----A---- C:\Windows\system32\dot3cfg.dll
2012-01-02 10:24:43 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2012-01-02 10:24:43 ----A---- C:\Windows\SYSWOW64\userinit.exe
2012-01-02 10:24:43 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2012-01-02 10:24:43 ----A---- C:\Windows\system32\taskmgr.exe
2012-01-02 10:24:43 ----A---- C:\Windows\system32\shdocvw.dll
2012-01-02 10:24:43 ----A---- C:\Windows\system32\prnfldr.dll
2012-01-02 10:24:43 ----A---- C:\Windows\system32\hbaapi.dll
2012-01-02 10:24:42 ----A---- C:\Windows\SYSWOW64\termmgr.dll
2012-01-02 10:24:42 ----A---- C:\Windows\SYSWOW64\eudcedit.exe

popino
Návštěvník
Návštěvník
Příspěvky: 56
Registrován: 06 Črv 2005 19:22

Re: Prosím o kontrolu logu

#4 Příspěvek od popino »

2012-01-02 10:24:42 ----A---- C:\Windows\system32\proquota.exe
2012-01-02 10:24:42 ----A---- C:\Windows\system32\pdh.dll
2012-01-02 10:24:42 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2012-01-02 10:24:42 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2012-01-02 10:24:41 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2012-01-02 10:24:41 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2012-01-02 10:24:41 ----A---- C:\Windows\system32\drivers\ataport.sys
2012-01-02 10:24:40 ----A---- C:\Windows\SYSWOW64\wiadefui.dll
2012-01-02 10:24:40 ----A---- C:\Windows\SYSWOW64\sppcomapi.dll
2012-01-02 10:24:40 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2012-01-02 10:24:40 ----A---- C:\Windows\SYSWOW64\rasppp.dll
2012-01-02 10:24:40 ----A---- C:\Windows\SYSWOW64\logoncli.dll
2012-01-02 10:24:40 ----A---- C:\Windows\SYSWOW64\cabview.dll
2012-01-02 10:24:40 ----A---- C:\Windows\system32\userinit.exe
2012-01-02 10:24:40 ----A---- C:\Windows\system32\untfs.dll
2012-01-02 10:24:40 ----A---- C:\Windows\system32\rdpcorekmts.dll
2012-01-02 10:24:40 ----A---- C:\Windows\system32\accessibilitycpl.dll
2012-01-02 10:24:39 ----A---- C:\Windows\SYSWOW64\themecpl.dll
2012-01-02 10:24:39 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll
2012-01-02 10:24:39 ----A---- C:\Windows\SYSWOW64\FirewallControlPanel.dll
2012-01-02 10:24:39 ----A---- C:\Windows\system32\slui.exe
2012-01-02 10:24:38 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2012-01-02 10:24:38 ----A---- C:\Windows\SYSWOW64\dnscmmc.dll
2012-01-02 10:24:38 ----A---- C:\Windows\system32\zipfldr.dll
2012-01-02 10:24:38 ----A---- C:\Windows\system32\drivers\storvsc.sys
2012-01-02 10:24:37 ----A---- C:\Windows\system32\msieftp.dll
2012-01-02 10:24:37 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2012-01-02 10:24:36 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2012-01-02 10:24:36 ----A---- C:\Windows\SYSWOW64\scecli.dll
2012-01-02 10:24:36 ----A---- C:\Windows\SYSWOW64\PhotoScreensaver.scr
2012-01-02 10:24:36 ----A---- C:\Windows\SYSWOW64\mscories.dll
2012-01-02 10:24:36 ----A---- C:\Windows\SYSWOW64\mscms.dll
2012-01-02 10:24:36 ----A---- C:\Windows\SYSWOW64\mprddm.dll
2012-01-02 10:24:36 ----A---- C:\Windows\SYSWOW64\localsec.dll
2012-01-02 10:24:36 ----A---- C:\Windows\SYSWOW64\hgcpl.dll
2012-01-02 10:24:36 ----A---- C:\Windows\SYSWOW64\fontext.dll
2012-01-02 10:24:36 ----A---- C:\Windows\system32\sud.dll
2012-01-02 10:24:36 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2012-01-02 10:24:36 ----A---- C:\Windows\system32\dot3svc.dll
2012-01-02 10:24:36 ----A---- C:\Windows\system32\DeviceCenter.dll
2012-01-02 10:24:35 ----A---- C:\Windows\SYSWOW64\wlanui.dll
2012-01-02 10:24:35 ----A---- C:\Windows\SYSWOW64\usercpl.dll
2012-01-02 10:24:35 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll
2012-01-02 10:24:35 ----A---- C:\Windows\SYSWOW64\qedit.dll
2012-01-02 10:24:35 ----A---- C:\Windows\SYSWOW64\PerfCenterCPL.dll
2012-01-02 10:24:35 ----A---- C:\Windows\SYSWOW64\iasacct.dll
2012-01-02 10:24:35 ----A---- C:\Windows\system32\twext.dll
2012-01-02 10:24:35 ----A---- C:\Windows\system32\taskbarcpl.dll
2012-01-02 10:24:35 ----A---- C:\Windows\system32\srcore.dll
2012-01-02 10:24:35 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2012-01-02 10:24:35 ----A---- C:\Windows\system32\networkmap.dll
2012-01-02 10:24:35 ----A---- C:\Windows\system32\cryptui.dll
2012-01-02 10:24:35 ----A---- C:\Windows\system32\ActionCenter.dll
2012-01-02 10:24:34 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2012-01-02 10:24:34 ----A---- C:\Windows\SYSWOW64\w32tm.exe
2012-01-02 10:24:34 ----A---- C:\Windows\SYSWOW64\VAN.dll
2012-01-02 10:24:34 ----A---- C:\Windows\SYSWOW64\spwizeng.dll
2012-01-02 10:24:34 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2012-01-02 10:24:34 ----A---- C:\Windows\SYSWOW64\prntvpt.dll
2012-01-02 10:24:34 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2012-01-02 10:24:34 ----A---- C:\Windows\SYSWOW64\MSAC3ENC.DLL
2012-01-02 10:24:34 ----A---- C:\Windows\SYSWOW64\fdeploy.dll
2012-01-02 10:24:34 ----A---- C:\Windows\SYSWOW64\batmeter.dll
2012-01-02 10:24:34 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2012-01-02 10:24:34 ----A---- C:\Windows\SYSWOW64\accessibilitycpl.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\uxlib.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\tzutil.exe
2012-01-02 10:24:34 ----A---- C:\Windows\system32\systemcpl.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\syncui.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\sisbkup.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\sdcpl.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\recovery.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\recdisc.exe
2012-01-02 10:24:34 ----A---- C:\Windows\system32\rdpwsx.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\OobeFldr.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\netplwiz.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\isoburn.exe
2012-01-02 10:24:34 ----A---- C:\Windows\system32\httpapi.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\efscore.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\dsuiext.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\cca.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\bcdedit.exe
2012-01-02 10:24:34 ----A---- C:\Windows\system32\azroleui.dll
2012-01-02 10:24:34 ----A---- C:\Windows\system32\asycfilt.dll
2012-01-02 10:24:33 ----A---- C:\Windows\SYSWOW64\networkmap.dll
2012-01-02 10:24:33 ----A---- C:\Windows\SYSWOW64\netjoin.dll
2012-01-02 10:24:33 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2012-01-02 10:24:33 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2012-01-02 10:24:33 ----A---- C:\Windows\SYSWOW64\adsldp.dll
2012-01-02 10:24:33 ----A---- C:\Windows\system32\wlanmsm.dll
2012-01-02 10:24:33 ----A---- C:\Windows\system32\sysclass.dll
2012-01-02 10:24:33 ----A---- C:\Windows\system32\shwebsvc.dll
2012-01-02 10:24:33 ----A---- C:\Windows\system32\sdrsvc.dll
2012-01-02 10:24:33 ----A---- C:\Windows\system32\ncryptui.dll
2012-01-02 10:24:33 ----A---- C:\Windows\system32\fvecpl.dll
2012-01-02 10:24:33 ----A---- C:\Windows\system32\drivers\rdpdr.sys
2012-01-02 10:24:33 ----A---- C:\Windows\system32\drivers\mpio.sys
2012-01-02 10:24:33 ----A---- C:\Windows\system32\certcli.dll
2012-01-02 10:24:33 ----A---- C:\Windows\system32\autoplay.dll
2012-01-02 10:24:33 ----A---- C:\Windows\system32\appinfo.dll
2012-01-02 10:24:33 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\wusa.exe
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\syncui.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\sud.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\sisbkup.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\prnfldr.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\OnLineIDCpl.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\MediaMetadataHandler.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\ifsutil.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\iasrad.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\ftp.exe
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\efscore.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\dot3cfg.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\credssp.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\autoplay.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\ActionCenterCPL.dll
2012-01-02 10:24:32 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\wwanprotdim.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\wmdrmsdk.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\vdsutil.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\tsgqec.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\termmgr.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\ssText3d.scr
2012-01-02 10:24:32 ----A---- C:\Windows\system32\srvcli.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\sqlcese30.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\spwizeng.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\slwga.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\sethc.exe
2012-01-02 10:24:32 ----A---- C:\Windows\system32\rstrui.exe
2012-01-02 10:24:32 ----A---- C:\Windows\system32\ReAgent.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\rdpd3d.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\ntlanman.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\msvidc32.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\msscp.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\MFPlay.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\iyuv_32.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\iTVData.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\iprtrmgr.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\drmmgrtn.dll
2012-01-02 10:24:32 ----A---- C:\Windows\system32\drivers\vmstorfl.sys
2012-01-02 10:24:32 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2012-01-02 10:24:32 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\sethc.exe
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\riched20.dll
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\ntlanman.dll
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\dskquoui.dll
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2012-01-02 10:24:31 ----A---- C:\Windows\SYSWOW64\activeds.dll
2012-01-02 10:24:31 ----A---- C:\Windows\system32\wavemsp.dll
2012-01-02 10:24:31 ----A---- C:\Windows\system32\srrstr.dll
2012-01-02 10:24:31 ----A---- C:\Windows\system32\sppnp.dll
2012-01-02 10:24:31 ----A---- C:\Windows\system32\ntprint.dll
2012-01-02 10:24:31 ----A---- C:\Windows\system32\nslookup.exe
2012-01-02 10:24:31 ----A---- C:\Windows\system32\NAPHLPR.DLL
2012-01-02 10:24:31 ----A---- C:\Windows\system32\msiexec.exe
2012-01-02 10:24:31 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2012-01-02 10:24:31 ----A---- C:\Windows\system32\certprop.dll
2012-01-02 10:24:31 ----A---- C:\Windows\system32\bcdboot.exe
2012-01-02 10:24:31 ----A---- C:\Windows\system32\acppage.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\wvc.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\wtsapi32.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\wmpsrcwp.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\wavemsp.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\tzutil.exe
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\twext.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\provsvc.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\PkgMgr.exe
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\ocsetup.exe
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\nshipsec.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\mstask.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\migisol.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\isoburn.exe
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\httpapi.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\fms.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\dsuiext.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\dpx.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\dot3ui.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\dfrgui.exe
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2012-01-02 10:24:30 ----A---- C:\Windows\SYSWOW64\AdmTmpl.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\wvc.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\wuwebv.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\wsqmcons.exe
2012-01-02 10:24:30 ----A---- C:\Windows\system32\wsnmp32.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\wmpdxm.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\wmdrmdev.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\wkscli.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\WinSCard.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\WerFaultSecure.exe
2012-01-02 10:24:30 ----A---- C:\Windows\system32\TSpkg.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\remotepg.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\PresentationSettings.exe
2012-01-02 10:24:30 ----A---- C:\Windows\system32\networkexplorer.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\net1.exe
2012-01-02 10:24:30 ----A---- C:\Windows\system32\msyuv.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\mfps.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\ftp.exe
2012-01-02 10:24:30 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2012-01-02 10:24:30 ----A---- C:\Windows\system32\dfrgui.exe
2012-01-02 10:24:30 ----A---- C:\Windows\system32\cdosys.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\cabinet.dll
2012-01-02 10:24:30 ----A---- C:\Windows\system32\blackbox.dll
2012-01-02 10:24:29 ----A---- C:\Windows\twain_32.dll
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\WPDShServiceObj.dll
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\uxlib.dll
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\ssText3d.scr
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\slwga.dll
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\setupugc.exe
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\qcap.dll
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\qasf.dll
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\nslookup.exe
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\msvfw32.dll
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\DevicePairingFolder.dll
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2012-01-02 10:24:29 ----A---- C:\Windows\SYSWOW64\audiodev.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\WUDFPlatform.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\wmpshell.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2012-01-02 10:24:29 ----A---- C:\Windows\system32\unimdmat.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2012-01-02 10:24:29 ----A---- C:\Windows\system32\tsbyuv.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\seclogon.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\Ribbons.scr
2012-01-02 10:24:29 ----A---- C:\Windows\system32\rdpencom.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\perfmon.exe
2012-01-02 10:24:29 ----A---- C:\Windows\system32\OpcServices.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\Mystify.scr
2012-01-02 10:24:29 ----A---- C:\Windows\system32\muifontsetup.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\msrle32.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\mapistub.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\mapi32.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\iscsium.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\ifsutil.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\drivers\umbus.sys
2012-01-02 10:24:29 ----A---- C:\Windows\system32\diskraid.exe
2012-01-02 10:24:29 ----A---- C:\Windows\system32\d3d10level9.dll
2012-01-02 10:24:29 ----A---- C:\Windows\system32\Bubbles.scr
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\wpdwcn.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\wmpdxm.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\wimserv.exe
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\vpnikeapi.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\vdsbas.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\UserAccountControlSettings.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\runonce.exe
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\remotepg.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\rdpencom.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\raschap.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\QUTIL.DLL
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\perfmon.exe
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\onexui.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\ocsetapi.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\networkexplorer.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\NAPCRYPT.DLL
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\msscp.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\logagent.exe
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\iTVData.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\input.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\dxdiagn.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\diskraid.exe
2012-01-02 10:24:28 ----A---- C:\Windows\SYSWOW64\acppage.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\wpdwcn.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\WMVSDECD.DLL
2012-01-02 10:24:28 ----A---- C:\Windows\system32\WMADMOD.DLL
2012-01-02 10:24:28 ----A---- C:\Windows\system32\wiavideo.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\vdsbas.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\umb.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\tlscsp.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\syssetup.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\runonce.exe
2012-01-02 10:24:28 ----A---- C:\Windows\system32\raschap.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\qasf.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\nltest.exe
2012-01-02 10:24:28 ----A---- C:\Windows\system32\netutils.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2012-01-02 10:24:28 ----A---- C:\Windows\system32\mstask.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\MdSched.exe
2012-01-02 10:24:28 ----A---- C:\Windows\system32\Mcx2Svc.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\FXSAPI.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2012-01-02 10:24:28 ----A---- C:\Windows\system32\drivers\rmcast.sys
2012-01-02 10:24:28 ----A---- C:\Windows\system32\dbghelp.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\browser.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\AzSqlExt.dll
2012-01-02 10:24:28 ----A---- C:\Windows\system32\ActionQueue.dll
2012-01-02 10:24:28 ----A---- C:\Windows\bfsvc.exe
2012-01-02 10:24:27 ----A---- C:\Windows\SYSWOW64\wmpshell.dll
2012-01-02 10:24:27 ----A---- C:\Windows\SYSWOW64\wmdrmdev.dll
2012-01-02 10:24:27 ----A---- C:\Windows\SYSWOW64\shacct.dll
2012-01-02 10:24:27 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2012-01-02 10:24:27 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2012-01-02 10:24:27 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2012-01-02 10:24:27 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2012-01-02 10:24:27 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2012-01-02 10:24:27 ----A---- C:\Windows\system32\wmdrmnet.dll
2012-01-02 10:24:27 ----A---- C:\Windows\system32\vss_ps.dll
2012-01-02 10:24:27 ----A---- C:\Windows\system32\tabcal.exe
2012-01-02 10:24:27 ----A---- C:\Windows\system32\shacct.dll
2012-01-02 10:24:27 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2012-01-02 10:24:27 ----A---- C:\Windows\system32\logman.exe
2012-01-02 10:24:27 ----A---- C:\Windows\system32\cscapi.dll
2012-01-02 10:24:27 ----A---- C:\Windows\system32\bitsadmin.exe
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\unimdmat.dll
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\sqlcese30.dll
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\rdpd3d.dll
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\PortableDeviceSyncProvider.dll
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\pdh.dll
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\OpcServices.dll
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\ncryptui.dll
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\mprapi.dll
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\lsmproxy.dll
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\logman.exe
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\iscsium.dll
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\Bubbles.scr
2012-01-02 10:24:26 ----A---- C:\Windows\SYSWOW64\bitsadmin.exe
2012-01-02 10:24:26 ----A---- C:\Windows\system32\wudriver.dll
2012-01-02 10:24:26 ----A---- C:\Windows\system32\WPDSp.dll
2012-01-02 10:24:26 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2012-01-02 10:24:26 ----A---- C:\Windows\system32\vmictimeprovider.dll
2012-01-02 10:24:26 ----A---- C:\Windows\system32\spbcd.dll
2012-01-02 10:24:26 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2012-01-02 10:24:26 ----A---- C:\Windows\system32\secproc_ssp.dll
2012-01-02 10:24:26 ----A---- C:\Windows\system32\qdv.dll
2012-01-02 10:24:26 ----A---- C:\Windows\system32\qcap.dll
2012-01-02 10:24:26 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2012-01-02 10:24:26 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2012-01-02 10:24:26 ----A---- C:\Windows\system32\msnetobj.dll
