Kouknete te mi na log diky.-)

[Davidov]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:16:37, on 12.3.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ccSvcHst.exe
C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\Dada\Desktop\HijackThis.exe
C:\Windows\SysWOW64\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\IPSBHO.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\coIEPlg.dll
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - (no file)
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: MotoHelper Service (MotoHelper) - Unknown owner - C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ccSvcHst.exe
O23 - Service: NMSAccess - Unknown owner - C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PhenomMsrTweaker service (PhenomMsrTweaker) - Unknown owner - C:\Program Files\PhenomMsrTweaker\PhenomMsrTweakerService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Secunia PSI Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\PSIA.exe
O23 - Service: Secunia Update Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\sua.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7945 bytes

[motji]

Dobrý večer
Vložte log ze rsitu, viz můj podpis.
Jaké jsou problémy s počítačem?

[Davidov]

Logfile of random's system information tool 1.08 (written by random/random)
Run by Dada at 2011-03-14 12:48:22
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 10 GB (34%) free of 31 GB
Total RAM: 8189 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:48:24, on 14.3.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ccSvcHst.exe
C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe
C:\Program Files (x86)\Windows Media Player\wmplayer.exe
C:\Program Files (x86)\QIP\qip.exe
C:\Program Files (x86)\AVG\AVG PC Tuneup 2011\BoostSpeed.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files\trend micro\Dada.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\IPSBHO.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\coIEPlg.dll
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - (no file)
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: MotoHelper Service (MotoHelper) - Unknown owner - C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ccSvcHst.exe
O23 - Service: NMSAccess - Unknown owner - C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PhenomMsrTweaker service (PhenomMsrTweaker) - Unknown owner - C:\Program Files\PhenomMsrTweaker\PhenomMsrTweakerService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Secunia PSI Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\PSIA.exe
O23 - Service: Secunia Update Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\sua.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8148 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe"
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe"
"C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ccSvcHst.exe" /s "N360" /m "C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\diMaster.dll" /prefetch:1
"C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe"
"C:\Program Files\PhenomMsrTweaker\PhenomMsrTweakerService.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\Secunia\PSI\sua.exe" --start-service
taskhost.exe USER
"C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ccSvcHst.exe" /c /a /s UserSession
C:\Windows\Explorer.EXE
"C:\Program Files\Logitech\SetPointP\SetPoint.exe" /launchGaming
"C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
KHALMNPR.EXE /API
/create /tn "MotoHelper Initial Update" /tr " \"C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperUpdate.exe\" -d -silent" /sc ONCE /ST 11:43:00 /ru System
\??\C:\Windows\system32\conhost.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe"
"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /Play -Embedding
"C:\Program Files (x86)\QIP\qip.exe"
"C:\Program Files (x86)\AVG\AVG PC Tuneup 2011\BoostSpeed.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=3644.8d0f0c0.27761835 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll" 3644 plugin \\.\pipe\gecko-crash-server-pipe.3644
"C:\Windows\system32\NOTEPAD.EXE" C:\rsit\log.txt
