Nestahnu ani ň - router nebo vir

[Zenysi]

Zdravím,

prosím o kontrolu.
Po reinstalu nejde stáhnout ani .exe nebo .doc zkrátka nic.

Vkládám log:


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:58:57, on 15.10.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe
C:\Users\Luba\Desktop\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKCU\..\Run: [OscarEditor] "C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe" Minimum
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Creative ALchemy AL6 Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 4851 bytes



Díky (jo IE je pryč )

[Zenysi]

info.txt logfile of random's system information tool 1.09 2012-10-15 19:53:21

======Uninstall list======

-->"C:\Program Files (x86)\Creative Installation Information\SBCONTROL64\Setup.exe" /remove /l0x0009
-->"C:\Program Files\Sound Blaster Tactic(3D) Alpha\Program\SETUP.EXE" /s /U /W /L:ENG
7-Zip 9.20 (x64 edition)-->MsiExec.exe /I{23170F69-40C1-2702-0920-000001000000}
AIMP3-->C:\Program Files\AIMP3\Uninstall.exe
AMD Accelerated Video Transcoding-->MsiExec.exe /X{6BB150E8-6CBB-5F8F-CAE7-BE21B2C92D31}
AMD APP SDK Runtime-->MsiExec.exe /I{503F672D-6C84-448A-8F8F-4BC35AC83441}
AMD Catalyst Install Manager-->msiexec /q/x{914F7627-B645-9895-F723-BAEAAC865E75} REBOOT=ReallySuppress
AMD Media Foundation Decoders-->MsiExec.exe /X{DA3372D5-F228-5C71-3FAC-177D4AEE8659}
Catalyst Control Center - Branding-->MsiExec.exe /I{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
CDBurnerXP-->"C:\Program Files\CDBurnerXP\unins000.exe"
DAEMON Tools Lite-->C:\Program Files\DAEMON Tools Lite\uninst.exe
FreeCommander 2009.02b-->"C:\Program Files\FreeCommander\unins000.exe"
Microsoft .NET Framework 4 Client Profile CSY Language Pack-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\ClientLP\Setup.exe /repair /x86 /x64 /lcid 1029 /parameterfolder ClientLP
Microsoft .NET Framework 4 Client Profile CSY Language Pack-->MsiExec.exe /X{790E02A1-145A-3843-8C13-A4F41C9B48B7}
Microsoft .NET Framework 4 Client Profile-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\Setup.exe /repair /x86 /x64 /parameterfolder Client
Microsoft .NET Framework 4 Client Profile-->MsiExec.exe /X{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}
Microsoft Security Client-->MsiExec.exe /X{C78D3032-9DFD-41D0-9DE9-58EAE750CBA4}
Microsoft Security Essentials-->C:\Program Files\Microsoft Security Client\Setup.exe /x
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319-->MsiExec.exe /X{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}
OSCAR Editor-->MsiExec.exe /I{3C2379D2-337A-4FFA-9017-BDFB80EC0931}
Realtek Ethernet Controller Driver-->C:\Program Files (x86)\InstallShield Installation Information\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}\setup.exe -runfromtemp -removeonly
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -removeonly
Revo Uninstaller Pro 2.5.9-->"C:\Program Files\Revo Uninstaller Pro\unins000.exe"
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {6AF6C62E-4E3D-33BF-A591-9E4D53BDF22F} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {E59B2174-E924-311F-8549-AD714C14664D} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {DA36C2E5-6B34-3A6A-9C0A-7D1CC1C5A768} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {7B82A51A-768B-3A7B-ADFA-F777097A8079} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {E40184A4-4A61-3D2E-9035-CB6E1E610E07} /parameterfolder Client
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {29C7BE97-DE59-37A2-A687-2ADD5321948A} /parameterfolder Client
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {7D799A81-5661-3159-BF92-754161CED6E6} /parameterfolder Client
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {4DFA8287-EA36-3469-99FE-F568FEC81653} /parameterfolder Client
VLC media player 2.0.3-->C:\Program Files\VLC\uninstall.exe
X7 Oscar Editor-->"C:\Program Files (x86)\InstallShield Installation Information\{3C2379D2-337A-4FFA-9017-BDFB80EC0931}\setup.exe" -runfromtemp -l0x0409 -removeonly

======System event log======

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Cryptographic Services byl změněn na: stopped
Record Number: 5
Source Name: Service Control Manager
Time Written: 20090714051424.262212-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Windows Modules Installer byl změněn na: stopped
Record Number: 4
Source Name: Service Control Manager
Time Written: 20090714051424.168612-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Software Protection byl změněn na: stopped
Record Number: 3
Source Name: Service Control Manager
Time Written: 20090714051424.059412-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Windows Event Log byl změněn na: stopped
Record Number: 2
Source Name: Service Control Manager
Time Written: 20090714051424.012612-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Stav služby Volume Shadow Copy byl změněn na: stopped
Record Number: 1
Source Name: Service Control Manager
Time Written: 20090714051423.934612-000
Event Type: Informace
User:

=====Application event log=====

Computer Name: 37L4247E29-32
Event Code: 900
Message: Služba Ochrana softwaru se spouští.

Record Number: 5
Source Name: Microsoft-Windows-Security-SPP
Time Written: 20121013115025.000000-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 5617
Message: Windows Management Instrumentation Service subsystems initialized successfully
Record Number: 4
Source Name: Microsoft-Windows-WMI
Time Written: 20121013114827.000000-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 5615
Message: Windows Management Instrumentation Service started sucessfully
Record Number: 3
Source Name: Microsoft-Windows-WMI
Time Written: 20121013114824.000000-000
Event Type: Informace
User:

Computer Name: 37L4247E29-32
Event Code: 1531
Message: Služba Profil uživatele byla úspěšně spuštěna.


Record Number: 2
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20121013114819.453125-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: 37L4247E29-32
Event Code: 4625
Message: Subsystém EventSystem zabraňuje vytváření duplicitních záznamů v protokolu událostí po dobu 86400 sekund. Tuto dobu lze změnit pomocí hodnoty REG_DWORD s názvem SuppressDuplicateDuration v následujícím klíči registru: HKLM\Software\Microsoft\EventSystem\EventLog.
Record Number: 1
Source Name: Microsoft-Windows-EventSystem
Time Written: 20121013114819.000000-000
Event Type: Informace
User:

=====Security event log=====

Computer Name: 37L4247E29-32
Event Code: 4735
Message: Byla změněna zabezpečená místní skupina.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: 37L4247E29-32$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Skupina:
ID zabezpečení: S-1-5-32-551
Název skupiny: Backup Operators
Doména skupiny: Builtin

Změněné atributy:
Název účtu SAM: -
Historie identifikátoru zabezpečení: -

Další informace:
Oprávnění: -
Record Number: 5
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20121013114802.859375-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247E29-32
Event Code: 4731
Message: Byla vytvořena zabezpečená místní skupina.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: 37L4247E29-32$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Nová skupina:
ID zabezpečení: S-1-5-32-551
Název skupiny: Backup Operators
Doména skupiny: Builtin

Atributy:
Název účtu SAM: Backup Operators
Historie identifikátoru zabezpečení: -

Další informace:
Oprávnění: -
Record Number: 4
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20121013114802.859375-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247E29-32
Event Code: 4902
Message: Tabulka zásad auditu pro jednotlivé uživatele byla vytvořena.

Počet prvků: 0
ID zásady: 0x336a9
Record Number: 3
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20121013114802.500000-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247E29-32
Event Code: 4624
Message: Účet byl úspěšně přihlášen.

Předmět:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
ID přihlášení: 0x0

Typ přihlášení: 0

Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}

Informace o procesu:
ID procesu: 0x4
Název procesu:

Informace o síti:
Název pracovní stanice: -
Adresa zdrojové sítě -
Zdrojový port: -

Podrobné informace o ověření:
Proces přihlášení: -
Balíček ověření: -
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0

Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.

Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.

Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).

Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.

Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.

Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 2
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20121013114800.562500-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247E29-32
Event Code: 4608
Message: Spouští se systém Windows.

Tato událost je zaznamenána při spuštění procesu LSASS.EXE a inicializaci kontrolního podsystému.
Record Number: 1
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20121013114800.500000-000
Event Type: Úspěšný audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=C:\Program Files (x86)\AMD APP\bin\x86_64;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\AMD\ATI.ACE\Core-Static
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=2
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
"PROCESSOR_REVISION"=170a
"AMDAPPSDKROOT"=C:\Program Files (x86)\AMD APP\

-----------------EOF-----------------

[vyosek]

Zdravim

Aplikujte exeHelper by Raktor

• Linky ke stazeni
  • COM soubor http://vyosek.ic.cz/BE/exeHelper.com
  • SCR soubor http://vyosek.ic.cz/BE/exeHelper.scr
• Utilitu staci spustit jako Spravce (klik pravym mysidlem), probehne oprava a vznikne log exehelperlog.txt

Dejte mi sem log.txt, je c:\rsit

Spustte MiniTool dle kolegy

daj spustit tento program
http://www.bleepingcomputer.com/downloa ... box/dl/65/

Spustit>.zafajknut.
1:Report IEPROXY
2:Report FFPROXY
3:List comtent OFF HOSTS
4:List IP CONFIGURATION
5:LIST WINSOCK...
6:List Last 10 EvENTS..
7:Only problems
8:Klik GO a log nech ti da do fora.

[Zenysi]

Tak první post z exeHelpera (nepodařilo se spustit jako správce)

exeHelper by Raktor
Build 20100414
Run at 16:12:56 on 10/16/12
Now searching...
Checking for numerical processes...
Checking for sysguard processes...
Checking for bad processes...
Checking for bad files...
Checking for bad registry entries...
Resetting filetype association for .exe
Resetting filetype association for .com
Resetting userinit and shell values...
Resetting policies...
--Finished--

[vyosek]

fajn, pokracujte dale

[Zenysi]

Z RSIT to nevezme fórum, mnoho znaků... Upload na uloz.to?

A poslední z MiniTool:

MiniToolBox by Farbar Version: 23-07-2012
Ran by Luba (administrator) on 16-10-2012 at 16:15:08
Microsoft Windows 7 Ultimate Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.
========================= Hosts content: =================================



========================= IP Configuration: ================================

Realtek PCIe GBE Family Controller = Připojení k místní síti (Connected)


# ----------------------------------
# Konfigurace protokolu IPv4
# ----------------------------------
pushd interface ipv4

reset
set global icmpredirects=enabled


popd
# Konec konfigurace protokolu IPv4



Konfigurace protokolu IP syst‚mu Windows

N zev hostitele . . . . . . . . . : Luba-PC
Prim rnˇ pýˇpona DNS. . . . . . . :
Typ uzlu . . . . . . . . . . . . : hybridnˇ
Povoleno smŘrov nˇ IP . . . . . . : Ne
WINS Proxy povoleno . . . . . . . : Ne

Adapt‚r sˇtŘ Ethernet Pýipojenˇ k mˇstnˇ sˇti:

Pýˇpona DNS podle pýipojenˇ . . . :
Popis . . . . . . . . . . . . . . : Realtek PCIe GBE Family Controller
Fyzick  Adresa. . . . . . . . . . : 00-1D-92-33-06-8D
Protokol DHCP povolen . . . . . . : Ano
Automatick  konfigurace povolena : Ano
Mˇstnˇ IPv6 adresa v r mci propojenˇ . . . : fe80::ad40eac9:66f2%10(Preferovan‚)
Adresa IPv4 . . . . . . . . . . . : 192.168.0.155(Preferovan‚)
Maska podsˇtŘ . . . . . . . . . . : 255.255.255.0
Zap…jźeno . . . . . . . . . . . . : 16. ýˇjna 2012 16:11:29
Z p…jźka vyprçˇ . . . . . . . . . : 23. ýˇjna 2012 16:11:29
Věchozˇ br na . . . . . . . . . . : 192.168.0.1
Server DHCP . . . . . . . . . . . : 192.168.0.1
IAID DHCPv6 . . . . . . . . . . : 234888594
DUID klienta DHCPv6. . . . . . . : 00-01-00-01-18-0B-0D-E1-00-1D-92-33-06-8D
Servery DNS . . . . . . . . . . . : 10.0.0.1
192.168.0.1
Rozhranˇ NetBios nad protokolem TCP/IP. . . . . . . . : Povoleno

Adapt‚r pro tunelov‚ pýipojenˇ isatap.{6E945264-16B3-4999-8D0B-65F44E3A9157}:

Stav m‚dia . . . . . . . . . . . : odpojeno
Pýˇpona DNS podle pýipojenˇ . . . :
Popis . . . . . . . . . . . . . . : Microsoft ISATAP Adapter
Fyzick  Adresa. . . . . . . . . . : 00-00-00-00-00-00-00-E0
Protokol DHCP povolen . . . . . . : Ne
Automatick  konfigurace povolena : Ano

Adapt‚r pro tunelov‚ pýipojenˇ Pýipojenˇ k mˇstnˇ sˇti* 4:

Pýˇpona DNS podle pýipojenˇ . . . :
Popis . . . . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Fyzick  Adresa. . . . . . . . . . : 00-00-00-00-00-00-00-E0
Protokol DHCP povolen . . . . . . : Ne
Automatick  konfigurace povolena : Ano
IPv6 adresa. . . . . . . . . . . : 2001:0:5ef5:79fd762:ab0b:a3cd(Preferovan‚)
Mˇstnˇ IPv6 adresa v r mci propojenˇ . . . : fe80:762:ab0b:a3cd%12(Preferovan‚)
Věchozˇ br na . . . . . . . . . . : ::
NetBIOS nad TCP/IP. . . . . . . . : zak z no
Server: UnKnown
Address: 10.0.0.1

Nazev: google.com
Addresses: 2a00400d:805::1004
173.194.39.162
173.194.39.161
173.194.39.166
173.194.39.168
173.194.39.167
173.194.39.165
173.194.39.174
173.194.39.164
173.194.39.169
173.194.39.163
173.194.39.160


Pýˇkaz PING na google.com [173.194.39.162] - 32 bajt… dat:
OdpovŘÔ od 173.194.39.162: bajty=32 źas=13ms TTL=52
OdpovŘÔ od 173.194.39.162: bajty=32 źas=13ms TTL=52

Statistika ping pro 173.194.39.162:
Pakety: Odeslan‚ = 2, Pýijat‚ = 2, Ztracen‚ = 0 (ztr ta 0%),
Pýibli§n  doba do pýijetˇ odezvy v milisekund ch:
Minimum = 13ms, Maximum = 13ms, Pr…mŘr = 13ms
Server: UnKnown
Address: 10.0.0.1

Nazev: yahoo.com
Addresses: 72.30.38.140
98.139.183.24
98.138.253.109


Pýˇkaz PING na yahoo.com [72.30.38.140] - 32 bajt… dat:
OdpovŘÔ od 72.30.38.140: bajty=32 źas=1315ms TTL=42
Vyprçel źasově limit § dosti.

Statistika ping pro 72.30.38.140:
Pakety: Odeslan‚ = 2, Pýijat‚ = 1, Ztracen‚ = 1 (ztr ta 50%),
Pýibli§n  doba do pýijetˇ odezvy v milisekund ch:
Minimum = 1315ms, Maximum = 1315ms, Pr…mŘr = 1315ms
Server: UnKnown
Address: 10.0.0.1

Nazev: bleepingcomputer.com
Address: 208.43.87.2


Pýˇkaz PING na bleepingcomputer.com [208.43.87.2] - 32 bajt… dat:
Vyprçel źasově limit § dosti.
Vyprçel źasově limit § dosti.

Statistika ping pro 208.43.87.2:
Pakety: Odeslan‚ = 2, Pýijat‚ = 0, Ztracen‚ = 2 (ztr ta 100%),

Pýˇkaz PING na 127.0.0.1 - 32 bajt… dat:
OdpovŘÔ od 127.0.0.1: bajty=32 źas < 1ms TTL=128
OdpovŘÔ od 127.0.0.1: bajty=32 źas < 1ms TTL=128

Statistika ping pro 127.0.0.1:
Pakety: Odeslan‚ = 2, Pýijat‚ = 2, Ztracen‚ = 0 (ztr ta 0%),
Pýibli§n  doba do pýijetˇ odezvy v milisekund ch:
Minimum = 0ms, Maximum = 0ms, Pr…mŘr = 0ms
===========================================================================
Seznam rozhranˇ
10...00 1d 92 33 06 8d ......Realtek PCIe GBE Family Controller
1...........................Software Loopback Interface 1
11...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
12...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================

IPv4 SmŘrovacˇ tabulka
===========================================================================
Aktivnˇ smŘrov nˇ:
Cˇl v sˇti Sˇśov  maska Br na Rozhranˇ Metrika
0.0.0.0 0.0.0.0 192.168.0.1 192.168.0.155 20
127.0.0.0 255.0.0.0 Propojen‚ 127.0.0.1 306
127.0.0.1 255.255.255.255 Propojen‚ 127.0.0.1 306
127.255.255.255 255.255.255.255 Propojen‚ 127.0.0.1 306
192.168.0.0 255.255.255.0 Propojen‚ 192.168.0.155 276
192.168.0.155 255.255.255.255 Propojen‚ 192.168.0.155 276
192.168.0.255 255.255.255.255 Propojen‚ 192.168.0.155 276
224.0.0.0 240.0.0.0 Propojen‚ 127.0.0.1 306
224.0.0.0 240.0.0.0 Propojen‚ 192.168.0.155 276
255.255.255.255 255.255.255.255 Propojen‚ 127.0.0.1 306
255.255.255.255 255.255.255.255 Propojen‚ 192.168.0.155 276
===========================================================================
Trval‚ trasy:
¦ dn‚

IPv6 SmŘrovacˇ tabulka
===========================================================================
Aktivnˇ smŘrov nˇ:
Rozhranˇ Metrika Cˇl v sˇti Br na
12 58 ::/0 Propojen‚
1 306 ::1/128 Propojen‚
12 58 2001::/32 Propojen‚
12 306 2001:0:5ef5:79fd762:ab0b:a3cd/128
Propojen‚
10 276 fe80::/64 Propojen‚
12 306 fe80::/64 Propojen‚
12 306 fe80:762:ab0b:a3cd/128
Propojen‚
10 276 fe80::ad40eac9:66f2/128
Propojen‚
1 306 ff00::/8 Propojen‚
12 306 ff00::/8 Propojen‚
10 276 ff00::/8 Propojen‚
===========================================================================
Trval‚ trasy:
¦ dn‚
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [52224] (Microsoft Corporation)
Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog5 06 C:\Windows\SysWOW64\winrnr.dll [20992] (Microsoft Corporation)
Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [70656] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\napinsp.dll [68096] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\winrnr.dll [28672] (Microsoft Corporation)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (10/13/2012 10:04:25 PM) (Source: NtServicePack) (User: )
Description: WindowsKe zpracování tohoto příkazu není dostatečný prostor.

