procim o kontrolu combof.

[eko]

ComboFix 11-02-06.01 - Jura 07.02.2011 9:46.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.3036.1790 [GMT 1:00]
Spuštěný z: c:\users\Jura\Desktop\ComboFix.exe
AV: TrustPort Antivirus *Disabled/Updated* {C3AD9610-D79C-79A3-8C7B-CAB50B3AA5DC}
FW: TrustPort Personal Firewall *Enabled* {FB961735-9DF3-78FB-A724-6380F5E9E2A7}
SP: TrustPort Antivirus *Disabled/Updated* {78CC77F4-F1A6-762D-B6CB-F1C770BDEF61}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

Nakažená kopie c:\windows\System32\autochk.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.0.6001.18000_none_e1f3ed49c1c122ef\autochk.exe

.
((((((((((((((((((((((((( Soubory vytvořené od 2011-01-07 do 2011-02-07 )))))))))))))))))))))))))))))))
.

2011-02-07 05:04 . 2011-01-25 07:48 38456 ----a-w- c:\windows\system32\drivers\tdifw.sys
2011-02-07 05:03 . 2011-01-25 07:47 35896 ----a-w- c:\windows\system32\drivers\avasdmft.sys
2011-02-07 05:03 . 2011-02-07 05:04 -------- d-----w- c:\program files\TrustPort
2011-02-07 05:03 . 2011-01-25 07:49 33632 ----a-w- c:\windows\system32\drivers\tpsec.sys
2011-02-06 18:02 . 2011-01-07 13:54 149456 ----a-w- c:\windows\SGDetectionTool.dll0213.old
2011-02-06 18:02 . 2011-01-07 13:54 2000848 ----a-w- c:\windows\PCTBDCore.dll0213.old
2011-02-06 18:02 . 2011-01-07 13:54 767952 ----a-w- c:\windows\BDTSupport.dll0213.old
2011-02-06 16:28 . 2011-02-06 22:34 -------- d-----w- c:\programdata\PC Tools
2011-02-06 13:24 . 2011-02-06 13:24 -------- d-----w- C:\temp
2011-02-06 13:21 . 2008-02-15 15:35 102400 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\lxbkpp5c.dll
2011-02-06 11:06 . 2011-01-20 09:39 5890896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{9C6EC40E-6E2C-4048-99AC-55B06FBA2B78}\mpengine.dll
2011-02-06 07:56 . 2011-02-06 07:56 -------- d-----w- c:\program files\VS Revo Group
2011-02-05 13:50 . 2011-02-05 14:10 -------- d-----w- c:\program files\Windows Live Safety Center
2011-02-05 07:33 . 2010-11-01 23:03 1448448 ----a-w- c:\windows\system32\inetcpl.cpl
2011-02-05 07:33 . 2010-11-01 22:59 2381824 ----a-w- c:\windows\system32\mshtml.tlb
2011-02-04 22:02 . 2010-09-01 07:30 94208 ----a-w- c:\program files\Internet Explorer\cs\iediag.resources.dll
2011-02-04 21:50 . 2010-08-17 23:54 280064 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-02-04 21:50 . 2010-08-17 23:54 135680 ----a-w- c:\windows\system32\XpsRasterService.dll
2011-02-04 21:50 . 2010-08-17 23:52 979456 ----a-w- c:\windows\system32\MFH264Dec.dll
2011-02-04 21:50 . 2010-08-17 23:51 357376 ----a-w- c:\windows\system32\MFHEAACdec.dll
2011-02-04 21:50 . 2010-08-17 23:51 261632 ----a-w- c:\windows\system32\mfreadwrite.dll
2011-02-04 21:50 . 2010-08-17 23:51 302592 ----a-w- c:\windows\system32\mfmp4src.dll
2011-02-04 21:50 . 2010-08-17 23:50 680960 ----a-w- c:\windows\system32\d2d1.dll
2011-02-04 21:50 . 2010-08-17 23:49 1174528 ----a-w- c:\windows\system32\d3d10warp.dll
2011-02-04 21:50 . 2010-08-17 23:49 1068032 ----a-w- c:\windows\system32\DWrite.dll
2011-02-04 21:50 . 2010-08-17 23:49 797184 ----a-w- c:\windows\system32\FntCache.dll
2011-02-04 21:50 . 2010-08-17 23:48 161280 ----a-w- c:\windows\system32\d3d10_1.dll
2011-02-04 21:50 . 2010-08-17 23:48 219648 ----a-w- c:\windows\system32\d3d10_1core.dll
2011-02-04 21:15 . 2011-02-04 21:15 -------- d-----w- c:\program files\Feedback Tool
2011-02-04 16:30 . 2011-02-04 16:39 -------- d-----w- c:\program files\ICQ7.4
2011-02-04 05:17 . 2011-02-04 05:17 -------- d-----w- c:\program files\MSXML 4.0
2011-02-03 15:03 . 2011-02-03 15:03 -------- d-----w- c:\programdata\Sunbelt
2011-02-03 10:18 . 2011-02-03 10:18 -------- d-----w- c:\programdata\LightScribe
2011-02-03 10:04 . 2011-02-03 10:04 -------- d-----w- c:\program files\uTorrent
2011-02-03 08:08 . 2011-02-03 08:08 -------- d-----w- C:\pebuilder3110a
2011-02-03 07:41 . 2011-02-03 07:41 -------- d-----w- c:\users\Public\CyberLink
2011-02-03 07:36 . 2011-02-03 07:41 -------- d-----w- c:\programdata\CyberLink
2011-02-03 07:34 . 2011-02-03 07:34 -------- d-----w- c:\program files\Common Files\LightScribe
2011-02-03 07:33 . 2007-03-22 20:28 1053232 ------w- c:\windows\system32\MFC71u.dll
2011-02-03 07:33 . 2007-03-22 20:28 1066544 ------w- c:\windows\system32\MFC71.dll
2011-02-03 07:33 . 2007-03-22 20:28 353840 ------w- c:\windows\system32\msvcr71.dll
2011-02-03 07:33 . 2007-03-22 20:27 505392 ------w- c:\windows\system32\msvcp71.dll
2011-02-03 07:33 . 2011-02-03 07:37 -------- d-----w- c:\program files\CyberLink
2011-02-03 06:52 . 2011-02-03 06:52 -------- d-----w- c:\program files\Windows Portable Devices
2011-02-03 06:50 . 2009-10-01 01:02 30208 ----a-w- c:\windows\system32\WPDShextAutoplay.exe
2011-02-03 06:39 . 2010-05-04 19:13 231424 ----a-w- c:\windows\system32\msshsq.dll
2011-02-03 06:25 . 2011-02-03 06:26 -------- d-----w- c:\program files\OpenOffice.org 3
2011-02-03 06:07 . 2011-02-03 06:07 -------- d-----w- c:\program files\VideoLAN
2011-02-03 05:22 . 2011-02-07 05:04 -------- d-----w- c:\program files\Common Files\TrustPort
2011-02-03 05:13 . 2011-02-03 05:13 -------- d-----w- c:\program files\Common Files\Adobe
2011-02-03 05:11 . 2011-02-03 05:11 -------- d-----w- c:\program files\Common Files\Adobe AIR
2011-02-03 05:10 . 2011-02-03 05:10 -------- d-----w- c:\windows\system32\Macromed
2011-02-03 04:57 . 2011-02-03 04:58 -------- d-----w- c:\windows\system32\ca-ES
2011-02-03 04:57 . 2011-02-03 04:58 -------- d-----w- c:\windows\system32\eu-ES
2011-02-03 04:57 . 2011-02-03 04:58 -------- d-----w- c:\windows\system32\vi-VN
2011-02-03 04:45 . 2011-02-03 04:45 -------- d-----w- c:\windows\system32\EventProviders
2011-02-03 04:43 . 2009-04-11 06:32 223208 ----a-w- c:\windows\system32\drivers\netio.sys
2011-02-03 04:42 . 2009-04-11 06:28 83968 ----a-w- c:\windows\system32\wbem\wmiutils.dll
2011-02-03 04:42 . 2009-04-11 06:28 744448 ----a-w- c:\windows\system32\wbem\wbemcore.dll
2011-02-03 04:42 . 2009-04-11 06:28 30208 ----a-w- c:\windows\system32\wbem\wbemprox.dll
2011-02-03 04:42 . 2009-04-11 06:28 265728 ----a-w- c:\windows\system32\wbem\repdrvfs.dll
2011-02-03 04:42 . 2009-04-11 06:28 189440 ----a-w- c:\windows\system32\wbem\mofd.dll
2011-02-03 04:42 . 2009-04-11 06:28 614912 ----a-w- c:\windows\system32\wbem\fastprox.dll
2011-02-03 04:42 . 2009-04-11 06:28 265728 ----a-w- c:\windows\system32\wbem\esscli.dll
2011-02-03 04:42 . 2009-04-11 06:28 705536 ----a-w- c:\windows\system32\SmiEngine.dll
2011-02-03 04:42 . 2009-04-11 06:28 218624 ----a-w- c:\windows\system32\wdscore.dll
2011-02-03 04:42 . 2009-04-11 06:27 130560 ----a-w- c:\windows\system32\PkgMgr.exe
2011-02-03 04:42 . 2009-04-11 06:28 247808 ----a-w- c:\windows\system32\drvstore.dll
2011-02-03 04:11 . 2009-08-24 11:36 377344 ----a-w- c:\windows\system32\winhttp.dll
2011-02-03 04:11 . 2010-09-06 16:20 125952 ----a-w- c:\windows\system32\srvsvc.dll
2011-02-03 04:11 . 2010-09-06 16:19 17920 ----a-w- c:\windows\system32\netevent.dll
2011-02-03 04:11 . 2010-09-06 13:45 304128 ----a-w- c:\windows\system32\drivers\srv.sys
2011-02-03 04:11 . 2010-09-06 13:45 145408 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-02-03 04:11 . 2010-09-06 13:45 102400 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-02-03 04:11 . 2010-05-27 20:08 739328 ----a-w- c:\windows\system32\inetcomm.dll
2011-02-03 03:59 . 2011-02-03 03:59 -------- d-----w- c:\program files\Microsoft.NET
2011-02-03 03:58 . 2009-11-08 09:55 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2011-02-03 03:58 . 2009-11-08 09:55 49472 ----a-w- c:\windows\system32\netfxperf.dll
2011-02-03 03:58 . 2009-11-08 09:55 297808 ----a-w- c:\windows\system32\mscoree.dll
2011-02-03 03:58 . 2009-11-08 09:55 295264 ----a-w- c:\windows\system32\PresentationHost.exe
2011-02-03 03:58 . 2009-11-08 09:55 1130824 ----a-w- c:\windows\system32\dfshim.dll
2011-02-03 01:33 . 2009-02-11 09:11 329752 ----a-w- c:\windows\system32\drivers\iaStor.sys
2011-02-03 01:30 . 2009-03-17 07:40 1048576 ------w- C:\K50IJ.BIN
2011-02-03 01:30 . 2009-03-17 07:35 1048576 ------w- C:\K40IJ.BIN
2011-02-03 01:30 . 2008-11-03 07:03 13880 ----a-w- c:\windows\system32\drivers\kbfiltr.sys
2011-02-03 01:30 . 2008-12-24 08:39 14392 ----a-w- c:\windows\system32\drivers\ATKACPI.sys
2011-02-03 01:04 . 2011-02-02 17:42 -------- d-----w- c:\windows\system32\Lang
2011-02-03 01:04 . 2006-11-02 14:21 319456 ----a-w- c:\windows\system32\difxapi.dll
2011-02-03 01:01 . 2011-02-02 17:42 -------- d-----w- c:\program files\Intel
2011-02-03 01:01 . 2008-07-16 08:05 53248 ----a-w- c:\windows\system32\CSVer.dll
2011-02-03 01:01 . 2011-02-03 01:01 -------- d-----w- C:\Intel
2011-02-02 20:11 . 2008-05-27 04:59 18904 ----a-w- c:\windows\system32\StructuredQuerySchemaTrivial.bin
2011-02-02 20:09 . 2011-02-02 20:09 -------- d-----w- c:\windows\system32\x64
2011-02-02 20:04 . 2009-10-23 17:10 714240 ----a-w- c:\windows\system32\timedate.cpl
2011-02-02 19:41 . 2011-02-07 08:34 44544 ----a-w- c:\windows\system32\agremove.exe
2011-02-02 18:57 . 2010-10-19 09:41 222080 ------w- c:\windows\system32\MpSigStub.exe
2011-02-02 18:48 . 2010-02-12 10:48 293376 ----a-w- c:\windows\system32\browserchoice.exe
2011-02-02 18:28 . 2010-10-19 04:27 7680 ----a-w- c:\program files\Internet Explorer\iecompat.dll
2011-02-02 18:26 . 2009-01-08 01:20 355832 ----a-w- c:\program files\Internet Explorer\pdm.dll
2011-02-02 18:26 . 2009-01-08 01:20 265720 ----a-w- c:\program files\Internet Explorer\msdbg2.dll
2011-02-02 18:21 . 2010-02-20 23:06 24064 ----a-w- c:\windows\system32\nshhttp.dll
2011-02-02 18:21 . 2010-02-20 23:05 30720 ----a-w- c:\windows\system32\httpapi.dll
2011-02-02 18:21 . 2010-02-20 20:53 411648 ----a-w- c:\windows\system32\drivers\http.sys
2011-02-02 18:18 . 2009-08-14 13:49 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE
2011-02-02 18:17 . 2009-12-23 11:33 172032 ----a-w- c:\windows\system32\wintrust.dll
2011-02-02 18:16 . 2010-01-29 15:40 1616384 ----a-w- c:\program files\Windows Mail\msoe.dll
2011-02-02 18:16 . 2010-08-17 14:11 128000 ----a-w- c:\windows\system32\spoolsv.exe
2011-02-02 18:16 . 2010-04-05 17:02 317952 ----a-w- c:\windows\system32\MP4SDECD.DLL
2011-02-02 18:16 . 2009-04-23 12:15 784896 ----a-w- c:\windows\system32\rpcrt4.dll
2011-02-02 18:16 . 2010-06-28 17:00 1316864 ----a-w- c:\windows\system32\ole32.dll
2011-02-02 18:16 . 2010-06-28 14:54 339968 ----a-w- c:\program files\Windows NT\Accessories\wordpad.exe
2011-02-02 18:16 . 2010-04-16 16:46 502272 ----a-w- c:\windows\system32\usp10.dll
2011-02-02 18:16 . 2010-10-12 15:53 33280 ----a-w- c:\program files\Windows Mail\wabfind.dll
2011-02-02 18:16 . 2010-10-12 13:41 66048 ----a-w- c:\program files\Windows Mail\wabmig.exe
2011-02-02 18:16 . 2010-10-12 13:41 515584 ----a-w- c:\program files\Windows Mail\wab.exe
2011-02-02 18:16 . 2010-08-26 16:37 157184 ----a-w- c:\windows\system32\t2embed.dll
2011-02-02 18:16 . 2009-06-10 11:42 160256 ----a-w- c:\windows\system32\wkssvc.dll
2011-02-02 18:13 . 2009-10-07 11:36 243712 ----a-w- c:\windows\system32\rastls.dll
2011-02-02 18:07 . 2009-12-04 18:30 12288 ----a-w- c:\windows\system32\tsbyuv.dll
2011-02-02 18:07 . 2009-12-04 18:29 1314816 ----a-w- c:\windows\system32\quartz.dll
2011-02-02 18:07 . 2009-12-04 18:28 22528 ----a-w- c:\windows\system32\msyuv.dll
2011-02-02 18:07 . 2009-12-04 18:28 31744 ----a-w- c:\windows\system32\msvidc32.dll
2011-02-02 18:07 . 2009-12-04 18:28 13312 ----a-w- c:\windows\system32\msrle32.dll
2011-02-02 18:07 . 2009-12-04 18:28 123904 ----a-w- c:\windows\system32\msvfw32.dll
2011-02-02 18:07 . 2009-12-04 18:28 82944 ----a-w- c:\windows\system32\mciavi32.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-23 12:36 . 2008-12-23 12:36 106496 ----a-w- c:\program files\Common Files\CPInstallAction.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SRS Premium Sound"="c:\program files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe" [2009-03-19 3261688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun"="c:\program files\AmIcoSingLun\AmIcoSinglun.exe" [2008-09-30 237568]
"ETDWare"="c:\program files\Elantech\ETDCtrl.exe" [2009-03-06 424352]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-08-25 136216]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-08-25 171032]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-08-25 170520]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2010-11-10 35736]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-10 932288]
"CLMLServer"="c:\program files\CyberLink\Power2Go\CLMLSvc.exe" [2008-07-18 104936]
"P2Go_Menu"="c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2008-06-13 210216]
"lxbkbmgr.exe"="c:\program files\Lexmark X1100 Series\lxbkbmgr.exe" [2008-02-28 74408]
"AntivirusCommunicatorAgent"="c:\program files\TrustPort\Antivirus\bin\avcom.exe" [2011-01-25 772664]
"TrustPortTray"="c:\program files\Common Files\TrustPort\Bin\tptray.exe" [2011-01-25 703032]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer1"=wdmaud.drv

