Prosím o pomoc s virem HKLM/.....Pugi.PugiObj

Zpráva

sccay · #1 Příspěvek od **sccay** » 06 dub 2010 19:27

Logfile of random's system information tool 1.06 (written by random/random)
Run by Šárka at 2010-04-05 22:14:16
Microsoft® Windows Vista™ Business Service Pack 2
System drive C: has 89 GB (39%) free of 227 GB
Total RAM: 1788 MB (28% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:14:56, on 5.4.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18904)
Boot mode: Normal

Running processes:
C:\windows\system32\Dwm.exe
C:\windows\system32\taskeng.exe
C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe
C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\pthosttr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\File Sanitizer\CoreShredder.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
C:\Program Files\RotateImage\RCIMGDIR.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Babylon\Babylon-Pro\Babylon.exe
C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
C:\Users\Šárka\AppData\Local\Seznam.cz\postak.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\WinZip\WZQKPICK.EXE
c:\Program Files\ActivIdentity\ActivClient\acevents.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Program Files\AVG\AVG9\Identity Protection\agent\bin\avgidsmonitor.exe
C:\windows\system32\conime.exe
c:\Program Files\Hewlett-Packard\IAM\Bin\AsGHost.exe
C:\windows\Explorer.EXE
C:\Program Files\AVG\AVG9\avgui.exe
C:\Program Files\AVG\AVG9\avgcfgex.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Microsoft Office\Office12\WINWORD.EXE
C:\Users\Šárka\AppData\Local\Seznam.cz\MiniBrowser.exe
C:\Users\Šárka\AppData\Local\Seznam.cz\MiniBrowser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10e.exe
C:\Users\Šárka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74GFG9WD\RSIT[1].exe
C:\Program Files\trend micro\Šárka.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... ll&pf=cmnb
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... ll&pf=cmnb
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
R3 - URLSearchHook: IObitCom Toolbar - {31c7d459-9cc3-44f2-9dca-fc11795309b4} - C:\Program Files\IObitCom\tbIObi.dll
R3 - URLSearchHook: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyB0.dll
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: Browser Defender BHO - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll
O2 - BHO: P2P Energy Toolbar - {2bae58c2-79f9-45d1-a286-81f911301c3a} - C:\Program Files\P2P_Energy\tbP2P0.dll
O2 - BHO: BHO_Startup - {3134413B-49B4-425C-98A5-893C1F195601} - C:\Program Files\Hewlett-Packard\File Sanitizer\IEBHO.dll
O2 - BHO: IObitCom Toolbar - {31c7d459-9cc3-44f2-9dca-fc11795309b4} - C:\Program Files\IObitCom\tbIObi.dll
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: RadioBar Toolbar - {5B291E6C-9A74-4034-971B-A4B007A0B315} - C:\Program Files\RadioBar\toolbar.ni.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Babylon IE plugin - {9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyB0.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Credential Manager for HP ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - c:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Users\Šárka\AppData\Local\Seznam.cz\listicka.dll
O2 - BHO: Mininova Toolbar - {f592709f-ff4a-4862-b659-4afabda56312} - C:\Program Files\Mininova\tbMini.dll
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O3 - Toolbar: P2P Energy Toolbar - {2bae58c2-79f9-45d1-a286-81f911301c3a} - C:\Program Files\P2P_Energy\tbP2P0.dll
O3 - Toolbar: Mininova Toolbar - {f592709f-ff4a-4862-b659-4afabda56312} - C:\Program Files\Mininova\tbMini.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyB0.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: IObitCom Toolbar - {31c7d459-9cc3-44f2-9dca-fc11795309b4} - C:\Program Files\IObitCom\tbIObi.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: RadioBar Toolbar - {5B291E6C-9A74-4034-971B-A4B007A0B315} - C:\Program Files\RadioBar\toolbar.ni.dll
O3 - Toolbar: PC Tools Browser Guard - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll
O4 - HKLM\..\Run: [accrdsub] "c:\Program Files\ActivIdentity\ActivClient\accrdsub.exe"
O4 - HKLM\..\Run: [PTHOSTTR] c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start
O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe c:\PROGRA~1\HEWLET~1\IAM\Bin\ASTSVCC.dll,RegisterModule
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [WirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [File Sanitizer] C:\Program Files\Hewlett-Packard\File Sanitizer\CoreShredder.exe
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [RotateImage] C:\Program Files\RotateImage\RCIMGDIR.exe
O4 - HKLM\..\Run: [HPCam_Menu] "c:\Program Files\Hewlett-Packard\HP Webcam\MUITransfer\MUIStartMenu.exe" "c:\Program Files\Hewlett-Packard\HP Webcam" UpdateWithCreateOnce "Software\CyberLink\HP Webcam\1.0"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\windows\system32\NeroCheck.exe
O4 - HKLM\..\Run: [PDF Complete] C:\Program Files\PDF Complete\pdfsty.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Babylon Client] C:\Program Files\Babylon\Babylon-Pro\Babylon.exe -AutoStart
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe"
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
O4 - HKCU\..\Run: [Seznam Postak] "C:\Users\Šárka\AppData\Local\Seznam.cz\postak.exe" -s
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe -p
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Translate this web page with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm
O8 - Extra context menu item: Translate with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm
O9 - Extra button: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra 'Tools' menuitem: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra 'Tools' menuitem: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll
O9 - Extra 'Tools' menuitem: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll
O9 - Extra button: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files\Seznam.cz\listicka.dll (HKCU)
O9 - Extra 'Tools' menuitem: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files\Seznam.cz\listicka.dll (HKCU)
O9 - Extra button: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files\Seznam.cz\listicka.dll (HKCU)
O9 - Extra 'Tools' menuitem: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files\Seznam.cz\listicka.dll (HKCU)
O13 - Gopher Prefix:
O16 - DPF: {6D2EF4B4-CB62-4C0B-85F3-B79C236D702C} (ContactExtractor Class) - http://www.facebook.com/controls/contactx.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 0066281219
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/s ... DEXAXO.cab
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - http://h20270.www2.hp.com/ediags/gmn2/i ... ction2.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/200 ... ader55.cab
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://89.203.196.254/activex/AMC.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: toolbarchrome - {718733BC-AD64-4E5F-AC18-A85FBD75D54D} - C:\Program Files\RadioBar\toolbar.ni.dll
O20 - AppInit_DLLs: APSHook.dll,C:\PROGRA~1\Google\GO333C~1\GOEC62~1.DLL,avgrsstx.dll
O20 - Winlogon Notify: DeviceNP - C:\windows\SYSTEM32\DeviceNP.dll
O23 - Service: McAfee Application Installer Cleanup (0108971257368934) (0108971257368934mcinstcleanup) - Unknown owner - C:\Users\RKA~1\AppData\Local\Temp\010897~1.EXE (file missing)
O23 - Service: ActivClient Middleware Service (accoca) - ActivIdentity - c:\Program Files\ActivIdentity\ActivClient\accoca.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\windows\system32\Ati2evxx.exe
O23 - Service: AuthenTec Fingerprint Service (ATService) - AuthenTec, Inc. - c:\Program Files\Fingerprint Sensor\AtService.exe
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe
O23 - Service: AVG E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: AVG Firewall (avgfws9) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgfws9.exe
O23 - Service: AVG9IDSAgent (AVGIDSAgent) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe
O23 - Service: Browser Defender Update Service - Threat Expert Ltd. - C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: HP ProtectTools Device Locking / Auditing (FLCDLOCK) - Hewlett-Packard Ltd - c:\Windows\system32\flcdlock.exe
O23 - Service: Google Desktop Manager 5.9.911.3589 (GoogleDesktopManager-110309-193829) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Služba Google Update (gupdate1ca5704bb5117a0) (gupdate1ca5704bb5117a0) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: HP ProtectTools Service - Hewlett-Packard Development Company, L.P - c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTChangeFilterService.exe
O23 - Service: Drive Encryption Service (HpFkCryptService) - SafeBoot International - c:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
O23 - Service: File Sanitizer for HP ProtectTools (HPFSService) - Hewlett-Packard - C:\Program Files\Hewlett-Packard\File Sanitizer\HPFSService.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\windows\system32\Hpservice.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: Sony Ericsson OMSI download service (OMSI download service) - Unknown owner - C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files\PDF Complete\pdfsvc.exe
O23 - Service: RoxMediaDB10 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe

--
End of file - 20508 bytes

======Scheduled tasks folder======

C:\windows\tasks\AWC Startup.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
C:\windows\tasks\User_Feed_Synchronization-{0C59BCC9-8F3B-458A-80F9-6DCFDD41C7B4}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
AskBar BHO - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-08-06 279944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2A0F3D1B-0909-4FF4-B272-609CCE6054E7}]
PC Tools Browser Guard BHO - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll [2010-01-22 567248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2bae58c2-79f9-45d1-a286-81f911301c3a}]
P2P Energy Toolbar - C:\Program Files\P2P_Energy\tbP2P0.dll [2009-11-09 2331672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3134413B-49B4-425C-98A5-893C1F195601}]
BHO_Startup Class - C:\Program Files\Hewlett-Packard\File Sanitizer\IEBHO.dll [2009-01-14 110592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31c7d459-9cc3-44f2-9dca-fc11795309b4}]
IObitCom Toolbar - C:\Program Files\IObitCom\tbIObi.dll [2009-11-09 2331672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2009-11-25 202080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG9\avgssie.dll [2010-04-04 1602912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5B291E6C-9A74-4034-971B-A4B007A0B315}]
RadioBar Toolbar - C:\Program Files\RadioBar\toolbar.ni.dll [2010-01-11 451808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}]
Babylon IE plugin - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll [2010-02-17 253672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
AVG Security Toolbar BHO - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll [2010-02-23 1664256]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-12-09 263280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-12-09 764912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}]
myBabylon English Toolbar - C:\Program Files\myBabylon_English\tbmyB0.dll [2009-12-31 2349080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-09 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DF21F1DB-80C6-11D3-9483-B03D0EC10000}]
Credential Manager for HP ProtectTools - c:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll [2009-01-28 98064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Lištička - C:\Users\Šárka\AppData\Local\Seznam.cz\listicka.dll [2009-11-02 1411736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f592709f-ff4a-4862-b659-4afabda56312}]
Mininova Toolbar - C:\Program Files\Mininova\tbMini.dll [2009-11-09 2331672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0BF43445-2F28-4351-9252-17FE6E806AA0}
{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - AVG Security Toolbar - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll [2010-02-23 1664256]
{2bae58c2-79f9-45d1-a286-81f911301c3a} - P2P Energy Toolbar - C:\Program Files\P2P_Energy\tbP2P0.dll [2009-11-09 2331672]
{f592709f-ff4a-4862-b659-4afabda56312} - Mininova Toolbar - C:\Program Files\Mininova\tbMini.dll [2009-11-09 2331672]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - []
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-12-09 263280]
{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - myBabylon English Toolbar - C:\Program Files\myBabylon_English\tbmyB0.dll [2009-12-31 2349080]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
{31c7d459-9cc3-44f2-9dca-fc11795309b4} - IObitCom Toolbar - C:\Program Files\IObitCom\tbIObi.dll [2009-11-09 2331672]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2009-11-25 1496408]
{3041d03e-fd4b-44e0-b742-2d9b88305f98} - Ask Toolbar - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-08-06 279944]
{5B291E6C-9A74-4034-971B-A4B007A0B315} - RadioBar Toolbar - C:\Program Files\RadioBar\toolbar.ni.dll [2010-01-11 451808]
{472734EA-242A-422B-ADF8-83D1E48CC825} - PC Tools Browser Guard - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll [2010-01-22 567248]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"accrdsub"=c:\Program Files\ActivIdentity\ActivClient\accrdsub.exe [2007-11-28 298536]
"PTHOSTTR"=c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE [2009-02-12 355896]
"CognizanceTS"=c:\PROGRA~1\HEWLET~1\IAM\Bin\ASTSVCC.dll [2009-01-28 24848]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-02-06 1430824]
"WirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2009-03-10 506936]
"HP Health Check Scheduler"=c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-12-04 75016]
"File Sanitizer"=C:\Program Files\Hewlett-Packard\File Sanitizer\CoreShredder.exe [2009-01-14 11223040]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2009-02-18 177720]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-02-25 61440]
"RotateImage"=C:\Program Files\RotateImage\RCIMGDIR.exe [2008-10-30 31744]
"HPCam_Menu"=c:\Program Files\Hewlett-Packard\HP Webcam\MUITransfer\MUIStartMenu.exe [2009-02-25 218408]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"NeroFilterCheck"=C:\windows\system32\NeroCheck.exe [2001-07-09 155648]
"PDF Complete"=C:\Program Files\PDF Complete\pdfsty.exe [2008-08-08 319000]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-11-11 417792]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-11-12 141600]
"Babylon Client"=C:\Program Files\Babylon\Babylon-Pro\Babylon.exe [2010-02-17 3738856]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-07-27 1983816]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2009-03-18 767312]
"AVG9_TRAY"=C:\PROGRA~1\AVG\AVG9\avgtray.exe [2010-04-04 2064224]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2009-11-20 2363392]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-11-06 39408]
"OM2_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe [2009-04-17 95536]
"Sony Ericsson PC Suite"=C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe [2009-09-24 434176]
"Seznam Postak"=C:\Users\Šárka\AppData\Local\Seznam.cz\postak.exe [2010-03-01 451224]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"=C:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe [2009-10-28 257440]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="APSHook.dll,C:\PROGRA~1\Google\GO333C~1\GOEC62~1.DLL,avgrsstx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\DeviceNP]
C:\windows\system32\DeviceNP.dll [2008-08-07 69632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
ASWLNPkg

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1ff6ff7e-d5ae-11de-b1e8-00247eb51e89}]
shell\AutoRun\command - G:\setupSNK.exe

======File associations======

.js - edit - C:\windows\System32\Notepad.exe %1
.js - open - C:\windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-04-05 22:14:17 ----D---- C:\Program Files\trend micro
2010-04-05 22:14:16 ----D---- C:\rsit
2010-04-05 22:01:34 ----A---- C:\avenger.txt
2010-04-04 22:34:03 ----A---- C:\windows\system32\avgrsstx.dll
2010-04-04 22:33:26 ----D---- C:\ProgramData\AVG Security Toolbar
2010-04-04 13:12:55 ----D---- C:\Program Files\ESET
2010-04-03 03:24:37 ----A---- C:\windows\BDTSupport.dll
2010-04-01 14:05:24 ----D---- C:\Users\Šárka\AppData\Roaming\BitTorrent
2010-04-01 14:05:08 ----D---- C:\Program Files\BitTorrent
2010-04-01 11:48:17 ----D---- C:\Program Files\RadioBar
2010-04-01 10:07:29 ----A---- C:\windows\SGDetectionTool.dll
2010-04-01 10:07:26 ----A---- C:\windows\PCTBDRes.dll
2010-04-01 10:07:26 ----A---- C:\windows\PCTBDCore.dll
2010-04-01 09:58:22 ----D---- C:\Program Files\Common Files\PC Tools
2010-04-01 09:58:21 ----D---- C:\Users\Šárka\AppData\Roaming\PC Tools
2010-04-01 09:58:21 ----D---- C:\ProgramData\PC Tools
2010-04-01 09:58:21 ----D---- C:\Program Files\Spyware Doctor
2010-04-01 09:54:26 ----D---- C:\Program Files\AskBarDis
2010-03-31 20:36:52 ----D---- C:\Program Files\WinZip
2010-03-31 13:10:05 ----HD---- C:\ProgramData\CanonIJScan
2010-03-31 09:22:12 ----A---- C:\windows\system32\mshtml.dll
2010-03-31 09:22:08 ----A---- C:\windows\system32\ieframe.dll
2010-03-31 09:22:07 ----A---- C:\windows\system32\urlmon.dll
2010-03-31 09:22:07 ----A---- C:\windows\system32\iertutil.dll
2010-03-31 09:22:06 ----A---- C:\windows\system32\wininet.dll
2010-03-31 09:22:06 ----A---- C:\windows\system32\occache.dll
2010-03-31 09:22:06 ----A---- C:\windows\system32\mstime.dll
2010-03-31 09:22:06 ----A---- C:\windows\system32\msfeeds.dll
2010-03-31 09:22:06 ----A---- C:\windows\system32\iedkcs32.dll
2010-03-31 09:22:05 ----A---- C:\windows\system32\ieui.dll
2010-03-31 09:22:05 ----A---- C:\windows\system32\iepeers.dll
2010-03-31 09:22:04 ----A---- C:\windows\system32\msfeedssync.exe
2010-03-31 09:22:04 ----A---- C:\windows\system32\msfeedsbs.dll
2010-03-31 09:22:04 ----A---- C:\windows\system32\jsproxy.dll
2010-03-31 09:22:04 ----A---- C:\windows\system32\ieUnatt.exe
2010-03-31 09:22:04 ----A---- C:\windows\system32\iesysprep.dll
2010-03-31 09:22:04 ----A---- C:\windows\system32\iesetup.dll
2010-03-31 09:22:04 ----A---- C:\windows\system32\ie4uinit.exe
2010-03-31 09:22:03 ----A---- C:\windows\system32\iernonce.dll
2010-03-30 21:01:05 ----D---- C:\ProgramData\Sun
2010-03-30 20:59:51 ----A---- C:\windows\system32\javaws.exe
2010-03-30 20:59:50 ----A---- C:\windows\system32\javaw.exe
2010-03-30 20:59:50 ----A---- C:\windows\system32\java.exe
2010-03-24 20:26:44 ----HD---- C:\ProgramData\CanonIJEPPEX
2010-03-23 19:59:23 ----D---- C:\windows\system32\0405
2010-03-23 19:23:13 ----A---- C:\windows\system32\mdimon.dll
2010-03-23 18:45:38 ----D---- C:\Program Files\Common Files\DESIGNER
2010-03-23 16:08:50 ----D---- C:\ProgramData\CanonIJ
2010-03-23 16:08:09 ----D---- C:\Users\Šárka\AppData\Roaming\Canon
2010-03-23 16:06:34 ----HD---- C:\ProgramData\CanonIJSolutionMenu
2010-03-23 16:04:49 ----HD---- C:\ProgramData\CanonIJMyPrinter
2010-03-23 16:04:38 ----D---- C:\ProgramData\CanonIJPLM
2010-03-23 15:53:49 ----HD---- C:\ProgramData\CanonBJ
2010-03-23 15:53:16 ----HD---- C:\windows\system32\CanonIJ Uninstaller Information
2010-03-23 15:52:28 ----A---- C:\windows\system32\CNC550L.dll
2010-03-23 15:52:27 ----A---- C:\windows\system32\CNC550U.dll
2010-03-23 15:52:27 ----A---- C:\windows\system32\CNC550I.dll
2010-03-23 15:52:27 ----A---- C:\windows\system32\CNC550C.dll
2010-03-23 15:49:27 ----A---- C:\windows\system32\CNC550O.dll
2010-03-23 15:49:21 ----A---- C:\windows\system32\CNMIU9Z.DLL
2010-03-23 15:49:08 ----HD---- C:\Program Files\CanonBJ
2010-03-22 14:13:35 ----HD---- C:\ProgramData\CanonIJEGV
2010-03-22 13:41:04 ----D---- C:\Program Files\Common Files\CANON
2010-03-22 13:35:56 ----A---- C:\windows\system32\CNHMCA.dll
2010-03-22 13:34:11 ----A---- C:\windows\system32\CNMLM9Z.DLL
2010-03-22 13:24:27 ----D---- C:\Program Files\Canon
2010-03-19 19:58:34 ----D---- C:\Users\Šárka\AppData\Roaming\IrfanView
2010-03-19 19:58:32 ----D---- C:\Program Files\IrfanView
2010-03-19 19:58:02 ----D---- C:\Users\Šárka\AppData\Roaming\OpenWith.org Downloaded Setups
2010-03-19 19:57:39 ----D---- C:\Users\Šárka\AppData\Roaming\OpenWith.org Cache
2010-03-19 19:47:51 ----D---- C:\Program Files\OpenWith.org Desktop Tool
2010-03-19 15:36:30 ----D---- C:\Users\Šárka\AppData\Roaming\licenses
2010-03-19 15:36:28 ----D---- C:\Users\Šárka\AppData\Roaming\PCMM2009
2010-03-19 15:36:22 ----D---- C:\Users\Šárka\AppData\Roaming\PCMM2010
2010-03-19 15:35:53 ----D---- C:\Program Files\PC MightyMax 2010
2010-03-19 14:19:06 ----A---- C:\ProgramData\01ba62ef.tmp
2010-03-18 19:07:24 ----D---- C:\windows\Downloaded Installations
2010-03-13 11:53:11 ----HD---- C:\Config.Msi
2010-03-12 10:21:03 ----D---- C:\Program Files\Microsoft Security Essentials
2010-03-11 04:03:56 ----A---- C:\windows\system32\nshhttp.dll
2010-03-11 04:02:51 ----A---- C:\windows\system32\httpapi.dll
2010-03-10 21:09:53 ----D---- C:\ProgramData\WEBREG
2010-03-06 21:59:56 ----A---- C:\windows\system32\browserchoice.exe

======List of files/folders modified in the last 1 months======

2010-04-05 22:14:48 ----D---- C:\windows\Temp
2010-04-05 22:14:17 ----RD---- C:\Program Files
2010-04-05 21:38:07 ----D---- C:\ProgramData\Babylon
2010-04-05 18:13:43 ----D---- C:\windows\Prefetch
2010-04-05 18:04:05 ----D---- C:\Windows
2010-04-05 17:55:30 ----AD---- C:\ProgramData\Temp
2010-04-05 13:24:28 ----D---- C:\windows\System32
2010-04-05 13:24:28 ----D---- C:\windows\inf
2010-04-05 13:24:28 ----A---- C:\windows\system32\PerfStringBackup.INI
2010-04-04 22:57:15 ----SHD---- C:\System Volume Information
2010-04-04 22:48:23 ----D---- C:\windows\system32\inetsrv
2010-04-04 22:34:03 ----D---- C:\windows\system32\drivers
2010-04-04 22:33:26 ----HD---- C:\ProgramData
2010-04-04 22:30:04 ----D---- C:\windows\system32\catroot
2010-04-04 22:28:11 ----D---- C:\ProgramData\avg9
2010-04-04 22:27:03 ----SHD---- C:\windows\Installer
2010-04-04 22:27:03 ----D---- C:\windows\winsxs
2010-04-04 22:24:26 ----SD---- C:\ProgramData\Microsoft
2010-04-04 20:39:06 ----D---- C:\Program Files\Ashampoo
2010-04-04 14:04:19 ----D---- C:\windows\system32\Tasks
2010-04-04 13:12:57 ----SD---- C:\windows\Downloaded Program Files
2010-04-04 12:32:55 ----D---- C:\ProgramData\PDFC
2010-04-02 02:50:25 ----D---- C:\windows\system32\config
2010-04-02 00:12:06 ----D---- C:\ProgramData\Microsoft Help
2010-04-01 23:54:53 ----D---- C:\windows\system32\catroot2
2010-04-01 11:09:17 ----D---- C:\Program Files\Uniblue
2010-04-01 10:08:49 ----D---- C:\Users\Šárka\AppData\Roaming\Ashampoo
2010-04-01 10:08:08 ----D---- C:\ProgramData\WinZip
2010-04-01 09:58:22 ----D---- C:\Program Files\Common Files
2010-03-31 20:39:41 ----D---- C:\Users\Šárka\AppData\Roaming\Uniblue
2010-03-31 15:02:04 ----D---- C:\Program Files\Internet Explorer
2010-03-31 15:02:03 ----D---- C:\windows\system32\migration
2010-03-30 21:01:02 ----D---- C:\Program Files\Common Files\Java
2010-03-30 20:59:43 ----D---- C:\Program Files\Java
2010-03-30 09:06:04 ----D---- C:\windows\rescache
2010-03-23 20:57:34 ----RSD---- C:\windows\assembly
2010-03-23 20:57:34 ----D---- C:\windows\Microsoft.NET
2010-03-23 20:00:30 ----D---- C:\ProgramData\hpqLog
2010-03-23 19:59:28 ----D---- C:\windows\system32\cs-CZ
2010-03-23 19:59:23 ----D---- C:\windows\system32\wbem
2010-03-23 19:59:21 ----D---- C:\inetpub
2010-03-23 19:25:18 ----D---- C:\Program Files\Microsoft
2010-03-23 18:46:06 ----RSD---- C:\windows\Fonts
2010-03-23 18:46:00 ----D---- C:\Program Files\Common Files\microsoft shared
2010-03-23 18:45:38 ----D---- C:\Program Files\Microsoft Works
2010-03-23 18:41:58 ----D---- C:\windows\ShellNew
2010-03-23 16:00:52 ----D---- C:\windows\twain_32
2010-03-23 15:35:04 ----D---- C:\Program Files\Sony
2010-03-23 15:34:52 ----D---- C:\ProgramData\Sony
2010-03-22 14:51:50 ----D---- C:\Program Files\Hewlett-Packard
2010-03-22 14:51:32 ----D---- C:\Program Files\Common Files\InstallShield
2010-03-22 14:51:24 ----HD---- C:\Program Files\InstallShield Installation Information
2010-03-22 14:49:04 ----D---- C:\Program Files\HP
2010-03-22 14:38:36 ----SD---- C:\Users\Šárka\AppData\Roaming\Microsoft
2010-03-22 14:34:56 ----D---- C:\ProgramData\HP
2010-03-22 13:44:41 ----RSD---- C:\windows\Media
2010-03-21 23:50:44 ----D---- C:\Program Files\Analog Devices
2010-03-21 16:18:49 ----D---- C:\Users\Šárka\AppData\Roaming\Google
2010-03-20 23:45:50 ----D---- C:\Program Files\Roxio
2010-03-20 22:47:09 ----D---- C:\Users\Šárka\AppData\Roaming\Babylon
2010-03-20 15:52:38 ----D---- C:\windows\system32\migwiz
2010-03-20 14:28:31 ----D---- C:\windows\Logs
2010-03-20 05:48:07 ----D---- C:\windows\Debug
2010-03-20 05:06:17 ----D---- C:\Program Files\Sony Ericsson
2010-03-20 05:06:15 ----D---- C:\Program Files\Common Files\Sony Ericsson
2010-03-20 05:06:03 ----D---- C:\ProgramData\Sony Ericsson
2010-03-20 04:51:46 ----D---- C:\Program Files\Google
2010-03-19 15:39:10 ----D---- C:\windows\Tasks
2010-03-19 13:58:44 ----D---- C:\Program Files\Sony Setup
2010-03-19 09:48:39 ----D---- C:\windows\ModemLogs
2010-03-19 01:24:36 ----D---- C:\ProgramData\FileCure
2010-03-19 00:11:03 ----D---- C:\Users\Šárka\AppData\Roaming\HpUpdate
2010-03-17 19:05:59 ----D---- C:\Users\Šárka\AppData\Roaming\Image Zone Express
2010-03-17 17:51:46 ----D---- C:\Program Files\Seznam.cz
2010-03-14 19:54:29 ----D---- C:\windows\system32\WDI
2010-03-14 02:42:45 ----D---- C:\Download
2010-03-14 02:03:35 ----D---- C:\Program Files\Mozilla Firefox
2010-03-13 23:52:10 ----D---- C:\Users\Šárka\AppData\Roaming\Vso
2010-03-13 23:50:58 ----A---- C:\Users\Šárka\AppData\Roaming\inst.exe
2010-03-13 23:50:47 ----D---- C:\Program Files\DVDFab 6
2010-03-13 23:45:53 ----D---- C:\Users\Šárka\AppData\Roaming\Skype
2010-03-13 12:02:58 ----A---- C:\windows\win.ini
2010-03-12 12:33:31 ----D---- C:\Users\Šárka\AppData\Roaming\ICQ
2010-03-12 10:17:57 ----D---- C:\Program Files\Windows Live
2010-03-12 08:33:44 ----D---- C:\Program Files\Microsoft Games
2010-03-11 04:28:23 ----D---- C:\Program Files\Windows Mail
2010-03-11 04:28:23 ----D---- C:\Program Files\Movie Maker
2010-03-10 12:56:56 ----D---- C:\Users\Šárka\AppData\Roaming\Nokia
2010-03-10 12:47:31 ----D---- C:\Users\Šárka\AppData\Roaming\skypePM
2010-03-09 04:28:20 ----A---- C:\windows\system32\deploytk.dll
2010-03-08 20:50:39 ----D---- C:\windows\system32\Msdtc
2010-03-08 20:49:36 ----D---- C:\Program Files\Windows Defender
2010-03-08 20:49:35 ----D---- C:\windows\system32\spool
2010-03-08 20:49:34 ----D---- C:\windows\registration
2010-03-08 20:49:32 ----D---- C:\Users\Šárka\AppData\Roaming\GRETECH