Error: (10/13/2012 09:03:18 PM) (Source: Application Hang) (User: )
Description: Program Revo.Uninstaller.Pro.2.x.x.Generic.Patch-JW.exe verze 0.0.0.0 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: dec

Čas spuštění: 01cda97547802dea

Čas ukončení: 10

Cesta k aplikaci: C:\Program Files\Revo Uninstaller Pro\Revo.Uninstaller.Pro.2.x.x.Generic.Patch-JW.exe

ID hlášení: a42a66e3-1568-11e2-b370-001d9233068d

Error: (10/13/2012 09:00:58 PM) (Source: Application Hang) (User: )
Description: Program Revo.Uninstaller.Pro.2.x.x.Generic.Patch-JW.exe verze 0.0.0.0 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: 2ac

Čas spuštění: 01cda97486e7aa0b

Čas ukončení: 3

Cesta k aplikaci: C:\Program Files\Revo Uninstaller Pro\Revo.Uninstaller.Pro.2.x.x.Generic.Patch-JW.exe

ID hlášení: 50953a7f-1568-11e2-b370-001d9233068d

Error: (10/13/2012 07:53:06 PM) (Source: Application Error) (User: )
Description: Název chybující aplikace: mscorsvw.exe, verze: 4.0.30319.1, časové razítko: 0x4ba21f5d
Název chybujícího modulu: mscorwks.dll, verze: 2.0.50727.5456, časové razítko: 0x4ca2b7e1
Kód výjimky: 0xc0000005
Posun chyby: 0x00000000001a2cff
ID chybujícího procesu: 0x%9
Čas spuštění chybující aplikace: 0xmscorsvw.exe0
Cesta k chybující aplikaci: mscorsvw.exe1
Cesta k chybujícímu modulu: mscorsvw.exe2
ID zprávy: mscorsvw.exe3

Error: (10/13/2012 07:53:06 PM) (Source: .NET Runtime) (User: )
Description: .NET Runtime version 2.0.50727.5420 - Závažná chyba spouštěcího modulu (000007FEF3A4AF0E) (80131506)

Error: (10/13/2012 07:45:19 PM) (Source: Application Error) (User: )
Description: Název chybující aplikace: TrustedInstaller.exe, verze: 6.1.7601.17514, časové razítko: 0x4ce7989b
Název chybujícího modulu: ntdll.dll, verze: 6.1.7601.17725, časové razítko: 0x4ec4aa8e
Kód výjimky: 0xc0000005
Posun chyby: 0x000000000005324e
ID chybujícího procesu: 0x238
Čas spuštění chybující aplikace: 0xTrustedInstaller.exe0
Cesta k chybující aplikaci: TrustedInstaller.exe1
Cesta k chybujícímu modulu: TrustedInstaller.exe2
ID zprávy: TrustedInstaller.exe3

Error: (10/13/2012 07:21:02 PM) (Source: VSS) (User: )
Description: Chyba služby Stínová kopie svazků: Svazek nebo disk není připojen nebo nebyl nalezen.
Kontext chyby: DeviceIoControl(\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy2 - 0000000000000058,0x00560034,0000000000180FE0,0,000000000017FFD0,4096,[0]).


Operace:
Probíhá zpracování události PostFinalCommitSnapshots

Kontext:
Kontext spuštění: System Provider

Error: (10/13/2012 06:30:17 PM) (Source: Application Hang) (User: )
Description: Program Setup.exe verze 4.1.522.0 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: df0

Čas spuštění: 01cda95d41766d20

Čas ukončení: 16

Cesta k aplikaci: e:\b973c0860ee4f42917b0\amd64\Setup.exe

ID hlášení:

Error: (10/13/2012 05:13:00 PM) (Source: Application Error) (User: )
Description: Název chybující aplikace: TrustedInstaller.exe, verze: 6.1.7600.16385, časové razítko: 0x4a5bc4b0
Název chybujícího modulu: dpx.dll, verze: 6.1.7600.16385, časové razítko: 0x4a5bdf09
Kód výjimky: 0xc0000005
Posun chyby: 0x000000000002e134
ID chybujícího procesu: 0x114
Čas spuštění chybující aplikace: 0xTrustedInstaller.exe0
Cesta k chybující aplikaci: TrustedInstaller.exe1
Cesta k chybujícímu modulu: TrustedInstaller.exe2
ID zprávy: TrustedInstaller.exe3

Error: (10/13/2012 04:42:37 PM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - Failed to compile: System.ServiceModel, Version=3.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x800706be


System errors:
=============
Error: (10/16/2012 04:14:32 PM) (Source: BROWSER) (User: )
Description: Službě Browser se při přenosu \Device\NetBT_Tcpip_{6E945264-16B3-4999-8D0B-65F44E3A9157} příliš často nezdařilo načíst záložní seznam.
Záložní prohledávač bude ukončen.

Error: (10/16/2012 03:49:30 PM) (Source: BROWSER) (User: )
Description: Službě Browser se při přenosu \Device\NetBT_Tcpip_{6E945264-16B3-4999-8D0B-65F44E3A9157} příliš často nezdařilo načíst záložní seznam.
Záložní prohledávač bude ukončen.

Error: (10/15/2012 04:45:43 PM) (Source: BROWSER) (User: )
Description: Službě Browser se při přenosu \Device\NetBT_Tcpip_{6E945264-16B3-4999-8D0B-65F44E3A9157} příliš často nezdařilo načíst záložní seznam.
Záložní prohledávač bude ukončen.

Error: (10/14/2012 07:47:57 PM) (Source: BROWSER) (User: )
Description: Službě Browser se při přenosu \Device\NetBT_Tcpip_{6E945264-16B3-4999-8D0B-65F44E3A9157} příliš často nezdařilo načíst záložní seznam.
Záložní prohledávač bude ukončen.

Error: (10/14/2012 04:04:42 PM) (Source: BROWSER) (User: )
Description: Službě Browser se při přenosu \Device\NetBT_Tcpip_{6E945264-16B3-4999-8D0B-65F44E3A9157} příliš často nezdařilo načíst záložní seznam.
Záložní prohledávač bude ukončen.

Error: (10/14/2012 03:58:25 PM) (Source: Service Control Manager) (User: )
Description: Služba Služba seznamu sítí závisí na službě Sledování umístění v síti (NLA), která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (10/14/2012 03:58:25 PM) (Source: DCOM) (User: )
Description: 1068fdPHost{D3DCB472-7261-43CE-924B-0704BD730D5F}

Error: (10/14/2012 03:58:25 PM) (Source: DCOM) (User: )
Description: 1068fdPHost{145B4335-FE2A-4927-A040-7C35AD3180EF}

Error: (10/14/2012 03:57:34 PM) (Source: Service Control Manager) (User: )
Description: Služba Služba seznamu sítí závisí na službě Sledování umístění v síti (NLA), která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (10/14/2012 03:57:34 PM) (Source: Service Control Manager) (User: )
Description: Služba Služba seznamu sítí závisí na službě Sledování umístění v síti (NLA), která neuspěla při spuštění v důsledku následující chyby:
%%1068


Microsoft Office Sessions:
=========================
Error: (10/13/2012 10:04:25 PM) (Source: NtServicePack)(User: )
Description: WindowsKe zpracování tohoto příkazu není dostatečný prostor.

Error: (10/13/2012 09:03:18 PM) (Source: Application Hang)(User: )
Description: Revo.Uninstaller.Pro.2.x.x.Generic.Patch-JW.exe0.0.0.0dec01cda97547802dea10C:\Program Files\Revo Uninstaller Pro\Revo.Uninstaller.Pro.2.x.x.Generic.Patch-JW.exea42a66e3-1568-11e2-b370-001d9233068d

Error: (10/13/2012 09:00:58 PM) (Source: Application Hang)(User: )
Description: Revo.Uninstaller.Pro.2.x.x.Generic.Patch-JW.exe0.0.0.02ac01cda97486e7aa0b3C:\Program Files\Revo Uninstaller Pro\Revo.Uninstaller.Pro.2.x.x.Generic.Patch-JW.exe50953a7f-1568-11e2-b370-001d9233068d

Error: (10/13/2012 07:53:06 PM) (Source: Application Error)(User: )
Description: mscorsvw.exe4.0.30319.14ba21f5dmscorwks.dll2.0.50727.54564ca2b7e1c000000500000000001a2cff

Error: (10/13/2012 07:53:06 PM) (Source: .NET Runtime)(User: )
Description: .NET Runtime version 2.0.50727.5420 - Závažná chyba spouštěcího modulu (000007FEF3A4AF0E) (80131506)

Error: (10/13/2012 07:45:19 PM) (Source: Application Error)(User: )
Description: TrustedInstaller.exe6.1.7601.175144ce7989bntdll.dll6.1.7601.177254ec4aa8ec0000005000000000005324e23801cda96a4cec1902C:\Windows\servicing\TrustedInstaller.exeC:\Windows\SYSTEM32\ntdll.dllc080e84a-155d-11e2-acc2-001d9233068d

Error: (10/13/2012 07:21:02 PM) (Source: VSS)(User: )
Description: DeviceIoControl(\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy2 - 0000000000000058,0x00560034,0000000000180FE0,0,000000000017FFD0,4096,[0])

Operace:
Probíhá zpracování události PostFinalCommitSnapshots

Kontext:
Kontext spuštění: System Provider

Error: (10/13/2012 06:30:17 PM) (Source: Application Hang)(User: )
Description: Setup.exe4.1.522.0df001cda95d41766d2016e:\b973c0860ee4f42917b0\amd64\Setup.exe

Error: (10/13/2012 05:13:00 PM) (Source: Application Error)(User: )
Description: TrustedInstaller.exe6.1.7600.163854a5bc4b0dpx.dll6.1.7600.163854a5bdf09c0000005000000000002e13411401cda954af43a86aC:\Windows\servicing\TrustedInstaller.exeC:\Windows\system32\dpx.dll794a54c0-1548-11e2-8720-001d9233068d

Error: (10/13/2012 04:42:37 PM) (Source: .NET Runtime Optimization Service)(User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - Failed to compile: System.ServiceModel, Version=3.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x800706be
System.ServiceModel, Version=3.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089


**** End of log ****

[vyosek]

Rozdelte RSIT do vice prispevku

[Zenysi]