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HDAudDeck]
2009-03-23 06:52 17149952 ----a-r- c:\program files\VIA\VIAudioi\VDeck\VDECK.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Wireless Console 3]
2009-02-06 15:13 1593344 ----a-w- c:\program files\ASUS\Wireless Console 3\wcourier.exe

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 ASUSProcObsrv;ASUS Process Creation/Termination Observer;e:\i386\AsProcOb.sys [x]
R3 avas_service;TrustPort Antivirus On-Access Scanner Agent;c:\program files\TrustPort\Antivirus\bin\avas.exe [2011-01-25 494136]
R3 avasdmft;TrustPort Antivirus On-Access Scanner (W2K/XP) MF;c:\windows\system32\DRIVERS\avasdmft.sys [2011-01-25 35896]
R3 dsio;TrustPort Raw IO Driver;c:\program files\Common Files\TrustPort\bin\dsio.sys [2011-01-25 14904]
R3 gozer;TrustPort Personal GTW;c:\program files\TrustPort\Antivirus\bin\gozer.exe [2011-01-25 485944]
S0 lullaby;lullaby;c:\windows\system32\DRIVERS\lullaby.sys [2008-05-29 15416]
S0 rpcnetp;rpcnetp; [x]
S2 lxbk_device;lxbk_device;c:\windows\system32\lxbkcoms.exe [2008-02-19 537256]
S3 avss_service;TrustPort Antivirus Service Scanner Provider;c:\program files\TrustPort\Antivirus\bin\avss.exe [2011-01-25 289336]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2009-03-13 140800]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-06-09 09:14 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: {{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - c:\program files\ICQ7.4\ICQ.exe
TCP: {C58F6D5A-E951-4B50-9031-D62C23BD2712} = 195.146.100.100,195.146.100.5
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-02-07 09:57
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...


c:\windows\TEMP\TMP00000004913F7AC5CDE6B1A7 524288 bytes

sken byl úspešně dokončen
skryté soubory: 1

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\AUDIODG.EXE
c:\windows\system32\WLANExt.exe
c:\program files\ASUS\ASUS CopyProtect\aspg.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\windows\System32\rpcnetp.exe
c:\program files\ASUS\NB Probe\SPM\spmgr.exe
c:\program files\Common Files\TrustPort\bin\tpmgma.exe
c:\windows\servicing\TrustedInstaller.exe
c:\windows\system32\conime.exe
c:\windows\system32\igfxsrvc.exe
.
**************************************************************************
.
Celkový čas: 2011-02-07 10:02:28 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-02-07 09:02

Před spuštěním: Volných bajtů: 130 613 501 952
Po spuštění: Volných bajtů: 130 551 418 880

- - End Of File - - F76C5449836DFEF6B4FA52AABDB9488E

[motji]

Hezké dopoledne
Otestujte na www.virustotal.com
C:\K50IJ.BIN
C:\K40IJ.BIN

[eko]

AhnLab-V3 2011.02.06.00 2011.02.06 -
AntiVir 7.11.2.83 2011.02.06 -
Antiy-AVL 2.0.3.7 2011.01.28 -
Avast 4.8.1351.0 2011.02.06 -
Avast5 5.0.677.0 2011.02.06 -
AVG 10.0.0.1190 2011.02.07 -
BitDefender 7.2 2011.02.07 -
CAT-QuickHeal 11.00 2011.02.07 -
ClamAV 0.96.4.0 2011.02.07 -
Commtouch 5.2.11.5 2011.02.07 -
Comodo 7600 2011.02.07 -
DrWeb 5.0.2.03300 2011.02.07 -
Emsisoft 5.1.0.2 2011.02.07 -
eTrust-Vet 36.1.8144 2011.02.07 -
F-Prot 4.6.2.117 2011.02.04 -
F-Secure 9.0.16160.0 2011.02.07 -
Fortinet 4.2.254.0 2011.02.07 -
GData 21 2011.02.07 -
Ikarus T3.1.1.97.0 2011.02.07 -
Jiangmin 13.0.900 2011.02.05 -
K7AntiVirus 9.81.3761 2011.02.06 -
Kaspersky 7.0.0.125 2011.02.07 -
McAfee 5.400.0.1158 2011.02.07 -
McAfee-GW-Edition 2010.1C 2011.02.07 Heuristic.BehavesLike.Exploit.CodeExec.EBOG
Microsoft 1.6502 2011.02.07 -
NOD32 5851 2011.02.06 -
Norman 6.07.03 2011.02.06 -
nProtect 2011-01-27.01 2011.02.02 -
Panda 10.0.3.5 2011.02.06 -
PCTools 7.0.3.5 2011.02.07 -
Prevx 3.0 2011.02.07 -
Rising 23.44.00.02 2011.02.07 -
Sophos 4.61.0 2011.02.07 -
SUPERAntiSpyware 4.40.0.1006 2011.02.06 -
Symantec 20101.3.0.103 2011.02.07 -
TheHacker 6.7.0.1.125 2011.02.07 -
TrendMicro 9.200.0.1012 2011.02.07 -
TrendMicro-HouseCall 9.200.0.1012 2011.02.07 -
VBA32 3.12.14.3 2011.02.07 -
VIPRE 8336 2011.02.07 -
ViRobot 2011.2.7.4297 2011.02.07 -
VirusBuster 13.6.185.0 2011.02.06 -

[eko]

AhnLab-V3 2011.02.06.00 2011.02.06 -
AntiVir 7.11.2.83 2011.02.06 -
Antiy-AVL 2.0.3.7 2011.01.28 -
Avast 4.8.1351.0 2011.02.06 -
Avast5 5.0.677.0 2011.02.06 -
AVG 10.0.0.1190 2011.02.07 -
BitDefender 7.2 2011.02.07 -
CAT-QuickHeal 11.00 2011.02.07 -
ClamAV 0.96.4.0 2011.02.07 -
Commtouch 5.2.11.5 2011.02.07 -
Comodo 7600 2011.02.07 -
DrWeb 5.0.2.03300 2011.02.07 -
Emsisoft 5.1.0.2 2011.02.07 -
eSafe 7.0.17.0 2011.02.06 -
eTrust-Vet 36.1.8144 2011.02.07 -
F-Prot 4.6.2.117 2011.02.04 -
F-Secure 9.0.16160.0 2011.02.07 -
Fortinet 4.2.254.0 2011.02.07 -
GData 21 2011.02.07 -
Ikarus T3.1.1.97.0 2011.02.07 -
Jiangmin 13.0.900 2011.02.05 -
K7AntiVirus 9.81.3761 2011.02.06 -
Kaspersky 7.0.0.125 2011.02.07 -
McAfee 5.400.0.1158 2011.02.07 -
McAfee-GW-Edition 2010.1C 2011.02.07 Heuristic.BehavesLike.Exploit.CodeExec.EBOG
Microsoft 1.6502 2011.02.07 -
NOD32 5851 2011.02.06 -
Norman 6.07.03 2011.02.06 -
nProtect 2011-01-27.01 2011.02.02 -
Panda 10.0.3.5 2011.02.06 -
PCTools 7.0.3.5 2011.02.07 -
Prevx 3.0 2011.02.07 -
Rising 23.44.00.02 2011.02.07 -
Sophos 4.61.0 2011.02.07 -
SUPERAntiSpyware 4.40.0.1006 2011.02.06 -
Symantec 20101.3.0.103 2011.02.07 -
TheHacker 6.7.0.1.125 2011.02.07 -
TrendMicro 9.200.0.1012 2011.02.07 -
TrendMicro-HouseCall 9.200.0.1012 2011.02.07 -
VBA32 3.12.14.3 2011.02.07 -
VIPRE 8336 2011.02.07 -
ViRobot 2011.2.7.4297 2011.02.07 -
VirusBuster 13.6.185.0 2011.02.06 -

[motji]

A znáte ty soubory?
Jak je na tom počítač teď?

[eko]

prozatim se ten pc drží ty soubory si myslim ze jsou od asusu

[motji]

Stahněte MBAM z mého podpisu
-Nainstalujte,dejte úplný sken

NIC NEMAZAT
-MBAM má občas falešné detekce,proto budeme mazat až po kontrole logu.
-Log zkopírujte sem.

Budu tu večer

[eko]

ok

[motji]

Děkuji za sz. Jestli jsem to dobře pochopila, Vy jste nechal v mbamu mazat ty soubory a pak vám spadl pc?

[eko]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:25:15, on 9.2.2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.19019)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program files\P4G\BatteryLife.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Windows\AsScrPro.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
C:\Program Files\Elantech\ETDCtrl.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Eko\Desktop\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\ievkbd.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [P2Go_Menu] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe
O4 - HKLM\..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKCU\..\Run: [SRS Premium Sound] "C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe" /hideme
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O9 - Extra button: &Virtuální klávesnice - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll
O9 - Extra button: K&ontrola adres URL - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll
O13 - Gopher Prefix:
O17 - HKLM\System\CCS\Services\Tcpip\..\{2AB2B1E8-3755-4CF2-B1C3-CA23498F81B2}: NameServer = 195.146.100.100,195.146.100.5
O17 - HKLM\System\CS1\Services\Tcpip\..\{2AB2B1E8-3755-4CF2-B1C3-CA23498F81B2}: NameServer = 195.146.100.100,195.146.100.5
O17 - HKLM\System\CS2\Services\Tcpip\..\{2AB2B1E8-3755-4CF2-B1C3-CA23498F81B2}: NameServer = 195.146.100.100,195.146.100.5
O17 - HKLM\System\CS3\Services\Tcpip\..\{2AB2B1E8-3755-4CF2-B1C3-CA23498F81B2}: NameServer = 195.146.100.100,195.146.100.5
O17 - HKLM\System\CS4\Services\Tcpip\..\{2AB2B1E8-3755-4CF2-B1C3-CA23498F81B2}: NameServer = 195.146.100.100,195.146.100.5
O17 - HKLM\System\CS5\Services\Tcpip\..\{2AB2B1E8-3755-4CF2-B1C3-CA23498F81B2}: NameServer = 195.146.100.100,195.146.100.5
O17 - HKLM\System\CS6\Services\Tcpip\..\{2AB2B1E8-3755-4CF2-B1C3-CA23498F81B2}: NameServer = 195.146.100.100,195.146.100.5
O17 - HKLM\System\CS7\Services\Tcpip\..\{2AB2B1E8-3755-4CF2-B1C3-CA23498F81B2}: NameServer = 195.146.100.100,195.146.100.5
O17 - HKLM\System\CS8\Services\Tcpip\..\{2AB2B1E8-3755-4CF2-B1C3-CA23498F81B2}: NameServer = 195.146.100.100,195.146.100.5
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Služba Kaspersky Anti-Virus (AVP) - Kaspersky Lab ZAO - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe
O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe

--
End of file - 6000 bytes

[motji]

Prosím o log ze Rsitu

[eko]