2012-01-02 10:24:26 ----A---- C:\Windows\system32\CscMig.dll
2012-01-02 10:24:25 ----A---- C:\Windows\SYSWOW64\WPDSp.dll
2012-01-02 10:24:25 ----A---- C:\Windows\SYSWOW64\srvcli.dll
2012-01-02 10:24:25 ----A---- C:\Windows\SYSWOW64\Ribbons.scr
2012-01-02 10:24:25 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL
2012-01-02 10:24:25 ----A---- C:\Windows\SYSWOW64\PortableDeviceStatus.dll
2012-01-02 10:24:25 ----A---- C:\Windows\SYSWOW64\olethk32.dll
2012-01-02 10:24:25 ----A---- C:\Windows\system32\fphc.dll
2012-01-02 10:24:25 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2012-01-02 10:24:25 ----A---- C:\Windows\system32\dot3ui.dll
2012-01-02 10:24:24 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2012-01-02 10:24:24 ----A---- C:\Windows\SYSWOW64\Mystify.scr
2012-01-02 10:24:24 ----A---- C:\Windows\system32\takeown.exe
2012-01-02 10:24:24 ----A---- C:\Windows\system32\PnPUnattend.exe
2012-01-02 10:24:23 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2012-01-02 10:24:23 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2012-01-02 10:24:23 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2012-01-02 10:24:23 ----A---- C:\Windows\SYSWOW64\wiavideo.dll
2012-01-02 10:24:23 ----A---- C:\Windows\SYSWOW64\utildll.dll
2012-01-02 10:24:23 ----A---- C:\Windows\SYSWOW64\takeown.exe
2012-01-02 10:24:23 ----A---- C:\Windows\SYSWOW64\mapistub.dll
2012-01-02 10:24:23 ----A---- C:\Windows\SYSWOW64\mapi32.dll
2012-01-02 10:24:23 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2012-01-02 10:24:23 ----A---- C:\Windows\SYSWOW64\fphc.dll
2012-01-02 10:24:23 ----A---- C:\Windows\SYSWOW64\dot3msm.dll
2012-01-02 10:24:23 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2012-01-02 10:24:23 ----A---- C:\Windows\system32\WMPhoto.dll
2012-01-02 10:24:23 ----A---- C:\Windows\system32\vfwwdm32.dll
2012-01-02 10:24:23 ----A---- C:\Windows\system32\EhStorAPI.dll
2012-01-02 10:24:23 ----A---- C:\Windows\system32\amstream.dll
2012-01-02 10:24:22 ----A---- C:\Windows\SYSWOW64\wmdrmnet.dll
2012-01-02 10:24:22 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2012-01-02 10:24:21 ----A---- C:\Windows\SYSWOW64\sppinst.dll
2012-01-02 10:24:21 ----A---- C:\Windows\SYSWOW64\qdv.dll
2012-01-02 10:24:21 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2012-01-02 10:24:21 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2012-01-02 10:24:21 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2012-01-02 10:24:21 ----A---- C:\Windows\SYSWOW64\EhStorAPI.dll
2012-01-02 10:24:21 ----A---- C:\Windows\system32\WUDFx.dll
2012-01-02 10:24:21 ----A---- C:\Windows\system32\WUDFHost.exe
2012-01-02 10:24:21 ----A---- C:\Windows\system32\WavDest.dll
2012-01-02 10:24:21 ----A---- C:\Windows\system32\shimgvw.dll
2012-01-02 10:24:21 ----A---- C:\Windows\system32\QCLIPROV.DLL
2012-01-02 10:24:21 ----A---- C:\Windows\system32\nrpsrv.dll
2012-01-02 10:24:21 ----A---- C:\Windows\system32\netapi32.dll
2012-01-02 10:24:21 ----A---- C:\Windows\system32\iasrecst.dll
2012-01-02 10:24:21 ----A---- C:\Windows\system32\djoin.exe
2012-01-02 10:24:21 ----A---- C:\Windows\system32\cmstp.exe
2012-01-02 10:24:21 ----A---- C:\Windows\system32\CertPolEng.dll
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\wsnmp32.dll
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\vfwwdm32.dll
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\setupcln.dll
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\relog.exe
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\QCLIPROV.DLL
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\pdhui.dll
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\MuiUnattend.exe
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\iasrecst.dll
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\cmstp.exe
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\cca.dll
2012-01-02 10:24:20 ----A---- C:\Windows\SYSWOW64\AzSqlExt.dll
2012-01-02 10:24:20 ----A---- C:\Windows\system32\wuauclt.exe
2012-01-02 10:24:20 ----A---- C:\Windows\system32\sscore.dll
2012-01-02 10:24:20 ----A---- C:\Windows\system32\relog.exe
2012-01-02 10:24:20 ----A---- C:\Windows\system32\mydocs.dll
2012-01-02 10:24:20 ----A---- C:\Windows\system32\MultiDigiMon.exe
2012-01-02 10:24:20 ----A---- C:\Windows\system32\mobsync.exe
2012-01-02 10:24:20 ----A---- C:\Windows\system32\KMSVC.DLL
2012-01-02 10:24:20 ----A---- C:\Windows\system32\iscsicli.exe
2012-01-02 10:24:20 ----A---- C:\Windows\system32\fdProxy.dll
2012-01-02 10:24:20 ----A---- C:\Windows\system32\drivers\pacer.sys
2012-01-02 10:24:20 ----A---- C:\Windows\system32\diskpart.exe
2012-01-02 10:24:20 ----A---- C:\Windows\system32\BWUnpairElevated.dll
2012-01-02 10:24:19 ----A---- C:\Windows\SYSWOW64\wkscli.dll
2012-01-02 10:24:19 ----A---- C:\Windows\SYSWOW64\spbcd.dll
2012-01-02 10:24:19 ----A---- C:\Windows\SYSWOW64\rastapi.dll
2012-01-02 10:24:19 ----A---- C:\Windows\SYSWOW64\netiougc.exe
2012-01-02 10:24:19 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2012-01-02 10:24:19 ----A---- C:\Windows\SYSWOW64\mydocs.dll
2012-01-02 10:24:19 ----A---- C:\Windows\SYSWOW64\iscsicli.exe
2012-01-02 10:24:19 ----A---- C:\Windows\SYSWOW64\diskpart.exe
2012-01-02 10:24:19 ----A---- C:\Windows\SYSWOW64\amstream.dll
2012-01-02 10:24:19 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2012-01-02 10:24:19 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2012-01-02 10:24:19 ----A---- C:\Windows\system32\msdmo.dll
2012-01-02 10:24:19 ----A---- C:\Windows\system32\itircl.dll
2012-01-02 10:24:19 ----A---- C:\Windows\system32\dot3msm.dll
2012-01-02 10:24:19 ----A---- C:\Windows\system32\browcli.dll
2012-01-02 10:24:19 ----A---- C:\Windows\system32\BdeHdCfg.exe
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\wmpps.dll
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\tlscsp.dll
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\syssetup.dll
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\resutils.dll
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\ReAgentc.exe
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\itircl.dll
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\findstr.exe
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2012-01-02 10:24:18 ----A---- C:\Windows\SYSWOW64\CertPolEng.dll
2012-01-02 10:24:18 ----A---- C:\Windows\system32\wuapp.exe
2012-01-02 10:24:18 ----A---- C:\Windows\system32\qprocess.exe
2012-01-02 10:24:18 ----A---- C:\Windows\system32\mciqtz32.dll
2012-01-02 10:24:18 ----A---- C:\Windows\system32\imagehlp.dll
2012-01-02 10:24:18 ----A---- C:\Windows\system32\choice.exe
2012-01-02 10:24:18 ----A---- C:\Windows\system32\FXSTIFF.dll
2012-01-02 10:24:18 ----A---- C:\Windows\system32\findstr.exe
2012-01-02 10:24:18 ----A---- C:\Windows\system32\eappgnui.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\unlodctr.exe
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\sppc.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\spopk.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\shimgvw.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\rdprefdrvapi.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\netutils.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\muifontsetup.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\msdmo.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\mobsync.exe
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\mciqtz32.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\luainstall.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\inetmib1.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2012-01-02 10:24:17 ----A---- C:\Windows\SYSWOW64\cabinet.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\vmstorfltres.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\vmicres.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\tskill.exe
2012-01-02 10:24:17 ----A---- C:\Windows\system32\tsdiscon.exe
2012-01-02 10:24:17 ----A---- C:\Windows\system32\tscon.exe
2012-01-02 10:24:17 ----A---- C:\Windows\system32\sppc.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\spopk.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\schedcli.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\rwinsta.exe
2012-01-02 10:24:17 ----A---- C:\Windows\system32\repair-bde.exe
2012-01-02 10:24:17 ----A---- C:\Windows\system32\RDPENCDD.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\qappsrv.exe
2012-01-02 10:24:17 ----A---- C:\Windows\system32\profprov.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\onexui.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\odbcconf.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\manage-bde.exe
2012-01-02 10:24:17 ----A---- C:\Windows\system32\luainstall.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\logoff.exe
2012-01-02 10:24:17 ----A---- C:\Windows\system32\inetmib1.dll
2012-01-02 10:24:17 ----A---- C:\Windows\system32\chgusr.exe
2012-01-02 10:24:17 ----A---- C:\Windows\system32\chgport.exe
2012-01-02 10:24:17 ----A---- C:\Windows\system32\chglogon.exe
2012-01-02 10:24:17 ----A---- C:\Windows\system32\fixmapi.exe
2012-01-02 10:24:17 ----A---- C:\Windows\system32\drivers\tunnel.sys
2012-01-02 10:24:17 ----A---- C:\Windows\system32\drivers\dfsc.sys
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\wups.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\wsdchngr.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\TRAPI.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\sscore.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\schedcli.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\shgina.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\riched32.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\perfts.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\odbcconf.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\napdsnap.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\imm32.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\elsTrans.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\dsauth.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\browcli.dll
2012-01-02 10:24:16 ----A---- C:\Windows\SYSWOW64\bitsperf.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\wups2.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\wups.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\wshirda.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\wshbth.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\wsdchngr.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\vmbusres.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\UIRibbonRes.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\TRAPI.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\shgina.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\shadow.exe
2012-01-02 10:24:16 ----A---- C:\Windows\system32\reset.exe
2012-01-02 10:24:16 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\query.exe
2012-01-02 10:24:16 ----A---- C:\Windows\system32\napdsnap.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\LogonUI.exe
2012-01-02 10:24:16 ----A---- C:\Windows\system32\change.exe
2012-01-02 10:24:16 ----A---- C:\Windows\system32\FXSUNATD.exe
2012-01-02 10:24:16 ----A---- C:\Windows\system32\FXSMON.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\elsTrans.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\dsauth.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2012-01-02 10:24:16 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2012-01-02 10:24:16 ----A---- C:\Windows\system32\drivers\tdi.sys
2012-01-02 10:24:16 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2012-01-02 10:24:16 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2012-01-02 10:24:16 ----A---- C:\Windows\system32\cscdll.dll
2012-01-02 10:24:16 ----A---- C:\Windows\system32\bitsperf.dll
2012-01-02 10:24:15 ----A---- C:\Windows\SYSWOW64\wshirda.dll
2012-01-02 10:24:15 ----A---- C:\Windows\system32\rdpcfgex.dll
2012-01-02 10:24:15 ----A---- C:\Windows\system32\drivers\hidusb.sys
2012-01-02 10:24:15 ----A---- C:\Windows\system32\drivers\appid.sys
2012-01-02 10:24:14 ----AH---- C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\shunimpl.dll
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\KBDTUQ.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\KBDTUF.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\KBDSG.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\kbdlk41a.dll
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\KBDGR1.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\KBDGKL.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\KBDGEO.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\KBDBLR.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\C_ISCII.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\SYSWOW64\browseui.dll
2012-01-02 10:24:14 ----A---- C:\Windows\system32\wmploc.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\system32\VmdCoinstall.dll
2012-01-02 10:24:14 ----A---- C:\Windows\system32\vmbuspipe.dll
2012-01-02 10:24:14 ----A---- C:\Windows\system32\VmbusCoinstaller.dll
2012-01-02 10:24:14 ----A---- C:\Windows\system32\spwmp.dll
2012-01-02 10:24:14 ----A---- C:\Windows\system32\shunimpl.dll
2012-01-02 10:24:14 ----A---- C:\Windows\system32\riched32.dll
2012-01-02 10:24:14 ----A---- C:\Windows\system32\KBDTUQ.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\system32\KBDTUF.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\system32\KBDSG.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\system32\KBDSF.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\system32\KBDPO.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\system32\KBDNEPR.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\system32\kbdlk41a.dll
2012-01-02 10:24:14 ----A---- C:\Windows\system32\KBDINTAM.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\system32\KBDINBEN.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\system32\KBDGR1.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\system32\KBDGKL.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\system32\IcCoinstall.dll
2012-01-02 10:24:14 ----A---- C:\Windows\system32\dxmasf.dll
2012-01-02 10:24:14 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2012-01-02 10:24:14 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2012-01-02 10:24:14 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2012-01-02 10:24:14 ----A---- C:\Windows\system32\drivers\scfilter.sys
2012-01-02 10:24:14 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2012-01-02 10:24:14 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2012-01-02 10:24:14 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2012-01-02 10:24:14 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2012-01-02 10:24:14 ----A---- C:\Windows\system32\drivers\cdrom.sys
2012-01-02 10:24:14 ----A---- C:\Windows\system32\C_ISCII.DLL
2012-01-02 10:24:14 ----A---- C:\Windows\system32\browseui.dll
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\spwizres.dll
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\pifmgr.dll
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDUS.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDUGHR1.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDTURME.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDTAJIK.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDSF.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDPO.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDNEPR.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDMON.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDMAORI.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDLT1.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDINTEL.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDINTAM.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDINORI.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDINMAR.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDINKAN.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDINHIN.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDINBEN.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDCZ1.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDBULG.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\SYSWOW64\dpnaddr.dll
2012-01-02 10:24:13 ----A---- C:\Windows\system32\spwizres.dll
2012-01-02 10:24:13 ----A---- C:\Windows\system32\pifmgr.dll
2012-01-02 10:24:13 ----A---- C:\Windows\system32\nlsbres.dll
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDUS.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDTURME.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDMON.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDMAORI.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDLT1.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDINTEL.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDINORI.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDINMAR.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDINKAN.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDINHIN.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDGEO.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDCZ1.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDBULG.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDBLR.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\KBDBASH.DLL
2012-01-02 10:24:13 ----A---- C:\Windows\system32\drivers\vms3cap.sys
2012-01-02 10:24:13 ----A---- C:\Windows\system32\drivers\VMBusHID.sys
2012-01-02 10:24:13 ----A---- C:\Windows\system32\dpnaddr.dll
2012-01-02 10:24:13 ----A---- C:\Windows\system32\BlbEvents.dll
2012-01-02 10:24:10 ----A---- C:\Windows\SYSWOW64\wdscore.dll
2012-01-02 10:24:10 ----A---- C:\Windows\system32\dpx.dll
2012-01-02 10:24:06 ----A---- C:\Windows\SYSWOW64\sqmapi.dll
2012-01-02 10:24:05 ----A---- C:\Windows\SYSWOW64\printmanagement.msc
2012-01-02 10:24:00 ----A---- C:\Windows\SYSWOW64\wbemcomn.dll
2012-01-02 10:21:50 ----A---- C:\Windows\system32\wbemcomn.dll
2012-01-02 10:21:39 ----A---- C:\Windows\system32\sqmapi.dll
2012-01-02 09:41:14 ----D---- C:\Program Files\CCleaner
2012-01-02 09:30:09 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2012-01-02 09:30:09 ----A---- C:\Windows\system32\drivers\usbport.sys
2012-01-02 09:30:09 ----A---- C:\Windows\system32\drivers\usbohci.sys
2012-01-02 09:30:09 ----A---- C:\Windows\system32\drivers\usbhub.sys
2012-01-02 09:30:09 ----A---- C:\Windows\system32\drivers\usbehci.sys
2012-01-02 09:30:09 ----A---- C:\Windows\system32\drivers\usbd.sys
2012-01-02 09:30:09 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2012-01-02 09:30:08 ----A---- C:\Windows\system32\fsquirt.exe
2012-01-02 09:30:08 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2012-01-02 09:30:08 ----A---- C:\Windows\system32\drivers\bthport.sys
2012-01-02 09:30:06 ----A---- C:\Windows\SYSWOW64\esent.dll
2012-01-02 09:30:06 ----A---- C:\Windows\system32\esent.dll
2012-01-02 09:30:06 ----A---- C:\Windows\system32\drivers\ntfs.sys
2012-01-02 09:30:05 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2012-01-02 09:30:05 ----A---- C:\Windows\system32\fsutil.exe
2012-01-02 09:30:05 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2012-01-02 09:30:05 ----A---- C:\Windows\system32\drivers\storport.sys
2012-01-02 09:30:05 ----A---- C:\Windows\system32\drivers\nvstor.sys
2012-01-02 09:30:05 ----A---- C:\Windows\system32\drivers\nvraid.sys
2012-01-02 09:30:05 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2012-01-02 09:30:05 ----A---- C:\Windows\system32\drivers\amdxata.sys
2012-01-02 09:30:05 ----A---- C:\Windows\system32\drivers\amdsata.sys
2012-01-02 09:25:36 ----D---- C:\Program Files (x86)\Adobe
2012-01-02 09:24:41 ----D---- C:\ProgramData\Adobe
2012-01-01 23:32:43 ----D---- C:\Windows\pss
2012-01-01 23:07:40 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2012-01-01 23:07:40 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2012-01-01 23:07:40 ----A---- C:\Windows\system32\FntCache.dll
2012-01-01 23:07:40 ----A---- C:\Windows\system32\DWrite.dll
2012-01-01 23:07:40 ----A---- C:\Windows\system32\d2d1.dll
2012-01-01 21:40:14 ----A---- C:\Windows\explorer.exe
2012-01-01 21:40:13 ----A---- C:\Windows\SYSWOW64\imageres.dll
2012-01-01 21:40:13 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2012-01-01 21:40:11 ----A---- C:\Windows\SYSWOW64\themeui.dll.tmp
2012-01-01 21:40:11 ----A---- C:\Windows\SYSWOW64\authui.dll
2012-01-01 21:40:10 ----A---- C:\Windows\SYSWOW64\uxtheme.dll.tmp
2012-01-01 20:56:18 ----D---- C:\Program Files (x86)\QuestBasic
2012-01-01 20:56:14 ----D---- C:\Program Files (x86)\windows-7-themes.com
2012-01-01 20:20:21 ----D---- C:\Windows\SYSWOW64\Macromed
2012-01-01 19:32:13 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-01-01 19:31:53 ----D---- C:\Users\popino\AppData\Roaming\ICQ
2012-01-01 16:21:15 ----D---- C:\Windows\Sun
2012-01-01 16:04:45 ----D---- C:\Program Files (x86)\JDownloader
2012-01-01 15:38:16 ----D---- C:\Program Files (x86)\ImgBurn
2012-01-01 15:35:55 ----D---- C:\Program Files (x86)\uTorrent
2012-01-01 15:35:04 ----D---- C:\Users\popino\AppData\Roaming\uTorrent
2012-01-01 15:07:50 ----D---- C:\Windows\SYSWOW64\Wat
2012-01-01 15:07:50 ----D---- C:\Windows\system32\Wat
2012-01-01 15:04:50 ----D---- C:\ProgramData\Sun
2012-01-01 15:04:32 ----A---- C:\Windows\SYSWOW64\javaws.exe
2012-01-01 15:04:32 ----A---- C:\Windows\SYSWOW64\javaw.exe