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Dada\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\ProgramData\LangSoft\WebIE.dll [2011-02-18 798771]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Symantec NCO BHO - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\coIEPlg.dll [2010-09-04 396144]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\IPSBHO.DLL [2010-02-04 79224]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-02-18 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\ProgramData\LangSoft\WebIE.dll [2011-02-18 798771]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\coIEPlg.dll [2010-09-04 396144]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"EvtMgr6"=C:\Program Files\Logitech\SetPointP\SetPoint.exe [2010-10-29 1680976]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [2010-12-20 443728]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Secunia PSI Tray.lnk]
C:\PROGRA~2\Secunia\PSI\psi_tray.exe [2011-01-10 291896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2010-10-28 66640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"DisableStartupSound"=1
"DisableStatusMessages"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoThumbnailCache"=1
"DisableThumbnailsOnNetworkFolders"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-03-14 12:34:11 ----D---- C:\Program Files\trend micro
2011-03-14 12:34:10 ----D---- C:\rsit
2011-03-13 17:59:39 ----D---- C:\ProgramData\Futuremark
2011-03-12 19:39:02 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2011-03-12 19:39:02 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2011-03-12 19:39:02 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2011-03-12 19:39:02 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2011-03-12 19:39:02 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2011-03-12 19:39:02 ----A---- C:\Windows\system32\XAudio2_6.dll
2011-03-12 19:39:02 ----A---- C:\Windows\system32\XAudio2_5.dll
2011-03-12 19:39:02 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2011-03-12 19:39:02 ----A---- C:\Windows\system32\xactengine3_6.dll
2011-03-12 19:39:02 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2011-03-12 19:39:01 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2011-03-12 19:39:01 ----A---- C:\Windows\system32\xactengine3_5.dll
2011-03-12 19:38:59 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2011-03-12 19:38:59 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2011-03-12 19:38:59 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2011-03-12 19:38:59 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2011-03-12 19:38:59 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2011-03-12 19:38:59 ----A---- C:\Windows\system32\D3DX9_42.dll
2011-03-12 19:38:59 ----A---- C:\Windows\system32\d3dx11_42.dll
2011-03-12 19:38:59 ----A---- C:\Windows\system32\d3dx10_42.dll
2011-03-12 19:38:59 ----A---- C:\Windows\system32\d3dcsx_42.dll
2011-03-12 19:38:59 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2011-03-12 19:38:58 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2011-03-12 19:38:58 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2011-03-12 19:38:58 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2011-03-12 19:38:58 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2011-03-12 19:38:58 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2011-03-12 19:38:58 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2011-03-12 19:38:58 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2011-03-12 19:38:58 ----A---- C:\Windows\system32\XAudio2_4.dll
2011-03-12 19:38:58 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2011-03-12 19:38:58 ----A---- C:\Windows\system32\xactengine3_4.dll
2011-03-12 19:38:58 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2011-03-12 19:38:58 ----A---- C:\Windows\system32\D3DX9_41.dll
2011-03-12 19:38:58 ----A---- C:\Windows\system32\d3dx10_41.dll