Logfile of random's system information tool 1.08 (written by random/random)
Run by Eko at 2011-02-10 09:52:09
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 125 GB (82%) free of 153 GB
Total RAM: 3036 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:52:35, on 10.2.2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.19019)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Program files\P4G\BatteryLife.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Windows\AsScrPro.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Elantech\ETDCtrl.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe
C:\Users\Eko\Desktop\RSIT.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\trend micro\Eko.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\ievkbd.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [P2Go_Menu] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe
O4 - HKLM\..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKCU\..\Run: [SRS Premium Sound] "C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe" /hideme
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O9 - Extra button: &Virtuální klávesnice - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll
O9 - Extra button: K&ontrola adres URL - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{2AB2B1E8-3755-4CF2-B1C3-CA23498F81B2}: NameServer = 195.146.100.100,195.146.100.5
O17 - HKLM\System\CS1\Services\Tcpip\..\{2AB2B1E8-3755-4CF2-B1C3-CA23498F81B2}: NameServer = 195.146.100.100,195.146.100.5
O17 - HKLM\System\CS2\Services\Tcpip\..\{2AB2B1E8-3755-4CF2-B1C3-CA23498F81B2}: NameServer = 195.146.100.100,195.146.100.5
O17 - HKLM\System\CS3\Services\Tcpip\..\{2AB2B1E8-3755-4CF2-B1C3-CA23498F81B2}: NameServer = 195.146.100.100,195.146.100.5
O17 - HKLM\System\CS4\Services\Tcpip\..\{2AB2B1E8-3755-4CF2-B1C3-CA23498F81B2}: NameServer = 195.146.100.100,195.146.100.5
O17 - HKLM\System\CS5\Services\Tcpip\..\{2AB2B1E8-3755-4CF2-B1C3-CA23498F81B2}: NameServer = 195.146.100.100,195.146.100.5
O17 - HKLM\System\CS6\Services\Tcpip\..\{2AB2B1E8-3755-4CF2-B1C3-CA23498F81B2}: NameServer = 195.146.100.100,195.146.100.5
O17 - HKLM\System\CS7\Services\Tcpip\..\{2AB2B1E8-3755-4CF2-B1C3-CA23498F81B2}: NameServer = 195.146.100.100,195.146.100.5
O17 - HKLM\System\CS8\Services\Tcpip\..\{2AB2B1E8-3755-4CF2-B1C3-CA23498F81B2}: NameServer = 195.146.100.100,195.146.100.5
O17 - HKLM\System\CS9\Services\Tcpip\..\{2AB2B1E8-3755-4CF2-B1C3-CA23498F81B2}: NameServer = 195.146.100.100,195.146.100.5
O17 - HKLM\System\CS10\Services\Tcpip\..\{2AB2B1E8-3755-4CF2-B1C3-CA23498F81B2}: NameServer = 195.146.100.100,195.146.100.5
O17 - HKLM\System\CS11\Services\Tcpip\..\{2AB2B1E8-3755-4CF2-B1C3-CA23498F81B2}: NameServer = 195.146.100.100,195.146.100.5
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Služba Kaspersky Anti-Virus (AVP) - Kaspersky Lab ZAO - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe
O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe

--
End of file - 6477 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\ievkbd.dll [2010-10-05 68280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2008-11-18 408952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
FilterBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll [2010-10-05 191160]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"CLMLServer"=C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [2008-07-19 104936]
"P2Go_Menu"=C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2008-06-14 210216]
"ATKOSD2"=C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe [2009-03-04 8392704]
"ATKMEDIA"=C:\Program Files\ASUS\ATK Media\DMedia.exe [2008-12-29 159744]
"ASUS Screen Saver Protector"=C:\Windows\AsScrPro.exe [2009-07-27 3054136]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2009-03-06 424352]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-12-03 35184]
"AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe [2010-11-02 365336]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-08-25 136216]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-08-25 171032]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-08-25 170520]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SRS Premium Sound"=C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe [2009-03-20 3261688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-08-25 228864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
C:\Windows\system32\klogon.dll [2010-10-05 228024]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-02-10 09:52:09 ----D---- C:\rsit
2011-02-10 09:52:09 ----D---- C:\Program Files\trend micro
2011-02-09 22:54:01 ----D---- C:\Program Files\Windows Portable Devices
2011-02-09 22:52:02 ----A---- C:\Windows\system32\UIAnimation.dll
2011-02-09 22:52:01 ----A---- C:\Windows\system32\UIRibbonRes.dll
2011-02-09 22:52:01 ----A---- C:\Windows\system32\UIRibbon.dll
2011-02-09 22:51:10 ----A---- C:\Windows\system32\WMPhoto.dll
2011-02-09 22:51:08 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2011-02-09 22:51:08 ----A---- C:\Windows\system32\WindowsCodecs.dll
2011-02-09 22:51:08 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2011-02-09 22:51:08 ----A---- C:\Windows\system32\dxdiagn.dll
2011-02-09 22:51:08 ----A---- C:\Windows\system32\dxdiag.exe
2011-02-09 22:51:08 ----A---- C:\Windows\system32\d3d11.dll
2011-02-09 22:50:29 ----A---- C:\Windows\system32\WPDShextAutoplay.exe
2011-02-09 22:50:29 ----A---- C:\Windows\system32\wpdbusenum.dll
2011-02-09 22:50:29 ----A---- C:\Windows\system32\BthMtpContextHandler.dll
2011-02-09 22:50:28 ----A---- C:\Windows\system32\PortableDeviceConnectApi.dll
2011-02-09 22:50:27 ----A---- C:\Windows\system32\WPDSp.dll
2011-02-09 22:50:27 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2011-02-09 22:50:27 ----A---- C:\Windows\system32\wpdshext.dll
2011-02-09 22:50:27 ----A---- C:\Windows\system32\wpd_ci.dll
2011-02-09 22:50:27 ----A---- C:\Windows\system32\PortableDeviceWMDRM.dll
2011-02-09 22:50:27 ----A---- C:\Windows\system32\PortableDeviceTypes.dll
2011-02-09 22:50:27 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll
2011-02-09 22:50:27 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2011-02-09 22:49:28 ----A---- C:\Windows\system32\oleaccrc.dll
2011-02-09 22:49:28 ----A---- C:\Windows\system32\oleacc.dll
2011-02-09 22:49:27 ----A---- C:\Windows\system32\UIAutomationCore.dll
2011-02-09 21:57:54 ----A---- C:\Windows\system32\vbscript.dll
2011-02-09 21:57:50 ----A---- C:\Windows\system32\jscript.dll
2011-02-09 21:57:32 ----A---- C:\Windows\system32\FntCache.dll
2011-02-09 21:57:32 ----A---- C:\Windows\system32\DWrite.dll
2011-02-09 21:57:32 ----A---- C:\Windows\system32\d3d10warp.dll
2011-02-09 21:57:32 ----A---- C:\Windows\system32\d3d10_1.dll
2011-02-09 21:57:32 ----A---- C:\Windows\system32\d3d10.dll
2011-02-09 21:57:32 ----A---- C:\Windows\system32\d2d1.dll
2011-02-09 21:57:31 ----A---- C:\Windows\system32\xpsservices.dll
2011-02-09 21:57:31 ----A---- C:\Windows\system32\XpsRasterService.dll
2011-02-09 21:57:31 ----A---- C:\Windows\system32\XpsPrint.dll
2011-02-09 21:57:31 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-02-09 21:57:31 ----A---- C:\Windows\system32\MFH264Dec.dll
2011-02-09 21:57:31 ----A---- C:\Windows\system32\dxgi.dll
2011-02-09 21:57:31 ----A---- C:\Windows\system32\d3d10level9.dll
2011-02-09 21:57:31 ----A---- C:\Windows\system32\d3d10core.dll
2011-02-09 21:57:31 ----A---- C:\Windows\system32\d3d10_1core.dll
2011-02-09 21:57:30 ----A---- C:\Windows\system32\OpcServices.dll
2011-02-09 21:57:30 ----A---- C:\Windows\system32\mfreadwrite.dll
2011-02-09 21:57:30 ----A---- C:\Windows\system32\mfmp4src.dll
2011-02-09 21:57:30 ----A---- C:\Windows\system32\MFHEAACdec.dll
2011-02-09 21:57:30 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2011-02-09 21:57:29 ----A---- C:\Windows\system32\stobject.dll
2011-02-09 21:57:29 ----A---- C:\Windows\system32\shdocvw.dll
2011-02-09 21:57:29 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2011-02-09 21:57:29 ----A---- C:\Windows\system32\mfplat.dll
2011-02-09 21:57:29 ----A---- C:\Windows\system32\mf.dll
2011-02-09 21:57:29 ----A---- C:\Windows\system32\cdd.dll
2011-02-09 21:57:27 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2011-02-09 21:57:27 ----A---- C:\Windows\system32\mfps.dll
2011-02-09 21:56:55 ----A---- C:\Windows\system32\srvsvc.dll
2011-02-09 21:56:54 ----A---- C:\Windows\system32\netevent.dll
2011-02-09 21:56:54 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-02-09 21:56:54 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-02-09 21:56:54 ----A---- C:\Windows\system32\drivers\srv.sys
2011-02-09 21:56:44 ----A---- C:\Windows\system32\winhttp.dll
2011-02-09 21:51:58 ----A---- C:\Windows\system32\inetcomm.dll
2011-02-09 21:51:23 ----A---- C:\Windows\system32\msshsq.dll
2011-02-09 21:02:11 ----D---- C:\Users\Eko\AppData\Roaming\vlc
2011-02-09 21:00:39 ----D---- C:\Program Files\VideoLAN
2011-02-09 19:48:56 ----SHD---- C:\System Volume Information
2011-02-09 19:48:30 ----A---- C:\Pass.txt
2011-02-09 18:52:50 ----ASH---- C:\hiberfil.sys
2011-02-09 18:52:49 ----ASH---- C:\pagefile.sys
2011-02-09 17:58:04 ----D---- C:\Users\Eko\AppData\Roaming\OpenOffice.org
2011-02-09 17:34:08 ----D---- C:\Program Files\uTorrent
2011-02-09 17:33:23 ----D---- C:\Users\Eko\AppData\Roaming\uTorrent
2011-02-09 16:38:28 ----A---- C:\Windows\iun6002.exe
2011-02-09 16:38:25 ----D---- C:\Program Files\Codec Pack - All In 1
2011-02-09 16:35:57 ----D---- C:\Program Files\OpenOffice.org 3
2011-02-09 16:23:02 ----D---- C:\Program Files\Microsoft.NET
2011-02-09 16:22:21 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2011-02-09 16:22:21 ----A---- C:\Windows\system32\PresentationHost.exe
2011-02-09 16:22:21 ----A---- C:\Windows\system32\netfxperf.dll
2011-02-09 16:22:21 ----A---- C:\Windows\system32\mscoree.dll
2011-02-09 16:22:21 ----A---- C:\Windows\system32\dfshim.dll
2011-02-09 16:18:37 ----D---- C:\Program Files\Wise Registry Cleaner
2011-02-09 16:09:27 ----A---- C:\Windows\system32\shsvcs.dll
2011-02-09 16:09:26 ----D---- C:\Program Files\CCleaner
2011-02-09 15:57:50 ----A---- C:\Windows\system32\drivers\SbFwIm.sys
2011-02-09 15:47:34 ----D---- C:\Windows\system32\vi-VN
2011-02-09 15:47:34 ----D---- C:\Windows\system32\eu-ES
2011-02-09 15:47:34 ----D---- C:\Windows\system32\ca-ES
2011-02-09 15:27:05 ----D---- C:\Windows\system32\EventProviders
2011-02-09 15:25:39 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2011-02-09 15:25:36 ----A---- C:\Windows\system32\SLsvc.exe
2011-02-09 15:25:36 ----A---- C:\Windows\system32\SLCExt.dll
2011-02-09 15:25:35 ----A---- C:\Windows\system32\FunctionDiscoveryFolder.dll
2011-02-09 15:25:35 ----A---- C:\Windows\system32\DevicePairingWizard.exe
2011-02-09 15:25:34 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2011-02-09 15:25:32 ----A---- C:\Windows\system32\mssrch.dll
2011-02-09 15:25:31 ----A---- C:\Windows\system32\tquery.dll
2011-02-09 15:25:31 ----A---- C:\Windows\system32\drivers\spsys.sys
2011-02-09 15:25:30 ----A---- C:\Windows\system32\scavenge.dll
2011-02-09 15:25:30 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2011-02-09 15:25:30 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2011-02-09 15:25:29 ----A---- C:\Windows\system32\msi.dll
2011-02-09 15:25:28 ----A---- C:\Windows\system32\WscEapPr.dll
2011-02-09 15:25:28 ----A---- C:\Windows\system32\wcnwiz2.dll
2011-02-09 15:25:28 ----A---- C:\Windows\system32\sysmain.dll
2011-02-09 15:25:28 ----A---- C:\Windows\system32\imapi2fs.dll
2011-02-09 15:25:27 ----A---- C:\Windows\system32\icardagt.exe
2011-02-09 15:25:27 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2011-02-09 15:25:26 ----A---- C:\Windows\system32\spreview.exe
2011-02-09 15:25:26 ----A---- C:\Windows\system32\spinstall.exe
2011-02-09 15:25:26 ----A---- C:\Windows\system32\EhStorShell.dll
2011-02-09 15:25:26 ----A---- C:\Windows\system32\drmv2clt.dll
2011-02-09 15:25:25 ----A---- C:\Windows\system32\spwizui.dll
2011-02-09 15:25:25 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2011-02-09 15:25:24 ----A---- C:\Windows\system32\SearchIndexer.exe
2011-02-09 15:25:24 ----A---- C:\Windows\system32\p2psvc.dll
2011-02-09 15:25:23 ----A---- C:\Windows\system32\mssvp.dll
2011-02-09 15:25:22 ----A---- C:\Windows\system32\MSMPEG2VDEC.DLL
2011-02-09 15:25:21 ----A---- C:\Windows\system32\sdohlp.dll
2011-02-09 15:25:21 ----A---- C:\Windows\system32\mssphtb.dll
2011-02-09 15:25:21 ----A---- C:\Windows\system32\mssph.dll
2011-02-09 15:25:21 ----A---- C:\Windows\system32\imapi2.dll
2011-02-09 15:25:20 ----A---- C:\Windows\system32\IMJP10K.DLL
2011-02-09 15:25:20 ----A---- C:\Windows\system32\esent.dll
2011-02-09 15:25:20 ----A---- C:\Windows\system32\DevicePairing.dll
2011-02-09 15:25:19 ----A---- C:\Windows\system32\wevtsvc.dll
2011-02-09 15:25:19 ----A---- C:\Windows\system32\sperror.dll
2011-02-09 15:25:19 ----A---- C:\Windows\system32\SLC.dll
2011-02-09 15:25:19 ----A---- C:\Windows\system32\korwbrkr.dll
2011-02-09 15:25:18 ----A---- C:\Windows\system32\msjet40.dll
2011-02-09 15:25:18 ----A---- C:\Windows\system32\MPSSVC.dll
2011-02-09 15:25:17 ----A---- C:\Windows\system32\Query.dll
2011-02-09 15:25:17 ----A---- C:\Windows\system32\qmgr.dll
2011-02-09 15:25:17 ----A---- C:\Windows\system32\msexch40.dll
2011-02-09 15:25:17 ----A---- C:\Windows\system32\diagperf.dll
2011-02-09 15:25:16 ----A---- C:\Windows\system32\winload.exe
2011-02-09 15:25:16 ----A---- C:\Windows\system32\srchadmin.dll
2011-02-09 15:25:16 ----A---- C:\Windows\system32\P2PGraph.dll
2011-02-09 15:25:16 ----A---- C:\Windows\system32\IasMigReader.exe
2011-02-09 15:25:15 ----A---- C:\Windows\system32\uDWM.dll
2011-02-09 15:25:15 ----A---- C:\Windows\system32\riched20.dll
2011-02-09 15:25:15 ----A---- C:\Windows\system32\mmc.exe
2011-02-09 15:25:15 ----A---- C:\Windows\system32\mblctr.exe
2011-02-09 15:25:15 ----A---- C:\Windows\system32\IasMigPlugin.dll
2011-02-09 15:25:15 ----A---- C:\Windows\system32\EncDec.dll
2011-02-09 15:25:15 ----A---- C:\Windows\system32\dfsr.exe
2011-02-09 15:25:14 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2011-02-09 15:25:14 ----A---- C:\Windows\system32\SearchFilterHost.exe
2011-02-09 15:25:14 ----A---- C:\Windows\system32\RacEngn.dll
2011-02-09 15:25:14 ----A---- C:\Windows\system32\milcore.dll
2011-02-09 15:25:14 ----A---- C:\Windows\system32\kernel32.dll
2011-02-09 15:25:14 ----A---- C:\Windows\system32\fdBth.dll
2011-02-09 15:25:13 ----A---- C:\Windows\system32\spoolss.dll
2011-02-09 15:25:13 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2011-02-09 15:25:13 ----A---- C:\Windows\system32\EhStorAPI.dll
2011-02-09 15:25:13 ----A---- C:\Windows\system32\CertEnroll.dll
2011-02-09 15:25:13 ----A---- C:\Windows\system32\AuxiliaryDisplayDriverLib.dll
2011-02-09 15:25:12 ----A---- C:\Windows\system32\WinSAT.exe
2011-02-09 15:25:12 ----A---- C:\Windows\system32\msvcp60.dll
2011-02-09 15:25:12 ----A---- C:\Windows\system32\msjtes40.dll
2011-02-09 15:25:12 ----A---- C:\Windows\system32\infocardapi.dll
2011-02-09 15:25:12 ----A---- C:\Windows\system32\gpedit.dll
2011-02-09 15:25:11 ----A---- C:\Windows\system32\PresentationSettings.exe
2011-02-09 15:25:11 ----A---- C:\Windows\system32\mstext40.dll
2011-02-09 15:25:11 ----A---- C:\Windows\system32\Magnify.exe
2011-02-09 15:25:11 ----A---- C:\Windows\system32\es.dll
2011-02-09 15:25:11 ----A---- C:\Windows\system32\drivers\ntfs.sys
2011-02-09 15:25:11 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2011-02-09 15:25:11 ----A---- C:\Windows\system32\advapi32.dll
2011-02-09 15:25:10 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll
2011-02-09 15:25:10 ----A---- C:\Windows\system32\WebClnt.dll
2011-02-09 15:25:10 ----A---- C:\Windows\system32\slwmi.dll
2011-02-09 15:25:10 ----A---- C:\Windows\system32\msxbde40.dll
2011-02-09 15:25:10 ----A---- C:\Windows\system32\msexcl40.dll
2011-02-09 15:25:10 ----A---- C:\Windows\system32\comsvcs.dll
2011-02-09 15:25:09 ----A---- C:\Windows\system32\vssapi.dll
2011-02-09 15:25:09 ----A---- C:\Windows\system32\authui.dll
2011-02-09 15:25:08 ----A---- C:\Windows\system32\propsys.dll
2011-02-09 15:25:08 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2011-02-09 15:25:08 ----A---- C:\Windows\system32\newdev.dll
2011-02-09 15:25:08 ----A---- C:\Windows\system32\NetProjW.dll
2011-02-09 15:25:08 ----A---- C:\Windows\system32\msrepl40.dll
2011-02-09 15:25:08 ----A---- C:\Windows\system32\iasrecst.dll
2011-02-09 15:25:08 ----A---- C:\Windows\system32\gpsvc.dll