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Avgfwfd;AVG network filter service; C:\windows\system32\DRIVERS\avgfwd6x.sys [2010-04-04 24856]
R1 AvgLdx86;AVG AVI Loader Driver x86; C:\windows\System32\Drivers\avgldx86.sys [2010-04-04 216200]
R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86; C:\windows\System32\Drivers\avgmfx86.sys [2010-04-04 29512]
R1 AvgTdiX;AVG Network Redirector; C:\windows\System32\Drivers\avgtdix.sys [2010-04-04 242696]
R1 CSC;Offline Files Driver; C:\windows\system32\drivers\csc.sys [2009-04-11 351744]
R1 RsvLock;RsvLock; C:\windows\system32\drivers\RsvLock.sys [2008-10-02 12528]
R3 5U876UVC;HP Webcam [2 MP series]; C:\windows\system32\DRIVERS\5U876.sys [2009-05-13 117248]
R3 Accelerometer;HP Accelerometer; C:\windows\system32\DRIVERS\Accelerometer.sys [2008-08-27 34608]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\windows\system32\DRIVERS\AGRSM.sys [2008-11-21 1204128]
R3 AtiHdmiService;ATI Function Driver for HDMI Service; C:\windows\system32\drivers\AtiHdmi.sys [2009-03-10 95760]
R3 atikmdag;atikmdag; C:\windows\system32\DRIVERS\atikmdag.sys [2009-03-10 4385792]
R3 AVGIDSDrivervtx;AVG9IDSDriver; \??\C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista\AVGIDSDriver.sys [2010-04-04 122376]
R3 AVGIDSFiltervtx;AVG9IDSFilter; \??\C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista\AVGIDSFilter.sys [2010-04-04 30216]
R3 AVGIDSShimvtx;AVG9IDSShim; \??\C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista\AVGIDSShim.sys [2010-04-04 27144]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\windows\system32\DRIVERS\bcmwl6.sys [2009-10-13 1665016]
R3 BthEnum;Služba Bluetooth Enumerator; C:\windows\system32\DRIVERS\BthEnum.sys [2008-04-17 23040]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2008-04-17 30208]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2009-03-11 84008]
R3 btwavdt;Bluetooth AVDT Service; C:\windows\system32\drivers\btwavdt.sys [2009-03-11 109608]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2009-03-11 29736]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2009-03-11 18344]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\windows\system32\DRIVERS\HpqKbFiltr.sys [2007-06-19 16768]
R3 pcouffin;VSO Software pcouffin; C:\windows\System32\Drivers\pcouffin.sys [2009-11-04 47360]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2008-04-17 149504]
R3 seehcri;Sony Ericsson seehcri Device Driver; C:\windows\system32\DRIVERS\seehcri.sys [2008-01-09 27632]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2009-02-06 205232]
R3 usbscan;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]
S3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\windows\system32\drivers\ADIHdAud.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2008-01-21 179712]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2008-04-17 507904]
S3 DAMDrv;DAMDrv; C:\windows\system32\DRIVERS\DAMDrv.sys [2008-08-06 32256]
S3 Dot4;Ovladač MS IEEE-1284.4; C:\windows\system32\DRIVERS\Dot4.sys [2008-01-21 131584]
S3 Dot4Print;Ovladač třídy tiskárny standardu IEEE-1284.4; C:\windows\system32\DRIVERS\Dot4Prt.sys [2008-01-21 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\windows\system32\DRIVERS\dot4usb.sys [2008-01-21 36864]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 ErrDev;Microsoft Hardware Error Device Driver; C:\windows\system32\drivers\errdev.sys [2008-01-21 6656]
S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys [2009-08-05 54632]
S3 ggflt;SEMC USB Flash Driver Filter; C:\windows\system32\DRIVERS\ggflt.sys [2009-04-06 13224]
S3 ggsemc;SEMC USB Flash Driver; C:\windows\system32\DRIVERS\ggsemc.sys [2009-04-06 25512]
S3 k750bus;Sony Ericsson 750 driver (WDM); C:\windows\system32\DRIVERS\k750bus.sys [2005-02-11 55216]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM); C:\windows\system32\DRIVERS\s0016bus.sys [2008-05-16 89256]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter; C:\windows\system32\DRIVERS\s0016mdfl.sys [2008-05-16 15016]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver; C:\windows\system32\DRIVERS\s0016mdm.sys [2008-05-16 120744]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM); C:\windows\system32\DRIVERS\s0016mgmt.sys [2008-05-16 114216]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS); C:\windows\system32\DRIVERS\s0016nd5.sys [2008-05-16 25512]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface; C:\windows\system32\DRIVERS\s0016obex.sys [2008-05-16 110632]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM); C:\windows\system32\DRIVERS\s0016unic.sys [2008-05-16 115752]
S3 TPM;TPM; C:\windows\system32\drivers\tpm.sys [2008-01-21 45624]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 accoca;ActivClient Middleware Service; c:\Program Files\ActivIdentity\ActivClient\accoca.exe [2007-11-28 185896]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2008-08-26 14336]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\windows\system32\svchost.exe [2008-01-21 21504]
R2 ASBroker;Logon Session Broker; C:\windows\System32\svchost.exe [2008-01-21 21504]
R2 ASChannel;Local Communication Channel; C:\windows\System32\svchost.exe [2008-01-21 21504]
R2 Ati External Event Utility;Ati External Event Utility; C:\windows\system32\Ati2evxx.exe [2009-03-10 733184]
R2 ATService;AuthenTec Fingerprint Service; c:\Program Files\Fingerprint Sensor\AtService.exe [2008-10-03 1185016]
R2 avg9emc;AVG E-mail Scanner; C:\Program Files\AVG\AVG9\avgemc.exe [2010-04-04 916760]
R2 avg9wd;AVG WatchDog; C:\Program Files\AVG\AVG9\avgwdsvc.exe [2010-04-04 308064]
R2 avgfws9;AVG Firewall; C:\Program Files\AVG\AVG9\avgfws9.exe [2010-04-04 2325816]
R2 AVGIDSAgent;AVG9IDSAgent; C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe [2010-04-04 5888008]
R2 Browser Defender Update Service;Browser Defender Update Service; C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe [2010-01-22 112592]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\windows\system32\svchost.exe [2008-01-21 21504]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-03-01 567848]
R2 CISVC;@%systemroot%\system32\CISVC.EXE,-1; C:\windows\system32\CISVC.EXE [2008-01-21 11264]
R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2008-12-04 94208]
R2 HpFkCryptService;Drive Encryption Service; c:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [2008-10-02 256544]
R2 HPFSService;File Sanitizer for HP ProtectTools; C:\Program Files\Hewlett-Packard\File Sanitizer\HPFSService.exe [2009-01-14 77824]
R2 hpsrv;HP Service; C:\windows\system32\Hpservice.exe [2008-08-27 24880]
R2 IISADMIN;@%windir%\system32\inetsrv\iisres.dll,-30007; C:\windows\system32\inetsrv\inetinfo.exe [2008-01-21 13824]
R2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2009-02-10 116104]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-11-20 73728]
R2 LPDSVC;@%systemroot%\system32\lpdsvc.dll,-500; C:\windows\System32\svchost.exe [2008-01-21 21504]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-09-23 935208]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-02-18 129880]
R2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-02-18 129880]
R2 OMSI download service;Sony Ericsson OMSI download service; C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files\PDF Complete\pdfsvc.exe [2008-08-08 777240]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; C:\windows\system32\svchost.exe [2008-01-21 21504]
R3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2008-12-05 222512]
R3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2008-10-23 223232]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2009-11-12 545568]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\windows\system32\svchost.exe [2008-01-21 21504]
S2 0108971257368934mcinstcleanup;McAfee Application Installer Cleanup (0108971257368934); C:\Users\RKA~1\AppData\Local\Temp\010897~1.EXE C:\PROGRA~1\COMMON~1\McAfee\INSTAL~1\cleanup.ini -cleanup -nolog -service []
S2 gupdate1ca5704bb5117a0;Služba Google Update (gupdate1ca5704bb5117a0); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-10-27 133104]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\windows\System32\svchost.exe [2008-01-21 21504]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\windows\System32\svchost.exe [2008-01-21 21504]
S3 aspnet_state;ASP.NET State Service; C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-03-30 31048]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service; C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe [2010-02-23 369920]
S3 AxInstSV;@%SystemRoot%\system32\AxInstSV.dll,-103; C:\windows\system32\svchost.exe [2008-01-21 21504]
S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; C:\windows\system32\fxssvc.exe [2008-01-21 523776]
S3 FLCDLOCK;HP ProtectTools Device Locking / Auditing; c:\Windows\system32\flcdlock.exe [2008-08-07 349432]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\windows\system32\svchost.exe [2008-01-21 21504]
S3 fsssvc;Služba Windows Live Zabezpečení rodiny; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-08-05 704864]
S3 GoogleDesktopManager-110309-193829;Google Desktop Manager 5.9.911.3589; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2010-03-19 30192]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-11-06 182768]
S3 HP ProtectTools Service;HP ProtectTools Service; c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTChangeFilterService.exe [2009-02-12 45056]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 MSFTPSVC;@%windir%\system32\inetsrv\iisres.dll,-30005; C:\windows\system32\inetsrv\inetinfo.exe [2008-01-21 13824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 RoxMediaDB10;RoxMediaDB10; c:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2008-04-08 1112560]
S3 sdAuxService;PC Tools Auxiliary Service; C:\Program Files\Spyware Doctor\pctsAuxs.exe [2010-03-11 366840]
S3 sdCoreService;PC Tools Security Service; C:\Program Files\Spyware Doctor\pctsSvc.exe [2010-03-15 1142224]
S3 stllssvr;stllssvr; c:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2008-03-24 74384]
S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; C:\windows\system32\wbengine.exe [2009-04-11 918528]
S4 AppMgmt;@appmgmts.dll,-3250; C:\windows\system32\svchost.exe [2008-01-21 21504]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\windows\System32\svchost.exe [2008-01-21 21504]
S4 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-02-18 129880]
S4 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\windows\System32\svchost.exe [2008-01-21 21504]

-----------------EOF-----------------

Unlimited_Killer

Dobrý večer.

1) ComboFix

Stáhněte a uložte na Plochu ComboFix.
Ještě před spuštěním vypněte rezidentní štít antiviru, či antispywaru.
Spusťte ho s administrátorským oprávněním.
Po spuštění se Vám zobrazí licenční podmínky, klikněte na 'Ano'.
Budete také dotázáni na instalaci konzole pro zotavení, taktéž klikněte na 'Ano'.
Celý sken bude trvat tak 5-10 minut, v závislosti na tom, kolika soubory se bude CF prodírat.
Váš PC bude pravděpodobně restartován, tak se toho nelekněte.
Než úplně skončí sken, nic nedělejte, hlavně neklikejte do spuštěného okna s ComboFixem.
Po skončení skenu (či následném restartu) na Vás 'vypadne' log, který vkopírujete ve formě textu sem.
Pokud žádný log 'nevypadne', naleznete jej v umístění C:\ComboFix.txt

sccay · #3 Příspěvek od **sccay** » 07 dub 2010 18:25

Combofix mi nefunguje tak, jak by měl. Resp.: žádný text soubor, vytvoří se složka celého Počítače.

Unlimited_Killer

0K, stalo se to již podruhé u mého uživatele, zřejmě bug CF.

1) Odinstalace ComboFixu

Proklikejte se přes Start do Spustit [klávesová zkratka je Win+R].
Do textového pole napište:
Kód: Vybrat vše
```
ComboFix /Uninstall
```
Stiskněte Enter.
Spustí se odinstalace ComboFixu, která smaže všechny jeho součásti.

2) Malwarebytes' Anti-Malware

Stáhněte MbAM a postupujte podle popisu.
Zatím nic nemažte, MbAM má občas falešné detekce.
Poté mi sem vložte log ve formě textu.

sccay · #5 Příspěvek od **sccay** » 28 dub 2010 22:34

Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Verze databáze: 4048

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18904

28.4.2010 23:28:25
mbam-log-2010-04-28 (23-28-25).txt

Typ skenu: Úplný sken (C:\|D:\|F:\|)
Skenované objekty: 222036
Uplynulý čas: 1 hodina(y), 11 minuta(y), 36 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

Unlimited_Killer

Je to dlouhá doba, proto prosím nový RSIT log.

sccay · #7 Příspěvek od **sccay** » 29 dub 2010 08:15

Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrator at 2010-04-29 09:11:24
Microsoft® Windows Vista™ Business Service Pack 2
System drive C: has 173 GB (76%) free of 227 GB
Total RAM: 1788 MB (40% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:11:30, on 29.4.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18904)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Hewlett-Packard\IAM\Bin\AsGHost.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe
C:\Program Files\RotateImage\RCIMGDIR.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\ActivIdentity\ActivClient\acevents.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Windows\System32\wsqmcons.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9GHTP6BM\RSIT[1].exe
C:\Program Files\trend micro\Administrator.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Credential Manager for HP ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: Cooliris Plug-In for Internet Explorer - {EAEE5C74-6D0D-4aca-9232-0DA4A7B866BA} - C:\Program Files\PicLensIE\cooliris.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [WatchDog] C:\Program Files\InterVideo\DVD8SESD\DVDCheck.exe
O4 - HKLM\..\Run: [HPCam_Menu] "C:\Program Files\Hewlett-Packard\HP Webcam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Hewlett-Packard\HP Webcam" UpdateWithCreateOnce "Software\CyberLink\HP Webcam\1.0"
O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe C:\PROGRA~1\HEWLET~1\IAM\Bin\ASTSVCC.dll,RegisterModule
O4 - HKLM\..\Run: [PTHOSTTR] C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start
O4 - HKLM\..\Run: [accrdsub] "C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe"
O4 - HKLM\..\Run: [RotateImage] C:\Program Files\RotateImage\RCIMGDIR.exe
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [PDF Complete] C:\Program Files\PDF Complete\pdfsty.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_93C8148BBB233F43.dll/cmsidewiki.html
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Launch Cooliris - {3437D640-C91A-458f-89F5-B9095EA4C28B} - C:\Program Files\PicLensIE\cooliris.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} - http://89.203.196.254/activex/AMC.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\System32\APSHook.dll C:\Windows\System32\APSHook.dll C:\Windows\System32\APSHook.dll C:\Windows\System32\APSHook.dll C:\Windows\System32\APSHook.dll APSHook.dll
O23 - Service: ActivClient Middleware Service (accoca) - ActivIdentity - C:\Program Files\ActivIdentity\ActivClient\accoca.exe
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\Windows\system32\AEADISRV.EXE
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: AuthenTec Fingerprint Service (ATService) - AuthenTec, Inc. - C:\Program Files\Fingerprint Sensor\AtService.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: Google Update Service (gupdate1cad948b7ae6df) (gupdate1cad948b7ae6df) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP ProtectTools Service - Unknown owner - C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTChangeFilterService.exe (file missing)
O23 - Service: Drive Encryption Service (HpFkCryptService) - SafeBoot International - C:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Unknown owner - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe (file missing)
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files\PDF Complete\pdfsvc.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe

--
End of file - 11284 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3987649566-1707141335-1680143065-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3987649566-1707141335-1680143065-1000UA.job
C:\Windows\tasks\User_Feed_Synchronization-{20DDDD87-350C-449B-9117-81E856FB6FFC}.job
C:\Windows\tasks\User_Feed_Synchronization-{426702C2-FE3D-4107-9CB3-A0035737EF17}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2009-11-25 202080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-04-20 278128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll [2010-04-20 812528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-27 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DF21F1DB-80C6-11D3-9483-B03D0EC10000}]
Credential Manager for HP ProtectTools - C:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll [2009-01-28 98064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EAEE5C74-6D0D-4aca-9232-0DA4A7B866BA}]
C:\Program Files\PicLensIE\cooliris.dll [2010-02-25 4655064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2009-11-25 1496408]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-04-20 278128]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-18 1008184]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-02-06 1430824]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-07-29 98304]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2009-03-18 767312]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-07-27 1983816]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2009-05-18 1314816]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-04-14 2790472]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-03-24 952768]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-04-04 36272]
"WatchDog"=C:\Program Files\InterVideo\DVD8SESD\DVDCheck.exe [2009-03-04 200848]
"HPCam_Menu"=C:\Program Files\Hewlett-Packard\HP Webcam\MUITransfer\MUIStartMenu.exe [2009-02-25 218408]
"CognizanceTS"=C:\PROGRA~1\HEWLET~1\IAM\Bin\ASTSVCC.dll [2009-01-28 24848]
"PTHOSTTR"=C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start []
"accrdsub"=C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe [2007-11-27 298536]
"RotateImage"=C:\Program Files\RotateImage\RCIMGDIR.exe [2008-10-30 31744]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2009-02-18 177720]
"PDF Complete"=C:\Program Files\PDF Complete\pdfsty.exe [2010-01-12 563736]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-01-11 246504]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-10 1233920]
"WindowsWelcomeCenter"=oobefldr.dll,ShowWelcomeCenter []
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2010-03-19 2363392]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-04-20 39408]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883840]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\zCpqset]
C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe [2008-12-11 81920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\Windows\System32\APSHook.dll C:\Windows\System32\APSHook.dll C:\Windows\System32\APSHook.dll C:\Windows\System32\APSHook.dll C:\Windows\System32\APSHook.dll APSHook.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2010-04-29 09:00:38 ----SHD---- C:\Config.Msi
2010-04-28 22:15:43 ----D---- C:\ProgramData\Malwarebytes
2010-04-28 22:15:43 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-04-28 11:08:53 ----D---- C:\Windows\Sun
2010-04-28 10:45:35 ----D---- C:\Program Files\trend micro
2010-04-28 10:45:34 ----D---- C:\rsit
2010-04-28 10:16:10 ----A---- C:\upm_logfile.txt
2010-04-28 09:54:25 ----D---- C:\Program Files\Microsoft Silverlight
2010-04-28 09:52:48 ----D---- C:\Program Files\Microsoft Sync Framework
2010-04-28 09:51:07 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2010-04-28 09:50:09 ----D---- C:\Program Files\Microsoft
2010-04-28 09:49:51 ----D---- C:\Program Files\Windows Live SkyDrive
2010-04-28 09:49:43 ----D---- C:\Program Files\Windows Live
2010-04-28 09:26:12 ----D---- C:\Program Files\Common Files\Windows Live
2010-04-27 11:42:28 ----D---- C:\Program Files\Common Files\Java
2010-04-27 11:41:52 ----A---- C:\Windows\system32\javaws.exe
2010-04-27 11:41:52 ----A---- C:\Windows\system32\javaw.exe
2010-04-27 11:41:52 ----A---- C:\Windows\system32\java.exe
2010-04-27 11:41:11 ----D---- C:\Program Files\Java
2010-04-26 17:49:10 ----D---- C:\Avenger
2010-04-26 17:49:10 ----A---- C:\avenger.txt
2010-04-26 17:36:17 ----D---- C:\Program Files\Ultimate Process Manager
2010-04-26 17:25:08 ----D---- C:\Users\Administrator\AppData\Roaming\Google
2010-04-21 23:58:11 ----A---- C:\Windows\system32\csevalidator.dll
2010-04-21 22:32:50 ----D---- C:\Program Files\MSECache
2010-04-21 11:51:19 ----A---- C:\ComboFix.txt
2010-04-21 11:50:26 ----SHD---- C:\$RECYCLE.BIN
2010-04-21 11:32:46 ----D---- C:\ComboFix
2010-04-21 11:32:09 ----A---- C:\Windows\SWXCACLS.exe
2010-04-20 13:54:03 ----D---- C:\Program Files\ESET
2010-04-20 11:44:56 ----D---- C:\ProgramData\Google
2010-04-20 00:44:48 ----A---- C:\Windows\system32\pdfc_port.dll
2010-04-20 00:44:43 ----D---- C:\Program Files\PDF Complete
2010-04-20 00:44:29 ----D---- C:\ProgramData\PDFC
2010-04-20 00:25:00 ----D---- C:\Program Files\LightScribe Diagnostic Utility
2010-04-20 00:18:47 ----D---- C:\Program Files\Common Files\LightScribe
2010-04-19 23:48:46 ----N---- C:\Windows\Setup1.exe
2010-04-19 23:48:45 ----A---- C:\Windows\ST6UNST.EXE
2010-04-19 23:45:30 ----A---- C:\Windows\GPInstall.exe
2010-04-19 23:44:52 ----D---- C:\Program Files\AbiSuite2
2010-04-19 23:30:16 ----D---- C:\Program Files\Windows Media Components
2010-04-19 23:30:16 ----A---- C:\Windows\system32\wmrmcmp.exe
2010-04-19 22:15:02 ----A---- C:\Windows\pdf2word.INI
2010-04-19 21:23:23 ----A---- C:\Windows\system32\~.tmp
2010-04-18 21:36:41 ----D---- C:\ProgramData\WindowsSearch
2010-04-16 16:14:50 ----D---- C:\Program Files\VeryPDF PDF2Word v3.0
2010-04-16 09:41:19 ----D---- C:\Program Files\PSPad editor
2010-04-16 08:12:56 ----D---- C:\Users\Administrator\AppData\Roaming\Macromedia
2010-04-16 08:02:17 ----D---- C:\Users\Administrator\AppData\Roaming\Adobe
2010-04-16 08:01:16 ----D---- C:\Users\Administrator\AppData\Roaming\ATI
2010-04-16 07:59:51 ----D---- C:\Users\Administrator\AppData\Roaming\Identities
2010-04-16 01:01:19 ----D---- C:\Program Files\PicLensIE
2010-04-15 17:03:32 ----D---- C:\Program Files\Axis Communications
2010-04-15 09:22:02 ----A---- C:\Windows\system32\vbscript.dll
2010-04-15 09:21:48 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-04-15 09:21:48 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-04-15 09:21:27 ----A---- C:\Windows\system32\iphlpsvc.dll
2010-04-15 09:17:06 ----A---- C:\Windows\system32\wintrust.dll
2010-04-15 09:16:49 ----A---- C:\Windows\system32\cabview.dll
2010-04-15 04:59:55 ----A---- C:\Windows\zip.exe
2010-04-15 04:59:55 ----A---- C:\Windows\SWREG.exe
2010-04-15 04:59:55 ----A---- C:\Windows\sed.exe
2010-04-15 04:59:55 ----A---- C:\Windows\PEV.exe
2010-04-15 04:59:55 ----A---- C:\Windows\NIRCMD.exe
2010-04-15 04:59:55 ----A---- C:\Windows\MBR.exe
2010-04-15 04:59:55 ----A---- C:\Windows\grep.exe
2010-04-15 04:59:54 ----A---- C:\Windows\SWSC.exe
2010-04-15 04:38:44 ----D---- C:\Windows\ERDNT
2010-04-15 04:36:25 ----D---- C:\Qoobox
2010-04-15 03:18:55 ----D---- C:\Windows\pss
2010-04-15 02:26:18 ----D---- C:\Users\Administrator\AppData\Roaming\HPQLOG
2010-04-15 02:26:04 ----D---- C:\Users\Administrator\AppData\Roaming\Ashampoo
2010-04-15 02:23:22 ----SD---- C:\Users\Administrator\AppData\Roaming\Microsoft
2010-04-14 22:54:41 ----D---- C:\ProgramData\ashampoo
2010-04-14 22:54:37 ----D---- C:\Program Files\Ashampoo
2010-04-14 00:23:13 ----D---- C:\Program Files\CCleaner
2010-04-14 00:20:56 ----D---- C:\Program Files\Netscape
2010-04-14 00:20:28 ----D---- C:\Program Files\WinZip Self-Extractor
2010-04-14 00:18:28 ----D---- C:\Program Files\Voxx
2010-04-14 00:11:02 ----A---- C:\Windows\uninst.exe
2010-04-14 00:09:16 ----A---- C:\Windows\system32\pegreg32.dll
2010-04-13 19:37:42 ----D---- C:\ProgramData\LightScribe
2010-04-13 19:29:25 ----HD---- C:\ProgramData\CanonIJSolutionMenu
2010-04-13 19:29:10 ----HD---- C:\ProgramData\CanonIJMyPrinter
2010-04-13 19:29:04 ----D---- C:\ProgramData\CanonIJPLM
2010-04-13 19:11:04 ----D---- C:\Program Files\Common Files\CANON
2010-04-13 19:07:14 ----HD---- C:\ProgramData\CanonBJ
2010-04-13 19:06:54 ----HD---- C:\Windows\system32\CanonIJ Uninstaller Information
2010-04-13 19:05:23 ----A---- C:\Windows\system32\CNC550L.dll
2010-04-13 19:05:23 ----A---- C:\Windows\system32\CNC550I.dll
2010-04-13 19:05:23 ----A---- C:\Windows\system32\CNC550C.dll
2010-04-13 19:05:22 ----A---- C:\Windows\system32\CNHMCA.dll
2010-04-13 19:05:22 ----A---- C:\Windows\system32\CNC550U.dll
2010-04-13 19:04:30 ----A---- C:\Windows\system32\CNMLM9Z.DLL
2010-04-13 19:04:24 ----A---- C:\Windows\system32\CNC550O.dll
2010-04-13 19:04:18 ----A---- C:\Windows\system32\CNMIU9Z.DLL
2010-04-13 19:04:10 ----HD---- C:\Program Files\CanonBJ
2010-04-13 19:02:52 ----D---- C:\Program Files\Canon
2010-04-11 19:58:10 ----A---- C:\Windows\system32\msonpmon.dll
2010-04-11 19:57:21 ----D---- C:\Program Files\Microsoft Works
2010-04-11 19:57:05 ----D---- C:\Program Files\Common Files\DESIGNER
2010-04-11 19:56:37 ----D---- C:\Windows\PCHEALTH
2010-04-11 19:56:37 ----D---- C:\Program Files\Microsoft.NET
2010-04-11 19:53:31 ----D---- C:\ProgramData\Microsoft Help
2010-04-11 19:53:31 ----D---- C:\Program Files\Microsoft Office
2010-04-11 19:52:53 ----RHD---- C:\MSOCache
2010-04-11 12:27:25 ----A---- C:\Windows\system32\pdfcmnnt.dll
2010-04-11 12:27:22 ----D---- C:\Program Files\PDFCreator
2010-04-11 12:27:22 ----A---- C:\Windows\system32\MSMPIDE.DLL
2010-04-11 12:24:38 ----A---- C:\Windows\system32\winhttp.dll
2010-04-11 12:24:35 ----A---- C:\Windows\system32\jscript.dll
2010-04-11 12:09:20 ----A---- C:\Windows\system32\kerberos.dll
2010-04-11 12:09:19 ----A---- C:\Windows\system32\schannel.dll
2010-04-11 11:59:44 ----A---- C:\Windows\system32\gpprefcl.dll
2010-04-11 11:59:29 ----D---- C:\Windows\system32\WindowsPowerShell
2010-04-11 11:02:02 ----D---- C:\Windows\system32\appmgmt
2010-04-11 10:57:34 ----D---- C:\Windows\system32\Macromed
2010-04-11 10:53:07 ----D---- C:\Program Files\ICQ6.5
2010-04-11 10:52:13 ----D---- C:\Program Files\Common Files\Skype
2010-04-11 10:52:10 ----RD---- C:\Program Files\Skype
2010-04-11 10:52:07 ----D---- C:\ProgramData\Skype
2010-04-11 10:51:26 ----D---- C:\Program Files\Mozilla Firefox
2010-04-11 10:50:27 ----D---- C:\ProgramData\Sun
2010-04-11 10:49:54 ----A---- C:\Windows\system32\deploytk.dll
2010-04-11 10:09:21 ----A---- C:\Windows\system32\occache.dll
2010-04-11 10:09:21 ----A---- C:\Windows\system32\mstime.dll
2010-04-11 10:09:20 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-04-11 10:09:20 ----A---- C:\Windows\system32\msfeeds.dll
2010-04-11 10:09:20 ----A---- C:\Windows\system32\jsproxy.dll
2010-04-11 10:09:20 ----A---- C:\Windows\system32\iepeers.dll
2010-04-11 10:09:19 ----A---- C:\Windows\system32\wininet.dll
2010-04-11 10:09:19 ----A---- C:\Windows\system32\ieui.dll
2010-04-11 10:09:19 ----A---- C:\Windows\system32\iesetup.dll
2010-04-11 10:09:19 ----A---- C:\Windows\system32\iernonce.dll
2010-04-11 10:09:18 ----A---- C:\Windows\system32\msfeedssync.exe
2010-04-11 10:09:17 ----A---- C:\Windows\system32\ie4uinit.exe
2010-04-11 10:09:13 ----A---- C:\Windows\system32\iertutil.dll
2010-04-11 10:09:12 ----A---- C:\Windows\system32\urlmon.dll
2010-04-11 10:09:12 ----A---- C:\Windows\system32\ieUnatt.exe
2010-04-11 10:09:12 ----A---- C:\Windows\system32\iesysprep.dll
2010-04-11 10:09:12 ----A---- C:\Windows\system32\iedkcs32.dll
2010-04-11 10:09:11 ----A---- C:\Windows\system32\ieframe.dll
2010-04-11 10:09:09 ----A---- C:\Windows\system32\mshtml.dll
2010-04-11 10:05:01 ----A---- C:\Windows\system32\mshtmler.dll
2010-04-11 10:05:01 ----A---- C:\Windows\system32\mshtmled.dll
2010-04-11 10:05:01 ----A---- C:\Windows\system32\icardie.dll
2010-04-11 10:05:01 ----A---- C:\Windows\system32\admparse.dll
2010-04-11 10:05:00 ----A---- C:\Windows\system32\msls31.dll
2010-04-11 10:05:00 ----A---- C:\Windows\system32\corpol.dll
2010-04-11 10:04:59 ----A---- C:\Windows\system32\imgutil.dll
2010-04-11 10:04:59 ----A---- C:\Windows\system32\ieakeng.dll
2010-04-11 10:04:59 ----A---- C:\Windows\system32\dxtrans.dll
2010-04-11 10:04:59 ----A---- C:\Windows\system32\dxtmsft.dll
2010-04-11 10:04:58 ----A---- C:\Windows\system32\WinFXDocObj.exe
2010-04-11 10:04:58 ----A---- C:\Windows\system32\wextract.exe
2010-04-11 10:04:58 ----A---- C:\Windows\system32\webcheck.dll
2010-04-11 10:04:58 ----A---- C:\Windows\system32\msrating.dll
2010-04-11 10:04:58 ----A---- C:\Windows\system32\licmgr10.dll
2010-04-11 10:04:58 ----A---- C:\Windows\system32\inseng.dll
2010-04-11 10:04:58 ----A---- C:\Windows\system32\ieakui.dll
2010-04-11 10:04:58 ----A---- C:\Windows\system32\ieaksie.dll
2010-04-11 10:04:57 ----A---- C:\Windows\system32\pngfilt.dll
2010-04-11 10:04:57 ----A---- C:\Windows\system32\advpack.dll
2010-04-11 10:04:56 ----A---- C:\Windows\system32\ieapfltr.dll
2010-04-11 10:04:55 ----A---- C:\Windows\system32\url.dll
2010-04-11 10:04:52 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2010-04-11 10:04:52 ----A---- C:\Windows\system32\SetDepNx.exe
2010-04-11 10:04:52 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2010-04-11 10:04:52 ----A---- C:\Windows\system32\PDMSetup.exe
2010-04-11 10:04:52 ----A---- C:\Windows\system32\mshta.exe
2010-04-11 10:04:52 ----A---- C:\Windows\system32\iexpress.exe
2010-04-11 10:01:00 ----A---- C:\Windows\system32\aswBoot.exe
2010-04-11 10:00:47 ----D---- C:\ProgramData\Alwil Software
2010-04-11 10:00:47 ----D---- C:\Program Files\Alwil Software
2010-04-11 09:58:22 ----D---- C:\ProgramData\Nero
2010-04-11 09:58:21 ----D---- C:\Program Files\Common Files\Nero
2010-04-11 09:55:28 ----A---- C:\Windows\system32\rmoc3260.dll
2010-04-11 09:55:28 ----A---- C:\Windows\system32\pndx5032.dll
2010-04-11 09:55:28 ----A---- C:\Windows\system32\pndx5016.dll
2010-04-11 09:55:28 ----A---- C:\Windows\system32\pncrt.dll
2010-04-11 09:55:27 ----A---- C:\Windows\system32\unrar.dll
2010-04-11 09:55:27 ----A---- C:\Windows\avisplitter.ini
2010-04-11 09:55:26 ----A---- C:\Windows\system32\yv12vfw.dll
2010-04-11 09:55:26 ----A---- C:\Windows\system32\xvidvfw.dll
2010-04-11 09:55:26 ----A---- C:\Windows\system32\xvidcore.dll
2010-04-11 09:55:25 ----A---- C:\Windows\system32\qt-dx331.dll
2010-04-11 09:55:25 ----A---- C:\Windows\system32\dpl100.dll
2010-04-11 09:55:25 ----A---- C:\Windows\system32\divx.dll
2010-04-11 09:55:23 ----A---- C:\Windows\system32\ff_vfw.dll.manifest
2010-04-11 09:55:23 ----A---- C:\Windows\system32\ff_vfw.dll
2010-04-11 09:55:22 ----D---- C:\Program Files\K-Lite Codec Pack
2010-04-11 09:55:22 ----A---- C:\Windows\system32\msvcr71.dll
2010-04-11 09:55:22 ----A---- C:\Windows\system32\msvcp71.dll
2010-04-11 09:40:20 ----D---- C:\Program Files\OpenOffice.org 3
2010-04-11 09:31:18 ----D---- C:\ProgramData\Adobe
2010-04-11 09:31:02 ----D---- C:\Program Files\Common Files\Adobe
2010-04-11 09:31:02 ----D---- C:\Program Files\Adobe
2010-04-11 09:24:31 ----D---- C:\Program Files\Google
2010-04-11 09:12:00 ----D---- C:\Program Files\IDT
2010-04-11 09:07:46 ----D---- C:\ProgramData\SonicFocus
2010-04-11 08:59:21 ----D---- C:\Program Files\Windows Portable Devices
2010-04-11 08:52:49 ----A---- C:\Windows\system32\WPDShextAutoplay.exe
2010-04-11 08:52:49 ----A---- C:\Windows\system32\wpdbusenum.dll
2010-04-11 08:52:49 ----A---- C:\Windows\system32\BthMtpContextHandler.dll
2010-04-11 08:52:46 ----A---- C:\Windows\system32\PortableDeviceConnectApi.dll
2010-04-11 08:52:45 ----A---- C:\Windows\system32\WPDSp.dll
2010-04-11 08:52:45 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2010-04-11 08:52:45 ----A---- C:\Windows\system32\wpdshext.dll
2010-04-11 08:52:45 ----A---- C:\Windows\system32\wpd_ci.dll
2010-04-11 08:52:45 ----A---- C:\Windows\system32\PortableDeviceWMDRM.dll
2010-04-11 08:52:45 ----A---- C:\Windows\system32\PortableDeviceTypes.dll
2010-04-11 08:52:45 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll
2010-04-11 08:52:45 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2010-04-11 08:50:40 ----A---- C:\Windows\system32\UIAutomationCore.dll
2010-04-11 08:50:40 ----A---- C:\Windows\system32\oleaccrc.dll
2010-04-11 08:50:40 ----A---- C:\Windows\system32\oleacc.dll
2010-04-11 08:49:11 ----A---- C:\Windows\system32\WMPhoto.dll
2010-04-11 08:49:10 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2010-04-11 08:49:10 ----A---- C:\Windows\system32\d3d10warp.dll
2010-04-11 08:49:10 ----A---- C:\Windows\system32\cdd.dll
2010-04-11 08:49:09 ----A---- C:\Windows\system32\xpsservices.dll
2010-04-11 08:49:09 ----A---- C:\Windows\system32\XpsRasterService.dll
2010-04-11 08:49:09 ----A---- C:\Windows\system32\XpsPrint.dll
2010-04-11 08:49:09 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2010-04-11 08:49:09 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2010-04-11 08:49:09 ----A---- C:\Windows\system32\WindowsCodecs.dll
2010-04-11 08:49:09 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2010-04-11 08:49:09 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2010-04-11 08:49:09 ----A---- C:\Windows\system32\OpcServices.dll
2010-04-11 08:49:09 ----A---- C:\Windows\system32\FntCache.dll
2010-04-11 08:49:09 ----A---- C:\Windows\system32\dxdiagn.dll
2010-04-11 08:49:09 ----A---- C:\Windows\system32\dxdiag.exe
2010-04-11 08:49:09 ----A---- C:\Windows\system32\d2d1.dll
2010-04-11 08:49:08 ----A---- C:\Windows\system32\dxgi.dll
2010-04-11 08:49:08 ----A---- C:\Windows\system32\DWrite.dll
2010-04-11 08:49:08 ----A---- C:\Windows\system32\d3d11.dll
2010-04-11 08:49:08 ----A---- C:\Windows\system32\d3d10level9.dll
2010-04-11 08:49:08 ----A---- C:\Windows\system32\d3d10core.dll
2010-04-11 08:49:08 ----A---- C:\Windows\system32\d3d10_1core.dll
2010-04-11 08:49:08 ----A---- C:\Windows\system32\d3d10_1.dll
2010-04-11 08:49:08 ----A---- C:\Windows\system32\d3d10.dll
2010-04-11 08:46:59 ----A---- C:\Windows\system32\UIAnimation.dll
2010-04-11 08:46:58 ----A---- C:\Windows\system32\UIRibbonRes.dll
2010-04-11 08:46:58 ----A---- C:\Windows\system32\UIRibbon.dll
2010-04-11 08:45:32 ----A---- C:\Windows\system32\gameux.dll
2010-04-11 08:45:30 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2010-04-11 08:45:30 ----A---- C:\Windows\system32\Apphlpdm.dll
2010-04-11 08:40:54 ----A---- C:\Windows\system32\browserchoice.exe
2010-04-11 08:38:01 ----D---- C:\Program Files\MSXML 4.0
2010-04-10 18:54:52 ----D---- C:\Windows\system32\vi-VN
2010-04-10 18:54:52 ----D---- C:\Windows\system32\eu-ES
2010-04-10 18:54:52 ----D---- C:\Windows\system32\ca-ES
2010-04-10 18:50:20 ----D---- C:\Windows\system32\SPReview
2010-04-10 18:30:33 ----A---- C:\Windows\system32\scavenge.dll
2010-04-10 18:30:26 ----A---- C:\Windows\system32\compcln.exe
2010-04-10 18:26:30 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2010-04-10 18:26:30 ----A---- C:\Windows\system32\SearchIndexer.exe
2010-04-10 18:26:30 ----A---- C:\Windows\system32\SearchFilterHost.exe
2010-04-10 18:26:30 ----A---- C:\Windows\system32\sdohlp.dll
2010-04-10 18:26:30 ----A---- C:\Windows\system32\sdclt.exe
2010-04-10 18:26:29 ----A---- C:\Windows\system32\scrrun.dll

pokr. v dalším...

