Logfile of random's system information tool 1.07 (written by random/random)
Run by Sarka at 2010-05-06 19:15:28
Microsoft® Windows Vista™ Business Service Pack 2
System drive C: has 173 GB (76%) free of 227 GB
Total RAM: 1788 MB (35% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:16:06, on 6.5.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18904)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Hewlett-Packard\IAM\Bin\AsGHost.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe
C:\Program Files\RotateImage\RCIMGDIR.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\ActivIdentity\ActivClient\acevents.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe
C:\Program Files\RotateImage\RCIMGDIR.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\FileHippo.com\UpdateChecker.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10e.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Sarka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8WHCRG2M\RSIT[1].exe
C:\Program Files\trend micro\Sarka.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Credential Manager for HP ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: Cooliris Plug-In for Internet Explorer - {EAEE5C74-6D0D-4aca-9232-0DA4A7B866BA} - C:\Program Files\PicLensIE\cooliris.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [HPCam_Menu] "C:\Program Files\Hewlett-Packard\HP Webcam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Hewlett-Packard\HP Webcam" UpdateWithCreateOnce "Software\CyberLink\HP Webcam\1.0"
O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe C:\PROGRA~1\HEWLET~1\IAM\Bin\ASTSVCC.dll,RegisterModule
O4 - HKLM\..\Run: [accrdsub] "C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe"
O4 - HKLM\..\Run: [RotateImage] C:\Program Files\RotateImage\RCIMGDIR.exe
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [PDF Complete] C:\Program Files\PDF Complete\pdfsty.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [FileHippo.com] "C:\Program Files\FileHippo.com\UpdateChecker.exe" /background
O4 - HKUS\S-1-5-21-3987649566-1707141335-1680143065-500\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'Administrator')
O4 - HKUS\S-1-5-21-3987649566-1707141335-1680143065-500\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (User 'Administrator')
O4 - HKUS\S-1-5-21-3987649566-1707141335-1680143065-500\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Administrator')
O4 - HKUS\S-1-5-21-3987649566-1707141335-1680143065-500\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" (User 'Administrator')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_93C8148BBB233F43.dll/cmsidewiki.html
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Launch Cooliris - {3437D640-C91A-458f-89F5-B9095EA4C28B} - C:\Program Files\PicLensIE\cooliris.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) -
http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} -
http://89.203.196.254/activex/AMC.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\System32\APSHook.dll C:\Windows\System32\APSHook.dll C:\Windows\System32\APSHook.dll C:\Windows\System32\APSHook.dll C:\Windows\System32\APSHook.dll APSHook.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: ActivClient Middleware Service (accoca) - ActivIdentity - C:\Program Files\ActivIdentity\ActivClient\accoca.exe
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\Windows\system32\AEADISRV.EXE