2011-02-09 15:25:08 ----A---- C:\Windows\system32\eudcedit.exe
2011-02-09 15:25:08 ----A---- C:\Windows\system32\crypt32.dll
2011-02-09 15:25:08 ----A---- C:\Windows\explorer.exe
2011-02-09 15:25:07 ----A---- C:\Windows\system32\setupapi.dll
2011-02-09 15:25:07 ----A---- C:\Windows\system32\rpcss.dll
2011-02-09 15:25:07 ----A---- C:\Windows\system32\mspbde40.dll
2011-02-09 15:25:07 ----A---- C:\Windows\system32\d3d9.dll
2011-02-09 15:25:06 ----A---- C:\Windows\system32\wevtapi.dll
2011-02-09 15:25:06 ----A---- C:\Windows\system32\photowiz.dll
2011-02-09 15:25:06 ----A---- C:\Windows\system32\nlhtml.dll
2011-02-09 15:25:06 ----A---- C:\Windows\system32\msrd3x40.dll
2011-02-09 15:25:06 ----A---- C:\Windows\system32\msltus40.dll
2011-02-09 15:25:06 ----A---- C:\Windows\system32\msdtctm.dll
2011-02-09 15:25:06 ----A---- C:\Windows\system32\mfc42.dll
2011-02-09 15:25:06 ----A---- C:\Windows\system32\EhStorPwdMgr.dll
2011-02-09 15:25:06 ----A---- C:\Windows\system32\EhStorAuthn.dll
2011-02-09 15:25:06 ----A---- C:\Windows\system32\davclnt.dll
2011-02-09 15:25:06 ----A---- C:\Windows\system32\browseui.dll
2011-02-09 15:25:05 ----A---- C:\Windows\system32\user32.dll
2011-02-09 15:25:05 ----A---- C:\Windows\system32\samsrv.dll
2011-02-09 15:25:05 ----A---- C:\Windows\system32\ci.dll
2011-02-09 15:25:04 ----A---- C:\Windows\system32\win32spl.dll
2011-02-09 15:25:04 ----A---- C:\Windows\system32\WcnNetsh.dll
2011-02-09 15:25:04 ----A---- C:\Windows\system32\SLCommDlg.dll
2011-02-09 15:25:04 ----A---- C:\Windows\system32\oleaut32.dll
2011-02-09 15:25:04 ----A---- C:\Windows\system32\netshell.dll
2011-02-09 15:25:04 ----A---- C:\Windows\system32\IKEEXT.DLL
2011-02-09 15:25:04 ----A---- C:\Windows\system32\drivers\rdbss.sys
2011-02-09 15:25:04 ----A---- C:\Windows\system32\compcln.exe
2011-02-09 15:25:03 ----A---- C:\Windows\system32\xmlfilter.dll
2011-02-09 15:25:03 ----A---- C:\Windows\system32\mswstr10.dll
2011-02-09 15:25:03 ----A---- C:\Windows\system32\msctf.dll
2011-02-09 15:25:03 ----A---- C:\Windows\system32\emdmgmt.dll
2011-02-09 15:25:03 ----A---- C:\Windows\system32\drivers\netio.sys
2011-02-09 15:25:03 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2011-02-09 15:25:03 ----A---- C:\Windows\system32\audiosrv.dll
2011-02-09 15:25:03 ----A---- C:\Windows\system32\apds.dll
2011-02-09 15:25:02 ----A---- C:\Windows\system32\VSSVC.exe
2011-02-09 15:25:02 ----A---- C:\Windows\system32\sqlsrv32.dll
2011-02-09 15:25:02 ----A---- C:\Windows\system32\SLUI.exe
2011-02-09 15:25:02 ----A---- C:\Windows\system32\QAGENTRT.DLL
2011-02-09 15:25:02 ----A---- C:\Windows\system32\msvcrt.dll
2011-02-09 15:25:02 ----A---- C:\Windows\system32\msrd2x40.dll
2011-02-09 15:25:02 ----A---- C:\Windows\system32\mfc42u.dll
2011-02-09 15:25:02 ----A---- C:\Windows\system32\iphlpsvc.dll
2011-02-09 15:25:02 ----A---- C:\Windows\system32\gdi32.dll
2011-02-09 15:25:02 ----A---- C:\Windows\system32\eapphost.dll
2011-02-09 15:25:01 ----A---- C:\Windows\system32\winresume.exe
2011-02-09 15:25:01 ----A---- C:\Windows\system32\propdefs.dll
2011-02-09 15:25:01 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2011-02-09 15:25:01 ----A---- C:\Windows\system32\drivers\usbhub.sys
2011-02-09 15:25:00 ----A---- C:\Windows\system32\wevtutil.exe
2011-02-09 15:25:00 ----A---- C:\Windows\system32\swprv.dll
2011-02-09 15:25:00 ----A---- C:\Windows\system32\mssitlb.dll
2011-02-09 15:25:00 ----A---- C:\Windows\system32\dbgeng.dll
2011-02-09 15:24:59 ----A---- C:\Windows\system32\vds.exe
2011-02-09 15:24:59 ----A---- C:\Windows\system32\netlogon.dll
2011-02-09 15:24:59 ----A---- C:\Windows\system32\msscb.dll
2011-02-09 15:24:59 ----A---- C:\Windows\system32\msctfp.dll
2011-02-09 15:24:59 ----A---- C:\Windows\system32\mmcndmgr.dll
2011-02-09 15:24:59 ----A---- C:\Windows\system32\fdBthProxy.dll
2011-02-09 15:24:59 ----A---- C:\Windows\system32\drvinst.exe
2011-02-09 15:24:59 ----A---- C:\Windows\system32\devmgr.dll
2011-02-09 15:24:59 ----A---- C:\Windows\system32\DevicePairingProxy.dll
2011-02-09 15:24:59 ----A---- C:\Windows\system32\BFE.DLL
2011-02-09 15:24:59 ----A---- C:\Windows\system32\adsldpc.dll
2011-02-09 15:24:58 ----A---- C:\Windows\system32\WMVSDECD.DLL
2011-02-09 15:24:58 ----A---- C:\Windows\system32\Wldap32.dll
2011-02-09 15:24:58 ----A---- C:\Windows\system32\wercon.exe
2011-02-09 15:24:58 ----A---- C:\Windows\system32\wcnwiz.dll
2011-02-09 15:24:58 ----A---- C:\Windows\system32\services.exe
2011-02-09 15:24:58 ----A---- C:\Windows\system32\evr.dll
2011-02-09 15:24:57 ----A---- C:\Windows\system32\wcncsvc.dll
2011-02-09 15:24:57 ----A---- C:\Windows\system32\umpnpmgr.dll
2011-02-09 15:24:57 ----A---- C:\Windows\system32\rtffilt.dll
2011-02-09 15:24:57 ----A---- C:\Windows\system32\reg.exe
2011-02-09 15:24:57 ----A---- C:\Windows\system32\mswdat10.dll
2011-02-09 15:24:57 ----A---- C:\Windows\system32\msjter40.dll
2011-02-09 15:24:57 ----A---- C:\Windows\system32\msdtcprx.dll
2011-02-09 15:24:57 ----A---- C:\Windows\system32\mimefilt.dll
2011-02-09 15:24:57 ----A---- C:\Windows\system32\ipsmsnap.dll
2011-02-09 15:24:57 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2011-02-09 15:24:57 ----A---- C:\Windows\system32\dnsapi.dll
2011-02-09 15:24:57 ----A---- C:\Windows\system32\comdlg32.dll
2011-02-09 15:24:57 ----A---- C:\Windows\system32\certcli.dll
2011-02-09 15:24:57 ----A---- C:\Windows\system32\adtschema.dll
2011-02-09 15:24:56 ----A---- C:\Windows\system32\WMNetMgr.dll
2011-02-09 15:24:56 ----A---- C:\Windows\system32\w32time.dll
2011-02-09 15:24:56 ----A---- C:\Windows\system32\msshooks.dll
2011-02-09 15:24:56 ----A---- C:\Windows\system32\msscntrs.dll
2011-02-09 15:24:56 ----A---- C:\Windows\system32\IPSECSVC.DLL
2011-02-09 15:24:56 ----A---- C:\Windows\system32\drivers\usbport.sys
2011-02-09 15:24:56 ----A---- C:\Windows\system32\certutil.exe
2011-02-09 15:24:56 ----A---- C:\Windows\system32\bcrypt.dll
2011-02-09 15:24:55 ----A---- C:\Windows\system32\TsWpfWrp.exe
2011-02-09 15:24:55 ----A---- C:\Windows\system32\rsaenh.dll
2011-02-09 15:24:55 ----A---- C:\Windows\system32\netapi32.dll
2011-02-09 15:24:55 ----A---- C:\Windows\system32\mtxclu.dll
2011-02-09 15:24:55 ----A---- C:\Windows\system32\msstrc.dll
2011-02-09 15:24:55 ----A---- C:\Windows\system32\msihnd.dll
2011-02-09 15:24:55 ----A---- C:\Windows\system32\MMDevAPI.dll
2011-02-09 15:24:55 ----A---- C:\Windows\system32\inetpp.dll
2011-02-09 15:24:55 ----A---- C:\Windows\system32\fundisc.dll
2011-02-09 15:24:55 ----A---- C:\Windows\system32\drivers\ndis.sys
2011-02-09 15:24:55 ----A---- C:\Windows\system32\cryptsvc.dll
2011-02-09 15:24:55 ----A---- C:\Windows\system32\bthserv.dll
2011-02-09 15:24:54 ----A---- C:\Windows\system32\termsrv.dll
2011-02-09 15:24:54 ----A---- C:\Windows\system32\profsvc.dll
2011-02-09 15:24:54 ----A---- C:\Windows\system32\mscories.dll
2011-02-09 15:24:54 ----A---- C:\Windows\system32\hidserv.dll
2011-02-09 15:24:54 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2011-02-09 15:24:53 ----A---- C:\Windows\system32\wersvc.dll
2011-02-09 15:24:53 ----A---- C:\Windows\system32\wdc.dll
2011-02-09 15:24:53 ----A---- C:\Windows\system32\scrrun.dll
2011-02-09 15:24:53 ----A---- C:\Windows\system32\rasmans.dll
2011-02-09 15:24:53 ----A---- C:\Windows\system32\pnidui.dll
2011-02-09 15:24:53 ----A---- C:\Windows\system32\msiexec.exe
2011-02-09 15:24:53 ----A---- C:\Windows\system32\imapi.dll
2011-02-09 15:24:53 ----A---- C:\Windows\system32\icardres.dll
2011-02-09 15:24:53 ----A---- C:\Windows\system32\iassdo.dll
2011-02-09 15:24:53 ----A---- C:\Windows\system32\chsbrkr.dll
2011-02-09 15:24:53 ----A---- C:\Windows\system32\drivers\termdd.sys
2011-02-09 15:24:53 ----A---- C:\Windows\system32\drivers\pci.sys
2011-02-09 15:24:53 ----A---- C:\Windows\system32\drivers\crashdmp.sys
2011-02-09 15:24:53 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2011-02-09 15:24:53 ----A---- C:\Windows\system32\drivers\acpi.sys
2011-02-09 15:24:53 ----A---- C:\Windows\system32\autofmt.exe
2011-02-09 15:24:52 ----A---- C:\Windows\system32\winlogon.exe
2011-02-09 15:24:52 ----A---- C:\Windows\system32\SyncCenter.dll
2011-02-09 15:24:52 ----A---- C:\Windows\system32\slmgr.vbs
2011-02-09 15:24:52 ----A---- C:\Windows\system32\PSHED.DLL
2011-02-09 15:24:52 ----A---- C:\Windows\system32\pidgenx.dll
2011-02-09 15:24:52 ----A---- C:\Windows\system32\pdh.dll
2011-02-09 15:24:52 ----A---- C:\Windows\system32\drivers\Storport.sys
2011-02-09 15:24:52 ----A---- C:\Windows\system32\drivers\partmgr.sys
2011-02-09 15:24:52 ----A---- C:\Windows\system32\drivers\ataport.sys
2011-02-09 15:24:52 ----A---- C:\Windows\system32\dhcpcsvc.dll
2011-02-09 15:24:52 ----A---- C:\Windows\system32\clfs.sys
2011-02-09 15:24:52 ----A---- C:\Windows\system32\CertEnrollUI.dll
2011-02-09 15:24:52 ----A---- C:\Windows\system32\azroles.dll
2011-02-09 15:24:51 ----A---- C:\Windows\system32\SLUINotify.dll
2011-02-09 15:24:51 ----A---- C:\Windows\system32\msjetoledb40.dll
2011-02-09 15:24:51 ----A---- C:\Windows\system32\drivers\mup.sys
2011-02-09 15:24:51 ----A---- C:\Windows\system32\comuid.dll
2011-02-09 15:24:51 ----A---- C:\Windows\system32\certmgr.dll
2011-02-09 15:24:50 ----A---- C:\Windows\system32\wisptis.exe
2011-02-09 15:24:50 ----A---- C:\Windows\system32\untfs.dll
2011-02-09 15:24:50 ----A---- C:\Windows\system32\spp.dll
2011-02-09 15:24:50 ----A---- C:\Windows\system32\sethc.exe
2011-02-09 15:24:50 ----A---- C:\Windows\system32\scrobj.dll
2011-02-09 15:24:50 ----A---- C:\Windows\system32\ncrypt.dll
2011-02-09 15:24:50 ----A---- C:\Windows\system32\kd1394.dll
2011-02-09 15:24:50 ----A---- C:\Windows\system32\iassam.dll
2011-02-09 15:24:50 ----A---- C:\Windows\system32\dwm.exe
2011-02-09 15:24:50 ----A---- C:\Windows\system32\drivers\volsnap.sys
2011-02-09 15:24:50 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2011-02-09 15:24:50 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2011-02-09 15:24:50 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2011-02-09 15:24:50 ----A---- C:\Windows\system32\drivers\disk.sys
2011-02-09 15:24:50 ----A---- C:\Windows\system32\autochk.exe
2011-02-09 15:24:49 ----A---- C:\Windows\system32\wow32.dll
2011-02-09 15:24:49 ----A---- C:\Windows\system32\winsrv.dll
2011-02-09 15:24:49 ----A---- C:\Windows\system32\userenv.dll
2011-02-09 15:24:49 ----A---- C:\Windows\system32\printui.dll
2011-02-09 15:24:49 ----A---- C:\Windows\system32\osk.exe
2011-02-09 15:24:49 ----A---- C:\Windows\system32\onex.dll
2011-02-09 15:24:49 ----A---- C:\Windows\system32\mswsock.dll
2011-02-09 15:24:49 ----A---- C:\Windows\system32\kdcom.dll
2011-02-09 15:24:49 ----A---- C:\Windows\system32\iasnap.dll
2011-02-09 15:24:49 ----A---- C:\Windows\system32\drivers\msrpc.sys
2011-02-09 15:24:49 ----A---- C:\Windows\system32\drivers\ecache.sys
2011-02-09 15:24:49 ----A---- C:\Windows\system32\drivers\Dumpata.sys
2011-02-09 15:24:49 ----A---- C:\Windows\system32\cscript.exe
2011-02-09 15:24:49 ----A---- C:\Windows\system32\basecsp.dll
2011-02-09 15:24:49 ----A---- C:\Windows\system32\autoconv.exe
2011-02-09 15:24:49 ----A---- C:\Windows\system32\audiodg.exe
2011-02-09 15:24:48 ----A---- C:\Windows\system32\WinSCard.dll
2011-02-09 15:24:48 ----A---- C:\Windows\system32\winmm.dll
2011-02-09 15:24:48 ----A---- C:\Windows\system32\WerFaultSecure.exe
2011-02-09 15:24:48 ----A---- C:\Windows\system32\spcmsg.dll
2011-02-09 15:24:48 ----A---- C:\Windows\system32\RelMon.dll
2011-02-09 15:24:48 ----A---- C:\Windows\system32\rdpencom.dll
2011-02-09 15:24:48 ----A---- C:\Windows\system32\offfilt.dll
2011-02-09 15:24:48 ----A---- C:\Windows\system32\msftedit.dll
2011-02-09 15:24:48 ----A---- C:\Windows\system32\kdusb.dll
2011-02-09 15:24:48 ----A---- C:\Windows\system32\drivers\netbt.sys
2011-02-09 15:24:48 ----A---- C:\Windows\system32\drivers\atapi.sys
2011-02-09 15:24:48 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-02-09 15:24:47 ----A---- C:\Windows\system32\wsepno.dll
2011-02-09 15:24:47 ----A---- C:\Windows\system32\WerFault.exe
2011-02-09 15:24:47 ----A---- C:\Windows\system32\Utilman.exe
2011-02-09 15:24:47 ----A---- C:\Windows\system32\SndVol.exe
2011-02-09 15:24:47 ----A---- C:\Windows\system32\mcmde.dll
2011-02-09 15:24:47 ----A---- C:\Windows\system32\diskraid.exe
2011-02-09 15:24:47 ----A---- C:\Windows\system32\apphelp.dll
2011-02-09 15:24:46 ----A---- C:\Windows\system32\wscript.exe
2011-02-09 15:24:46 ----A---- C:\Windows\system32\wscntfy.dll
2011-02-09 15:24:46 ----A---- C:\Windows\system32\wiaservc.dll
2011-02-09 15:24:46 ----A---- C:\Windows\system32\ulib.dll
2011-02-09 15:24:46 ----A---- C:\Windows\system32\sysclass.dll
2011-02-09 15:24:46 ----A---- C:\Windows\system32\rastapi.dll
2011-02-09 15:24:46 ----A---- C:\Windows\system32\prnntfy.dll
2011-02-09 15:24:46 ----A---- C:\Windows\system32\pnpsetup.dll
2011-02-09 15:24:46 ----A---- C:\Windows\system32\odbccp32.dll
2011-02-09 15:24:46 ----A---- C:\Windows\system32\msnetobj.dll
2011-02-09 15:24:46 ----A---- C:\Windows\system32\mscms.dll
2011-02-09 15:24:46 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2011-02-09 15:24:46 ----A---- C:\Windows\system32\iasdatastore.dll
2011-02-09 15:24:46 ----A---- C:\Windows\system32\fdProxy.dll
2011-02-09 15:24:46 ----A---- C:\Windows\system32\dsound.dll
2011-02-09 15:24:46 ----A---- C:\Windows\system32\cryptui.dll
2011-02-09 15:24:46 ----A---- C:\Windows\system32\adsmsext.dll
2011-02-09 15:24:45 ----A---- C:\Windows\system32\wusa.exe
2011-02-09 15:24:45 ----A---- C:\Windows\system32\wscsvc.dll
2011-02-09 15:24:45 ----A---- C:\Windows\system32\WMVENCOD.DLL
2011-02-09 15:24:45 ----A---- C:\Windows\system32\wlangpui.dll
