Mozna havet/preventivka

[giselle]

MBAM mi nachazi trojana Fraud.Pack, ktery se ve scanu objevuje i po smazani. Log se sem nevejde, tak je druha cast v dalsim postu.

Diky za kontrolu.

----
Logfile of random's system information tool 1.08 (written by random/random)
Run by Owner at 2010-12-26 06:51:20
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 5 GB (32%) free of 15 GB
Total RAM: 3453 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:51:21, on 26.12.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\GIGABYTE\ET6\GUI.exe
C:\Program Files\Razer\Copperhead\razerhid.exe
C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\RUNDLL32.EXE
D:\Programs\Winamp\winampa.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
C:\Program Files\Orbitdownloader\orbitdm.exe
C:\Program Files\Orbitdownloader\orbitnet.exe
C:\Documents and Settings\Owner\Local Settings\Apps\2.0\MZH66G08.RMG\Y09LBHEL.G73\curs..tion_eee711038731a406_0004.0000_efb506202a7c3b08\CurseClient.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\WINDOWS\Osihea.exe
C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
C:\WINDOWS\system32\FsUsbExService.Exe
C:\Program Files\Razer\Copperhead\razertra.exe
C:\Program Files\Razer\Copperhead\razerofa.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Documents and Settings\Owner\My Documents\Downloads\RSIT.exe
C:\Program Files\trend micro\Owner.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll
O2 - BHO: Pomocník pro prihlášení ke službe Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll
O4 - HKLM\..\Run: [razer] C:\Program Files\Razer\Copperhead\razerhid.exe
O4 - HKLM\..\Run: [BCU] "C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [GBTUpd] C:\Program Files\Gigabyte\UpdManager\PreRun.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [Copperhead] C:\Program Files\Razer\Copperhead\razerhid.exe
O4 - HKLM\..\Run: [WinampAgent] D:\Programs\Winamp\winampa.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\RunOnce: [EasyTuneVI] C:\Program Files\GIGABYTE\ET6\ETCall.exe
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\FlashUtil10h_ActiveX.exe -update activex
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: CurseClientStartup.ccip
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Orbit.lnk = C:\Program Files\Orbitdownloader\orbitdm.exe
O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 1238697098
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AppleChargerSrv - Unknown owner - C:\WINDOWS\system32\AppleChargerSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Browser Configuration Utility Service (BCUService) - DeviceVM, Inc. - C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 8599 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2025429265-1645522239-725345543-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2025429265-1645522239-725345543-1003UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{000123B4-9B42-4900-B3F7-F4B073EFC214}]
Octh Class - C:\Program Files\Orbitdownloader\orbitcth.dll [2010-10-18 237644]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro prihlášení ke službe Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-23 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{C55BBCD6-41AD-48AD-9953-3609C48EACC7} - Grab Pro - C:\Program Files\Orbitdownloader\GrabPro.dll [2010-10-18 684032]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"razer"=C:\Program Files\Razer\Copperhead\razerhid.exe [2005-11-25 155648]
"BCU"=C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe [2009-10-15 375000]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2010-07-28 19557480]
"ISUSPM Startup"=C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe [2005-02-17 221184]
"ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2005-02-17 81920]
"GBTUpd"=C:\Program Files\Gigabyte\UpdManager\PreRun.exe [2008-04-03 297480]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-10-16 110696]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-10-16 13851752]
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2010-08-26 1753192]
"Copperhead"=C:\Program Files\Razer\Copperhead\razerhid.exe [2005-11-25 155648]
"WinampAgent"=D:\Programs\Winamp\winampa.exe [2010-11-30 74752]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"NPSStartup"= []
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912]
"Malwarebytes' Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2010-12-20 963976]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"EasyTuneVI"=C:\Program Files\GIGABYTE\ET6\ETCall.exe [2007-07-27 20480]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2010-12-20 443728]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2010-04-17 3872080]
"Google Update"=C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-12-14 136176]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"AutoStartNPSAgent"=C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe [2010-07-04 95576]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"=C:\WINDOWS\system32\Macromed\Flash\FlashUtil10h_ActiveX.exe [2010-12-22 231888]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Orbit.lnk - C:\Program Files\Orbitdownloader\orbitdm.exe