popino
Návštěvník
Návštěvník
Příspěvky: 56
Registrován: 06 Črv 2005 19:22

Re: Prosím o kontrolu logu

#5 Příspěvek od popino »

2012-01-01 15:04:32 ----A---- C:\Windows\SYSWOW64\java.exe
2012-01-01 15:04:32 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2012-01-01 15:04:19 ----D---- C:\Program Files (x86)\Java
2012-01-01 14:54:36 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\wextract.exe
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\url.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\occache.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\msrating.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\msls31.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\mshta.exe
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\inseng.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\icardie.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2012-01-01 14:54:35 ----A---- C:\Windows\SYSWOW64\admparse.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\wininet.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\wextract.exe
2012-01-01 14:54:35 ----A---- C:\Windows\system32\webcheck.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\vbscript.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\urlmon.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\url.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2012-01-01 14:54:35 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2012-01-01 14:54:35 ----A---- C:\Windows\system32\pngfilt.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\occache.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\msrating.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\msls31.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\mshtmler.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\mshtmled.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\mshtml.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\mshta.exe
2012-01-01 14:54:35 ----A---- C:\Windows\system32\msfeedssync.exe
2012-01-01 14:54:35 ----A---- C:\Windows\system32\msfeedsbs.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\msfeeds.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\licmgr10.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\jsproxy.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\jscript9.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\jscript.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\inseng.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\imgutil.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\iexpress.exe
2012-01-01 14:54:35 ----A---- C:\Windows\system32\ieUnatt.exe
2012-01-01 14:54:35 ----A---- C:\Windows\system32\ieui.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\iesysprep.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\iesetup.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\iertutil.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\iernonce.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\iepeers.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\ieframe.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\iedkcs32.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\ieapfltr.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\ieapfltr.dat
2012-01-01 14:54:35 ----A---- C:\Windows\system32\ieakui.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\ieaksie.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\ieakeng.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\IEAdvpack.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\ie4uinit.exe
2012-01-01 14:54:35 ----A---- C:\Windows\system32\icardie.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\dxtrans.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\dxtmsft.dll
2012-01-01 14:54:35 ----A---- C:\Windows\system32\admparse.dll
2012-01-01 14:32:50 ----A---- C:\Windows\system32\browserchoice.exe
2012-01-01 14:18:35 ----A---- C:\Windows\system32\shell32.dll
2012-01-01 14:18:34 ----A---- C:\Windows\SYSWOW64\shell32.dll
2012-01-01 12:26:27 ----A---- C:\Windows\system32\MRT.exe
2012-01-01 12:03:21 ----D---- C:\ProgramData\TrueSuite
2012-01-01 12:03:20 ----D---- C:\Windows\system32\wocaffe
2012-01-01 12:03:20 ----D---- C:\Program Files\TrueSuite
2012-01-01 12:03:16 ----D---- C:\ProgramData\Downloaded Installations
2012-01-01 10:31:23 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2012-01-01 10:31:23 ----A---- C:\Windows\system32\xmllite.dll
2012-01-01 10:31:16 ----A---- C:\Windows\SYSWOW64\explorer.exe
2012-01-01 10:31:13 ----A---- C:\Windows\system32\tquery.dll
2012-01-01 10:31:13 ----A---- C:\Windows\system32\mssrch.dll
2012-01-01 10:31:12 ----A---- C:\Windows\SYSWOW64\tquery.dll
2012-01-01 10:31:12 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2012-01-01 10:31:12 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2012-01-01 10:31:12 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2012-01-01 10:31:12 ----A---- C:\Windows\SYSWOW64\mssph.dll
2012-01-01 10:31:12 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2012-01-01 10:31:12 ----A---- C:\Windows\system32\SearchIndexer.exe
2012-01-01 10:31:12 ----A---- C:\Windows\system32\SearchFilterHost.exe
2012-01-01 10:31:12 ----A---- C:\Windows\system32\mssvp.dll
2012-01-01 10:31:12 ----A---- C:\Windows\system32\mssph.dll
2012-01-01 10:31:11 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2012-01-01 10:31:11 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2012-01-01 10:31:11 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2012-01-01 10:31:11 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2012-01-01 10:31:11 ----A---- C:\Windows\system32\mssphtb.dll
2012-01-01 10:31:11 ----A---- C:\Windows\system32\msscntrs.dll
2012-01-01 10:30:12 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2012-01-01 10:30:12 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2012-01-01 10:29:47 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2012-01-01 10:29:47 ----A---- C:\Windows\system32\XpsPrint.dll
2012-01-01 10:28:50 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2012-01-01 10:28:47 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2012-01-01 10:28:47 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2012-01-01 10:28:47 ----A---- C:\Windows\system32\d3d10_1core.dll
2012-01-01 10:28:47 ----A---- C:\Windows\system32\d3d10_1.dll
2012-01-01 10:28:27 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2012-01-01 10:28:27 ----A---- C:\Windows\system32\kerberos.dll
2012-01-01 10:27:33 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2012-01-01 10:27:33 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2012-01-01 10:27:33 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2012-01-01 10:27:33 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2012-01-01 10:27:33 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2012-01-01 10:27:33 ----A---- C:\Windows\system32\odbctrac.dll
2012-01-01 10:27:33 ----A---- C:\Windows\system32\odbccu32.dll
2012-01-01 10:27:33 ----A---- C:\Windows\system32\odbccr32.dll
2012-01-01 10:27:33 ----A---- C:\Windows\system32\odbccp32.dll
2012-01-01 10:27:10 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2012-01-01 10:27:10 ----A---- C:\Windows\system32\poqexec.exe
2012-01-01 10:26:58 ----A---- C:\Windows\SYSWOW64\sbe.dll
2012-01-01 10:26:58 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2012-01-01 10:26:58 ----A---- C:\Windows\system32\sbe.dll
2012-01-01 10:26:58 ----A---- C:\Windows\system32\CPFilters.dll
2012-01-01 10:26:30 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2012-01-01 10:26:30 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2012-01-01 10:26:30 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2012-01-01 10:26:24 ----A---- C:\Windows\system32\drivers\afd.sys
2012-01-01 10:25:18 ----A---- C:\Windows\system32\csrsrv.dll
2012-01-01 10:24:21 ----A---- C:\Windows\system32\mfc42u.dll
2012-01-01 10:24:21 ----A---- C:\Windows\system32\mfc42.dll
2012-01-01 10:24:20 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2012-01-01 10:24:20 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2012-01-01 10:23:42 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2012-01-01 10:23:42 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2012-01-01 10:23:42 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2012-01-01 10:23:42 ----A---- C:\Windows\system32\fontsub.dll
2012-01-01 10:23:42 ----A---- C:\Windows\system32\atmlib.dll
2012-01-01 10:23:42 ----A---- C:\Windows\system32\atmfd.dll
2012-01-01 10:22:18 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2012-01-01 10:22:18 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2012-01-01 10:22:18 ----A---- C:\Windows\system32\dnsrslvr.dll
2012-01-01 10:22:18 ----A---- C:\Windows\system32\dnscacheugc.exe
2012-01-01 10:22:18 ----A---- C:\Windows\system32\dnsapi.dll
2012-01-01 10:21:42 ----A---- C:\Windows\system32\drivers\srv2.sys
2012-01-01 10:21:42 ----A---- C:\Windows\system32\drivers\srv.sys
2012-01-01 10:21:41 ----A---- C:\Windows\system32\drivers\srvnet.sys
2012-01-01 10:21:25 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2012-01-01 10:21:25 ----A---- C:\Windows\system32\psisdecd.dll
2012-01-01 10:21:05 ----A---- C:\Windows\system32\winresume.exe
2012-01-01 10:21:05 ----A---- C:\Windows\system32\winload.exe
2012-01-01 10:21:04 ----A---- C:\Windows\system32\setbcdlocale.dll
2012-01-01 10:21:04 ----A---- C:\Windows\system32\kdusb.dll
2012-01-01 10:21:04 ----A---- C:\Windows\system32\kdcom.dll
2012-01-01 10:21:04 ----A---- C:\Windows\system32\kd1394.dll
2012-01-01 10:17:17 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2012-01-01 10:17:17 ----A---- C:\Windows\system32\prevhost.exe
2012-01-01 10:13:02 ----D---- C:\Users\popino\AppData\Roaming\Windows Live Writer
2012-01-01 10:09:45 ----A---- C:\Windows\system32\drivers\tcpip.sys
2012-01-01 10:09:45 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2012-01-01 10:09:33 ----D---- C:\Program Files (x86)\Windows Live
2012-01-01 10:09:29 ----D---- C:\Program Files\Windows Live
2012-01-01 10:07:33 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2012-01-01 10:07:33 ----A---- C:\Windows\system32\KernelBase.dll
2012-01-01 10:07:33 ----A---- C:\Windows\system32\kernel32.dll
2012-01-01 10:07:33 ----A---- C:\Windows\system32\conhost.exe
2012-01-01 10:07:32 ----A---- C:\Windows\SYSWOW64\setup16.exe
2012-01-01 10:07:32 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2012-01-01 10:07:32 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2012-01-01 10:07:32 ----A---- C:\Windows\system32\wow64win.dll
2012-01-01 10:07:32 ----A---- C:\Windows\system32\wow64.dll
2012-01-01 10:07:32 ----A---- C:\Windows\system32\winsrv.dll
2012-01-01 10:07:32 ----A---- C:\Windows\system32\ntvdm64.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-01-01 10:07:31 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-01-01 10:07:31 ----A---- C:\Windows\SYSWOW64\wow32.dll
2012-01-01 10:07:31 ----A---- C:\Windows\SYSWOW64\user.exe
2012-01-01 10:07:31 ----A---- C:\Windows\SYSWOW64\instnm.exe
2012-01-01 10:07:31 ----A---- C:\Windows\system32\wow64cpu.dll
2012-01-01 10:07:16 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2012-01-01 10:07:16 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2012-01-01 10:07:16 ----A---- C:\Windows\system32\umpnpmgr.dll
2012-01-01 10:07:16 ----A---- C:\Windows\system32\cfgmgr32.dll
2012-01-01 10:07:14 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2012-01-01 10:07:14 ----A---- C:\Windows\SYSWOW64\devobj.dll
2012-01-01 10:06:40 ----A---- C:\Windows\system32\inetcomm.dll
2012-01-01 10:06:39 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2012-01-01 10:06:36 ----A---- C:\Windows\system32\WFS.exe
2012-01-01 10:06:36 ----A---- C:\Windows\system32\FXSCOVER.exe
2012-01-01 10:06:29 ----A---- C:\Windows\system32\win32k.sys
2012-01-01 10:05:40 ----A---- C:\Windows\system32\drivers\bowser.sys
2012-01-01 10:05:21 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2012-01-01 10:05:21 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2012-01-01 10:05:21 ----A---- C:\Windows\system32\oleaut32.dll
2012-01-01 10:05:21 ----A---- C:\Windows\system32\oleacc.dll
2012-01-01 10:05:05 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2012-01-01 10:05:05 ----A---- C:\Windows\system32\EncDec.dll
2012-01-01 10:04:54 ----A---- C:\Windows\SYSWOW64\tzres.dll
2012-01-01 10:04:54 ----A---- C:\Windows\system32\tzres.dll
2012-01-01 10:02:20 ----SHD---- C:\Windows\Installer
2012-01-01 09:57:12 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-01-01 09:57:10 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2012-01-01 09:57:09 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2012-01-01 01:57:13 ----D---- C:\Users\popino\AppData\Roaming\WinRAR
2012-01-01 01:57:08 ----D---- C:\Program Files\WinRAR
2012-01-01 00:48:12 ----D---- C:\Users\popino\AppData\Roaming\Macromedia
2012-01-01 00:48:11 ----D---- C:\Users\popino\AppData\Roaming\Adobe
2011-12-31 23:24:21 ----D---- C:\Program Files\Synaptics
2011-12-31 23:19:47 ----D---- C:\Intel
2011-12-31 23:01:09 ----D---- C:\Program Files (x86)\Launch Manager
2011-12-31 22:21:56 ----N---- C:\Windows\system32\MpSigStub.exe
2011-12-31 22:20:34 ----A---- C:\Windows\nsreg.dat
2011-12-31 22:19:54 ----D---- C:\Users\popino\AppData\Roaming\Mozilla
2011-12-31 22:17:59 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-12-31 21:48:33 ----D---- C:\Users\popino\AppData\Roaming\Identities
2011-12-31 21:47:37 ----SD---- C:\Users\popino\AppData\Roaming\Microsoft
2011-12-31 21:47:37 ----D---- C:\Users\popino\AppData\Roaming\Media Center Programs
2011-12-31 21:44:48 ----SHD---- C:\Recovery
2011-12-31 21:44:47 ----SHD---- C:\ProgramData\Šablony
2011-12-31 21:44:47 ----SHD---- C:\ProgramData\Plocha
2011-12-31 21:44:47 ----SHD---- C:\ProgramData\Oblíbené položky
2011-12-31 21:44:47 ----SHD---- C:\ProgramData\Nabídka Start
2011-12-31 21:44:47 ----SHD---- C:\ProgramData\Dokumenty
2011-12-31 21:44:47 ----SHD---- C:\ProgramData\Data aplikací
2011-12-31 21:29:26 ----D---- C:\Windows\SoftwareDistribution
2011-12-31 21:25:57 ----D---- C:\Windows\Prefetch
2011-12-31 21:25:34 ----ASH---- C:\pagefile.sys
2011-12-31 21:25:29 ----ASH---- C:\hiberfil.sys
2011-12-31 21:24:24 ----D---- C:\Windows\Panther
2011-12-31 21:10:53 ----RASH---- C:\BOOTSECT.BAK
2011-12-31 21:10:48 ----SHD---- C:\Boot
2011-12-30 12:08:03 ----SHD---- C:\Config.Msi