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: AuthenTec Fingerprint Service (ATService) - AuthenTec, Inc. - C:\Program Files\Fingerprint Sensor\AtService.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: Google Update Service (gupdate1cad948b7ae6df) (gupdate1cad948b7ae6df) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP ProtectTools Service - Unknown owner - C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTChangeFilterService.exe (file missing)
O23 - Service: Drive Encryption Service (HpFkCryptService) - SafeBoot International - C:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Unknown owner - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe (file missing)
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files\PDF Complete\pdfsvc.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
--
End of file - 11725 bytes
======Scheduled tasks folder======
C:\Windows\tasks\User_Feed_Synchronization-{20DDDD87-350C-449B-9117-81E856FB6FFC}.job
C:\Windows\tasks\User_Feed_Synchronization-{426702C2-FE3D-4107-9CB3-A0035737EF17}.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2009-11-25 202080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-04-20 278128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll [2010-04-20 812528]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-27 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DF21F1DB-80C6-11D3-9483-B03D0EC10000}]
Credential Manager for HP ProtectTools - C:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll [2009-01-28 98064]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EAEE5C74-6D0D-4aca-9232-0DA4A7B866BA}]
C:\Program Files\PicLensIE\cooliris.dll [2010-02-25 4655064]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2009-11-25 1496408]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-04-20 278128]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-18 1008184]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-02-06 1430824]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-07-29 98304]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2009-03-18 767312]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-07-27 1983816]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2009-05-18 1314816]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-04-14 2790472]
"HPCam_Menu"=C:\Program Files\Hewlett-Packard\HP Webcam\MUITransfer\MUIStartMenu.exe [2009-02-25 218408]
"CognizanceTS"=C:\PROGRA~1\HEWLET~1\IAM\Bin\ASTSVCC.dll [2009-01-28 24848]
"accrdsub"=C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe [2007-11-27 298536]
"RotateImage"=C:\Program Files\RotateImage\RCIMGDIR.exe [2008-10-30 31744]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2009-02-18 177720]
"PDF Complete"=C:\Program Files\PDF Complete\pdfsty.exe [2010-01-12 563736]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-04-20 39408]
"FileHippo.com"=C:\Program Files\FileHippo.com\UpdateChecker.exe [2010-04-29 248832]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\zCpqset]
C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe [2008-12-11 81920]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\Windows\System32\APSHook.dll C:\Windows\System32\APSHook.dll C:\Windows\System32\APSHook.dll C:\Windows\System32\APSHook.dll C:\Windows\System32\APSHook.dll APSHook.dll"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=
"NoDrives"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 months======
2010-05-06 19:15:28 ----D---- C:\rsit