Logfile of random's system information tool 1.09 (written by random/random)
Run by Luba at 2012-10-16 16:13:32
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 26 GB (51%) free of 51 GB
Total RAM: 4095 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:13:36, on 16.10.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe
C:\Program Files\trend micro\Luba.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKCU\..\Run: [OscarEditor] "C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe" Minimum
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Creative ALchemy AL6 Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 4808 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe"
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Microsoft Security Client\NisSrv.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe" Minimum
"C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Users\Luba\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2012-09-12 1289704]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-06-11 12503184]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OscarEditor"=C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe [2012-03-20 3340288]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CLIStart.exe [2012-07-04 641704]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"DisableTaskMgr"=0
"DisableCMD"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoSetActiveDesktop"=0
"NoActiveDesktopChanges"=0
"NoFolderOptions"=0
"NoRun"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=0
"ForceActiveDesktopOn"=0
"NoSetActiveDesktop"=0
"NoFolderOptions"=0
"NoRun"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-10-16 16:13:32 ----D---- C:\Program Files\trend micro
2012-10-16 16:11:19 ----A---- C:\Windows\system32\FNTCACHE.DAT
2012-10-16 16:08:42 ----A---- C:\Windows\ntbtlog.txt
2012-10-15 19:53:17 ----D---- C:\rsit
2012-10-15 17:30:18 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2012-10-15 17:30:13 ----D---- C:\Users\Luba\AppData\Roaming\DAEMON Tools Lite
2012-10-15 17:30:10 ----D---- C:\Program Files\DAEMON Tools Lite
2012-10-15 17:29:38 ----D---- C:\ProgramData\DAEMON Tools Lite
2012-10-15 17:28:17 ----D---- C:\Program Files\FRD
2012-10-14 16:03:41 ----D---- C:\ProgramData\Creative
2012-10-14 15:54:04 ----D---- C:\Program Files (x86)\OSCAR Editor X7
2012-10-14 15:53:25 ----D---- C:\Program Files (x86)\OscarEditor
2012-10-14 15:52:15 ----A---- C:\Windows\system32\RTNUninst64.dll
2012-10-14 15:52:15 ----A---- C:\Windows\system32\RtNicProp64.dll
2012-10-14 15:52:15 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2012-10-14 15:49:44 ----D---- C:\Windows\SYSWOW64\RTCOM
2012-10-14 15:49:44 ----D---- C:\Program Files\Realtek
2012-10-14 15:49:14 ----A---- C:\Windows\system32\WavesGUILib.dll
2012-10-14 15:49:14 ----A---- C:\Windows\system32\tosade.dll
2012-10-14 15:49:14 ----A---- C:\Windows\system32\tepeqapo64.dll
2012-10-14 15:49:14 ----A---- C:\Windows\system32\tadefxapo264.dll
2012-10-14 15:49:14 ----A---- C:\Windows\system32\tadefxapo.dll
2012-10-14 15:49:14 ----A---- C:\Windows\system32\SRSWOW64.dll
2012-10-14 15:49:14 ----A---- C:\Windows\system32\SRSTSX64.dll
2012-10-14 15:49:14 ----A---- C:\Windows\system32\SRSTSH64.dll
2012-10-14 15:49:14 ----A---- C:\Windows\system32\SRSHP64.dll
2012-10-14 15:49:13 ----A---- C:\Windows\SYSWOW64\SFCOM.dll
2012-10-14 15:49:13 ----A---- C:\Windows\system32\SFSS_APO.dll
2012-10-14 15:49:13 ----A---- C:\Windows\system32\SFNHK64.dll
2012-10-14 15:49:13 ----A---- C:\Windows\system32\SFCOM64.dll
2012-10-14 15:49:13 ----A---- C:\Windows\system32\SFAPO64.dll
2012-10-14 15:49:13 ----A---- C:\Windows\system32\RtPgEx64.dll
2012-10-14 15:49:12 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2012-10-14 15:49:12 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2012-10-14 15:49:12 ----A---- C:\Windows\system32\RtkCfg64.dll
2012-10-14 15:49:12 ----A---- C:\Windows\system32\RtkAPO64.dll
2012-10-14 15:49:12 ----A---- C:\Windows\system32\RtkApi64.dll
2012-10-14 15:49:12 ----A---- C:\Windows\system32\RTEEP64A.dll
2012-10-14 15:49:12 ----A---- C:\Windows\system32\RTEEL64A.dll
2012-10-14 15:49:12 ----A---- C:\Windows\system32\RTEEG64A.dll
2012-10-14 15:49:12 ----A---- C:\Windows\system32\RTEED64A.dll
2012-10-14 15:49:12 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2012-10-14 15:49:11 ----A---- C:\Windows\system32\RTCOM64.dll
2012-10-14 15:49:11 ----A---- C:\Windows\system32\RP3DHT64.dll
2012-10-14 15:49:11 ----A---- C:\Windows\system32\RP3DAA64.dll
2012-10-14 15:49:11 ----A---- C:\Windows\system32\RCoRes64.dat
2012-10-14 15:49:11 ----A---- C:\Windows\system32\RCoInstII64.dll
2012-10-14 15:49:11 ----A---- C:\Windows\system32\R4EEP64A.dll
2012-10-14 15:49:11 ----A---- C:\Windows\system32\R4EEL64A.dll
2012-10-14 15:49:11 ----A---- C:\Windows\system32\R4EEG64A.dll
2012-10-14 15:49:11 ----A---- C:\Windows\system32\R4EED64A.dll
2012-10-14 15:49:11 ----A---- C:\Windows\system32\R4EEA64A.dll
2012-10-14 15:49:11 ----A---- C:\Windows\system32\MaxxVolumeSDAPO.dll
2012-10-14 15:49:11 ----A---- C:\Windows\system32\MaxxAudioRealtek264.dll
2012-10-14 15:49:11 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2012-10-14 15:49:10 ----A---- C:\Windows\system32\MaxxAudioRealtek.dll
2012-10-14 15:49:10 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2012-10-14 15:49:10 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2012-10-14 15:49:10 ----A---- C:\Windows\system32\MaxxAudioAPO30.dll
2012-10-14 15:49:10 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2012-10-14 15:49:10 ----A---- C:\Windows\system32\KAAPORT64.dll
2012-10-14 15:49:08 ----D---- C:\Program Files (x86)\Realtek
2012-10-14 15:49:08 ----A---- C:\Windows\system32\FMAPO64.dll
2012-10-14 15:49:08 ----A---- C:\Windows\system32\DTSVoiceClarityDLL64.dll
2012-10-14 15:49:08 ----A---- C:\Windows\system32\DTSU2PREC64.dll
2012-10-14 15:49:08 ----A---- C:\Windows\system32\DTSU2PLFX64.dll
2012-10-14 15:49:08 ----A---- C:\Windows\system32\DTSU2PGFX64.dll
2012-10-14 15:49:08 ----A---- C:\Windows\system32\DTSSymmetryDLL64.dll
2012-10-14 15:49:08 ----A---- C:\Windows\system32\DTSS2SpeakerDLL64.dll
2012-10-14 15:49:08 ----A---- C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2012-10-14 15:49:08 ----A---- C:\Windows\system32\DTSNeoPCDLL64.dll
2012-10-14 15:49:08 ----A---- C:\Windows\system32\DTSLimiterDLL64.dll
2012-10-14 15:49:08 ----A---- C:\Windows\system32\DTSLFXAPO64.dll
2012-10-14 15:49:08 ----A---- C:\Windows\system32\DTSGFXAPONS64.dll
2012-10-14 15:49:08 ----A---- C:\Windows\system32\DTSGFXAPO64.dll
2012-10-14 15:49:08 ----A---- C:\Windows\system32\DTSGainCompensatorDLL64.dll
2012-10-14 15:49:08 ----A---- C:\Windows\system32\DTSBoostDLL64.dll
2012-10-14 15:49:08 ----A---- C:\Windows\system32\DTSBassEnhancementDLL64.dll
2012-10-14 15:49:08 ----A---- C:\Windows\system32\AERTAR64.dll
2012-10-14 15:49:08 ----A---- C:\Windows\system32\AERTAC64.dll
2012-10-14 15:49:05 ----R---- C:\Windows\RtlExUpd.dll
2012-10-14 15:49:05 ----HD---- C:\Program Files (x86)\Temp
2012-10-14 15:45:44 ----D---- C:\Program Files (x86)\Intel
2012-10-14 15:45:44 ----A---- C:\Windows\SYSWOW64\CSVer.dll
2012-10-14 15:45:21 ----D---- C:\Intel
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\url.dll
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\msrating.dll
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\msls31.dll
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\icardie.dll
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2012-10-14 13:01:05 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2012-10-14 13:01:04 ----A---- C:\Windows\SYSWOW64\wextract.exe
2012-10-14 13:01:04 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2012-10-14 13:01:04 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2012-10-14 13:01:04 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2012-10-14 13:01:04 ----A---- C:\Windows\SYSWOW64\occache.dll
2012-10-14 13:01:04 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-10-14 13:01:04 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-10-14 13:01:04 ----A---- C:\Windows\SYSWOW64\mshta.exe
2012-10-14 13:01:04 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-10-14 13:01:04 ----A---- C:\Windows\SYSWOW64\inseng.dll
2012-10-14 13:01:04 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2012-10-14 13:01:04 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2012-10-14 13:01:04 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-10-14 13:01:04 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2012-10-14 13:01:04 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2012-10-14 13:01:04 ----A---- C:\Windows\SYSWOW64\admparse.dll
2012-10-14 13:01:04 ----A---- C:\Windows\system32\wininet.dll
2012-10-14 13:01:04 ----A---- C:\Windows\system32\urlmon.dll
2012-10-14 13:01:04 ----A---- C:\Windows\system32\msrating.dll
2012-10-14 13:01:04 ----A---- C:\Windows\system32\msls31.dll
2012-10-14 13:01:04 ----A---- C:\Windows\system32\jsproxy.dll
2012-10-14 13:01:04 ----A---- C:\Windows\system32\iertutil.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\webcheck.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\url.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2012-10-14 13:01:03 ----A---- C:\Windows\system32\pngfilt.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\occache.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\mshtmler.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\mshtml.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\mshta.exe
2012-10-14 13:01:03 ----A---- C:\Windows\system32\msfeedssync.exe
2012-10-14 13:01:03 ----A---- C:\Windows\system32\msfeedsbs.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\jscript9.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\jscript.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\imgutil.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\ieUnatt.exe
2012-10-14 13:01:03 ----A---- C:\Windows\system32\ieui.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\iesysprep.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\iesetup.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\iernonce.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\iepeers.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\ieframe.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\iedkcs32.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\ieapfltr.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\ieapfltr.dat
2012-10-14 13:01:03 ----A---- C:\Windows\system32\ieakui.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\ieaksie.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\ieakeng.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\IEAdvpack.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\ie4uinit.exe
2012-10-14 13:01:03 ----A---- C:\Windows\system32\icardie.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\dxtrans.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\dxtmsft.dll
2012-10-14 13:01:03 ----A---- C:\Windows\system32\admparse.dll
2012-10-14 13:01:02 ----A---- C:\Windows\system32\wextract.exe
2012-10-14 13:01:02 ----A---- C:\Windows\system32\vbscript.dll
2012-10-14 13:01:02 ----A---- C:\Windows\system32\mshtmled.dll
2012-10-14 13:01:02 ----A---- C:\Windows\system32\msfeeds.dll
2012-10-14 13:01:02 ----A---- C:\Windows\system32\licmgr10.dll
2012-10-14 13:01:02 ----A---- C:\Windows\system32\inseng.dll
2012-10-14 13:01:02 ----A---- C:\Windows\system32\iexpress.exe
2012-10-13 22:10:23 ----D---- C:\Program Files (x86)\OscarX7Editor5Mode
2012-10-13 22:10:00 ----D---- C:\Program Files (x86)\5 mode Oscar
2012-10-13 22:06:24 ----HD---- C:\Program Files (x86)\Creative Installation Information
2012-10-13 22:05:47 ----A---- C:\Windows\XENMCcfg.ini
2012-10-13 22:05:47 ----A---- C:\Windows\XENDefE.exe
2012-10-13 22:05:47 ----A---- C:\Windows\XENcfg.ini
2012-10-13 22:05:47 ----A---- C:\Windows\SYSWOW64\XENCFX32.dll
2012-10-13 22:05:47 ----A---- C:\Windows\SYSWOW64\XENAPO32.dll
2012-10-13 22:05:47 ----A---- C:\Windows\system32\xfiXEN.ini
2012-10-13 22:05:47 ----A---- C:\Windows\system32\XENpld64.dll
2012-10-13 22:05:47 ----A---- C:\Windows\system32\XENcInst.dll
2012-10-13 22:05:47 ----A---- C:\Windows\system32\XENCFX64.dll
2012-10-13 22:05:47 ----A---- C:\Windows\system32\XENAPO64.dll
2012-10-13 22:05:47 ----A---- C:\Windows\system32\drivers\XENfiltv.sys
2012-10-13 22:05:47 ----A---- C:\Windows\AddCat.exe
2012-10-13 22:05:46 ----A---- C:\Windows\SYSWOW64\CmdRtr.DLL
2012-10-13 22:05:46 ----A---- C:\Windows\SYSWOW64\APOMngr.DLL
2012-10-13 22:05:46 ----A---- C:\Windows\system32\CmdRtr64.DLL
2012-10-13 22:05:46 ----A---- C:\Windows\system32\APOMgr64.DLL
2012-10-13 22:05:38 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2012-10-13 22:05:38 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2012-10-13 22:05:38 ----A---- C:\Windows\system32\wrap_oal.dll
2012-10-13 22:05:38 ----A---- C:\Windows\system32\OpenAL32.dll
2012-10-13 22:05:32 ----N---- C:\Windows\SYSWOW64\Sens_oal.dll
2012-10-13 22:05:32 ----N---- C:\Windows\system32\Sens_oal.dll
2012-10-13 22:05:26 ----N---- C:\Windows\Ctregrun.exe
2012-10-13 22:04:36 ----D---- C:\Program Files\Creative
2012-10-13 22:04:22 ----D---- C:\Program Files (x86)\Creative
2012-10-13 22:03:42 ----D---- C:\Program Files\Sound Blaster Tactic(3D) Alpha
2012-10-13 22:02:51 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-10-13 20:56:40 ----A---- C:\Windows\system32\drivers\revoflt.sys
2012-10-13 20:56:39 ----D---- C:\Program Files\Revo Uninstaller Pro
2012-10-13 20:55:33 ----D---- C:\Program Files\FreeCommander
2012-10-13 20:53:58 ----D---- C:\Program Files\7-Zip
2012-10-13 19:50:49 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2012-10-13 19:50:49 ----A---- C:\Windows\system32\qdvd.dll
2012-10-13 19:50:48 ----A---- C:\Windows\system32\OxpsConverter.exe
2012-10-13 19:50:42 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2012-10-13 19:50:42 ----A---- C:\Windows\system32\drivers\ndis.sys
2012-10-13 19:50:32 ----A---- C:\Windows\system32\drivers\tcpip.sys
2012-10-13 19:50:31 ----A---- C:\Windows\system32\drivers\netio.sys
2012-10-13 19:50:31 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2012-10-13 19:32:59 ----D---- C:\Program Files\Microsoft Silverlight
2012-10-13 19:32:59 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2012-10-13 19:21:11 ----D---- C:\Windows\system32\SPReview
2012-10-13 19:20:13 ----D---- C:\Windows\system32\EventProviders
2012-10-13 19:13:39 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2012-10-13 19:13:39 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2012-10-13 19:13:38 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2012-10-13 19:13:37 ----A---- C:\Windows\SYSWOW64\FirewallControlPanel.dll
2012-10-13 19:13:36 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2012-10-13 19:13:33 ----A---- C:\Windows\SYSWOW64\mscories.dll
2012-10-13 19:13:33 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2012-10-13 19:13:33 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2012-10-13 19:13:32 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2012-10-13 19:13:32 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL
2012-10-13 19:13:32 ----A---- C:\Windows\SYSWOW64\NAPCRYPT.DLL
2012-10-13 19:13:32 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2012-10-13 19:13:30 ----A---- C:\Windows\SYSWOW64\wusa.exe
2012-10-13 19:13:30 ----A---- C:\Windows\SYSWOW64\wsdchngr.dll
2012-10-13 19:13:30 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2012-10-13 19:13:29 ----A---- C:\Windows\SYSWOW64\WPDShServiceObj.dll
2012-10-13 19:13:29 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2012-10-13 19:13:29 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2012-10-13 19:13:29 ----A---- C:\Windows\SYSWOW64\PortableDeviceStatus.dll
2012-10-13 19:13:29 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2012-10-13 19:13:28 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2012-10-13 19:13:28 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2012-10-13 19:13:27 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2012-10-13 19:13:27 ----A---- C:\Windows\SYSWOW64\wlanui.dll
2012-10-13 19:13:27 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2012-10-13 19:13:27 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2012-10-13 19:13:27 ----A---- C:\Windows\SYSWOW64\ReAgentc.exe
2012-10-13 19:13:27 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2012-10-13 19:13:26 ----A---- C:\Windows\SYSWOW64\wimserv.exe
2012-10-13 19:13:26 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2012-10-13 19:13:26 ----A---- C:\Windows\SYSWOW64\webservices.dll
2012-10-13 19:13:26 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2012-10-13 19:13:26 ----A---- C:\Windows\SYSWOW64\fphc.dll
2012-10-13 19:13:26 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2012-10-13 19:13:25 ----A---- C:\Windows\twain_32.dll
2012-10-13 19:13:25 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2012-10-13 19:13:25 ----A---- C:\Windows\SYSWOW64\wpdwcn.dll
2012-10-13 19:13:25 ----A---- C:\Windows\SYSWOW64\wiadefui.dll
2012-10-13 19:13:25 ----A---- C:\Windows\SYSWOW64\audiodev.dll
2012-10-13 19:13:24 ----A---- C:\Windows\SYSWOW64\WPDSp.dll
2012-10-13 19:13:24 ----A---- C:\Windows\SYSWOW64\wkscli.dll
2012-10-13 19:13:24 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2012-10-13 19:13:24 ----A---- C:\Windows\SYSWOW64\wiavideo.dll
2012-10-13 19:13:24 ----A---- C:\Windows\SYSWOW64\vdsbas.dll
2012-10-13 19:13:24 ----A---- C:\Windows\SYSWOW64\usp10.dll
2012-10-13 19:13:24 ----A---- C:\Windows\SYSWOW64\userinit.exe
2012-10-13 19:13:24 ----A---- C:\Windows\SYSWOW64\userenv.dll
2012-10-13 19:13:24 ----A---- C:\Windows\SYSWOW64\usercpl.dll
2012-10-13 19:13:24 ----A---- C:\Windows\SYSWOW64\UserAccountControlSettings.dll
2012-10-13 19:13:24 ----A---- C:\Windows\SYSWOW64\upnp.dll
2012-10-13 19:13:24 ----A---- C:\Windows\SYSWOW64\unimdmat.dll
2012-10-13 19:13:24 ----A---- C:\Windows\SYSWOW64\twext.dll
2012-10-13 19:13:24 ----A---- C:\Windows\SYSWOW64\TRAPI.dll
2012-10-13 19:13:24 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2012-10-13 19:13:24 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2012-10-13 19:13:24 ----A---- C:\Windows\SYSWOW64\msvfw32.dll
2012-10-13 19:13:24 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2012-10-13 19:13:24 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2012-10-13 19:13:24 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2012-10-13 19:13:24 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2012-10-13 19:13:23 ----A---- C:\Windows\SYSWOW64\wtsapi32.dll
2012-10-13 19:13:23 ----A---- C:\Windows\SYSWOW64\w32tm.exe
2012-10-13 19:13:23 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2012-10-13 19:13:23 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2012-10-13 19:13:23 ----A---- C:\Windows\SYSWOW64\themeui.dll
2012-10-13 19:13:23 ----A---- C:\Windows\SYSWOW64\themecpl.dll
2012-10-13 19:13:23 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2012-10-13 19:13:23 ----A---- C:\Windows\SYSWOW64\taskmgr.exe
2012-10-13 19:13:23 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2012-10-13 19:13:23 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2012-10-13 19:13:23 ----A---- C:\Windows\SYSWOW64\takeown.exe
2012-10-13 19:13:23 ----A---- C:\Windows\SYSWOW64\schedcli.dll
2012-10-13 19:13:23 ----A---- C:\Windows\SYSWOW64\remotepg.dll
2012-10-13 19:13:23 ----A---- C:\Windows\SYSWOW64\regapi.dll
2012-10-13 19:13:23 ----A---- C:\Windows\SYSWOW64\rdpencom.dll
2012-10-13 19:13:23 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2012-10-13 19:13:23 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2012-10-13 19:13:23 ----A---- C:\Windows\SYSWOW64\input.dll
2012-10-13 19:13:23 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2012-10-13 19:13:22 ----A---- C:\Windows\SYSWOW64\winsta.dll
2012-10-13 19:13:22 ----A---- C:\Windows\SYSWOW64\utildll.dll
2012-10-13 19:13:22 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2012-10-13 19:13:22 ----A---- C:\Windows\SYSWOW64\tlscsp.dll
2012-10-13 19:13:22 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2012-10-13 19:13:22 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2012-10-13 19:13:22 ----A---- C:\Windows\SYSWOW64\syncui.dll
2012-10-13 19:13:22 ----A---- C:\Windows\SYSWOW64\sxs.dll
2012-10-13 19:13:22 ----A---- C:\Windows\SYSWOW64\sud.dll
2012-10-13 19:13:22 ----A---- C:\Windows\SYSWOW64\stobject.dll
2012-10-13 19:13:22 ----A---- C:\Windows\SYSWOW64\ssText3d.scr
2012-10-13 19:13:22 ----A---- C:\Windows\SYSWOW64\sqmapi.dll
2012-10-13 19:13:22 ----A---- C:\Windows\SYSWOW64\spopk.dll
2012-10-13 19:13:22 ----A---- C:\Windows\SYSWOW64\spbcd.dll
2012-10-13 19:13:22 ----A---- C:\Windows\SYSWOW64\rdpendp.dll
2012-10-13 19:13:22 ----A---- C:\Windows\SYSWOW64\rdpd3d.dll
2012-10-13 19:13:22 ----A---- C:\Windows\SYSWOW64\msutb.dll
2012-10-13 19:13:22 ----A---- C:\Windows\SYSWOW64\mstask.dll
2012-10-13 19:13:22 ----A---- C:\Windows\SYSWOW64\lsmproxy.dll
2012-10-13 19:13:22 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2012-10-13 19:13:22 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2012-10-13 19:13:21 ----A---- C:\Windows\SYSWOW64\wsnmp32.dll
2012-10-13 19:13:21 ----A---- C:\Windows\SYSWOW64\srvcli.dll
2012-10-13 19:13:21 ----A---- C:\Windows\SYSWOW64\sqlcese30.dll
2012-10-13 19:13:21 ----A---- C:\Windows\SYSWOW64\spp.dll
2012-10-13 19:13:21 ----A---- C:\Windows\SYSWOW64\sisbkup.dll
2012-10-13 19:13:21 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll
2012-10-13 19:13:21 ----A---- C:\Windows\SYSWOW64\shunimpl.dll
2012-10-13 19:13:21 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2012-10-13 19:13:21 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2012-10-13 19:13:21 ----A---- C:\Windows\SYSWOW64\shimgvw.dll
2012-10-13 19:13:21 ----A---- C:\Windows\SYSWOW64\shgina.dll
2012-10-13 19:13:21 ----A---- C:\Windows\SYSWOW64\inetmib1.dll
2012-10-13 19:13:21 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2012-10-13 19:13:21 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2012-10-13 19:13:20 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2012-10-13 19:13:20 ----A---- C:\Windows\SYSWOW64\shacct.dll
2012-10-13 19:13:20 ----A---- C:\Windows\SYSWOW64\setupcln.dll
2012-10-13 19:13:20 ----A---- C:\Windows\SYSWOW64\sethc.exe
2012-10-13 19:13:19 ----A---- C:\Windows\SYSWOW64\Vault.dll
2012-10-13 19:13:19 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2012-10-13 19:13:19 ----A---- C:\Windows\SYSWOW64\sppinst.dll
2012-10-13 19:13:19 ----A---- C:\Windows\SYSWOW64\sppc.dll
2012-10-13 19:13:19 ----A---- C:\Windows\SYSWOW64\slwga.dll
2012-10-13 19:13:19 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2012-10-13 19:13:19 ----A---- C:\Windows\SYSWOW64\secproc.dll
2012-10-13 19:13:19 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2012-10-13 19:13:19 ----A---- C:\Windows\SYSWOW64\credssp.dll
2012-10-13 19:13:18 ----A---- C:\Windows\SYSWOW64\uxlib.dll
2012-10-13 19:13:18 ----A---- C:\Windows\SYSWOW64\spwizres.dll
2012-10-13 19:13:18 ----A---- C:\Windows\SYSWOW64\spwizeng.dll