======List of files/folders modified in the last 1 month======

2012-01-22 16:23:39 ----D---- C:\Windows\Temp
2012-01-22 16:07:51 ----D---- C:\Windows\inf
2012-01-22 16:07:50 ----D---- C:\Windows
2012-01-22 16:01:45 ----D---- C:\Windows\system32\config
2012-01-22 12:23:40 ----HD---- C:\ProgramData
2012-01-22 12:23:11 ----RD---- C:\Program Files
2012-01-22 11:53:27 ----SHD---- C:\System Volume Information
2012-01-22 10:46:36 ----RD---- C:\Program Files (x86)
2012-01-21 22:35:24 ----D---- C:\Windows\system32\drivers
2012-01-21 22:35:19 ----D---- C:\Windows\system32\drivers\UMDF
2012-01-21 22:35:19 ----D---- C:\Windows\System32
2012-01-21 12:27:31 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-01-20 15:58:00 ----D---- C:\Windows\SYSWOW64\drivers
2012-01-20 14:15:49 ----D---- C:\Windows\system32\Tasks
2012-01-16 15:03:00 ----D---- C:\Windows\SysWOW64
2012-01-15 15:18:26 ----D---- C:\Windows\debug
2012-01-15 15:16:32 ----D---- C:\Windows\Tasks
2012-01-15 14:39:37 ----A---- C:\Windows\system.ini
2012-01-11 14:43:42 ----D---- C:\Windows\winsxs
2012-01-11 14:41:58 ----D---- C:\Windows\ehome
2012-01-11 14:27:54 ----D---- C:\Windows\system32\catroot2
2012-01-11 14:27:54 ----D---- C:\Windows\system32\catroot
2012-01-08 19:58:37 ----RSD---- C:\Windows\assembly
2012-01-08 19:23:23 ----D---- C:\Windows\system32\DriverStore
2012-01-08 15:34:18 ----D---- C:\Program Files\Windows Media Player
2012-01-08 15:29:04 ----D---- C:\Program Files (x86)\Windows Media Player
2012-01-06 13:00:50 ----D---- C:\Windows\ShellNew
2012-01-06 12:50:26 ----A---- C:\Windows\win.ini
2012-01-06 12:40:38 ----D---- C:\Program Files (x86)\MSBuild
2012-01-06 12:40:16 ----D---- C:\Program Files (x86)\Common Files
2012-01-06 12:39:39 ----RSD---- C:\Windows\Fonts
2012-01-06 12:30:31 ----SD---- C:\ProgramData\Microsoft
2012-01-06 12:29:41 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-01-05 16:35:32 ----D---- C:\Windows\system32\wdi
2012-01-05 12:14:06 ----D---- C:\Windows\system32\LogFiles
2012-01-04 21:42:03 ----D---- C:\Windows\Logs
2012-01-04 19:41:40 ----RD---- C:\Users
2012-01-04 19:41:22 ----D---- C:\Windows\Help
2012-01-04 18:22:41 ----D---- C:\PerfLogs
2012-01-04 15:31:34 ----D---- C:\Windows\Microsoft.NET
2012-01-04 12:41:12 ----D---- C:\Windows\rescache
2012-01-03 00:59:20 ----HD---- C:\Windows\system32\GroupPolicy
2012-01-03 00:46:24 ----D---- C:\Windows\system32\wfp
2012-01-03 00:46:24 ----D---- C:\Windows\system32\wbem
2012-01-03 00:46:24 ----D---- C:\Windows\system32\CodeIntegrity
2012-01-03 00:46:20 ----D---- C:\Windows\security
2012-01-03 00:46:12 ----D---- C:\Windows\registration
2012-01-02 13:06:21 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-01-02 13:06:21 ----D---- C:\Windows\system32\cs-CZ
2012-01-02 13:02:22 ----D---- C:\Windows\SYSWOW64\en-US
2012-01-02 13:02:22 ----D---- C:\Windows\system32\en-US
2012-01-02 12:58:01 ----D---- C:\Windows\system32\NDF
2012-01-02 12:13:19 ----D---- C:\Program Files (x86)\Windows Sidebar
2012-01-02 12:13:19 ----D---- C:\Program Files (x86)\Windows Portable Devices
2012-01-02 12:13:19 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2012-01-02 12:13:19 ----D---- C:\Program Files (x86)\Windows Mail
2012-01-02 12:13:16 ----D---- C:\Program Files\Windows Sidebar
2012-01-02 12:13:16 ----D---- C:\Program Files\Windows Portable Devices
2012-01-02 12:13:16 ----D---- C:\Program Files\Windows Photo Viewer
2012-01-02 12:13:16 ----D---- C:\Program Files\Windows Mail
2012-01-02 12:13:16 ----D---- C:\Program Files\Windows Journal
2012-01-02 12:13:16 ----D---- C:\Program Files\DVD Maker
2012-01-02 12:13:15 ----D---- C:\Windows\servicing
2012-01-02 12:13:15 ----D---- C:\Program Files\Windows Defender
2012-01-02 12:13:15 ----D---- C:\Program Files\Common Files\System
2012-01-02 12:13:12 ----SHD---- C:\Windows\BitLockerDiscoveryVolumeContents
2012-01-02 12:13:12 ----D---- C:\Windows\SYSWOW64\oobe
2012-01-02 12:13:12 ----D---- C:\Windows\SYSWOW64\migration
2012-01-02 12:13:12 ----D---- C:\Windows\SYSWOW64\da-DK
2012-01-02 12:13:11 ----D---- C:\Windows\SYSWOW64\Setup
2012-01-02 12:13:11 ----D---- C:\Windows\SYSWOW64\cs
2012-01-02 12:13:11 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2012-01-02 12:13:10 ----D---- C:\Windows\SYSWOW64\wbem
2012-01-02 12:13:10 ----D---- C:\Windows\SYSWOW64\sppui
2012-01-02 12:13:10 ----D---- C:\Windows\SYSWOW64\migwiz
2012-01-02 12:13:10 ----D---- C:\Windows\SYSWOW64\manifeststore
2012-01-02 12:13:10 ----D---- C:\Windows\SYSWOW64\es-ES
2012-01-02 12:13:10 ----D---- C:\Windows\SYSWOW64\Dism
2012-01-02 12:12:56 ----D---- C:\Windows\system32\da-DK
2012-01-02 12:12:56 ----D---- C:\Windows\PolicyDefinitions
2012-01-02 12:12:55 ----D---- C:\Windows\system32\Setup
2012-01-02 12:12:55 ----D---- C:\Windows\system32\oobe
2012-01-02 12:12:55 ----D---- C:\Windows\system32\migration
2012-01-02 12:12:55 ----D---- C:\Windows\system32\cs
2012-01-02 12:12:55 ----D---- C:\Windows\system32\AdvancedInstallers
2012-01-02 12:12:54 ----D---- C:\Windows\system32\sppui
2012-01-02 12:12:54 ----D---- C:\Windows\system32\manifeststore
2012-01-02 12:12:54 ----D---- C:\Windows\system32\es-ES
2012-01-02 12:12:54 ----D---- C:\Windows\system32\drivers\cs-CZ
2012-01-02 12:12:53 ----D---- C:\Windows\system32\migwiz
2012-01-02 12:12:53 ----D---- C:\Windows\system32\Dism
2012-01-02 12:12:40 ----D---- C:\Windows\AppPatch
2012-01-02 12:12:25 ----D---- C:\Windows\system32\Boot
2012-01-02 12:08:09 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2012-01-02 12:08:09 ----A---- C:\Windows\system32\msclmd.dll
2012-01-02 09:43:17 ----D---- C:\Windows\SYSWOW64\LogFiles
2012-01-01 21:40:06 ----A---- C:\Windows\system32\themeservice.dll
2012-01-01 21:40:05 ----A---- C:\Windows\system32\uxtheme.dll
2012-01-01 15:07:56 ----D---- C:\Program Files\Internet Explorer
2012-01-01 15:07:56 ----D---- C:\Program Files (x86)\Internet Explorer
2012-01-01 14:22:51 ----D---- C:\Windows\system32\WinBioDatabase
2012-01-01 12:03:09 ----D---- C:\Windows\system32\WinBioPlugIns
2011-12-31 23:23:09 ----A---- C:\Windows\system32\WdfCoInstaller01000.dll
2011-12-31 23:23:08 ----A---- C:\Windows\SYSWOW64\SynTPCOM.dll
2011-12-31 23:23:07 ----A---- C:\Windows\SYSWOW64\SynCtrl.dll
2011-12-31 23:23:07 ----A---- C:\Windows\SYSWOW64\SynCOM.dll
2011-12-31 23:23:07 ----A---- C:\Windows\system32\SynTPAPI.dll
2011-12-31 23:23:07 ----A---- C:\Windows\system32\SynCtrl.dll
2011-12-31 23:23:07 ----A---- C:\Windows\system32\SynCOM.dll
2011-12-31 22:59:55 ----A---- C:\Windows\UNINST32.EXE
2011-12-31 21:55:53 ----D---- C:\Windows\system32\restore
2011-12-31 21:48:26 ----SHD---- C:\$Recycle.Bin
2011-12-31 21:44:48 ----D---- C:\Windows\system32\Recovery
2011-12-31 21:44:47 ----D---- C:\Program Files\Windows NT
2011-12-31 21:30:44 ----RASH---- C:\boot.ini
2011-12-31 21:30:03 ----D---- C:\Windows\system32\sysprep
2011-12-31 21:26:59 ----D---- C:\Windows\CSC
2011-12-31 21:23:47 ----D---- C:\Windows\Setup

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2011-08-04 62496]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2011-08-04 146432]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2011-08-04 38288]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2011-08-09 202576]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2011-08-04 187632]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys [2009-12-03 1224192]
R3 ATSwpWDF;AuthenTec TruePrint USB WBF WDF Driver; C:\Windows\System32\Drivers\ATSwpWDF.sys [2009-12-03 716872]
R3 DKbFltr;Dritek Keyboard Filter Driver (64-bit); C:\Windows\SysWOW64\Drivers\DKbFltr.sys [2011-12-31 25608]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-01-06 279616]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-10-18 2957544]
R3 Ltn_stk7070P;PCTV LITEON based TV tuner device; C:\Windows\system32\DRIVERS\Ltn_stk7070P.sys [2009-05-23 625152]
R3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys [2011-09-18 8604672]
R3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-12-31 322608]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 NETw5s64;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\NETw5s64.sys [2009-09-15 6952960]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 64bitový systém Windows Vista; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2011-08-12 140672]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agr64svc.exe [2009-12-03 28672]
R2 ATService;AuthenTec Fingerprint Service; C:\Program Files (x86)\Fingerprint Sensor\AtService.exe [2009-08-05 1807608]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2011-09-22 974944]
R2 IGBASVC;EgisTec Service; C:\Program Files (x86)\Acer Bio Protection\BASVC.exe [2009-09-05 3449856]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2011-10-15 1640768]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-15 2253120]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096]
R3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-01-01 1255736]

-----------------EOF-----------------

Avatar uživatele
Roli
VIP
VIP
Příspěvky: 13399
Registrován: 26 Lis 2006 13:37
Místo/Bydliště: ČR

Re: Prosím o kontrolu logu

#6 Příspěvek od Roli »

Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém


Stáhni a ulož na plochu ComboFix,

spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.


V případě nejasností je ZDE obrázkový návod.
| Rsit | Mbam | AVPTool | Cure It |

O víkendu odpočívám :all_coholic:

popino
Návštěvník
Návštěvník
Příspěvky: 56
Registrován: 06 Črv 2005 19:22

Re: Prosím o kontrolu logu

#7 Příspěvek od popino »