C:\Documents and Settings\Owner\Start Menu\Programs\Startup
CurseClientStartup.ccip
OpenOffice.org 3.2.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Gigabyte\UpdManager\RunUpd.exe"="C:\Program Files\Gigabyte\UpdManager\RunUpd.exe:*:Enabled:RunUpd"
"C:\Program Files\Gigabyte\UpdManager\GBTUpd.exe"="C:\Program Files\Gigabyte\UpdManager\GBTUpd.exe:*:Enabled:GBTUpd.exe"
"C:\Program Files\Orbitdownloader\orbitdm.exe"="C:\Program Files\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit"
"C:\Program Files\Orbitdownloader\orbitnet.exe"="C:\Program Files\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit"
"D:\Programs\Skype\Phone\Skype.exe"="D:\Programs\Skype\Phone\Skype.exe:*:Enabled:Skype"
"D:\Programs\World of Warcraft\Launcher.exe"="D:\Programs\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher"
"D:\Programs\World of Warcraft\Launcher.patch.exe"="D:\Programs\World of Warcraft\Launcher.patch.exe:*:Enabled:Blizzard Launcher"
"C:\Program Files\Internet Explorer\IEXPLORE.EXE"="C:\Program Files\Internet Explorer\IEXPLORE.EXE:*:Enabled:Internet Explorer"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\Programs\Firefox\firefox.exe"="D:\Programs\Firefox\firefox.exe:*:Enabled:Firefox"
"D:\Programs\Bitlord\BitLord.exe"="D:\Programs\Bitlord\BitLord.exe:*:Enabled:BitLord"
"C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server"
"C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server"
"C:\Documents and Settings\Owner\Local Settings\Apps\2.0\MZH66G08.RMG\Y09LBHEL.G73\curs..tion_eee711038731a406_0004.0000_efb506202a7c3b08\CurseClient.exe"="C:\Documents and Settings\Owner\Local Settings\Apps\2.0\MZH66G08.RMG\Y09LBHEL.G73\curs..tion_eee711038731a406_0004.0000_efb506202a7c3b08\CurseClient.exe:*:Enabled:Curse Client 4.0"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2010-12-26 06:40:35 ----D---- C:\Program Files\trend micro
2010-12-26 06:40:32 ----D---- C:\rsit
2010-12-26 06:38:10 ----A---- C:\WINDOWS\system32\drivers\rosmyq.sys
2010-12-26 03:42:46 ----D---- C:\Documents and Settings\Owner\Application Data\Malwarebytes
2010-12-26 03:42:39 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2010-12-26 03:42:38 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2010-12-26 03:42:35 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-12-26 03:42:35 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2010-12-26 01:04:36 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2010-12-26 01:04:36 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2010-12-26 01:04:35 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2010-12-26 01:04:33 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2010-12-26 01:04:30 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2010-12-26 01:04:30 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2010-12-26 01:04:30 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2010-12-26 01:04:16 ----A---- C:\WINDOWS\system32\aswBoot.exe
2010-12-26 01:04:10 ----D---- C:\Program Files\Alwil Software
2010-12-26 01:04:10 ----D---- C:\Documents and Settings\All Users\Application Data\Alwil Software
2010-12-23 18:00:17 ----D---- C:\Program Files\MSXML 4.0
2010-12-22 12:02:12 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2010-12-22 11:51:08 ----A---- C:\WINDOWS\system32\drivers\ss_bwhnt.sys
2010-12-22 11:51:08 ----A---- C:\WINDOWS\system32\drivers\ss_bwh.sys
2010-12-22 11:51:08 ----A---- C:\WINDOWS\system32\drivers\ss_bmdm.sys
2010-12-22 11:51:08 ----A---- C:\WINDOWS\system32\drivers\ss_bmdfl.sys
2010-12-22 11:51:08 ----A---- C:\WINDOWS\system32\drivers\ss_bcmnt.sys
2010-12-22 11:51:08 ----A---- C:\WINDOWS\system32\drivers\ss_bcm.sys
2010-12-22 11:51:08 ----A---- C:\WINDOWS\system32\drivers\ss_bbus.sys
2010-12-22 11:51:01 ----D---- C:\Documents and Settings\All Users\Application Data\Samsung
2010-12-22 11:50:48 ----A---- C:\WINDOWS\system32\FsUsbExService.Exe
2010-12-22 11:50:48 ----A---- C:\WINDOWS\system32\FsUsbExDisk.Sys
2010-12-22 11:50:48 ----A---- C:\WINDOWS\system32\FsUsbExDevice.Dll
2010-12-22 11:50:40 ----D---- C:\Documents and Settings\Owner\Application Data\Samsung
2010-12-22 11:50:22 ----D---- C:\Program Files\MarkAny
2010-12-22 11:50:02 ----D---- C:\Program Files\Samsung
2010-12-20 06:15:19 ----D---- C:\Program Files\DCoder Image Source
2010-12-20 06:15:14 ----D---- C:\Program Files\FFMPEG Core Files
2010-12-20 06:15:04 ----D---- C:\Program Files\SHOUTcast Source
2010-12-20 06:15:03 ----D---- C:\Program Files\MONOGRAM AMR SplitterDecoder
2010-12-20 06:15:02 ----D---- C:\Program Files\CD Audio Reader Filter
2010-12-20 06:14:58 ----D---- C:\Program Files\OpenSource AVI Splitter
2010-12-20 06:14:58 ----D---- C:\Program Files\Gabest MPEG Splitter
2010-12-20 06:14:54 ----D---- C:\Program Files\OpenSource DTSAC3DD+ Source Filter
2010-12-20 06:14:52 ----D---- C:\Program Files\RealMedia
2010-12-20 06:14:35 ----D---- C:\Program Files\DScaler5
2010-12-20 06:14:31 ----D---- C:\Program Files\AC3Filter
2010-12-20 06:14:22 ----D---- C:\Program Files\OpenSource Flash Video Splitter
2010-12-20 06:14:19 ----D---- C:\Program Files\DirectVobSub
2010-12-20 06:14:16 ----D---- C:\Program Files\Haali
2010-12-20 06:14:13 ----D---- C:\Program Files\Bass Audio Decoder
2010-12-20 06:14:08 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2010-12-20 06:14:07 ----D---- C:\Program Files\ffdshow
2010-12-20 06:14:07 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2010-12-20 06:13:19 ----D---- C:\Program Files\Zoom Player
2010-12-20 06:13:19 ----D---- C:\Documents and Settings\All Users\Application Data\Zoom Player
2010-12-17 19:46:47 ----D---- C:\Documents and Settings\Owner\Application Data\OpenOffice.org
2010-12-17 19:39:49 ----D---- C:\Program Files\OpenOffice.org 3
2010-12-16 05:28:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2296199$
2010-12-16 05:27:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2010-12-16 05:27:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2010-12-16 05:27:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2443685$
2010-12-16 05:27:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2436673$
2010-12-16 05:27:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2467659$
2010-12-16 05:26:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2010-12-15 04:48:35 ----D---- C:\Documents and Settings\Owner\Application Data\WinRAR
2010-12-15 04:48:25 ----D---- C:\Program Files\WinRAR
2010-12-14 18:00:31 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-12-07 11:32:38 ----D---- C:\Documents and Settings\All Users\Application Data\UAB
2010-12-07 11:32:30 ----D---- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters
2010-12-07 11:31:33 ----D---- C:\Program Files\PC Drivers HeadQuarters
2010-12-04 00:27:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2010-12-04 00:27:09 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2010-12-04 00:26:31 ----D---- C:\WINDOWS\ie8updates
2010-12-04 00:26:19 ----D---- C:\WINDOWS\WBEM
2010-12-04 00:25:27 ----HDC---- C:\WINDOWS\ie8
2010-12-04 00:22:01 ----A---- C:\WINDOWS\system32\MRT.exe
2010-12-04 00:21:54 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2010-12-04 00:21:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2141007$
2010-12-03 03:19:59 ----D---- C:\WINDOWS\Minidump
2010-12-03 03:16:50 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-12-03 03:16:47 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-12-03 03:16:44 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2010-12-03 03:16:41 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2010-12-03 03:16:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2010-12-03 03:16:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2279986$