2011-02-09 15:24:45 ----A---- C:\Windows\system32\vdsdyn.dll
2011-02-09 15:24:45 ----A---- C:\Windows\system32\regsvc.dll
2011-02-09 15:24:45 ----A---- C:\Windows\system32\rasapi32.dll
2011-02-09 15:24:45 ----A---- C:\Windows\system32\ntprint.dll
2011-02-09 15:24:45 ----A---- C:\Windows\system32\mscorier.dll
2011-02-09 15:24:45 ----A---- C:\Windows\system32\logman.exe
2011-02-09 15:24:45 ----A---- C:\Windows\system32\ipsecsnp.dll
2011-02-09 15:24:45 ----A---- C:\Windows\system32\iashlpr.dll
2011-02-09 15:24:45 ----A---- C:\Windows\system32\gpapi.dll
2011-02-09 15:24:45 ----A---- C:\Windows\system32\diskpart.exe
2011-02-09 15:24:45 ----A---- C:\Windows\system32\brcpl.dll
2011-02-09 15:24:44 ----A---- C:\Windows\system32\zipfldr.dll
2011-02-09 15:24:44 ----A---- C:\Windows\system32\wshext.dll
2011-02-09 15:24:44 ----A---- C:\Windows\system32\wpccpl.dll
2011-02-09 15:24:44 ----A---- C:\Windows\system32\rasdlg.dll
2011-02-09 15:24:44 ----A---- C:\Windows\system32\netcenter.dll
2011-02-09 15:24:44 ----A---- C:\Windows\system32\iasrad.dll
2011-02-09 15:24:44 ----A---- C:\Windows\system32\findstr.exe
2011-02-09 15:24:43 ----A---- C:\Windows\system32\wsnmp32.dll
2011-02-09 15:24:43 ----A---- C:\Windows\system32\wer.dll
2011-02-09 15:24:43 ----A---- C:\Windows\system32\uxsms.dll
2011-02-09 15:24:43 ----A---- C:\Windows\system32\themecpl.dll
2011-02-09 15:24:43 ----A---- C:\Windows\system32\slcc.dll
2011-02-09 15:24:43 ----A---- C:\Windows\system32\scansetting.dll
2011-02-09 15:24:43 ----A---- C:\Windows\system32\powrprof.dll
2011-02-09 15:24:43 ----A---- C:\Windows\system32\ntmarta.dll
2011-02-09 15:24:43 ----A---- C:\Windows\system32\msutb.dll
2011-02-09 15:24:43 ----A---- C:\Windows\system32\mstsc.exe
2011-02-09 15:24:43 ----A---- C:\Windows\system32\mstlsapi.dll
2011-02-09 15:24:43 ----A---- C:\Windows\system32\mssprxy.dll
2011-02-09 15:24:43 ----A---- C:\Windows\system32\iassvcs.dll
2011-02-09 15:24:43 ----A---- C:\Windows\system32\iasads.dll
2011-02-09 15:24:43 ----A---- C:\Windows\system32\drivers\usbehci.sys
2011-02-09 15:24:43 ----A---- C:\Windows\system32\drivers\ks.sys
2011-02-09 15:24:43 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2011-02-09 15:24:42 ----A---- C:\Windows\system32\systemcpl.dll
2011-02-09 15:24:42 ----A---- C:\Windows\system32\sud.dll
2011-02-09 15:24:42 ----A---- C:\Windows\system32\powercpl.dll
2011-02-09 15:24:42 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2011-02-09 15:24:42 ----A---- C:\Windows\system32\newdev.exe
2011-02-09 15:24:42 ----A---- C:\Windows\system32\networkmap.dll
2011-02-09 15:24:42 ----A---- C:\Windows\system32\iasacct.dll
2011-02-09 15:24:42 ----A---- C:\Windows\system32\dot3svc.dll
2011-02-09 15:24:42 ----A---- C:\Windows\system32\connect.dll
2011-02-09 15:24:42 ----A---- C:\Windows\system32\authz.dll
2011-02-09 15:24:41 ----A---- C:\Windows\system32\wlanpref.dll
2011-02-09 15:24:41 ----A---- C:\Windows\system32\usercpl.dll
2011-02-09 15:24:41 ----A---- C:\Windows\system32\themeui.dll
2011-02-09 15:24:41 ----A---- C:\Windows\system32\samlib.dll
2011-02-09 15:24:41 ----A---- C:\Windows\system32\qdvd.dll
2011-02-09 15:24:41 ----A---- C:\Windows\system32\pcaui.dll
2011-02-09 15:24:41 ----A---- C:\Windows\system32\mmci.dll
2011-02-09 15:24:41 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2011-02-09 15:24:41 ----A---- C:\Windows\system32\autoplay.dll
2011-02-09 15:24:41 ----A---- C:\Windows\system32\accessibilitycpl.dll
2011-02-09 15:24:40 ----A---- C:\Windows\system32\wscisvif.dll
2011-02-09 15:24:40 ----A---- C:\Windows\system32\wpcao.dll
2011-02-09 15:24:40 ----A---- C:\Windows\system32\vdsutil.dll
2011-02-09 15:24:40 ----A---- C:\Windows\system32\tapisrv.dll
2011-02-09 15:24:40 ----A---- C:\Windows\system32\scksp.dll
2011-02-09 15:24:40 ----A---- C:\Windows\system32\scesrv.dll
2011-02-09 15:24:40 ----A---- C:\Windows\system32\rpchttp.dll
2011-02-09 15:24:40 ----A---- C:\Windows\system32\rekeywiz.exe
2011-02-09 15:24:40 ----A---- C:\Windows\system32\regapi.dll
2011-02-09 15:24:40 ----A---- C:\Windows\system32\psisdecd.dll
2011-02-09 15:24:40 ----A---- C:\Windows\system32\oleprn.dll
2011-02-09 15:24:40 ----A---- C:\Windows\system32\msinfo32.exe
2011-02-09 15:24:40 ----A---- C:\Windows\system32\mpr.dll
2011-02-09 15:24:40 ----A---- C:\Windows\system32\imm32.dll
2011-02-09 15:24:40 ----A---- C:\Windows\system32\iaspolcy.dll
2011-02-09 15:24:40 ----A---- C:\Windows\system32\feclient.dll
2011-02-09 15:24:40 ----A---- C:\Windows\system32\Faultrep.dll
2011-02-09 15:24:40 ----A---- C:\Windows\system32\drivers\exfat.sys
2011-02-09 15:24:40 ----A---- C:\Windows\system32\dpapimig.exe
2011-02-09 15:24:40 ----A---- C:\Windows\system32\dot3msm.dll
2011-02-09 15:24:40 ----A---- C:\Windows\system32\DeviceEject.exe
2011-02-09 15:24:40 ----A---- C:\Windows\system32\AudioSes.dll
2011-02-09 15:24:39 ----A---- C:\Windows\system32\whealogr.dll
2011-02-09 15:24:39 ----A---- C:\Windows\system32\TSTheme.exe
2011-02-09 15:24:39 ----A---- C:\Windows\system32\tcpmon.dll
2011-02-09 15:24:39 ----A---- C:\Windows\system32\tcpipcfg.dll
2011-02-09 15:24:39 ----A---- C:\Windows\system32\srcore.dll
2011-02-09 15:24:39 ----A---- C:\Windows\system32\spwinsat.dll
2011-02-09 15:24:39 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2011-02-09 15:24:39 ----A---- C:\Windows\system32\scecli.dll
2011-02-09 15:24:39 ----A---- C:\Windows\system32\SCardSvr.dll
2011-02-09 15:24:39 ----A---- C:\Windows\system32\rasplap.dll
2011-02-09 15:24:39 ----A---- C:\Windows\system32\rasgcw.dll
2011-02-09 15:24:39 ----A---- C:\Windows\system32\qedit.dll
2011-02-09 15:24:39 ----A---- C:\Windows\system32\PnPUnattend.exe
2011-02-09 15:24:39 ----A---- C:\Windows\system32\pnpui.dll
2011-02-09 15:24:39 ----A---- C:\Windows\system32\perfdisk.dll
2011-02-09 15:24:39 ----A---- C:\Windows\system32\ncryptui.dll
2011-02-09 15:24:39 ----A---- C:\Windows\system32\hdwwiz.exe
2011-02-09 15:24:39 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2011-02-09 15:24:39 ----A---- C:\Windows\system32\fdWSD.dll
2011-02-09 15:24:39 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2011-02-09 15:24:39 ----A---- C:\Windows\system32\drivers\USBCAMD.sys
2011-02-09 15:24:39 ----A---- C:\Windows\system32\drivers\portcls.sys
2011-02-09 15:24:39 ----A---- C:\Windows\system32\conime.exe
2011-02-09 15:24:39 ----A---- C:\Windows\system32\cmmon32.exe
2011-02-09 15:24:39 ----A---- C:\Windows\system32\cmdial32.dll
2011-02-09 15:24:39 ----A---- C:\Windows\system32\certreq.exe
2011-02-09 15:24:38 ----A---- C:\Windows\system32\WMVXENCD.DLL
2011-02-09 15:24:38 ----A---- C:\Windows\system32\wlanui.dll
2011-02-09 15:24:38 ----A---- C:\Windows\system32\wiaaut.dll
2011-02-09 15:24:38 ----A---- C:\Windows\system32\SnippingTool.exe
2011-02-09 15:24:38 ----A---- C:\Windows\system32\shwebsvc.dll
2011-02-09 15:24:38 ----A---- C:\Windows\system32\rasppp.dll
2011-02-09 15:24:38 ----A---- C:\Windows\system32\raschap.dll
2011-02-09 15:24:38 ----A---- C:\Windows\system32\PnPutil.exe
2011-02-09 15:24:38 ----A---- C:\Windows\system32\oobefldr.dll
2011-02-09 15:24:38 ----A---- C:\Windows\system32\MSVidCtl.dll
2011-02-09 15:24:38 ----A---- C:\Windows\system32\fontext.dll
2011-02-09 15:24:38 ----A---- C:\Windows\system32\dsprop.dll
2011-02-09 15:24:38 ----A---- C:\Windows\system32\drivers\tdx.sys
2011-02-09 15:24:38 ----A---- C:\Windows\system32\drivers\pacer.sys
2011-02-09 15:24:38 ----A---- C:\Windows\system32\drivers\npfs.sys
2011-02-09 15:24:38 ----A---- C:\Windows\system32\drivers\afd.sys
2011-02-09 15:24:38 ----A---- C:\Windows\system32\dimsroam.dll
2011-02-09 15:24:37 ----A---- C:\Windows\system32\shsetup.dll
2011-02-09 15:24:37 ----A---- C:\Windows\system32\rasmontr.dll
2011-02-09 15:24:37 ----A---- C:\Windows\system32\modemui.dll
2011-02-09 15:24:36 ----A---- C:\Windows\system32\wmdrmsdk.dll
2011-02-09 15:24:36 ----A---- C:\Windows\system32\wlgpclnt.dll
2011-02-09 15:24:36 ----A---- C:\Windows\system32\smss.exe
2011-02-09 15:24:36 ----A---- C:\Windows\system32\rdpwsx.dll
2011-02-09 15:24:36 ----A---- C:\Windows\system32\mscandui.dll
2011-02-09 15:24:36 ----A---- C:\Windows\system32\chtbrkr.dll
2011-02-09 15:24:36 ----A---- C:\Windows\system32\drivers\fastfat.sys
2011-02-09 15:24:36 ----A---- C:\Windows\system32\dataclen.dll
2011-02-09 15:24:36 ----A---- C:\Windows\system32\credui.dll
2011-02-09 15:24:36 ----A---- C:\Windows\system32\blackbox.dll
2011-02-09 15:24:35 ----A---- C:\Windows\system32\WSDMon.dll
2011-02-09 15:24:35 ----A---- C:\Windows\system32\wscapi.dll
2011-02-09 15:24:35 ----A---- C:\Windows\system32\wpcsvc.dll
2011-02-09 15:24:35 ----A---- C:\Windows\system32\wmpeffects.dll
2011-02-09 15:24:35 ----A---- C:\Windows\system32\thawbrkr.dll
2011-02-09 15:24:35 ----A---- C:\Windows\system32\softkbd.dll
2011-02-09 15:24:35 ----A---- C:\Windows\system32\sendmail.dll
2011-02-09 15:24:35 ----A---- C:\Windows\system32\networkexplorer.dll
2011-02-09 15:24:35 ----A---- C:\Windows\system32\netplwiz.dll
2011-02-09 15:24:35 ----A---- C:\Windows\system32\msscp.dll
2011-02-09 15:24:35 ----A---- C:\Windows\system32\msimtf.dll
2011-02-09 15:24:35 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2011-02-09 15:24:35 ----A---- C:\Windows\system32\logagent.exe
2011-02-09 15:24:35 ----A---- C:\Windows\system32\InkEd.dll
2011-02-09 15:24:35 ----A---- C:\Windows\system32\ifmon.dll
2011-02-09 15:24:35 ----A---- C:\Windows\system32\gpresult.exe
2011-02-09 15:24:35 ----A---- C:\Windows\system32\drivers\watchdog.sys
2011-02-09 15:24:35 ----A---- C:\Windows\system32\drivers\rmcast.sys
2011-02-09 15:24:35 ----A---- C:\Windows\system32\cipher.exe
2011-02-09 15:24:35 ----A---- C:\Windows\system32\certprop.dll
2011-02-09 15:24:34 ----A---- C:\Windows\system32\wshbth.dll
2011-02-09 15:24:34 ----A---- C:\Windows\system32\version.dll
2011-02-09 15:24:34 ----A---- C:\Windows\system32\SLLUA.exe
2011-02-09 15:24:34 ----A---- C:\Windows\system32\puiapi.dll
2011-02-09 15:24:34 ----A---- C:\Windows\system32\olepro32.dll
2011-02-09 15:24:34 ----A---- C:\Windows\system32\msjint40.dll
2011-02-09 15:24:34 ----A---- C:\Windows\system32\msisip.dll
2011-02-09 15:24:34 ----A---- C:\Windows\system32\msctfui.dll
2011-02-09 15:24:34 ----A---- C:\Windows\system32\MsCtfMonitor.dll
2011-02-09 15:24:34 ----A---- C:\Windows\system32\mprapi.dll
2011-02-09 15:24:34 ----A---- C:\Windows\system32\l2nacp.dll
2011-02-09 15:24:34 ----A---- C:\Windows\system32\input.dll
2011-02-09 15:24:34 ----A---- C:\Windows\system32\ftp.exe
2011-02-09 15:24:34 ----A---- C:\Windows\system32\fdSSDP.dll
2011-02-09 15:24:34 ----A---- C:\Windows\system32\fc.exe
2011-02-09 15:24:34 ----A---- C:\Windows\system32\ExplorerFrame.dll
2011-02-09 15:24:34 ----A---- C:\Windows\system32\eapp3hst.dll
2011-02-09 15:24:34 ----A---- C:\Windows\system32\drmmgrtn.dll
2011-02-09 15:24:34 ----A---- C:\Windows\system32\drivers\udfs.sys
2011-02-09 15:24:34 ----A---- C:\Windows\system32\drivers\smb.sys
2011-02-09 15:24:34 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2011-02-09 15:24:34 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2011-02-09 15:24:34 ----A---- C:\Windows\system32\drivers\hidusb.sys
2011-02-09 15:24:34 ----A---- C:\Windows\system32\dmusic.dll
2011-02-09 15:24:34 ----A---- C:\Windows\system32\dmsynth.dll
2011-02-09 15:24:34 ----A---- C:\Windows\system32\cscapi.dll
2011-02-09 15:24:33 ----A---- C:\Windows\system32\wsdchngr.dll
2011-02-09 15:24:33 ----A---- C:\Windows\system32\tscupgrd.exe
2011-02-09 15:24:33 ----A---- C:\Windows\system32\Storprop.dll
2011-02-09 15:24:33 ----A---- C:\Windows\system32\SMBHelperClass.dll
2011-02-09 15:24:33 ----A---- C:\Windows\system32\slcinst.dll
2011-02-09 15:24:33 ----A---- C:\Windows\system32\rasdial.exe
2011-02-09 15:24:33 ----A---- C:\Windows\system32\rasdiag.dll
2011-02-09 15:24:33 ----A---- C:\Windows\system32\PNPXAssoc.dll
2011-02-09 15:24:33 ----A---- C:\Windows\system32\ocsetup.exe
2011-02-09 15:24:33 ----A---- C:\Windows\system32\nslookup.exe
2011-02-09 15:24:33 ----A---- C:\Windows\system32\networkitemfactory.dll
2011-02-09 15:24:33 ----A---- C:\Windows\system32\mmcico.dll
2011-02-09 15:24:33 ----A---- C:\Windows\system32\ipconfig.exe
2011-02-09 15:24:33 ----A---- C:\Windows\system32\CHxReadingStringIME.dll
2011-02-09 15:24:33 ----A---- C:\Windows\system32\hbaapi.dll
2011-02-09 15:24:33 ----A---- C:\Windows\system32\gpupdate.exe
2011-02-09 15:24:33 ----A---- C:\Windows\system32\FwRemoteSvr.dll
2011-02-09 15:24:33 ----A---- C:\Windows\system32\fdWCN.dll
2011-02-09 15:24:33 ----A---- C:\Windows\system32\fdeploy.dll
2011-02-09 15:24:33 ----A---- C:\Windows\system32\eappgnui.dll
2011-02-09 15:24:33 ----A---- C:\Windows\system32\eappcfg.dll
2011-02-09 15:24:33 ----A---- C:\Windows\system32\drivers\rassstp.sys
2011-02-09 15:24:33 ----A---- C:\Windows\system32\drivers\nwifi.sys
2011-02-09 15:24:33 ----A---- C:\Windows\system32\drivers\hidclass.sys
2011-02-09 15:24:33 ----A---- C:\Windows\system32\drivers\dfsc.sys
2011-02-09 15:24:33 ----A---- C:\Windows\system32\drivers\cdrom.sys
2011-02-09 15:24:33 ----A---- C:\Windows\system32\dot3cfg.dll
2011-02-09 15:24:33 ----A---- C:\Windows\system32\cscdll.dll
2011-02-09 15:24:33 ----A---- C:\Windows\system32\bthudtask.exe
2011-02-09 15:24:33 ----A---- C:\Windows\system32\bthci.dll
2011-02-09 15:24:32 ----A---- C:\Windows\system32\winrnr.dll
2011-02-09 15:24:32 ----A---- C:\Windows\system32\vdmdbg.dll
2011-02-09 15:24:32 ----A---- C:\Windows\system32\slwga.dll
2011-02-09 15:24:32 ----A---- C:\Windows\system32\odbcconf.dll
2011-02-09 15:24:32 ----A---- C:\Windows\system32\NcdProp.dll