sccay · #8 Příspěvek od **sccay** » 29 dub 2010 08:19

2010-04-10 18:26:29 ----A---- C:\Windows\system32\scansetting.dll
2010-04-10 18:26:29 ----A---- C:\Windows\system32\samlib.dll
2010-04-10 18:26:29 ----A---- C:\Windows\system32\rwinsta.exe
2010-04-10 18:26:29 ----A---- C:\Windows\system32\rtutils.dll
2010-04-10 18:26:29 ----A---- C:\Windows\system32\rtffilt.dll
2010-04-10 18:26:29 ----A---- C:\Windows\system32\rsaenh.dll
2010-04-10 18:26:29 ----A---- C:\Windows\system32\rpchttp.dll
2010-04-10 18:26:29 ----A---- C:\Windows\system32\rpcss.dll
2010-04-10 18:26:29 ----A---- C:\Windows\system32\riched20.dll
2010-04-10 18:26:28 ----A---- C:\Windows\system32\schedsvc.dll
2010-04-10 18:26:28 ----A---- C:\Windows\system32\scrptadm.dll
2010-04-10 18:26:28 ----A---- C:\Windows\system32\scrobj.dll
2010-04-10 18:26:28 ----A---- C:\Windows\system32\scksp.dll
2010-04-10 18:26:28 ----A---- C:\Windows\system32\scesrv.dll
2010-04-10 18:26:28 ----A---- C:\Windows\system32\scecli.dll
2010-04-10 18:26:28 ----A---- C:\Windows\system32\SCardSvr.dll
2010-04-10 18:26:28 ----A---- C:\Windows\system32\samsrv.dll
2010-04-10 18:26:27 ----A---- C:\Windows\system32\powercpl.dll
2010-04-10 18:26:27 ----A---- C:\Windows\system32\PNPXAssoc.dll
2010-04-10 18:26:27 ----A---- C:\Windows\system32\PnPutil.exe
2010-04-10 18:26:27 ----A---- C:\Windows\system32\PnPUnattend.exe
2010-04-10 18:26:27 ----A---- C:\Windows\system32\pnpui.dll
2010-04-10 18:26:27 ----A---- C:\Windows\system32\pnpsetup.dll
2010-04-10 18:26:27 ----A---- C:\Windows\system32\pnidui.dll
2010-04-10 18:26:27 ----A---- C:\Windows\system32\perfdisk.dll
2010-04-10 18:26:27 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2010-04-10 18:26:27 ----A---- C:\Windows\system32\pdh.dll
2010-04-10 18:26:27 ----A---- C:\Windows\system32\pcaui.dll
2010-04-10 18:26:27 ----A---- C:\Windows\system32\p2psvc.dll
2010-04-10 18:26:27 ----A---- C:\Windows\system32\P2PGraph.dll
2010-04-10 18:26:26 ----A---- C:\Windows\system32\pmcsnap.dll
2010-04-10 18:26:26 ----A---- C:\Windows\system32\PkgMgr.exe
2010-04-10 18:26:26 ----A---- C:\Windows\system32\pidgenx.dll
2010-04-10 18:26:26 ----A---- C:\Windows\system32\photowiz.dll
2010-04-10 18:26:26 ----A---- C:\Windows\system32\ntdll.dll
2010-04-10 18:26:26 ----A---- C:\Windows\system32\nslookup.exe
2010-04-10 18:26:26 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2010-04-10 18:26:25 ----A---- C:\Windows\system32\osk.exe
2010-04-10 18:26:25 ----A---- C:\Windows\system32\onex.dll
2010-04-10 18:26:25 ----A---- C:\Windows\system32\oleaut32.dll
2010-04-10 18:26:25 ----A---- C:\Windows\system32\ole32.dll
2010-04-10 18:26:25 ----A---- C:\Windows\system32\offfilt.dll
2010-04-10 18:26:25 ----A---- C:\Windows\system32\odbccp32.dll
2010-04-10 18:26:25 ----A---- C:\Windows\system32\odbcconf.dll
2010-04-10 18:26:25 ----A---- C:\Windows\system32\odbc32.dll
2010-04-10 18:26:25 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2010-04-10 18:26:25 ----A---- C:\Windows\system32\nlhtml.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\rastapi.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\rasppp.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\rasplap.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\rasmontr.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\rasmans.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\raschap.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\rasgcw.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\rasdlg.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\rasdial.exe
2010-04-10 18:26:24 ----A---- C:\Windows\system32\rasdiag.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\rasapi32.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\query.exe
2010-04-10 18:26:24 ----A---- C:\Windows\system32\Query.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\oobefldr.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\olepro32.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\oleprn.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\ocsetup.exe
2010-04-10 18:26:24 ----A---- C:\Windows\system32\ntprint.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\ntmarta.dll
2010-04-10 18:26:23 ----A---- C:\Windows\system32\reset.exe
2010-04-10 18:26:23 ----A---- C:\Windows\system32\RelMon.dll
2010-04-10 18:26:23 ----A---- C:\Windows\system32\rekeywiz.exe
2010-04-10 18:26:23 ----A---- C:\Windows\system32\regsvc.dll
2010-04-10 18:26:23 ----A---- C:\Windows\system32\regapi.dll
2010-04-10 18:26:23 ----A---- C:\Windows\system32\reg.exe
2010-04-10 18:26:23 ----A---- C:\Windows\system32\rdpwsx.dll
2010-04-10 18:26:23 ----A---- C:\Windows\system32\rdpendp.dll
2010-04-10 18:26:23 ----A---- C:\Windows\system32\rdpencom.dll
2010-04-10 18:26:23 ----A---- C:\Windows\system32\rdpclip.exe
2010-04-10 18:26:23 ----A---- C:\Windows\system32\RacEngn.dll
2010-04-10 18:26:23 ----A---- C:\Windows\system32\qprocess.exe
2010-04-10 18:26:23 ----A---- C:\Windows\system32\qmgr.dll
2010-04-10 18:26:23 ----A---- C:\Windows\system32\qedit.dll
2010-04-10 18:26:23 ----A---- C:\Windows\system32\PresentationSettings.exe
2010-04-10 18:26:23 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2010-04-10 18:26:23 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2010-04-10 18:26:23 ----A---- C:\Windows\system32\PresentationHost.exe
2010-04-10 18:26:22 ----A---- C:\Windows\system32\prnntfy.dll
2010-04-10 18:26:22 ----A---- C:\Windows\system32\printui.dll
2010-04-10 18:26:22 ----A---- C:\Windows\system32\PrintBrmUi.exe
2010-04-10 18:26:22 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2010-04-10 18:26:22 ----A---- C:\Windows\system32\powrprof.dll
2010-04-10 18:26:21 ----A---- C:\Windows\system32\QAGENTRT.DLL
2010-04-10 18:26:21 ----A---- C:\Windows\system32\puiapi.dll
2010-04-10 18:26:20 ----A---- C:\Windows\system32\qdvd.dll
2010-04-10 18:26:20 ----A---- C:\Windows\system32\qappsrv.exe
2010-04-10 18:26:20 ----A---- C:\Windows\system32\propsys.dll
2010-04-10 18:26:20 ----A---- C:\Windows\system32\propdefs.dll
2010-04-10 18:26:20 ----A---- C:\Windows\system32\profsvc.dll
2010-04-10 18:26:19 ----A---- C:\Windows\system32\psisdecd.dll
2010-04-10 18:26:19 ----A---- C:\Windows\system32\PSHED.DLL
2010-04-10 18:26:17 ----A---- C:\Windows\system32\shell32.dll
2010-04-10 18:26:17 ----A---- C:\Windows\system32\shdocvw.dll
2010-04-10 18:26:17 ----A---- C:\Windows\system32\sendmail.dll
2010-04-10 18:26:16 ----A---- C:\Windows\system32\shlwapi.dll
2010-04-10 18:26:16 ----A---- C:\Windows\system32\shadow.exe
2010-04-10 18:26:16 ----A---- C:\Windows\system32\setupapi.dll
2010-04-10 18:26:16 ----A---- C:\Windows\system32\sethc.exe
2010-04-10 18:26:16 ----A---- C:\Windows\system32\services.exe
2010-04-10 18:26:15 ----A---- C:\Windows\system32\eapphost.dll
2010-04-10 18:26:15 ----A---- C:\Windows\system32\eappgnui.dll
2010-04-10 18:26:14 ----A---- C:\Windows\system32\EhStorAPI.dll
2010-04-10 18:26:14 ----A---- C:\Windows\system32\eappcfg.dll
2010-04-10 18:26:14 ----A---- C:\Windows\system32\eapp3hst.dll
2010-04-10 18:26:14 ----A---- C:\Windows\system32\dwm.exe
2010-04-10 18:26:14 ----A---- C:\Windows\system32\dsprop.dll
2010-04-10 18:26:14 ----A---- C:\Windows\system32\dsound.dll
2010-04-10 18:26:13 ----A---- C:\Windows\system32\ExplorerFrame.dll
2010-04-10 18:26:13 ----A---- C:\Windows\system32\evr.dll
2010-04-10 18:26:13 ----A---- C:\Windows\system32\eudcedit.exe
2010-04-10 18:26:13 ----A---- C:\Windows\system32\esent.dll
2010-04-10 18:26:13 ----A---- C:\Windows\explorer.exe
2010-04-10 18:26:12 ----A---- C:\Windows\system32\f3ahvoas.dll
2010-04-10 18:26:12 ----A---- C:\Windows\system32\EncDec.dll
2010-04-10 18:26:12 ----A---- C:\Windows\system32\emdmgmt.dll
2010-04-10 18:26:12 ----A---- C:\Windows\system32\EhStorPwdMgr.dll
2010-04-10 18:26:12 ----A---- C:\Windows\system32\EhStorAuthn.dll
2010-04-10 18:26:11 ----A---- C:\Windows\system32\es.dll
2010-04-10 18:26:11 ----A---- C:\Windows\system32\EhStorShell.dll
2010-04-10 18:26:11 ----A---- C:\Windows\system32\diskraid.exe
2010-04-10 18:26:11 ----A---- C:\Windows\system32\diskpart.exe
2010-04-10 18:26:11 ----A---- C:\Windows\system32\dimsroam.dll
2010-04-10 18:26:11 ----A---- C:\Windows\system32\diagperf.dll
2010-04-10 18:26:11 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2010-04-10 18:26:10 ----A---- C:\Windows\system32\dfsr.exe
2010-04-10 18:26:10 ----A---- C:\Windows\system32\dfshim.dll
2010-04-10 18:26:10 ----A---- C:\Windows\system32\devmgr.dll
2010-04-10 18:26:09 ----A---- C:\Windows\system32\drvstore.dll
2010-04-10 18:26:09 ----A---- C:\Windows\system32\drvinst.exe
2010-04-10 18:26:09 ----A---- C:\Windows\system32\drmv2clt.dll
2010-04-10 18:26:09 ----A---- C:\Windows\system32\drmmgrtn.dll
2010-04-10 18:26:09 ----A---- C:\Windows\system32\dpapimig.exe
2010-04-10 18:26:09 ----A---- C:\Windows\system32\dot3svc.dll
2010-04-10 18:26:09 ----A---- C:\Windows\system32\dot3msm.dll
2010-04-10 18:26:09 ----A---- C:\Windows\system32\dot3cfg.dll
2010-04-10 18:26:09 ----A---- C:\Windows\system32\dnsapi.dll
2010-04-10 18:26:09 ----A---- C:\Windows\system32\dmusic.dll
2010-04-10 18:26:09 ----A---- C:\Windows\system32\dmsynth.dll
2010-04-10 18:26:09 ----A---- C:\Windows\system32\dhcpcsvc.dll
2010-04-10 18:26:08 ----A---- C:\Windows\system32\hbaapi.dll
2010-04-10 18:26:08 ----A---- C:\Windows\system32\dnsrslvr.dll
2010-04-10 18:26:07 ----A---- C:\Windows\system32\iasnap.dll
2010-04-10 18:26:07 ----A---- C:\Windows\system32\IasMigReader.exe
2010-04-10 18:26:07 ----A---- C:\Windows\system32\IasMigPlugin.dll
2010-04-10 18:26:07 ----A---- C:\Windows\system32\iashlpr.dll
2010-04-10 18:26:07 ----A---- C:\Windows\system32\iasdatastore.dll
2010-04-10 18:26:07 ----A---- C:\Windows\system32\iasads.dll
2010-04-10 18:26:07 ----A---- C:\Windows\system32\iasacct.dll
2010-04-10 18:26:07 ----A---- C:\Windows\system32\hidserv.dll
2010-04-10 18:26:07 ----A---- C:\Windows\system32\hdwwiz.exe
2010-04-10 18:26:07 ----A---- C:\Windows\system32\gpupdate.exe
2010-04-10 18:26:07 ----A---- C:\Windows\system32\gpsvc.dll
2010-04-10 18:26:07 ----A---- C:\Windows\system32\gpscript.exe
2010-04-10 18:26:07 ----A---- C:\Windows\system32\gpscript.dll
2010-04-10 18:26:07 ----A---- C:\Windows\system32\gpresult.exe
2010-04-10 18:26:07 ----A---- C:\Windows\system32\gpprnext.dll
2010-04-10 18:26:07 ----A---- C:\Windows\system32\fontext.dll
2010-04-10 18:26:07 ----A---- C:\Windows\system32\findstr.exe
2010-04-10 18:26:06 ----A---- C:\Windows\system32\gpapi.dll
2010-04-10 18:26:06 ----A---- C:\Windows\system32\gdi32.dll
2010-04-10 18:26:06 ----A---- C:\Windows\system32\feclient.dll
2010-04-10 18:26:06 ----A---- C:\Windows\system32\fdWSD.dll
2010-04-10 18:26:06 ----A---- C:\Windows\system32\fdWCN.dll
2010-04-10 18:26:06 ----A---- C:\Windows\system32\fdSSDP.dll
2010-04-10 18:26:06 ----A---- C:\Windows\system32\fdProxy.dll
2010-04-10 18:26:06 ----A---- C:\Windows\system32\fdeploy.dll
2010-04-10 18:26:06 ----A---- C:\Windows\system32\fdBthProxy.dll
2010-04-10 18:26:06 ----A---- C:\Windows\system32\fdBth.dll
2010-04-10 18:26:06 ----A---- C:\Windows\system32\fc.exe
2010-04-10 18:26:06 ----A---- C:\Windows\system32\Faultrep.dll
2010-04-10 18:26:05 ----A---- C:\Windows\system32\gpedit.dll
2010-04-10 18:26:05 ----A---- C:\Windows\system32\fundisc.dll
2010-04-10 18:26:05 ----A---- C:\Windows\system32\ftp.exe
2010-04-10 18:26:05 ----A---- C:\Windows\system32\fsquirt.exe
2010-04-10 18:26:04 ----A---- C:\Windows\system32\FwRemoteSvr.dll
2010-04-10 18:26:04 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2010-04-10 18:26:04 ----A---- C:\Windows\system32\FunctionDiscoveryFolder.dll
2010-04-10 18:26:04 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2010-04-10 18:26:04 ----A---- C:\Windows\system32\AuxiliaryDisplayDriverLib.dll
2010-04-10 18:26:04 ----A---- C:\Windows\system32\autochk.exe
2010-04-10 18:26:04 ----A---- C:\Windows\system32\autofmt.exe
2010-04-10 18:26:04 ----A---- C:\Windows\system32\autoconv.exe
2010-04-10 18:26:04 ----A---- C:\Windows\system32\authz.dll
2010-04-10 18:26:04 ----A---- C:\Windows\system32\authui.dll
2010-04-10 18:26:04 ----A---- C:\Windows\system32\audiosrv.dll
2010-04-10 18:26:04 ----A---- C:\Windows\system32\AudioSes.dll
2010-04-10 18:26:04 ----A---- C:\Windows\system32\audiodg.exe
2010-04-10 18:26:03 ----A---- C:\Windows\system32\bthci.dll
2010-04-10 18:26:03 ----A---- C:\Windows\system32\browseui.dll
2010-04-10 18:26:03 ----A---- C:\Windows\system32\brcplsiw.dll
2010-04-10 18:26:03 ----A---- C:\Windows\system32\brcpl.dll
2010-04-10 18:26:03 ----A---- C:\Windows\system32\blackbox.dll
2010-04-10 18:26:03 ----A---- C:\Windows\system32\bitsigd.dll
2010-04-10 18:26:03 ----A---- C:\Windows\system32\basecsp.dll
2010-04-10 18:26:03 ----A---- C:\Windows\system32\azroles.dll
2010-04-10 18:26:03 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2010-04-10 18:26:03 ----A---- C:\Windows\system32\autoplay.dll
2010-04-10 18:26:02 ----A---- C:\Windows\system32\BFE.DLL
2010-04-10 18:26:02 ----A---- C:\Windows\system32\bcrypt.dll
2010-04-10 18:26:02 ----A---- C:\Windows\system32\accessibilitycpl.dll
2010-04-10 18:26:01 ----A---- C:\Windows\system32\apphelp.dll
2010-04-10 18:26:01 ----A---- C:\Windows\system32\apds.dll
2010-04-10 18:26:00 ----A---- C:\Windows\system32\appmgmts.dll
2010-04-10 18:26:00 ----A---- C:\Windows\system32\adtschema.dll
2010-04-10 18:26:00 ----A---- C:\Windows\system32\adsmsext.dll
2010-04-10 18:26:00 ----A---- C:\Windows\system32\adsldpc.dll
2010-04-10 18:25:59 ----A---- C:\Windows\system32\conime.exe
2010-04-10 18:25:59 ----A---- C:\Windows\system32\comsvcs.dll
2010-04-10 18:25:59 ----A---- C:\Windows\system32\advapi32.dll
2010-04-10 18:25:58 ----A---- C:\Windows\system32\crypt32.dll
2010-04-10 18:25:58 ----A---- C:\Windows\system32\credui.dll
2010-04-10 18:25:58 ----A---- C:\Windows\system32\connect.dll
2010-04-10 18:25:58 ----A---- C:\Windows\system32\comuid.dll
2010-04-10 18:25:57 ----A---- C:\Windows\system32\DevicePairingWizard.exe
2010-04-10 18:25:57 ----A---- C:\Windows\system32\DevicePairingProxy.dll
2010-04-10 18:25:57 ----A---- C:\Windows\system32\DevicePairing.dll
2010-04-10 18:25:57 ----A---- C:\Windows\system32\DeviceEject.exe
2010-04-10 18:25:57 ----A---- C:\Windows\system32\dbgeng.dll
2010-04-10 18:25:57 ----A---- C:\Windows\system32\davclnt.dll
2010-04-10 18:25:57 ----A---- C:\Windows\system32\dataclen.dll
2010-04-10 18:25:57 ----A---- C:\Windows\system32\d3d9.dll
2010-04-10 18:25:57 ----A---- C:\Windows\system32\comdlg32.dll
2010-04-10 18:25:57 ----A---- C:\Windows\system32\cmmon32.exe
2010-04-10 18:25:57 ----A---- C:\Windows\system32\cmdial32.dll
2010-04-10 18:25:56 ----A---- C:\Windows\system32\csrstub.exe
2010-04-10 18:25:56 ----A---- C:\Windows\system32\cscui.dll
2010-04-10 18:25:56 ----A---- C:\Windows\system32\cscsvc.dll
2010-04-10 18:25:56 ----A---- C:\Windows\system32\cscript.exe
2010-04-10 18:25:56 ----A---- C:\Windows\system32\cscobj.dll
2010-04-10 18:25:56 ----A---- C:\Windows\system32\CscMig.dll
2010-04-10 18:25:56 ----A---- C:\Windows\system32\cscdll.dll
2010-04-10 18:25:56 ----A---- C:\Windows\system32\cscapi.dll
2010-04-10 18:25:56 ----A---- C:\Windows\system32\cryptui.dll
2010-04-10 18:25:56 ----A---- C:\Windows\system32\cryptsvc.dll
2010-04-10 18:25:55 ----A---- C:\Windows\system32\certmgr.dll
2010-04-10 18:25:55 ----A---- C:\Windows\system32\certcli.dll
2010-04-10 18:25:54 ----A---- C:\Windows\system32\CertEnrollUI.dll
2010-04-10 18:25:54 ----A---- C:\Windows\system32\CertEnroll.dll
2010-04-10 18:25:54 ----A---- C:\Windows\system32\bthudtask.exe
2010-04-10 18:25:54 ----A---- C:\Windows\system32\bthserv.dll
2010-04-10 18:25:53 ----A---- C:\Windows\system32\cbsra.exe
2010-04-10 18:25:52 ----A---- C:\Windows\system32\CHxReadingStringIME.dll
2010-04-10 18:25:52 ----A---- C:\Windows\system32\chtbrkr.dll
2010-04-10 18:25:52 ----A---- C:\Windows\system32\chsbrkr.dll
2010-04-10 18:25:52 ----A---- C:\Windows\system32\cipher.exe
2010-04-10 18:25:52 ----A---- C:\Windows\system32\ci.dll
2010-04-10 18:25:51 ----A---- C:\Windows\system32\chglogon.exe
2010-04-10 18:25:51 ----A---- C:\Windows\system32\certreq.exe
2010-04-10 18:25:51 ----A---- C:\Windows\system32\certprop.dll
2010-04-10 18:25:50 ----A---- C:\Windows\system32\msftedit.dll
2010-04-10 18:25:50 ----A---- C:\Windows\system32\chgusr.exe
2010-04-10 18:25:50 ----A---- C:\Windows\system32\chgport.exe
2010-04-10 18:25:50 ----A---- C:\Windows\system32\change.exe
2010-04-10 18:25:50 ----A---- C:\Windows\system32\certutil.exe
2010-04-10 18:25:49 ----A---- C:\Windows\system32\msihnd.dll
2010-04-10 18:25:49 ----A---- C:\Windows\system32\msiexec.exe
2010-04-10 18:25:49 ----A---- C:\Windows\system32\msi.dll
2010-04-10 18:25:49 ----A---- C:\Windows\system32\msexch40.dll
2010-04-10 18:25:49 ----A---- C:\Windows\system32\msexcl40.dll
2010-04-10 18:25:49 ----A---- C:\Windows\system32\msdtctm.dll
2010-04-10 18:25:48 ----A---- C:\Windows\system32\msdtcprx.dll
2010-04-10 18:25:47 ----A---- C:\Windows\system32\msctfui.dll
2010-04-10 18:25:47 ----A---- C:\Windows\system32\msctfp.dll
2010-04-10 18:25:47 ----A---- C:\Windows\system32\MsCtfMonitor.dll
2010-04-10 18:25:47 ----A---- C:\Windows\system32\msctf.dll
2010-04-10 18:25:46 ----A---- C:\Windows\system32\msimsg.dll
2010-04-10 18:25:46 ----A---- C:\Windows\system32\MPSSVC.dll
2010-04-10 18:25:46 ----A---- C:\Windows\system32\mprapi.dll
2010-04-10 18:25:46 ----A---- C:\Windows\system32\mpr.dll
2010-04-10 18:25:46 ----A---- C:\Windows\system32\modemui.dll
2010-04-10 18:25:46 ----A---- C:\Windows\system32\MMDevAPI.dll
2010-04-10 18:25:45 ----A---- C:\Windows\system32\mscms.dll
2010-04-10 18:25:45 ----A---- C:\Windows\system32\mscandui.dll
2010-04-10 18:25:44 ----A---- C:\Windows\system32\NetProjW.dll
2010-04-10 18:25:44 ----A---- C:\Windows\system32\netplwiz.dll
2010-04-10 18:25:44 ----A---- C:\Windows\system32\netlogon.dll
2010-04-10 18:25:44 ----A---- C:\Windows\system32\netcenter.dll
2010-04-10 18:25:44 ----A---- C:\Windows\system32\netapi32.dll
2010-04-10 18:25:44 ----A---- C:\Windows\system32\ncryptui.dll
2010-04-10 18:25:44 ----A---- C:\Windows\system32\ncrypt.dll
2010-04-10 18:25:44 ----A---- C:\Windows\system32\mtxclu.dll
2010-04-10 18:25:44 ----A---- C:\Windows\system32\mscories.dll
2010-04-10 18:25:44 ----A---- C:\Windows\system32\mscorier.dll
2010-04-10 18:25:44 ----A---- C:\Windows\system32\mscoree.dll
2010-04-10 18:25:42 ----A---- C:\Windows\system32\NcdProp.dll
2010-04-10 18:25:42 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2010-04-10 18:25:40 ----A---- C:\Windows\system32\newdev.exe
2010-04-10 18:25:40 ----A---- C:\Windows\system32\newdev.dll
2010-04-10 18:25:40 ----A---- C:\Windows\system32\netshell.dll
2010-04-10 18:25:39 ----A---- C:\Windows\system32\networkexplorer.dll
2010-04-10 18:25:38 ----A---- C:\Windows\system32\networkmap.dll
2010-04-10 18:25:38 ----A---- C:\Windows\system32\networkitemfactory.dll
2010-04-10 18:25:37 ----A---- C:\Windows\system32\msscntrs.dll
2010-04-10 18:25:37 ----A---- C:\Windows\system32\msscb.dll
2010-04-10 18:25:37 ----A---- C:\Windows\system32\msrepl40.dll
2010-04-10 18:25:37 ----A---- C:\Windows\system32\msrd3x40.dll
2010-04-10 18:25:37 ----A---- C:\Windows\system32\msrd2x40.dll
2010-04-10 18:25:37 ----A---- C:\Windows\system32\mspbde40.dll
2010-04-10 18:25:37 ----A---- C:\Windows\system32\msnetobj.dll
2010-04-10 18:25:37 ----A---- C:\Windows\system32\msltus40.dll
2010-04-10 18:25:37 ----A---- C:\Windows\system32\msinfo32.exe
2010-04-10 18:25:37 ----A---- C:\Windows\system32\msimtf.dll
2010-04-10 18:25:36 ----A---- C:\Windows\system32\msjtes40.dll
2010-04-10 18:25:36 ----A---- C:\Windows\system32\msjter40.dll
2010-04-10 18:25:36 ----A---- C:\Windows\system32\msjint40.dll
2010-04-10 18:25:36 ----A---- C:\Windows\system32\msjetoledb40.dll
2010-04-10 18:25:36 ----A---- C:\Windows\system32\msjet40.dll
2010-04-10 18:25:36 ----A---- C:\Windows\system32\msisip.dll
2010-04-10 18:25:35 ----A---- C:\Windows\system32\msxbde40.dll
2010-04-10 18:25:35 ----A---- C:\Windows\system32\mswsock.dll
2010-04-10 18:25:35 ----A---- C:\Windows\system32\mswdat10.dll
2010-04-10 18:25:35 ----A---- C:\Windows\system32\msvcp60.dll
2010-04-10 18:25:35 ----A---- C:\Windows\system32\msutb.dll
2010-04-10 18:25:34 ----A---- C:\Windows\system32\mswstr10.dll
2010-04-10 18:25:34 ----A---- C:\Windows\system32\MSVidCtl.dll
2010-04-10 18:25:34 ----A---- C:\Windows\system32\msvcrt.dll
2010-04-10 18:25:34 ----A---- C:\Windows\system32\mssrch.dll
2010-04-10 18:25:34 ----A---- C:\Windows\system32\mssprxy.dll
2010-04-10 18:25:34 ----A---- C:\Windows\system32\mssphtb.dll
2010-04-10 18:25:34 ----A---- C:\Windows\system32\mssph.dll
2010-04-10 18:25:34 ----A---- C:\Windows\system32\mssitlb.dll
2010-04-10 18:25:34 ----A---- C:\Windows\system32\msshsq.dll
2010-04-10 18:25:34 ----A---- C:\Windows\system32\msshooks.dll
2010-04-10 18:25:34 ----A---- C:\Windows\system32\msscp.dll
2010-04-10 18:25:33 ----A---- C:\Windows\system32\mstsc.exe
2010-04-10 18:25:33 ----A---- C:\Windows\system32\mstlsapi.dll
2010-04-10 18:25:33 ----A---- C:\Windows\system32\mstext40.dll
2010-04-10 18:25:33 ----A---- C:\Windows\system32\mssvp.dll
2010-04-10 18:25:33 ----A---- C:\Windows\system32\msstrc.dll
2010-04-10 18:25:33 ----A---- C:\Windows\system32\inetcomm.dll
2010-04-10 18:25:32 ----A---- C:\Windows\system32\InkEd.dll
2010-04-10 18:25:31 ----A---- C:\Windows\system32\infocardapi.dll
2010-04-10 18:25:31 ----A---- C:\Windows\system32\inetppui.dll
2010-04-10 18:25:31 ----A---- C:\Windows\system32\inetpp.dll
2010-04-10 18:25:29 ----A---- C:\Windows\system32\imm32.dll
2010-04-10 18:25:28 ----A---- C:\Windows\system32\iscsilog.dll
2010-04-10 18:25:28 ----A---- C:\Windows\system32\ipsmsnap.dll
2010-04-10 18:25:28 ----A---- C:\Windows\system32\IPSECSVC.DLL
2010-04-10 18:25:27 ----A---- C:\Windows\system32\ipsecsnp.dll
2010-04-10 18:25:27 ----A---- C:\Windows\system32\input.dll
2010-04-10 18:25:26 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2010-04-10 18:25:26 ----A---- C:\Windows\system32\ipconfig.exe
2010-04-10 18:25:25 ----A---- C:\Windows\system32\ifmon.dll
2010-04-10 18:25:25 ----A---- C:\Windows\system32\icardres.dll
2010-04-10 18:25:25 ----A---- C:\Windows\system32\icardagt.exe
2010-04-10 18:25:25 ----A---- C:\Windows\system32\iassvcs.dll
2010-04-10 18:25:25 ----A---- C:\Windows\system32\iassdo.dll
2010-04-10 18:25:25 ----A---- C:\Windows\system32\iassam.dll
2010-04-10 18:25:25 ----A---- C:\Windows\system32\iasrecst.dll
2010-04-10 18:25:25 ----A---- C:\Windows\system32\iasrad.dll
2010-04-10 18:25:25 ----A---- C:\Windows\system32\iaspolcy.dll
2010-04-10 18:25:24 ----A---- C:\Windows\system32\IMJP10K.DLL
2010-04-10 18:25:24 ----A---- C:\Windows\system32\imapi2.dll
2010-04-10 18:25:24 ----A---- C:\Windows\system32\imapi.dll
2010-04-10 18:25:23 ----A---- C:\Windows\system32\imapi2fs.dll
2010-04-10 18:25:23 ----A---- C:\Windows\system32\IKEEXT.DLL
2010-04-10 18:25:21 ----A---- C:\Windows\system32\mfplat.dll
2010-04-10 18:25:21 ----A---- C:\Windows\system32\mfc42.dll
2010-04-10 18:25:20 ----A---- C:\Windows\system32\mfc42u.dll
2010-04-10 18:25:19 ----A---- C:\Windows\system32\milcore.dll
2010-04-10 18:25:18 ----A---- C:\Windows\system32\mimefilt.dll
2010-04-10 18:25:17 ----A---- C:\Windows\system32\mmcico.dll
2010-04-10 18:25:17 ----A---- C:\Windows\system32\mmci.dll
2010-04-10 18:25:17 ----A---- C:\Windows\system32\midimap.dll
2010-04-10 18:25:16 ----A---- C:\Windows\system32\mmcndmgr.dll
2010-04-10 18:25:16 ----A---- C:\Windows\system32\mmc.exe
2010-04-10 18:25:14 ----A---- C:\Windows\system32\korwbrkr.dll
2010-04-10 18:25:12 ----A---- C:\Windows\system32\l2nacp.dll
2010-04-10 18:25:12 ----A---- C:\Windows\system32\kernel32.dll
2010-04-10 18:25:12 ----A---- C:\Windows\system32\kd1394.dll
2010-04-10 18:25:11 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2010-04-10 18:25:11 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2010-04-10 18:25:11 ----A---- C:\Windows\system32\mblctr.exe
2010-04-10 18:25:11 ----A---- C:\Windows\system32\logman.exe
2010-04-10 18:25:11 ----A---- C:\Windows\system32\logagent.exe
2010-04-10 18:25:11 ----A---- C:\Windows\system32\kdusb.dll
2010-04-10 18:25:11 ----A---- C:\Windows\system32\kdcom.dll
2010-04-10 18:25:09 ----A---- C:\Windows\system32\shsetup.dll
2010-04-10 18:25:09 ----A---- C:\Windows\system32\Magnify.exe
2010-04-10 18:25:09 ----A---- C:\Windows\system32\logoff.exe
2010-04-10 18:25:08 ----A---- C:\Windows\system32\wercon.exe
2010-04-10 18:25:08 ----A---- C:\Windows\system32\wer.dll
2010-04-10 18:25:08 ----A---- C:\Windows\system32\WebClnt.dll
2010-04-10 18:25:08 ----A---- C:\Windows\system32\wdscore.dll
2010-04-10 18:25:08 ----A---- C:\Windows\system32\wdc.dll
2010-04-10 18:25:07 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll
2010-04-10 18:25:06 ----A---- C:\Windows\system32\whealogr.dll
2010-04-10 18:25:06 ----A---- C:\Windows\system32\wevtutil.exe
2010-04-10 18:25:06 ----A---- C:\Windows\system32\wevtsvc.dll
2010-04-10 18:25:05 ----A---- C:\Windows\system32\win32spl.dll
2010-04-10 18:25:05 ----A---- C:\Windows\system32\wiaaut.dll
2010-04-10 18:25:05 ----A---- C:\Windows\system32\WFS.exe
2010-04-10 18:25:05 ----A---- C:\Windows\system32\wevtapi.dll
2010-04-10 18:25:05 ----A---- C:\Windows\system32\wersvc.dll
2010-04-10 18:25:05 ----A---- C:\Windows\system32\WerFaultSecure.exe
2010-04-10 18:25:05 ----A---- C:\Windows\system32\WerFault.exe
2010-04-10 18:25:04 ----A---- C:\Windows\system32\wiaservc.dll
2010-04-10 18:25:04 ----A---- C:\Windows\system32\version.dll
2010-04-10 18:25:04 ----A---- C:\Windows\system32\vdsutil.dll
2010-04-10 18:25:04 ----A---- C:\Windows\system32\vdsdyn.dll
2010-04-10 18:25:04 ----A---- C:\Windows\system32\vds.exe
2010-04-10 18:25:04 ----A---- C:\Windows\system32\vdmdbg.dll
2010-04-10 18:25:04 ----A---- C:\Windows\system32\user32.dll
2010-04-10 18:25:03 ----A---- C:\Windows\system32\uxsms.dll
2010-04-10 18:25:03 ----A---- C:\Windows\system32\Utilman.exe
2010-04-10 18:25:03 ----A---- C:\Windows\system32\usp10.dll
2010-04-10 18:25:03 ----A---- C:\Windows\system32\userenv.dll
2010-04-10 18:25:03 ----A---- C:\Windows\system32\usercpl.dll
2010-04-10 18:25:02 ----A---- C:\Windows\system32\wcnwiz2.dll
2010-04-10 18:25:02 ----A---- C:\Windows\system32\wcnwiz.dll
2010-04-10 18:25:02 ----A---- C:\Windows\system32\WcnNetsh.dll
2010-04-10 18:25:02 ----A---- C:\Windows\system32\wcncsvc.dll
2010-04-10 18:25:02 ----A---- C:\Windows\system32\wbengine.exe
2010-04-10 18:25:01 ----A---- C:\Windows\system32\wscisvif.dll
2010-04-10 18:25:01 ----A---- C:\Windows\system32\WscEapPr.dll
2010-04-10 18:25:01 ----A---- C:\Windows\system32\wscapi.dll
2010-04-10 18:25:01 ----A---- C:\Windows\system32\w32time.dll
2010-04-10 18:25:01 ----A---- C:\Windows\system32\VSSVC.exe
2010-04-10 18:25:01 ----A---- C:\Windows\system32\vssapi.dll
2010-04-10 18:25:00 ----A---- C:\Windows\system32\WSDMon.dll
2010-04-10 18:25:00 ----A---- C:\Windows\system32\wsdchngr.dll
2010-04-10 18:25:00 ----A---- C:\Windows\system32\wscsvc.dll
2010-04-10 18:25:00 ----A---- C:\Windows\system32\wscript.exe
2010-04-10 18:25:00 ----A---- C:\Windows\system32\wscntfy.dll
2010-04-10 18:25:00 ----A---- C:\Windows\system32\wow32.dll
2010-04-10 18:25:00 ----A---- C:\Windows\system32\WMVXENCD.DLL
2010-04-10 18:25:00 ----A---- C:\Windows\system32\WMVSDECD.DLL
2010-04-10 18:25:00 ----A---- C:\Windows\system32\WMVENCOD.DLL
2010-04-10 18:24:59 ----A---- C:\Windows\system32\wusa.exe
2010-04-10 18:24:58 ----A---- C:\Windows\system32\xmlfilter.dll
2010-04-10 18:24:57 ----A---- C:\Windows\system32\wshext.dll
2010-04-10 18:24:57 ----A---- C:\Windows\system32\wshbth.dll
2010-04-10 18:24:57 ----A---- C:\Windows\system32\wsepno.dll
2010-04-10 18:24:56 ----A---- C:\Windows\system32\wsnmp32.dll
2010-04-10 18:24:56 ----A---- C:\Windows\system32\WsmSvc.dll
2010-04-10 18:24:56 ----A---- C:\Windows\system32\wlanui.dll
2010-04-10 18:24:56 ----A---- C:\Windows\system32\wlanpref.dll
2010-04-10 18:24:56 ----A---- C:\Windows\system32\wlangpui.dll
2010-04-10 18:24:56 ----A---- C:\Windows\system32\wisptis.exe
2010-04-10 18:24:55 ----A---- C:\Windows\system32\wlgpclnt.dll
2010-04-10 18:24:55 ----A---- C:\Windows\system32\Wldap32.dll
2010-04-10 18:24:55 ----A---- C:\Windows\system32\WinSCard.dll
2010-04-10 18:24:55 ----A---- C:\Windows\system32\WinSAT.exe
2010-04-10 18:24:55 ----A---- C:\Windows\system32\winrnr.dll
2010-04-10 18:24:55 ----A---- C:\Windows\system32\winresume.exe
2010-04-10 18:24:55 ----A---- C:\Windows\system32\winmm.dll
2010-04-10 18:24:55 ----A---- C:\Windows\system32\winlogon.exe
2010-04-10 18:24:55 ----A---- C:\Windows\system32\winload.exe
2010-04-10 18:24:54 ----A---- C:\Windows\system32\wmpmde.dll
2010-04-10 18:24:54 ----A---- C:\Windows\system32\wmpeffects.dll
2010-04-10 18:24:54 ----A---- C:\Windows\system32\WMNetMgr.dll
2010-04-10 18:24:54 ----A---- C:\Windows\system32\winsrv.dll
2010-04-10 18:24:51 ----A---- C:\Windows\system32\wmicmiplugin.dll
2010-04-10 18:24:51 ----A---- C:\Windows\system32\wmdrmsdk.dll
2010-04-10 18:24:50 ----A---- C:\Windows\system32\sud.dll
2010-04-10 18:24:50 ----A---- C:\Windows\system32\Storprop.dll
2010-04-10 18:24:50 ----A---- C:\Windows\system32\stobject.dll
2010-04-10 18:24:49 ----A---- C:\Windows\system32\srvsvc.dll
2010-04-10 18:24:49 ----A---- C:\Windows\system32\srchadmin.dll
2010-04-10 18:24:49 ----A---- C:\Windows\system32\srcore.dll
2010-04-10 18:24:47 ----A---- C:\Windows\system32\sysmain.dll
2010-04-10 18:24:47 ----A---- C:\Windows\system32\sysclass.dll
2010-04-10 18:24:47 ----A---- C:\Windows\system32\SyncCenter.dll
2010-04-10 18:24:47 ----A---- C:\Windows\system32\swprv.dll
2010-04-10 18:24:46 ----A---- C:\Windows\system32\smss.exe
2010-04-10 18:24:46 ----A---- C:\Windows\system32\SmiEngine.dll
2010-04-10 18:24:46 ----A---- C:\Windows\system32\SMBHelperClass.dll
2010-04-10 18:24:46 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2010-04-10 18:24:46 ----A---- C:\Windows\system32\slwmi.dll
2010-04-10 18:24:46 ----A---- C:\Windows\system32\slcc.dll
2010-04-10 18:24:46 ----A---- C:\Windows\system32\SLC.dll
2010-04-10 18:24:45 ----A---- C:\Windows\system32\slwga.dll
2010-04-10 18:24:45 ----A---- C:\Windows\system32\SLUINotify.dll
2010-04-10 18:24:45 ----A---- C:\Windows\system32\SLUI.exe
2010-04-10 18:24:45 ----A---- C:\Windows\system32\SLsvc.exe
2010-04-10 18:24:45 ----A---- C:\Windows\system32\slmgr.vbs
2010-04-10 18:24:45 ----A---- C:\Windows\system32\slcinst.dll
2010-04-10 18:24:45 ----A---- C:\Windows\system32\shwebsvc.dll
2010-04-10 18:24:45 ----A---- C:\Windows\system32\shsvcs.dll
2010-04-10 18:24:44 ----A---- C:\Windows\system32\spp.dll
2010-04-10 18:24:44 ----A---- C:\Windows\system32\spoolsv.exe
2010-04-10 18:24:44 ----A---- C:\Windows\system32\spoolss.dll
2010-04-10 18:24:44 ----A---- C:\Windows\system32\spinstall.exe
2010-04-10 18:24:44 ----A---- C:\Windows\system32\spcmsg.dll
2010-04-10 18:24:44 ----A---- C:\Windows\system32\SLLUA.exe
2010-04-10 18:24:44 ----A---- C:\Windows\system32\SLCommDlg.dll
2010-04-10 18:24:44 ----A---- C:\Windows\system32\SLCExt.dll
2010-04-10 18:24:43 ----A---- C:\Windows\system32\sqlsrv32.dll
2010-04-10 18:24:43 ----A---- C:\Windows\system32\spwizui.dll
2010-04-10 18:24:43 ----A---- C:\Windows\system32\spwinsat.dll
2010-04-10 18:24:43 ----A---- C:\Windows\system32\sperror.dll
2010-04-10 18:24:41 ----A---- C:\Windows\system32\spreview.exe
2010-04-10 18:24:41 ----A---- C:\Windows\system32\softkbd.dll
2010-04-10 18:24:41 ----A---- C:\Windows\system32\SnippingTool.exe
2010-04-10 18:24:41 ----A---- C:\Windows\system32\SndVol.exe
2010-04-10 18:24:40 ----A---- C:\Windows\system32\TSTheme.exe
2010-04-10 18:24:39 ----A---- C:\Windows\system32\TsWpfWrp.exe
2010-04-10 18:24:39 ----A---- C:\Windows\system32\tskill.exe
2010-04-10 18:24:39 ----A---- C:\Windows\system32\tsdiscon.exe
2010-04-10 18:24:39 ----A---- C:\Windows\system32\tscupgrd.exe
2010-04-10 18:24:37 ----A---- C:\Windows\system32\zipfldr.dll
2010-04-10 18:24:37 ----A---- C:\Windows\system32\untfs.dll
2010-04-10 18:24:37 ----A---- C:\Windows\system32\umrdp.dll
2010-04-10 18:24:37 ----A---- C:\Windows\system32\ulib.dll
2010-04-10 18:24:37 ----A---- C:\Windows\system32\uDWM.dll
2010-04-10 18:24:36 ----A---- C:\Windows\system32\umpnpmgr.dll
2010-04-10 18:24:36 ----A---- C:\Windows\system32\systemcpl.dll
2010-04-10 18:24:32 ----A---- C:\Windows\system32\tscon.exe
2010-04-10 18:24:32 ----A---- C:\Windows\system32\tscfgwmi.dll
2010-04-10 18:24:32 ----A---- C:\Windows\system32\tquery.dll
2010-04-10 18:24:32 ----A---- C:\Windows\system32\themeui.dll
2010-04-10 18:24:32 ----A---- C:\Windows\system32\themecpl.dll
2010-04-10 18:24:32 ----A---- C:\Windows\system32\thawbrkr.dll
2010-04-10 18:24:32 ----A---- C:\Windows\system32\termsrv.dll

následuje další pokračování...