2010-05-06 17:20:32 ----D---- C:\Program Files\Defraggler
2010-05-05 23:15:59 ----D---- C:\Program Files\FileHippo.com
2010-05-03 15:29:37 ----D---- C:\ProgramData\Kaspersky Lab
2010-05-03 13:24:10 ----D---- C:\ProgramData\FileCure
2010-04-29 09:00:38 ----SHD---- C:\Config.Msi
2010-04-28 22:15:53 ----D---- C:\Users\Sarka\AppData\Roaming\Malwarebytes
2010-04-28 22:15:43 ----D---- C:\ProgramData\Malwarebytes
2010-04-28 22:15:43 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-04-28 11:08:53 ----D---- C:\Windows\Sun
2010-04-28 10:45:35 ----D---- C:\Program Files\trend micro
2010-04-28 10:16:10 ----A---- C:\upm_logfile.txt
2010-04-28 09:54:25 ----D---- C:\Program Files\Microsoft Silverlight
2010-04-28 09:52:48 ----D---- C:\Program Files\Microsoft Sync Framework
2010-04-28 09:51:07 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2010-04-28 09:50:09 ----D---- C:\Program Files\Microsoft
2010-04-28 09:49:51 ----D---- C:\Program Files\Windows Live SkyDrive
2010-04-28 09:49:43 ----D---- C:\Program Files\Windows Live
2010-04-28 09:26:12 ----D---- C:\Program Files\Common Files\Windows Live
2010-04-27 11:42:28 ----D---- C:\Program Files\Common Files\Java
2010-04-27 11:41:52 ----A---- C:\Windows\system32\javaws.exe
2010-04-27 11:41:52 ----A---- C:\Windows\system32\javaw.exe
2010-04-27 11:41:52 ----A---- C:\Windows\system32\java.exe
2010-04-27 11:41:11 ----D---- C:\Program Files\Java
2010-04-26 17:36:17 ----D---- C:\Program Files\Ultimate Process Manager
2010-04-21 23:58:31 ----D---- C:\Users\Sarka\AppData\Roaming\AI Internet Solutions
2010-04-21 22:32:50 ----D---- C:\Program Files\MSECache
2010-04-21 11:50:26 ----SHD---- C:\$RECYCLE.BIN
2010-04-20 13:54:03 ----D---- C:\Program Files\ESET
2010-04-20 11:45:21 ----D---- C:\Users\Sarka\AppData\Roaming\Google
2010-04-20 11:44:56 ----D---- C:\ProgramData\Google
2010-04-20 00:54:02 ----D---- C:\Users\Sarka\AppData\Roaming\XnView
2010-04-20 00:44:48 ----A---- C:\Windows\system32\pdfc_port.dll
2010-04-20 00:44:43 ----D---- C:\Program Files\PDF Complete
2010-04-20 00:44:29 ----D---- C:\ProgramData\PDFC
2010-04-20 00:25:00 ----D---- C:\Program Files\LightScribe Diagnostic Utility
2010-04-20 00:18:47 ----D---- C:\Program Files\Common Files\LightScribe
2010-04-19 23:48:46 ----N---- C:\Windows\Setup1.exe
2010-04-19 23:48:45 ----A---- C:\Windows\ST6UNST.EXE
2010-04-19 23:45:30 ----A---- C:\Windows\GPInstall.exe
2010-04-19 23:44:52 ----D---- C:\Program Files\AbiSuite2
2010-04-19 23:30:16 ----D---- C:\Program Files\Windows Media Components
2010-04-19 23:30:16 ----A---- C:\Windows\system32\wmrmcmp.exe
2010-04-19 22:20:19 ----D---- C:\Users\Sarka\AppData\Roaming\PDFCreator
2010-04-19 22:15:02 ----A---- C:\Windows\pdf2word.INI
2010-04-18 21:36:41 ----D---- C:\ProgramData\WindowsSearch
2010-04-16 16:14:50 ----D---- C:\Program Files\VeryPDF PDF2Word v3.0
2010-04-16 09:41:29 ----D---- C:\Users\Sarka\AppData\Roaming\PSpad
2010-04-16 09:41:19 ----D---- C:\Program Files\PSPad editor
2010-04-16 01:01:19 ----D---- C:\Program Files\PicLensIE
2010-04-15 17:03:32 ----D---- C:\Program Files\Axis Communications
2010-04-15 14:14:38 ----D---- C:\Users\Sarka\AppData\Roaming\GRETECH
2010-04-15 14:10:56 ----D---- C:\Users\Sarka\AppData\Roaming\foobar2000
2010-04-15 12:43:15 ----D---- C:\Users\Sarka\AppData\Roaming\Media Player Classic
2010-04-15 09:22:02 ----A---- C:\Windows\system32\vbscript.dll