2010-12-03 03:16:31 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2010-12-03 03:16:28 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-12-03 03:16:25 ----HDC---- C:\WINDOWS\$NtUninstallKB982214$
2010-12-03 03:16:24 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2010-12-03 03:16:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2259922$
2010-12-03 03:16:18 ----HDC---- C:\WINDOWS\$NtUninstallKB980195$
2010-12-03 03:16:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2010-12-03 03:16:13 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-12-03 03:16:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2010-12-03 03:16:07 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2010-12-03 03:16:03 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-12-03 03:15:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2010-12-03 03:15:55 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-12-03 03:15:40 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2010-12-03 03:15:29 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-12-03 03:15:14 ----HDC---- C:\WINDOWS\$NtUninstallKB981349$
2010-12-03 03:15:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2010-12-03 03:14:51 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
2010-12-03 03:14:40 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2010-12-03 03:14:32 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-12-03 03:14:20 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-12-03 03:14:10 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2010-12-03 03:14:05 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-12-03 03:14:00 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-12-03 03:13:37 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2010-12-03 03:13:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2360131$
2010-12-03 03:13:23 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2010-12-03 03:13:20 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-12-03 03:13:15 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2010-12-03 03:11:22 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-12-03 03:11:15 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2010-12-03 03:11:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2010-12-03 03:11:06 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-12-03 03:11:01 ----HDC---- C:\WINDOWS\$NtUninstallKB981852$
2010-12-03 03:10:57 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2010-12-03 03:10:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2010-12-03 03:08:51 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2010-12-03 03:08:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2121546$
2010-12-03 03:08:34 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-12-03 03:08:31 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-12-03 03:08:26 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2010-12-03 03:06:51 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-12-03 03:06:48 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-12-03 03:06:42 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-12-03 03:06:39 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-12-03 03:06:36 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2010-12-03 03:05:23 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-12-03 03:05:19 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2010-12-03 03:05:15 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2010-12-03 03:05:12 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2010-12-03 03:05:08 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2010-12-03 03:05:04 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2010-12-03 03:05:00 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2010-12-03 03:04:53 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2010-12-03 03:04:50 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-12-03 03:04:43 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2010-12-03 03:04:38 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2010-12-03 03:04:34 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-12-03 03:04:26 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2010-12-03 03:04:21 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2010-12-03 03:04:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2286198$
2010-12-03 03:04:12 ----HDC---- C:\WINDOWS\$NtUninstallKB981957$
2010-12-03 03:04:09 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-12-03 03:04:06 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2010-12-03 03:04:02 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-12-03 03:03:58 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2010-12-03 03:03:55 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2010-12-03 03:03:51 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-12-03 03:03:48 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2010-12-03 03:02:18 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2010-12-03 03:01:00 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2010-12-03 03:00:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2158563$
2010-12-03 03:00:50 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2010-12-03 03:00:39 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-12-03 03:00:36 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2010-12-03 03:00:33 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-12-03 03:00:29 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-12-03 03:00:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2010-12-02 19:51:32 ----N---- C:\WINDOWS\system32\browserchoice.exe
2010-12-02 19:41:19 ----A---- C:\WINDOWS\system32\xpsp4res.dll
2010-12-02 19:38:40 ----A---- C:\WINDOWS\system32\muweb.dll
2010-12-02 19:38:40 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2010-12-02 19:38:40 ----A---- C:\WINDOWS\system32\mucltui.dll
2010-12-01 23:11:28 ----D---- C:\Documents and Settings\Owner\Application Data\Thunderbird
2010-12-01 23:11:22 ----D---- C:\Program Files\Mozilla Thunderbird
2010-12-01 22:51:12 ----D---- C:\WINDOWS\Prefetch
2010-12-01 22:41:40 ----D---- C:\WINDOWS\system32\scripting
2010-12-01 22:41:40 ----D---- C:\WINDOWS\l2schemas
2010-12-01 22:41:39 ----D---- C:\WINDOWS\system32\en
2010-12-01 22:41:39 ----D---- C:\WINDOWS\system32\bits
2010-12-01 22:39:41 ----D---- C:\WINDOWS\ServicePackFiles
2010-12-01 22:36:15 ----D---- C:\WINDOWS\network diagnostic
2010-12-01 22:33:21 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2010-12-01 22:33:21 ----D---- C:\WINDOWS\EHome
2010-12-01 22:31:53 ----N---- C:\WINDOWS\system32\drivers\watv10nt.sys
2010-12-01 22:31:53 ----N---- C:\WINDOWS\system32\drivers\watv06nt.sys
2010-12-01 22:31:53 ----N---- C:\WINDOWS\system32\drivers\wadv11nt.sys
2010-12-01 22:31:53 ----N---- C:\WINDOWS\system32\drivers\wadv09nt.sys
2010-12-01 22:31:53 ----N---- C:\WINDOWS\system32\drivers\wadv08nt.sys
2010-12-01 22:31:53 ----N---- C:\WINDOWS\system32\drivers\wadv07nt.sys
2010-12-01 22:31:52 ----N---- C:\WINDOWS\system32\drivers\slwdmsup.sys
2010-12-01 22:31:52 ----N---- C:\WINDOWS\system32\drivers\slnthal.sys
2010-12-01 22:31:52 ----N---- C:\WINDOWS\system32\drivers\slntamr.sys
2010-12-01 22:31:52 ----N---- C:\WINDOWS\system32\drivers\slnt7554.sys
2010-12-01 22:31:52 ----N---- C:\WINDOWS\system32\drivers\s3gnbm.sys
2010-12-01 22:31:52 ----N---- C:\WINDOWS\system32\drivers\recagent.sys