2011-03-12 19:38:58 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2011-03-12 19:38:57 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2011-03-12 19:38:57 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2011-03-12 19:38:57 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2011-03-12 19:38:57 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2011-03-12 19:38:57 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2011-03-12 19:38:57 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2011-03-12 19:38:57 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2011-03-12 19:38:57 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2011-03-12 19:38:57 ----A---- C:\Windows\system32\XAudio2_3.dll
2011-03-12 19:38:57 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2011-03-12 19:38:57 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2011-03-12 19:38:57 ----A---- C:\Windows\system32\xactengine3_3.dll
2011-03-12 19:38:57 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2011-03-12 19:38:57 ----A---- C:\Windows\system32\D3DX9_40.dll
2011-03-12 19:38:57 ----A---- C:\Windows\system32\d3dx10_40.dll
2011-03-12 19:38:57 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2011-03-12 19:38:56 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2011-03-12 19:38:56 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2011-03-12 19:38:56 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2011-03-12 19:38:56 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2011-03-12 19:38:56 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2011-03-12 19:38:56 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2011-03-12 19:38:56 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2011-03-12 19:38:56 ----A---- C:\Windows\system32\XAudio2_2.dll
2011-03-12 19:38:56 ----A---- C:\Windows\system32\XAudio2_1.dll
2011-03-12 19:38:56 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2011-03-12 19:38:56 ----A---- C:\Windows\system32\xactengine3_2.dll
2011-03-12 19:38:56 ----A---- C:\Windows\system32\D3DX9_39.dll
2011-03-12 19:38:56 ----A---- C:\Windows\system32\d3dx10_39.dll
2011-03-12 19:38:56 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2011-03-12 19:38:54 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2011-03-12 19:38:54 ----A---- C:\Windows\system32\xactengine3_1.dll
2011-03-12 19:38:53 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2011-03-12 19:38:53 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2011-03-12 19:38:53 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2011-03-12 19:38:53 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2011-03-12 19:38:53 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2011-03-12 19:38:53 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2011-03-12 19:38:53 ----A---- C:\Windows\system32\XAudio2_0.dll
2011-03-12 19:38:53 ----A---- C:\Windows\system32\xactengine3_0.dll
2011-03-12 19:38:53 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2011-03-12 19:38:53 ----A---- C:\Windows\system32\D3DX9_38.dll
2011-03-12 19:38:53 ----A---- C:\Windows\system32\d3dx10_38.dll
2011-03-12 19:38:53 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2011-03-12 19:38:52 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2011-03-12 19:38:52 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2011-03-12 19:38:52 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2011-03-12 19:38:52 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2011-03-12 19:38:52 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2011-03-12 19:38:52 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2011-03-12 19:38:52 ----A---- C:\Windows\system32\xactengine2_10.dll
2011-03-12 19:38:52 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2011-03-12 19:38:52 ----A---- C:\Windows\system32\D3DX9_37.dll
2011-03-12 19:38:52 ----A---- C:\Windows\system32\d3dx10_37.dll
2011-03-12 19:38:52 ----A---- C:\Windows\system32\d3dx10_36.dll
2011-03-12 19:38:52 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2011-03-12 19:38:51 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2011-03-12 19:38:51 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2011-03-12 19:38:51 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2011-03-12 19:38:51 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2011-03-12 19:38:51 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2011-03-12 19:38:51 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2011-03-12 19:38:51 ----A---- C:\Windows\system32\xactengine2_9.dll