2010-04-15 09:21:48 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-04-15 09:21:48 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-04-15 09:21:27 ----A---- C:\Windows\system32\iphlpsvc.dll
2010-04-15 09:17:06 ----A---- C:\Windows\system32\wintrust.dll
2010-04-15 09:16:49 ----A---- C:\Windows\system32\cabview.dll
2010-04-15 04:59:55 ----A---- C:\Windows\PEV.exe
2010-04-15 04:59:55 ----A---- C:\Windows\MBR.exe
2010-04-15 04:38:44 ----D---- C:\Windows\ERDNT
2010-04-15 03:18:55 ----D---- C:\Windows\pss
2010-04-14 22:55:48 ----D---- C:\Users\Sarka\AppData\Roaming\Ashampoo
2010-04-14 22:54:41 ----D---- C:\ProgramData\ashampoo
2010-04-14 22:54:37 ----D---- C:\Program Files\Ashampoo
2010-04-14 00:25:59 ----D---- C:\Users\Sarka\AppData\Roaming\DAEMON Tools Lite
2010-04-14 00:23:13 ----D---- C:\Program Files\CCleaner
2010-04-14 00:20:56 ----D---- C:\Program Files\Netscape
2010-04-14 00:20:28 ----D---- C:\Program Files\WinZip Self-Extractor
2010-04-14 00:18:28 ----D---- C:\Program Files\Voxx
2010-04-14 00:11:02 ----A---- C:\Windows\uninst.exe
2010-04-14 00:09:16 ----A---- C:\Windows\system32\pegreg32.dll
2010-04-13 21:53:11 ----D---- C:\Users\Sarka\AppData\Roaming\VitySoft
2010-04-13 19:37:42 ----D---- C:\ProgramData\LightScribe
2010-04-13 19:29:25 ----HD---- C:\ProgramData\CanonIJSolutionMenu
2010-04-13 19:29:10 ----HD---- C:\ProgramData\CanonIJMyPrinter
2010-04-13 19:29:04 ----D---- C:\ProgramData\CanonIJPLM
2010-04-13 19:11:04 ----D---- C:\Program Files\Common Files\CANON
2010-04-13 19:07:14 ----HD---- C:\ProgramData\CanonBJ
2010-04-13 19:06:54 ----HD---- C:\Windows\system32\CanonIJ Uninstaller Information
2010-04-13 19:05:23 ----A---- C:\Windows\system32\CNC550L.dll
2010-04-13 19:05:23 ----A---- C:\Windows\system32\CNC550I.dll
2010-04-13 19:05:23 ----A---- C:\Windows\system32\CNC550C.dll
2010-04-13 19:05:22 ----A---- C:\Windows\system32\CNHMCA.dll
2010-04-13 19:05:22 ----A---- C:\Windows\system32\CNC550U.dll
2010-04-13 19:04:30 ----A---- C:\Windows\system32\CNMLM9Z.DLL
2010-04-13 19:04:24 ----A---- C:\Windows\system32\CNC550O.dll
2010-04-13 19:04:18 ----A---- C:\Windows\system32\CNMIU9Z.DLL
2010-04-13 19:04:10 ----HD---- C:\Program Files\CanonBJ
2010-04-13 19:02:52 ----D---- C:\Program Files\Canon
2010-04-11 19:58:10 ----A---- C:\Windows\system32\msonpmon.dll
2010-04-11 19:57:21 ----D---- C:\Program Files\Microsoft Works
2010-04-11 19:57:05 ----D---- C:\Program Files\Common Files\DESIGNER
2010-04-11 19:56:37 ----D---- C:\Windows\PCHEALTH
2010-04-11 19:56:37 ----D---- C:\Program Files\Microsoft.NET
2010-04-11 19:53:31 ----D---- C:\ProgramData\Microsoft Help
2010-04-11 19:53:31 ----D---- C:\Program Files\Microsoft Office
2010-04-11 19:52:53 ----RHD---- C:\MSOCache
2010-04-11 17:04:29 ----D---- C:\Users\Sarka\AppData\Roaming\Nero
2010-04-11 12:27:25 ----A---- C:\Windows\system32\pdfcmnnt.dll
2010-04-11 12:27:22 ----D---- C:\Program Files\PDFCreator
2010-04-11 12:27:22 ----A---- C:\Windows\system32\MSMPIDE.DLL
2010-04-11 12:24:38 ----A---- C:\Windows\system32\winhttp.dll
2010-04-11 12:24:35 ----A---- C:\Windows\system32\jscript.dll
2010-04-11 12:09:20 ----A---- C:\Windows\system32\kerberos.dll
2010-04-11 12:09:19 ----A---- C:\Windows\system32\schannel.dll
2010-04-11 11:59:44 ----A---- C:\Windows\system32\gpprefcl.dll
2010-04-11 11:59:29 ----D---- C:\Windows\system32\WindowsPowerShell
2010-04-11 11:02:02 ----D---- C:\Windows\system32\appmgmt
2010-04-11 10:58:57 ----D---- C:\Users\Sarka\AppData\Roaming\Mozilla
2010-04-11 10:57:37 ----D---- C:\Users\Sarka\AppData\Roaming\Macromedia