2012-10-13 19:13:18 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2012-10-13 19:13:18 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2012-10-13 19:13:18 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2012-10-13 19:13:17 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2012-10-13 19:13:17 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2012-10-13 19:13:17 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2012-10-13 19:13:17 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2012-10-13 19:13:17 ----A---- C:\Windows\SYSWOW64\runonce.exe
2012-10-13 19:13:17 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2012-10-13 19:13:17 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll
2012-10-13 19:13:17 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2012-10-13 19:13:17 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2012-10-13 19:13:17 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2012-10-13 19:13:17 ----A---- C:\Windows\SYSWOW64\logoncli.dll
2012-10-13 19:13:17 ----A---- C:\Windows\SYSWOW64\CertPolEng.dll
2012-10-13 19:13:16 ----A---- C:\Windows\SYSWOW64\vpnikeapi.dll
2012-10-13 19:13:16 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2012-10-13 19:13:16 ----A---- C:\Windows\SYSWOW64\riched32.dll
2012-10-13 19:13:16 ----A---- C:\Windows\SYSWOW64\riched20.dll
2012-10-13 19:13:16 ----A---- C:\Windows\SYSWOW64\Ribbons.scr
2012-10-13 19:13:16 ----A---- C:\Windows\SYSWOW64\rastls.dll
2012-10-13 19:13:16 ----A---- C:\Windows\SYSWOW64\rastapi.dll
2012-10-13 19:13:16 ----A---- C:\Windows\SYSWOW64\rasppp.dll
2012-10-13 19:13:16 ----A---- C:\Windows\SYSWOW64\raschap.dll
2012-10-13 19:13:16 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2012-10-13 19:13:16 ----A---- C:\Windows\SYSWOW64\proquota.exe
2012-10-13 19:13:16 ----A---- C:\Windows\SYSWOW64\propsys.dll
2012-10-13 19:13:16 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2012-10-13 19:13:16 ----A---- C:\Windows\SYSWOW64\mprddm.dll
2012-10-13 19:13:15 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2012-10-13 19:13:15 ----A---- C:\Windows\SYSWOW64\wdscore.dll
2012-10-13 19:13:15 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2012-10-13 19:13:15 ----A---- C:\Windows\SYSWOW64\prncache.dll
2012-10-13 19:13:15 ----A---- C:\Windows\SYSWOW64\powercpl.dll
2012-10-13 19:13:15 ----A---- C:\Windows\SYSWOW64\PkgMgr.exe
2012-10-13 19:13:15 ----A---- C:\Windows\SYSWOW64\pifmgr.dll
2012-10-13 19:13:15 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2012-10-13 19:13:15 ----A---- C:\Windows\SYSWOW64\PhotoScreensaver.scr
2012-10-13 19:13:15 ----A---- C:\Windows\SYSWOW64\PerfCenterCPL.dll
2012-10-13 19:13:14 ----A---- C:\Windows\SYSWOW64\relog.exe
2012-10-13 19:13:14 ----A---- C:\Windows\SYSWOW64\PushPrinterConnections.exe
2012-10-13 19:13:14 ----A---- C:\Windows\SYSWOW64\prntvpt.dll
2012-10-13 19:13:14 ----A---- C:\Windows\SYSWOW64\prnfldr.dll
2012-10-13 19:13:14 ----A---- C:\Windows\SYSWOW64\printui.dll
2012-10-13 19:13:14 ----A---- C:\Windows\SYSWOW64\printmanagement.msc
2012-10-13 19:13:14 ----A---- C:\Windows\SYSWOW64\ppcsnap.dll
2012-10-13 19:13:14 ----A---- C:\Windows\SYSWOW64\pmcsnap.dll
2012-10-13 19:13:14 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2012-10-13 19:13:14 ----A---- C:\Windows\SYSWOW64\logman.exe
2012-10-13 19:13:13 ----A---- C:\Windows\SYSWOW64\OnLineIDCpl.dll
2012-10-13 19:13:13 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2012-10-13 19:13:13 ----A---- C:\Windows\SYSWOW64\ocsetup.exe
2012-10-13 19:13:13 ----A---- C:\Windows\SYSWOW64\ocsetapi.dll
2012-10-13 19:13:13 ----A---- C:\Windows\SYSWOW64\ntlanman.dll
2012-10-13 19:13:13 ----A---- C:\Windows\SYSWOW64\nslookup.exe
2012-10-13 19:13:13 ----A---- C:\Windows\SYSWOW64\networkmap.dll
2012-10-13 19:13:13 ----A---- C:\Windows\SYSWOW64\networkexplorer.dll
2012-10-13 19:13:13 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2012-10-13 19:13:13 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2012-10-13 19:13:13 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2012-10-13 19:13:12 ----A---- C:\Windows\SYSWOW64\QUTIL.DLL
2012-10-13 19:13:12 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL
2012-10-13 19:13:12 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2012-10-13 19:13:12 ----A---- C:\Windows\SYSWOW64\pnidui.dll
2012-10-13 19:13:12 ----A---- C:\Windows\SYSWOW64\netutils.dll
2012-10-13 19:13:12 ----A---- C:\Windows\SYSWOW64\netshell.dll
2012-10-13 19:13:12 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2012-10-13 19:13:12 ----A---- C:\Windows\SYSWOW64\netjoin.dll
2012-10-13 19:13:12 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2012-10-13 19:13:12 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2012-10-13 19:13:12 ----A---- C:\Windows\SYSWOW64\net1.exe
2012-10-13 19:13:12 ----A---- C:\Windows\SYSWOW64\ncryptui.dll
2012-10-13 19:13:12 ----A---- C:\Windows\SYSWOW64\nci.dll
2012-10-13 19:13:12 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2012-10-13 19:13:12 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2012-10-13 19:13:11 ----A---- C:\Windows\SYSWOW64\nshipsec.dll
2012-10-13 19:13:11 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2012-10-13 19:13:11 ----A---- C:\Windows\SYSWOW64\napdsnap.dll
2012-10-13 19:13:11 ----A---- C:\Windows\SYSWOW64\iasrad.dll
2012-10-13 19:13:11 ----A---- C:\Windows\SYSWOW64\iasacct.dll
2012-10-13 19:13:10 ----A---- C:\Windows\SYSWOW64\Mystify.scr
2012-10-13 19:13:10 ----A---- C:\Windows\SYSWOW64\mydocs.dll
2012-10-13 19:13:10 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2012-10-13 19:13:10 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe
2012-10-13 19:13:09 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2012-10-13 19:13:09 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2012-10-13 19:13:09 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2012-10-13 19:13:08 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll
2012-10-13 19:13:08 ----A---- C:\Windows\SYSWOW64\MSAC3ENC.DLL
2012-10-13 19:13:08 ----A---- C:\Windows\SYSWOW64\mprapi.dll
2012-10-13 19:13:08 ----A---- C:\Windows\SYSWOW64\mobsync.exe
2012-10-13 19:13:08 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2012-10-13 19:13:07 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2012-10-13 19:13:07 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2012-10-13 19:13:07 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2012-10-13 19:13:07 ----A---- C:\Windows\SYSWOW64\mapistub.dll
2012-10-13 19:13:07 ----A---- C:\Windows\SYSWOW64\logagent.exe
2012-10-13 19:13:06 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2012-10-13 19:13:06 ----A---- C:\Windows\SYSWOW64\odbcconf.dll
2012-10-13 19:13:06 ----A---- C:\Windows\SYSWOW64\migisol.dll
2012-10-13 19:13:06 ----A---- C:\Windows\SYSWOW64\mapi32.dll
2012-10-13 19:13:05 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2012-10-13 19:13:05 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2012-10-13 19:13:05 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2012-10-13 19:13:04 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2012-10-13 19:13:04 ----A---- C:\Windows\SYSWOW64\luainstall.dll
2012-10-13 19:12:56 ----A---- C:\Windows\SYSWOW64\wshirda.dll
2012-10-13 19:12:56 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2012-10-13 19:12:56 ----A---- C:\Windows\SYSWOW64\MuiUnattend.exe
2012-10-13 19:12:56 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2012-10-13 19:12:56 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2012-10-13 19:12:56 ----A---- C:\Windows\SYSWOW64\isoburn.exe
2012-10-13 19:12:56 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2012-10-13 19:12:56 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2012-10-13 19:12:54 ----A---- C:\Windows\SYSWOW64\itircl.dll
2012-10-13 19:12:54 ----A---- C:\Windows\SYSWOW64\httpapi.dll
2012-10-13 19:12:54 ----A---- C:\Windows\SYSWOW64\hgcpl.dll
2012-10-13 19:12:54 ----A---- C:\Windows\SYSWOW64\elsTrans.dll
2012-10-13 19:12:54 ----A---- C:\Windows\SYSWOW64\C_ISCII.DLL
2012-10-13 19:12:54 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2012-10-13 19:12:53 ----A---- C:\Windows\SYSWOW64\gpprefcl.dll
2012-10-13 19:12:53 ----A---- C:\Windows\SYSWOW64\appmgr.dll
2012-10-13 19:12:53 ----A---- C:\Windows\SYSWOW64\AdmTmpl.dll
2012-10-13 19:12:53 ----A---- C:\Windows\SYSWOW64\ActionCenterCPL.dll
2012-10-13 19:12:52 ----A---- C:\Windows\SYSWOW64\untfs.dll
2012-10-13 19:12:52 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2012-10-13 19:12:52 ----A---- C:\Windows\SYSWOW64\scrptadm.dll
2012-10-13 19:12:52 ----A---- C:\Windows\SYSWOW64\resutils.dll
2012-10-13 19:12:52 ----A---- C:\Windows\SYSWOW64\ifsutil.dll
2012-10-13 19:12:52 ----A---- C:\Windows\SYSWOW64\ftp.exe
2012-10-13 19:12:52 ----A---- C:\Windows\SYSWOW64\findstr.exe
2012-10-13 19:12:52 ----A---- C:\Windows\SYSWOW64\fdeploy.dll
2012-10-13 19:12:52 ----A---- C:\Windows\SYSWOW64\fde.dll
2012-10-13 19:12:52 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2012-10-13 19:12:51 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2012-10-13 19:12:51 ----A---- C:\Windows\SYSWOW64\wer.dll
2012-10-13 19:12:51 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2012-10-13 19:12:51 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2012-10-13 19:12:51 ----A---- C:\Windows\SYSWOW64\evr.dll
2012-10-13 19:12:51 ----A---- C:\Windows\SYSWOW64\eudcedit.exe
2012-10-13 19:12:51 ----A---- C:\Windows\SYSWOW64\EhStorAPI.dll
2012-10-13 19:12:51 ----A---- C:\Windows\SYSWOW64\efscore.dll
2012-10-13 19:12:51 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll
2012-10-13 19:12:51 ----A---- C:\Windows\SYSWOW64\dskquoui.dll
2012-10-13 19:12:51 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2012-10-13 19:12:51 ----A---- C:\Windows\SYSWOW64\dot3ui.dll
2012-10-13 19:12:51 ----A---- C:\Windows\SYSWOW64\dot3cfg.dll
2012-10-13 19:12:51 ----A---- C:\Windows\SYSWOW64\dnscmmc.dll
2012-10-13 19:12:51 ----A---- C:\Windows\SYSWOW64\Display.dll
2012-10-13 19:12:51 ----A---- C:\Windows\SYSWOW64\diskraid.exe
2012-10-13 19:12:51 ----A---- C:\Windows\SYSWOW64\diskpart.exe
2012-10-13 19:12:50 ----A---- C:\Windows\SYSWOW64\vfwwdm32.dll
2012-10-13 19:12:50 ----A---- C:\Windows\SYSWOW64\setupugc.exe
2012-10-13 19:12:50 ----A---- C:\Windows\SYSWOW64\qdv.dll
2012-10-13 19:12:50 ----A---- C:\Windows\SYSWOW64\qcap.dll
2012-10-13 19:12:50 ----A---- C:\Windows\SYSWOW64\msdmo.dll
2012-10-13 19:12:50 ----A---- C:\Windows\SYSWOW64\mciqtz32.dll
2012-10-13 19:12:50 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2012-10-13 19:12:50 ----A---- C:\Windows\SYSWOW64\dxdiagn.dll
2012-10-13 19:12:50 ----A---- C:\Windows\SYSWOW64\dsauth.dll
2012-10-13 19:12:50 ----A---- C:\Windows\SYSWOW64\dpx.dll
2012-10-13 19:12:50 ----A---- C:\Windows\SYSWOW64\dpnaddr.dll
2012-10-13 19:12:50 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2012-10-13 19:12:50 ----A---- C:\Windows\SYSWOW64\dfrgui.exe
2012-10-13 19:12:50 ----A---- C:\Windows\SYSWOW64\DevicePairingFolder.dll
2012-10-13 19:12:50 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll
2012-10-13 19:12:50 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2012-10-13 19:12:50 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2012-10-13 19:12:50 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2012-10-13 19:12:50 ----A---- C:\Windows\SYSWOW64\amstream.dll
2012-10-13 19:12:49 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2012-10-13 19:12:49 ----A---- C:\Windows\SYSWOW64\samcli.dll
2012-10-13 19:12:49 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2012-10-13 19:12:49 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2012-10-13 19:12:49 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2012-10-13 19:12:46 ----A---- C:\Windows\SYSWOW64\localsec.dll
2012-10-13 19:12:45 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2012-10-13 19:12:42 ----A---- C:\Windows\SYSWOW64\credui.dll
2012-10-13 19:12:40 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2012-10-13 19:12:39 ----A---- C:\Windows\SYSWOW64\netid.dll
2012-10-13 19:12:39 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2012-10-13 19:12:38 ----A---- C:\Windows\SYSWOW64\OpcServices.dll
2012-10-13 19:12:37 ----A---- C:\Windows\SYSWOW64\olethk32.dll
2012-10-13 19:12:37 ----A---- C:\Windows\SYSWOW64\ole32.dll
2012-10-13 19:12:37 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2012-10-13 19:12:32 ----A---- C:\Windows\SYSWOW64\calc.exe
2012-10-13 19:12:31 ----A---- C:\Windows\SYSWOW64\cabview.dll
2012-10-13 19:12:30 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2012-10-13 19:12:30 ----A---- C:\Windows\SYSWOW64\certcli.dll
2012-10-13 19:12:30 ----A---- C:\Windows\SYSWOW64\cabinet.dll
2012-10-13 19:12:29 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2012-10-13 19:12:28 ----A---- C:\Windows\SYSWOW64\Query.dll
2012-10-13 19:12:27 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2012-10-13 19:12:27 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2012-10-13 19:12:24 ----A---- C:\Windows\SYSWOW64\Bubbles.scr
2012-10-13 19:12:24 ----A---- C:\Windows\SYSWOW64\browseui.dll
2012-10-13 19:12:24 ----A---- C:\Windows\SYSWOW64\bitsadmin.exe
2012-10-13 19:12:24 ----A---- C:\Windows\SYSWOW64\batmeter.dll
2012-10-13 19:12:24 ----A---- C:\Windows\SYSWOW64\AzSqlExt.dll
2012-10-13 19:12:24 ----A---- C:\Windows\SYSWOW64\azroles.dll
2012-10-13 19:12:23 ----A---- C:\Windows\SYSWOW64\autoplay.dll
2012-10-13 19:12:22 ----A---- C:\Windows\SYSWOW64\autochk.exe
2012-10-13 19:12:22 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2012-10-13 19:12:21 ----A---- C:\Windows\SYSWOW64\winmm.dll
2012-10-13 19:12:21 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll
2012-10-13 19:12:21 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2012-10-13 19:12:21 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2012-10-13 19:12:21 ----A---- C:\Windows\SYSWOW64\authui.dll
2012-10-13 19:12:20 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2012-10-13 19:12:20 ----A---- C:\Windows\SYSWOW64\dsuiext.dll
2012-10-13 19:12:20 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2012-10-13 19:12:20 ----A---- C:\Windows\SYSWOW64\adsldp.dll
2012-10-13 19:12:20 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2012-10-13 19:12:20 ----A---- C:\Windows\SYSWOW64\activeds.dll
2012-10-13 19:12:20 ----A---- C:\Windows\SYSWOW64\accessibilitycpl.dll
2012-10-13 19:12:19 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2012-10-13 19:12:19 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2012-10-13 19:12:19 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2012-10-13 19:12:17 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2012-10-13 19:12:17 ----A---- C:\Windows\SYSWOW64\wups.dll
2012-10-13 19:12:17 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2012-10-13 19:12:17 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2012-10-13 19:12:17 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2012-10-13 19:12:17 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2012-10-13 19:12:17 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2012-10-13 19:12:17 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2012-10-13 19:12:17 ----A---- C:\Windows\SYSWOW64\wbemcomn.dll
2012-10-13 19:12:17 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2012-10-13 19:12:17 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2012-10-13 19:12:16 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2012-10-13 19:12:16 ----A---- C:\Windows\SYSWOW64\wavemsp.dll
2012-10-13 19:12:16 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2012-10-13 19:12:16 ----A---- C:\Windows\SYSWOW64\VAN.dll
2012-10-13 19:12:16 ----A---- C:\Windows\SYSWOW64\user32.dll
2012-10-13 19:12:16 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2012-10-13 19:12:16 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2012-10-13 19:12:16 ----A---- C:\Windows\SYSWOW64\tzutil.exe
2012-10-13 19:12:16 ----A---- C:\Windows\SYSWOW64\termmgr.dll
2012-10-13 19:12:16 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2012-10-13 19:12:16 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2012-10-13 19:12:16 ----A---- C:\Windows\SYSWOW64\perfts.dll
2012-10-13 19:12:16 ----A---- C:\Windows\SYSWOW64\netiougc.exe
2012-10-13 19:12:16 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2012-10-13 19:12:16 ----A---- C:\Windows\SYSWOW64\cca.dll
2012-10-13 19:12:15 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2012-10-13 19:12:15 ----A---- C:\Windows\SYSWOW64\syssetup.dll
2012-10-13 19:12:15 ----A---- C:\Windows\SYSWOW64\sscore.dll
2012-10-13 19:12:15 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2012-10-13 19:12:15 ----A---- C:\Windows\SYSWOW64\rdprefdrvapi.dll
2012-10-13 19:12:15 ----A---- C:\Windows\SYSWOW64\PortableDeviceSyncProvider.dll
2012-10-13 19:12:15 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2012-10-13 19:12:14 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2012-10-13 19:12:14 ----A---- C:\Windows\SYSWOW64\sppcomapi.dll
2012-10-13 19:12:14 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2012-10-13 19:12:14 ----A---- C:\Windows\SYSWOW64\scecli.dll
2012-10-13 19:12:14 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2012-10-13 19:12:14 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2012-10-13 19:12:14 ----A---- C:\Windows\SYSWOW64\rdvgumd32.dll
2012-10-13 19:12:14 ----A---- C:\Windows\SYSWOW64\qedit.dll
2012-10-13 19:12:14 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2012-10-13 19:12:14 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2012-10-13 19:12:14 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll
2012-10-13 19:12:14 ----A---- C:\Windows\SYSWOW64\cmstp.exe
2012-10-13 19:12:13 ----A---- C:\Windows\SYSWOW64\wvc.dll
2012-10-13 19:12:13 ----A---- C:\Windows\SYSWOW64\wdc.dll
2012-10-13 19:12:13 ----A---- C:\Windows\SYSWOW64\unlodctr.exe
2012-10-13 19:12:13 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2012-10-13 19:12:13 ----A---- C:\Windows\SYSWOW64\pla.dll
2012-10-13 19:12:13 ----A---- C:\Windows\SYSWOW64\perfmon.exe
2012-10-13 19:12:13 ----A---- C:\Windows\SYSWOW64\pdhui.dll
2012-10-13 19:12:13 ----A---- C:\Windows\SYSWOW64\pdh.dll
2012-10-13 19:12:13 ----A---- C:\Windows\SYSWOW64\onexui.dll
2012-10-13 19:12:13 ----A---- C:\Windows\SYSWOW64\onex.dll
2012-10-13 19:12:13 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2012-10-13 19:12:13 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2012-10-13 19:12:13 ----A---- C:\Windows\SYSWOW64\cscobj.dll
2012-10-13 19:12:12 ----A---- C:\Windows\SYSWOW64\QCLIPROV.DLL
2012-10-13 19:12:12 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2012-10-13 19:12:12 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2012-10-13 19:12:12 ----A---- C:\Windows\SYSWOW64\iasrecst.dll
2012-10-13 19:12:12 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2012-10-13 19:12:11 ----A---- C:\Windows\SYSWOW64\wmdrmnet.dll
2012-10-13 19:12:11 ----A---- C:\Windows\SYSWOW64\wmdrmdev.dll
2012-10-13 19:12:11 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll
2012-10-13 19:12:11 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL
2012-10-13 19:12:11 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2012-10-13 19:12:11 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2012-10-13 19:12:11 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2012-10-13 19:12:11 ----A---- C:\Windows\SYSWOW64\mfds.dll
2012-10-13 19:12:10 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2012-10-13 19:12:10 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2012-10-13 19:12:10 ----A---- C:\Windows\SYSWOW64\msscp.dll
2012-10-13 19:12:10 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2012-10-13 19:12:10 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2012-10-13 19:12:10 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2012-10-13 19:12:09 ----A---- C:\Windows\SYSWOW64\mf.dll
2012-10-13 19:12:09 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2012-10-13 19:12:08 ----A---- C:\Windows\SYSWOW64\imm32.dll
2012-10-13 19:12:08 ----A---- C:\Windows\SYSWOW64\imapi2.dll
2012-10-13 19:12:08 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll
2012-10-13 19:12:06 ----A---- C:\Windows\SYSWOW64\mscms.dll
2012-10-13 19:12:06 ----A---- C:\Windows\SYSWOW64\KBDUS.DLL
2012-10-13 19:12:06 ----A---- C:\Windows\SYSWOW64\KBDSF.DLL
2012-10-13 19:12:06 ----A---- C:\Windows\SYSWOW64\kbdlk41a.dll
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDUGHR1.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDTURME.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDTUQ.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDTUF.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDTAJIK.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDSG.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDPO.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDNEPR.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDMON.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDMAORI.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDLT1.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDINTEL.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDINTAM.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDINORI.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDINMAR.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDINKAN.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDINHIN.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDINBEN.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDGR1.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDGKL.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDGEO.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDCZ1.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDBULG.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDBLR.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\iscsium.dll
2012-10-13 19:12:05 ----A---- C:\Windows\SYSWOW64\iscsicli.exe
2012-10-13 19:12:04 ----A---- C:\Windows\SYSWOW64\provsvc.dll
2012-10-13 19:12:04 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2012-10-13 19:12:04 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2012-10-13 19:12:04 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2012-10-13 19:12:04 ----A---- C:\Windows\SYSWOW64\gameux.dll
2012-10-13 19:12:03 ----A---- C:\Windows\SYSWOW64\muifontsetup.dll
2012-10-13 19:12:03 ----A---- C:\Windows\SYSWOW64\fontext.dll
2012-10-13 19:12:03 ----A---- C:\Windows\SYSWOW64\fms.dll
2012-10-13 19:12:02 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2012-10-13 19:12:01 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2012-10-13 19:12:01 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2012-10-13 19:12:01 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2012-10-13 19:12:01 ----A---- C:\Windows\SYSWOW64\DxpTaskSync.dll
2012-10-13 19:12:00 ----A---- C:\Windows\SYSWOW64\qasf.dll
2012-10-13 19:12:00 ----A---- C:\Windows\SYSWOW64\dot3msm.dll
2012-10-13 19:12:00 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2012-10-13 19:11:59 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2012-10-13 19:11:59 ----A---- C:\Windows\SYSWOW64\cmd.exe
2012-10-13 19:11:59 ----A---- C:\Windows\SYSWOW64\bitsperf.dll
2012-10-13 19:11:59 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2012-10-13 19:11:59 ----A---- C:\Windows\SYSWOW64\acppage.dll
2012-10-13 19:11:58 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll
2012-10-13 19:11:58 ----A---- C:\Windows\SYSWOW64\apphelp.dll