[eko]

2011-02-09 15:24:32 ----A---- C:\Windows\system32\midimap.dll
2011-02-09 15:24:32 ----A---- C:\Windows\system32\iscsilog.dll
2011-02-09 15:24:32 ----A---- C:\Windows\system32\inetppui.dll
2011-02-09 15:24:32 ----A---- C:\Windows\system32\drivers\dxg.sys
2011-02-09 15:24:32 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2011-02-09 15:24:32 ----A---- C:\Windows\system32\csrstub.exe
2011-02-09 15:24:32 ----A---- C:\Windows\system32\cbsra.exe
2011-02-09 15:24:32 ----A---- C:\Windows\system32\bitsigd.dll
2011-02-09 15:24:31 ----A---- C:\Windows\system32\drivers\usb8023.sys
2011-02-09 15:24:31 ----A---- C:\Windows\system32\drivers\stream.sys
2011-02-09 15:24:31 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2011-02-09 15:24:31 ----A---- C:\Windows\system32\drivers\bridge.sys
2011-02-09 15:24:30 ----A---- C:\Windows\system32\msimsg.dll
2011-02-09 15:24:30 ----A---- C:\Windows\system32\f3ahvoas.dll
2011-02-09 15:24:30 ----A---- C:\Windows\system32\drivers\raspppoe.sys
2011-02-09 15:24:03 ----A---- C:\Windows\system32\SmiEngine.dll
2011-02-09 15:23:52 ----A---- C:\Windows\system32\wdscore.dll
2011-02-09 15:23:52 ----A---- C:\Windows\system32\PkgMgr.exe
2011-02-09 15:23:23 ----A---- C:\Windows\system32\drvstore.dll
2011-02-09 14:46:10 ----D---- C:\Windows\system32\WindowsPowerShell
2011-02-09 14:10:43 ----D---- C:\Program Files\Microsoft Silverlight
2011-02-09 14:06:15 ----A---- C:\Windows\system32\winrsmgr.dll
2011-02-09 14:06:11 ----A---- C:\Windows\system32\wsmprovhost.exe
2011-02-09 14:06:11 ----A---- C:\Windows\system32\winrshost.exe
2011-02-09 14:06:11 ----A---- C:\Windows\system32\winrs.exe
2011-02-09 14:06:10 ----A---- C:\Windows\system32\WsmRes.dll
2011-02-09 14:06:10 ----A---- C:\Windows\system32\wsmplpxy.dll
2011-02-09 14:06:10 ----A---- C:\Windows\system32\winrssrv.dll
2011-02-09 14:06:10 ----A---- C:\Windows\system32\wevtfwd.dll
2011-02-09 14:06:10 ----A---- C:\Windows\system32\wecutil.exe
2011-02-09 14:06:10 ----A---- C:\Windows\system32\wecsvc.dll
2011-02-09 14:06:10 ----A---- C:\Windows\system32\wecapi.dll
2011-02-09 14:06:09 ----A---- C:\Windows\system32\pwrshplugin.dll
2011-02-09 14:06:07 ----A---- C:\Windows\system32\WsmWmiPl.dll
2011-02-09 14:06:07 ----A---- C:\Windows\system32\WsmSvc.dll
2011-02-09 14:06:07 ----A---- C:\Windows\system32\WsmAuto.dll
2011-02-09 14:06:07 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2011-02-09 14:06:07 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
2011-02-09 14:06:07 ----A---- C:\Windows\system32\winrscmd.dll
2011-02-09 14:06:07 ----A---- C:\Windows\system32\winrm.vbs
2011-02-09 13:54:24 ----D---- C:\Windows\system32\x64
2011-02-09 13:46:15 ----A---- C:\Windows\system32\occache.dll
2011-02-09 13:46:15 ----A---- C:\Windows\system32\mstime.dll
2011-02-09 13:46:15 ----A---- C:\Windows\system32\mshtmled.dll
2011-02-09 13:46:15 ----A---- C:\Windows\system32\licmgr10.dll
2011-02-09 13:46:15 ----A---- C:\Windows\system32\jsproxy.dll
2011-02-09 13:46:15 ----A---- C:\Windows\system32\iepeers.dll
2011-02-09 13:46:14 ----A---- C:\Windows\system32\wininet.dll
2011-02-09 13:46:14 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-02-09 13:46:14 ----A---- C:\Windows\system32\msfeeds.dll
2011-02-09 13:46:14 ----A---- C:\Windows\system32\ieui.dll
2011-02-09 13:46:14 ----A---- C:\Windows\system32\iesetup.dll
2011-02-09 13:46:14 ----A---- C:\Windows\system32\iernonce.dll
2011-02-09 13:46:14 ----A---- C:\Windows\system32\iedkcs32.dll
2011-02-09 13:46:13 ----A---- C:\Windows\system32\urlmon.dll
2011-02-09 13:46:13 ----A---- C:\Windows\system32\msfeedssync.exe
2011-02-09 13:46:13 ----A---- C:\Windows\system32\ieUnatt.exe
2011-02-09 13:46:13 ----A---- C:\Windows\system32\iesysprep.dll
2011-02-09 13:46:13 ----A---- C:\Windows\system32\iertutil.dll
2011-02-09 13:46:13 ----A---- C:\Windows\system32\ie4uinit.exe
2011-02-09 13:46:12 ----A---- C:\Windows\system32\ieframe.dll
2011-02-09 13:46:11 ----A---- C:\Windows\system32\mshtml.dll
2011-02-09 13:39:59 ----A---- C:\Windows\system32\msls31.dll
2011-02-09 13:39:59 ----A---- C:\Windows\system32\mshtmler.dll
2011-02-09 13:39:59 ----A---- C:\Windows\system32\imgutil.dll
2011-02-09 13:39:59 ----A---- C:\Windows\system32\ieakeng.dll
2011-02-09 13:39:59 ----A---- C:\Windows\system32\icardie.dll
2011-02-09 13:39:59 ----A---- C:\Windows\system32\corpol.dll
2011-02-09 13:39:59 ----A---- C:\Windows\system32\admparse.dll
2011-02-09 13:39:58 ----A---- C:\Windows\system32\webcheck.dll
2011-02-09 13:39:58 ----A---- C:\Windows\system32\msrating.dll
2011-02-09 13:39:58 ----A---- C:\Windows\system32\inseng.dll
2011-02-09 13:39:58 ----A---- C:\Windows\system32\ieaksie.dll
2011-02-09 13:39:58 ----A---- C:\Windows\system32\dxtrans.dll
2011-02-09 13:39:58 ----A---- C:\Windows\system32\dxtmsft.dll
2011-02-09 13:39:57 ----A---- C:\Windows\system32\WinFXDocObj.exe
2011-02-09 13:39:57 ----A---- C:\Windows\system32\wextract.exe
2011-02-09 13:39:57 ----A---- C:\Windows\system32\pngfilt.dll
2011-02-09 13:39:57 ----A---- C:\Windows\system32\ieapfltr.dll
2011-02-09 13:39:57 ----A---- C:\Windows\system32\ieakui.dll
2011-02-09 13:39:57 ----A---- C:\Windows\system32\advpack.dll
2011-02-09 13:39:56 ----A---- C:\Windows\system32\url.dll
2011-02-09 13:39:56 ----A---- C:\Windows\system32\mshta.exe
2011-02-09 13:39:56 ----A---- C:\Windows\system32\iexpress.exe
2011-02-09 13:39:55 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2011-02-09 13:39:55 ----A---- C:\Windows\system32\SetDepNx.exe
2011-02-09 13:39:55 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-02-09 13:39:55 ----A---- C:\Windows\system32\PDMSetup.exe
2011-02-09 13:37:23 ----A---- C:\Windows\system32\browserchoice.exe
2011-02-09 13:16:41 ----A---- C:\Windows\system32\nshhttp.dll
2011-02-09 13:16:40 ----A---- C:\Windows\system32\httpapi.dll
2011-02-09 13:16:40 ----A---- C:\Windows\system32\drivers\http.sys
2011-02-09 13:16:27 ----N---- C:\Windows\system32\MpSigStub.exe
2011-02-09 13:13:19 ----A---- C:\Windows\system32\wmp.dll
2011-02-09 13:13:12 ----A---- C:\Windows\system32\wmploc.DLL
2011-02-09 13:13:12 ----A---- C:\Windows\system32\spwmp.dll
2011-02-09 13:13:12 ----A---- C:\Windows\system32\dxmasf.dll
2011-02-09 13:12:59 ----A---- C:\Windows\system32\netiohlp.dll
2011-02-09 13:12:58 ----A---- C:\Windows\system32\NETSTAT.EXE
2011-02-09 13:12:57 ----A---- C:\Windows\system32\TCPSVCS.EXE
2011-02-09 13:12:57 ----A---- C:\Windows\system32\ROUTE.EXE
2011-02-09 13:12:57 ----A---- C:\Windows\system32\MRINFO.EXE
2011-02-09 13:12:57 ----A---- C:\Windows\system32\HOSTNAME.EXE
2011-02-09 13:12:57 ----A---- C:\Windows\system32\finger.exe
2011-02-09 13:12:57 ----A---- C:\Windows\system32\ARP.EXE
2011-02-09 13:12:43 ----A---- C:\Windows\system32\wmpmde.dll
2011-02-09 13:12:36 ----A---- C:\Windows\system32\tzres.dll
2011-02-09 13:12:27 ----A---- C:\Windows\system32\wdigest.dll
2011-02-09 13:12:27 ----A---- C:\Windows\system32\lsasrv.dll
2011-02-09 13:12:27 ----A---- C:\Windows\system32\kerberos.dll
2011-02-09 13:12:26 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2011-02-09 13:12:25 ----A---- C:\Windows\system32\secur32.dll
2011-02-09 13:12:25 ----A---- C:\Windows\system32\lsass.exe
2011-02-09 13:09:38 ----A---- C:\Windows\system32\WMVCORE.DLL
2011-02-09 13:09:36 ----A---- C:\Windows\system32\rrinstaller.exe
2011-02-09 13:09:36 ----A---- C:\Windows\system32\mfpmp.exe
2011-02-09 13:09:36 ----A---- C:\Windows\system32\mferror.dll
2011-02-09 13:08:37 ----A---- C:\Windows\system32\wmpdxm.dll
2011-02-09 13:08:02 ----A---- C:\Windows\system32\RMActivate_isv.exe
2011-02-09 13:08:02 ----A---- C:\Windows\system32\RMActivate.exe
2011-02-09 13:08:01 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2011-02-09 13:08:01 ----A---- C:\Windows\system32\secproc_ssp.dll
2011-02-09 13:08:01 ----A---- C:\Windows\system32\secproc_isv.dll
2011-02-09 13:08:01 ----A---- C:\Windows\system32\secproc.dll
2011-02-09 13:08:01 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2011-02-09 13:08:01 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2011-02-09 13:08:01 ----A---- C:\Windows\system32\msdrm.dll
2011-02-09 13:07:59 ----A---- C:\Windows\system32\taskschd.dll
2011-02-09 13:07:59 ----A---- C:\Windows\system32\schedsvc.dll
2011-02-09 13:07:58 ----A---- C:\Windows\system32\wmicmiplugin.dll
2011-02-09 13:07:58 ----A---- C:\Windows\system32\taskeng.exe
2011-02-09 13:07:58 ----A---- C:\Windows\system32\taskcomp.dll
2011-02-09 13:07:55 ----A---- C:\Windows\system32\gameux.dll
2011-02-09 13:07:54 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2011-02-09 13:07:54 ----A---- C:\Windows\system32\Apphlpdm.dll
2011-02-09 13:07:52 ----A---- C:\Windows\system32\mfc40u.dll
2011-02-09 13:07:52 ----A---- C:\Windows\system32\mfc40.dll
2011-02-09 13:07:51 ----A---- C:\Windows\system32\wkssvc.dll
2011-02-09 13:07:40 ----A---- C:\Windows\system32\unregmp2.exe
2011-02-09 13:07:20 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-02-09 13:07:20 ----A---- C:\Windows\system32\ntkrnlpa.exe
2011-02-09 13:07:19 ----A---- C:\Windows\system32\ntdll.dll
2011-02-09 13:07:17 ----A---- C:\Windows\system32\tsbyuv.dll
2011-02-09 13:07:17 ----A---- C:\Windows\system32\quartz.dll
2011-02-09 13:07:17 ----A---- C:\Windows\system32\msyuv.dll
2011-02-09 13:07:17 ----A---- C:\Windows\system32\msvidc32.dll
2011-02-09 13:07:17 ----A---- C:\Windows\system32\msvfw32.dll
2011-02-09 13:07:17 ----A---- C:\Windows\system32\msrle32.dll
2011-02-09 13:07:17 ----A---- C:\Windows\system32\mciavi32.dll
2011-02-09 13:07:17 ----A---- C:\Windows\system32\iyuv_32.dll
2011-02-09 13:07:17 ----A---- C:\Windows\system32\avifil32.dll
2011-02-09 13:07:15 ----A---- C:\Windows\system32\comctl32.dll
2011-02-09 13:07:14 ----A---- C:\Windows\system32\rpcrt4.dll
2011-02-09 13:07:09 ----A---- C:\Windows\system32\msv1_0.dll
2011-02-09 13:07:07 ----A---- C:\Windows\system32\shell32.dll
2011-02-09 13:07:06 ----A---- C:\Windows\system32\shlwapi.dll
2011-02-09 13:07:04 ----A---- C:\Windows\system32\msxml3.dll
2011-02-09 13:07:03 ----A---- C:\Windows\system32\msxml6.dll
2011-02-09 13:07:01 ----A---- C:\Windows\system32\odbc32.dll
2011-02-09 13:06:59 ----A---- C:\Windows\system32\wlansvc.dll
2011-02-09 13:06:59 ----A---- C:\Windows\system32\wlansec.dll
2011-02-09 13:06:59 ----A---- C:\Windows\system32\wlanmsm.dll
2011-02-09 13:06:59 ----A---- C:\Windows\system32\wlanhlp.dll
2011-02-09 13:06:59 ----A---- C:\Windows\system32\wlanapi.dll
2011-02-09 13:06:59 ----A---- C:\Windows\system32\L2SecHC.dll
2011-02-09 13:06:57 ----A---- C:\Windows\system32\localspl.dll
2011-02-09 13:06:57 ----A---- C:\Windows\system32\asycfilt.dll
2011-02-09 13:06:56 ----A---- C:\Windows\system32\msasn1.dll
2011-02-09 13:06:55 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2011-02-09 13:06:55 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-02-09 13:06:53 ----A---- C:\Windows\system32\schannel.dll
2011-02-09 13:06:51 ----A---- C:\Windows\system32\win32k.sys
2011-02-09 13:06:48 ----A---- C:\Windows\system32\tsgqec.dll
2011-02-09 13:06:48 ----A---- C:\Windows\system32\mstscax.dll
2011-02-09 13:06:48 ----A---- C:\Windows\system32\aaclient.dll
2011-02-09 13:06:46 ----A---- C:\Windows\system32\atmfd.dll
2011-02-09 13:06:45 ----A---- C:\Windows\system32\lpk.dll
2011-02-09 13:06:45 ----A---- C:\Windows\system32\fontsub.dll
2011-02-09 13:06:45 ----A---- C:\Windows\system32\dciman32.dll
2011-02-09 13:06:45 ----A---- C:\Windows\system32\atmlib.dll
2011-02-09 13:06:44 ----A---- C:\Windows\system32\ole32.dll
2011-02-09 13:06:43 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-02-09 13:06:43 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-02-09 13:06:43 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-02-09 13:06:10 ----A---- C:\Windows\system32\atl.dll
2011-02-09 13:06:09 ----A---- C:\Windows\system32\usp10.dll
2011-02-09 13:06:08 ----A---- C:\Windows\system32\t2embed.dll
2011-02-09 13:06:07 ----A---- C:\Windows\system32\cabview.dll
2011-02-09 13:06:05 ----A---- C:\Windows\system32\sdclt.exe
2011-02-09 13:06:05 ----A---- C:\Windows\system32\rtutils.dll
2011-02-09 13:06:04 ----A---- C:\Windows\system32\consent.exe
2011-02-09 13:06:02 ----A---- C:\Windows\system32\wintrust.dll
2011-02-09 13:06:01 ----A---- C:\Windows\system32\spoolsv.exe
2011-02-09 13:06:01 ----A---- C:\Windows\system32\MP4SDECD.DLL
2011-02-09 13:06:00 ----A---- C:\Windows\system32\iccvid.dll
2011-02-09 12:59:31 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2011-02-09 12:59:26 ----A---- C:\Windows\system32\rastls.dll
2011-02-09 12:59:24 ----A---- C:\Windows\system32\WSDApi.dll
2011-02-09 12:19:01 ----D---- C:\ProgramData\Kaspersky Lab
2011-02-09 12:19:01 ----D---- C:\Program Files\Kaspersky Lab
2011-02-09 12:18:53 ----A---- C:\Windows\system32\drivers\klif.sys
2011-02-09 12:18:02 ----D---- C:\ProgramData\Kaspersky Lab Setup Files
2011-02-09 12:07:07 ----D---- C:\Program Files\Sunbelt Software
2011-02-09 12:05:48 ----D---- C:\Users\Eko\AppData\Roaming\Adobe
2011-02-09 11:59:14 ----D---- C:\ProgramData\LightScribe
2011-02-09 11:53:59 ----D---- C:\ProgramData\ASUS
2011-02-09 11:29:08 ----A---- C:\Windows\system32\wups2.dll
2011-02-09 11:29:08 ----A---- C:\Windows\system32\wucltux.dll
2011-02-09 11:29:08 ----A---- C:\Windows\system32\wuaueng.dll
2011-02-09 11:29:08 ----A---- C:\Windows\system32\wuauclt.exe
2011-02-09 11:29:01 ----A---- C:\Windows\system32\wups.dll
2011-02-09 11:29:01 ----A---- C:\Windows\system32\wudriver.dll
2011-02-09 11:29:01 ----A---- C:\Windows\system32\wuapi.dll
2011-02-09 11:29:00 ----A---- C:\Windows\system32\agremove.exe
2011-02-09 11:28:58 ----A---- C:\Windows\system32\wuwebv.dll
2011-02-09 11:28:58 ----A---- C:\Windows\system32\wuapp.exe
2011-02-09 11:21:06 ----D---- C:\Program Files\VS Revo Group
2011-02-09 11:13:05 ----D---- C:\Users\Eko\AppData\Roaming\Macromedia
2011-02-09 11:12:44 ----D---- C:\Users\Eko\AppData\Roaming\Identities
2011-02-09 11:09:08 ----DC---- C:\Windows\system32\DRVSTORE
2011-02-09 11:08:23 ----A---- C:\Windows\system32\d3dx9_32.dll
2011-02-09 11:07:30 ----D---- C:\Program Files\Microsoft
2011-02-09 11:07:14 ----D---- C:\Program Files\Windows Live SkyDrive
2011-02-09 11:06:12 ----D---- C:\Program Files\Common Files\Windows Live
2011-02-09 11:04:30 ----D---- C:\Program Files\Adobe
2011-02-09 11:02:02 ----SD---- C:\Users\Eko\AppData\Roaming\Microsoft
2011-02-09 11:02:02 ----D---- C:\Users\Eko\AppData\Roaming\Media Center Programs