2010-04-11 10:57:34 ----D---- C:\Windows\system32\Macromed
2010-04-11 10:53:35 ----D---- C:\Users\Sarka\AppData\Roaming\ICQ
2010-04-11 10:53:07 ----D---- C:\Program Files\ICQ6.5
2010-04-11 10:52:36 ----D---- C:\Users\Sarka\AppData\Roaming\Skype
2010-04-11 10:52:13 ----D---- C:\Program Files\Common Files\Skype
2010-04-11 10:52:10 ----RD---- C:\Program Files\Skype
2010-04-11 10:52:07 ----D---- C:\ProgramData\Skype
2010-04-11 10:51:26 ----D---- C:\Program Files\Mozilla Firefox
2010-04-11 10:50:27 ----D---- C:\ProgramData\Sun
2010-04-11 10:49:54 ----A---- C:\Windows\system32\deploytk.dll
2010-04-11 10:09:21 ----A---- C:\Windows\system32\occache.dll
2010-04-11 10:09:21 ----A---- C:\Windows\system32\mstime.dll
2010-04-11 10:09:20 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-04-11 10:09:20 ----A---- C:\Windows\system32\msfeeds.dll
2010-04-11 10:09:20 ----A---- C:\Windows\system32\jsproxy.dll
2010-04-11 10:09:20 ----A---- C:\Windows\system32\iepeers.dll
2010-04-11 10:09:19 ----A---- C:\Windows\system32\wininet.dll
2010-04-11 10:09:19 ----A---- C:\Windows\system32\ieui.dll
2010-04-11 10:09:19 ----A---- C:\Windows\system32\iesetup.dll
2010-04-11 10:09:19 ----A---- C:\Windows\system32\iernonce.dll
2010-04-11 10:09:18 ----A---- C:\Windows\system32\msfeedssync.exe
2010-04-11 10:09:17 ----A---- C:\Windows\system32\ie4uinit.exe
2010-04-11 10:09:13 ----A---- C:\Windows\system32\iertutil.dll
2010-04-11 10:09:12 ----A---- C:\Windows\system32\urlmon.dll
2010-04-11 10:09:12 ----A---- C:\Windows\system32\ieUnatt.exe
2010-04-11 10:09:12 ----A---- C:\Windows\system32\iesysprep.dll
2010-04-11 10:09:12 ----A---- C:\Windows\system32\iedkcs32.dll
2010-04-11 10:09:11 ----A---- C:\Windows\system32\ieframe.dll
2010-04-11 10:09:09 ----A---- C:\Windows\system32\mshtml.dll
2010-04-11 10:05:01 ----A---- C:\Windows\system32\mshtmler.dll
2010-04-11 10:05:01 ----A---- C:\Windows\system32\mshtmled.dll
2010-04-11 10:05:01 ----A---- C:\Windows\system32\icardie.dll
2010-04-11 10:05:01 ----A---- C:\Windows\system32\admparse.dll
2010-04-11 10:05:00 ----A---- C:\Windows\system32\msls31.dll
2010-04-11 10:05:00 ----A---- C:\Windows\system32\corpol.dll
2010-04-11 10:04:59 ----A---- C:\Windows\system32\imgutil.dll
2010-04-11 10:04:59 ----A---- C:\Windows\system32\ieakeng.dll
2010-04-11 10:04:59 ----A---- C:\Windows\system32\dxtrans.dll
2010-04-11 10:04:59 ----A---- C:\Windows\system32\dxtmsft.dll
2010-04-11 10:04:58 ----A---- C:\Windows\system32\WinFXDocObj.exe
2010-04-11 10:04:58 ----A---- C:\Windows\system32\wextract.exe
2010-04-11 10:04:58 ----A---- C:\Windows\system32\webcheck.dll
2010-04-11 10:04:58 ----A---- C:\Windows\system32\msrating.dll
2010-04-11 10:04:58 ----A---- C:\Windows\system32\licmgr10.dll
2010-04-11 10:04:58 ----A---- C:\Windows\system32\inseng.dll
2010-04-11 10:04:58 ----A---- C:\Windows\system32\ieakui.dll
2010-04-11 10:04:58 ----A---- C:\Windows\system32\ieaksie.dll
2010-04-11 10:04:57 ----A---- C:\Windows\system32\pngfilt.dll
2010-04-11 10:04:57 ----A---- C:\Windows\system32\advpack.dll
2010-04-11 10:04:56 ----A---- C:\Windows\system32\ieapfltr.dll
2010-04-11 10:04:55 ----A---- C:\Windows\system32\url.dll
2010-04-11 10:04:52 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2010-04-11 10:04:52 ----A---- C:\Windows\system32\SetDepNx.exe
2010-04-11 10:04:52 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2010-04-11 10:04:52 ----A---- C:\Windows\system32\PDMSetup.exe