2010-12-01 22:31:52 ----N---- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2010-12-01 22:31:51 ----N---- C:\WINDOWS\system32\drivers\mtxparhm.sys
2010-12-01 22:31:51 ----N---- C:\WINDOWS\system32\drivers\mtlstrm.sys
2010-12-01 22:31:51 ----N---- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2010-12-01 22:31:50 ----N---- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2010-12-01 22:31:50 ----N---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2010-12-01 22:31:50 ----N---- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2010-12-01 22:31:50 ----N---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2010-12-01 22:31:35 ----N---- C:\WINDOWS\system32\drivers\atinxsxx.sys
2010-12-01 22:31:35 ----N---- C:\WINDOWS\system32\drivers\atinxbxx.sys
2010-12-01 22:31:35 ----N---- C:\WINDOWS\system32\drivers\atintuxx.sys
2010-12-01 22:31:35 ----N---- C:\WINDOWS\system32\drivers\atinttxx.sys
2010-12-01 22:31:35 ----N---- C:\WINDOWS\system32\drivers\atinsnxx.sys
2010-12-01 22:31:35 ----N---- C:\WINDOWS\system32\drivers\atinrvxx.sys
2010-12-01 22:31:35 ----N---- C:\WINDOWS\system32\drivers\atinraxx.sys
2010-12-01 22:31:35 ----N---- C:\WINDOWS\system32\drivers\atinpdxx.sys
2010-12-01 22:31:35 ----N---- C:\WINDOWS\system32\drivers\atinmdxx.sys
2010-12-01 22:31:35 ----N---- C:\WINDOWS\system32\drivers\atinbtxx.sys
2010-12-01 22:31:35 ----N---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2010-12-01 22:31:35 ----N---- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2010-12-01 22:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2010-12-01 22:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2010-12-01 22:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2010-12-01 22:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2010-12-01 22:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1snxx.sys
2010-12-01 22:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2010-12-01 22:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1raxx.sys
2010-12-01 22:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2010-12-01 22:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2010-12-01 22:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1btxx.sys
2010-12-01 22:26:01 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2010-12-01 22:25:39 ----D---- C:\WINDOWS\system32\PreInstall
2010-12-01 22:25:38 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2010-12-01 22:25:38 ----HD---- C:\WINDOWS\$hf_mig$
2010-12-01 22:25:36 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-12-01 22:11:55 ----D---- C:\Program Files\Microsoft
2010-12-01 22:07:32 ----D---- C:\Documents and Settings\Owner\Application Data\Winamp
2010-12-01 22:03:02 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2010-12-01 22:00:57 ----D---- C:\Documents and Settings\Owner\Application Data\ProgSense
2010-12-01 21:55:05 ----D---- C:\Program Files\Windows Live SkyDrive
2010-12-01 21:54:55 ----D---- C:\Program Files\Windows Live
2010-12-01 21:54:24 ----SHD---- C:\RECYCLER
2010-12-01 21:51:09 ----D---- C:\Program Files\Common Files\Windows Live
2010-12-01 21:46:38 ----D---- C:\Documents and Settings\Owner\Application Data\Skype
2010-12-01 21:46:31 ----D---- C:\Documents and Settings\All Users\Application Data\Skype
2010-12-01 21:43:23 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2010-12-01 21:42:30 ----D---- C:\Documents and Settings\All Users\Application Data\Blizzard Entertainment
2010-12-01 21:38:48 ----D---- C:\downloads
2010-12-01 21:38:48 ----D---- C:\Documents and Settings\Owner\Application Data\GrabPro
2010-12-01 21:38:46 ----D---- C:\Program Files\Orbitdownloader
2010-12-01 21:38:46 ----D---- C:\Documents and Settings\Owner\Application Data\Orbit
2010-12-01 21:35:36 ----D---- C:\Documents and Settings\Owner\Application Data\Macromedia
2010-12-01 21:09:30 ----RA---- C:\WINDOWS\system32\RTNUninst32.dll
2010-12-01 21:09:30 ----RA---- C:\WINDOWS\system32\RtNicProp32.dll
2010-12-01 21:09:30 ----RA---- C:\WINDOWS\system32\drivers\Rtenicxp.sys
2010-12-01 21:07:50 ----RA---- C:\WINDOWS\system32\RTLTEAMING_NB.DLL
2010-12-01 21:07:50 ----RA---- C:\WINDOWS\system32\drivers\RTLTEAMING.SYS
2010-12-01 21:07:49 ----RA---- C:\WINDOWS\system32\drivers\RTLVLAN.SYS
2010-12-01 21:07:47 ----RA---- C:\WINDOWS\system32\drivers\RtNdPt5x.sys
2010-12-01 21:06:04 ----D---- C:\Documents and Settings\Owner\Application Data\AdobeUM
2010-12-01 21:05:24 ----D---- C:\Documents and Settings\Owner\Application Data\Adobe
2010-12-01 21:05:21 ----D---- C:\Program Files\Common Files\Adobe
2010-12-01 21:04:05 ----D---- C:\Program Files\DIFX
2010-12-01 21:04:01 ----A---- C:\WINDOWS\system32\drivers\usbfilter.sys
2010-12-01 21:03:28 ----D---- C:\Program Files\ATI Technologies
2010-12-01 21:03:26 ----D---- C:\Program Files\ATI
2010-12-01 21:01:42 ----A---- C:\WINDOWS\system32\drivers\GVTDrv.sys
2010-12-01 20:53:08 ----D---- C:\Documents and Settings\All Users\Application Data\InstallShield
2010-12-01 20:53:06 ----A---- C:\WINDOWS\system32\drivers\AppleCharger.sys
2010-12-01 20:53:06 ----A---- C:\WINDOWS\system32\AppleChargerSrv.exe
2010-12-01 20:52:44 ----D---- C:\Program Files\Gigabyte
2010-12-01 20:52:26 ----A---- C:\WINDOWS\IsUninst.exe
2010-12-01 20:52:08 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-12-01 20:52:06 ----A---- C:\WINDOWS\system32\drivers\AmdPPM.sys
2010-12-01 20:52:05 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-12-01 20:52:04 ----D---- C:\Program Files\AMD
2010-12-01 20:52:00 ----D---- C:\Documents and Settings\Owner\Application Data\InstallShield
2010-12-01 20:49:36 ----D---- C:\WINDOWS\system32\Lang
2010-12-01 12:23:46 ----A---- C:\WINDOWS\system32\wpa.bak
2010-12-01 12:21:25 ----A---- C:\WINDOWS\gdrv.sys
2010-12-01 12:19:22 ----A---- C:\WINDOWS\system32\drivers\copperhd.sys
2010-12-01 12:14:07 ----D---- C:\Documents and Settings\Owner\Application Data\Mozilla
2010-12-01 12:13:31 ----D---- C:\Documents and Settings\All Users\Application Data\NVIDIA Corporation
2010-12-01 12:13:04 ----A---- C:\WINDOWS\system32\OpenCL.dll
2010-12-01 12:13:04 ----A---- C:\WINDOWS\system32\nvoglnt.dll
2010-12-01 12:13:04 ----A---- C:\WINDOWS\system32\nvgenco32.dll
2010-12-01 12:13:04 ----A---- C:\WINDOWS\system32\nvdispco32.dll
2010-12-01 12:13:04 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2010-12-01 12:13:04 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2010-12-01 12:13:04 ----A---- C:\WINDOWS\system32\nvcuda.dll
2010-12-01 12:13:03 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2010-12-01 12:13:03 ----A---- C:\WINDOWS\system32\nvapi.dll
2010-12-01 12:13:03 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2010-12-01 12:13:03 ----A---- C:\WINDOWS\system32\drivers\nv4_mini.sys
2010-12-01 12:12:37 ----D---- C:\Program Files\NVIDIA Corporation
2010-12-01 12:12:26 ----D---- C:\NVIDIA
2010-12-01 07:29:47 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2010-12-01 07:29:46 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2010-12-01 07:29:45 ----A---- C:\WINDOWS\system32\drivers\dmusic.sys
2010-12-01 07:29:42 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2010-12-01 07:29:42 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2010-12-01 07:29:41 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2010-12-01 07:29:41 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2010-12-01 07:29:40 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2010-12-01 07:29:40 ----A---- C:\WINDOWS\system32\drivers\mskssrv.sys
2010-12-01 07:29:39 ----A---- C:\WINDOWS\system32\drivers\mspqm.sys
2010-12-01 07:29:38 ----A---- C:\WINDOWS\system32\drivers\mspclock.sys