2011-03-12 19:38:51 ----A---- C:\Windows\system32\d3dx9_36.dll
2011-03-12 19:38:51 ----A---- C:\Windows\system32\d3dx9_35.dll
2011-03-12 19:38:51 ----A---- C:\Windows\system32\d3dx10_35.dll
2011-03-12 19:38:51 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2011-03-12 19:38:51 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2011-03-12 19:38:50 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2011-03-12 19:38:50 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2011-03-12 19:38:50 ----A---- C:\Windows\system32\xactengine2_8.dll
2011-03-12 19:38:50 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2011-03-12 19:36:07 ----D---- C:\Windows\SYSWOW64\AGEIA
2011-03-12 19:36:07 ----D---- C:\Program Files (x86)\AGEIA Technologies
2011-03-12 11:28:57 ----D---- C:\Users\Dada\AppData\Roaming\Malwarebytes
2011-03-12 11:28:49 ----A---- C:\Windows\SYSWOW64\drivers\mbamswissarmy.sys
2011-03-12 11:28:48 ----D---- C:\ProgramData\Malwarebytes
2011-03-12 11:28:46 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-03-12 11:28:46 ----A---- C:\Windows\system32\drivers\mbam.sys
2011-03-12 08:53:20 ----D---- C:\Program Files (x86)\oZone3D
2011-03-10 13:09:32 ----D---- C:\Program Files (x86)\PokerStars
2011-03-09 19:28:31 ----A---- C:\Windows\SYSWOW64\sbe.dll
2011-03-09 19:28:31 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2011-03-09 19:28:31 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2011-03-09 19:28:31 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2011-03-09 19:28:31 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2011-03-09 19:28:31 ----A---- C:\Windows\system32\sbe.dll
2011-03-09 19:28:31 ----A---- C:\Windows\system32\FntCache.dll
2011-03-09 19:28:31 ----A---- C:\Windows\system32\EncDec.dll
2011-03-09 19:28:31 ----A---- C:\Windows\system32\DWrite.dll
2011-03-09 19:28:31 ----A---- C:\Windows\system32\d2d1.dll
2011-03-09 19:28:31 ----A---- C:\Windows\system32\CPFilters.dll
2011-03-08 21:27:51 ----D---- C:\Users\Dada\AppData\Roaming\DVDFab
2011-03-08 21:20:20 ----D---- C:\Users\Dada\AppData\Roaming\NVIDIA
2011-03-07 10:43:37 ----A---- C:\LOGFILE.TXT
2011-03-07 10:38:47 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2011-03-07 10:38:47 ----A---- C:\Windows\system32\d3d10_1.dll
2011-03-07 10:34:25 ----D---- C:\Users\Dada\AppData\Roaming\AVG
2011-03-07 10:33:23 ----D---- C:\Program Files (x86)\AVG
2011-02-23 02:41:52 ----D---- C:\ProgramData\TuneUp Software
2011-02-23 02:41:48 ----SHD---- C:\ProgramData\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2011-02-23 02:32:38 ----D---- C:\ProgramData\NVIDIA
2011-02-23 02:31:17 ----A---- C:\Windows\system32\RtNicProp64.dll
2011-02-23 02:31:17 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2011-02-23 02:29:30 ----D---- C:\ProgramData\NVIDIA Corporation
2011-02-23 02:28:09 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2011-02-23 02:28:09 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2011-02-23 02:28:09 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2011-02-23 02:28:09 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2011-02-23 02:28:09 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2011-02-23 02:28:09 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2011-02-23 02:28:09 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2011-02-23 02:28:09 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2011-02-23 02:28:09 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2011-02-23 02:28:09 ----A---- C:\Windows\system32\OpenCL.dll
2011-02-23 02:28:09 ----A---- C:\Windows\system32\nvwgf2umx.dll
2011-02-23 02:28:09 ----A---- C:\Windows\system32\nvoglv64.dll
2011-02-23 02:28:09 ----A---- C:\Windows\system32\nvgenco642040.dll
2011-02-23 02:28:09 ----A---- C:\Windows\system32\nvdispco642090.dll
2011-02-23 02:28:09 ----A---- C:\Windows\system32\nvd3dumx.dll
2011-02-23 02:28:09 ----A---- C:\Windows\system32\nvcuvid.dll
2011-02-23 02:28:09 ----A---- C:\Windows\system32\nvcuvenc.dll