ComboFix 12-01-23.02 - popino 23.01.2012 13:06:10.1.2 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.4091.2382 [GMT 1:00]
Spuštěný z: c:\users\popino\Desktop\ComboFix.exe
AV: ESET Smart Security 5.0 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: ESET personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 5.0 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý
.
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Acer Bio Protection\PwdFilterV64.dll
c:\program files (x86)\QuestBasic
c:\program files (x86)\QuestBasic\QuestBasic_deleted_\questbasic.exe
c:\windows\SysWow64\themeui.dll.tmp
c:\windows\SysWow64\uxtheme.dll.tmp
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-12-23 do 2012-01-23 )))))))))))))))))))))))))))))))
.
.
2012-01-23 12:22 . 2012-01-23 12:22 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{3EBE81DA-2483-466A-BC7C-273A40C7F1CB}\offreg.dll
2012-01-23 12:19 . 2012-01-23 12:19 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-01-23 11:43 . 2012-01-23 11:43 -------- d-----w- c:\program files (x86)\Common Files\SWF Studio
2012-01-23 11:42 . 2012-01-23 11:54 993360 ----a-w- c:\windows\Don't Touch My Computer 2.scr
2012-01-23 11:42 . 2012-01-23 11:54 45056 ----a-w- c:\windows\NCUNINST.EXe
2012-01-23 11:42 . 2012-01-23 11:54 40960 ----a-w- c:\windows\NCLAUNCH.EXe
2012-01-23 11:42 . 2012-01-23 11:42 -------- d-----w- c:\program files (x86)\NCBuy
2012-01-23 11:23 . 2012-01-23 11:30 -------- d-----w- c:\windows\SysWow64\Side 9 Screensaver dir
2012-01-23 11:23 . 2012-01-23 11:23 520192 ----a-w- c:\windows\SysWow64\Side 9 Screensaver.scr
2012-01-22 19:57 . 2009-05-12 19:52 275360 ----a-w- c:\windows\system32\DreamScene.dll
2012-01-22 19:57 . 2009-05-12 19:52 275360 ----a-w- c:\windows\SysWow64\DreamScene.dll
2012-01-22 19:23 . 2008-12-22 08:42 5068800 ----a-w- c:\windows\SysWow64\davinci.scr
2012-01-22 19:23 . 2008-12-22 08:47 7093760 ----a-w- c:\windows\SysWow64\space.scr
2012-01-22 19:23 . 2008-12-22 08:46 4396544 ----a-w- c:\windows\SysWow64\wpgldfsh.scr
2012-01-22 19:23 . 2008-12-22 08:44 3343360 ----a-w- c:\windows\SysWow64\nature.scr
2012-01-22 19:23 . 2008-12-22 08:43 1742336 ----a-w- c:\windows\SysWow64\mypixdx.scr
2012-01-22 19:06 . 2012-01-22 19:06 -------- d-----w- c:\program files (x86)\eXtra Buttons
2012-01-22 17:33 . 2012-01-22 21:15 -------- dc----w- c:\windows\system32\DRVSTORE
2012-01-22 17:31 . 2012-01-22 21:14 -------- d-----w- c:\programdata\Soluto
2012-01-22 11:23 . 2012-01-22 11:26 -------- d-----w- c:\program files\SUPERAntiSpyware
2012-01-22 11:23 . 2012-01-22 11:23 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2012-01-22 09:56 . 2012-01-22 10:53 512 ----a-w- C:\PhysicalMBR.bin
2012-01-22 09:46 . 2012-01-22 09:46 -------- d-----w- C:\rsit
2012-01-20 19:00 . 2012-01-20 19:00 -------- d-----w- c:\program files\Unlocker
2012-01-20 17:25 . 2012-01-22 15:23 -------- d-----w- c:\program files\trend micro
2012-01-20 17:12 . 2012-01-22 09:45 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2012-01-20 15:50 . 2012-01-20 15:59 -------- d-----w- c:\program files (x86)\ICQ7.7
2012-01-20 14:58 . 2010-12-20 17:09 38224 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
2012-01-20 14:57 . 2012-01-20 14:57 -------- d-----w- c:\programdata\Malwarebytes
2012-01-20 14:57 . 2012-01-20 14:58 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-01-20 14:57 . 2010-12-20 17:08 24152 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-01-18 13:00 . 2012-01-18 13:31 -------- d-----r- c:\program files (x86)\Skype
2012-01-18 12:59 . 2012-01-18 13:00 -------- d-----w- c:\programdata\Skype
2012-01-15 14:16 . 2012-01-15 14:16 -------- d-----w- c:\programdata\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}
2012-01-15 13:35 . 2012-01-15 13:38 -------- d-----w- c:\program files (x86)\AnalogX
2012-01-11 09:03 . 2011-10-26 05:25 1572864 ----a-w- c:\windows\system32\quartz.dll
2012-01-11 09:03 . 2011-10-26 05:25 366592 ----a-w- c:\windows\system32\qdvd.dll
2012-01-11 09:03 . 2011-10-26 04:32 514560 ----a-w- c:\windows\SysWow64\qdvd.dll
2012-01-11 09:03 . 2011-10-26 04:32 1328128 ----a-w- c:\windows\SysWow64\quartz.dll
2012-01-11 09:03 . 2011-11-17 06:41 1731920 ----a-w- c:\windows\system32\ntdll.dll
2012-01-11 09:03 . 2011-11-17 05:38 1292080 ----a-w- c:\windows\SysWow64\ntdll.dll
2012-01-11 09:03 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll
2012-01-11 09:03 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll
2012-01-09 11:59 . 2012-01-09 11:59 -------- d-----w- c:\program files (x86)\abgx360
2012-01-09 08:41 . 2012-01-09 08:42 -------- d-----w- c:\program files (x86)\Bar
2012-01-08 21:20 . 2012-01-08 21:23 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-01-08 18:21 . 2012-01-08 18:21 -------- d-----w- c:\program files\ESET
2012-01-08 15:57 . 2004-08-05 12:00 59904 ----a-w- c:\windows\SysWow64\wbemdisp.tlb
2012-01-08 15:57 . 2012-01-08 15:57 -------- d-----w- c:\program files (x86)\20Dollars2Surf
2012-01-06 12:24 . 2011-11-30 01:21 8822856 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{3EBE81DA-2483-466A-BC7C-273A40C7F1CB}\mpengine.dll
2012-01-06 11:31 . 2012-01-08 18:09 -------- d-----w- c:\program files (x86)\Microsoft Works
2012-01-06 11:30 . 2012-01-06 11:30 -------- d-----w- c:\windows\PCHEALTH
2012-01-06 11:28 . 2012-01-06 11:28 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2012-01-06 11:26 . 2012-01-06 11:26 -------- d-----r- C:\MSOCache
2012-01-04 19:21 . 2012-01-04 19:21 -------- d-----w- C:\NVIDIA
2012-01-04 19:11 . 2012-01-04 19:11 -------- d-----w- c:\windows\SysWow64\RTCOM
2012-01-04 19:11 . 2012-01-04 19:11 -------- d-----w- c:\program files\Realtek
2012-01-04 19:11 . 2011-05-02 13:27 118104 ----a-w- c:\windows\system32\R4EEA64A.dll
2012-01-04 19:11 . 2011-05-02 13:27 74072 ----a-w- c:\windows\system32\R4EEG64A.dll
2012-01-04 19:11 . 2011-05-02 13:27 426328 ----a-w- c:\windows\system32\R4EED64A.dll
2012-01-04 19:11 . 2011-05-02 13:27 3308376 ----a-w- c:\windows\system32\R4EEP64A.dll
2012-01-04 19:11 . 2011-05-02 13:27 136024 ----a-w- c:\windows\system32\R4EEL64A.dll
2012-01-04 18:53 . 2011-09-18 16:26 8604672 ----a-w- c:\windows\system32\drivers\NETwNs64.sys
2012-01-04 18:53 . 2010-05-19 12:30 113152 ----a-w- c:\windows\system32\NETwNr64.dll
2012-01-04 18:53 . 2010-05-19 12:30 799232 ----a-w- c:\windows\system32\NETwNc64.dll
2012-01-04 18:42 . 2012-01-04 18:42 -------- d-----w- c:\program files\LSI SoftModem
2012-01-04 18:39 . 2011-10-15 08:53 1454400 ----a-w- c:\windows\system32\nvgenco64.dll
2012-01-04 18:07 . 2012-01-04 18:20 -------- d-----w- C:\Driver
2012-01-04 17:43 . 2012-01-04 17:43 -------- d-----w- c:\program files (x86)\Reviversoft
2012-01-04 16:36 . 2012-01-04 16:36 -------- d-----w- C:\AuthLog
2012-01-04 16:36 . 2009-06-18 15:38 952683 ----a-w- c:\windows\system32\VMC3KAPI.dll
2012-01-04 16:36 . 2008-12-10 18:03 123392 ----a-w- c:\windows\system32\VCryptAPI.dll
2012-01-04 16:35 . 2012-01-23 12:18 -------- d-----w- c:\program files (x86)\Acer Bio Protection
2012-01-04 16:28 . 2012-01-04 16:28 -------- d-----w- c:\program files (x86)\Fingerprint Sensor
2012-01-04 13:21 . 2007-07-19 17:14 5073256 ----a-w- c:\windows\system32\d3dx9_35.dll
2012-01-04 13:15 . 2012-01-04 13:20 -------- d--h--w- c:\windows\msdownld.tmp
2012-01-04 12:36 . 2012-01-04 12:36 -------- d-----w- c:\program files\Hewlett-Packard
2012-01-04 12:36 . 2007-08-29 15:06 55808 ----a-w- c:\windows\system32\Spool\prtprocs\x64\ZIMFPRNT.DLL
2012-01-04 12:36 . 2007-08-29 15:06 52224 ----a-w- c:\windows\system32\ZTAG.DLL
2012-01-04 12:36 . 2007-08-29 15:06 127488 ----a-w- c:\windows\system32\ZSPOOL.DLL
2012-01-04 12:36 . 2007-08-29 15:06 61952 ----a-w- c:\windows\system32\ZIMF.DLL
2012-01-04 12:36 . 2007-08-29 15:06 552448 ----a-w- c:\windows\system32\HPIPMX.dll
2012-01-04 12:36 . 2007-08-29 15:06 231936 ----a-w- c:\windows\system32\HPIPMXRes.dll
2012-01-04 12:36 . 2007-08-29 15:06 139264 ----a-w- c:\windows\system32\HPMCoSetup.dll
2012-01-04 12:36 . 2007-08-29 15:06 182784 ----a-w- c:\windows\system32\CP1215LI.DLL
2012-01-04 12:36 . 2007-08-29 15:06 165376 ----a-w- c:\windows\system32\CP1215LM.DLL
2012-01-04 12:36 . 2008-02-11 14:26 53248 ----a-w- c:\windows\system32\CP1215EWS.dll
2012-01-03 14:42 . 2012-01-06 11:55 279616 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-01-03 14:42 . 2012-01-03 14:45 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
2012-01-03 14:41 . 2012-01-03 14:42 -------- d-----w- c:\programdata\DAEMON Tools Lite
2012-01-03 13:56 . 2012-01-08 18:59 -------- d-----w- c:\programdata\Microsoft Help
2012-01-03 13:21 . 2012-01-03 13:21 -------- d-----w- c:\program files (x86)\Common Files\InstallShield
2012-01-03 12:39 . 2012-01-03 12:39 -------- d-----w- c:\windows\system32\Macromed
2012-01-03 07:28 . 2012-01-03 07:28 2570286 ----a-w- c:\windows\SysWow64\abgx360.exe
2012-01-02 19:20 . 2012-01-03 13:03 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2012-01-02 18:31 . 2012-01-15 14:17 -------- d-----w- c:\windows\system32\appmgmt
2012-01-02 12:02 . 2012-01-06 11:30 -------- d-----w- c:\program files (x86)\Microsoft.NET
2012-01-02 10:51 . 2012-01-02 10:51 -------- d-----w- c:\windows\system32\SPReview
2012-01-02 10:51 . 2012-01-02 10:51 -------- d-----w- c:\windows\system32\EventProviders
2012-01-02 09:25 . 2010-11-20 13:33 273792 ----a-w- c:\windows\system32\drivers\msiscsi.sys
2012-01-02 09:24 . 2010-11-20 13:32 334208 ----a-w- c:\windows\system32\drivers\acpi.sys
2012-01-02 09:21 . 2010-11-20 13:27 529408 ----a-w- c:\windows\system32\wbemcomn.dll
2012-01-02 09:21 . 2010-11-20 13:27 244736 ----a-w- c:\program files\Windows Portable Devices\sqmapi.dll
2012-01-02 09:21 . 2010-11-20 13:27 244736 ----a-w- c:\windows\system32\sqmapi.dll
2012-01-02 08:41 . 2012-01-02 08:41 -------- d-----w- c:\program files\CCleaner
2012-01-02 08:25 . 2012-01-02 08:25 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2012-01-01 22:07 . 2011-02-19 12:05 1139200 ----a-w- c:\windows\system32\FntCache.dll
2012-01-01 22:07 . 2011-02-19 12:04 1544192 ----a-w- c:\windows\system32\DWrite.dll
2012-01-01 22:07 . 2011-02-19 12:04 902656 ----a-w- c:\windows\system32\d2d1.dll
2012-01-01 22:07 . 2011-02-19 06:30 1076736 ----a-w- c:\windows\SysWow64\DWrite.dll
2012-01-01 22:07 . 2011-02-19 06:30 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
2012-01-01 20:40 . 2011-02-26 06:23 2870272 ----a-w- c:\windows\explorer.exe
2012-01-01 20:40 . 2010-06-26 05:14 1495040 ----a-w- c:\windows\SysWow64\ExplorerFrame.dll
2012-01-01 20:40 . 2009-07-14 01:06 20268032 ----a-w- c:\windows\SysWow64\imageres.dll
2012-01-01 20:40 . 2009-07-14 01:14 1792000 ----a-w- c:\windows\SysWow64\authui.dll
2012-01-01 20:40 . 2009-07-14 01:11 245760 ----a-w- c:\windows\SysWow64\uxtheme.dll.backup
2012-01-01 20:40 . 2009-07-14 01:41 44544 ----a-w- c:\windows\system32\themeservice.dll.backup
2012-01-01 20:40 . 2009-07-14 01:41 332288 ----a-w- c:\windows\system32\uxtheme.dll.backup
2012-01-01 19:56 . 2012-01-01 19:56 -------- d-----w- c:\program files (x86)\windows-7-themes.com
2012-01-01 19:20 . 2012-01-01 19:20 -------- d-----w- c:\windows\SysWow64\Macromed
2012-01-01 18:32 . 2012-01-20 14:19 -------- d--h--w- c:\program files (x86)\InstallShield Installation Information
2012-01-01 15:21 . 2012-01-01 15:21 -------- d-----w- c:\windows\Sun
2012-01-01 15:04 . 2012-01-01 15:34 -------- d-----w- c:\program files (x86)\JDownloader
2012-01-01 14:38 . 2012-01-01 14:38 -------- d-----w- c:\program files (x86)\ImgBurn
2012-01-01 14:35 . 2012-01-01 14:35 -------- d-----w- c:\program files (x86)\uTorrent
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-02 11:08 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2012-01-02 11:08 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2012-01-01 20:40 . 2009-07-13 23:54 44544 ----a-w- c:\windows\system32\themeservice.dll
2012-01-01 20:40 . 2009-07-13 23:55 332288 ----a-w- c:\windows\system32\uxtheme.dll
2012-01-01 13:54 . 2012-01-01 13:54 249344 ----a-w- c:\windows\system32\webcheck.dll
2012-01-01 13:54 . 2012-01-01 13:54 203776 ----a-w- c:\windows\SysWow64\webcheck.dll
2012-01-01 09:08 . 2011-03-28 17:36 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-12-31 22:23 . 2006-03-09 08:58 1491528 ----a-w- c:\windows\system32\WdfCoInstaller01000.dll
2011-12-31 22:23 . 2008-02-22 10:11 102400 ----a-w- c:\windows\SysWow64\SynTPCOM.dll
2011-12-31 22:23 . 2008-02-22 10:50 322608 ----a-w- c:\windows\system32\drivers\SynTP.sys
2011-12-31 22:23 . 2008-02-22 10:11 197632 ----a-w- c:\windows\system32\SynTPAPI.dll
2011-12-31 22:23 . 2008-02-22 09:58 252928 ----a-w- c:\windows\system32\SynCtrl.dll
2011-12-31 22:23 . 2008-02-22 09:58 196608 ----a-w- c:\windows\SysWow64\SynCtrl.dll
2011-12-31 22:23 . 2008-02-22 09:58 388096 ----a-w- c:\windows\system32\SynCOM.dll
2011-12-31 22:23 . 2008-02-22 09:57 163840 ----a-w- c:\windows\SysWow64\SynCOM.dll
2011-12-31 22:00 . 2009-03-26 10:16 25608 ----a-w- c:\windows\SysWow64\drivers\DKbFltr.sys
2011-12-31 21:59 . 2009-09-09 13:41 348680 ----a-w- c:\windows\UNINST32.EXE
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2011-12-31 1112072]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"ShutdownSessionTimeout"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 cpuz135;cpuz135;c:\windows\TEMP\cpuz135\cpuz135_x64.sys [x]
R3 NETw5s64;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 64 Bit;c:\windows\system32\DRIVERS\NETw5s64.sys [x]
R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 64bitový systém Windows Vista;c:\windows\system32\DRIVERS\netw5v64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys [x]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [2011-08-11 140672]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S2 ATService;AuthenTec Fingerprint Service;c:\program files (x86)\Fingerprint Sensor\AtService.exe [2009-08-05 1807608]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [2011-09-22 974944]
S2 IGBASVC;EgisTec Service;c:\program files (x86)\Acer Bio Protection\BASVC.exe [2009-09-05 3449856]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-15 2253120]
S3 ATSwpWDF;AuthenTec TruePrint USB WBF WDF Driver;c:\windows\system32\Drivers\ATSwpWDF.sys [x]
S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S3 Ltn_stk7070P;PCTV LITEON based TV tuner device;c:\windows\system32\DRIVERS\Ltn_stk7070P.sys [x]
S3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit;c:\windows\system32\DRIVERS\NETwNs64.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2012-01-22 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1964065576-2339917071-4016889289-1001Core.job
- c:\users\popino\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-31 21:42]
.
2012-01-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1964065576-2339917071-4016889289-1001UA.job
- c:\users\popino\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-31 21:42]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2011-12-31 1220392]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2011-09-22 4035152]
"combofix"="c:\combofix\CF16335.3XE" [2010-11-20 345088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.cz/
mLocal Page = c:\windows\SYSTEM32\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
IE: Search the Web - c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
TCP: DhcpNameServer = 10.68.36.1
FF - ProfilePath - c:\users\popino\AppData\Roaming\Mozilla\Firefox\Profiles\umew6gaa.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - www.seznam.cz
FF - prefs.js: keyword.URL - hxxp://search.sweetim.com/search.asp?src=2&q=
FF - prefs.js: network.proxy.type - 4
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
SafeBoot-SolutoService
HKLM-Run-(Výchozí) - (no file)
AddRemove-Side 9 Screensaver - c:\windows\system32\Side 9 Screensaver.scr
AddRemove-{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA} - c:\programdata\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}\bm_installer.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-1964065576-2339917071-4016889289-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (S-1-5-21-1964065576-2339917071-4016889289-1001)
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-1964065576-2339917071-4016889289-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (S-1-5-21-1964065576-2339917071-4016889289-1001)
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Acer Bio Protection\CompPtcVUI.exe
.
**************************************************************************
.
Celkový čas: 2012-01-23 13:29:09 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-01-23 12:29
.
Před spuštěním: Volných bajtů: 123 617 165 312
Po spuštění: Volných bajtů: 123 283 619 840
.
- - End Of File - - ABA83855A8DDEAECC479BC7CDF06EAD8