2010-04-11 10:04:52 ----A---- C:\Windows\system32\mshta.exe
2010-04-11 10:04:52 ----A---- C:\Windows\system32\iexpress.exe
2010-04-11 10:01:00 ----A---- C:\Windows\system32\aswBoot.exe
2010-04-11 10:00:47 ----D---- C:\ProgramData\Alwil Software
2010-04-11 10:00:47 ----D---- C:\Program Files\Alwil Software
2010-04-11 09:58:22 ----D---- C:\ProgramData\Nero
2010-04-11 09:58:21 ----D---- C:\Program Files\Common Files\Nero
2010-04-11 09:57:58 ----D---- C:\Users\Sarka\AppData\Roaming\Real
2010-04-11 09:55:28 ----A---- C:\Windows\system32\rmoc3260.dll
2010-04-11 09:55:28 ----A---- C:\Windows\system32\pndx5032.dll
2010-04-11 09:55:28 ----A---- C:\Windows\system32\pndx5016.dll
2010-04-11 09:55:28 ----A---- C:\Windows\system32\pncrt.dll
2010-04-11 09:55:27 ----A---- C:\Windows\system32\unrar.dll
2010-04-11 09:55:27 ----A---- C:\Windows\avisplitter.ini
2010-04-11 09:55:26 ----A---- C:\Windows\system32\yv12vfw.dll
2010-04-11 09:55:26 ----A---- C:\Windows\system32\xvidvfw.dll
2010-04-11 09:55:26 ----A---- C:\Windows\system32\xvidcore.dll
2010-04-11 09:55:25 ----A---- C:\Windows\system32\qt-dx331.dll
2010-04-11 09:55:25 ----A---- C:\Windows\system32\dpl100.dll
2010-04-11 09:55:25 ----A---- C:\Windows\system32\divx.dll
2010-04-11 09:55:23 ----A---- C:\Windows\system32\ff_vfw.dll.manifest
2010-04-11 09:55:23 ----A---- C:\Windows\system32\ff_vfw.dll
2010-04-11 09:55:22 ----D---- C:\Program Files\K-Lite Codec Pack
2010-04-11 09:55:22 ----A---- C:\Windows\system32\msvcr71.dll
2010-04-11 09:55:22 ----A---- C:\Windows\system32\msvcp71.dll
2010-04-11 09:45:29 ----D---- C:\Users\Sarka\AppData\Roaming\Adobe
2010-04-11 09:43:39 ----D---- C:\Users\Sarka\AppData\Roaming\OpenOffice.org
2010-04-11 09:40:20 ----D---- C:\Program Files\OpenOffice.org 3
2010-04-11 09:31:18 ----D---- C:\ProgramData\Adobe
2010-04-11 09:31:02 ----D---- C:\Program Files\Common Files\Adobe
2010-04-11 09:31:02 ----D---- C:\Program Files\Adobe
2010-04-11 09:24:31 ----D---- C:\Program Files\Google
2010-04-11 09:12:00 ----D---- C:\Program Files\IDT
2010-04-11 09:07:46 ----D---- C:\ProgramData\SonicFocus
2010-04-11 08:59:21 ----D---- C:\Program Files\Windows Portable Devices
2010-04-11 08:52:49 ----A---- C:\Windows\system32\WPDShextAutoplay.exe
2010-04-11 08:52:49 ----A---- C:\Windows\system32\wpdbusenum.dll
2010-04-11 08:52:49 ----A---- C:\Windows\system32\BthMtpContextHandler.dll
2010-04-11 08:52:46 ----A---- C:\Windows\system32\PortableDeviceConnectApi.dll
2010-04-11 08:52:45 ----A---- C:\Windows\system32\WPDSp.dll
2010-04-11 08:52:45 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2010-04-11 08:52:45 ----A---- C:\Windows\system32\wpdshext.dll
2010-04-11 08:52:45 ----A---- C:\Windows\system32\wpd_ci.dll
2010-04-11 08:52:45 ----A---- C:\Windows\system32\PortableDeviceWMDRM.dll
2010-04-11 08:52:45 ----A---- C:\Windows\system32\PortableDeviceTypes.dll
2010-04-11 08:52:45 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll
2010-04-11 08:52:45 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2010-04-11 08:50:40 ----A---- C:\Windows\system32\UIAutomationCore.dll
2010-04-11 08:50:40 ----A---- C:\Windows\system32\oleaccrc.dll
2010-04-11 08:50:40 ----A---- C:\Windows\system32\oleacc.dll
2010-04-11 08:49:11 ----A---- C:\Windows\system32\WMPhoto.dll
2010-04-11 08:49:10 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2010-04-11 08:49:10 ----A---- C:\Windows\system32\d3d10warp.dll
2010-04-11 08:49:10 ----A---- C:\Windows\system32\cdd.dll