2010-12-01 07:29:31 ----D---- C:\WINDOWS\system32\RTCOM
2010-12-01 07:29:29 ----A---- C:\WINDOWS\system32\ksuser.dll
2010-12-01 07:29:29 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2010-12-01 07:29:07 ----HDC---- C:\WINDOWS\$NtUninstallKB888111WXPSP2$
2010-12-01 07:29:03 ----A---- C:\WINDOWS\vncutil.exe
2010-12-01 07:29:03 ----A---- C:\WINDOWS\SOUNDMAN.EXE
2010-12-01 07:29:03 ----A---- C:\WINDOWS\SkyTel.exe
2010-12-01 07:29:02 ----A---- C:\WINDOWS\RtlUpd.exe
2010-12-01 07:29:01 ----A---- C:\WINDOWS\system32\RtkCoInstXP.dll
2010-12-01 07:29:01 ----A---- C:\WINDOWS\system32\drivers\RtkHDAud.sys
2010-12-01 07:29:01 ----A---- C:\WINDOWS\RtkAudioService.exe
2010-12-01 07:29:00 ----A---- C:\WINDOWS\RTLCPL.EXE
2010-12-01 07:28:57 ----A---- C:\WINDOWS\system32\drivers\Monfilt.sys
2010-12-01 07:28:57 ----A---- C:\WINDOWS\RTHDCPL.EXE
2010-12-01 07:28:56 ----A---- C:\WINDOWS\MicCal.exe
2010-12-01 07:28:55 ----A---- C:\WINDOWS\ALCMTR.EXE
2010-12-01 07:28:54 ----D---- C:\Program Files\Realtek
2010-12-01 07:28:54 ----A---- C:\WINDOWS\system32\drivers\Ambfilt.sys
2010-12-01 07:28:54 ----A---- C:\WINDOWS\ALCWZRD.EXE
2010-12-01 07:28:50 ----R---- C:\WINDOWS\RtlExUpd.dll
2010-12-01 07:28:22 ----HD---- C:\Program Files\DeviceVM
2010-12-01 07:27:24 ----D---- C:\WINDOWS\system32\XPSViewer
2010-12-01 07:27:22 ----D---- C:\Program Files\MSBuild
2010-12-01 07:27:21 ----D---- C:\WINDOWS\system32\en-US
2010-12-01 07:27:18 ----D---- C:\Program Files\Reference Assemblies
2010-12-01 07:26:57 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2010-12-01 07:26:57 ----N---- C:\WINDOWS\system32\prntvpt.dll
2010-12-01 07:26:56 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2010-12-01 07:26:56 ----D---- C:\d98bc93555f6266db079
2010-12-01 07:26:36 ----RSD---- C:\WINDOWS\assembly
2010-12-01 07:26:25 ----D---- C:\WINDOWS\Microsoft.NET
2010-12-01 07:26:03 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2010-12-01 07:26:02 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2010-12-01 07:25:59 ----D---- C:\Program Files\MSXML 6.0
2010-12-01 07:24:59 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2010-12-01 07:23:41 ----RA---- C:\WINDOWS\GSetup.exe
2010-12-01 07:23:41 ----A---- C:\WINDOWS\GSetup.ini
2010-12-01 07:20:06 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys
2010-12-01 07:18:44 ----N---- C:\WINDOWS\system32\drivers\razerlow.sys
2010-12-01 07:18:44 ----A---- C:\WINDOWS\system32\drivers\USBICP.sys
2010-12-01 07:18:41 ----HD---- C:\Program Files\InstallShield Installation Information
2010-12-01 07:18:41 ----D---- C:\Program Files\Razer
2010-12-01 07:18:20 ----D---- C:\Program Files\Common Files\InstallShield
2010-12-01 07:16:02 ----D---- C:\Documents and Settings\Owner\Application Data\Identities
2010-12-01 07:16:01 ----HD---- C:\Program Files\Uninstall Information
2010-12-01 07:15:51 ----SD---- C:\Documents and Settings\Owner\Application Data\Microsoft
2010-12-01 07:15:51 ----ASH---- C:\Documents and Settings\Owner\Application Data\desktop.ini
2010-12-01 07:15:46 ----D---- C:\WINDOWS\SoftwareDistribution
2010-12-01 07:15:45 ----SD---- C:\WINDOWS\system32\Microsoft
2010-12-01 07:15:44 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-12-01 07:10:27 ----D---- C:\WINDOWS\system32\xircom
2010-12-01 07:10:27 ----D---- C:\Program Files\xerox
2010-12-01 07:10:27 ----D---- C:\Program Files\microsoft frontpage
2010-12-01 07:10:14 ----RASH---- C:\MSDOS.SYS
2010-12-01 07:10:14 ----RASH---- C:\IO.SYS
2010-12-01 07:10:14 ----A---- C:\WINDOWS\control.ini
2010-12-01 07:10:14 ----A---- C:\CONFIG.SYS
2010-12-01 07:10:14 ----A---- C:\AUTOEXEC.BAT
2010-12-01 07:10:06 ----A---- C:\WINDOWS\OEWABLog.txt
2010-12-01 07:10:03 ----A---- C:\WINDOWS\system32\mapi32.dll
2010-12-01 07:09:25 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-12-01 07:09:25 ----RD---- C:\WINDOWS\Offline Web Pages
2010-12-01 07:09:25 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2010-12-01 07:09:21 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2010-12-01 07:09:17 ----HD---- C:\Program Files\WindowsUpdate
2010-12-01 07:08:57 ----D---- C:\WINDOWS\system32\DirectX
2010-12-01 07:08:35 ----A---- C:\WINDOWS\system32\atrace.dll
2010-12-01 07:08:33 ----A---- C:\WINDOWS\system32\desktop.ini
2010-12-01 07:08:33 ----A---- C:\WINDOWS\desktop.ini
2010-12-01 07:08:26 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2010-12-01 07:08:25 ----D---- C:\Program Files\Common Files\Services
2010-12-01 07:08:25 ----A---- C:\WINDOWS\system32\acctres.dll
2010-12-01 07:08:22 ----SD---- C:\WINDOWS\Tasks
2010-12-01 07:08:22 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2010-12-01 07:08:21 ----D---- C:\Program Files\Common Files\MSSoap
2010-12-01 07:08:17 ----D---- C:\WINDOWS\srchasst
2010-12-01 07:08:16 ----D---- C:\WINDOWS\system32\Macromed
2010-12-01 07:08:14 ----A---- C:\WINDOWS\system32\wuweb.dll
2010-12-01 07:08:14 ----A---- C:\WINDOWS\system32\wucltui.dll
2010-12-01 07:08:14 ----A---- C:\WINDOWS\system32\wuauserv.dll
2010-12-01 07:08:13 ----A---- C:\WINDOWS\system32\wups.dll
2010-12-01 07:08:13 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2010-12-01 07:08:13 ----A---- C:\WINDOWS\system32\wuaueng.dll
2010-12-01 07:08:13 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2010-12-01 07:08:13 ----A---- C:\WINDOWS\system32\wuauclt.exe
2010-12-01 07:08:13 ----A---- C:\WINDOWS\system32\wuapi.dll
2010-12-01 07:08:13 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2010-12-01 07:08:13 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2010-12-01 07:08:12 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2010-12-01 07:08:12 ----A---- C:\WINDOWS\system32\qmgr.dll
2010-12-01 07:08:08 ----D---- C:\Program Files\Movie Maker
2010-12-01 07:08:05 ----A---- C:\WINDOWS\system32\safrslv.dll
2010-12-01 07:08:05 ----A---- C:\WINDOWS\system32\safrdm.dll
2010-12-01 07:08:05 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2010-12-01 07:08:05 ----A---- C:\WINDOWS\system32\racpldlg.dll
2010-12-01 07:08:01 ----D---- C:\WINDOWS\system32\Restore
2010-12-01 07:08:01 ----A---- C:\WINDOWS\system32\srsvc.dll
2010-12-01 07:08:01 ----A---- C:\WINDOWS\system32\srrstr.dll
2010-12-01 07:08:01 ----A---- C:\WINDOWS\system32\fltmc.exe
2010-12-01 07:08:01 ----A---- C:\WINDOWS\system32\fltlib.dll
2010-12-01 07:08:01 ----A---- C:\WINDOWS\system32\drivers\fltmgr.sys
2010-12-01 07:08:00 ----A---- C:\WINDOWS\system32\srclient.dll
2010-12-01 07:08:00 ----A---- C:\WINDOWS\system32\mnmdd.dll
2010-12-01 07:08:00 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2010-12-01 07:08:00 ----A---- C:\WINDOWS\system32\ils.dll
2010-12-01 07:08:00 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2010-12-01 07:07:59 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2010-12-01 07:07:59 ----A---- C:\WINDOWS\system32\msconf.dll
2010-12-01 07:07:59 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2010-12-01 07:07:57 ----D---- C:\Program Files\NetMeeting
2010-12-01 07:07:57 ----A---- C:\WINDOWS\system32\msoert2.dll
2010-12-01 07:07:57 ----A---- C:\WINDOWS\system32\msoeacct.dll
2010-12-01 07:07:56 ----A---- C:\WINDOWS\system32\inetres.dll
2010-12-01 07:07:55 ----A---- C:\WINDOWS\system32\inetcomm.dll
2010-12-01 07:07:54 ----D---- C:\Program Files\Outlook Express
2010-12-01 07:07:54 ----A---- C:\WINDOWS\system32\schedsvc.dll
2010-12-01 07:07:54 ----A---- C:\WINDOWS\system32\mstinit.exe
2010-12-01 07:07:54 ----A---- C:\WINDOWS\system32\mstask.dll
2010-12-01 07:07:53 ----A---- C:\WINDOWS\system32\isign32.dll
2010-12-01 07:07:53 ----A---- C:\WINDOWS\system32\inetcfg.dll