[Zenysi]

2012-10-13 19:10:51 ----A---- C:\Windows\system32\vmictimeprovider.dll
2012-10-13 19:10:51 ----A---- C:\Windows\system32\vmicsvc.exe
2012-10-13 19:10:50 ----A---- C:\Windows\system32\WSDApi.dll
2012-10-13 19:10:50 ----A---- C:\Windows\system32\vmstorfltres.dll
2012-10-13 19:10:50 ----A---- C:\Windows\system32\vmicres.dll
2012-10-13 19:10:50 ----A---- C:\Windows\system32\VmdCoinstall.dll
2012-10-13 19:10:50 ----A---- C:\Windows\system32\vmbusres.dll
2012-10-13 19:10:50 ----A---- C:\Windows\system32\vmbuspipe.dll
2012-10-13 19:10:50 ----A---- C:\Windows\system32\VmbusCoinstaller.dll
2012-10-13 19:10:50 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2012-10-13 19:10:50 ----A---- C:\Windows\system32\PresentationHost.exe
2012-10-13 19:10:50 ----A---- C:\Windows\system32\IcCoinstall.dll
2012-10-13 19:10:50 ----A---- C:\Windows\system32\drivers\winhv.sys
2012-10-13 19:10:50 ----A---- C:\Windows\system32\drivers\vmstorfl.sys
2012-10-13 19:10:50 ----A---- C:\Windows\system32\drivers\vms3cap.sys
2012-10-13 19:10:50 ----A---- C:\Windows\system32\drivers\VMBusHID.sys
2012-10-13 19:10:50 ----A---- C:\Windows\system32\drivers\vmbus.sys
2012-10-13 19:10:50 ----A---- C:\Windows\system32\drivers\storvsc.sys
2012-10-13 19:10:49 ----A---- C:\Windows\system32\StructuredQuery.dll
2012-10-13 19:10:48 ----A---- C:\Windows\system32\drivers\USBAUDIO.sys
2012-10-13 19:10:46 ----A---- C:\Windows\system32\drivers\volsnap.sys
2012-10-13 19:10:46 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2012-10-13 19:10:45 ----A---- C:\Windows\system32\umb.dll
2012-10-13 19:10:45 ----A---- C:\Windows\system32\drivers\umbus.sys
2012-10-13 19:10:44 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2012-10-13 19:10:42 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2012-10-13 19:10:39 ----A---- C:\Windows\system32\MPSSVC.dll
2012-10-13 19:10:39 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2012-10-13 19:10:39 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2012-10-13 19:10:35 ----A---- C:\Windows\system32\mscorier.dll
2012-10-13 19:10:35 ----A---- C:\Windows\system32\mscoree.dll
2012-10-13 19:10:34 ----A---- C:\Windows\system32\netfxperf.dll
2012-10-13 19:10:34 ----A---- C:\Windows\system32\Narrator.exe
2012-10-13 19:10:34 ----A---- C:\Windows\system32\NAPHLPR.DLL
2012-10-13 19:10:34 ----A---- C:\Windows\system32\dfshim.dll
2012-10-13 19:10:33 ----A---- C:\Windows\system32\wpd_ci.dll
2012-10-13 19:10:33 ----A---- C:\Windows\system32\winhttp.dll
2012-10-13 19:10:33 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2012-10-13 19:10:33 ----A---- C:\Windows\system32\drivers\scsiport.sys
2012-10-13 19:10:33 ----A---- C:\Windows\system32\drivers\msdsm.sys
2012-10-13 19:10:33 ----A---- C:\Windows\system32\drivers\msahci.sys
2012-10-13 19:10:33 ----A---- C:\Windows\system32\drivers\mpio.sys
2012-10-13 19:10:33 ----A---- C:\Windows\system32\drivers\ataport.sys
2012-10-13 19:10:32 ----A---- C:\Windows\system32\zipfldr.dll
2012-10-13 19:10:32 ----A---- C:\Windows\system32\wwanprotdim.dll
2012-10-13 19:10:32 ----A---- C:\Windows\system32\wwanconn.dll
2012-10-13 19:10:32 ----A---- C:\Windows\system32\wusa.exe
2012-10-13 19:10:32 ----A---- C:\Windows\system32\CertEnroll.dll
2012-10-13 19:10:31 ----A---- C:\Windows\system32\wsdchngr.dll
2012-10-13 19:10:31 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2012-10-13 19:10:31 ----A---- C:\Windows\system32\wpdshext.dll
2012-10-13 19:10:31 ----A---- C:\Windows\system32\wpdbusenum.dll
2012-10-13 19:10:31 ----A---- C:\Windows\system32\wkssvc.dll
2012-10-13 19:10:31 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2012-10-13 19:10:31 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2012-10-13 19:10:30 ----A---- C:\Windows\system32\WMVSDECD.DLL
2012-10-13 19:10:30 ----A---- C:\Windows\system32\WMVDECOD.DLL
2012-10-13 19:10:30 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2012-10-13 19:10:30 ----A---- C:\Windows\system32\wmicmiplugin.dll
2012-10-13 19:10:30 ----A---- C:\Windows\system32\WMADMOD.DLL
2012-10-13 19:10:30 ----A---- C:\Windows\system32\wbemcomn.dll
2012-10-13 19:10:30 ----A---- C:\Windows\system32\framedynos.dll
2012-10-13 19:10:30 ----A---- C:\Windows\system32\framedyn.dll
2012-10-13 19:10:29 ----A---- C:\Windows\system32\wlanui.dll
2012-10-13 19:10:29 ----A---- C:\Windows\system32\wlanpref.dll
2012-10-13 19:10:29 ----A---- C:\Windows\system32\wlanmsm.dll
2012-10-13 19:10:29 ----A---- C:\Windows\system32\wlangpui.dll
2012-10-13 19:10:29 ----A---- C:\Windows\system32\winlogon.exe
2012-10-13 19:10:29 ----A---- C:\Windows\system32\WindowsCodecs.dll
2012-10-13 19:10:29 ----A---- C:\Windows\system32\webservices.dll
2012-10-13 19:10:29 ----A---- C:\Windows\system32\ReAgent.dll
2012-10-13 19:10:29 ----A---- C:\Windows\system32\fphc.dll
2012-10-13 19:10:28 ----A---- C:\Windows\system32\WinSAT.exe
2012-10-13 19:10:28 ----A---- C:\Windows\system32\wiaservc.dll
2012-10-13 19:10:28 ----A---- C:\Windows\system32\wiadefui.dll
2012-10-13 19:10:28 ----A---- C:\Windows\system32\WebClnt.dll
2012-10-13 19:10:28 ----A---- C:\Windows\system32\wcncsvc.dll
2012-10-13 19:10:28 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2012-10-13 19:10:28 ----A---- C:\Windows\system32\davclnt.dll
2012-10-13 19:10:27 ----A---- C:\Windows\system32\ws2_32.dll
2012-10-13 19:10:27 ----A---- C:\Windows\system32\wpdwcn.dll
2012-10-13 19:10:26 ----A---- C:\Windows\system32\WsmSvc.dll
2012-10-13 19:10:26 ----A---- C:\Windows\system32\WinSATAPI.dll
2012-10-13 19:10:26 ----A---- C:\Windows\system32\wiavideo.dll
2012-10-13 19:10:24 ----A---- C:\Windows\system32\WPDSp.dll
2012-10-13 19:10:24 ----A---- C:\Windows\system32\wkscli.dll
2012-10-13 19:10:24 ----A---- C:\Windows\system32\VSSVC.exe
2012-10-13 19:10:24 ----A---- C:\Windows\system32\vssapi.dll
2012-10-13 19:10:24 ----A---- C:\Windows\system32\vss_ps.dll
2012-10-13 19:10:24 ----A---- C:\Windows\system32\vdsutil.dll
2012-10-13 19:10:24 ----A---- C:\Windows\system32\vds.exe
2012-10-13 19:10:24 ----A---- C:\Windows\system32\VAN.dll
2012-10-13 19:10:24 ----A---- C:\Windows\system32\mswsock.dll
2012-10-13 19:10:24 ----A---- C:\Windows\system32\MSVidCtl.dll
2012-10-13 19:10:24 ----A---- C:\Windows\system32\msvidc32.dll
2012-10-13 19:10:24 ----A---- C:\Windows\system32\msrle32.dll
2012-10-13 19:10:24 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2012-10-13 19:10:24 ----A---- C:\Windows\system32\cca.dll
2012-10-13 19:10:23 ----A---- C:\Windows\system32\vdsbas.dll
2012-10-13 19:10:23 ----A---- C:\Windows\system32\usp10.dll
2012-10-13 19:10:23 ----A---- C:\Windows\system32\userinit.exe
2012-10-13 19:10:23 ----A---- C:\Windows\system32\userenv.dll
2012-10-13 19:10:23 ----A---- C:\Windows\system32\usercpl.dll
2012-10-13 19:10:23 ----A---- C:\Windows\system32\user32.dll
2012-10-13 19:10:23 ----A---- C:\Windows\system32\upnp.dll
2012-10-13 19:10:23 ----A---- C:\Windows\system32\unimdmat.dll
2012-10-13 19:10:23 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2012-10-13 19:10:23 ----A---- C:\Windows\system32\djoin.exe
2012-10-13 19:10:22 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2012-10-13 19:10:22 ----A---- C:\Windows\system32\UIRibbonRes.dll
2012-10-13 19:10:22 ----A---- C:\Windows\system32\UIRibbon.dll
2012-10-13 19:10:22 ----A---- C:\Windows\system32\tzutil.exe
2012-10-13 19:10:22 ----A---- C:\Windows\system32\twext.dll
2012-10-13 19:10:22 ----A---- C:\Windows\system32\TRAPI.dll
2012-10-13 19:10:22 ----A---- C:\Windows\system32\thumbcache.dll
2012-10-13 19:10:22 ----A---- C:\Windows\system32\themeui.dll
2012-10-13 19:10:22 ----A---- C:\Windows\system32\themecpl.dll
2012-10-13 19:10:22 ----A---- C:\Windows\system32\termmgr.dll
2012-10-13 19:10:22 ----A---- C:\Windows\system32\tcpipcfg.dll
2012-10-13 19:10:22 ----A---- C:\Windows\system32\taskschd.dll
2012-10-13 19:10:22 ----A---- C:\Windows\system32\taskeng.exe
2012-10-13 19:10:22 ----A---- C:\Windows\system32\schedsvc.dll
2012-10-13 19:10:22 ----A---- C:\Windows\system32\schedcli.dll
2012-10-13 19:10:22 ----A---- C:\Windows\system32\netiohlp.dll
2012-10-13 19:10:22 ----A---- C:\Windows\system32\drivers\udfs.sys
2012-10-13 19:10:22 ----A---- C:\Windows\system32\drivers\tunnel.sys
2012-10-13 19:10:22 ----A---- C:\Windows\system32\drivers\tdx.sys
2012-10-13 19:10:22 ----A---- C:\Windows\system32\drivers\tdi.sys
2012-10-13 19:10:22 ----A---- C:\Windows\system32\drivers\rdpdr.sys
2012-10-13 19:10:21 ----A---- C:\Windows\system32\wavemsp.dll
2012-10-13 19:10:21 ----A---- C:\Windows\system32\tsgqec.dll
2012-10-13 19:10:21 ----A---- C:\Windows\system32\termsrv.dll
2012-10-13 19:10:21 ----A---- C:\Windows\system32\taskmgr.exe
2012-10-13 19:10:21 ----A---- C:\Windows\system32\taskhost.exe
2012-10-13 19:10:21 ----A---- C:\Windows\system32\taskbarcpl.dll
2012-10-13 19:10:21 ----A---- C:\Windows\system32\tapisrv.dll
2012-10-13 19:10:21 ----A---- C:\Windows\system32\takeown.exe
2012-10-13 19:10:21 ----A---- C:\Windows\system32\tabcal.exe
2012-10-13 19:10:21 ----A---- C:\Windows\system32\SessEnv.dll
2012-10-13 19:10:21 ----A---- C:\Windows\system32\remotepg.dll
2012-10-13 19:10:21 ----A---- C:\Windows\system32\rdpencom.dll
2012-10-13 19:10:21 ----A---- C:\Windows\system32\rdpdd.dll
2012-10-13 19:10:21 ----A---- C:\Windows\system32\MultiDigiMon.exe
2012-10-13 19:10:21 ----A---- C:\Windows\system32\mstscax.dll
2012-10-13 19:10:21 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2012-10-13 19:10:20 ----A---- C:\Windows\system32\wisptis.exe
2012-10-13 19:10:20 ----A---- C:\Windows\system32\winsta.dll
2012-10-13 19:10:20 ----A---- C:\Windows\system32\TSWorkspace.dll
2012-10-13 19:10:20 ----A---- C:\Windows\system32\tspubwmi.dll
2012-10-13 19:10:20 ----A---- C:\Windows\system32\TabSvc.dll
2012-10-13 19:10:20 ----A---- C:\Windows\system32\regapi.dll
2012-10-13 19:10:20 ----A---- C:\Windows\system32\rdpsign.exe
2012-10-13 19:10:20 ----A---- C:\Windows\system32\rdpshell.exe
2012-10-13 19:10:20 ----A---- C:\Windows\system32\rdpinit.exe
2012-10-13 19:10:20 ----A---- C:\Windows\system32\RDPENCDD.dll
2012-10-13 19:10:20 ----A---- C:\Windows\system32\rdpd3d.dll
2012-10-13 19:10:20 ----A---- C:\Windows\system32\rdpclip.exe
2012-10-13 19:10:20 ----A---- C:\Windows\system32\mstsc.exe
2012-10-13 19:10:20 ----A---- C:\Windows\system32\mstask.dll
2012-10-13 19:10:20 ----A---- C:\Windows\system32\lsm.exe
2012-10-13 19:10:20 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2012-10-13 19:10:20 ----A---- C:\Windows\system32\aaclient.dll
2012-10-13 19:10:19 ----A---- C:\Windows\system32\wksprt.exe
2012-10-13 19:10:19 ----A---- C:\Windows\system32\umrdp.dll
2012-10-13 19:10:19 ----A---- C:\Windows\system32\tssrvlic.dll
2012-10-13 19:10:19 ----A---- C:\Windows\system32\tskill.exe
2012-10-13 19:10:19 ----A---- C:\Windows\system32\tsdiscon.exe
2012-10-13 19:10:19 ----A---- C:\Windows\system32\tscon.exe
2012-10-13 19:10:19 ----A---- C:\Windows\system32\shadow.exe
2012-10-13 19:10:19 ----A---- C:\Windows\system32\rwinsta.exe
2012-10-13 19:10:19 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2012-10-13 19:10:19 ----A---- C:\Windows\system32\rdpendp.dll
2012-10-13 19:10:19 ----A---- C:\Windows\system32\LSCSHostPolicy.dll
2012-10-13 19:10:18 ----A---- C:\Windows\system32\tscfgwmi.dll
2012-10-13 19:10:18 ----A---- C:\Windows\system32\taskcomp.dll
2012-10-13 19:10:18 ----A---- C:\Windows\system32\reset.exe
2012-10-13 19:10:18 ----A---- C:\Windows\system32\query.exe
2012-10-13 19:10:18 ----A---- C:\Windows\system32\qprocess.exe
2012-10-13 19:10:18 ----A---- C:\Windows\system32\qappsrv.exe
2012-10-13 19:10:18 ----A---- C:\Windows\system32\logoff.exe
2012-10-13 19:10:18 ----A---- C:\Windows\system32\chgusr.exe
2012-10-13 19:10:18 ----A---- C:\Windows\system32\chgport.exe
2012-10-13 19:10:18 ----A---- C:\Windows\system32\chglogon.exe
2012-10-13 19:10:18 ----A---- C:\Windows\system32\change.exe
2012-10-13 19:10:17 ----A---- C:\Windows\system32\tsmf.dll
2012-10-13 19:10:17 ----A---- C:\Windows\system32\tlscsp.dll
2012-10-13 19:10:17 ----A---- C:\Windows\system32\rdpcfgex.dll
2012-10-13 19:10:17 ----A---- C:\Windows\system32\lsmproxy.dll
2012-10-13 19:10:17 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2012-10-13 19:10:17 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2012-10-13 19:10:16 ----A---- C:\Windows\system32\systemcpl.dll
2012-10-13 19:10:16 ----A---- C:\Windows\system32\syssetup.dll
2012-10-13 19:10:16 ----A---- C:\Windows\system32\sysclass.dll
2012-10-13 19:10:16 ----A---- C:\Windows\system32\syncui.dll
2012-10-13 19:10:16 ----A---- C:\Windows\system32\sxs.dll
2012-10-13 19:10:16 ----A---- C:\Windows\system32\sud.dll
2012-10-13 19:10:16 ----A---- C:\Windows\system32\spopk.dll
2012-10-13 19:10:16 ----A---- C:\Windows\system32\spbcd.dll
2012-10-13 19:10:16 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2012-10-13 19:10:15 ----A---- C:\Windows\system32\wsqmcons.exe
2012-10-13 19:10:15 ----A---- C:\Windows\system32\stobject.dll
2012-10-13 19:10:15 ----A---- C:\Windows\system32\ssText3d.scr
2012-10-13 19:10:15 ----A---- C:\Windows\system32\sqmapi.dll
2012-10-13 19:10:15 ----A---- C:\Windows\system32\sqlcese30.dll
2012-10-13 19:10:15 ----A---- C:\Windows\system32\spp.dll
2012-10-13 19:10:14 ----A---- C:\Windows\system32\WavDest.dll
2012-10-13 19:10:13 ----A---- C:\Windows\system32\wsnmp32.dll
2012-10-13 19:10:13 ----A---- C:\Windows\system32\sscore.dll
2012-10-13 19:10:13 ----A---- C:\Windows\system32\srvsvc.dll
2012-10-13 19:10:13 ----A---- C:\Windows\system32\srvcli.dll
2012-10-13 19:10:13 ----A---- C:\Windows\system32\SmiEngine.dll
2012-10-13 19:10:13 ----A---- C:\Windows\system32\inetmib1.dll
2012-10-13 19:10:13 ----A---- C:\Windows\system32\drivers\scfilter.sys
2012-10-13 19:10:12 ----A---- C:\Windows\system32\sisbkup.dll
2012-10-13 19:10:12 ----A---- C:\Windows\system32\shwebsvc.dll
2012-10-13 19:10:12 ----A---- C:\Windows\system32\shunimpl.dll
2012-10-13 19:10:12 ----A---- C:\Windows\system32\shsvcs.dll
2012-10-13 19:10:12 ----A---- C:\Windows\system32\shlwapi.dll
2012-10-13 19:10:12 ----A---- C:\Windows\system32\shimgvw.dll
2012-10-13 19:10:12 ----A---- C:\Windows\system32\shgina.dll
2012-10-13 19:10:12 ----A---- C:\Windows\system32\certprop.dll
2012-10-13 19:10:12 ----A---- C:\Windows\system32\basecsp.dll
2012-10-13 19:10:11 ----A---- C:\Windows\system32\shsetup.dll
2012-10-13 19:10:11 ----A---- C:\Windows\system32\shdocvw.dll
2012-10-13 19:10:11 ----A---- C:\Windows\system32\shacct.dll
2012-10-13 19:10:11 ----A---- C:\Windows\system32\setupcl.exe
2012-10-13 19:10:11 ----A---- C:\Windows\system32\setupapi.dll
2012-10-13 19:10:11 ----A---- C:\Windows\system32\comctl32.dll
2012-10-13 19:10:10 ----A---- C:\Windows\system32\spwizui.dll
2012-10-13 19:10:10 ----A---- C:\Windows\system32\spreview.exe
2012-10-13 19:10:10 ----A---- C:\Windows\system32\spinstall.exe
2012-10-13 19:10:10 ----A---- C:\Windows\system32\sethc.exe
2012-10-13 19:10:10 ----A---- C:\Windows\system32\ActionQueue.dll
2012-10-13 19:10:09 ----A---- C:\Windows\system32\wscapi.dll
2012-10-13 19:10:09 ----A---- C:\Windows\system32\Vault.dll
2012-10-13 19:10:09 ----A---- C:\Windows\system32\TSpkg.dll
2012-10-13 19:10:09 ----A---- C:\Windows\system32\sppsvc.exe
2012-10-13 19:10:09 ----A---- C:\Windows\system32\sppcomapi.dll
2012-10-13 19:10:09 ----A---- C:\Windows\system32\sppc.dll
2012-10-13 19:10:09 ----A---- C:\Windows\system32\slwga.dll
2012-10-13 19:10:09 ----A---- C:\Windows\system32\slui.exe
2012-10-13 19:10:09 ----A---- C:\Windows\system32\nltest.exe
2012-10-13 19:10:09 ----A---- C:\Windows\system32\netlogon.dll
2012-10-13 19:10:09 ----A---- C:\Windows\system32\msv1_0.dll
2012-10-13 19:10:09 ----A---- C:\Windows\system32\manage-bde.exe
2012-10-13 19:10:09 ----A---- C:\Windows\system32\fvecpl.dll
2012-10-13 19:10:09 ----A---- C:\Windows\system32\credssp.dll
2012-10-13 19:10:08 ----A---- C:\Windows\system32\sppobjs.dll
2012-10-13 19:10:08 ----A---- C:\Windows\system32\schtasks.exe
2012-10-13 19:10:08 ----A---- C:\Windows\system32\seclogon.dll
2012-10-13 19:10:08 ----A---- C:\Windows\system32\SearchFolder.dll
2012-10-13 19:10:08 ----A---- C:\Windows\system32\sdrsvc.dll
2012-10-13 19:10:08 ----A---- C:\Windows\system32\sdengin2.dll
2012-10-13 19:10:08 ----A---- C:\Windows\system32\sdclt.exe
2012-10-13 19:10:08 ----A---- C:\Windows\system32\scecli.dll
2012-10-13 19:10:08 ----A---- C:\Windows\system32\scavengeui.dll
2012-10-13 19:10:08 ----A---- C:\Windows\system32\scansetting.dll
2012-10-13 19:10:08 ----A---- C:\Windows\system32\fveapi.dll
2012-10-13 19:10:08 ----A---- C:\Windows\system32\drivers\fvevol.sys
2012-10-13 19:10:08 ----A---- C:\Windows\system32\BdeHdCfg.exe
2012-10-13 19:10:07 ----A---- C:\Windows\system32\secproc.dll
2012-10-13 19:10:07 ----A---- C:\Windows\system32\RMActivate.exe
2012-10-13 19:10:07 ----A---- C:\Windows\system32\repair-bde.exe
2012-10-13 19:10:05 ----A---- C:\Windows\system32\uxlib.dll
2012-10-13 19:10:05 ----A---- C:\Windows\system32\sysmain.dll
2012-10-13 19:10:05 ----A---- C:\Windows\system32\spwizres.dll
2012-10-13 19:10:05 ----A---- C:\Windows\system32\spwizeng.dll
2012-10-13 19:10:05 ----A---- C:\Windows\system32\secproc_ssp.dll
2012-10-13 19:10:05 ----A---- C:\Windows\system32\secproc_isv.dll
2012-10-13 19:10:05 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2012-10-13 19:10:05 ----A---- C:\Windows\system32\RMActivate_isv.exe
2012-10-13 19:10:04 ----A---- C:\Windows\system32\srrstr.dll
2012-10-13 19:10:04 ----A---- C:\Windows\system32\sharemediacpl.dll
2012-10-13 19:10:04 ----A---- C:\Windows\system32\scesrv.dll
2012-10-13 19:10:04 ----A---- C:\Windows\system32\logoncli.dll
2012-10-13 19:10:04 ----A---- C:\Windows\system32\CertPolEng.dll
2012-10-13 19:10:03 ----A---- C:\Windows\system32\WinSCard.dll
2012-10-13 19:10:02 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2012-10-13 19:10:02 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2012-10-13 19:10:01 ----A---- C:\Windows\system32\sppwinob.dll
2012-10-13 19:10:01 ----A---- C:\Windows\system32\runonce.exe
2012-10-13 19:10:01 ----A---- C:\Windows\system32\rpchttp.dll
2012-10-13 19:10:01 ----A---- C:\Windows\system32\RpcRtRemote.dll
2012-10-13 19:10:01 ----A---- C:\Windows\system32\rpcrt4.dll
2012-10-13 19:10:01 ----A---- C:\Windows\system32\drivers\msrpc.sys
2012-10-13 19:10:00 ----A---- C:\Windows\system32\Robocopy.exe
2012-10-13 19:10:00 ----A---- C:\Windows\system32\riched32.dll
2012-10-13 19:10:00 ----A---- C:\Windows\system32\riched20.dll
2012-10-13 19:10:00 ----A---- C:\Windows\system32\Ribbons.scr
2012-10-13 19:10:00 ----A---- C:\Windows\system32\recovery.dll
2012-10-13 19:10:00 ----A---- C:\Windows\system32\recdisc.exe
2012-10-13 19:10:00 ----A---- C:\Windows\system32\rastls.dll
2012-10-13 19:10:00 ----A---- C:\Windows\system32\iprtrmgr.dll
2012-10-13 19:10:00 ----A---- C:\Windows\system32\drivers\rmcast.sys
2012-10-13 19:10:00 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2012-10-13 19:10:00 ----A---- C:\Windows\system32\drivers\rdbss.sys
2012-10-13 19:09:59 ----A---- C:\Windows\system32\vpnikeapi.dll
2012-10-13 19:09:59 ----A---- C:\Windows\system32\vpnike.dll
2012-10-13 19:09:59 ----A---- C:\Windows\system32\rtutils.dll
2012-10-13 19:09:59 ----A---- C:\Windows\system32\rasppp.dll
2012-10-13 19:09:59 ----A---- C:\Windows\system32\rasmans.dll
2012-10-13 19:09:59 ----A---- C:\Windows\system32\raschap.dll
2012-10-13 19:09:59 ----A---- C:\Windows\system32\mprddm.dll
2012-10-13 19:09:59 ----A---- C:\Windows\system32\drivers\wanarp.sys
2012-10-13 19:09:59 ----A---- C:\Windows\system32\drivers\raspptp.sys
2012-10-13 19:09:59 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2012-10-13 19:09:59 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2012-10-13 19:09:59 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2012-10-13 19:09:59 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys
2012-10-13 19:09:59 ----A---- C:\Windows\system32\cmstp.exe