2011-02-23 02:28:09 ----A---- C:\Windows\system32\nvcuda.dll
2011-02-23 02:28:09 ----A---- C:\Windows\system32\nvcompiler.dll
2011-02-23 02:28:09 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2011-02-23 02:26:49 ----D---- C:\NVIDIA
2011-02-23 02:25:21 ----A---- C:\Windows\system32\drivers\usbfilter.sys
2011-02-23 01:45:35 ----D---- C:\Windows\system32\SPReview
2011-02-23 01:45:32 ----D---- C:\Windows\system32\EventProviders
2011-02-23 01:44:44 ----A---- C:\Windows\system32\netfxperf.dll
2011-02-23 01:44:44 ----A---- C:\Windows\system32\dfshim.dll
2011-02-23 01:44:38 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2011-02-23 01:44:36 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2011-02-23 01:44:36 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-02-23 01:44:36 ----A---- C:\Windows\system32\mstscax.dll
2011-02-23 01:44:36 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2011-02-23 01:44:35 ----A---- C:\Windows\system32\ieframe.dll
2011-02-23 01:44:35 ----A---- C:\Windows\system32\d3d10warp.dll
2011-02-23 01:44:34 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2011-02-23 01:44:29 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2011-02-23 01:44:29 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2011-02-23 01:44:29 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2011-02-23 01:44:29 ----A---- C:\Windows\system32\tssrvlic.dll
2011-02-23 01:44:29 ----A---- C:\Windows\system32\sysmain.dll
2011-02-23 01:44:29 ----A---- C:\Windows\system32\shell32.dll
2011-02-23 01:44:29 ----A---- C:\Windows\system32\RDVGHelper.exe
2011-02-23 01:44:29 ----A---- C:\Windows\system32\rdpcorets.dll
2011-02-23 01:44:29 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-02-23 01:44:28 ----A---- C:\Windows\SYSWOW64\pmcsnap.dll
2011-02-23 01:44:27 ----A---- C:\Windows\system32\MSVidCtl.dll
2011-02-23 01:44:25 ----A---- C:\Windows\system32\wmp.dll
2011-02-23 01:44:25 ----A---- C:\Windows\system32\tquery.dll
2011-02-23 01:44:24 ----A---- C:\Windows\system32\secproc_isv.dll
2011-02-23 01:44:24 ----A---- C:\Windows\system32\ntdll.dll
2011-02-23 01:44:24 ----A---- C:\Windows\system32\mssrch.dll
2011-02-23 01:44:24 ----A---- C:\Windows\system32\mscoree.dll
2011-02-23 01:44:24 ----A---- C:\Windows\system32\mmcndmgr.dll
2011-02-23 01:44:24 ----A---- C:\Windows\system32\mf.dll
2011-02-23 01:44:23 ----A---- C:\Windows\SYSWOW64\shell32.dll
2011-02-23 01:44:23 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2011-02-23 01:44:23 ----A---- C:\Windows\system32\xpsservices.dll
2011-02-23 01:44:23 ----A---- C:\Windows\system32\secproc.dll
2011-02-23 01:44:23 ----A---- C:\Windows\system32\RMActivate_isv.exe
2011-02-23 01:44:23 ----A---- C:\Windows\system32\RMActivate.exe
2011-02-23 01:44:22 ----A---- C:\Windows\SYSWOW64\secproc.dll
2011-02-23 01:44:22 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2011-02-23 01:44:22 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2011-02-23 01:44:22 ----A---- C:\Windows\SYSWOW64\PushPrinterConnections.exe
2011-02-23 01:44:22 ----A---- C:\Windows\SYSWOW64\ppcsnap.dll
2011-02-23 01:44:22 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-02-23 01:44:22 ----A---- C:\Windows\system32\wininet.dll
2011-02-23 01:44:22 ----A---- C:\Windows\system32\spwizui.dll
2011-02-23 01:44:22 ----A---- C:\Windows\system32\schedsvc.dll
2011-02-23 01:44:22 ----A---- C:\Windows\system32\rpcrt4.dll
2011-02-23 01:44:22 ----A---- C:\Windows\system32\ole32.dll
2011-02-23 01:44:22 ----A---- C:\Windows\system32\iertutil.dll
2011-02-23 01:44:21 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2011-02-23 01:44:21 ----A---- C:\Windows\system32\wevtsvc.dll
2011-02-23 01:44:21 ----A---- C:\Windows\system32\urlmon.dll
2011-02-23 01:44:21 ----A---- C:\Windows\system32\taskschd.dll
2011-02-23 01:44:21 ----A---- C:\Windows\system32\RacEngn.dll
2011-02-23 01:44:21 ----A---- C:\Windows\system32\esent.dll
2011-02-23 01:44:21 ----A---- C:\Windows\system32\drivers\ntfs.sys
2011-02-23 01:44:21 ----A---- C:\Windows\system32\diagperf.dll
2011-02-23 01:44:20 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-02-23 01:44:20 ----A---- C:\Windows\SYSWOW64\mf.dll