Avatar uživatele
Roli
VIP
VIP
Příspěvky: 13399
Registrován: 26 Lis 2006 13:37
Místo/Bydliště: ČR

Re: Prosím o kontrolu logu

#8 Příspěvek od Roli »

Pokud jsi tak ještě neučinil, přesuň Combofix na plochu

otevři si Poznámkový blok

do něj zkopíruj skript z následujícího okna:

Kód: Vybrat vše

Folder::
c:\programdata\Spybot - Search & Destroy

RegLock::
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
ulož Tebou vytvořený TXT soubor jako CFScript.txt na plochu,

po uložení uchop vytvořený skript levým myšítkem a přesuň ho nad ikonu Combofixu, kde ho upustíš:

Obrázek

Po aplikaci na Tebe vypadne další log, zkopíruj ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou,

v tom případě znovu restartuj a přitom mačkej F8 poté zvol Poslední známou funkční konfiguraci
| Rsit | Mbam | AVPTool | Cure It |

O víkendu odpočívám :all_coholic:

popino
Návštěvník
Návštěvník
Příspěvky: 56
Registrován: 06 Črv 2005 19:22

Re: Prosím o kontrolu logu

#9 Příspěvek od popino »

ComboFix 12-01-23.02 - popino 23.01.2012 23:16:18.2.2 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.4091.2664 [GMT 1:00]
Spuštěný z: c:\users\popino\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\popino\Desktop\CFScript.txt
AV: ESET Smart Security 5.0 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: ESET personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 5.0 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý
.
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Spybot - Search & Destroy
c:\programdata\Spybot - Search & Destroy\Logs\Fixes.120120-1917.txt
c:\programdata\Spybot - Search & Destroy\Logs\Checks.120120-1817.log
c:\programdata\Spybot - Search & Destroy\Logs\Checks.120120-1909.txt
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM1.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM10.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM11.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM12.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM13.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM14.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM15.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM16.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM17.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM18.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM19.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM2.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM20.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM21.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM22.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM23.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM24.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM25.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM26.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM27.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM28.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM29.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM3.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM30.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM31.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM32.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM33.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM34.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM35.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM36.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM37.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM38.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM39.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM4.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM40.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM41.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM42.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM43.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM44.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM45.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM46.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM47.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM48.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM5.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM6.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM7.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM8.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM9.zip
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-12-23 do 2012-01-23 )))))))))))))))))))))))))))))))
.
.
2012-01-23 22:30 . 2012-01-23 22:30 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-01-23 19:33 . 2012-01-23 19:33 -------- d-----w- c:\program files\LopeSoft
2012-01-23 18:25 . 2012-01-23 18:29 934912 ----a-w- c:\windows\SysWow64\Western_Railway_3D_Screensaver.scr
2012-01-23 18:25 . 2012-01-23 18:28 -------- d-----w- c:\program files (x86)\Western Railway 3D Screensaver
2012-01-23 12:22 . 2012-01-23 20:43 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{3EBE81DA-2483-466A-BC7C-273A40C7F1CB}\offreg.dll
2012-01-23 11:43 . 2012-01-23 11:43 -------- d-----w- c:\program files (x86)\Common Files\SWF Studio
2012-01-23 11:42 . 2012-01-23 11:54 993360 ----a-w- c:\windows\Don't Touch My Computer 2.scr
2012-01-23 11:42 . 2012-01-23 11:54 45056 ----a-w- c:\windows\NCUNINST.EXe
2012-01-23 11:42 . 2012-01-23 11:54 40960 ----a-w- c:\windows\NCLAUNCH.EXe
2012-01-23 11:42 . 2012-01-23 11:42 -------- d-----w- c:\program files (x86)\NCBuy
2012-01-23 11:23 . 2012-01-23 11:30 -------- d-----w- c:\windows\SysWow64\Side 9 Screensaver dir
2012-01-23 11:23 . 2012-01-23 11:23 520192 ----a-w- c:\windows\SysWow64\Side 9 Screensaver.scr
2012-01-22 19:57 . 2009-05-12 19:52 275360 ----a-w- c:\windows\system32\DreamScene.dll
2012-01-22 19:57 . 2009-05-12 19:52 275360 ----a-w- c:\windows\SysWow64\DreamScene.dll
2012-01-22 19:23 . 2008-12-22 08:42 5068800 ----a-w- c:\windows\SysWow64\davinci.scr
2012-01-22 19:23 . 2008-12-22 08:47 7093760 ----a-w- c:\windows\SysWow64\space.scr
2012-01-22 19:23 . 2008-12-22 08:46 4396544 ----a-w- c:\windows\SysWow64\wpgldfsh.scr
2012-01-22 19:23 . 2008-12-22 08:44 3343360 ----a-w- c:\windows\SysWow64\nature.scr
2012-01-22 19:23 . 2008-12-22 08:43 1742336 ----a-w- c:\windows\SysWow64\mypixdx.scr
2012-01-22 19:06 . 2012-01-22 19:06 -------- d-----w- c:\program files (x86)\eXtra Buttons
2012-01-22 17:33 . 2012-01-22 21:15 -------- dc----w- c:\windows\system32\DRVSTORE
2012-01-22 17:31 . 2012-01-22 21:14 -------- d-----w- c:\programdata\Soluto
2012-01-22 11:23 . 2012-01-22 11:26 -------- d-----w- c:\program files\SUPERAntiSpyware
2012-01-22 11:23 . 2012-01-22 11:23 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2012-01-22 09:56 . 2012-01-22 10:53 512 ----a-w- C:\PhysicalMBR.bin
2012-01-22 09:46 . 2012-01-22 09:46 -------- d-----w- C:\rsit
2012-01-20 19:00 . 2012-01-20 19:00 -------- d-----w- c:\program files\Unlocker
2012-01-20 17:25 . 2012-01-22 15:23 -------- d-----w- c:\program files\trend micro
2012-01-20 15:50 . 2012-01-23 21:48 -------- d-----w- c:\program files (x86)\ICQ7.7
2012-01-20 14:58 . 2010-12-20 17:09 38224 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
2012-01-20 14:57 . 2012-01-20 14:57 -------- d-----w- c:\programdata\Malwarebytes
2012-01-20 14:57 . 2012-01-20 14:58 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-01-20 14:57 . 2010-12-20 17:08 24152 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-01-18 13:00 . 2012-01-18 13:31 -------- d-----r- c:\program files (x86)\Skype
2012-01-18 12:59 . 2012-01-18 13:00 -------- d-----w- c:\programdata\Skype
2012-01-15 14:16 . 2012-01-15 14:16 -------- d-----w- c:\programdata\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}
2012-01-15 13:35 . 2012-01-15 13:38 -------- d-----w- c:\program files (x86)\AnalogX
2012-01-11 09:03 . 2011-10-26 05:25 1572864 ----a-w- c:\windows\system32\quartz.dll
2012-01-11 09:03 . 2011-10-26 05:25 366592 ----a-w- c:\windows\system32\qdvd.dll
2012-01-11 09:03 . 2011-10-26 04:32 514560 ----a-w- c:\windows\SysWow64\qdvd.dll
2012-01-11 09:03 . 2011-10-26 04:32 1328128 ----a-w- c:\windows\SysWow64\quartz.dll
2012-01-11 09:03 . 2011-11-17 06:41 1731920 ----a-w- c:\windows\system32\ntdll.dll
2012-01-11 09:03 . 2011-11-17 05:38 1292080 ----a-w- c:\windows\SysWow64\ntdll.dll
2012-01-11 09:03 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll
2012-01-11 09:03 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll
2012-01-09 11:59 . 2012-01-09 11:59 -------- d-----w- c:\program files (x86)\abgx360
2012-01-09 08:41 . 2012-01-09 08:42 -------- d-----w- c:\program files (x86)\Bar
2012-01-08 21:20 . 2012-01-08 21:23 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-01-08 18:21 . 2012-01-08 18:21 -------- d-----w- c:\program files\ESET
2012-01-08 15:57 . 2004-08-05 12:00 59904 ----a-w- c:\windows\SysWow64\wbemdisp.tlb
2012-01-08 15:57 . 2012-01-08 15:57 -------- d-----w- c:\program files (x86)\20Dollars2Surf
2012-01-06 12:24 . 2011-11-30 01:21 8822856 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{3EBE81DA-2483-466A-BC7C-273A40C7F1CB}\mpengine.dll
2012-01-06 11:31 . 2012-01-08 18:09 -------- d-----w- c:\program files (x86)\Microsoft Works
2012-01-06 11:30 . 2012-01-06 11:30 -------- d-----w- c:\windows\PCHEALTH
2012-01-06 11:28 . 2012-01-06 11:28 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2012-01-06 11:26 . 2012-01-06 11:26 -------- d-----r- C:\MSOCache
2012-01-04 19:21 . 2012-01-04 19:21 -------- d-----w- C:\NVIDIA
2012-01-04 19:11 . 2012-01-04 19:11 -------- d-----w- c:\windows\SysWow64\RTCOM
2012-01-04 19:11 . 2012-01-04 19:11 -------- d-----w- c:\program files\Realtek
2012-01-04 19:11 . 2011-05-02 13:27 118104 ----a-w- c:\windows\system32\R4EEA64A.dll
2012-01-04 19:11 . 2011-05-02 13:27 74072 ----a-w- c:\windows\system32\R4EEG64A.dll
2012-01-04 19:11 . 2011-05-02 13:27 426328 ----a-w- c:\windows\system32\R4EED64A.dll
2012-01-04 19:11 . 2011-05-02 13:27 3308376 ----a-w- c:\windows\system32\R4EEP64A.dll
2012-01-04 19:11 . 2011-05-02 13:27 136024 ----a-w- c:\windows\system32\R4EEL64A.dll
2012-01-04 18:53 . 2011-09-18 16:26 8604672 ----a-w- c:\windows\system32\drivers\NETwNs64.sys
2012-01-04 18:53 . 2010-05-19 12:30 113152 ----a-w- c:\windows\system32\NETwNr64.dll
2012-01-04 18:53 . 2010-05-19 12:30 799232 ----a-w- c:\windows\system32\NETwNc64.dll
2012-01-04 18:42 . 2012-01-04 18:42 -------- d-----w- c:\program files\LSI SoftModem
2012-01-04 18:39 . 2011-10-15 08:53 1454400 ----a-w- c:\windows\system32\nvgenco64.dll
2012-01-04 18:07 . 2012-01-04 18:20 -------- d-----w- C:\Driver
2012-01-04 17:43 . 2012-01-04 17:43 -------- d-----w- c:\program files (x86)\Reviversoft
2012-01-04 16:36 . 2012-01-04 16:36 -------- d-----w- C:\AuthLog
2012-01-04 16:36 . 2009-06-18 15:38 952683 ----a-w- c:\windows\system32\VMC3KAPI.dll
2012-01-04 16:36 . 2008-12-10 18:03 123392 ----a-w- c:\windows\system32\VCryptAPI.dll
2012-01-04 16:35 . 2012-01-23 12:18 -------- d-----w- c:\program files (x86)\Acer Bio Protection
2012-01-04 16:28 . 2012-01-04 16:28 -------- d-----w- c:\program files (x86)\Fingerprint Sensor
2012-01-04 13:21 . 2007-07-19 17:14 5073256 ----a-w- c:\windows\system32\d3dx9_35.dll
2012-01-04 13:15 . 2012-01-04 13:20 -------- d--h--w- c:\windows\msdownld.tmp
2012-01-04 12:36 . 2012-01-04 12:36 -------- d-----w- c:\program files\Hewlett-Packard
2012-01-04 12:36 . 2007-08-29 15:06 55808 ----a-w- c:\windows\system32\Spool\prtprocs\x64\ZIMFPRNT.DLL
2012-01-04 12:36 . 2007-08-29 15:06 52224 ----a-w- c:\windows\system32\ZTAG.DLL
2012-01-04 12:36 . 2007-08-29 15:06 127488 ----a-w- c:\windows\system32\ZSPOOL.DLL
2012-01-04 12:36 . 2007-08-29 15:06 61952 ----a-w- c:\windows\system32\ZIMF.DLL
2012-01-04 12:36 . 2007-08-29 15:06 552448 ----a-w- c:\windows\system32\HPIPMX.dll
2012-01-04 12:36 . 2007-08-29 15:06 231936 ----a-w- c:\windows\system32\HPIPMXRes.dll
2012-01-04 12:36 . 2007-08-29 15:06 139264 ----a-w- c:\windows\system32\HPMCoSetup.dll
2012-01-04 12:36 . 2007-08-29 15:06 182784 ----a-w- c:\windows\system32\CP1215LI.DLL
2012-01-04 12:36 . 2007-08-29 15:06 165376 ----a-w- c:\windows\system32\CP1215LM.DLL
2012-01-04 12:36 . 2008-02-11 14:26 53248 ----a-w- c:\windows\system32\CP1215EWS.dll
2012-01-03 14:42 . 2012-01-06 11:55 279616 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-01-03 14:42 . 2012-01-03 14:45 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
2012-01-03 14:41 . 2012-01-03 14:42 -------- d-----w- c:\programdata\DAEMON Tools Lite
2012-01-03 13:56 . 2012-01-08 18:59 -------- d-----w- c:\programdata\Microsoft Help
2012-01-03 13:21 . 2012-01-03 13:21 -------- d-----w- c:\program files (x86)\Common Files\InstallShield
2012-01-03 12:39 . 2012-01-03 12:39 -------- d-----w- c:\windows\system32\Macromed
2012-01-03 07:28 . 2012-01-03 07:28 2570286 ----a-w- c:\windows\SysWow64\abgx360.exe
2012-01-02 19:20 . 2012-01-03 13:03 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2012-01-02 18:31 . 2012-01-15 14:17 -------- d-----w- c:\windows\system32\appmgmt
2012-01-02 12:02 . 2012-01-06 11:30 -------- d-----w- c:\program files (x86)\Microsoft.NET
2012-01-02 10:51 . 2012-01-02 10:51 -------- d-----w- c:\windows\system32\SPReview
2012-01-02 10:51 . 2012-01-02 10:51 -------- d-----w- c:\windows\system32\EventProviders
2012-01-02 09:25 . 2010-11-20 13:33 273792 ----a-w- c:\windows\system32\drivers\msiscsi.sys
2012-01-02 09:24 . 2010-11-20 13:32 334208 ----a-w- c:\windows\system32\drivers\acpi.sys
2012-01-02 09:21 . 2010-11-20 13:27 529408 ----a-w- c:\windows\system32\wbemcomn.dll
2012-01-02 09:21 . 2010-11-20 13:27 244736 ----a-w- c:\program files\Windows Portable Devices\sqmapi.dll
2012-01-02 09:21 . 2010-11-20 13:27 244736 ----a-w- c:\windows\system32\sqmapi.dll
2012-01-02 08:41 . 2012-01-02 08:41 -------- d-----w- c:\program files\CCleaner
2012-01-02 08:25 . 2012-01-02 08:25 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2012-01-01 22:07 . 2011-02-19 12:05 1139200 ----a-w- c:\windows\system32\FntCache.dll
2012-01-01 22:07 . 2011-02-19 12:04 1544192 ----a-w- c:\windows\system32\DWrite.dll
2012-01-01 22:07 . 2011-02-19 12:04 902656 ----a-w- c:\windows\system32\d2d1.dll
2012-01-01 22:07 . 2011-02-19 06:30 1076736 ----a-w- c:\windows\SysWow64\DWrite.dll
2012-01-01 22:07 . 2011-02-19 06:30 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
2012-01-01 20:40 . 2011-02-26 06:23 2870272 ----a-w- c:\windows\explorer.exe
2012-01-01 20:40 . 2010-06-26 05:14 1495040 ----a-w- c:\windows\SysWow64\ExplorerFrame.dll
2012-01-01 20:40 . 2009-07-14 01:06 20268032 ----a-w- c:\windows\SysWow64\imageres.dll
2012-01-01 20:40 . 2009-07-14 01:14 1792000 ----a-w- c:\windows\SysWow64\authui.dll
2012-01-01 20:40 . 2009-07-14 01:11 245760 ----a-w- c:\windows\SysWow64\uxtheme.dll.backup
2012-01-01 20:40 . 2009-07-14 01:41 44544 ----a-w- c:\windows\system32\themeservice.dll.backup
2012-01-01 20:40 . 2009-07-14 01:41 332288 ----a-w- c:\windows\system32\uxtheme.dll.backup
2012-01-01 19:56 . 2012-01-01 19:56 -------- d-----w- c:\program files (x86)\windows-7-themes.com
2012-01-01 19:20 . 2012-01-01 19:20 -------- d-----w- c:\windows\SysWow64\Macromed
2012-01-01 18:32 . 2012-01-20 14:19 -------- d--h--w- c:\program files (x86)\InstallShield Installation Information
2012-01-01 15:21 . 2012-01-01 15:21 -------- d-----w- c:\windows\Sun
2012-01-01 15:04 . 2012-01-01 15:34 -------- d-----w- c:\program files (x86)\JDownloader
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-02 11:08 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2012-01-02 11:08 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2012-01-01 20:40 . 2009-07-13 23:54 44544 ----a-w- c:\windows\system32\themeservice.dll
2012-01-01 20:40 . 2009-07-13 23:55 332288 ----a-w- c:\windows\system32\uxtheme.dll
2012-01-01 13:54 . 2012-01-01 13:54 249344 ----a-w- c:\windows\system32\webcheck.dll
2012-01-01 13:54 . 2012-01-01 13:54 203776 ----a-w- c:\windows\SysWow64\webcheck.dll
2012-01-01 09:08 . 2011-03-28 17:36 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-12-31 22:23 . 2006-03-09 08:58 1491528 ----a-w- c:\windows\system32\WdfCoInstaller01000.dll
2011-12-31 22:23 . 2008-02-22 10:11 102400 ----a-w- c:\windows\SysWow64\SynTPCOM.dll
2011-12-31 22:23 . 2008-02-22 10:50 322608 ----a-w- c:\windows\system32\drivers\SynTP.sys
2011-12-31 22:23 . 2008-02-22 10:11 197632 ----a-w- c:\windows\system32\SynTPAPI.dll
2011-12-31 22:23 . 2008-02-22 09:58 252928 ----a-w- c:\windows\system32\SynCtrl.dll
2011-12-31 22:23 . 2008-02-22 09:58 196608 ----a-w- c:\windows\SysWow64\SynCtrl.dll
2011-12-31 22:23 . 2008-02-22 09:58 388096 ----a-w- c:\windows\system32\SynCOM.dll
2011-12-31 22:23 . 2008-02-22 09:57 163840 ----a-w- c:\windows\SysWow64\SynCOM.dll
2011-12-31 22:00 . 2009-03-26 10:16 25608 ----a-w- c:\windows\SysWow64\drivers\DKbFltr.sys
2011-12-31 21:59 . 2009-09-09 13:41 348680 ----a-w- c:\windows\UNINST32.EXE
.
.
((((((((((((((((((((((((((((( SnapShot@2012-01-23_12.23.25 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-01-08 18:23 . 2012-01-23 18:34 41866 c:\windows\SysWOW64\config\systemprofile\AppData\Local\ESET\ESET Smart Security\Antispam\scdns.bin
+ 2009-07-14 05:10 . 2012-01-23 20:45 40726 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2011-12-31 20:49 . 2012-01-23 20:45 11274 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1964065576-2339917071-4016889289-1001_UserData.bin
+ 2011-12-31 20:40 . 2012-01-23 12:34 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-12-31 20:40 . 2012-01-23 09:41 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-12-31 20:40 . 2012-01-23 12:34 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2011-12-31 20:40 . 2012-01-23 09:41 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2012-01-23 12:34 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2012-01-23 09:41 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2012-01-09 08:07 . 2012-01-23 14:15 9990 c:\windows\SysWOW64\config\systemprofile\AppData\Local\ESET\ESET Smart Security\Antispam\sc2.bin
- 2012-01-09 08:07 . 2012-01-20 23:51 9990 c:\windows\SysWOW64\config\systemprofile\AppData\Local\ESET\ESET Smart Security\Antispam\sc2.bin
+ 2012-01-23 12:21 . 2012-01-23 20:43 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-01-23 12:21 . 2012-01-23 12:21 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-01-23 12:21 . 2012-01-23 20:43 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2012-01-23 12:21 . 2012-01-23 12:21 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-01-09 08:07 . 2012-01-23 14:15 666124 c:\windows\SysWOW64\config\systemprofile\AppData\Local\ESET\ESET Smart Security\Antispam\sc1.bin
- 2012-01-09 08:07 . 2012-01-20 23:51 666124 c:\windows\SysWOW64\config\systemprofile\AppData\Local\ESET\ESET Smart Security\Antispam\sc1.bin
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2011-12-31 1112072]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"ShutdownSessionTimeout"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 cpuz135;cpuz135;c:\windows\TEMP\cpuz135\cpuz135_x64.sys [x]
R3 NETw5s64;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 64 Bit;c:\windows\system32\DRIVERS\NETw5s64.sys [x]
R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 64bitový systém Windows Vista;c:\windows\system32\DRIVERS\netw5v64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys [x]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [2011-08-11 140672]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S2 ATService;AuthenTec Fingerprint Service;c:\program files (x86)\Fingerprint Sensor\AtService.exe [2009-08-05 1807608]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [2011-09-22 974944]
S2 IGBASVC;EgisTec Service;c:\program files (x86)\Acer Bio Protection\BASVC.exe [2009-09-05 3449856]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-15 2253120]
S3 ATSwpWDF;AuthenTec TruePrint USB WBF WDF Driver;c:\windows\system32\Drivers\ATSwpWDF.sys [x]
S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S3 Ltn_stk7070P;PCTV LITEON based TV tuner device;c:\windows\system32\DRIVERS\Ltn_stk7070P.sys [x]
S3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit;c:\windows\system32\DRIVERS\NETwNs64.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-01-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1964065576-2339917071-4016889289-1001Core.job
- c:\users\popino\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-31 21:42]
.
2012-01-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1964065576-2339917071-4016889289-1001UA.job
- c:\users\popino\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-31 21:42]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2011-12-31 1220392]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2011-09-22 4035152]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.cz/
mLocal Page = c:\windows\SYSTEM32\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
IE: Search the Web - c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
TCP: DhcpNameServer = 10.68.36.1
FF - ProfilePath - c:\users\popino\AppData\Roaming\Mozilla\Firefox\Profiles\umew6gaa.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - www.seznam.cz
FF - prefs.js: keyword.URL - hxxp://search.sweetim.com/search.asp?src=2&q=
FF - prefs.js: network.proxy.type - 4
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-1964065576-2339917071-4016889289-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (S-1-5-21-1964065576-2339917071-4016889289-1001)
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-1964065576-2339917071-4016889289-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (S-1-5-21-1964065576-2339917071-4016889289-1001)
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Celkový čas: 2012-01-23 23:34:53
ComboFix-quarantined-files.txt 2012-01-23 22:34
ComboFix2.txt 2012-01-23 12:29
.
Před spuštěním: Volných bajtů: 122 688 073 728
Po spuštění: Volných bajtů: 122 715 631 616
.
- - End Of File - - B89BB0D9D8FBBD81FEF2EE017034C381