sccay · #9 Příspěvek od **sccay** » 29 dub 2010 08:21

2010-04-10 18:24:32 ----A---- C:\Windows\system32\tcpmon.dll
2010-04-10 18:24:32 ----A---- C:\Windows\system32\tcpipcfg.dll
2010-04-10 18:24:32 ----A---- C:\Windows\system32\taskeng.exe
2010-04-10 18:24:32 ----A---- C:\Windows\system32\taskcomp.dll
2010-04-10 18:24:32 ----A---- C:\Windows\system32\tapisrv.dll
2010-04-10 18:21:29 ----D---- C:\Windows\system32\EventProviders
2010-04-10 18:07:15 ----D---- C:\PerfLogs
2010-04-10 17:24:00 ----A---- C:\Windows\system32\sdspres.dll
2010-04-10 17:23:58 ----A---- C:\Windows\system32\recdisc.exe
2010-04-10 17:23:16 ----A---- C:\Windows\system32\sxproxy.dll
2010-04-10 17:19:30 ----A---- C:\Windows\system32\mstask.dll
2010-04-10 17:19:30 ----A---- C:\Windows\system32\mssha.dll
2010-04-10 17:19:30 ----A---- C:\Windows\system32\msrdc.dll
2010-04-10 17:19:30 ----A---- C:\Windows\system32\msra.exe
2010-04-10 17:19:29 ----A---- C:\Windows\system32\NAPMONTR.DLL
2010-04-10 17:19:29 ----A---- C:\Windows\system32\napipsec.dll
2010-04-10 17:19:29 ----A---- C:\Windows\system32\NapiNSP.dll
2010-04-10 17:19:29 ----A---- C:\Windows\system32\NAPHLPR.DLL
2010-04-10 17:19:29 ----A---- C:\Windows\system32\napdsnap.dll
2010-04-10 17:19:29 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2010-04-10 17:19:29 ----A---- C:\Windows\system32\mydocs.dll
2010-04-10 17:19:29 ----A---- C:\Windows\system32\mycomput.dll
2010-04-10 17:19:29 ----A---- C:\Windows\system32\MuiUnattend.exe
2010-04-10 17:19:29 ----A---- C:\Windows\system32\mtxoci.dll
2010-04-10 17:19:29 ----A---- C:\Windows\system32\mtxlegih.dll
2010-04-10 17:19:29 ----A---- C:\Windows\system32\mtxdm.dll
2010-04-10 17:19:29 ----A---- C:\Windows\system32\mtstocom.exe
2010-04-10 17:19:29 ----A---- C:\Windows\system32\mswmdm.dll
2010-04-10 17:19:29 ----A---- C:\Windows\system32\msvbvm60.dll
2010-04-10 17:19:29 ----A---- C:\Windows\system32\msdtcVSp1res.dll
2010-04-10 17:19:29 ----A---- C:\Windows\system32\msdtcuiu.dll
2010-04-10 17:19:27 ----A---- C:\Windows\system32\msg.exe
2010-04-10 17:19:26 ----A---- C:\Windows\system32\mspatcha.dll
2010-04-10 17:19:26 ----A---- C:\Windows\system32\mspaint.exe
2010-04-10 17:19:26 ----A---- C:\Windows\system32\msorcl32.dll
2010-04-10 17:19:26 ----A---- C:\Windows\system32\msoert2.dll
2010-04-10 17:19:26 ----A---- C:\Windows\system32\msoeacct.dll
2010-04-10 17:19:26 ----A---- C:\Windows\system32\msobjs.dll
2010-04-10 17:19:26 ----A---- C:\Windows\system32\msmmsp.dll
2010-04-10 17:19:26 ----A---- C:\Windows\system32\msdtclog.dll
2010-04-10 17:19:26 ----A---- C:\Windows\system32\msdtckrm.dll
2010-04-10 17:19:26 ----A---- C:\Windows\system32\msdtc.exe
2010-04-10 17:19:26 ----A---- C:\Windows\system32\msdt.exe
2010-04-10 17:19:26 ----A---- C:\Windows\system32\msdt.dll
2010-04-10 17:19:26 ----A---- C:\Windows\system32\msdmo.dll
2010-04-10 17:19:26 ----A---- C:\Windows\system32\msdelta.dll
2010-04-10 17:19:26 ----A---- C:\Windows\system32\msdart.dll
2010-04-10 17:19:26 ----A---- C:\Windows\system32\msdadiag.dll
2010-04-10 17:19:25 ----A---- C:\Windows\system32\msieftp.dll
2010-04-10 17:19:25 ----A---- C:\Windows\system32\msidle.dll
2010-04-10 17:19:25 ----A---- C:\Windows\system32\msident.dll
2010-04-10 17:19:25 ----A---- C:\Windows\system32\msidcrl30.dll
2010-04-10 17:19:23 ----A---- C:\Windows\system32\notepad.exe
2010-04-10 17:19:23 ----A---- C:\Windows\system32\Nlsdl.dll
2010-04-10 17:19:23 ----A---- C:\Windows\notepad.exe
2010-04-10 17:19:19 ----A---- C:\Windows\system32\nlsbres.dll
2010-04-10 17:19:19 ----A---- C:\Windows\system32\nlmgp.dll
2010-04-10 17:19:18 ----A---- C:\Windows\system32\odbctrac.dll
2010-04-10 17:19:18 ----A---- C:\Windows\system32\odbcjt32.dll
2010-04-10 17:19:18 ----A---- C:\Windows\system32\odbccu32.dll
2010-04-10 17:19:18 ----A---- C:\Windows\system32\odbccr32.dll
2010-04-10 17:19:18 ----A---- C:\Windows\system32\odbcbcp.dll
2010-04-10 17:19:18 ----A---- C:\Windows\system32\objsel.dll
2010-04-10 17:19:18 ----A---- C:\Windows\system32\ntdsapi.dll
2010-04-10 17:19:15 ----A---- C:\Windows\system32\ntvdm.exe
2010-04-10 17:19:15 ----A---- C:\Windows\system32\ntshrui.dll
2010-04-10 17:19:15 ----A---- C:\Windows\system32\ntlanman.dll
2010-04-10 17:19:15 ----A---- C:\Windows\system32\nsisvc.dll
2010-04-10 17:19:15 ----A---- C:\Windows\system32\nsi.dll
2010-04-10 17:19:15 ----A---- C:\Windows\system32\nshipsec.dll
2010-04-10 17:19:14 ----A---- C:\Windows\system32\netiougc.exe
2010-04-10 17:19:14 ----A---- C:\Windows\system32\netid.dll
2010-04-10 17:19:14 ----A---- C:\Windows\system32\netdiagfx.dll
2010-04-10 17:19:14 ----A---- C:\Windows\system32\netcorehc.dll
2010-04-10 17:19:14 ----A---- C:\Windows\system32\netcfgx.dll
2010-04-10 17:19:14 ----A---- C:\Windows\system32\netcfg.exe
2010-04-10 17:19:14 ----A---- C:\Windows\system32\netbtugc.exe
2010-04-10 17:19:14 ----A---- C:\Windows\system32\net1.exe
2010-04-10 17:19:14 ----A---- C:\Windows\system32\net.exe
2010-04-10 17:19:14 ----A---- C:\Windows\system32\ndfetw.dll
2010-04-10 17:19:14 ----A---- C:\Windows\system32\ndfapi.dll
2010-04-10 17:19:14 ----A---- C:\Windows\system32\ncsi.dll
2010-04-10 17:19:14 ----A---- C:\Windows\system32\ncobjapi.dll
2010-04-10 17:19:14 ----A---- C:\Windows\system32\nci.dll
2010-04-10 17:19:14 ----A---- C:\Windows\system32\nbtstat.exe
2010-04-10 17:19:14 ----A---- C:\Windows\system32\NAPSTAT.EXE
2010-04-10 17:19:13 ----A---- C:\Windows\system32\nlasvc.dll
2010-04-10 17:19:13 ----A---- C:\Windows\system32\nlaapi.dll
2010-04-10 17:19:13 ----A---- C:\Windows\system32\netprofm.dll
2010-04-10 17:19:13 ----A---- C:\Windows\system32\netprof.dll
2010-04-10 17:19:13 ----A---- C:\Windows\system32\Netplwiz.exe
2010-04-10 17:19:13 ----A---- C:\Windows\system32\netman.dll
2010-04-10 17:19:13 ----A---- C:\Windows\system32\lsmproxy.dll
2010-04-10 17:19:13 ----A---- C:\Windows\system32\lsm.exe
2010-04-10 17:19:12 ----A---- C:\Windows\system32\makecab.exe
2010-04-10 17:19:12 ----A---- C:\Windows\system32\luainstall.dll
2010-04-10 17:19:12 ----A---- C:\Windows\system32\lpksetup.exe
2010-04-10 17:19:12 ----A---- C:\Windows\system32\loghours.dll
2010-04-10 17:19:12 ----A---- C:\Windows\system32\lodctr.exe
2010-04-10 17:19:12 ----A---- C:\Windows\system32\localui.dll
2010-04-10 17:19:12 ----A---- C:\Windows\system32\localsec.dll
2010-04-10 17:19:11 ----A---- C:\Windows\system32\MFWMAAEC.DLL
2010-04-10 17:19:11 ----A---- C:\Windows\system32\mfvdsp.dll
2010-04-10 17:19:11 ----A---- C:\Windows\system32\mfcsubs.dll
2010-04-10 17:19:11 ----A---- C:\Windows\system32\MdSched.exe
2010-04-10 17:19:11 ----A---- C:\Windows\system32\mdminst.dll
2010-04-10 17:19:11 ----A---- C:\Windows\system32\McxDriv.dll
2010-04-10 17:19:11 ----A---- C:\Windows\system32\mcbuilder.exe
2010-04-10 17:19:11 ----A---- C:\Windows\system32\lpremove.exe
2010-04-10 17:19:11 ----A---- C:\Windows\system32\LogonUI.exe
2010-04-10 17:19:10 ----A---- C:\Windows\system32\loadperf.dll
2010-04-10 17:19:10 ----A---- C:\Windows\system32\lnkstub.exe
2010-04-10 17:19:10 ----A---- C:\Windows\system32\lltdsvc.dll
2010-04-10 17:19:10 ----A---- C:\Windows\system32\lltdapi.dll
2010-04-10 17:19:10 ----A---- C:\Windows\system32\LangCleanupSysprepAction.dll
2010-04-10 17:19:10 ----A---- C:\Windows\system32\l2gpstore.dll
2010-04-10 17:19:10 ----A---- C:\Windows\system32\ktmw32.dll
2010-04-10 17:19:10 ----A---- C:\Windows\system32\ktmutil.exe
2010-04-10 17:19:10 ----A---- C:\Windows\system32\KMSVC.DLL
2010-04-10 17:19:10 ----A---- C:\Windows\system32\keymgr.dll
2010-04-10 17:19:10 ----A---- C:\Windows\system32\KBDKOR.DLL
2010-04-10 17:19:10 ----A---- C:\Windows\system32\KBDJPN.DLL
2010-04-10 17:19:10 ----A---- C:\Windows\system32\itss.dll
2010-04-10 17:19:10 ----A---- C:\Windows\system32\iscsiwmi.dll
2010-04-10 17:19:10 ----A---- C:\Windows\system32\iscsium.dll
2010-04-10 17:19:10 ----A---- C:\Windows\system32\iscsiexe.dll
2010-04-10 17:19:10 ----A---- C:\Windows\system32\iscsied.dll
2010-04-10 17:19:10 ----A---- C:\Windows\system32\iprtrmgr.dll
2010-04-10 17:19:10 ----A---- C:\Windows\system32\iprtprio.dll
2010-04-10 17:19:10 ----A---- C:\Windows\system32\ipnathlp.dll
2010-04-10 17:19:10 ----A---- C:\Windows\system32\IPBusEnum.dll
2010-04-10 17:19:09 ----A---- C:\Windows\system32\msconfig.exe
2010-04-10 17:19:09 ----A---- C:\Windows\system32\mprmsg.dll
2010-04-10 17:19:09 ----A---- C:\Windows\system32\mprdim.dll
2010-04-10 17:19:09 ----A---- C:\Windows\system32\mprddm.dll
2010-04-10 17:19:09 ----A---- C:\Windows\system32\MPG4DECD.DLL
2010-04-10 17:19:09 ----A---- C:\Windows\system32\MP4SDECD.DLL
2010-04-10 17:19:09 ----A---- C:\Windows\system32\MP43DECD.DLL
2010-04-10 17:19:09 ----A---- C:\Windows\system32\MP3DMOD.DLL
2010-04-10 17:19:09 ----A---- C:\Windows\system32\mountvol.exe
2010-04-10 17:19:07 ----A---- C:\Windows\system32\msacm32.dll
2010-04-10 17:19:07 ----A---- C:\Windows\system32\msaatext.dll
2010-04-10 17:19:05 ----A---- C:\Windows\system32\mobsync.exe
2010-04-10 17:19:05 ----A---- C:\Windows\system32\mmcss.dll
2010-04-10 17:19:05 ----A---- C:\Windows\system32\mmcshext.dll
2010-04-10 17:19:05 ----A---- C:\Windows\system32\mmcbase.dll
2010-04-10 17:19:05 ----A---- C:\Windows\system32\mlang.dll
2010-04-10 17:19:04 ----A---- C:\Windows\system32\secpol.msc
2010-04-10 17:19:04 ----A---- C:\Windows\system32\seclogon.dll
2010-04-10 17:19:04 ----A---- C:\Windows\system32\SecEdit.exe
2010-04-10 17:19:04 ----A---- C:\Windows\system32\sdshext.dll
2010-04-10 17:19:04 ----A---- C:\Windows\system32\sdrsvc.dll
2010-04-10 17:19:04 ----A---- C:\Windows\system32\migisol.dll
2010-04-10 17:19:04 ----A---- C:\Windows\system32\MigAutoPlay.exe
2010-04-10 17:19:03 ----A---- C:\Windows\system32\SmiInstaller.dll
2010-04-10 17:19:03 ----A---- C:\Windows\system32\shutdown.exe
2010-04-10 17:19:03 ----A---- C:\Windows\system32\shrpubw.exe
2010-04-10 17:19:03 ----A---- C:\Windows\system32\shrink.dll
2010-04-10 17:19:03 ----A---- C:\Windows\system32\shimgvw.dll
2010-04-10 17:19:03 ----A---- C:\Windows\system32\shgina.dll
2010-04-10 17:19:03 ----A---- C:\Windows\system32\shacct.dll
2010-04-10 17:19:02 ----A---- C:\Windows\system32\sfc_os.dll
2010-04-10 17:19:02 ----A---- C:\Windows\system32\sfc.exe
2010-04-10 17:19:02 ----A---- C:\Windows\system32\setupugc.exe
2010-04-10 17:19:02 ----A---- C:\Windows\system32\setupSNK.exe
2010-04-10 17:19:02 ----A---- C:\Windows\system32\setupcln.dll
2010-04-10 17:19:02 ----A---- C:\Windows\system32\setupcl.exe
2010-04-10 17:19:02 ----A---- C:\Windows\system32\setbcdlocale.dll
2010-04-10 17:19:02 ----A---- C:\Windows\system32\SessEnv.dll
2010-04-10 17:19:02 ----A---- C:\Windows\system32\serialui.dll
2010-04-10 17:19:02 ----A---- C:\Windows\system32\Sens.dll
2010-04-10 17:19:01 ----A---- C:\Windows\system32\ppcsnap.dll
2010-04-10 17:19:01 ----A---- C:\Windows\system32\pots.dll
2010-04-10 17:19:01 ----A---- C:\Windows\system32\pnrpnsp.dll
2010-04-10 17:19:01 ----A---- C:\Windows\system32\PNPXAssocPrx.dll
2010-04-10 17:19:01 ----A---- C:\Windows\system32\pnpts.dll
2010-04-10 17:19:00 ----A---- C:\Windows\system32\QAGENT.DLL
2010-04-10 17:19:00 ----A---- C:\Windows\system32\PushPrinterConnections.exe
2010-04-10 17:19:00 ----A---- C:\Windows\system32\puiobj.dll
2010-04-10 17:19:00 ----A---- C:\Windows\system32\psbase.dll
2010-04-10 17:19:00 ----A---- C:\Windows\system32\provthrd.dll
2010-04-10 17:19:00 ----A---- C:\Windows\system32\profprov.dll
2010-04-10 17:19:00 ----A---- C:\Windows\system32\procinst.dll
2010-04-10 17:19:00 ----A---- C:\Windows\system32\prntvpt.dll
2010-04-10 17:19:00 ----A---- C:\Windows\system32\prevhost.exe
2010-04-10 17:19:00 ----A---- C:\Windows\system32\PortableDeviceWiaCompat.dll
2010-04-10 17:18:56 ----A---- C:\Windows\system32\p2pcollab.dll
2010-04-10 17:18:56 ----A---- C:\Windows\system32\P2P.dll
2010-04-10 17:18:55 ----A---- C:\Windows\system32\pcasvc.dll
2010-04-10 17:18:55 ----A---- C:\Windows\system32\pcadm.dll
2010-04-10 17:18:55 ----A---- C:\Windows\system32\p2pnetsh.dll
2010-04-10 17:18:55 ----A---- C:\Windows\system32\p2phost.exe
2010-04-10 17:18:54 ----A---- C:\Windows\system32\osblprov.dll
2010-04-10 17:18:54 ----A---- C:\Windows\system32\osbaseln.dll
2010-04-10 17:18:54 ----A---- C:\Windows\system32\OptionalFeatures.exe
2010-04-10 17:18:54 ----A---- C:\Windows\system32\olethk32.dll
2010-04-10 17:18:54 ----A---- C:\Windows\system32\olesvr32.dll
2010-04-10 17:18:54 ----A---- C:\Windows\system32\oledlg.dll
2010-04-10 17:18:54 ----A---- C:\Windows\system32\olecli32.dll
2010-04-10 17:18:54 ----A---- C:\Windows\system32\ogldrv.dll
2010-04-10 17:18:53 ----A---- C:\Windows\system32\PlaySndSrv.dll
2010-04-10 17:18:53 ----A---- C:\Windows\system32\pla.dll
2010-04-10 17:18:53 ----A---- C:\Windows\system32\PING.EXE
2010-04-10 17:18:52 ----A---- C:\Windows\system32\schtasks.exe
2010-04-10 17:18:52 ----A---- C:\Windows\system32\sdchange.exe
2010-04-10 17:18:52 ----A---- C:\Windows\system32\sdengin2.dll
2010-04-10 17:18:52 ----A---- C:\Windows\system32\sbunattend.exe
2010-04-10 17:18:52 ----A---- C:\Windows\system32\runonce.exe
2010-04-10 17:18:52 ----A---- C:\Windows\system32\rtm.dll
2010-04-10 17:18:52 ----A---- C:\Windows\system32\rstrui.exe
2010-04-10 17:18:52 ----A---- C:\Windows\system32\RstrtMgr.dll
2010-04-10 17:18:52 ----A---- C:\Windows\system32\rshx32.dll
2010-04-10 17:18:52 ----A---- C:\Windows\system32\RpcPing.exe
2010-04-10 17:18:52 ----A---- C:\Windows\system32\Robocopy.exe
2010-04-10 17:18:52 ----A---- C:\Windows\system32\riched32.dll
2010-04-10 17:18:52 ----A---- C:\Windows\system32\rgb9rast.dll
2010-04-10 17:18:52 ----A---- C:\Windows\system32\resutils.dll
2010-04-10 17:18:52 ----A---- C:\Windows\system32\RESAMPLEDMO.DLL
2010-04-10 17:18:52 ----A---- C:\Windows\system32\perfts.dll
2010-04-10 17:18:52 ----A---- C:\Windows\system32\perfnet.dll
2010-04-10 17:18:52 ----A---- C:\Windows\system32\perfmon.msc
2010-04-10 17:18:52 ----A---- C:\Windows\system32\perfmon.exe
2010-04-10 17:18:52 ----A---- C:\Windows\system32\pdhui.dll
2010-04-10 17:18:51 ----A---- C:\Windows\system32\sbeio.dll
2010-04-10 17:18:51 ----A---- C:\Windows\system32\sbe.dll
2010-04-10 17:18:51 ----A---- C:\Windows\system32\rasctrs.dll
2010-04-10 17:18:51 ----A---- C:\Windows\system32\rascfg.dll
2010-04-10 17:18:51 ----A---- C:\Windows\system32\rasauto.dll
2010-04-10 17:18:51 ----A---- C:\Windows\system32\RacAgent.exe
2010-04-10 17:18:51 ----A---- C:\Windows\system32\qwinsta.exe
2010-04-10 17:18:51 ----A---- C:\Windows\system32\qwave.dll
2010-04-10 17:18:51 ----A---- C:\Windows\system32\QUTIL.DLL
2010-04-10 17:18:51 ----A---- C:\Windows\system32\quser.exe
2010-04-10 17:18:51 ----A---- C:\Windows\system32\qdv.dll
2010-04-10 17:18:51 ----A---- C:\Windows\system32\QCLIPROV.DLL
2010-04-10 17:18:51 ----A---- C:\Windows\system32\qcap.dll
2010-04-10 17:18:51 ----A---- C:\Windows\system32\qasf.dll
2010-04-10 17:18:50 ----A---- C:\Windows\system32\remotepg.dll
2010-04-10 17:18:50 ----A---- C:\Windows\system32\regini.exe
2010-04-10 17:18:50 ----A---- C:\Windows\system32\RegCtrl.dll
2010-04-10 17:18:50 ----A---- C:\Windows\system32\rdrleakdiag.exe
2010-04-10 17:18:50 ----A---- C:\Windows\system32\RDPENCDD.dll
2010-04-10 17:18:50 ----A---- C:\Windows\system32\rdpdd.dll
2010-04-10 17:18:50 ----A---- C:\Windows\system32\rdpcfgex.dll
2010-04-10 17:18:50 ----A---- C:\Windows\system32\rasqec.dll
2010-04-10 17:18:50 ----A---- C:\Windows\system32\rasphone.exe
2010-04-10 17:18:50 ----A---- C:\Windows\system32\RASMM.dll
2010-04-10 17:18:50 ----A---- C:\Windows\system32\rasman.dll
2010-04-10 17:18:50 ----A---- C:\Windows\system32\raserver.exe
2010-04-10 17:18:50 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2010-04-10 17:18:50 ----A---- C:\Windows\system32\QSHVHOST.DLL
2010-04-10 17:18:50 ----A---- C:\Windows\system32\d3d8.dll
2010-04-10 17:18:50 ----A---- C:\Windows\regedit.exe
2010-04-10 17:18:49 ----A---- C:\Windows\system32\devenum.dll
2010-04-10 17:18:49 ----A---- C:\Windows\system32\Defrag.exe
2010-04-10 17:18:49 ----A---- C:\Windows\system32\ddraw.dll
2010-04-10 17:18:49 ----A---- C:\Windows\system32\dbnetlib.dll
2010-04-10 17:18:49 ----A---- C:\Windows\system32\d3dxof.dll
2010-04-10 17:18:49 ----A---- C:\Windows\system32\d3dim700.dll
2010-04-10 17:18:49 ----A---- C:\Windows\system32\d3dim.dll
2010-04-10 17:18:48 ----A---- C:\Windows\system32\dinput8.dll
2010-04-10 17:18:48 ----A---- C:\Windows\system32\dimsjob.dll
2010-04-10 17:18:48 ----A---- C:\Windows\system32\diantz.exe
2010-04-10 17:18:48 ----A---- C:\Windows\system32\dbghelp.dll
2010-04-10 17:18:48 ----A---- C:\Windows\system32\csrss.exe
2010-04-10 17:18:48 ----A---- C:\Windows\system32\csrsrv.dll
2010-04-10 17:18:48 ----A---- C:\Windows\system32\cryptnet.dll
2010-04-10 17:18:48 ----A---- C:\Windows\system32\cryptdll.dll
2010-04-10 17:18:48 ----A---- C:\Windows\system32\credssp.dll
2010-04-10 17:18:47 ----A---- C:\Windows\system32\dispex.dll
2010-04-10 17:18:47 ----A---- C:\Windows\system32\dispdiag.exe
2010-04-10 17:18:47 ----A---- C:\Windows\system32\dispci.dll
2010-04-10 17:18:47 ----A---- C:\Windows\system32\dhcpsapi.dll
2010-04-10 17:18:47 ----A---- C:\Windows\system32\DHCPQEC.DLL
2010-04-10 17:18:47 ----A---- C:\Windows\system32\DfsShlEx.dll
2010-04-10 17:18:47 ----A---- C:\Windows\system32\dfrgui.exe
2010-04-10 17:18:47 ----A---- C:\Windows\system32\DfrgNtfs.exe
2010-04-10 17:18:47 ----A---- C:\Windows\system32\dfrgifc.exe
2010-04-10 17:18:47 ----A---- C:\Windows\system32\dfrgfat.exe
2010-04-10 17:18:47 ----A---- C:\Windows\system32\DFDWiz.exe
2010-04-10 17:18:47 ----A---- C:\Windows\system32\dfdts.dll
2010-04-10 17:18:47 ----A---- C:\Windows\system32\cmlua.dll
2010-04-10 17:18:47 ----A---- C:\Windows\system32\cmipnpinstall.dll
2010-04-10 17:18:47 ----A---- C:\Windows\system32\cmifw.dll
2010-04-10 17:18:47 ----A---- C:\Windows\system32\cmicryptinstall.dll
2010-04-10 17:18:47 ----A---- C:\Windows\system32\cmdl32.exe
2010-04-10 17:18:47 ----A---- C:\Windows\system32\cmd.exe
2010-04-10 17:18:47 ----A---- C:\Windows\system32\cmcfg32.dll
2010-04-10 17:18:47 ----A---- C:\Windows\system32\clusapi.dll
2010-04-10 17:18:46 ----A---- C:\Windows\system32\convert.exe
2010-04-10 17:18:46 ----A---- C:\Windows\system32\comsnap.dll
2010-04-10 17:18:46 ----A---- C:\Windows\system32\comres.dll
2010-04-10 17:18:46 ----A---- C:\Windows\system32\comrepl.dll
2010-04-10 17:18:46 ----A---- C:\Windows\system32\ComputerDefaults.exe
2010-04-10 17:18:46 ----A---- C:\Windows\system32\compstui.dll
2010-04-10 17:18:46 ----A---- C:\Windows\system32\CompMgmtLauncher.exe
2010-04-10 17:18:46 ----A---- C:\Windows\system32\CompatUI.dll
2010-04-10 17:18:46 ----A---- C:\Windows\system32\clfsw32.dll
2010-04-10 17:18:46 ----A---- C:\Windows\system32\clbcatq.dll
2010-04-10 17:18:46 ----A---- C:\Windows\system32\cic.dll
2010-04-10 17:18:45 ----A---- C:\Windows\system32\consent.exe
2010-04-10 17:18:45 ----A---- C:\Windows\system32\colorui.dll
2010-04-10 17:18:45 ----A---- C:\Windows\system32\colbact.dll
2010-04-10 17:18:45 ----A---- C:\Windows\system32\cofiredm.dll
2010-04-10 17:18:44 ----A---- C:\Windows\system32\els.dll
2010-04-10 17:18:44 ----A---- C:\Windows\system32\comctl32.dll
2010-04-10 17:18:44 ----A---- C:\Windows\system32\COLORCNV.DLL
2010-04-10 17:18:44 ----A---- C:\Windows\system32\cmutil.dll
2010-04-10 17:18:44 ----A---- C:\Windows\system32\cmstplua.dll
2010-04-10 17:18:44 ----A---- C:\Windows\system32\cmstp.exe