2011-02-23 01:44:20 ----A---- C:\Windows\system32\vssapi.dll
2011-02-23 01:44:20 ----A---- C:\Windows\system32\ExplorerFrame.dll
2011-02-23 01:44:19 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2011-02-23 01:44:19 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2011-02-23 01:44:19 ----A---- C:\Windows\system32\msxml3.dll
2011-02-23 01:44:19 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2011-02-23 01:44:17 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2011-02-23 01:44:17 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-02-23 01:44:17 ----A---- C:\Windows\system32\UIRibbon.dll
2011-02-23 01:44:17 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2011-02-23 01:44:17 ----A---- C:\Windows\explorer.exe
2011-02-23 01:44:16 ----A---- C:\Windows\SYSWOW64\wmp.dll
2011-02-23 01:44:16 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2011-02-23 01:44:16 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2011-02-23 01:44:16 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-02-23 01:44:16 ----A---- C:\Windows\SYSWOW64\esent.dll
2011-02-23 01:44:16 ----A---- C:\Windows\system32\WsmSvc.dll
2011-02-23 01:44:16 ----A---- C:\Windows\system32\WMVCORE.DLL
2011-02-23 01:44:16 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2011-02-23 01:44:16 ----A---- C:\Windows\system32\PresentationHost.exe
2011-02-23 01:44:15 ----A---- C:\Windows\SYSWOW64\tquery.dll
2011-02-23 01:44:15 ----A---- C:\Windows\system32\WinSAT.exe
2011-02-23 01:44:15 ----A---- C:\Windows\system32\spreview.exe
2011-02-23 01:44:15 ----A---- C:\Windows\system32\spinstall.exe
2011-02-23 01:44:15 ----A---- C:\Windows\system32\rdpudd.dll
2011-02-23 01:44:15 ----A---- C:\Windows\system32\rdpdd.dll
2011-02-23 01:44:15 ----A---- C:\Windows\system32\MPSSVC.dll
2011-02-23 01:44:15 ----A---- C:\Windows\system32\CertEnroll.dll
2011-02-23 01:44:14 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2011-02-23 01:44:14 ----A---- C:\Windows\system32\WMVDECOD.DLL
2011-02-23 01:44:14 ----A---- C:\Windows\system32\SearchFolder.dll
2011-02-23 01:44:14 ----A---- C:\Windows\system32\msxml6.dll
2011-02-23 01:44:14 ----A---- C:\Windows\system32\IKEEXT.DLL
2011-02-23 01:44:14 ----A---- C:\Windows\system32\d3d9.dll
2011-02-23 01:44:13 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2011-02-23 01:44:13 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2011-02-23 01:44:12 ----A---- C:\Windows\system32\VSSVC.exe
2011-02-23 01:44:12 ----A---- C:\Windows\system32\mstime.dll
2011-02-23 01:44:12 ----A---- C:\Windows\system32\kernel32.dll
2011-02-23 01:44:12 ----A---- C:\Windows\system32\gpsvc.dll
2011-02-23 01:44:12 ----A---- C:\Windows\system32\dwmcore.dll
2011-02-23 01:44:12 ----A---- C:\Windows\system32\drivers\http.sys
2011-02-23 01:44:12 ----A---- C:\Windows\system32\dbgeng.dll
2011-02-23 01:44:11 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-02-23 01:44:11 ----A---- C:\Windows\SYSWOW64\rdvgumd32.dll
2011-02-23 01:44:11 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2011-02-23 01:44:11 ----A---- C:\Windows\system32\drivers\ndis.sys
2011-02-23 01:44:11 ----A---- C:\Windows\system32\crypt32.dll
2011-02-23 01:44:10 ----A---- C:\Windows\SYSWOW64\ole32.dll
2011-02-23 01:44:10 ----A---- C:\Windows\system32\TSWorkspace.dll
2011-02-23 01:44:10 ----A---- C:\Windows\system32\schannel.dll
2011-02-23 01:44:10 ----A---- C:\Windows\system32\qmgr.dll
2011-02-23 01:44:10 ----A---- C:\Windows\system32\KernelBase.dll
2011-02-23 01:44:10 ----A---- C:\Windows\system32\drivers\afd.sys
2011-02-23 01:44:10 ----A---- C:\Windows\system32\audiosrv.dll
2011-02-23 01:44:10 ----A---- C:\Windows\system32\actxprxy.dll
2011-02-23 01:44:09 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-02-23 01:44:09 ----A---- C:\Windows\system32\termsrv.dll
2011-02-23 01:44:09 ----A---- C:\Windows\system32\sqmapi.dll
2011-02-23 01:44:09 ----A---- C:\Windows\system32\mstsc.exe
2011-02-23 01:44:09 ----A---- C:\Windows\system32\lsasrv.dll
2011-02-23 01:44:09 ----A---- C:\Windows\system32\gpprefcl.dll