popino
Návštěvník
Návštěvník
Příspěvky: 56
Registrován: 06 Črv 2005 19:22

Re: Prosím o kontrolu logu

#10 Příspěvek od popino »

popino napsal:ComboFix 12-01-23.02 - popino 23.01.2012 23:16:18.2.2 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.4091.2664 [GMT 1:00]
Spuštěný z: c:\users\popino\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\popino\Desktop\CFScript.txt
AV: ESET Smart Security 5.0 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: ESET personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 5.0 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý
.
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Spybot - Search & Destroy
c:\programdata\Spybot - Search & Destroy\Logs\Fixes.120120-1917.txt
c:\programdata\Spybot - Search & Destroy\Logs\Checks.120120-1817.log
c:\programdata\Spybot - Search & Destroy\Logs\Checks.120120-1909.txt
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM1.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM10.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM11.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM12.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM13.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM14.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM15.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM16.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM17.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM18.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM19.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM2.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM20.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM21.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM22.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM23.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM24.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM25.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM26.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM27.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM28.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM29.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM3.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM30.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM31.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM32.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM33.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM34.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM35.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM36.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM37.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM38.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM39.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM4.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM40.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM41.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM42.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM43.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM44.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM45.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM46.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM47.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM48.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM5.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM6.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM7.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM8.zip
c:\programdata\Spybot - Search & Destroy\Recovery\SweetIM9.zip
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-12-23 do 2012-01-23 )))))))))))))))))))))))))))))))
.
.
2012-01-23 22:30 . 2012-01-23 22:30 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-01-23 19:33 . 2012-01-23 19:33 -------- d-----w- c:\program files\LopeSoft
2012-01-23 18:25 . 2012-01-23 18:29 934912 ----a-w- c:\windows\SysWow64\Western_Railway_3D_Screensaver.scr
2012-01-23 18:25 . 2012-01-23 18:28 -------- d-----w- c:\program files (x86)\Western Railway 3D Screensaver
2012-01-23 12:22 . 2012-01-23 20:43 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{3EBE81DA-2483-466A-BC7C-273A40C7F1CB}\offreg.dll
2012-01-23 11:43 . 2012-01-23 11:43 -------- d-----w- c:\program files (x86)\Common Files\SWF Studio
2012-01-23 11:42 . 2012-01-23 11:54 993360 ----a-w- c:\windows\Don't Touch My Computer 2.scr
2012-01-23 11:42 . 2012-01-23 11:54 45056 ----a-w- c:\windows\NCUNINST.EXe
2012-01-23 11:42 . 2012-01-23 11:54 40960 ----a-w- c:\windows\NCLAUNCH.EXe
2012-01-23 11:42 . 2012-01-23 11:42 -------- d-----w- c:\program files (x86)\NCBuy
2012-01-23 11:23 . 2012-01-23 11:30 -------- d-----w- c:\windows\SysWow64\Side 9 Screensaver dir
2012-01-23 11:23 . 2012-01-23 11:23 520192 ----a-w- c:\windows\SysWow64\Side 9 Screensaver.scr
2012-01-22 19:57 . 2009-05-12 19:52 275360 ----a-w- c:\windows\system32\DreamScene.dll
2012-01-22 19:57 . 2009-05-12 19:52 275360 ----a-w- c:\windows\SysWow64\DreamScene.dll
2012-01-22 19:23 . 2008-12-22 08:42 5068800 ----a-w- c:\windows\SysWow64\davinci.scr
2012-01-22 19:23 . 2008-12-22 08:47 7093760 ----a-w- c:\windows\SysWow64\space.scr
2012-01-22 19:23 . 2008-12-22 08:46 4396544 ----a-w- c:\windows\SysWow64\wpgldfsh.scr
2012-01-22 19:23 . 2008-12-22 08:44 3343360 ----a-w- c:\windows\SysWow64\nature.scr
2012-01-22 19:23 . 2008-12-22 08:43 1742336 ----a-w- c:\windows\SysWow64\mypixdx.scr
2012-01-22 19:06 . 2012-01-22 19:06 -------- d-----w- c:\program files (x86)\eXtra Buttons
2012-01-22 17:33 . 2012-01-22 21:15 -------- dc----w- c:\windows\system32\DRVSTORE
2012-01-22 17:31 . 2012-01-22 21:14 -------- d-----w- c:\programdata\Soluto
2012-01-22 11:23 . 2012-01-22 11:26 -------- d-----w- c:\program files\SUPERAntiSpyware
2012-01-22 11:23 . 2012-01-22 11:23 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2012-01-22 09:56 . 2012-01-22 10:53 512 ----a-w- C:\PhysicalMBR.bin
2012-01-22 09:46 . 2012-01-22 09:46 -------- d-----w- C:\rsit
2012-01-20 19:00 . 2012-01-20 19:00 -------- d-----w- c:\program files\Unlocker
2012-01-20 17:25 . 2012-01-22 15:23 -------- d-----w- c:\program files\trend micro
2012-01-20 15:50 . 2012-01-23 21:48 -------- d-----w- c:\program files (x86)\ICQ7.7
2012-01-20 14:58 . 2010-12-20 17:09 38224 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
2012-01-20 14:57 . 2012-01-20 14:57 -------- d-----w- c:\programdata\Malwarebytes
2012-01-20 14:57 . 2012-01-20 14:58 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-01-20 14:57 . 2010-12-20 17:08 24152 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-01-18 13:00 . 2012-01-18 13:31 -------- d-----r- c:\program files (x86)\Skype
2012-01-18 12:59 . 2012-01-18 13:00 -------- d-----w- c:\programdata\Skype
2012-01-15 14:16 . 2012-01-15 14:16 -------- d-----w- c:\programdata\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}
2012-01-15 13:35 . 2012-01-15 13:38 -------- d-----w- c:\program files (x86)\AnalogX
2012-01-11 09:03 . 2011-10-26 05:25 1572864 ----a-w- c:\windows\system32\quartz.dll
2012-01-11 09:03 . 2011-10-26 05:25 366592 ----a-w- c:\windows\system32\qdvd.dll
2012-01-11 09:03 . 2011-10-26 04:32 514560 ----a-w- c:\windows\SysWow64\qdvd.dll
2012-01-11 09:03 . 2011-10-26 04:32 1328128 ----a-w- c:\windows\SysWow64\quartz.dll
2012-01-11 09:03 . 2011-11-17 06:41 1731920 ----a-w- c:\windows\system32\ntdll.dll
2012-01-11 09:03 . 2011-11-17 05:38 1292080 ----a-w- c:\windows\SysWow64\ntdll.dll
2012-01-11 09:03 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll
2012-01-11 09:03 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll
2012-01-09 11:59 . 2012-01-09 11:59 -------- d-----w- c:\program files (x86)\abgx360
2012-01-09 08:41 . 2012-01-09 08:42 -------- d-----w- c:\program files (x86)\Bar
2012-01-08 21:20 . 2012-01-08 21:23 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-01-08 18:21 . 2012-01-08 18:21 -------- d-----w- c:\program files\ESET
2012-01-08 15:57 . 2004-08-05 12:00 59904 ----a-w- c:\windows\SysWow64\wbemdisp.tlb
2012-01-08 15:57 . 2012-01-08 15:57 -------- d-----w- c:\program files (x86)\20Dollars2Surf
2012-01-06 12:24 . 2011-11-30 01:21 8822856 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{3EBE81DA-2483-466A-BC7C-273A40C7F1CB}\mpengine.dll
2012-01-06 11:31 . 2012-01-08 18:09 -------- d-----w- c:\program files (x86)\Microsoft Works
2012-01-06 11:30 . 2012-01-06 11:30 -------- d-----w- c:\windows\PCHEALTH
2012-01-06 11:28 . 2012-01-06 11:28 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2012-01-06 11:26 . 2012-01-06 11:26 -------- d-----r- C:\MSOCache
2012-01-04 19:21 . 2012-01-04 19:21 -------- d-----w- C:\NVIDIA
2012-01-04 19:11 . 2012-01-04 19:11 -------- d-----w- c:\windows\SysWow64\RTCOM
2012-01-04 19:11 . 2012-01-04 19:11 -------- d-----w- c:\program files\Realtek
2012-01-04 19:11 . 2011-05-02 13:27 118104 ----a-w- c:\windows\system32\R4EEA64A.dll
2012-01-04 19:11 . 2011-05-02 13:27 74072 ----a-w- c:\windows\system32\R4EEG64A.dll
2012-01-04 19:11 . 2011-05-02 13:27 426328 ----a-w- c:\windows\system32\R4EED64A.dll
2012-01-04 19:11 . 2011-05-02 13:27 3308376 ----a-w- c:\windows\system32\R4EEP64A.dll
2012-01-04 19:11 . 2011-05-02 13:27 136024 ----a-w- c:\windows\system32\R4EEL64A.dll
2012-01-04 18:53 . 2011-09-18 16:26 8604672 ----a-w- c:\windows\system32\drivers\NETwNs64.sys
2012-01-04 18:53 . 2010-05-19 12:30 113152 ----a-w- c:\windows\system32\NETwNr64.dll
2012-01-04 18:53 . 2010-05-19 12:30 799232 ----a-w- c:\windows\system32\NETwNc64.dll
2012-01-04 18:42 . 2012-01-04 18:42 -------- d-----w- c:\program files\LSI SoftModem
2012-01-04 18:39 . 2011-10-15 08:53 1454400 ----a-w- c:\windows\system32\nvgenco64.dll
2012-01-04 18:07 . 2012-01-04 18:20 -------- d-----w- C:\Driver
2012-01-04 17:43 . 2012-01-04 17:43 -------- d-----w- c:\program files (x86)\Reviversoft
2012-01-04 16:36 . 2012-01-04 16:36 -------- d-----w- C:\AuthLog
2012-01-04 16:36 . 2009-06-18 15:38 952683 ----a-w- c:\windows\system32\VMC3KAPI.dll
2012-01-04 16:36 . 2008-12-10 18:03 123392 ----a-w- c:\windows\system32\VCryptAPI.dll
2012-01-04 16:35 . 2012-01-23 12:18 -------- d-----w- c:\program files (x86)\Acer Bio Protection
2012-01-04 16:28 . 2012-01-04 16:28 -------- d-----w- c:\program files (x86)\Fingerprint Sensor
2012-01-04 13:21 . 2007-07-19 17:14 5073256 ----a-w- c:\windows\system32\d3dx9_35.dll
2012-01-04 13:15 . 2012-01-04 13:20 -------- d--h--w- c:\windows\msdownld.tmp
2012-01-04 12:36 . 2012-01-04 12:36 -------- d-----w- c:\program files\Hewlett-Packard
2012-01-04 12:36 . 2007-08-29 15:06 55808 ----a-w- c:\windows\system32\Spool\prtprocs\x64\ZIMFPRNT.DLL
2012-01-04 12:36 . 2007-08-29 15:06 52224 ----a-w- c:\windows\system32\ZTAG.DLL
2012-01-04 12:36 . 2007-08-29 15:06 127488 ----a-w- c:\windows\system32\ZSPOOL.DLL
2012-01-04 12:36 . 2007-08-29 15:06 61952 ----a-w- c:\windows\system32\ZIMF.DLL
2012-01-04 12:36 . 2007-08-29 15:06 552448 ----a-w- c:\windows\system32\HPIPMX.dll
2012-01-04 12:36 . 2007-08-29 15:06 231936 ----a-w- c:\windows\system32\HPIPMXRes.dll
2012-01-04 12:36 . 2007-08-29 15:06 139264 ----a-w- c:\windows\system32\HPMCoSetup.dll
2012-01-04 12:36 . 2007-08-29 15:06 182784 ----a-w- c:\windows\system32\CP1215LI.DLL
2012-01-04 12:36 . 2007-08-29 15:06 165376 ----a-w- c:\windows\system32\CP1215LM.DLL
2012-01-04 12:36 . 2008-02-11 14:26 53248 ----a-w- c:\windows\system32\CP1215EWS.dll