2010-04-10 17:18:44 ----A---- C:\Windows\system32\cmpbk32.dll
2010-04-10 17:18:43 ----A---- C:\Windows\system32\fmifs.dll
2010-04-10 17:18:43 ----A---- C:\Windows\system32\FirewallAPI.dll
2010-04-10 17:18:43 ----A---- C:\Windows\system32\findnetprinters.dll
2010-04-10 17:18:43 ----A---- C:\Windows\system32\filemgmt.dll
2010-04-10 17:18:43 ----A---- C:\Windows\system32\fdPHost.dll
2010-04-10 17:18:43 ----A---- C:\Windows\system32\fde.dll
2010-04-10 17:18:43 ----A---- C:\Windows\system32\esentutl.exe
2010-04-10 17:18:43 ----A---- C:\Windows\system32\esentprf.dll
2010-04-10 17:18:43 ----A---- C:\Windows\system32\EncDump.dll
2010-04-10 17:18:43 ----A---- C:\Windows\system32\efsadu.dll
2010-04-10 17:18:43 ----A---- C:\Windows\system32\eapsvc.dll
2010-04-10 17:18:43 ----A---- C:\Windows\system32\EAPQEC.DLL
2010-04-10 17:18:43 ----A---- C:\Windows\system32\eappprxy.dll
2010-04-10 17:18:42 ----A---- C:\Windows\system32\FirewallControlPanel.exe
2010-04-10 17:18:42 ----A---- C:\Windows\system32\extrac32.exe
2010-04-10 17:18:42 ----A---- C:\Windows\system32\expand.exe
2010-04-10 17:18:42 ----A---- C:\Windows\system32\eventcls.dll
2010-04-10 17:18:42 ----A---- C:\Windows\system32\driverquery.exe
2010-04-10 17:18:42 ----A---- C:\Windows\system32\dpx.dll
2010-04-10 17:18:42 ----A---- C:\Windows\system32\dps.dll
2010-04-10 17:18:42 ----A---- C:\Windows\system32\dpnet.dll
2010-04-10 17:18:42 ----A---- C:\Windows\system32\DpiScaling.exe
2010-04-10 17:18:42 ----A---- C:\Windows\system32\dot3ui.dll
2010-04-10 17:18:42 ----A---- C:\Windows\system32\dot3gpui.dll
2010-04-10 17:18:42 ----A---- C:\Windows\system32\dot3gpclnt.dll
2010-04-10 17:18:42 ----A---- C:\Windows\system32\dot3dlg.dll
2010-04-10 17:18:42 ----A---- C:\Windows\system32\dot3api.dll
2010-04-10 17:18:42 ----A---- C:\Windows\system32\dmscript.dll
2010-04-10 17:18:42 ----A---- C:\Windows\system32\dmocx.dll
2010-04-10 17:18:42 ----A---- C:\Windows\system32\dmloader.dll
2010-04-10 17:18:42 ----A---- C:\Windows\system32\dmime.dll
2010-04-10 17:18:42 ----A---- C:\Windows\system32\dmdskres2.dll
2010-04-10 17:18:42 ----A---- C:\Windows\system32\dmdskmgr.dll
2010-04-10 17:18:41 ----A---- C:\Windows\system32\dxva2.dll
2010-04-10 17:18:41 ----A---- C:\Windows\system32\DWWIN.EXE
2010-04-10 17:18:41 ----A---- C:\Windows\system32\dwmredir.dll
2010-04-10 17:18:41 ----A---- C:\Windows\system32\dwmapi.dll
2010-04-10 17:18:41 ----A---- C:\Windows\system32\dskquoui.dll
2010-04-10 17:18:41 ----A---- C:\Windows\system32\dsdmo.dll
2010-04-10 17:18:41 ----A---- C:\Windows\system32\dnshc.dll
2010-04-10 17:18:41 ----A---- C:\Windows\system32\dnscacheugc.exe
2010-04-10 17:18:41 ----A---- C:\Windows\system32\dmvdsitf.dll
2010-04-10 17:18:41 ----A---- C:\Windows\system32\dmutil.dll
2010-04-10 17:18:41 ----A---- C:\Windows\system32\dmdlgs.dll
2010-04-10 17:18:40 ----A---- C:\Windows\system32\duser.dll
2010-04-10 17:18:40 ----A---- C:\Windows\system32\dsuiext.dll
2010-04-10 17:18:40 ----A---- C:\Windows\system32\dssenh.dll
2010-04-10 17:18:40 ----A---- C:\Windows\system32\dssec.dll
2010-04-10 17:18:40 ----A---- C:\Windows\system32\dsquery.dll
2010-04-10 17:18:40 ----A---- C:\Windows\system32\dskquota.dll
2010-04-10 17:18:40 ----A---- C:\Windows\system32\dsauth.dll
2010-04-10 17:18:40 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2010-04-10 17:18:40 ----A---- C:\Windows\system32\AuthFWGP.dll
2010-04-10 17:18:40 ----A---- C:\Windows\system32\authfwcfg.dll
2010-04-10 17:18:40 ----A---- C:\Windows\system32\auditpol.exe
2010-04-10 17:18:40 ----A---- C:\Windows\system32\AUDIOKSE.dll
2010-04-10 17:18:40 ----A---- C:\Windows\system32\AudioEng.dll
2010-04-10 17:18:40 ----A---- C:\Windows\system32\audiodev.dll
2010-04-10 17:18:40 ----A---- C:\Windows\system32\AtBroker.exe
2010-04-10 17:18:40 ----A---- C:\Windows\system32\at.exe
2010-04-10 17:18:39 ----A---- C:\Windows\system32\bitsadmin.exe
2010-04-10 17:18:39 ----A---- C:\Windows\system32\bcdsrv.dll
2010-04-10 17:18:39 ----A---- C:\Windows\system32\bcdprov.dll
2010-04-10 17:18:39 ----A---- C:\Windows\system32\bcdedit.exe
2010-04-10 17:18:39 ----A---- C:\Windows\system32\batt.dll
2010-04-10 17:18:39 ----A---- C:\Windows\system32\basesrv.dll
2010-04-10 17:18:39 ----A---- C:\Windows\system32\AzSqlExt.dll
2010-04-10 17:18:39 ----A---- C:\Windows\system32\azroleui.dll
2010-04-10 17:18:39 ----A---- C:\Windows\system32\avrt.dll
2010-04-10 17:18:39 ----A---- C:\Windows\system32\AuxiliaryDisplayApi.dll
2010-04-10 17:18:39 ----A---- C:\Windows\system32\ACW.exe
2010-04-10 17:18:39 ----A---- C:\Windows\bfsvc.exe
2010-04-10 17:18:38 ----A---- C:\Windows\system32\apss.dll
2010-04-10 17:18:38 ----A---- C:\Windows\system32\appmgr.dll
2010-04-10 17:18:38 ----A---- C:\Windows\system32\appinfo.dll
2010-04-10 17:18:38 ----A---- C:\Windows\system32\apircl.dll
2010-04-10 17:18:38 ----A---- C:\Windows\system32\apilogen.dll
2010-04-10 17:18:38 ----A---- C:\Windows\system32\amxread.dll
2010-04-10 17:18:38 ----A---- C:\Windows\system32\amstream.dll
2010-04-10 17:18:38 ----A---- C:\Windows\system32\adsnt.dll
2010-04-10 17:18:38 ----A---- C:\Windows\system32\actxprxy.dll
2010-04-10 17:18:38 ----A---- C:\Windows\system32\activeds.dll
2010-04-10 17:18:38 ----A---- C:\Windows\system32\ActiveContentWizard.dll
2010-04-10 17:18:38 ----A---- C:\Windows\system32\ActionQueue.dll
2010-04-10 17:18:38 ----A---- C:\Windows\system32\aclui.dll
2010-04-10 17:18:37 ----A---- C:\Windows\system32\catsrvut.dll
2010-04-10 17:18:37 ----A---- C:\Windows\system32\catsrv.dll
2010-04-10 17:18:37 ----A---- C:\Windows\system32\capisp.dll
2010-04-10 17:18:37 ----A---- C:\Windows\system32\cacls.exe
2010-04-10 17:18:37 ----A---- C:\Windows\system32\cabinet.dll
2010-04-10 17:18:37 ----A---- C:\Windows\system32\btpanui.dll
2010-04-10 17:18:37 ----A---- C:\Windows\system32\brcplsdw.dll
2010-04-10 17:18:37 ----A---- C:\Windows\system32\BOOTVID.DLL
2010-04-10 17:18:37 ----A---- C:\Windows\system32\bootstr.dll
2010-04-10 17:18:37 ----A---- C:\Windows\system32\alg.exe
2010-04-10 17:18:37 ----A---- C:\Windows\system32\adsldp.dll
2010-04-10 17:18:36 ----A---- C:\Windows\system32\CertEnrollCtrl.exe
2010-04-10 17:18:36 ----A---- C:\Windows\system32\browser.dll
2010-04-10 17:18:36 ----A---- C:\Windows\system32\bridgeunattend.exe
2010-04-10 17:18:35 ----A---- C:\Windows\system32\cfgmgr32.dll
2010-04-10 17:18:35 ----A---- C:\Windows\system32\cfgbkend.dll
2010-04-10 17:18:35 ----A---- C:\Windows\system32\cewmdm.dll
2010-04-10 17:18:35 ----A---- C:\Windows\system32\cdosys.dll
2010-04-10 17:18:35 ----A---- C:\Windows\system32\bootcfg.exe
2010-04-10 17:18:35 ----A---- C:\Windows\system32\BlbEvents.dll
2010-04-10 17:18:35 ----A---- C:\Windows\system32\blb_ps.dll
2010-04-10 17:18:31 ----A---- C:\Windows\system32\InfDefaultInstall.exe
2010-04-10 17:18:31 ----A---- C:\Windows\system32\inetmib1.dll
2010-04-10 17:18:31 ----A---- C:\Windows\system32\imagesp1.dll
2010-04-10 17:18:31 ----A---- C:\Windows\system32\imagehlp.dll
2010-04-10 17:18:29 ----A---- C:\Windows\system32\icaapi.dll
2010-04-10 17:18:29 ----A---- C:\Windows\system32\iashost.exe
2010-04-10 17:18:29 ----A---- C:\Windows\system32\ias.dll
2010-04-10 17:18:28 ----A---- C:\Windows\system32\ifsutil.dll
2010-04-10 17:18:28 ----A---- C:\Windows\system32\icsunattend.exe
2010-04-10 17:18:28 ----A---- C:\Windows\system32\icsfiltr.dll
2010-04-10 17:18:28 ----A---- C:\Windows\system32\icm32.dll
2010-04-10 17:18:27 ----A---- C:\Windows\system32\idndl.dll
2010-04-10 17:18:27 ----A---- C:\Windows\system32\icfupgd.dll
2010-04-10 17:18:27 ----A---- C:\Windows\system32\icacls.exe
2010-04-10 17:18:26 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2010-04-10 17:18:26 ----A---- C:\Windows\system32\hnetmon.dll
2010-04-10 17:18:26 ----A---- C:\Windows\system32\hnetcfg.dll
2010-04-10 17:18:26 ----A---- C:\Windows\system32\hlink.dll
2010-04-10 17:18:26 ----A---- C:\Windows\system32\FXSXP32.dll
2010-04-10 17:18:26 ----A---- C:\Windows\system32\FXSUTILITY.dll
2010-04-10 17:18:26 ----A---- C:\Windows\system32\FXSUNATD.exe
2010-04-10 17:18:26 ----A---- C:\Windows\system32\FXSTIFF.dll
2010-04-10 17:18:26 ----A---- C:\Windows\system32\FXST30.dll
2010-04-10 17:18:26 ----A---- C:\Windows\system32\FXSSVC.exe
2010-04-10 17:18:26 ----A---- C:\Windows\system32\FXSST.dll
2010-04-10 17:18:26 ----A---- C:\Windows\system32\FXSROUTE.dll
2010-04-10 17:18:26 ----A---- C:\Windows\system32\FXSRESM.dll
2010-04-10 17:18:26 ----A---- C:\Windows\system32\FXSMON.dll
2010-04-10 17:18:26 ----A---- C:\Windows\system32\FXSEXT32.dll
2010-04-10 17:18:26 ----A---- C:\Windows\system32\FXSCOVER.exe
2010-04-10 17:18:26 ----A---- C:\Windows\system32\FXSCOMPOSE.dll
2010-04-10 17:18:26 ----A---- C:\Windows\system32\FXSCOMEX.dll
2010-04-10 17:18:26 ----A---- C:\Windows\system32\FXSCOM.dll
2010-04-10 17:18:26 ----A---- C:\Windows\system32\FXSAPI.dll
2010-04-10 17:18:26 ----A---- C:\Windows\system32\fwcfg.dll
2010-04-10 17:18:26 ----A---- C:\Windows\system32\fsutil.exe
2010-04-10 17:18:26 ----A---- C:\Windows\system32\fsmgmt.msc
2010-04-10 17:18:26 ----A---- C:\Windows\system32\framedynos.dll
2010-04-10 17:18:26 ----A---- C:\Windows\system32\framedyn.dll
2010-04-10 17:18:26 ----A---- C:\Windows\system32\framebuf.dll
2010-04-10 17:18:26 ----A---- C:\Windows\system32\fphc.dll
2010-04-10 17:18:26 ----A---- C:\Windows\fveupdate.exe
2010-04-10 17:18:25 ----A---- C:\Windows\system32\HelpPaneProxy.dll
2010-04-10 17:18:25 ----A---- C:\Windows\system32\GuidedHelp.dll
2010-04-10 17:18:25 ----A---- C:\Windows\system32\graftabl.com
2010-04-10 17:18:25 ----A---- C:\Windows\system32\gpedit.msc
2010-04-10 17:18:25 ----A---- C:\Windows\system32\getmac.exe
2010-04-10 17:18:25 ----A---- C:\Windows\system32\gatherWiredInfo.vbs
2010-04-10 17:18:25 ----A---- C:\Windows\system32\gacinstall.dll
2010-04-10 17:18:25 ----A---- C:\Windows\HelpPane.exe
2010-04-10 17:18:21 ----A---- C:\Windows\system32\winusb.dll
2010-04-10 17:18:21 ----A---- C:\Windows\system32\winsta.dll
2010-04-10 17:18:21 ----A---- C:\Windows\system32\WINSRPC.DLL
2010-04-10 17:18:21 ----A---- C:\Windows\system32\WinSATAPI.dll
2010-04-10 17:18:21 ----A---- C:\Windows\system32\winrsmgr.dll
2010-04-10 17:18:21 ----A---- C:\Windows\system32\WindowsAnytimeUpgrade.exe
2010-04-10 17:18:21 ----A---- C:\Windows\system32\wiashext.dll
2010-04-10 17:18:21 ----A---- C:\Windows\system32\wiascanprofiles.dll
2010-04-10 17:18:21 ----A---- C:\Windows\system32\wiarpc.dll
2010-04-10 17:18:21 ----A---- C:\Windows\system32\wiadss.dll
2010-04-10 17:18:21 ----A---- C:\Windows\system32\wiadefui.dll
2010-04-10 17:18:21 ----A---- C:\Windows\system32\wiaacmgr.exe
2010-04-10 17:18:21 ----A---- C:\Windows\system32\wfapigp.dll
2010-04-10 17:18:21 ----A---- C:\Windows\system32\wevtfwd.dll
2010-04-10 17:18:20 ----A---- C:\Windows\system32\WLanConn.dll
2010-04-10 17:18:20 ----A---- C:\Windows\system32\wlancfg.dll
2010-04-10 17:18:20 ----A---- C:\Windows\system32\winrshost.exe
2010-04-10 17:18:20 ----A---- C:\Windows\system32\winrscmd.dll
2010-04-10 17:18:20 ----A---- C:\Windows\system32\winrs.exe
2010-04-10 17:18:20 ----A---- C:\Windows\system32\winrm.vbs
2010-04-10 17:18:20 ----A---- C:\Windows\system32\winnsi.dll
2010-04-10 17:18:20 ----A---- C:\Windows\system32\wininit.exe
2010-04-10 17:18:20 ----A---- C:\Windows\system32\WinFax.dll
2010-04-10 17:18:20 ----A---- C:\Windows\system32\winethc.dll
2010-04-10 17:18:20 ----A---- C:\Windows\system32\wbemcomn.dll
2010-04-10 17:18:20 ----A---- C:\Windows\system32\wbadmin.exe
2010-04-10 17:18:20 ----A---- C:\Windows\system32\wavemsp.dll
2010-04-10 17:18:20 ----A---- C:\Windows\system32\WavDest.dll
2010-04-10 17:18:20 ----A---- C:\Windows\system32\waitfor.exe
2010-04-10 17:18:20 ----A---- C:\Windows\system32\w32tm.exe
2010-04-10 17:18:20 ----A---- C:\Windows\system32\vsstrace.dll
2010-04-10 17:18:20 ----A---- C:\Windows\system32\vssadmin.exe
2010-04-10 17:18:20 ----A---- C:\Windows\system32\vss_ps.dll
2010-04-10 17:18:19 ----A---- C:\Windows\system32\wermgr.exe
2010-04-10 17:18:19 ----A---- C:\Windows\system32\werdiagcontroller.dll
2010-04-10 17:18:19 ----A---- C:\Windows\system32\wercplsupport.dll
2010-04-10 17:18:19 ----A---- C:\Windows\system32\wecutil.exe
2010-04-10 17:18:19 ----A---- C:\Windows\system32\wecsvc.dll
2010-04-10 17:18:19 ----A---- C:\Windows\system32\wecapi.dll
2010-04-10 17:18:18 ----A---- C:\Windows\system32\wdi.dll
2010-04-10 17:18:17 ----A---- C:\Windows\system32\wship6.dll
2010-04-10 17:18:17 ----A---- C:\Windows\system32\wshcon.dll
2010-04-10 17:18:17 ----A---- C:\Windows\system32\wsecedit.dll
2010-04-10 17:18:17 ----A---- C:\Windows\system32\wscproxystub.dll
2010-04-10 17:18:17 ----A---- C:\Windows\system32\wscmisetup.dll
2010-04-10 17:18:17 ----A---- C:\Windows\system32\ws2_32.dll
2010-04-10 17:18:17 ----A---- C:\Windows\system32\wpnpinst.exe
2010-04-10 17:18:17 ----A---- C:\Windows\system32\wpdwcn.dll
2010-04-10 17:18:16 ----A---- C:\Windows\system32\XPSSHHDR.dll
2010-04-10 17:18:16 ----A---- C:\Windows\system32\xolehlp.dll
2010-04-10 17:18:16 ----A---- C:\Windows\system32\xmlprovi.dll
2010-04-10 17:18:16 ----A---- C:\Windows\system32\xmllite.dll
2010-04-10 17:18:16 ----A---- C:\Windows\system32\xcopy.exe
2010-04-10 17:18:16 ----A---- C:\Windows\system32\xactsrv.dll
2010-04-10 17:18:16 ----A---- C:\Windows\system32\wzcdlg.dll
2010-04-10 17:18:16 ----A---- C:\Windows\system32\wvc.dll
2010-04-10 17:18:16 ----A---- C:\Windows\system32\WUDFx.dll
2010-04-10 17:18:16 ----A---- C:\Windows\system32\WUDFSvc.dll
2010-04-10 17:18:16 ----A---- C:\Windows\system32\WUDFPlatform.dll
2010-04-10 17:18:16 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2010-04-10 17:18:16 ----A---- C:\Windows\system32\wsqmcons.exe
2010-04-10 17:18:16 ----A---- C:\Windows\system32\wsock32.dll
2010-04-10 17:18:16 ----A---- C:\Windows\system32\WsmWmiPl.dll
2010-04-10 17:18:16 ----A---- C:\Windows\system32\WsmRes.dll
2010-04-10 17:18:16 ----A---- C:\Windows\system32\WsmProv.dll
2010-04-10 17:18:16 ----A---- C:\Windows\system32\WsmCl.dll
2010-04-10 17:18:16 ----A---- C:\Windows\system32\WsmAuto.dll
2010-04-10 17:18:16 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2010-04-10 17:18:16 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
2010-04-10 17:18:16 ----A---- C:\Windows\system32\WSHTCPIP.DLL
2010-04-10 17:18:15 ----A---- C:\Windows\system32\xwizards.dll
2010-04-10 17:18:15 ----A---- C:\Windows\system32\xpssvcs.dll
2010-04-10 17:18:15 ----A---- C:\Windows\system32\WUDFHost.exe
2010-04-10 17:18:15 ----A---- C:\Windows\system32\wtsapi32.dll
2010-04-10 17:18:15 ----A---- C:\Windows\system32\wmidx.dll
2010-04-10 17:18:14 ----A---- C:\Windows\system32\wmdrmnet.dll
2010-04-10 17:18:14 ----A---- C:\Windows\system32\wmdrmdev.dll
2010-04-10 17:18:14 ----A---- C:\Windows\system32\WMADMOE.DLL
2010-04-10 17:18:14 ----A---- C:\Windows\system32\WMADMOD.DLL
2010-04-10 17:18:14 ----A---- C:\Windows\system32\WlanMmHC.dll
2010-04-10 17:18:14 ----A---- C:\Windows\system32\WlanMM.dll
2010-04-10 17:18:14 ----A---- C:\Windows\system32\WLanHC.dll
2010-04-10 17:18:14 ----A---- C:\Windows\system32\wlanext.exe
2010-04-10 17:18:14 ----A---- C:\Windows\system32\wlandlg.dll
2010-04-10 17:18:13 ----A---- C:\Windows\system32\WMVSENCD.DLL
2010-04-10 17:18:13 ----A---- C:\Windows\system32\wmvdspa.dll
2010-04-10 17:18:13 ----A---- C:\Windows\system32\WMVDECOD.DLL
2010-04-10 17:18:13 ----A---- C:\Windows\system32\WMSPDMOE.DLL
2010-04-10 17:18:13 ----A---- C:\Windows\system32\wmpsrcwp.dll
2010-04-10 17:18:13 ----A---- C:\Windows\system32\wmpshell.dll
2010-04-10 17:18:13 ----A---- C:\Windows\system32\wmiprop.dll
2010-04-10 17:18:13 ----A---- C:\Windows\system32\WMASF.DLL
2010-04-10 17:18:13 ----A---- C:\Windows\system32\WMALFXGFXDSP.dll
2010-04-10 17:18:12 ----A---- C:\Windows\system32\WMPEncEn.dll
2010-04-10 17:18:11 ----A---- C:\Windows\system32\wmpcm.dll
2010-04-10 17:18:11 ----A---- C:\Windows\system32\Tabbtn.dll
2010-04-10 17:18:11 ----A---- C:\Windows\system32\systeminfo.exe
2010-04-10 17:18:09 ----A---- C:\Windows\system32\tdh.dll
2010-04-10 17:18:09 ----A---- C:\Windows\system32\tcpmon.ini
2010-04-10 17:18:09 ----A---- C:\Windows\system32\tbssvc.dll
2010-04-10 17:18:09 ----A---- C:\Windows\system32\tbs.dll
2010-04-10 17:18:09 ----A---- C:\Windows\system32\taskschd.dll
2010-04-10 17:18:09 ----A---- C:\Windows\system32\taskmgr.exe
2010-04-10 17:18:09 ----A---- C:\Windows\system32\tasklist.exe
2010-04-10 17:18:09 ----A---- C:\Windows\system32\taskkill.exe
2010-04-10 17:18:08 ----A---- C:\Windows\system32\TapiMigPlugin.dll
2010-04-10 17:18:08 ----A---- C:\Windows\system32\takeown.exe
2010-04-10 17:18:08 ----A---- C:\Windows\system32\tabcal.exe
2010-04-10 17:18:08 ----A---- C:\Windows\system32\TabbtnEx.dll
2010-04-10 17:18:08 ----A---- C:\Windows\system32\sstpsvc.dll
2010-04-10 17:18:08 ----A---- C:\Windows\system32\SSShim.dll
2010-04-10 17:18:08 ----A---- C:\Windows\system32\ssdpsrv.dll
2010-04-10 17:18:08 ----A---- C:\Windows\system32\srwmi.dll
2010-04-10 17:18:08 ----A---- C:\Windows\system32\srrstr.dll
2010-04-10 17:18:08 ----A---- C:\Windows\system32\srdelayed.exe
2010-04-10 17:18:08 ----A---- C:\Windows\system32\srclient.dll
2010-04-10 17:18:08 ----A---- C:\Windows\system32\sqmapi.dll
2010-04-10 17:18:08 ----A---- C:\Windows\system32\sqlcese30.dll
2010-04-10 17:18:08 ----A---- C:\Windows\system32\sqlceqp30.dll
2010-04-10 17:18:07 ----A---- C:\Windows\system32\syssetup.dll
2010-04-10 17:18:07 ----A---- C:\Windows\system32\syskey.exe
2010-04-10 17:18:07 ----A---- C:\Windows\system32\SysFxUI.dll
2010-04-10 17:18:07 ----A---- C:\Windows\system32\syncui.dll
2010-04-10 17:18:07 ----A---- C:\Windows\system32\synceng.dll
2010-04-10 17:18:07 ----A---- C:\Windows\system32\sxstrace.exe
2010-04-10 17:18:07 ----A---- C:\Windows\system32\sxsstore.dll
2010-04-10 17:18:07 ----A---- C:\Windows\system32\sxs.dll
2010-04-10 17:18:07 ----A---- C:\Windows\system32\sti_ci.dll
2010-04-10 17:18:07 ----A---- C:\Windows\system32\spwizres.dll
2010-04-10 17:18:07 ----A---- C:\Windows\system32\spwizimg.dll
2010-04-10 17:18:07 ----A---- C:\Windows\system32\spwizeng.dll
2010-04-10 17:18:07 ----A---- C:\Windows\system32\sppnp.dll
2010-04-10 17:18:07 ----A---- C:\Windows\system32\spopk.dll
2010-04-10 17:18:07 ----A---- C:\Windows\system32\spbcd.dll
2010-04-10 17:18:07 ----A---- C:\Windows\system32\SoundRecorder.exe
2010-04-10 17:18:06 ----A---- C:\Windows\system32\svchost.exe
2010-04-10 17:18:05 ----A---- C:\Windows\system32\userinit.exe
2010-04-10 17:18:05 ----A---- C:\Windows\system32\usbui.dll
2010-04-10 17:18:05 ----A---- C:\Windows\system32\usbperf.dll
2010-04-10 17:18:05 ----A---- C:\Windows\system32\usbmon.dll
2010-04-10 17:18:04 ----A---- C:\Windows\system32\xwtpw32.dll
2010-04-10 17:18:04 ----A---- C:\Windows\system32\vga64k.dll
2010-04-10 17:18:04 ----A---- C:\Windows\system32\vga256.dll
2010-04-10 17:18:04 ----A---- C:\Windows\system32\vga.dll
2010-04-10 17:18:04 ----A---- C:\Windows\system32\upnphost.dll
2010-04-10 17:18:04 ----A---- C:\Windows\system32\upnpcont.exe
2010-04-10 17:18:04 ----A---- C:\Windows\system32\upnp.dll
2010-04-10 17:18:03 ----A---- C:\Windows\system32\VIDRESZR.DLL
2010-04-10 17:18:03 ----A---- C:\Windows\system32\vfwwdm32.dll
2010-04-10 17:18:03 ----A---- C:\Windows\system32\verifier.exe
2010-04-10 17:18:03 ----A---- C:\Windows\system32\verifier.dll
2010-04-10 17:18:03 ----A---- C:\Windows\system32\VAN.dll