2011-02-23 01:44:09 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-02-23 01:44:09 ----A---- C:\Windows\system32\drivers\srv.sys
2011-02-23 01:44:08 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2011-02-23 01:44:08 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2011-02-23 01:44:08 ----A---- C:\Windows\SYSWOW64\explorer.exe
2011-02-23 01:44:08 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2011-02-23 01:44:08 ----A---- C:\Windows\system32\winhttp.dll
2011-02-23 01:44:08 ----A---- C:\Windows\system32\setupapi.dll
2011-02-23 01:44:08 ----A---- C:\Windows\system32\QAGENTRT.DLL
2011-02-23 01:44:08 ----A---- C:\Windows\system32\propsys.dll
2011-02-23 01:44:08 ----A---- C:\Windows\system32\netlogon.dll
2011-02-23 01:44:08 ----A---- C:\Windows\system32\msv1_0.dll
2011-02-23 01:44:08 ----A---- C:\Windows\system32\imapi2fs.dll
2011-02-23 01:44:08 ----A---- C:\Windows\system32\d3d11.dll
2011-02-23 01:44:07 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2011-02-23 01:44:07 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2011-02-23 01:44:07 ----A---- C:\Windows\system32\werconcpl.dll
2011-02-23 01:44:07 ----A---- C:\Windows\system32\wbengine.exe
2011-02-23 01:44:07 ----A---- C:\Windows\system32\taskeng.exe
2011-02-23 01:44:07 ----A---- C:\Windows\system32\rpcss.dll
2011-02-23 01:44:07 ----A---- C:\Windows\system32\PushPrinterConnections.exe
2011-02-23 01:44:07 ----A---- C:\Windows\system32\odbc32.dll
2011-02-23 01:44:07 ----A---- C:\Windows\system32\authui.dll
2011-02-23 01:44:06 ----A---- C:\Windows\system32\oleaut32.dll
2011-02-23 01:44:06 ----A---- C:\Windows\system32\msfeeds.dll
2011-02-23 01:44:06 ----A---- C:\Windows\system32\dnsapi.dll
2011-02-23 01:44:02 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2011-02-23 01:44:02 ----A---- C:\Windows\system32\WSDApi.dll
2011-02-23 01:44:02 ----A---- C:\Windows\system32\user32.dll
2011-02-23 01:44:02 ----A---- C:\Windows\system32\drivers\nvstor.sys
2011-02-23 01:44:02 ----A---- C:\Windows\system32\drivers\netio.sys
2011-02-23 01:44:02 ----A---- C:\Windows\system32\dhcpcore.dll
2011-02-23 01:44:01 ----A---- C:\Windows\SYSWOW64\wer.dll
2011-02-23 01:44:01 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2011-02-23 01:44:01 ----A---- C:\Windows\SYSWOW64\certcli.dll
2011-02-23 01:44:01 ----A---- C:\Windows\system32\webio.dll
2011-02-23 01:44:01 ----A---- C:\Windows\system32\umrdp.dll
2011-02-23 01:44:01 ----A---- C:\Windows\system32\tsmf.dll
2011-02-23 01:44:01 ----A---- C:\Windows\system32\scavengeui.dll
2011-02-23 01:44:01 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2011-02-23 01:44:01 ----A---- C:\Windows\system32\LSCSHostPolicy.dll
2011-02-23 01:44:01 ----A---- C:\Windows\system32\localspl.dll
2011-02-23 01:44:01 ----A---- C:\Windows\system32\drivers\tdx.sys
2011-02-23 01:44:01 ----A---- C:\Windows\system32\drivers\netbt.sys
2011-02-23 01:44:01 ----A---- C:\Windows\system32\certmgr.dll
2011-02-23 01:44:00 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2011-02-23 01:44:00 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2011-02-23 01:44:00 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2011-02-23 01:44:00 ----A---- C:\Windows\system32\shlwapi.dll
2011-02-23 01:44:00 ----A---- C:\Windows\system32\rdpshell.exe
2011-02-23 01:44:00 ----A---- C:\Windows\system32\netshell.dll
2011-02-23 01:44:00 ----A---- C:\Windows\system32\ncsi.dll
2011-02-23 01:44:00 ----A---- C:\Windows\system32\msdtctm.dll
2011-02-23 01:44:00 ----A---- C:\Windows\system32\msdrm.dll
2011-02-23 01:44:00 ----A---- C:\Windows\system32\framedynos.dll
2011-02-23 01:43:59 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2011-02-23 01:43:59 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2011-02-23 01:43:59 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2011-02-23 01:43:59 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2011-02-23 01:43:59 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2011-02-23 01:43:59 ----A---- C:\Windows\SYSWOW64\quartz.dll
2011-02-23 01:43:59 ----A---- C:\Windows\SYSWOW64\mstime.dll