2012-01-03 14:42 . 2012-01-06 11:55 279616 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-01-03 14:42 . 2012-01-03 14:45 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
2012-01-03 14:41 . 2012-01-03 14:42 -------- d-----w- c:\programdata\DAEMON Tools Lite
2012-01-03 13:56 . 2012-01-08 18:59 -------- d-----w- c:\programdata\Microsoft Help
2012-01-03 13:21 . 2012-01-03 13:21 -------- d-----w- c:\program files (x86)\Common Files\InstallShield
2012-01-03 12:39 . 2012-01-03 12:39 -------- d-----w- c:\windows\system32\Macromed
2012-01-03 07:28 . 2012-01-03 07:28 2570286 ----a-w- c:\windows\SysWow64\abgx360.exe
2012-01-02 19:20 . 2012-01-03 13:03 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2012-01-02 18:31 . 2012-01-15 14:17 -------- d-----w- c:\windows\system32\appmgmt
2012-01-02 12:02 . 2012-01-06 11:30 -------- d-----w- c:\program files (x86)\Microsoft.NET
2012-01-02 10:51 . 2012-01-02 10:51 -------- d-----w- c:\windows\system32\SPReview
2012-01-02 10:51 . 2012-01-02 10:51 -------- d-----w- c:\windows\system32\EventProviders
2012-01-02 09:25 . 2010-11-20 13:33 273792 ----a-w- c:\windows\system32\drivers\msiscsi.sys
2012-01-02 09:24 . 2010-11-20 13:32 334208 ----a-w- c:\windows\system32\drivers\acpi.sys
2012-01-02 09:21 . 2010-11-20 13:27 529408 ----a-w- c:\windows\system32\wbemcomn.dll
2012-01-02 09:21 . 2010-11-20 13:27 244736 ----a-w- c:\program files\Windows Portable Devices\sqmapi.dll
2012-01-02 09:21 . 2010-11-20 13:27 244736 ----a-w- c:\windows\system32\sqmapi.dll
2012-01-02 08:41 . 2012-01-02 08:41 -------- d-----w- c:\program files\CCleaner
2012-01-02 08:25 . 2012-01-02 08:25 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2012-01-01 22:07 . 2011-02-19 12:05 1139200 ----a-w- c:\windows\system32\FntCache.dll
2012-01-01 22:07 . 2011-02-19 12:04 1544192 ----a-w- c:\windows\system32\DWrite.dll
2012-01-01 22:07 . 2011-02-19 12:04 902656 ----a-w- c:\windows\system32\d2d1.dll
2012-01-01 22:07 . 2011-02-19 06:30 1076736 ----a-w- c:\windows\SysWow64\DWrite.dll
2012-01-01 22:07 . 2011-02-19 06:30 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
2012-01-01 20:40 . 2011-02-26 06:23 2870272 ----a-w- c:\windows\explorer.exe
2012-01-01 20:40 . 2010-06-26 05:14 1495040 ----a-w- c:\windows\SysWow64\ExplorerFrame.dll
2012-01-01 20:40 . 2009-07-14 01:06 20268032 ----a-w- c:\windows\SysWow64\imageres.dll
2012-01-01 20:40 . 2009-07-14 01:14 1792000 ----a-w- c:\windows\SysWow64\authui.dll
2012-01-01 20:40 . 2009-07-14 01:11 245760 ----a-w- c:\windows\SysWow64\uxtheme.dll.backup
2012-01-01 20:40 . 2009-07-14 01:41 44544 ----a-w- c:\windows\system32\themeservice.dll.backup
2012-01-01 20:40 . 2009-07-14 01:41 332288 ----a-w- c:\windows\system32\uxtheme.dll.backup
2012-01-01 19:56 . 2012-01-01 19:56 -------- d-----w- c:\program files (x86)\windows-7-themes.com
2012-01-01 19:20 . 2012-01-01 19:20 -------- d-----w- c:\windows\SysWow64\Macromed
2012-01-01 18:32 . 2012-01-20 14:19 -------- d--h--w- c:\program files (x86)\InstallShield Installation Information
2012-01-01 15:21 . 2012-01-01 15:21 -------- d-----w- c:\windows\Sun
2012-01-01 15:04 . 2012-01-01 15:34 -------- d-----w- c:\program files (x86)\JDownloader
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-02 11:08 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2012-01-02 11:08 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2012-01-01 20:40 . 2009-07-13 23:54 44544 ----a-w- c:\windows\system32\themeservice.dll
2012-01-01 20:40 . 2009-07-13 23:55 332288 ----a-w- c:\windows\system32\uxtheme.dll
2012-01-01 13:54 . 2012-01-01 13:54 249344 ----a-w- c:\windows\system32\webcheck.dll
2012-01-01 13:54 . 2012-01-01 13:54 203776 ----a-w- c:\windows\SysWow64\webcheck.dll
2012-01-01 09:08 . 2011-03-28 17:36 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-12-31 22:23 . 2006-03-09 08:58 1491528 ----a-w- c:\windows\system32\WdfCoInstaller01000.dll
2011-12-31 22:23 . 2008-02-22 10:11 102400 ----a-w- c:\windows\SysWow64\SynTPCOM.dll
2011-12-31 22:23 . 2008-02-22 10:50 322608 ----a-w- c:\windows\system32\drivers\SynTP.sys
2011-12-31 22:23 . 2008-02-22 10:11 197632 ----a-w- c:\windows\system32\SynTPAPI.dll
2011-12-31 22:23 . 2008-02-22 09:58 252928 ----a-w- c:\windows\system32\SynCtrl.dll
2011-12-31 22:23 . 2008-02-22 09:58 196608 ----a-w- c:\windows\SysWow64\SynCtrl.dll
2011-12-31 22:23 . 2008-02-22 09:58 388096 ----a-w- c:\windows\system32\SynCOM.dll
2011-12-31 22:23 . 2008-02-22 09:57 163840 ----a-w- c:\windows\SysWow64\SynCOM.dll
2011-12-31 22:00 . 2009-03-26 10:16 25608 ----a-w- c:\windows\SysWow64\drivers\DKbFltr.sys
2011-12-31 21:59 . 2009-09-09 13:41 348680 ----a-w- c:\windows\UNINST32.EXE
.
.
((((((((((((((((((((((((((((( SnapShot@2012-01-23_12.23.25 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-01-08 18:23 . 2012-01-23 18:34 41866 c:\windows\SysWOW64\config\systemprofile\AppData\Local\ESET\ESET Smart Security\Antispam\scdns.bin
+ 2009-07-14 05:10 . 2012-01-23 20:45 40726 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2011-12-31 20:49 . 2012-01-23 20:45 11274 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1964065576-2339917071-4016889289-1001_UserData.bin
+ 2011-12-31 20:40 . 2012-01-23 12:34 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-12-31 20:40 . 2012-01-23 09:41 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-12-31 20:40 . 2012-01-23 12:34 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2011-12-31 20:40 . 2012-01-23 09:41 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2012-01-23 12:34 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2012-01-23 09:41 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2012-01-09 08:07 . 2012-01-23 14:15 9990 c:\windows\SysWOW64\config\systemprofile\AppData\Local\ESET\ESET Smart Security\Antispam\sc2.bin
- 2012-01-09 08:07 . 2012-01-20 23:51 9990 c:\windows\SysWOW64\config\systemprofile\AppData\Local\ESET\ESET Smart Security\Antispam\sc2.bin
+ 2012-01-23 12:21 . 2012-01-23 20:43 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-01-23 12:21 . 2012-01-23 12:21 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-01-23 12:21 . 2012-01-23 20:43 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2012-01-23 12:21 . 2012-01-23 12:21 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-01-09 08:07 . 2012-01-23 14:15 666124 c:\windows\SysWOW64\config\systemprofile\AppData\Local\ESET\ESET Smart Security\Antispam\sc1.bin
- 2012-01-09 08:07 . 2012-01-20 23:51 666124 c:\windows\SysWOW64\config\systemprofile\AppData\Local\ESET\ESET Smart Security\Antispam\sc1.bin
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2011-12-31 1112072]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"ShutdownSessionTimeout"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 cpuz135;cpuz135;c:\windows\TEMP\cpuz135\cpuz135_x64.sys [x]
R3 NETw5s64;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 64 Bit;c:\windows\system32\DRIVERS\NETw5s64.sys [x]
R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 64bitový systém Windows Vista;c:\windows\system32\DRIVERS\netw5v64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys [x]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [2011-08-11 140672]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S2 ATService;AuthenTec Fingerprint Service;c:\program files (x86)\Fingerprint Sensor\AtService.exe [2009-08-05 1807608]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [2011-09-22 974944]
S2 IGBASVC;EgisTec Service;c:\program files (x86)\Acer Bio Protection\BASVC.exe [2009-09-05 3449856]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-15 2253120]
S3 ATSwpWDF;AuthenTec TruePrint USB WBF WDF Driver;c:\windows\system32\Drivers\ATSwpWDF.sys [x]
S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S3 Ltn_stk7070P;PCTV LITEON based TV tuner device;c:\windows\system32\DRIVERS\Ltn_stk7070P.sys [x]
S3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit;c:\windows\system32\DRIVERS\NETwNs64.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-01-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1964065576-2339917071-4016889289-1001Core.job
- c:\users\popino\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-31 21:42]
.
2012-01-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1964065576-2339917071-4016889289-1001UA.job
- c:\users\popino\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-31 21:42]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2011-12-31 1220392]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2011-09-22 4035152]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.cz/
mLocal Page = c:\windows\SYSTEM32\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
IE: Search the Web - c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
TCP: DhcpNameServer = 10.68.36.1
FF - ProfilePath - c:\users\popino\AppData\Roaming\Mozilla\Firefox\Profiles\umew6gaa.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - http://www.seznam.cz
FF - prefs.js: keyword.URL - hxxp://search.sweetim.com/search.asp?src=2&q=
FF - prefs.js: network.proxy.type - 4
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-1964065576-2339917071-4016889289-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (S-1-5-21-1964065576-2339917071-4016889289-1001)
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-1964065576-2339917071-4016889289-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (S-1-5-21-1964065576-2339917071-4016889289-1001)
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Celkový čas: 2012-01-23 23:34:53
ComboFix-quarantined-files.txt 2012-01-23 22:34
ComboFix2.txt 2012-01-23 12:29
.
Před spuštěním: Volných bajtů: 122 688 073 728
Po spuštění: Volných bajtů: 122 715 631 616
.
- - End Of File - - B89BB0D9D8FBBD81FEF2EE017034C381
Děkuji

Avatar uživatele
Roli
VIP
VIP
Příspěvky: 13399
Registrován: 26 Lis 2006 13:37
Místo/Bydliště: ČR

Re: Prosím o kontrolu logu

#11 Příspěvek od Roli »

Proč dáváš ten log dvakrát :???:


Přes Start >> Spustit zkopíruj do okna:

ComboFix /Uninstall

a stiskni Enter

To odinstaluje ComboFix a smaže s ním související soubory a složky.


Použij T-Cleaner, který smaže případné zbytky po aplikacích které jsme použili.

Jen před jeho stažením a při použití stopni antivir, protože ho muže detekovat jako vir ale není tomu tak.


Pak dej vědět jaký je stav PC.
| Rsit | Mbam | AVPTool | Cure It |

O víkendu odpočívám :all_coholic:

popino
Návštěvník
Návštěvník
Příspěvky: 56
Registrován: 06 Črv 2005 19:22

Re: Prosím o kontrolu logu

#12 Příspěvek od popino »

NB vypadá, že jede akorát se dost začal zahřívat http://imageshack.us/photo/my-images/836/cpuim.jpg/

Avatar uživatele
Roli
VIP
VIP
Příspěvky: 13399
Registrován: 26 Lis 2006 13:37
Místo/Bydliště: ČR

Re: Prosím o kontrolu logu

#13 Příspěvek od Roli »

No to je dost velká teplota.

Zkontroluj všechny větrací otvory zda nejsou zanešeny a případně je opatrně vyluxuj,

pokud notebook není v záruce odšroubuj spodní kryt(y) a stlačeným vzduchem důkladně odstraň případný prach.
| Rsit | Mbam | AVPTool | Cure It |

O víkendu odpočívám :all_coholic:

popino
Návštěvník
Návštěvník
Příspěvky: 56
Registrován: 06 Črv 2005 19:22

Re: Prosím o kontrolu logu

#14 Příspěvek od popino »

Vše ok, vyfoukané, moc děkuji za ochotu a odbornou pomoc

Avatar uživatele
Roli
VIP
VIP
Příspěvky: 13399
Registrován: 26 Lis 2006 13:37
Místo/Bydliště: ČR

Re: Prosím o kontrolu logu

#15 Příspěvek od Roli »

Není zač.
| Rsit | Mbam | AVPTool | Cure It |

O víkendu odpočívám :all_coholic:

Odpovědět