2010-12-01 07:07:53 ----A---- C:\WINDOWS\system32\icwphbk.dll
2010-12-01 07:07:53 ----A---- C:\WINDOWS\system32\icwdial.dll
2010-12-01 07:07:47 ----D---- C:\Program Files\Common Files\System
2010-12-01 07:07:46 ----D---- C:\Program Files\Internet Explorer
2010-12-01 07:07:35 ----D---- C:\Program Files\ComPlus Applications
2010-12-01 07:07:34 ----A---- C:\WINDOWS\vbaddin.ini
2010-12-01 07:07:34 ----A---- C:\WINDOWS\vb.ini
2010-12-01 07:07:29 ----D---- C:\WINDOWS\Registration
2010-12-01 07:07:09 ----D---- C:\Program Files\Windows Media Player
2010-12-01 07:07:09 ----D---- C:\Program Files\Online Services
2010-12-01 07:07:07 ----A---- C:\WINDOWS\system32\drivers\mouclass.sys
2010-12-01 07:07:04 ----D---- C:\Program Files\Messenger
2010-12-01 07:07:01 ----D---- C:\Program Files\MSN Gaming Zone
2010-12-01 07:07:01 ----A---- C:\WINDOWS\system32\write.exe
2010-12-01 07:06:50 ----A---- C:\WINDOWS\system32\sndvol32.exe
2010-12-01 07:06:50 ----A---- C:\WINDOWS\system32\hticons.dll
2010-12-01 07:06:50 ----A---- C:\WINDOWS\system32\avwav.dll
2010-12-01 07:06:50 ----A---- C:\WINDOWS\system32\avtapi.dll
2010-12-01 07:06:50 ----A---- C:\WINDOWS\system32\avmeter.dll
2010-12-01 07:06:49 ----A---- C:\WINDOWS\system32\winchat.exe
2010-12-01 07:06:42 ----A---- C:\WINDOWS\system32\charmap.exe
2010-12-01 07:06:42 ----A---- C:\WINDOWS\system32\getuname.dll
2010-12-01 07:06:42 ----A---- C:\WINDOWS\system32\calc.exe
2010-12-01 07:06:41 ----A---- C:\WINDOWS\system32\winmine.exe
2010-12-01 07:06:41 ----A---- C:\WINDOWS\system32\sol.exe
2010-12-01 07:06:41 ----A---- C:\WINDOWS\system32\mshearts.exe
2010-12-01 07:06:41 ----A---- C:\WINDOWS\system32\freecell.exe
2010-12-01 07:06:40 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2010-12-01 07:06:40 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2010-12-01 07:06:40 ----A---- C:\WINDOWS\system32\tslabels.ini
2010-12-01 07:06:40 ----A---- C:\WINDOWS\system32\tskill.exe
2010-12-01 07:06:40 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2010-12-01 07:06:40 ----A---- C:\WINDOWS\system32\tscon.exe
2010-12-01 07:06:40 ----A---- C:\WINDOWS\system32\shadow.exe
2010-12-01 07:06:40 ----A---- C:\WINDOWS\system32\rwinsta.exe
2010-12-01 07:06:40 ----A---- C:\WINDOWS\system32\reset.exe
2010-12-01 07:06:40 ----A---- C:\WINDOWS\system32\regini.exe
2010-12-01 07:06:40 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2010-12-01 07:06:40 ----A---- C:\WINDOWS\system32\qwinsta.exe
2010-12-01 07:06:40 ----A---- C:\WINDOWS\system32\qappsrv.exe
2010-12-01 07:06:39 ----A---- C:\WINDOWS\system32\msg.exe
2010-12-01 07:06:39 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2010-12-01 07:06:39 ----A---- C:\WINDOWS\system32\logoff.exe
2010-12-01 07:06:39 ----A---- C:\WINDOWS\system32\cdmodem.dll
2010-12-01 07:06:38 ----A---- C:\WINDOWS\system32\stclient.dll
2010-12-01 07:06:38 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2010-12-01 07:06:38 ----A---- C:\WINDOWS\system32\mtxex.dll
2010-12-01 07:06:38 ----A---- C:\WINDOWS\system32\mtxdm.dll
2010-12-01 07:06:38 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2010-12-01 07:06:38 ----A---- C:\WINDOWS\system32\comsnap.dll
2010-12-01 07:06:38 ----A---- C:\WINDOWS\system32\comrepl.dll
2010-12-01 07:06:38 ----A---- C:\WINDOWS\system32\comaddin.dll
2010-12-01 07:06:33 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2010-12-01 07:06:20 ----D---- C:\Program Files\MSN
2010-12-01 07:06:19 ----A---- C:\WINDOWS\system32\sndrec32.exe
2010-12-01 07:06:19 ----A---- C:\WINDOWS\system32\mplay32.exe
2010-12-01 07:06:19 ----A---- C:\WINDOWS\system32\hypertrm.dll
2010-12-01 07:06:19 ----A---- C:\WINDOWS\system32\accwiz.exe
2010-12-01 07:06:18 ----D---- C:\Program Files\Windows NT
2010-12-01 07:06:18 ----A---- C:\WINDOWS\system32\spider.exe
2010-12-01 07:06:18 ----A---- C:\WINDOWS\system32\mspaint.exe
2010-12-01 07:06:18 ----A---- C:\WINDOWS\system32\clipbrd.exe
2010-12-01 07:06:17 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2010-12-01 07:06:17 ----A---- C:\WINDOWS\system32\remotepg.dll
2010-12-01 07:06:17 ----A---- C:\WINDOWS\system32\mstscax.dll
2010-12-01 07:06:17 ----A---- C:\WINDOWS\system32\mstsc.exe
2010-12-01 07:06:17 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2010-12-01 07:06:17 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2010-12-01 07:06:17 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2010-12-01 07:06:16 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2010-12-01 07:06:16 ----A---- C:\WINDOWS\system32\termsrv.dll
2010-12-01 07:06:16 ----A---- C:\WINDOWS\system32\sessmgr.exe
2010-12-01 07:06:16 ----A---- C:\WINDOWS\system32\rdshost.exe
2010-12-01 07:06:16 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2010-12-01 07:06:16 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2010-12-01 07:06:16 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2010-12-01 07:06:16 ----A---- C:\WINDOWS\system32\rdpclip.exe
2010-12-01 07:06:16 ----A---- C:\WINDOWS\system32\rdchost.dll
2010-12-01 07:06:16 ----A---- C:\WINDOWS\system32\qprocess.exe
2010-12-01 07:06:15 ----D---- C:\WINDOWS\system32\MsDtc
2010-12-01 07:06:15 ----A---- C:\WINDOWS\system32\mtxoci.dll
2010-12-01 07:06:15 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2010-12-01 07:06:15 ----A---- C:\WINDOWS\system32\msdtctm.dll
2010-12-01 07:06:15 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2010-12-01 07:06:15 ----A---- C:\WINDOWS\system32\icaapi.dll
2010-12-01 07:06:15 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2010-12-01 07:06:14 ----D---- C:\WINDOWS\system32\Com
2010-12-01 07:06:14 ----A---- C:\WINDOWS\system32\xolehlp.dll
2010-12-01 07:06:14 ----A---- C:\WINDOWS\system32\msdtclog.dll
2010-12-01 07:06:14 ----A---- C:\WINDOWS\system32\msdtc.exe
2010-12-01 07:06:14 ----A---- C:\WINDOWS\system32\colbact.dll
2010-12-01 07:06:13 ----A---- C:\WINDOWS\system32\comsvcs.dll
2010-12-01 07:06:13 ----A---- C:\WINDOWS\system32\clbcatex.dll
2010-12-01 07:06:13 ----A---- C:\WINDOWS\system32\catsrvut.dll
2010-12-01 07:06:13 ----A---- C:\WINDOWS\system32\catsrvps.dll
2010-12-01 07:06:13 ----A---- C:\WINDOWS\system32\catsrv.dll
2010-12-01 07:06:12 ----A---- C:\WINDOWS\system32\comuid.dll
2010-12-01 07:06:12 ----A---- C:\WINDOWS\system32\clbcatq.dll
2010-12-01 07:06:07 ----A---- C:\WINDOWS\system32\servdeps.dll
2010-12-01 07:06:07 ----A---- C:\WINDOWS\system32\mmfutil.dll
2010-12-01 07:06:07 ----A---- C:\WINDOWS\system32\licwmi.dll
2010-12-01 07:06:07 ----A---- C:\WINDOWS\system32\cmprops.dll
2010-12-01 07:06:03 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2010-12-01 07:06:03 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
2010-11-30 23:05:15 ----A---- C:\WINDOWS\system32\h323log.txt
2010-11-30 22:57:25 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2010-11-30 22:56:46 ----A---- C:\WINDOWS\system32\hidserv.dll
2010-11-30 22:56:15 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2010-11-30 22:54:54 ----A---- C:\WINDOWS\system32\usbui.dll
2010-11-30 22:54:17 ----A---- C:\WINDOWS\imsins.BAK
2010-11-30 22:54:15 ----SHD---- C:\WINDOWS\Installer
2010-11-30 22:54:15 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-11-30 22:54:14 ----D---- C:\Program Files\Common Files\ODBC
2010-11-30 22:54:14 ----A---- C:\WINDOWS\ODBCINST.INI
2010-11-30 22:54:11 ----RD---- C:\Program Files
2010-11-30 22:54:11 ----D---- C:\Program Files\Common Files\SpeechEngines
2010-11-30 22:54:11 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-11-30 22:54:11 ----D---- C:\Program Files\Common Files