2012-10-13 19:09:58 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2012-10-13 19:09:58 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2012-10-13 19:09:58 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2012-10-13 19:09:58 ----A---- C:\Windows\system32\RDVGHelper.exe
2012-10-13 19:09:57 ----A---- C:\Windows\system32\RacEngn.dll
2012-10-13 19:09:57 ----A---- C:\Windows\system32\msdrm.dll
2012-10-13 19:09:56 ----A---- C:\Windows\system32\sppnp.dll
2012-10-13 19:09:56 ----A---- C:\Windows\system32\qedit.dll
2012-10-13 19:09:56 ----A---- C:\Windows\system32\proquota.exe
2012-10-13 19:09:56 ----A---- C:\Windows\system32\propsys.dll
2012-10-13 19:09:56 ----A---- C:\Windows\system32\prncache.dll
2012-10-13 19:09:56 ----A---- C:\Windows\system32\powercpl.dll
2012-10-13 19:09:56 ----A---- C:\Windows\system32\pifmgr.dll
2012-10-13 19:09:56 ----A---- C:\Windows\system32\hgprint.dll
2012-10-13 19:09:56 ----A---- C:\Windows\system32\drivers\pacer.sys
2012-10-13 19:09:55 ----A---- C:\Windows\system32\wvc.dll
2012-10-13 19:09:55 ----A---- C:\Windows\system32\wpccpl.dll
2012-10-13 19:09:55 ----A---- C:\Windows\system32\WMPhoto.dll
2012-10-13 19:09:55 ----A---- C:\Windows\system32\wdc.dll
2012-10-13 19:09:55 ----A---- C:\Windows\system32\PnPUnattend.exe
2012-10-13 19:09:55 ----A---- C:\Windows\system32\PkgMgr.exe
2012-10-13 19:09:55 ----A---- C:\Windows\system32\photowiz.dll
2012-10-13 19:09:55 ----A---- C:\Windows\system32\PhotoScreensaver.scr
2012-10-13 19:09:55 ----A---- C:\Windows\system32\perfmon.exe
2012-10-13 19:09:55 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2012-10-13 19:09:54 ----A---- C:\Windows\system32\relog.exe
2012-10-13 19:09:54 ----A---- C:\Windows\system32\puiobj.dll
2012-10-13 19:09:54 ----A---- C:\Windows\system32\prnfldr.dll
2012-10-13 19:09:54 ----A---- C:\Windows\system32\printui.dll
2012-10-13 19:09:54 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2012-10-13 19:09:54 ----A---- C:\Windows\system32\pla.dll
2012-10-13 19:09:54 ----A---- C:\Windows\system32\pdh.dll
2012-10-13 19:09:54 ----A---- C:\Windows\system32\ntprint.dll
2012-10-13 19:09:54 ----A---- C:\Windows\system32\logman.exe
2012-10-13 19:09:54 ----A---- C:\Windows\system32\inetpp.dll
2012-10-13 19:09:52 ----A---- C:\Windows\system32\PushPrinterConnections.exe
2012-10-13 19:09:52 ----A---- C:\Windows\system32\prntvpt.dll
2012-10-13 19:09:50 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2012-10-13 19:09:50 ----A---- C:\Windows\system32\onexui.dll
2012-10-13 19:09:49 ----A---- C:\Windows\system32\onex.dll
2012-10-13 19:09:49 ----A---- C:\Windows\system32\ocsetup.exe
2012-10-13 19:09:49 ----A---- C:\Windows\system32\ocsetapi.dll
2012-10-13 19:09:49 ----A---- C:\Windows\system32\drivers\csc.sys
2012-10-13 19:09:49 ----A---- C:\Windows\system32\cscui.dll
2012-10-13 19:09:49 ----A---- C:\Windows\system32\cscsvc.dll
2012-10-13 19:09:49 ----A---- C:\Windows\system32\CscMig.dll
2012-10-13 19:09:48 ----A---- C:\Windows\system32\ntlanman.dll
2012-10-13 19:09:48 ----A---- C:\Windows\system32\nslookup.exe
2012-10-13 19:09:48 ----A---- C:\Windows\system32\nlasvc.dll
2012-10-13 19:09:48 ----A---- C:\Windows\system32\nlaapi.dll
2012-10-13 19:09:48 ----A---- C:\Windows\system32\ncsi.dll
2012-10-13 19:09:48 ----A---- C:\Windows\system32\cscobj.dll
2012-10-13 19:09:48 ----A---- C:\Windows\system32\cscdll.dll
2012-10-13 19:09:48 ----A---- C:\Windows\system32\cscapi.dll
2012-10-13 19:09:48 ----A---- C:\Windows\system32\asycfilt.dll
2012-10-13 19:09:47 ----A---- C:\Windows\system32\pnidui.dll
2012-10-13 19:09:47 ----A---- C:\Windows\system32\networkmap.dll
2012-10-13 19:09:47 ----A---- C:\Windows\system32\networkexplorer.dll
2012-10-13 19:09:47 ----A---- C:\Windows\system32\netutils.dll
2012-10-13 19:09:47 ----A---- C:\Windows\system32\netcenter.dll
2012-10-13 19:09:47 ----A---- C:\Windows\system32\IKEEXT.DLL
2012-10-13 19:09:47 ----A---- C:\Windows\system32\BFE.DLL
2012-10-13 19:09:46 ----A---- C:\Windows\system32\netshell.dll
2012-10-13 19:09:46 ----A---- C:\Windows\system32\netplwiz.dll
2012-10-13 19:09:46 ----A---- C:\Windows\system32\netjoin.dll
2012-10-13 19:09:46 ----A---- C:\Windows\system32\netcfgx.dll
2012-10-13 19:09:46 ----A---- C:\Windows\system32\net1.exe
2012-10-13 19:09:46 ----A---- C:\Windows\system32\ncryptui.dll
2012-10-13 19:09:46 ----A---- C:\Windows\system32\nci.dll
2012-10-13 19:09:46 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2012-10-13 19:09:46 ----A---- C:\Windows\system32\drivers\netbt.sys
2012-10-13 19:09:46 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2012-10-13 19:09:44 ----A---- C:\Windows\system32\QUTIL.DLL
2012-10-13 19:09:44 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2012-10-13 19:09:44 ----A---- C:\Windows\system32\QSHVHOST.DLL
2012-10-13 19:09:44 ----A---- C:\Windows\system32\nshipsec.dll
2012-10-13 19:09:44 ----A---- C:\Windows\system32\KMSVC.DLL
2012-10-13 19:09:44 ----A---- C:\Windows\system32\ipsmsnap.dll
2012-10-13 19:09:44 ----A---- C:\Windows\system32\iasrecst.dll
2012-10-13 19:09:43 ----A---- C:\Windows\system32\QCLIPROV.DLL
2012-10-13 19:09:43 ----A---- C:\Windows\system32\QAGENTRT.DLL
2012-10-13 19:09:43 ----A---- C:\Windows\system32\QAGENT.DLL
2012-10-13 19:09:43 ----A---- C:\Windows\system32\netdiagfx.dll
2012-10-13 19:09:43 ----A---- C:\Windows\system32\napdsnap.dll
2012-10-13 19:09:43 ----A---- C:\Windows\system32\iasrad.dll
2012-10-13 19:09:43 ----A---- C:\Windows\system32\iasacct.dll
2012-10-13 19:09:42 ----A---- C:\Windows\system32\Mystify.scr
2012-10-13 19:09:42 ----A---- C:\Windows\system32\mydocs.dll
2012-10-13 19:09:42 ----A---- C:\Windows\system32\mcbuilder.exe
2012-10-13 19:09:42 ----A---- C:\Windows\system32\IPSECSVC.DLL
2012-10-13 19:09:41 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2012-10-13 19:09:41 ----A---- C:\Windows\system32\msinfo32.exe
2012-10-13 19:09:41 ----A---- C:\Windows\system32\msieftp.dll
2012-10-13 19:09:41 ----A---- C:\Windows\system32\msftedit.dll
2012-10-13 19:09:41 ----A---- C:\Windows\system32\msconfig.exe
2012-10-13 19:09:40 ----A---- C:\Windows\system32\SyncCenter.dll
2012-10-13 19:09:40 ----A---- C:\Windows\system32\SensorsCpl.dll
2012-10-13 19:09:40 ----A---- C:\Windows\system32\msasn1.dll
2012-10-13 19:09:40 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2012-10-13 19:09:40 ----A---- C:\Windows\system32\mprapi.dll
2012-10-13 19:09:40 ----A---- C:\Windows\system32\mobsync.exe
2012-10-13 19:09:40 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2012-10-13 19:09:38 ----A---- C:\Windows\system32\wmdrmnet.dll
2012-10-13 19:09:38 ----A---- C:\Windows\system32\mfreadwrite.dll
2012-10-13 19:09:38 ----A---- C:\Windows\system32\MFPlay.dll
2012-10-13 19:09:38 ----A---- C:\Windows\system32\mfds.dll
2012-10-13 19:09:37 ----A---- C:\Windows\system32\WMVCORE.DLL
2012-10-13 19:09:37 ----A---- C:\Windows\system32\WMNetMgr.dll
2012-10-13 19:09:37 ----A---- C:\Windows\system32\wmdrmdev.dll
2012-10-13 19:09:36 ----A---- C:\Windows\system32\wmdrmsdk.dll
2012-10-13 19:09:36 ----A---- C:\Windows\system32\msscp.dll
2012-10-13 19:09:36 ----A---- C:\Windows\system32\msnetobj.dll
2012-10-13 19:09:36 ----A---- C:\Windows\system32\drmmgrtn.dll
2012-10-13 19:09:36 ----A---- C:\Windows\system32\blackbox.dll
2012-10-13 19:09:33 ----A---- C:\Windows\system32\mfps.dll
2012-10-13 19:09:33 ----A---- C:\Windows\system32\mf.dll
2012-10-13 19:09:33 ----A---- C:\Windows\system32\mapistub.dll
2012-10-13 19:09:33 ----A---- C:\Windows\system32\mapi32.dll
2012-10-13 19:09:33 ----A---- C:\Windows\system32\fixmapi.exe
2012-10-13 19:09:32 ----A---- C:\Windows\system32\sqlsrv32.dll
2012-10-13 19:09:32 ----A---- C:\Windows\system32\PresentationSettings.exe
2012-10-13 19:09:32 ----A---- C:\Windows\system32\odbcconf.dll
2012-10-13 19:09:32 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2012-10-13 19:09:32 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2012-10-13 19:09:32 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2012-10-13 19:09:31 ----A---- C:\Windows\system32\mblctr.exe
2012-10-13 19:09:30 ----A---- C:\Windows\system32\odbc32.dll
2012-10-13 19:09:30 ----A---- C:\Windows\system32\mmcndmgr.dll
2012-10-13 19:09:30 ----A---- C:\Windows\system32\MdSched.exe
2012-10-13 19:09:30 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2012-10-13 19:09:30 ----A---- C:\Windows\system32\consent.exe
2012-10-13 19:09:29 ----A---- C:\Windows\system32\Wldap32.dll
2012-10-13 19:09:29 ----A---- C:\Windows\system32\nrpsrv.dll
2012-10-13 19:09:29 ----A---- C:\Windows\system32\luainstall.dll
2012-10-13 19:09:29 ----A---- C:\Windows\system32\lpksetup.exe
2012-10-13 19:09:29 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2012-10-13 19:09:29 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2012-10-13 19:09:29 ----A---- C:\Windows\system32\cdd.dll
2012-10-13 19:09:29 ----A---- C:\Windows\system32\appinfo.dll
2012-10-13 19:09:26 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2012-10-13 19:09:22 ----A---- C:\Windows\system32\wshirda.dll
2012-10-13 19:09:22 ----A---- C:\Windows\system32\nlsbres.dll
2012-10-13 19:09:22 ----A---- C:\Windows\system32\msiexec.exe
2012-10-13 19:09:22 ----A---- C:\Windows\system32\isoburn.exe
2012-10-13 19:09:22 ----A---- C:\Windows\system32\drivers\ks.sys
2012-10-13 19:09:21 ----A---- C:\Windows\system32\imapi2.dll
2012-10-13 19:09:21 ----A---- C:\Windows\system32\dbghelp.dll
2012-10-13 19:09:20 ----A---- C:\Windows\system32\dbgeng.dll
2012-10-13 19:09:17 ----A---- C:\Windows\system32\mscms.dll
2012-10-13 19:09:16 ----A---- C:\Windows\system32\kbdlk41a.dll
2012-10-13 19:09:05 ----A---- C:\Windows\system32\KBDUS.DLL
2012-10-13 19:09:05 ----A---- C:\Windows\system32\KBDSF.DLL
2012-10-13 19:09:05 ----A---- C:\Windows\system32\iphlpsvc.dll
2012-10-13 19:09:05 ----A---- C:\Windows\system32\C_ISCII.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDTURME.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDTUQ.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDTUF.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDSG.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDPO.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDNEPR.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDMON.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDMAORI.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDLT1.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDINTEL.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDINTAM.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDINORI.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDINMAR.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDINKAN.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDINHIN.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDINBEN.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDGR1.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDGKL.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDGEO.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDCZ1.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDBULG.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDBLR.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\KBDBASH.DLL
2012-10-13 19:09:04 ----A---- C:\Windows\system32\iscsium.dll
2012-10-13 19:09:04 ----A---- C:\Windows\system32\iscsicli.exe
2012-10-13 19:09:04 ----A---- C:\Windows\system32\elsTrans.dll
2012-10-13 19:09:03 ----A---- C:\Windows\system32\itircl.dll
2012-10-13 19:09:03 ----A---- C:\Windows\system32\imapi2fs.dll
2012-10-13 19:09:03 ----A---- C:\Windows\system32\httpapi.dll
2012-10-13 19:09:03 ----A---- C:\Windows\system32\drivers\http.sys
2012-10-13 19:09:02 ----A---- C:\Windows\system32\provsvc.dll
2012-10-13 19:09:02 ----A---- C:\Windows\system32\ListSvc.dll
2012-10-13 19:09:02 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2012-10-13 19:09:02 ----A---- C:\Windows\system32\hgcpl.dll
2012-10-13 19:09:00 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2012-10-13 19:09:00 ----A---- C:\Windows\system32\ActionCenter.dll
2012-10-13 19:08:59 ----A---- C:\Windows\system32\hbaapi.dll
2012-10-13 19:08:59 ----A---- C:\Windows\system32\hal.dll
2012-10-13 19:08:59 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2012-10-13 19:08:47 ----A---- C:\Windows\system32\gpsvc.dll
2012-10-13 19:08:47 ----A---- C:\Windows\system32\gdi32.dll
2012-10-13 19:08:46 ----A---- C:\Windows\system32\gameux.dll
2012-10-13 19:08:45 ----A---- C:\Windows\system32\gpprefcl.dll
2012-10-13 19:08:45 ----A---- C:\Windows\system32\appmgr.dll
2012-10-13 19:08:44 ----A---- C:\Windows\system32\scrptadm.dll
2012-10-13 19:08:44 ----A---- C:\Windows\system32\AdmTmpl.dll
2012-10-13 19:08:43 ----A---- C:\Windows\system32\ftp.exe
2012-10-13 19:08:43 ----A---- C:\Windows\system32\fontext.dll
2012-10-13 19:08:42 ----A---- C:\Windows\system32\t2embed.dll
2012-10-13 19:08:42 ----A---- C:\Windows\system32\muifontsetup.dll
2012-10-13 19:08:42 ----A---- C:\Windows\system32\FXSUNATD.exe
2012-10-13 19:08:42 ----A---- C:\Windows\system32\FXSTIFF.dll
2012-10-13 19:08:42 ----A---- C:\Windows\system32\FXSSVC.exe
2012-10-13 19:08:42 ----A---- C:\Windows\system32\FXSMON.dll
2012-10-13 19:08:42 ----A---- C:\Windows\system32\FXSAPI.dll
2012-10-13 19:08:42 ----A---- C:\Windows\system32\fms.dll
2012-10-13 19:08:42 ----A---- C:\Windows\system32\findstr.exe
2012-10-13 19:08:42 ----A---- C:\Windows\system32\fdeploy.dll
2012-10-13 19:08:42 ----A---- C:\Windows\system32\fde.dll
2012-10-13 19:08:42 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2012-10-13 19:08:41 ----A---- C:\Windows\system32\ifsutil.dll
2012-10-13 19:08:41 ----A---- C:\Windows\system32\clusapi.dll
2012-10-13 19:08:40 ----A---- C:\Windows\system32\untfs.dll
2012-10-13 19:08:38 ----A---- C:\Windows\system32\ExplorerFrame.dll
2012-10-13 19:08:36 ----A---- C:\Windows\system32\wevtsvc.dll
2012-10-13 19:08:34 ----A---- C:\Windows\system32\WerFaultSecure.exe
2012-10-13 19:08:34 ----A---- C:\Windows\system32\Faultrep.dll
2012-10-13 19:08:34 ----A---- C:\Windows\system32\eudcedit.exe
2012-10-13 19:08:33 ----A---- C:\Windows\system32\werconcpl.dll
2012-10-13 19:08:32 ----A---- C:\Windows\system32\evr.dll
2012-10-13 19:08:32 ----A---- C:\Windows\system32\EhStorAPI.dll
2012-10-13 19:08:24 ----A---- C:\Windows\system32\efscore.dll
2012-10-13 19:08:23 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2012-10-13 19:08:23 ----A---- C:\Windows\system32\eapphost.dll
2012-10-13 19:08:23 ----A---- C:\Windows\system32\eappgnui.dll
2012-10-13 19:08:23 ----A---- C:\Windows\system32\eapp3hst.dll
2012-10-13 19:08:22 ----A---- C:\Windows\system32\DxpTaskSync.dll
2012-10-13 19:08:22 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2012-10-13 19:08:21 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2012-10-13 19:08:21 ----A---- C:\Windows\system32\DXP.dll
2012-10-13 19:08:21 ----A---- C:\Windows\system32\dskquoui.dll
2012-10-13 19:08:21 ----A---- C:\Windows\system32\drvstore.dll
2012-10-13 19:08:21 ----A---- C:\Windows\system32\dot3ui.dll
2012-10-13 19:08:21 ----A---- C:\Windows\system32\dot3svc.dll
2012-10-13 19:08:21 ----A---- C:\Windows\system32\dot3msm.dll
2012-10-13 19:08:21 ----A---- C:\Windows\system32\dot3cfg.dll
2012-10-13 19:08:21 ----A---- C:\Windows\system32\dot3api.dll
2012-10-13 19:08:20 ----A---- C:\Windows\system32\dxgi.dll
2012-10-13 19:08:20 ----A---- C:\Windows\system32\dpnaddr.dll
2012-10-13 19:08:20 ----A---- C:\Windows\system32\dnscmmc.dll
2012-10-13 19:08:20 ----A---- C:\Windows\system32\Display.dll
2012-10-13 19:08:20 ----A---- C:\Windows\system32\diskraid.exe
2012-10-13 19:08:20 ----A---- C:\Windows\system32\diskpart.exe
2012-10-13 19:08:20 ----A---- C:\Windows\system32\d3d9.dll
2012-10-13 19:08:20 ----A---- C:\Windows\system32\d3d11.dll
2012-10-13 19:08:20 ----A---- C:\Windows\system32\d3d10warp.dll
2012-10-13 19:08:19 ----A---- C:\Windows\system32\vfwwdm32.dll
2012-10-13 19:08:19 ----A---- C:\Windows\system32\samsrv.dll
2012-10-13 19:08:19 ----A---- C:\Windows\system32\qdv.dll
2012-10-13 19:08:19 ----A---- C:\Windows\system32\qcap.dll
2012-10-13 19:08:19 ----A---- C:\Windows\system32\qasf.dll
2012-10-13 19:08:19 ----A---- C:\Windows\system32\msdmo.dll
2012-10-13 19:08:19 ----A---- C:\Windows\system32\mciqtz32.dll
2012-10-13 19:08:19 ----A---- C:\Windows\system32\dsauth.dll
2012-10-13 19:08:19 ----A---- C:\Windows\system32\DiagCpl.dll
2012-10-13 19:08:19 ----A---- C:\Windows\system32\amstream.dll
2012-10-13 19:08:18 ----A---- C:\Windows\system32\samcli.dll
2012-10-13 19:08:18 ----A---- C:\Windows\system32\dxdiagn.dll
2012-10-13 19:08:18 ----A---- C:\Windows\system32\drivers\dfsc.sys
2012-10-13 19:08:18 ----A---- C:\Windows\system32\dpx.dll
2012-10-13 19:08:18 ----A---- C:\Windows\system32\dhcpcore.dll
2012-10-13 19:08:18 ----A---- C:\Windows\system32\dfrgui.exe
2012-10-13 19:08:18 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2012-10-13 19:08:18 ----A---- C:\Windows\system32\DeviceCenter.dll
2012-10-13 19:08:17 ----A---- C:\Windows\system32\dwmredir.dll
2012-10-13 19:08:14 ----A---- C:\Windows\system32\tsbyuv.dll
2012-10-13 19:08:14 ----A---- C:\Windows\system32\msyuv.dll
2012-10-13 19:08:14 ----A---- C:\Windows\system32\iyuv_32.dll
2012-10-13 19:08:14 ----A---- C:\Windows\system32\dwmcore.dll
2012-10-13 19:08:11 ----A---- C:\Windows\system32\WUDFx.dll
2012-10-13 19:08:11 ----A---- C:\Windows\system32\dps.dll
2012-10-13 19:08:10 ----A---- C:\Windows\system32\WUDFSvc.dll
2012-10-13 19:08:10 ----A---- C:\Windows\system32\WUDFPlatform.dll
2012-10-13 19:08:10 ----A---- C:\Windows\system32\WUDFHost.exe
2012-10-13 19:08:10 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2012-10-13 19:08:10 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2012-10-13 19:08:10 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2012-10-13 19:08:09 ----A---- C:\Windows\system32\localsec.dll
2012-10-13 19:08:08 ----A---- C:\Windows\system32\cryptui.dll
2012-10-13 19:08:07 ----A---- C:\Windows\system32\credui.dll
2012-10-13 19:08:06 ----A---- C:\Windows\system32\rpcss.dll
2012-10-13 19:08:06 ----A---- C:\Windows\system32\OpcServices.dll
2012-10-13 19:08:06 ----A---- C:\Windows\system32\netid.dll
2012-10-13 19:08:06 ----A---- C:\Windows\system32\msdtctm.dll
2012-10-13 19:08:06 ----A---- C:\Windows\system32\mimefilt.dll
2012-10-13 19:08:06 ----A---- C:\Windows\system32\comdlg32.dll
2012-10-13 19:08:06 ----A---- C:\Windows\system32\cmd.exe
2012-10-13 19:08:06 ----A---- C:\Windows\system32\autoconv.exe
2012-10-13 19:08:05 ----A---- C:\Windows\system32\ole32.dll
2012-10-13 19:08:04 ----A---- C:\Windows\system32\ci.dll
2012-10-13 19:08:03 ----A---- C:\Windows\system32\xpsservices.dll
2012-10-13 19:08:03 ----A---- C:\Windows\system32\choice.exe
2012-10-13 19:08:03 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2012-10-13 19:08:03 ----A---- C:\Windows\system32\certcli.dll
2012-10-13 19:08:03 ----A---- C:\Windows\system32\cabview.dll
2012-10-13 19:08:03 ----A---- C:\Windows\system32\cabinet.dll
2012-10-13 19:08:02 ----A---- C:\Windows\system32\diagperf.dll
2012-10-13 19:07:59 ----A---- C:\Windows\system32\XpsRasterService.dll
2012-10-13 19:07:59 ----A---- C:\Windows\system32\Query.dll
2012-10-13 19:07:59 ----A---- C:\Windows\system32\mtxclu.dll
2012-10-13 19:07:59 ----A---- C:\Windows\system32\certmgr.dll
2012-10-13 19:07:58 ----A---- C:\Windows\system32\wshbth.dll
2012-10-13 19:07:58 ----A---- C:\Windows\system32\wbengine.exe
2012-10-13 19:07:58 ----A---- C:\Windows\system32\BWUnpairElevated.dll
2012-10-13 19:07:58 ----A---- C:\Windows\system32\Bubbles.scr
2012-10-13 19:07:58 ----A---- C:\Windows\system32\browseui.dll
2012-10-13 19:07:58 ----A---- C:\Windows\system32\bootres.dll
2012-10-13 19:07:58 ----A---- C:\Windows\system32\BlbEvents.dll
2012-10-13 19:07:58 ----A---- C:\Windows\system32\bitsperf.dll
2012-10-13 19:07:57 ----AH---- C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
2012-10-13 19:07:57 ----A---- C:\Windows\system32\sdcpl.dll
2012-10-13 19:07:57 ----A---- C:\Windows\system32\qmgr.dll
2012-10-13 19:07:57 ----A---- C:\Windows\system32\bitsadmin.exe
2012-10-13 19:07:57 ----A---- C:\Windows\system32\biocpl.dll