======List of files/folders modified in the last 1 months======

2011-02-10 09:52:18 ----D---- C:\Windows\Temp
2011-02-10 09:52:09 ----RD---- C:\Program Files
2011-02-10 09:50:31 ----D---- C:\Windows\System32
2011-02-10 09:50:31 ----D---- C:\Windows\inf
2011-02-10 09:50:31 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-02-10 09:48:26 ----D---- C:\Windows\Debug
2011-02-10 09:48:26 ----D---- C:\Windows
2011-02-09 23:04:09 ----D---- C:\Windows\Microsoft.NET
2011-02-09 23:03:25 ----RSD---- C:\Windows\assembly
2011-02-09 22:55:49 ----D---- C:\Windows\system32\Tasks
2011-02-09 22:54:03 ----D---- C:\Windows\system32\sk-SK
2011-02-09 22:54:03 ----D---- C:\Windows\system32\ro-RO
2011-02-09 22:54:03 ----D---- C:\Windows\system32\en-US
2011-02-09 22:54:03 ----D---- C:\Windows\system32\el-GR
2011-02-09 22:54:03 ----D---- C:\Windows\system32\cs-CZ
2011-02-09 22:54:02 ----D---- C:\Windows\system32\drivers\sk-SK
2011-02-09 22:54:02 ----D---- C:\Windows\system32\drivers\ro-RO
2011-02-09 22:54:02 ----D---- C:\Windows\system32\drivers\en-US
2011-02-09 22:54:02 ----D---- C:\Windows\system32\drivers\el-GR
2011-02-09 22:54:02 ----D---- C:\Windows\system32\drivers\cs-CZ
2011-02-09 22:54:00 ----D---- C:\Windows\system32\drivers\UMDF
2011-02-09 22:53:59 ----D---- C:\Windows\system32\wbem
2011-02-09 22:53:57 ----D---- C:\Windows\system32\zh-TW
2011-02-09 22:53:57 ----D---- C:\Windows\system32\zh-HK
2011-02-09 22:53:57 ----D---- C:\Windows\system32\uk-UA
2011-02-09 22:53:57 ----D---- C:\Windows\system32\tr-TR
2011-02-09 22:53:57 ----D---- C:\Windows\system32\th-TH
2011-02-09 22:53:57 ----D---- C:\Windows\system32\sv-SE
2011-02-09 22:53:57 ----D---- C:\Windows\system32\sr-Latn-CS
2011-02-09 22:53:57 ----D---- C:\Windows\system32\sl-SI
2011-02-09 22:53:57 ----D---- C:\Windows\system32\pt-PT
2011-02-09 22:53:57 ----D---- C:\Windows\system32\pt-BR
2011-02-09 22:53:57 ----D---- C:\Windows\system32\pl-PL
2011-02-09 22:53:57 ----D---- C:\Windows\system32\nl-NL
2011-02-09 22:53:57 ----D---- C:\Windows\system32\lv-LV
2011-02-09 22:53:57 ----D---- C:\Windows\system32\lt-LT
2011-02-09 22:53:57 ----D---- C:\Windows\system32\ko-KR
2011-02-09 22:53:57 ----D---- C:\Windows\system32\it-IT
2011-02-09 22:53:57 ----D---- C:\Windows\system32\hu-HU
2011-02-09 22:53:57 ----D---- C:\Windows\system32\hr-HR
2011-02-09 22:53:57 ----D---- C:\Windows\system32\he-IL
2011-02-09 22:53:57 ----D---- C:\Windows\system32\fr-FR
2011-02-09 22:53:57 ----D---- C:\Windows\system32\fi-FI
2011-02-09 22:53:57 ----D---- C:\Windows\system32\es-ES
2011-02-09 22:53:57 ----D---- C:\Windows\system32\bg-BG
2011-02-09 22:53:56 ----D---- C:\Windows\system32\zh-CN
2011-02-09 22:53:56 ----D---- C:\Windows\system32\ru-RU
2011-02-09 22:53:56 ----D---- C:\Windows\system32\nb-NO
2011-02-09 22:53:56 ----D---- C:\Windows\system32\ja-JP
2011-02-09 22:53:56 ----D---- C:\Windows\system32\et-EE
2011-02-09 22:53:56 ----D---- C:\Windows\system32\de-DE
2011-02-09 22:53:56 ----D---- C:\Windows\system32\da-DK
2011-02-09 22:53:56 ----D---- C:\Windows\system32\ar-SA
2011-02-09 22:53:53 ----D---- C:\Windows\system32\drivers
2011-02-09 22:52:26 ----D---- C:\Windows\winsxs
2011-02-09 22:52:24 ----D---- C:\Windows\system32\catroot2
2011-02-09 22:52:24 ----D---- C:\Windows\system32\catroot
2011-02-09 22:49:26 ----SHD---- C:\Windows\Installer
2011-02-09 22:04:09 ----D---- C:\Windows\system32\WDI
2011-02-09 18:18:55 ----HD---- C:\Program Files\InstallShield Installation Information
2011-02-09 16:36:06 ----RSD---- C:\Windows\Fonts
2011-02-09 15:54:46 ----SHD---- C:\Boot
2011-02-09 15:48:04 ----D---- C:\Program Files\Windows Calendar
2011-02-09 15:48:04 ----D---- C:\Program Files\Movie Maker
2011-02-09 15:48:03 ----D---- C:\Program Files\Windows Sidebar
2011-02-09 15:48:03 ----D---- C:\Program Files\Windows Photo Gallery
2011-02-09 15:48:03 ----D---- C:\Program Files\Windows Media Player
2011-02-09 15:48:03 ----D---- C:\Program Files\Windows Mail
2011-02-09 15:48:03 ----D---- C:\Program Files\Windows Journal
2011-02-09 15:48:03 ----D---- C:\Program Files\Windows Collaboration
2011-02-09 15:48:03 ----D---- C:\Program Files\Internet Explorer
2011-02-09 15:48:03 ----D---- C:\Program Files\Common Files\System
2011-02-09 15:48:02 ----D---- C:\Windows\servicing
2011-02-09 15:48:02 ----D---- C:\Windows\ehome
2011-02-09 15:48:02 ----D---- C:\Program Files\Windows Defender
2011-02-09 15:47:59 ----D---- C:\Windows\system32\XPSViewer
2011-02-09 15:47:59 ----D---- C:\Windows\IME
2011-02-09 15:47:53 ----D---- C:\Windows\system32\oobe
2011-02-09 15:47:53 ----D---- C:\Windows\system32\migration
2011-02-09 15:47:53 ----D---- C:\Windows\system32\AdvancedInstallers
2011-02-09 15:47:52 ----D---- C:\Windows\system32\setup
2011-02-09 15:47:52 ----D---- C:\Windows\system32\cs
2011-02-09 15:47:51 ----D---- C:\Windows\system32\SLUI
2011-02-09 15:47:51 ----D---- C:\Windows\system32\manifeststore
2011-02-09 15:47:51 ----D---- C:\Windows\system32\en
2011-02-09 15:47:49 ----D---- C:\Windows\system32\migwiz
2011-02-09 15:47:40 ----D---- C:\Windows\AppPatch
2011-02-09 15:47:34 ----D---- C:\Windows\system32\Boot
2011-02-09 15:43:24 ----A---- C:\Windows\fonts\GlobalUserInterface.CompositeFont
2011-02-09 14:46:13 ----D---- C:\Windows\PolicyDefinitions
2011-02-09 14:15:30 ----D---- C:\Windows\Prefetch
2011-02-09 14:11:06 ----SD---- C:\ProgramData\Microsoft
2011-02-09 12:19:01 ----HD---- C:\ProgramData
2011-02-09 12:03:32 ----D---- C:\Program Files\ASUS
2011-02-09 11:59:45 ----D---- C:\Program Files\Common Files
2011-02-09 11:53:31 ----D---- C:\Windows\system32\Asus_Camera_ScreenSaver dir
2011-02-09 11:48:43 ----D---- C:\ProgramData\Microsoft Help
2011-02-09 11:48:39 ----D---- C:\Program Files\Common Files\microsoft shared
2011-02-09 11:48:35 ----D---- C:\Windows\ShellNew
2011-02-09 11:45:04 ----A---- C:\Windows\win.ini
2011-02-09 11:41:56 ----D---- C:\Program Files\Google
2011-02-09 11:41:55 ----D---- C:\Program Files\Common Files\PX Storage Engine
2011-02-09 11:34:38 ----D---- C:\Program Files\CyberLink
2011-02-09 11:29:16 ----D---- C:\Windows\SoftwareDistribution
2011-02-09 11:25:52 ----A---- C:\Windows\system32\acovcnt.exe
2011-02-09 11:24:00 ----D---- C:\ProgramData\Norton
2011-02-09 11:22:43 ----D---- C:\ProgramData\NortonInstaller
2011-02-09 11:13:00 ----SHD---- C:\$RECYCLE.BIN
2011-02-09 11:04:48 ----D---- C:\ProgramData\Adobe
2011-02-09 11:04:35 ----D---- C:\Program Files\Common Files\Adobe
2011-02-09 11:02:02 ----RD---- C:\Users
2011-02-09 10:57:42 ----D---- C:\Windows\rescache
2011-02-04 17:34:02 ----A---- C:\Windows\system32\mrt.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-02-11 329752]
R0 KL1;kl1; C:\Windows\system32\DRIVERS\kl1.sys [2010-06-09 132184]
R1 kl2;kl2; C:\Windows\system32\DRIVERS\kl2.sys [2010-06-09 11352]
R1 KLIF;Kaspersky Lab Driver; C:\Windows\system32\DRIVERS\klif.sys [2011-02-09 488536]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter; C:\Windows\system32\DRIVERS\klim6.sys [2010-04-22 22104]
R1 SbFw;SbFw; C:\Windows\system32\drivers\SbFw.sys [2008-10-31 270888]
R1 sbhips;Sunbelt HIPS Driver; C:\Windows\system32\drivers\sbhips.sys [2008-06-21 66600]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys [2007-07-24 13880]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-09-05 1183744]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2009-03-13 140800]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2010-08-25 9024512]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2008-11-03 13880]
R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\Windows\system32\DRIVERS\klmouflt.sys [2009-11-02 19984]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1E60x86.sys [2009-08-05 48640]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2008-12-24 14392]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport; C:\Windows\system32\DRIVERS\sbfwim.sys [2008-06-21 65576]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2008-08-11 1752704]
R3 SRS_PremiumSound_Service;SRS Labs Premium Sound; C:\Windows\system32\drivers\srs_PremiumSound_i386.sys [2009-01-14 230952]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-02 1010560]
S3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys []
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-05-24 131000]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2006-11-02 194048]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 AVP;Služba Kaspersky Anti-Virus; C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe [2010-11-02 365336]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 SbPF.Launcher;SbPF.Launcher; C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [2008-10-31 95528]
R2 SPF4;Sunbelt Personal Firewall 4; C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [2008-10-31 1365288]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]

-----------------EOF-----------------

[motji]

Log je ok

[eko]

ok dekuji