2010-11-30 22:54:09 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2010-11-30 22:54:09 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2010-11-30 22:54:09 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2010-11-30 22:54:07 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2010-11-30 22:54:07 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2010-11-30 22:54:06 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2010-11-30 22:54:06 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2010-11-30 22:54:06 ----RA---- C:\WINDOWS\system32\kbdur.dll
2010-11-30 22:54:06 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2010-11-30 22:54:06 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2010-11-30 22:54:06 ----RA---- C:\WINDOWS\system32\kbdru.dll
2010-11-30 22:54:06 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2010-11-30 22:54:06 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2010-11-30 22:54:06 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2010-11-30 22:54:06 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2010-11-30 22:54:04 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2010-11-30 22:54:04 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2010-11-30 22:54:04 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2010-11-30 22:54:04 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2010-11-30 22:54:04 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2010-11-30 22:54:04 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2010-11-30 22:54:04 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2010-11-30 22:54:02 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2010-11-30 22:54:02 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2010-11-30 22:54:02 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2010-11-30 22:54:02 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2010-11-30 22:54:02 ----RA---- C:\WINDOWS\system32\kbdest.dll
2010-11-30 22:54:00 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2010-11-30 22:54:00 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2010-11-30 22:54:00 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2010-11-30 22:54:00 ----RA---- C:\WINDOWS\system32\kbdro.dll
2010-11-30 22:54:00 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2010-11-30 22:54:00 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2010-11-30 22:54:00 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2010-11-30 22:54:00 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2010-11-30 22:54:00 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2010-11-30 22:54:00 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2010-11-30 22:54:00 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2010-11-30 22:54:00 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2010-11-30 22:54:00 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2010-11-30 22:53:58 ----A---- C:\WINDOWS\system32\irclass.dll
2010-11-30 22:53:58 ----A---- C:\WINDOWS\system32\dgsetup.dll
2010-11-30 22:53:58 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2010-11-30 22:53:57 ----A---- C:\WINDOWS\system32\spxcoins.dll
2010-11-30 22:53:57 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2010-11-30 22:53:55 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2010-11-30 22:53:55 ----A---- C:\WINDOWS\TASKMAN.EXE
2010-11-30 22:53:55 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2010-11-30 22:53:55 ----A---- C:\WINDOWS\system32\batt.dll
2010-11-30 22:53:54 ----A---- C:\WINDOWS\notepad.exe
2010-11-30 22:53:52 ----A---- C:\WINDOWS\system32\storprop.dll
2010-11-30 22:53:45 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2010-11-30 22:52:04 ----RA---- C:\WINDOWS\SET8.tmp
2010-11-30 22:52:02 ----RA---- C:\WINDOWS\SET4.tmp
2010-11-30 22:52:01 ----RA---- C:\WINDOWS\SET3.tmp
2010-11-30 22:51:56 ----D---- C:\WINDOWS\system32\CatRoot2
2010-11-30 22:51:56 ----D---- C:\WINDOWS\system32\CatRoot
2010-11-30 22:51:51 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2010-11-30 22:51:34 ----A---- C:\WINDOWS\setuplog.txt
2010-11-30 22:51:31 ----D---- C:\Documents and Settings
2010-11-30 22:50:25 ----RSH---- C:\boot.ini
2010-11-30 22:48:56 ----SHD---- C:\System Volume Information
2010-11-30 22:45:00 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-11-30 22:45:00 ----RSD---- C:\WINDOWS\Fonts
2010-11-30 22:45:00 ----RD---- C:\WINDOWS\Web
2010-11-30 22:45:00 ----HD---- C:\WINDOWS\inf
2010-11-30 22:45:00 ----D---- C:\WINDOWS\WinSxS
2010-11-30 22:45:00 ----D---- C:\WINDOWS\twain_32
2010-11-30 22:45:00 ----D---- C:\WINDOWS\Temp
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\wins
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\wbem
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\usmt
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\spool
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\ShellExt
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\Setup
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\ras
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\oobe
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\npp
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\mui
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\inetsrv
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\IME
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\icsxml
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\ias
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\export
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\drivers\etc
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\drivers\disdn
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\drivers
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\dhcp
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\config
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\3com_dmi
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\3076
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\2052
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\1054
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\1042
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\1041
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\1037
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\1033
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\1031
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\1028
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32\1025
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system32
2010-11-30 22:45:00 ----D---- C:\WINDOWS\system
2010-11-30 22:45:00 ----D---- C:\WINDOWS\security
2010-11-30 22:45:00 ----D---- C:\WINDOWS\Resources
2010-11-30 22:45:00 ----D---- C:\WINDOWS\repair
2010-11-30 22:45:00 ----D---- C:\WINDOWS\Provisioning
2010-11-30 22:45:00 ----D---- C:\WINDOWS\pchealth
2010-11-30 22:45:00 ----D---- C:\WINDOWS\PeerNet
2010-11-30 22:45:00 ----D---- C:\WINDOWS\mui
2010-11-30 22:45:00 ----D---- C:\WINDOWS\msapps
2010-11-30 22:45:00 ----D---- C:\WINDOWS\msagent
2010-11-30 22:45:00 ----D---- C:\WINDOWS\Media
2010-11-30 22:45:00 ----D---- C:\WINDOWS\java
2010-11-30 22:45:00 ----D---- C:\WINDOWS\ime
2010-11-30 22:45:00 ----D---- C:\WINDOWS\Help
2010-11-30 22:45:00 ----D---- C:\WINDOWS\Driver Cache
2010-11-30 22:45:00 ----D---- C:\WINDOWS\Debug
2010-11-30 22:45:00 ----D---- C:\WINDOWS\Cursors
2010-11-30 22:45:00 ----D---- C:\WINDOWS\Connection Wizard
2010-11-30 22:45:00 ----D---- C:\WINDOWS\Config
2010-11-30 22:45:00 ----D---- C:\WINDOWS\AppPatch
2010-11-30 22:45:00 ----D---- C:\WINDOWS\addins
2010-11-30 22:45:00 ----D---- C:\WINDOWS
2010-11-30 22:45:00 ----ASH---- C:\pagefile.sys