ještě jedno...

sccay · #10 Příspěvek od **sccay** » 29 dub 2010 08:24

2010-04-10 17:18:03 ----A---- C:\Windows\system32\uxtheme.dll
2010-04-10 17:18:03 ----A---- C:\Windows\system32\uudf.dll
2010-04-10 17:18:03 ----A---- C:\Windows\system32\utildll.dll
2010-04-10 17:18:02 ----A---- C:\Windows\system32\vdsldr.exe
2010-04-10 17:18:02 ----A---- C:\Windows\system32\vdsbas.dll
2010-04-10 17:18:02 ----A---- C:\Windows\system32\vds_ps.dll
2010-04-10 17:18:02 ----A---- C:\Windows\system32\vdmredir.dll
2010-04-10 17:18:02 ----A---- C:\Windows\system32\TSpkg.dll
2010-04-10 17:18:02 ----A---- C:\Windows\system32\trkwks.dll
2010-04-10 17:18:02 ----A---- C:\Windows\system32\tracerpt.exe
2010-04-10 17:18:02 ----A---- C:\Windows\system32\TpmInit.exe
2010-04-10 17:18:02 ----A---- C:\Windows\system32\TMM.dll
2010-04-10 17:18:01 ----A---- C:\Windows\system32\unlodctr.exe
2010-04-10 17:18:01 ----A---- C:\Windows\system32\unbcl.dll
2010-04-10 17:18:01 ----A---- C:\Windows\system32\unattendedjoin.exe
2010-04-10 17:18:01 ----A---- C:\Windows\system32\unattend.dll
2010-04-10 17:18:01 ----A---- C:\Windows\system32\umb.dll
2010-04-10 17:18:01 ----A---- C:\Windows\system32\UIHub.dll
2010-04-10 17:18:01 ----A---- C:\Windows\system32\tsddd.dll
2010-04-10 17:18:01 ----A---- C:\Windows\system32\TimeDateMUICallback.dll
2010-04-10 17:18:01 ----A---- C:\Windows\system32\thumbcache.dll
2010-04-10 17:18:01 ----A---- C:\Windows\system32\termmgr.dll
2010-04-10 17:18:00 ----A---- C:\Windows\system32\UI0Detect.exe
2010-04-10 17:18:00 ----A---- C:\Windows\system32\ufat.dll
2010-04-10 17:18:00 ----A---- C:\Windows\system32\uexfat.dll
2010-04-10 17:18:00 ----A---- C:\Windows\system32\ucsvc.exe
2010-04-10 17:18:00 ----A---- C:\Windows\system32\txfw32.dll
2010-04-10 17:18:00 ----A---- C:\Windows\system32\txflog.dll
2010-04-10 17:18:00 ----A---- C:\Windows\system32\twext.dll
2010-04-10 11:31:57 ----A---- C:\Windows\system32\t2embed.dll
2010-04-10 11:31:57 ----A---- C:\Windows\system32\lpk.dll
2010-04-10 11:31:57 ----A---- C:\Windows\system32\fontsub.dll
2010-04-10 11:31:57 ----A---- C:\Windows\system32\dciman32.dll
2010-04-10 11:31:57 ----A---- C:\Windows\system32\atmlib.dll
2010-04-10 11:31:57 ----A---- C:\Windows\system32\atmfd.dll
2010-04-10 11:30:25 ----A---- C:\Windows\system32\winipsec.dll
2010-04-10 11:30:24 ----A---- C:\Windows\system32\polstore.dll
2010-04-10 11:22:23 ----A---- C:\Windows\system32\TCPSVCS.EXE
2010-04-10 11:22:23 ----A---- C:\Windows\system32\netevent.dll
2010-04-10 11:22:23 ----A---- C:\Windows\system32\MRINFO.EXE
2010-04-10 11:22:22 ----A---- C:\Windows\system32\ROUTE.EXE
2010-04-10 11:22:22 ----A---- C:\Windows\system32\NETSTAT.EXE
2010-04-10 11:22:22 ----A---- C:\Windows\system32\netiohlp.dll
2010-04-10 11:22:22 ----A---- C:\Windows\system32\HOSTNAME.EXE
2010-04-10 11:22:22 ----A---- C:\Windows\system32\finger.exe
2010-04-10 11:22:22 ----A---- C:\Windows\system32\ARP.EXE
2010-04-10 11:17:20 ----A---- C:\Windows\system32\L2SecHC.dll
2010-04-10 11:17:19 ----A---- C:\Windows\system32\wlansvc.dll
2010-04-10 11:17:19 ----A---- C:\Windows\system32\wlansec.dll
2010-04-10 11:17:19 ----A---- C:\Windows\system32\wlanmsm.dll
2010-04-10 11:17:19 ----A---- C:\Windows\system32\wlanhlp.dll
2010-04-10 11:17:19 ----A---- C:\Windows\system32\wlanapi.dll
2010-04-10 11:15:40 ----A---- C:\Windows\system32\msxml6.dll
2010-04-10 11:15:40 ----A---- C:\Windows\system32\msxml3.dll
2010-04-10 11:15:39 ----A---- C:\Windows\system32\msxml3r.dll
2010-04-10 11:15:38 ----A---- C:\Windows\system32\msxml6r.dll
2010-04-10 11:14:00 ----A---- C:\Windows\system32\wdigest.dll
2010-04-10 11:14:00 ----A---- C:\Windows\system32\msv1_0.dll
2010-04-10 11:13:59 ----A---- C:\Windows\system32\secur32.dll
2010-04-10 11:13:59 ----A---- C:\Windows\system32\lsass.exe
2010-04-10 11:13:59 ----A---- C:\Windows\system32\lsasrv.dll
2010-04-10 11:11:07 ----A---- C:\Windows\system32\rrinstaller.exe
2010-04-10 11:11:07 ----A---- C:\Windows\system32\mfps.dll
2010-04-10 11:11:07 ----A---- C:\Windows\system32\mferror.dll
2010-04-10 11:11:07 ----A---- C:\Windows\system32\mf.dll
2010-04-10 11:11:06 ----A---- C:\Windows\system32\WMVCORE.DLL
2010-04-10 11:11:06 ----A---- C:\Windows\system32\mfpmp.exe
2010-04-10 11:05:19 ----A---- C:\Windows\system32\atl.dll
2010-04-10 10:56:37 ----A---- C:\Windows\system32\wkssvc.dll
2010-04-10 10:55:07 ----A---- C:\Windows\system32\tsgqec.dll
2010-04-10 10:55:07 ----A---- C:\Windows\system32\mstscax.dll
2010-04-10 10:55:07 ----A---- C:\Windows\system32\aaclient.dll
2010-04-10 10:38:46 ----A---- C:\Windows\system32\tzres.dll
2010-04-10 10:37:12 ----A---- C:\Windows\system32\localspl.dll
2010-04-10 10:28:13 ----A---- C:\Windows\system32\hcrstco.dll
2010-04-10 10:28:13 ----A---- C:\Windows\system32\hccoin.dll
2010-04-10 10:23:45 ----A---- C:\Windows\system32\NlsLexicons0046.dll
2010-04-10 10:23:45 ----A---- C:\Windows\system32\NlsLexicons0045.dll
2010-04-10 10:23:44 ----A---- C:\Windows\system32\NlsLexicons0049.dll
2010-04-10 10:23:44 ----A---- C:\Windows\system32\NlsLexicons0047.dll
2010-04-10 10:23:44 ----A---- C:\Windows\system32\NlsLexicons0039.dll
2010-04-10 10:23:44 ----A---- C:\Windows\system32\NlsLexicons0020.dll
2010-04-10 10:23:43 ----A---- C:\Windows\system32\NlsLexicons0022.dll
2010-04-10 10:23:43 ----A---- C:\Windows\system32\NlsLexicons0021.dll
2010-04-10 10:23:42 ----A---- C:\Windows\system32\NlsLexicons0027.dll
2010-04-10 10:23:42 ----A---- C:\Windows\system32\NlsLexicons0026.dll
2010-04-10 10:23:42 ----A---- C:\Windows\system32\NlsLexicons0024.dll
2010-04-10 10:23:41 ----A---- C:\Windows\system32\NlsLexicons0013.dll
2010-04-10 10:23:41 ----A---- C:\Windows\system32\NlsLexicons0011.dll
2010-04-10 10:23:41 ----A---- C:\Windows\system32\NlsLexicons0010.dll
2010-04-10 10:23:40 ----A---- C:\Windows\system32\NlsLexicons0019.dll
2010-04-10 10:23:40 ----A---- C:\Windows\system32\NlsLexicons0018.dll
2010-04-10 10:23:39 ----A---- C:\Windows\system32\NlsLexicons0003.dll
2010-04-10 10:23:39 ----A---- C:\Windows\system32\NlsLexicons0002.dll
2010-04-10 10:23:39 ----A---- C:\Windows\system32\NlsLexicons0001.dll
2010-04-10 10:23:38 ----A---- C:\Windows\system32\NlsLexicons004a.dll
2010-04-10 10:23:37 ----A---- C:\Windows\system32\NlsLexicons004e.dll
2010-04-10 10:23:37 ----A---- C:\Windows\system32\NlsLexicons004c.dll
2010-04-10 10:23:37 ----A---- C:\Windows\system32\NlsLexicons004b.dll
2010-04-10 10:23:36 ----A---- C:\Windows\system32\NlsLexicons003e.dll
2010-04-10 10:23:36 ----A---- C:\Windows\system32\NlsLexicons002a.dll
2010-04-10 10:23:36 ----A---- C:\Windows\system32\NlsLexicons001a.dll
2010-04-10 10:23:35 ----A---- C:\Windows\system32\NlsLexicons001d.dll
2010-04-10 10:23:35 ----A---- C:\Windows\system32\NlsLexicons001b.dll
2010-04-10 10:23:35 ----A---- C:\Windows\system32\NlsLexicons000a.dll
2010-04-10 10:23:34 ----A---- C:\Windows\system32\NlsLexicons000d.dll
2010-04-10 10:23:34 ----A---- C:\Windows\system32\NlsLexicons000c.dll
2010-04-10 10:23:33 ----A---- C:\Windows\system32\NlsLexicons0414.dll
2010-04-10 10:23:33 ----A---- C:\Windows\system32\NlsLexicons000f.dll
2010-04-10 10:23:32 ----A---- C:\Windows\system32\NlsLexicons081a.dll
2010-04-10 10:23:32 ----A---- C:\Windows\system32\NlsLexicons0816.dll
2010-04-10 10:23:32 ----A---- C:\Windows\system32\NlsLexicons0416.dll
2010-04-10 10:23:31 ----A---- C:\Windows\system32\NlsModels0011.dll
2010-04-10 10:23:31 ----A---- C:\Windows\system32\NlsData0047.dll
2010-04-10 10:23:31 ----A---- C:\Windows\system32\NlsData0046.dll
2010-04-10 10:23:31 ----A---- C:\Windows\system32\NlsData0045.dll
2010-04-10 10:23:30 ----A---- C:\Windows\system32\NlsData0049.dll
2010-04-10 10:23:30 ----A---- C:\Windows\system32\NlsData0039.dll
2010-04-10 10:23:30 ----A---- C:\Windows\system32\NlsData0021.dll
2010-04-10 10:23:30 ----A---- C:\Windows\system32\NlsData0020.dll
2010-04-10 10:23:29 ----A---- C:\Windows\system32\NlsData0027.dll
2010-04-10 10:23:29 ----A---- C:\Windows\system32\NlsData0026.dll
2010-04-10 10:23:29 ----A---- C:\Windows\system32\NlsData0024.dll
2010-04-10 10:23:29 ----A---- C:\Windows\system32\NlsData0022.dll
2010-04-10 10:23:28 ----A---- C:\Windows\system32\NlsData0011.dll
2010-04-10 10:23:28 ----A---- C:\Windows\system32\NlsData0010.dll
2010-04-10 10:23:27 ----A---- C:\Windows\system32\NlsData0019.dll
2010-04-10 10:23:27 ----A---- C:\Windows\system32\NlsData0018.dll
2010-04-10 10:23:27 ----A---- C:\Windows\system32\NlsData0013.dll
2010-04-10 10:23:27 ----A---- C:\Windows\system32\NlsData0000.dll
2010-04-10 10:23:26 ----A---- C:\Windows\system32\NlsData0007.dll
2010-04-10 10:23:26 ----A---- C:\Windows\system32\NlsData0003.dll
2010-04-10 10:23:26 ----A---- C:\Windows\system32\NlsData0002.dll
2010-04-10 10:23:26 ----A---- C:\Windows\system32\NlsData0001.dll
2010-04-10 10:23:25 ----A---- C:\Windows\system32\NlsData004b.dll
2010-04-10 10:23:25 ----A---- C:\Windows\system32\NlsData004a.dll
2010-04-10 10:23:25 ----A---- C:\Windows\system32\NlsData0009.dll
2010-04-10 10:23:24 ----A---- C:\Windows\system32\NlsData004e.dll
2010-04-10 10:23:24 ----A---- C:\Windows\system32\NlsData004c.dll
2010-04-10 10:23:24 ----A---- C:\Windows\system32\NlsData003e.dll
2010-04-10 10:23:23 ----A---- C:\Windows\system32\NlsData002a.dll
2010-04-10 10:23:23 ----A---- C:\Windows\system32\NlsData001d.dll
2010-04-10 10:23:23 ----A---- C:\Windows\system32\NlsData001b.dll
2010-04-10 10:23:23 ----A---- C:\Windows\system32\NlsData001a.dll
2010-04-10 10:23:22 ----A---- C:\Windows\system32\NlsData000d.dll
2010-04-10 10:23:22 ----A---- C:\Windows\system32\NlsData000c.dll
2010-04-10 10:23:22 ----A---- C:\Windows\system32\NlsData000a.dll
2010-04-10 10:23:21 ----A---- C:\Windows\system32\NlsData0414.dll
2010-04-10 10:23:21 ----A---- C:\Windows\system32\NlsData000f.dll
2010-04-10 10:23:20 ----A---- C:\Windows\system32\NlsData081a.dll
2010-04-10 10:23:20 ----A---- C:\Windows\system32\NlsData0816.dll
2010-04-10 10:23:20 ----A---- C:\Windows\system32\NlsData0416.dll
2010-04-10 10:23:19 ----A---- C:\Windows\system32\NlsLexicons0c1a.dll
2010-04-10 10:23:19 ----A---- C:\Windows\system32\NlsData0c1a.dll
2010-04-10 10:19:20 ----A---- C:\Windows\system32\kbd106n.dll
2010-04-10 10:05:37 ----A---- C:\Windows\system32\printcom.dll
2010-04-10 10:02:45 ----A---- C:\Windows\system32\wshrm.dll
2010-04-10 10:01:45 ----A---- C:\Windows\system32\wmpdxm.dll
2010-04-10 10:00:31 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-04-10 10:00:31 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-04-10 10:00:31 ----A---- C:\Windows\system32\secproc_isv.dll
2010-04-10 10:00:31 ----A---- C:\Windows\system32\secproc.dll
2010-04-10 10:00:31 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-04-10 10:00:31 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-04-10 10:00:31 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-04-10 10:00:31 ----A---- C:\Windows\system32\RMActivate.exe
2010-04-10 10:00:31 ----A---- C:\Windows\system32\msdrm.dll
2010-04-10 09:31:06 ----D---- C:\ProgramData\Corel
2010-04-10 09:28:58 ----D---- C:\Program Files\Common Files\InterVideo
2010-04-10 09:28:57 ----D---- C:\Program Files\Common Files\Protexis
2010-04-10 09:27:32 ----D---- C:\Program Files\InterVideo
2010-04-10 09:21:40 ----A---- C:\Windows\system32\netfxperf.dll
2010-04-10 09:09:48 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-04-10 09:09:48 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-04-10 09:09:47 ----A---- C:\Windows\system32\d3dx10.dll
2010-04-10 09:09:46 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-04-10 09:09:45 ----A---- C:\Windows\system32\xinput1_3.dll
2010-04-10 09:09:45 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-04-10 09:09:45 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-04-10 09:09:44 ----A---- C:\Windows\system32\xinput1_2.dll
2010-04-10 09:09:44 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-04-10 09:09:44 ----A---- C:\Windows\system32\xactengine2_2.dll
2010-04-10 09:09:44 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-04-10 09:09:43 ----A---- C:\Windows\system32\xinput1_1.dll
2010-04-10 09:09:42 ----A---- C:\Windows\system32\xactengine2_1.dll
2010-04-10 09:09:28 ----A---- C:\Windows\system32\d3dx9_30.dll
2010-04-10 09:09:27 ----A---- C:\Windows\system32\xactengine2_0.dll
2010-04-10 09:09:27 ----A---- C:\Windows\system32\x3daudio1_0.dll
2010-04-10 09:09:26 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-04-10 09:09:26 ----A---- C:\Windows\system32\d3dx9_28.dll
2010-04-10 09:09:25 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-04-10 09:09:23 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-04-10 09:09:23 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-04-10 09:09:22 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-04-10 09:09:03 ----D---- C:\Logs
2010-04-10 09:07:52 ----D---- C:\ProgramData\Temp
2010-04-10 09:05:21 ----A---- C:\Windows\system32\msasn1.dll
2010-04-10 09:03:53 ----A---- C:\Windows\system32\rpcrt4.dll
2010-04-10 09:03:37 ----D---- C:\Programy
2010-04-10 09:02:55 ----A---- C:\Windows\system32\nshhttp.dll
2010-04-10 09:02:55 ----A---- C:\Windows\system32\httpapi.dll
2010-04-10 09:00:40 ----A---- C:\Windows\system32\rastls.dll
2010-04-10 09:00:12 ----A---- C:\Windows\system32\WSDApi.dll
2010-04-10 08:59:03 ----A---- C:\Windows\system32\msvfw32.dll
2010-04-10 08:59:03 ----A---- C:\Windows\system32\avicap32.dll
2010-04-10 08:59:02 ----A---- C:\Windows\system32\msvidc32.dll
2010-04-10 08:59:02 ----A---- C:\Windows\system32\msrle32.dll
2010-04-10 08:59:02 ----A---- C:\Windows\system32\mciavi32.dll
2010-04-10 08:59:02 ----A---- C:\Windows\system32\avifil32.dll
2010-04-10 08:59:01 ----A---- C:\Windows\system32\tsbyuv.dll
2010-04-10 08:59:01 ----A---- C:\Windows\system32\quartz.dll
2010-04-10 08:59:01 ----A---- C:\Windows\system32\msyuv.dll
2010-04-10 08:59:01 ----A---- C:\Windows\system32\iyuv_32.dll
2010-04-10 08:57:56 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2010-04-10 08:57:21 ----A---- C:\Windows\system32\unregmp2.exe
2010-04-10 08:57:20 ----A---- C:\Windows\system32\wmploc.DLL
2010-04-10 08:57:19 ----A---- C:\Windows\system32\wmp.dll
2010-04-10 08:57:19 ----A---- C:\Windows\system32\spwmp.dll
2010-04-10 08:57:18 ----A---- C:\Windows\system32\dxmasf.dll
2010-04-09 18:01:06 ----A---- C:\Windows\system32\bcmwlrc.dll
2010-04-09 18:01:05 ----A---- C:\Windows\system32\bcmwlcoi.dll
2010-04-09 18:01:05 ----A---- C:\Windows\system32\bcmihvui.dll
2010-04-09 18:01:04 ----A---- C:\Windows\system32\bcmihvsrv.dll
2010-04-09 18:01:03 ----D---- C:\Program Files\Broadcom
2010-04-09 17:33:01 ----D---- C:\ProgramData\ATI
2010-04-09 17:20:30 ----D---- C:\Program Files\ATI Technologies
2010-04-09 17:20:27 ----D---- C:\Program Files\ATI
2010-04-09 16:24:54 ----N---- C:\Windows\system32\MpSigStub.exe
2010-04-09 15:59:51 ----A---- C:\Windows\system32\wups2.dll
2010-04-09 15:59:51 ----A---- C:\Windows\system32\wucltux.dll
2010-04-09 15:59:51 ----A---- C:\Windows\system32\wuaueng.dll
2010-04-09 15:59:51 ----A---- C:\Windows\system32\wuauclt.exe
2010-04-09 15:59:28 ----A---- C:\Windows\system32\wudriver.dll
2010-04-09 15:59:27 ----A---- C:\Windows\system32\wups.dll
2010-04-09 15:59:27 ----A---- C:\Windows\system32\wuapi.dll
2010-04-09 15:59:08 ----A---- C:\Windows\system32\wuwebv.dll
2010-04-09 15:59:08 ----A---- C:\Windows\system32\wuapp.exe
2010-04-09 13:01:01 ----D---- C:\zaloha-Marinicova
2010-04-09 10:23:43 ----RA---- C:\Windows\system32\msvcr70.dll
2010-04-09 10:23:03 ----D---- C:\Program Files\Fingerprint Sensor
2010-04-09 10:22:44 ----D---- C:\Program Files\HPQ
2010-04-09 10:22:30 ----D---- C:\Program Files\Common Files\ActivIdentity
2010-04-09 10:22:30 ----D---- C:\Program Files\ActivIdentity
2010-04-09 10:20:29 ----N---- C:\Windows\system32\agrsmdel.exe
2010-04-09 10:20:29 ----N---- C:\Windows\system32\agrsco64.dll
2010-04-09 10:20:24 ----D---- C:\Program Files\LSI SoftModem
2010-04-09 10:20:04 ----D---- C:\Windows\Options
2010-04-09 10:18:56 ----D---- C:\SWSetup
2010-04-09 10:18:44 ----D---- C:\Windows\HPQ
2010-04-09 10:17:54 ----D---- C:\Program Files\Synaptics
2010-04-09 10:17:15 ----A---- C:\Windows\system32\SynTPCo4.dll
2010-04-09 10:17:15 ----A---- C:\Windows\system32\SynTPAPI.dll
2010-04-09 10:17:15 ----A---- C:\Windows\system32\SynCtrl.dll
2010-04-09 10:17:14 ----A---- C:\Windows\system32\WdfCoInstaller01007.dll
2010-04-09 10:17:14 ----A---- C:\Windows\system32\SynCOM.dll
2010-04-09 10:17:06 ----D---- C:\Program Files\RotateImage
2010-04-09 10:17:06 ----D---- C:\5U876
2010-04-09 10:16:58 ----A---- C:\Windows\system32\5U876.dll
2010-04-09 10:16:26 ----DC---- C:\Windows\system32\DRVSTORE
2010-04-09 10:15:15 ----A---- C:\Windows\system32\PostProc.dll
2010-04-09 10:15:07 ----A---- C:\Windows\system32\wdmioctl.dll
2010-04-09 10:15:06 ----A---- C:\Windows\system32\SMMedia.dll
2010-04-09 10:15:05 ----D---- C:\Program Files\Analog Devices
2010-04-09 10:13:27 ----SHD---- C:\Windows\Installer
2010-04-09 10:12:52 ----A---- C:\Windows\system32\BttnCmn.dll
2010-04-09 10:12:51 ----A---- C:\Windows\system32\BttnCmns.dll
2010-04-09 10:12:21 ----D---- C:\Program Files\Hewlett-Packard
2010-04-09 10:12:20 ----HD---- C:\Program Files\InstallShield Installation Information
2010-04-09 10:12:18 ----D---- C:\Program Files\Common Files\InstallShield
2010-04-09 10:11:28 ----D---- C:\SYSTEM.SAV
2010-04-08 17:40:44 ----D---- C:\Windows\Panther
2010-04-08 17:40:30 ----RAS---- C:\BOOTSECT.BAK
2010-04-08 17:40:28 ----D---- C:\Boot
2010-04-08 17:33:16 ----D---- C:\Windows\ConfigSetRoot
2010-04-08 16:48:45 ----SHD---- C:\ProgramData\Šablony
2010-04-08 16:48:45 ----SHD---- C:\ProgramData\Plocha
2010-04-08 16:48:45 ----SHD---- C:\ProgramData\Oblíbené položky
2010-04-08 16:48:45 ----SHD---- C:\ProgramData\Nabídka Start
2010-04-08 16:48:45 ----SHD---- C:\ProgramData\Dokumenty
2010-04-08 16:48:45 ----SHD---- C:\ProgramData\Data aplikací
2010-04-08 16:45:04 ----D---- C:\Windows\SoftwareDistribution
2010-04-08 16:43:28 ----D---- C:\Windows\system32\catroot2
2010-04-08 16:43:15 ----D---- C:\Windows\Debug
2010-04-08 16:43:15 ----D---- C:\Windows\CSC
2010-04-08 16:41:32 ----D---- C:\Windows\Prefetch
2010-04-08 16:41:21 ----SHD---- C:\System Volume Information