2010-04-11 08:49:09 ----A---- C:\Windows\system32\xpsservices.dll
2010-04-11 08:49:09 ----A---- C:\Windows\system32\XpsRasterService.dll
2010-04-11 08:49:09 ----A---- C:\Windows\system32\XpsPrint.dll
2010-04-11 08:49:09 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2010-04-11 08:49:09 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2010-04-11 08:49:09 ----A---- C:\Windows\system32\WindowsCodecs.dll
2010-04-11 08:49:09 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2010-04-11 08:49:09 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2010-04-11 08:49:09 ----A---- C:\Windows\system32\OpcServices.dll
2010-04-11 08:49:09 ----A---- C:\Windows\system32\FntCache.dll
2010-04-11 08:49:09 ----A---- C:\Windows\system32\dxdiagn.dll
2010-04-11 08:49:09 ----A---- C:\Windows\system32\dxdiag.exe
2010-04-11 08:49:09 ----A---- C:\Windows\system32\d2d1.dll
2010-04-11 08:49:08 ----A---- C:\Windows\system32\dxgi.dll
2010-04-11 08:49:08 ----A---- C:\Windows\system32\DWrite.dll
2010-04-11 08:49:08 ----A---- C:\Windows\system32\d3d11.dll
2010-04-11 08:49:08 ----A---- C:\Windows\system32\d3d10level9.dll
2010-04-11 08:49:08 ----A---- C:\Windows\system32\d3d10core.dll
2010-04-11 08:49:08 ----A---- C:\Windows\system32\d3d10_1core.dll
2010-04-11 08:49:08 ----A---- C:\Windows\system32\d3d10_1.dll
2010-04-11 08:49:08 ----A---- C:\Windows\system32\d3d10.dll
2010-04-11 08:46:59 ----A---- C:\Windows\system32\UIAnimation.dll
2010-04-11 08:46:58 ----A---- C:\Windows\system32\UIRibbonRes.dll
2010-04-11 08:46:58 ----A---- C:\Windows\system32\UIRibbon.dll
2010-04-11 08:45:32 ----A---- C:\Windows\system32\gameux.dll
2010-04-11 08:45:30 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2010-04-11 08:45:30 ----A---- C:\Windows\system32\Apphlpdm.dll
2010-04-11 08:40:54 ----A---- C:\Windows\system32\browserchoice.exe
2010-04-11 08:38:01 ----D---- C:\Program Files\MSXML 4.0
2010-04-10 18:54:52 ----D---- C:\Windows\system32\vi-VN
2010-04-10 18:54:52 ----D---- C:\Windows\system32\eu-ES
2010-04-10 18:54:52 ----D---- C:\Windows\system32\ca-ES
2010-04-10 18:50:20 ----D---- C:\Windows\system32\SPReview
2010-04-10 18:30:33 ----A---- C:\Windows\system32\scavenge.dll
2010-04-10 18:30:26 ----A---- C:\Windows\system32\compcln.exe
2010-04-10 18:26:30 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2010-04-10 18:26:30 ----A---- C:\Windows\system32\SearchIndexer.exe
2010-04-10 18:26:30 ----A---- C:\Windows\system32\SearchFilterHost.exe
2010-04-10 18:26:30 ----A---- C:\Windows\system32\sdohlp.dll
2010-04-10 18:26:30 ----A---- C:\Windows\system32\sdclt.exe
2010-04-10 18:26:29 ----A---- C:\Windows\system32\scrrun.dll
2010-04-10 18:26:29 ----A---- C:\Windows\system32\scansetting.dll
2010-04-10 18:26:29 ----A---- C:\Windows\system32\samlib.dll
2010-04-10 18:26:29 ----A---- C:\Windows\system32\rwinsta.exe
2010-04-10 18:26:29 ----A---- C:\Windows\system32\rtutils.dll
2010-04-10 18:26:29 ----A---- C:\Windows\system32\rtffilt.dll
2010-04-10 18:26:29 ----A---- C:\Windows\system32\rsaenh.dll
2010-04-10 18:26:29 ----A---- C:\Windows\system32\rpchttp.dll
2010-04-10 18:26:29 ----A---- C:\Windows\system32\rpcss.dll
2010-04-10 18:26:29 ----A---- C:\Windows\system32\riched20.dll
2010-04-10 18:26:28 ----A---- C:\Windows\system32\schedsvc.dll
2010-04-10 18:26:28 ----A---- C:\Windows\system32\scrptadm.dll
2010-04-10 18:26:28 ----A---- C:\Windows\system32\scrobj.dll
2010-04-10 18:26:28 ----A---- C:\Windows\system32\scksp.dll