2012-10-13 19:07:57 ----A---- C:\Windows\system32\bcryptprimitives.dll
2012-10-13 19:07:57 ----A---- C:\Windows\system32\bcdboot.exe
2012-10-13 19:07:57 ----A---- C:\Windows\system32\batmeter.dll
2012-10-13 19:07:57 ----A---- C:\Windows\bfsvc.exe
2012-10-13 19:07:56 ----A---- C:\Windows\system32\bcdsrv.dll
2012-10-13 19:07:51 ----A---- C:\Windows\system32\bcdedit.exe
2012-10-13 19:07:46 ----A---- C:\Windows\system32\LogonUI.exe
2012-10-13 19:07:46 ----A---- C:\Windows\system32\AzSqlExt.dll
2012-10-13 19:07:46 ----A---- C:\Windows\system32\azroleui.dll
2012-10-13 19:07:46 ----A---- C:\Windows\system32\azroles.dll
2012-10-13 19:07:46 ----A---- C:\Windows\system32\AxInstSv.dll
2012-10-13 19:07:46 ----A---- C:\Windows\system32\autoplay.dll
2012-10-13 19:07:46 ----A---- C:\Windows\system32\autochk.exe
2012-10-13 19:07:46 ----A---- C:\Windows\system32\autofmt.exe
2012-10-13 19:07:45 ----A---- C:\Windows\system32\authui.dll
2012-10-13 19:07:44 ----A---- C:\Windows\system32\SndVolSSO.dll
2012-10-13 19:07:44 ----A---- C:\Windows\system32\SndVol.exe
2012-10-13 19:07:44 ----A---- C:\Windows\system32\drivers\appid.sys
2012-10-13 19:07:44 ----A---- C:\Windows\system32\audiosrv.dll
2012-10-13 19:07:44 ----A---- C:\Windows\system32\AudioSes.dll
2012-10-13 19:07:44 ----A---- C:\Windows\system32\audiodg.exe
2012-10-13 19:07:43 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2012-10-13 19:07:43 ----A---- C:\Windows\system32\aepdu.dll
2012-10-13 19:07:43 ----A---- C:\Windows\system32\aeinv.dll
2012-10-13 19:07:43 ----A---- C:\Windows\system32\actxprxy.dll
2012-10-13 19:07:43 ----A---- C:\Windows\system32\acppage.dll
2012-10-13 19:07:43 ----A---- C:\Windows\system32\accessibilitycpl.dll
2012-10-13 19:07:42 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2012-10-13 19:07:42 ----A---- C:\Windows\system32\aitagent.exe
2012-10-13 19:07:41 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2012-10-13 19:07:41 ----A---- C:\Windows\system32\apphelp.dll
2012-10-13 19:07:39 ----A---- C:\Windows\system32\drivers\volmgr.sys
2012-10-13 19:07:39 ----A---- C:\Windows\system32\drivers\termdd.sys
2012-10-13 19:07:39 ----A---- C:\Windows\system32\drivers\pci.sys
2012-10-13 19:07:39 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2012-10-13 19:07:38 ----A---- C:\Windows\system32\fdProxy.dll
2012-10-13 19:07:38 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2012-10-13 19:07:38 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2012-10-13 19:07:38 ----A---- C:\Windows\system32\drivers\HpSAMD.sys
2012-10-13 19:07:38 ----A---- C:\Windows\system32\drivers\hidusb.sys
2012-10-13 19:07:38 ----A---- C:\Windows\system32\drivers\hidclass.sys
2012-10-13 19:07:38 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2012-10-13 19:07:38 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2012-10-13 19:07:37 ----A---- C:\Windows\system32\OobeFldr.dll
2012-10-13 19:07:37 ----A---- C:\Windows\system32\dsuiext.dll
2012-10-13 19:07:37 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2012-10-13 19:07:36 ----A---- C:\Windows\system32\drivers\cdrom.sys
2012-10-13 19:07:35 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2012-10-13 19:07:35 ----A---- C:\Windows\system32\drivers\acpi.sys
2012-10-13 19:07:35 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2012-10-13 18:57:12 ----N---- C:\Windows\system32\MpSigStub.exe
2012-10-13 18:52:02 ----D---- C:\Program Files\Microsoft Security Client
2012-10-13 18:32:54 ----D---- C:\Users\Luba\AppData\Roaming\ATI
2012-10-13 18:32:54 ----D---- C:\ProgramData\ATI
2012-10-13 18:32:52 ----D---- C:\ProgramData\AMD
2012-10-13 18:32:51 ----D---- C:\Program Files (x86)\AMD AVT
2012-10-13 18:32:49 ----D---- C:\Program Files (x86)\AMD APP
2012-10-13 18:32:47 ----D---- C:\Program Files\Common Files\ATI Technologies
2012-10-13 18:31:53 ----D---- C:\Program Files (x86)\AMD
2012-10-13 18:31:51 ----D---- C:\Program Files\ATI
2012-10-13 18:30:35 ----D---- C:\Program Files\AMD
2012-10-13 18:10:56 ----D---- C:\a1929e080963d886c136
2012-10-13 18:10:03 ----D---- C:\Users\Luba\AppData\Roaming\vlc
2012-10-13 18:09:50 ----D---- C:\Program Files\VLC
2012-10-13 18:03:09 ----D---- C:\Program Files\CDBurnerXP
2012-10-13 18:02:37 ----D---- C:\Program Files\CCleaner
2012-10-13 18:02:12 ----D---- C:\Users\Luba\AppData\Roaming\AIMP3
2012-10-13 18:02:10 ----D---- C:\Program Files\AIMP3
2012-10-13 17:50:07 ----D---- C:\ProgramData\Mozilla
2012-10-13 16:13:36 ----D---- C:\Program Files (x86)\Microsoft.NET
2012-10-13 16:13:18 ----SHD---- C:\Windows\Installer
2012-10-13 15:59:42 ----A---- C:\Windows\system32\MRT.exe
2012-10-13 15:52:03 ----A---- C:\Windows\system32\esent.dll
2012-10-13 15:52:02 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2012-10-13 15:52:02 ----A---- C:\Windows\SYSWOW64\esent.dll
2012-10-13 15:52:02 ----A---- C:\Windows\system32\fsutil.exe
2012-10-13 15:52:02 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2012-10-13 15:52:02 ----A---- C:\Windows\system32\drivers\storport.sys
2012-10-13 15:52:02 ----A---- C:\Windows\system32\drivers\nvstor.sys
2012-10-13 15:52:02 ----A---- C:\Windows\system32\drivers\nvraid.sys
2012-10-13 15:52:02 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2012-10-13 15:52:02 ----A---- C:\Windows\system32\drivers\amdxata.sys
2012-10-13 15:52:02 ----A---- C:\Windows\system32\drivers\amdsata.sys
2012-10-13 15:51:59 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2012-10-13 15:51:59 ----A---- C:\Windows\system32\drivers\usbport.sys
2012-10-13 15:51:59 ----A---- C:\Windows\system32\drivers\usbohci.sys
2012-10-13 15:51:59 ----A---- C:\Windows\system32\drivers\usbhub.sys
2012-10-13 15:51:59 ----A---- C:\Windows\system32\drivers\usbehci.sys
2012-10-13 15:51:59 ----A---- C:\Windows\system32\drivers\usbd.sys
2012-10-13 15:51:59 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2012-10-13 15:42:45 ----D---- C:\Windows\SYSWOW64\Wat
2012-10-13 15:42:45 ----D---- C:\Windows\system32\Wat
2012-10-13 15:25:44 ----D---- C:\Windows\pss
2012-10-13 15:09:05 ----A---- C:\Windows\system32\browserchoice.exe
2012-10-13 14:58:08 ----A---- C:\Windows\SYSWOW64\wmi.dll
2012-10-13 14:58:08 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2012-10-13 14:58:08 ----A---- C:\Windows\system32\wmi.dll
2012-10-13 14:58:08 ----A---- C:\Windows\system32\imagehlp.dll
2012-10-13 14:58:08 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2012-10-13 14:46:47 ----D---- C:\Windows\Panther
2012-10-13 14:13:48 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2012-10-13 14:13:48 ----A---- C:\Windows\system32\ntshrui.dll
2012-10-13 14:13:46 ----A---- C:\Windows\SYSWOW64\tzres.dll
2012-10-13 14:13:46 ----A---- C:\Windows\system32\tzres.dll
2012-10-13 14:13:40 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2012-10-13 14:13:40 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2012-10-13 14:13:40 ----A---- C:\Windows\system32\wow64win.dll
2012-10-13 14:13:40 ----A---- C:\Windows\system32\wow64.dll
2012-10-13 14:13:40 ----A---- C:\Windows\system32\winsrv.dll
2012-10-13 14:13:40 ----A---- C:\Windows\system32\KernelBase.dll
2012-10-13 14:13:40 ----A---- C:\Windows\system32\kernel32.dll
2012-10-13 14:13:40 ----A---- C:\Windows\system32\conhost.exe
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-10-13 14:13:39 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-10-13 14:13:39 ----A---- C:\Windows\SYSWOW64\wow32.dll
2012-10-13 14:13:39 ----A---- C:\Windows\SYSWOW64\user.exe
2012-10-13 14:13:39 ----A---- C:\Windows\SYSWOW64\setup16.exe
2012-10-13 14:13:39 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2012-10-13 14:13:39 ----A---- C:\Windows\SYSWOW64\instnm.exe
2012-10-13 14:13:39 ----A---- C:\Windows\system32\wow64cpu.dll
2012-10-13 14:13:39 ----A---- C:\Windows\system32\ntvdm64.dll
2012-10-13 14:13:15 ----A---- C:\Windows\system32\psisdecd.dll
2012-10-13 14:13:14 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2012-10-13 14:13:12 ----A---- C:\Windows\SYSWOW64\msi.dll
2012-10-13 14:13:12 ----A---- C:\Windows\system32\msi.dll
2012-10-13 14:12:49 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-10-13 14:12:48 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2012-10-13 14:12:48 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2012-10-13 14:12:34 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2012-10-13 14:12:34 ----A---- C:\Windows\system32\DWrite.dll
2012-10-13 14:12:28 ----A---- C:\Windows\system32\drivers\ntfs.sys
2012-10-13 14:12:27 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2012-10-13 14:12:27 ----A---- C:\Windows\system32\d2d1.dll
2012-10-13 14:12:26 ----A---- C:\Windows\system32\shell32.dll
2012-10-13 14:12:26 ----A---- C:\Windows\system32\FntCache.dll
2012-10-13 14:12:25 ----A---- C:\Windows\SYSWOW64\shell32.dll
2012-10-13 14:12:20 ----A---- C:\Windows\SYSWOW64\sbe.dll
2012-10-13 14:12:20 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2012-10-13 14:12:20 ----A---- C:\Windows\system32\sbe.dll
2012-10-13 14:12:20 ----A---- C:\Windows\system32\CPFilters.dll
2012-10-13 14:12:18 ----A---- C:\Windows\SYSWOW64\webio.dll
2012-10-13 14:12:18 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2012-10-13 14:12:18 ----A---- C:\Windows\system32\webio.dll
2012-10-13 14:12:18 ----A---- C:\Windows\system32\kerberos.dll
2012-10-13 14:12:17 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2012-10-13 14:12:17 ----A---- C:\Windows\system32\XpsPrint.dll
2012-10-13 14:12:16 ----A---- C:\Windows\system32\drivers\srvnet.sys
2012-10-13 14:12:16 ----A---- C:\Windows\system32\drivers\srv2.sys
2012-10-13 14:12:16 ----A---- C:\Windows\system32\drivers\srv.sys
2012-10-13 14:12:15 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2012-10-13 14:12:15 ----A---- C:\Windows\system32\poqexec.exe
2012-10-13 14:12:14 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2012-10-13 14:12:14 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2012-10-13 14:12:14 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2012-10-13 14:12:14 ----A---- C:\Windows\system32\msxml6.dll
2012-10-13 14:12:14 ----A---- C:\Windows\system32\msxml3r.dll
2012-10-13 14:12:14 ----A---- C:\Windows\system32\msxml3.dll
2012-10-13 14:12:13 ----A---- C:\Windows\system32\win32k.sys
2012-10-13 14:12:12 ----A---- C:\Windows\system32\rdpudd.dll
2012-10-13 14:12:12 ----A---- C:\Windows\system32\rdpcorets.dll
2012-10-13 14:12:12 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2012-10-13 14:12:12 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2012-10-13 14:12:11 ----A---- C:\Windows\SYSWOW64\schannel.dll
2012-10-13 14:12:11 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2012-10-13 14:12:11 ----A---- C:\Windows\system32\sspicli.dll
2012-10-13 14:12:11 ----A---- C:\Windows\system32\schannel.dll
2012-10-13 14:12:11 ----A---- C:\Windows\system32\ncrypt.dll
2012-10-13 14:12:11 ----A---- C:\Windows\system32\lsasrv.dll
2012-10-13 14:12:11 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2012-10-13 14:12:11 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2012-10-13 14:12:11 ----A---- C:\Windows\system32\drivers\cng.sys
2012-10-13 14:12:10 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2012-10-13 14:12:10 ----A---- C:\Windows\SYSWOW64\secur32.dll
2012-10-13 14:12:10 ----A---- C:\Windows\system32\sspisrv.dll
2012-10-13 14:12:10 ----A---- C:\Windows\system32\secur32.dll
2012-10-13 14:12:10 ----A---- C:\Windows\system32\lsass.exe
2012-10-13 14:12:09 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2012-10-13 14:12:08 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2012-10-13 14:12:08 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2012-10-13 14:12:08 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2012-10-13 14:12:08 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2012-10-13 14:12:08 ----A---- C:\Windows\system32\fontsub.dll
2012-10-13 14:12:08 ----A---- C:\Windows\system32\atmlib.dll
2012-10-13 14:12:08 ----A---- C:\Windows\system32\atmfd.dll
2012-10-13 14:12:06 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2012-10-13 14:12:06 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2012-10-13 14:12:06 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2012-10-13 14:12:05 ----A---- C:\Windows\SYSWOW64\quartz.dll
2012-10-13 14:12:05 ----A---- C:\Windows\system32\quartz.dll
2012-10-13 14:12:04 ----A---- C:\Windows\system32\winresume.exe
2012-10-13 14:12:04 ----A---- C:\Windows\system32\winload.exe
2012-10-13 14:12:04 ----A---- C:\Windows\system32\setbcdlocale.dll
2012-10-13 14:12:04 ----A---- C:\Windows\system32\kdusb.dll
2012-10-13 14:12:04 ----A---- C:\Windows\system32\kdcom.dll
2012-10-13 14:12:04 ----A---- C:\Windows\system32\kd1394.dll
2012-10-13 14:11:59 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2012-10-13 14:11:59 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2012-10-13 14:11:59 ----A---- C:\Windows\system32\mfc42u.dll
2012-10-13 14:11:59 ----A---- C:\Windows\system32\mfc42.dll
2012-10-13 14:11:58 ----A---- C:\Windows\SYSWOW64\explorer.exe
2012-10-13 14:11:58 ----A---- C:\Windows\system32\profsvc.dll
2012-10-13 14:11:58 ----A---- C:\Windows\system32\profprov.dll
2012-10-13 14:11:58 ----A---- C:\Windows\explorer.exe
2012-10-13 14:11:56 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2012-10-13 14:11:56 ----A---- C:\Windows\system32\xmllite.dll
2012-10-13 14:11:54 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2012-10-13 14:11:54 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2012-10-13 14:11:54 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2012-10-13 14:11:54 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2012-10-13 14:11:54 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2012-10-13 14:11:54 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2012-10-13 14:11:54 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2012-10-13 14:11:54 ----A---- C:\Windows\system32\odbctrac.dll
2012-10-13 14:11:54 ----A---- C:\Windows\system32\odbccu32.dll
2012-10-13 14:11:54 ----A---- C:\Windows\system32\odbccr32.dll
2012-10-13 14:11:54 ----A---- C:\Windows\system32\odbccp32.dll
2012-10-13 14:11:54 ----A---- C:\Windows\system32\dnsrslvr.dll
2012-10-13 14:11:54 ----A---- C:\Windows\system32\dnscacheugc.exe
2012-10-13 14:11:54 ----A---- C:\Windows\system32\dnsapi.dll
2012-10-13 14:11:53 ----A---- C:\Windows\system32\drivers\partmgr.sys
2012-10-13 14:11:51 ----A---- C:\Windows\system32\drivers\afd.sys
2012-10-13 14:11:47 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2012-10-13 14:11:47 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2012-10-13 14:11:47 ----A---- C:\Windows\system32\rdrmemptylst.exe
2012-10-13 14:11:47 ----A---- C:\Windows\system32\rdpwsx.dll
2012-10-13 14:11:47 ----A---- C:\Windows\system32\rdpcorekmts.dll
2012-10-13 14:11:47 ----A---- C:\Windows\system32\d3d10_1core.dll
2012-10-13 14:11:47 ----A---- C:\Windows\system32\d3d10_1.dll
2012-10-13 14:11:46 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2012-10-13 14:11:46 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2012-10-13 14:11:46 ----A---- C:\Windows\system32\wintrust.dll
2012-10-13 14:11:46 ----A---- C:\Windows\system32\d3d10level9.dll
2012-10-13 14:11:46 ----A---- C:\Windows\system32\csrsrv.dll
2012-10-13 14:11:44 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2012-10-13 14:11:16 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2012-10-13 14:11:16 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2012-10-13 14:11:16 ----A---- C:\Windows\SYSWOW64\devobj.dll
2012-10-13 14:11:16 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2012-10-13 14:11:16 ----A---- C:\Windows\system32\umpnpmgr.dll
2012-10-13 14:11:16 ----A---- C:\Windows\system32\cfgmgr32.dll
2012-10-13 14:05:22 ----A---- C:\Windows\system32\netapi32.dll
2012-10-13 14:05:22 ----A---- C:\Windows\system32\browser.dll
2012-10-13 14:05:21 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2012-10-13 14:05:21 ----A---- C:\Windows\SYSWOW64\browcli.dll
2012-10-13 14:05:21 ----A---- C:\Windows\system32\browcli.dll
2012-10-13 14:04:33 ----A---- C:\Windows\system32\WFS.exe
2012-10-13 14:04:33 ----A---- C:\Windows\system32\FXSCOVER.exe
2012-10-13 14:04:32 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2012-10-13 14:04:32 ----A---- C:\Windows\system32\msvcrt.dll
2012-10-13 14:04:31 ----A---- C:\Windows\SYSWOW64\srclient.dll
2012-10-13 14:04:31 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2012-10-13 14:04:31 ----A---- C:\Windows\system32\srcore.dll
2012-10-13 14:04:31 ----A---- C:\Windows\system32\rstrui.exe
2012-10-13 14:04:31 ----A---- C:\Windows\system32\inetcomm.dll
2012-10-13 14:04:30 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2012-10-13 14:04:30 ----A---- C:\Windows\system32\prevhost.exe
2012-10-13 14:04:28 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2012-10-13 14:04:28 ----A---- C:\Windows\system32\ntdll.dll
2012-10-13 14:04:20 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2012-10-13 14:04:20 ----A---- C:\Windows\system32\win32spl.dll
2012-10-13 14:04:20 ----A---- C:\Windows\system32\spoolsv.exe
2012-10-13 14:04:20 ----A---- C:\Windows\splwow64.exe
2012-10-13 14:04:19 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2012-10-13 14:04:19 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2012-10-13 14:04:19 ----A---- C:\Windows\system32\oleaut32.dll
2012-10-13 14:04:19 ----A---- C:\Windows\system32\oleacc.dll
2012-10-13 14:04:16 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2012-10-13 14:04:15 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2012-10-13 14:04:15 ----A---- C:\Windows\system32\EncDec.dll
2012-10-13 14:04:15 ----A---- C:\Windows\system32\cdosys.dll
2012-10-13 14:04:14 ----A---- C:\Windows\system32\localspl.dll
2012-10-13 14:04:13 ----A---- C:\Windows\system32\drivers\bowser.sys
2012-10-13 14:03:52 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2012-10-13 14:03:52 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2012-10-13 14:03:52 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2012-10-13 14:03:52 ----A---- C:\Windows\system32\cryptsvc.dll
2012-10-13 14:03:52 ----A---- C:\Windows\system32\cryptnet.dll
2012-10-13 14:03:52 ----A---- C:\Windows\system32\crypt32.dll
2012-10-13 14:03:40 ----A---- C:\Windows\SYSWOW64\packager.dll
2012-10-13 14:03:40 ----A---- C:\Windows\system32\packager.dll
2012-10-13 14:03:03 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2012-10-13 14:03:03 ----A---- C:\Windows\system32\rdpcore.dll
2012-10-13 14:03:03 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2012-10-13 13:58:45 ----A---- C:\Windows\system32\wups2.dll
2012-10-13 13:58:45 ----A---- C:\Windows\system32\wucltux.dll
2012-10-13 13:58:45 ----A---- C:\Windows\system32\wuaueng.dll
2012-10-13 13:58:45 ----A---- C:\Windows\system32\wuauclt.exe
2012-10-13 13:58:40 ----A---- C:\Windows\system32\wups.dll
2012-10-13 13:58:40 ----A---- C:\Windows\system32\wudriver.dll
2012-10-13 13:58:40 ----A---- C:\Windows\system32\wuapi.dll
2012-10-13 13:58:36 ----A---- C:\Windows\system32\wuwebv.dll
2012-10-13 13:58:36 ----A---- C:\Windows\system32\wuapp.exe
2012-10-13 13:57:27 ----D---- C:\Users\Luba\AppData\Roaming\Identities
2012-10-13 13:57:17 ----SD---- C:\Users\Luba\AppData\Roaming\Microsoft
2012-10-13 13:57:17 ----D---- C:\Users\Luba\AppData\Roaming\Media Center Programs
2012-10-13 13:55:45 ----SHD---- C:\Recovery
2012-10-13 13:55:44 ----SHD---- C:\ProgramData\Šablony
2012-10-13 13:55:44 ----SHD---- C:\ProgramData\Plocha
2012-10-13 13:55:44 ----SHD---- C:\ProgramData\Oblíbené položky
2012-10-13 13:55:44 ----SHD---- C:\ProgramData\Nabídka Start
2012-10-13 13:55:44 ----SHD---- C:\ProgramData\Dokumenty
2012-10-13 13:55:44 ----SHD---- C:\ProgramData\Data aplikací
2012-10-13 13:50:27 ----D---- C:\Windows\SoftwareDistribution
2012-10-13 13:48:00 ----D---- C:\Windows\Prefetch
2012-10-13 13:47:46 ----ASH---- C:\pagefile.sys
2012-10-13 13:47:45 ----SHD---- C:\System Volume Information
2012-10-13 13:47:45 ----ASH---- C:\hiberfil.sys