[giselle]

======List of files/folders modified in the last 1 months======

2010-12-01 07:10:14 ----A---- C:\WINDOWS\win.ini
2010-12-01 07:09:54 ----ASH---- C:\WINDOWS\fonts\desktop.ini
2010-11-30 22:54:11 ----A---- C:\WINDOWS\system.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-09-07 28880]
R1 AmdPPM;Ovladaè procesoru HwPState AMD; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-17 33792]
R1 AppleCharger;AppleCharger; C:\WINDOWS\system32\DRIVERS\AppleCharger.sys [2010-04-27 19496]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-09-07 165584]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-09-07 46672]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-09-07 17744]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-09-07 100176]
R2 RtNdPt5x;Realtek NDIS Protocol Driver; C:\WINDOWS\system32\DRIVERS\RtNdPt5x.sys [2008-07-09 22016]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-09-07 23376]
R3 FsUsbExDisk;FsUsbExDisk; \??\C:\WINDOWS\system32\FsUsbExDisk.SYS []
R3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
R3 GVTDrv;GVTDrv; \??\C:\WINDOWS\system32\Drivers\GVTDrv.sys []
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2010-07-28 6108776]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-10-16 9623680]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2010-05-03 225232]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbfilter;AMD USB Filter Driver; C:\WINDOWS\system32\DRIVERS\usbfilter.sys [2009-12-22 30392]
R3 UsbFltr;Razer Copperhead Driver; C:\WINDOWS\system32\drivers\copperhd.sys [2005-11-02 11596]
S0 sxoiy;sxoiy; C:\WINDOWS\System32\drivers\rosmyq.sys [2010-12-26 54016]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-18 1691480]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-18 1395800]
S3 RTLTEAMING;Realtek Intermediate Driver for Ethernet Extended Features; C:\WINDOWS\system32\DRIVERS\RTLTEAMING.SYS [2009-10-12 29440]
S3 RTLVLAN;Realtek VLAN Intermediate Driver; C:\WINDOWS\system32\DRIVERS\RTLVLAN.SYS [2009-02-16 17536]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\WINDOWS\system32\DRIVERS\ss_bbus.sys [2010-04-27 98432]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\WINDOWS\system32\DRIVERS\ss_bmdfl.sys [2010-04-27 14848]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\WINDOWS\system32\DRIVERS\ss_bmdm.sys [2010-04-27 123648]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 BCUService;Browser Configuration Utility Service; C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe [2009-10-15 223464]
R2 FsUsbExService;FsUsbExService; C:\WINDOWS\system32\FsUsbExService.Exe [2010-07-04 238952]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-10-16 156776]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
S3 AppleChargerSrv;AppleChargerSrv; C:\WINDOWS\system32\AppleChargerSrv.exe [2010-04-07 31272]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-30 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-30 881664]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-30 132096]

-----------------EOF-----------------

[cernohous13]

Vítám tě u nás

Dej mi i nález MBAM

Stáhni si ComboFix
a ulož ho na plochu.
návod na použití: http://www.bleepingcomputer.com/combofi ... t-combofix
Ukonči všechna aktivní okna,vypni Antispy a Antivir a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna a nic nespouštěj
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Kdyby ti po použití ComboFixu systém nenaběhl - při restartu F8 a poslední známá funkční konfigurace

[giselle]

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 5396

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

26.12.2010 7:58:11
mbam-log-2010-12-26 (07-58-06).txt

Scan type: Quick scan
Objects scanned: 142635
Time elapsed: 3 minute(s), 35 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\windows\temp\_avast5_\trz2d8.tmp (Trojan.FraudPack.Gen) -> No action taken.
c:\windows\temp\_avast5_\trz2d9.tmp (Trojan.FraudPack.Gen) -> No action taken.

[cernohous13]

Jak dopadl ComboFix?