======List of files/folders modified in the last 1 months======

2010-04-29 09:11:27 ----D---- C:\Windows\Temp
2010-04-29 08:54:40 ----D---- C:\Windows\System32
2010-04-29 08:54:40 ----D---- C:\Windows\inf
2010-04-29 08:54:40 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-04-28 22:15:46 ----D---- C:\Windows\system32\drivers
2010-04-28 22:15:43 ----RD---- C:\Program Files
2010-04-28 22:15:43 ----D---- C:\ProgramData
2010-04-28 12:52:49 ----RSD---- C:\Windows\Fonts
2010-04-28 12:46:47 ----D---- C:\Windows\winsxs
2010-04-28 11:34:24 ----D---- C:\Windows\Microsoft.NET
2010-04-28 11:33:35 ----RSD---- C:\Windows\assembly
2010-04-28 11:08:53 ----D---- C:\Windows
2010-04-28 09:56:36 ----D---- C:\Windows\Logs
2010-04-28 09:52:38 ----SD---- C:\ProgramData\Microsoft
2010-04-28 09:49:56 ----D---- C:\Program Files\Common Files\microsoft shared
2010-04-28 09:26:12 ----D---- C:\Program Files\Common Files
2010-04-28 09:15:12 ----D---- C:\Windows\system32\catroot
2010-04-27 22:34:08 ----D---- C:\Windows\system32\Tasks
2010-04-26 17:27:56 ----D---- C:\Windows\Tasks
2010-04-25 18:51:06 ----SD---- C:\Windows\Downloaded Program Files
2010-04-21 11:46:20 ----A---- C:\Windows\system.ini
2010-04-21 11:40:30 ----D---- C:\Windows\AppPatch
2010-04-20 10:36:55 ----D---- C:\Windows\system32\WDI
2010-04-15 16:00:29 ----D---- C:\Program Files\Windows Mail
2010-04-15 05:11:32 ----D---- C:\Windows\system32\config
2010-04-15 02:23:22 ----RD---- C:\Users
2010-04-15 01:17:02 ----HD---- C:\Windows\system32\GroupPolicy
2010-04-14 00:18:35 ----D---- C:\Windows\Speech
2010-04-14 00:18:34 ----D---- C:\Windows\MSAgent
2010-04-13 19:22:13 ----RSD---- C:\Windows\Media
2010-04-13 19:22:08 ----D---- C:\Windows\twain_32
2010-04-11 22:59:02 ----D---- C:\Windows\system32\NDF
2010-04-11 20:52:04 ----D---- C:\Windows\system32\LogFiles
2010-04-11 19:54:41 ----D---- C:\Windows\ShellNew
2010-04-11 17:05:59 ----D---- C:\Windows\rescache
2010-04-11 12:25:38 ----D---- C:\Windows\system32\cs-CZ
2010-04-11 12:00:00 ----D---- C:\Windows\system32\wbem
2010-04-11 10:12:21 ----D---- C:\Windows\system32\migration
2010-04-11 10:12:21 ----D---- C:\Program Files\Internet Explorer
2010-04-11 10:12:12 ----D---- C:\Windows\system32\en-US
2010-04-11 10:12:12 ----D---- C:\Windows\PolicyDefinitions
2010-04-11 08:59:20 ----D---- C:\Windows\system32\zh-TW
2010-04-11 08:59:20 ----D---- C:\Windows\system32\zh-HK
2010-04-11 08:59:20 ----D---- C:\Windows\system32\zh-CN
2010-04-11 08:59:20 ----D---- C:\Windows\system32\uk-UA
2010-04-11 08:59:20 ----D---- C:\Windows\system32\tr-TR
2010-04-11 08:59:20 ----D---- C:\Windows\system32\th-TH
2010-04-11 08:59:20 ----D---- C:\Windows\system32\sv-SE
2010-04-11 08:59:20 ----D---- C:\Windows\system32\sr-Latn-CS
2010-04-11 08:59:20 ----D---- C:\Windows\system32\sl-SI
2010-04-11 08:59:20 ----D---- C:\Windows\system32\sk-SK
2010-04-11 08:59:20 ----D---- C:\Windows\system32\ru-RU
2010-04-11 08:59:20 ----D---- C:\Windows\system32\ro-RO
2010-04-11 08:59:20 ----D---- C:\Windows\system32\pt-PT
2010-04-11 08:59:20 ----D---- C:\Windows\system32\pt-BR
2010-04-11 08:59:20 ----D---- C:\Windows\system32\pl-PL
2010-04-11 08:59:20 ----D---- C:\Windows\system32\nl-NL
2010-04-11 08:59:20 ----D---- C:\Windows\system32\nb-NO
2010-04-11 08:59:20 ----D---- C:\Windows\system32\lv-LV
2010-04-11 08:59:20 ----D---- C:\Windows\system32\lt-LT
2010-04-11 08:59:20 ----D---- C:\Windows\system32\ko-KR
2010-04-11 08:59:20 ----D---- C:\Windows\system32\ja-JP
2010-04-11 08:59:20 ----D---- C:\Windows\system32\it-IT
2010-04-11 08:59:20 ----D---- C:\Windows\system32\hu-HU
2010-04-11 08:59:20 ----D---- C:\Windows\system32\hr-HR
2010-04-11 08:59:20 ----D---- C:\Windows\system32\he-IL
2010-04-11 08:59:20 ----D---- C:\Windows\system32\fr-FR
2010-04-11 08:59:20 ----D---- C:\Windows\system32\fi-FI
2010-04-11 08:59:20 ----D---- C:\Windows\system32\et-EE
2010-04-11 08:59:20 ----D---- C:\Windows\system32\es-ES
2010-04-11 08:59:20 ----D---- C:\Windows\system32\el-GR
2010-04-11 08:59:20 ----D---- C:\Windows\system32\de-DE
2010-04-11 08:59:20 ----D---- C:\Windows\system32\da-DK
2010-04-11 08:59:20 ----D---- C:\Windows\system32\bg-BG
2010-04-11 08:59:20 ----D---- C:\Windows\system32\ar-SA
2010-04-10 18:55:34 ----D---- C:\Program Files\Windows Sidebar
2010-04-10 18:55:34 ----D---- C:\Program Files\Windows Photo Gallery
2010-04-10 18:55:34 ----D---- C:\Program Files\Windows Media Player
2010-04-10 18:55:34 ----D---- C:\Program Files\Windows Journal
2010-04-10 18:55:34 ----D---- C:\Program Files\Windows Collaboration
2010-04-10 18:55:34 ----D---- C:\Program Files\Windows Calendar
2010-04-10 18:55:34 ----D---- C:\Program Files\Movie Maker
2010-04-10 18:55:34 ----D---- C:\Program Files\Common Files\System
2010-04-10 18:55:33 ----D---- C:\Windows\servicing
2010-04-10 18:55:33 ----D---- C:\Program Files\Windows Defender
2010-04-10 18:55:29 ----D---- C:\Windows\IME
2010-04-10 18:55:28 ----D---- C:\Windows\system32\XPSViewer
2010-04-10 18:55:27 ----D---- C:\Windows\system32\oobe
2010-04-10 18:55:26 ----D---- C:\Windows\system32\setup
2010-04-10 18:55:26 ----D---- C:\Windows\system32\cs
2010-04-10 18:55:26 ----D---- C:\Windows\system32\AdvancedInstallers
2010-04-10 18:55:24 ----D---- C:\Windows\system32\SLUI
2010-04-10 18:55:23 ----D---- C:\Windows\system32\manifeststore
2010-04-10 18:55:19 ----D---- C:\Windows\system32\migwiz
2010-04-10 18:54:52 ----D---- C:\Windows\system32\Boot
2010-04-10 18:16:44 ----ASH---- C:\Program Files\desktop.ini
2010-04-10 18:08:03 ----D---- C:\Windows\L2Schemas
2010-04-10 18:08:03 ----D---- C:\Windows\DigitalLocker
2010-04-10 18:08:01 ----D---- C:\Windows\system32\sysprep
2010-04-10 18:08:01 ----D---- C:\Windows\system32\com
2010-04-10 18:07:56 ----D---- C:\Windows\system32\ias
2010-04-10 18:07:17 ----D---- C:\Windows\Boot
2010-04-10 17:56:57 ----A---- C:\Windows\system32\ifxcardm.dll
2010-04-10 17:56:51 ----A---- C:\Windows\system32\axaltocm.dll
2010-04-10 11:35:45 ----D---- C:\Windows\system32\ras
2010-04-10 11:35:45 ----D---- C:\Windows\system32\icsxml
2010-04-09 10:24:31 ----SD---- C:\Windows\system32\Microsoft
2010-04-09 10:12:40 ----D---- C:\Windows\system32\restore
2010-04-08 16:57:16 ----D---- C:\Windows\system32\CodeIntegrity
2010-04-08 16:48:45 ----D---- C:\Program Files\Windows NT
2010-04-06 19:52:54 ----A---- C:\Windows\system32\mrt.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2010-04-14 23376]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2010-04-14 162768]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2010-04-14 46672]
R1 CSC;Offline Files Driver; C:\Windows\system32\drivers\csc.sys [2009-04-10 351744]
R1 RsvLock;RsvLock; C:\Windows\system32\drivers\RsvLock.sys [2008-10-01 12528]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2010-04-14 19024]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2010-04-14 51792]
R2 regi;regi; C:\Windows\system32\drivers\regi.sys [2007-04-17 11032]
R3 5U876UVC;HP Webcam [2 MP series]; C:\Windows\system32\DRIVERS\5U876.sys [2009-03-19 118656]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\ADIHdAud.sys [2009-05-18 381440]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2008-11-21 1204128]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2009-08-23 101904]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-30 4994560]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl6.sys [2010-04-09 2707448]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-10 22528]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-18 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-04-10 29696]
R3 CmBatt;Ovladač baterie Microsoft ACPI Control Method Battery; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-18 14208]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2007-06-18 16768]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-10 148992]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-02-06 205232]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-18 11264]
R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2008-11-24 310272]
S3 AEAudio;AE Audio Service; C:\Windows\system32\drivers\AEAudio.sys [2007-07-13 94976]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-04-10 507904]
S3 catchme;catchme; \??\C:\Users\Sarka\AppData\Local\Temp\catchme.sys []
S3 dlttape;dlttape; C:\Windows\system32\DRIVERS\dlttape.sys [2008-01-18 10240]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-18 5632]
S3 esihdrv;esihdrv; \??\C:\Users\Sarka\AppData\Local\Temp\esihdrv.sys []
S3 F-Secure Standalone Minifilter;F-Secure Standalone Minifilter; \??\C:\Users\Sarka\AppData\Local\Temp\{8128BB6F-A26B-4E67-B688-EF203D7FBF8E}\fsgk.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2009-08-05 54632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-18 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-18 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-18 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-18 6016]
S3 UIUSys;Conexant Setup API; C:\Windows\system32\DRIVERS\UIUSYS.SYS []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-18 35328]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2006-11-02 132352]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-18 83328]
S4 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-04-14 691696]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 accoca;ActivClient Middleware Service; C:\Program Files\ActivIdentity\ActivClient\accoca.exe [2007-11-27 185896]
R2 AEADIFilters;Andrea ADI Filters Service; C:\Windows\system32\AEADISRV.EXE [2008-07-15 90112]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Windows\system32\agrsmsvc.exe [2006-12-13 9216]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-07-29 176128]
R2 ASBroker;Logon Session Broker; C:\Windows\System32\svchost.exe [2008-01-18 21504]
R2 ASChannel;Local Communication Channel; C:\Windows\System32\svchost.exe [2008-01-18 21504]
R2 ATService;AuthenTec Fingerprint Service; C:\Program Files\Fingerprint Sensor\AtService.exe [2008-10-03 1185016]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-04-14 40384]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-18 21504]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2008-01-18 21504]
R2 HpFkCryptService;Drive Encryption Service; C:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [2008-10-01 256544]
R2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2009-02-10 116104]
R2 IviRegMgr;IviRegMgr; C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-04 112152]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2010-03-19 73728]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files\PDF Complete\pdfsvc.exe [2010-01-12 635416]
R2 PSI_SVC_2;Protexis Licensing V2; C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [2007-07-24 185632]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-04-14 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-04-14 40384]
R3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2008-12-04 222512]
R3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2008-10-21 228656]
S2 gupdate1cad948b7ae6df;Google Update Service (gupdate1cad948b7ae6df); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-11 133104]
S2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe []
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2008-01-18 21504]
S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; C:\Windows\system32\fxssvc.exe [2008-01-18 523776]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-18 21504]
S3 fsssvc;Služba Windows Live Zabezpečení rodiny; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-08-05 704864]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-04-20 182768]
S3 HP ProtectTools Service;HP ProtectTools Service; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTChangeFilterService.exe []
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2008-01-18 21504]
S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; C:\Windows\system32\wbengine.exe [2009-04-10 918528]

-----------------EOF-----------------

Konec.
Konec.

Unlimited_Killer

0K, pokračujeme. ↓

1) OTMoveit3

Stáhněte OTM3 na Plochu.
Spusťte ho dvojklikem na OTM.exe, pokud to nepůjde, zkuste to s adminskými právy.

Do levého okna 'Paste Instructions for Items to be Moved' vkopírujte následující skript:

Kód: Vybrat vše

:processes
explorer.exe
jusched.exe

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{E59EB121-F339-4851-A3BA-FE49C35617C2}]
[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\{E59EB121-F339-4851-A3BA-FE49C35617C2}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=-
"Adobe Reader Speed Launcher"=-
"WatchDog"=-
"SunJavaUpdateSched"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"WindowsWelcomeCenter"=-
"swg"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

:files
C:\WINDOWS\system32\*.tmp.dll /s
C:\WINDOWS\system32\SET*.tmp /s
C:\WINDOWS\*.tmp /s
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3987649566-1707141335-1680143065-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3987649566-1707141335-1680143065-1000UA.job

:commands
[emptytemp]
[emptyflash]
[reboot]

Poté klikněte na červené tlačítko 'MoveIt!'.
V zeleném okně vpravo by se měl zobrazit log, ten vkopírujete sem do fóra.
Pokud se zobrazí hláška k restartování, klikněte na 'Yes'.
Po restartu se log otevře sám, nebo ho najdete v C:\_OTM\MovedFiles

2) VirusTotal

Otestujte na VirusTotal soubory:
Kód: Vybrat vše
```
C:\Program Files\RotateImage\RCIMGDIR.exe
```
Jednoduše tam vkopírujete cesty, co jsem napsal do code.
Jestliže Vám to napíše, že soubor byl již testován, nechte ho otestovat znovu.
Poté sem vložíte linky (odkazy) na jednotlivé testy.

3) AVPTool

Použijte AVPTool.
Podle návodu v odkaze (o řádek výše) nainstalujte a proveďte sken.
Co najde, nechte léčit, nebo smazat.
Sken může trvat i několik hodin.
Poté jsem vložte log s výsledky (ve formě textu).

sccay · #12 Příspěvek od **sccay** » 03 kvě 2010 13:53

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
No active process named jusched.exe was found!
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{E59EB121-F339-4851-A3BA-FE49C35617C2}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E59EB121-F339-4851-A3BA-FE49C35617C2}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\{E59EB121-F339-4851-A3BA-FE49C35617C2}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E59EB121-F339-4851-A3BA-FE49C35617C2}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\WatchDog deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\WindowsWelcomeCenter deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\swg deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{AEB6717E-7E19-11d0-97EE-00C04FD91972} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AEB6717E-7E19-11d0-97EE-00C04FD91972}\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart\ deleted successfully.
========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.

sccay · #13 Příspěvek od **sccay** » 03 kvě 2010 14:04

Pardón znovu:

All processes killed
Error: Unable to interpret <C:\WINDOWS\*.tmp /s> in the current context!
Error: Unable to interpret <C:\Windows\tasks\GoogleUpdateTaskMachineCore.job> in the current context!
Error: Unable to interpret <C:\Windows\tasks\GoogleUpdateTaskMachineUA.job> in the current context!
Error: Unable to interpret <C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3987649566-1707141335-1680143065-1000Core.job> in the current context!
Error: Unable to interpret <C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3987649566-1707141335-1680143065-1000UA.job> in the current context!
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 371200 bytes
->Temporary Internet Files folder emptied: 6630099 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 434 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public
->Temp folder emptied: 0 bytes

User: Sarka
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 999 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1236 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
%systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 666 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 7,00 mb

OTM by OldTimer - Version 3.1.11.0 log created on 05032010_145657

Files moved on Reboot...
File C:\Users\Administrator\AppData\Local\Temp\~DF386C.tmp not found!
File C:\Users\Administrator\AppData\Local\Temp\~DF3885.tmp not found!
File C:\Users\Administrator\AppData\Local\Temp\~DF3BC2.tmp not found!
File C:\Users\Administrator\AppData\Local\Temp\~DF3CFE.tmp not found!
File C:\Users\Administrator\AppData\Local\Temp\~DF4107.tmp not found!
File C:\Users\Administrator\AppData\Local\Temp\~DF4111.tmp not found!
File C:\Users\Administrator\AppData\Local\Temp\~DF4C2B.tmp not found!
File C:\Users\Administrator\AppData\Local\Temp\~DF4C35.tmp not found!
File C:\Users\Administrator\AppData\Local\Temp\~DFCC3F.tmp not found!
File C:\Users\Administrator\AppData\Local\Temp\~DFCC73.tmp not found!
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\SuggestedSites.dat moved successfully.
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L23JX2ND\ads[2].htm moved successfully.
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L23JX2ND\framesetScreen[1].htm moved successfully.
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9GHTP6BM\emptyScreen[1].htm moved successfully.
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9GHTP6BM\signin[1].htm moved successfully.
File C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1PHPEPJH\afr[1].htm not found!
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1PHPEPJH\readMessageScreen[1].htm moved successfully.
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1PHPEPJH\sh16[1].html moved successfully.
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully.
File C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L23JX2ND\WORD_LOOKUP_DIALOG[1] not found!
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9GHTP6BM\afr[1].htm moved successfully.
File move failed. C:\Windows\temp\_avast5_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

sccay · #14 Příspěvek od **sccay** » 03 kvě 2010 14:14

a-squared 4.5.0.50 2010.05.03 -
AhnLab-V3 2010.05.03.00 2010.05.03 -
AntiVir 8.2.1.224 2010.05.03 -
Antiy-AVL 2.0.3.7 2010.04.30 -
Authentium 5.2.0.5 2010.05.03 -
Avast 4.8.1351.0 2010.05.03 -
Avast5 5.0.332.0 2010.05.03 -
AVG 9.0.0.787 2010.05.03 -
BitDefender 7.2 2010.05.03 -
CAT-QuickHeal 10.00 2010.05.03 -
ClamAV 0.96.0.3-git 2010.05.03 -
Comodo 4748 2010.05.03 -
DrWeb 5.0.2.03300 2010.05.03 -
eSafe 7.0.17.0 2010.05.02 -
eTrust-Vet 35.2.7465 2010.05.03 -
F-Prot 4.5.1.85 2010.05.03 -
F-Secure 9.0.15370.0 2010.05.03 -
Fortinet 4.0.14.0 2010.05.03 -
GData 21 2010.05.03 -
Ikarus T3.1.1.80.0 2010.05.03 -
Jiangmin 13.0.900 2010.05.03 -
Kaspersky 7.0.0.125 2010.05.03 -
McAfee 5.400.0.1158 2010.05.03 -
McAfee-GW-Edition 6.8.5 2010.05.03 -
Microsoft 1.5703 2010.05.03 -
NOD32 5081 2010.05.03 -
Norman 6.04.12 2010.05.03 -
nProtect 2010-05-03.01 2010.05.03 -
Panda 10.0.2.7 2010.05.02 -
PCTools 7.0.3.5 2010.05.03 -
Prevx 3.0 2010.05.03 -
Rising 22.45.04.03 2010.04.30 -
Sophos 4.53.0 2010.05.03 -
Sunbelt 6250 2010.05.02 -
Symantec 20091.2.0.41 2010.05.03 -
TheHacker 6.5.2.0.275 2010.05.02 -
TrendMicro 9.120.0.1004 2010.05.03 -
TrendMicro-HouseCall 9.120.0.1004 2010.05.03 -
VBA32 3.12.12.4 2010.05.03 -
ViRobot 2010.5.3.2301 2010.05.03 -
VirusBuster 5.0.27.0 2010.05.02 -
Rozšiřující informace
File size: 31744 bytes
MD5...: dc9c9c409d096f8280546f010a8392a5
SHA1..: faa9f63b7fcd3d8bc3c1d1017d920d376ff52720
SHA256: 58fbfa6a9890be681a35e57089f711ab1c0ccd2b0c59f601df71d0e2fffd7327
ssdeep: 768:UZhgftblqVxjTzkkOzPyqo+8QQ6AfVElG:UZhgftsVRH+9L86PlG

PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x1fe0
timedatestamp.....: 0x490952f6 (Thu Oct 30 06:23:50 2008)
machinetype.......: 0x14c (I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x57f2 0x5800 6.62 f691e56943103eacd0aa08a668cea8af
.rdata 0x7000 0x167c 0x1800 4.80 cf819e6d1a69ef04c69c7358af192d62
.data 0x9000 0xa98 0x400 2.25 c59e6e557ba26fc072159cc757ad441a
.rsrc 0xa000 0x3f0 0x400 3.23 6d51fffd49f5d161082f38af77838b20

( 3 imports )
> KERNEL32.dll: CloseHandle, WaitForSingleObject, OpenProcess, CreateFileA, ReleaseMutex, DeviceIoControl, VirtualProtect, GetLocaleInfoA, GetStringTypeW, GetStringTypeA, LCMapStringW, MultiByteToWideChar, LCMapStringA, HeapSize, GetCPInfo, GetOEMCP, GetACP, HeapReAlloc, VirtualAlloc, IsBadCodePtr, IsBadWritePtr, IsBadReadPtr, SetUnhandledExceptionFilter, VirtualQuery, InterlockedExchange, ExitProcess, RtlUnwind, GetModuleHandleA, GetStartupInfoA, GetCommandLineA, GetVersionExA, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, GetModuleFileNameA, HeapAlloc, HeapFree, GetProcAddress, TerminateProcess, GetCurrentProcess, WriteFile, GetStdHandle, UnhandledExceptionFilter, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, WideCharToMultiByte, GetLastError, GetEnvironmentStringsW, SetHandleCount, GetFileType, HeapDestroy, HeapCreate, VirtualFree, LoadLibraryA, GetSystemInfo
> USER32.dll: EnumDisplaySettingsExA, PostQuitMessage, RegisterClassExA, CreateWindowExA, ShowWindow, FindWindowA, GetWindowThreadProcessId, SendMessageA, GetMessageA, TranslateMessage, DispatchMessageA, DefWindowProcA
> SETUPAPI.dll: SetupDiGetClassDevsA, SetupDiEnumDeviceInfo, SetupDiGetDeviceRegistryPropertyA, SetupDiEnumDeviceInterfaces, SetupDiGetDeviceInterfaceDetailA, SetupDiDestroyDeviceInfoList

( 0 exports )

RDS...: NSRL Reference Data Set
-
pdfid.: -
trid..: Win64 Executable Generic (59.6%)
Win32 Executable MS Visual C++ (generic) (26.2%)
Win32 Executable Generic (5.9%)
Win32 Dynamic Link Library (generic) (5.2%)
Generic Win/DOS Executable (1.3%)
sigcheck:
publisher....: Ricoh co.,Ltd.
copyright....: Copyright (C) 2008 Ricoh co.,Ltd.
product......: RCIMGDIR
description..: RCIMGDIR
original name: RCIMGDIR.exe
internal name: RCIMGDIR
file version.: 1, 1, 0, 0
comments.....: Ricoh UVC device display direction controller
signers......: -
signing date.: -
verified.....: Unsigned

sccay · #15 Příspěvek od **sccay** » 03 kvě 2010 16:02

Autoscan: completed 5 minutes ago (events: 3, objects: 372987, time: 01:25:43)
3.5.2010 15:31:00 Task started
3.5.2010 16:00:11 Detected: HEUR:Trojan.Win32.Generic C:\Programy\Ochrana pocitace\AVG\ZafiB.exe
3.5.2010 16:56:43 Task completed

VIRY.CZ

Prosím o pomoc s virem HKLM/.....Pugi.PugiObj

Prosím o pomoc s virem HKLM/.....Pugi.PugiObj

Re: Prosím o pomoc s virem HKLM/.....Pugi.PugiObj

Re: Prosím o pomoc s virem HKLM/.....Pugi.PugiObj

Re: Prosím o pomoc s virem HKLM/.....Pugi.PugiObj

Re: Prosím o pomoc s virem HKLM/.....Pugi.PugiObj

Re: Prosím o pomoc s virem HKLM/.....Pugi.PugiObj

Re: Prosím o pomoc s virem HKLM/.....Pugi.PugiObj

Re: Prosím o pomoc s virem HKLM/.....Pugi.PugiObj

Re: Prosím o pomoc s virem HKLM/.....Pugi.PugiObj

Re: Prosím o pomoc s virem HKLM/.....Pugi.PugiObj

Re: Prosím o pomoc s virem HKLM/.....Pugi.PugiObj

Re: Prosím o pomoc s virem HKLM/.....Pugi.PugiObj

Re: Prosím o pomoc s virem HKLM/.....Pugi.PugiObj

Re: Prosím o pomoc s virem HKLM/.....Pugi.PugiObj

Re: Prosím o pomoc s virem HKLM/.....Pugi.PugiObj