======List of files/folders modified in the last 1 month======

2012-10-16 16:13:32 ----D---- C:\Program Files
2012-10-16 16:13:15 ----D---- C:\Windows\Temp
2012-10-16 16:11:28 ----D---- C:\Windows
2012-10-16 16:11:19 ----D---- C:\Windows\System32
2012-10-16 16:05:13 ----D---- C:\Windows\system32\LogFiles
2012-10-16 16:00:34 ----D---- C:\Windows\system32\config
2012-10-16 15:50:41 ----D---- C:\Windows\inf
2012-10-16 15:50:41 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-10-15 17:30:40 ----D---- C:\Windows\system32\drivers
2012-10-15 17:30:39 ----D---- C:\Windows\system32\DriverStore
2012-10-15 17:30:39 ----D---- C:\Windows\system32\catroot
2012-10-15 17:29:38 ----HD---- C:\ProgramData
2012-10-14 18:31:26 ----D---- C:\Windows\system32\catroot2
2012-10-14 16:08:13 ----D---- C:\Windows\winsxs
2012-10-14 16:08:01 ----D---- C:\Windows\SysWOW64
2012-10-14 16:08:01 ----D---- C:\Program Files\Internet Explorer
2012-10-14 15:54:04 ----RD---- C:\Program Files (x86)
2012-10-14 13:08:00 ----D---- C:\Windows\Logs
2012-10-14 13:02:49 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-10-14 13:02:49 ----D---- C:\Windows\system32\cs-CZ
2012-10-14 13:02:48 ----D---- C:\Windows\SYSWOW64\migration
2012-10-14 13:02:48 ----D---- C:\Windows\SYSWOW64\en-US
2012-10-14 13:02:47 ----D---- C:\Windows\system32\migration
2012-10-14 13:02:47 ----D---- C:\Windows\system32\en-US
2012-10-14 13:02:47 ----D---- C:\Windows\PolicyDefinitions
2012-10-13 22:06:26 ----D---- C:\Program Files (x86)\Common Files
2012-10-13 21:48:43 ----D---- C:\Windows\Microsoft.NET
2012-10-13 21:48:03 ----RSD---- C:\Windows\assembly
2012-10-13 19:36:53 ----D---- C:\Program Files\Windows Portable Devices
2012-10-13 19:36:53 ----D---- C:\Program Files\Windows Photo Viewer
2012-10-13 19:36:53 ----D---- C:\Program Files\Windows Mail
2012-10-13 19:36:53 ----D---- C:\Program Files\DVD Maker
2012-10-13 19:36:52 ----D---- C:\Windows\servicing
2012-10-13 19:36:52 ----D---- C:\Program Files\Windows Defender
2012-10-13 19:36:52 ----D---- C:\Program Files\Common Files\System
2012-10-13 19:36:50 ----SHD---- C:\Windows\BitLockerDiscoveryVolumeContents
2012-10-13 19:36:50 ----D---- C:\Windows\SYSWOW64\wbem
2012-10-13 19:36:50 ----D---- C:\Windows\SYSWOW64\sppui
2012-10-13 19:36:50 ----D---- C:\Windows\SYSWOW64\Setup
2012-10-13 19:36:50 ----D---- C:\Windows\SYSWOW64\oobe
2012-10-13 19:36:50 ----D---- C:\Windows\SYSWOW64\migwiz
2012-10-13 19:36:50 ----D---- C:\Windows\SYSWOW64\manifeststore
2012-10-13 19:36:50 ----D---- C:\Windows\SYSWOW64\es-ES
2012-10-13 19:36:50 ----D---- C:\Windows\SYSWOW64\Dism
2012-10-13 19:36:50 ----D---- C:\Windows\SYSWOW64\da-DK
2012-10-13 19:36:50 ----D---- C:\Windows\SYSWOW64\cs
2012-10-13 19:36:50 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2012-10-13 19:36:41 ----D---- C:\Windows\system32\sppui
2012-10-13 19:36:41 ----D---- C:\Windows\system32\Setup
2012-10-13 19:36:41 ----D---- C:\Windows\system32\oobe
2012-10-13 19:36:41 ----D---- C:\Windows\system32\manifeststore
2012-10-13 19:36:41 ----D---- C:\Windows\system32\es-ES
2012-10-13 19:36:41 ----D---- C:\Windows\system32\drivers\UMDF
2012-10-13 19:36:41 ----D---- C:\Windows\system32\drivers\cs-CZ
2012-10-13 19:36:41 ----D---- C:\Windows\system32\da-DK
2012-10-13 19:36:41 ----D---- C:\Windows\system32\cs
2012-10-13 19:36:41 ----D---- C:\Windows\system32\AdvancedInstallers
2012-10-13 19:36:40 ----D---- C:\Windows\system32\wbem
2012-10-13 19:36:40 ----D---- C:\Windows\system32\migwiz
2012-10-13 19:36:40 ----D---- C:\Windows\system32\Dism
2012-10-13 19:36:32 ----RSD---- C:\Windows\Fonts
2012-10-13 19:36:31 ----D---- C:\Windows\AppPatch
2012-10-13 19:36:25 ----D---- C:\Windows\system32\Boot
2012-10-13 19:33:44 ----SD---- C:\ProgramData\Microsoft
2012-10-13 19:28:47 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2012-10-13 19:28:47 ----A---- C:\Windows\system32\msclmd.dll
2012-10-13 18:43:28 ----D---- C:\Windows\Tasks
2012-10-13 18:43:28 ----D---- C:\Windows\system32\Tasks
2012-10-13 18:39:47 ----D---- C:\Windows\SYSWOW64\LogFiles
2012-10-13 18:38:33 ----D---- C:\Windows\debug
2012-10-13 18:32:47 ----D---- C:\Program Files\Common Files
2012-10-13 18:31:52 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-10-13 15:47:45 ----D---- C:\Windows\system32\wdi
2012-10-13 15:43:00 ----D---- C:\Program Files\Windows Sidebar
2012-10-13 15:42:57 ----D---- C:\Program Files\Windows Media Player
2012-10-13 14:46:23 ----D---- C:\Windows\Setup
2012-10-13 14:06:53 ----D---- C:\Windows\system32\CodeIntegrity
2012-10-13 13:58:24 ----D---- C:\Windows\system32\restore
2012-10-13 13:57:25 ----SHD---- C:\$Recycle.Bin
2012-10-13 13:57:17 ----RD---- C:\Users
2012-10-13 13:55:44 ----D---- C:\Program Files\Windows NT
2012-10-13 13:54:35 ----D---- C:\Windows\rescache
2012-10-13 13:51:20 ----D---- C:\Windows\system32\sysprep
2012-10-13 13:48:19 ----D---- C:\Windows\CSC

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2012-08-30 228768]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-10-15 283200]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2012-08-30 128456]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-07-04 11922944]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-07-04 359936]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-02-23 95760]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-06-12 4060560]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2012-02-16 676968]
R3 XENfiltv;XENfiltv; C:\Windows\system32\drivers\XENfiltv.sys [2009-07-31 25600]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-07-04 11922944]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 31800]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-07-04 238080]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 CTAudSvcService;Creative Audio Service; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [2010-05-20 286720]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-09-12 22072]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2012-09-12 368896]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2012-10-13 79360]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2012-10-13 79360]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-10-13 1255736]

-----------------EOF-----------------

[vyosek]

Mate spravne nakonfigurovane pripojeni k internetu dle smlouvy a pokynu od poskytovatele?

[Zenysi]

Cha. To by taťka musel sehnat smlouvu, kterou netuší kde má.

[vyosek]

Tak zkuste zavolat na poskytovatele a zeptat se

[Zenysi]

To jsou zase další peníze pryč

[vyosek]

Heh, par korun za hovor...no tak hledejte smlouvu, jinak ty udaje nedostanem

[Zenysi]

No já ne... Zkusim večer taťku umluvit, ale nadšenej nebude.....
No a kdyby telefon to jistí

PS: Já myslel kdyby přijel/přišel technik má to sice ani ne 500 m, ale za hoďku tady ....