2010-04-10 18:26:28 ----A---- C:\Windows\system32\scesrv.dll
2010-04-10 18:26:28 ----A---- C:\Windows\system32\scecli.dll
2010-04-10 18:26:28 ----A---- C:\Windows\system32\SCardSvr.dll
2010-04-10 18:26:28 ----A---- C:\Windows\system32\samsrv.dll
2010-04-10 18:26:27 ----A---- C:\Windows\system32\powercpl.dll
2010-04-10 18:26:27 ----A---- C:\Windows\system32\PNPXAssoc.dll
2010-04-10 18:26:27 ----A---- C:\Windows\system32\PnPutil.exe
2010-04-10 18:26:27 ----A---- C:\Windows\system32\PnPUnattend.exe
2010-04-10 18:26:27 ----A---- C:\Windows\system32\pnpui.dll
2010-04-10 18:26:27 ----A---- C:\Windows\system32\pnpsetup.dll
2010-04-10 18:26:27 ----A---- C:\Windows\system32\pnidui.dll
2010-04-10 18:26:27 ----A---- C:\Windows\system32\perfdisk.dll
2010-04-10 18:26:27 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2010-04-10 18:26:27 ----A---- C:\Windows\system32\pdh.dll
2010-04-10 18:26:27 ----A---- C:\Windows\system32\pcaui.dll
2010-04-10 18:26:27 ----A---- C:\Windows\system32\p2psvc.dll
2010-04-10 18:26:27 ----A---- C:\Windows\system32\P2PGraph.dll
2010-04-10 18:26:26 ----A---- C:\Windows\system32\pmcsnap.dll
2010-04-10 18:26:26 ----A---- C:\Windows\system32\PkgMgr.exe
2010-04-10 18:26:26 ----A---- C:\Windows\system32\pidgenx.dll
2010-04-10 18:26:26 ----A---- C:\Windows\system32\photowiz.dll
2010-04-10 18:26:26 ----A---- C:\Windows\system32\ntdll.dll
2010-04-10 18:26:26 ----A---- C:\Windows\system32\nslookup.exe
2010-04-10 18:26:26 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2010-04-10 18:26:25 ----A---- C:\Windows\system32\osk.exe
2010-04-10 18:26:25 ----A---- C:\Windows\system32\onex.dll
2010-04-10 18:26:25 ----A---- C:\Windows\system32\oleaut32.dll
2010-04-10 18:26:25 ----A---- C:\Windows\system32\ole32.dll
2010-04-10 18:26:25 ----A---- C:\Windows\system32\offfilt.dll
2010-04-10 18:26:25 ----A---- C:\Windows\system32\odbccp32.dll
2010-04-10 18:26:25 ----A---- C:\Windows\system32\odbcconf.dll
2010-04-10 18:26:25 ----A---- C:\Windows\system32\odbc32.dll
2010-04-10 18:26:25 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2010-04-10 18:26:25 ----A---- C:\Windows\system32\nlhtml.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\rastapi.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\rasppp.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\rasplap.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\rasmontr.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\rasmans.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\raschap.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\rasgcw.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\rasdlg.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\rasdial.exe
2010-04-10 18:26:24 ----A---- C:\Windows\system32\rasdiag.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\rasapi32.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\query.exe
2010-04-10 18:26:24 ----A---- C:\Windows\system32\Query.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\oobefldr.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\olepro32.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\oleprn.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\ocsetup.exe
2010-04-10 18:26:24 ----A---- C:\Windows\system32\ntprint.dll
2010-04-10 18:26:24 ----A---- C:\Windows\system32\ntmarta.dll
2010-04-10 18:26:23 ----A---- C:\Windows\system32\reset.exe
2010-04-10 18:26:23 ----A---- C:\Windows\system32\RelMon.dll