2011-02-23 01:43:59 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-02-23 01:43:59 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-02-23 01:43:59 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2011-02-23 01:43:59 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2011-02-23 01:43:59 ----A---- C:\Windows\system32\ws2_32.dll
2011-02-23 01:43:59 ----A---- C:\Windows\system32\wpdshext.dll
2011-02-23 01:43:59 ----A---- C:\Windows\system32\wmpps.dll
2011-02-23 01:43:59 ----A---- C:\Windows\system32\winlogon.exe
2011-02-23 01:43:59 ----A---- C:\Windows\system32\usp10.dll
2011-02-23 01:43:59 ----A---- C:\Windows\system32\umpnpmgr.dll
2011-02-23 01:43:59 ----A---- C:\Windows\system32\Query.dll
2011-02-23 01:43:59 ----A---- C:\Windows\system32\quartz.dll
2011-02-23 01:43:59 ----A---- C:\Windows\system32\QAGENT.DLL
2011-02-23 01:43:59 ----A---- C:\Windows\system32\nlasvc.dll
2011-02-23 01:43:59 ----A---- C:\Windows\system32\netcfgx.dll
2011-02-23 01:43:59 ----A---- C:\Windows\system32\mswsock.dll
2011-02-23 01:43:59 ----A---- C:\Windows\system32\lsm.exe
2011-02-23 01:43:59 ----A---- C:\Windows\system32\dxgi.dll
2011-02-23 01:43:59 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-02-23 01:43:59 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2011-02-23 01:43:59 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2011-02-23 01:43:59 ----A---- C:\Windows\system32\drivers\csc.sys
2011-02-23 01:43:59 ----A---- C:\Windows\system32\drivers\cng.sys
2011-02-23 01:43:59 ----A---- C:\Windows\system32\drivers\amdsata.sys
2011-02-23 01:43:59 ----A---- C:\Windows\system32\d3d10_1core.dll
2011-02-23 01:43:59 ----A---- C:\Windows\system32\comdlg32.dll
2011-02-23 01:43:59 ----A---- C:\Windows\system32\BFE.DLL
2011-02-23 01:43:59 ----A---- C:\Windows\system32\azroles.dll
2011-02-23 01:43:59 ----A---- C:\Windows\system32\appmgr.dll
2011-02-23 01:43:59 ----A---- C:\Windows\system32\apphelp.dll
2011-02-23 01:43:58 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2011-02-23 01:43:58 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2011-02-23 01:43:58 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2011-02-23 01:43:58 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2011-02-23 01:43:58 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2011-02-23 01:43:58 ----A---- C:\Windows\system32\winload.exe
2011-02-23 01:43:58 ----A---- C:\Windows\system32\win32spl.dll
2011-02-23 01:43:58 ----A---- C:\Windows\system32\Vault.dll
2011-02-23 01:43:58 ----A---- C:\Windows\system32\samsrv.dll
2011-02-23 01:43:58 ----A---- C:\Windows\system32\rdpclip.exe
2011-02-23 01:43:58 ----A---- C:\Windows\system32\mssvp.dll
2011-02-23 01:43:58 ----A---- C:\Windows\system32\lpksetup.exe
2011-02-23 01:43:58 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2011-02-23 01:43:58 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-02-23 01:43:58 ----A---- C:\Windows\system32\cscsvc.dll
2011-02-23 01:43:58 ----A---- C:\Windows\system32\cmd.exe
2011-02-23 01:43:57 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2011-02-23 01:43:57 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2011-02-23 01:43:57 ----A---- C:\Windows\SYSWOW64\webio.dll
2011-02-23 01:43:57 ----A---- C:\Windows\SYSWOW64\usp10.dll
2011-02-23 01:43:57 ----A---- C:\Windows\SYSWOW64\upnp.dll
2011-02-23 01:43:57 ----A---- C:\Windows\SYSWOW64\schannel.dll
2011-02-23 01:43:57 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2011-02-23 01:43:57 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2011-02-23 01:43:57 ----A---- C:\Windows\SYSWOW64\Query.dll
2011-02-23 01:43:57 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2011-02-23 01:43:57 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2011-02-23 01:43:57 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2011-02-23 01:43:57 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2011-02-23 01:43:57 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2011-02-23 01:43:57 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2011-02-23 01:43:57 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe
2011-02-23 01:43:57 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2011-02-23 01:43:57 ----A---- C:\Windows\SYSWOW64\gpprefcl.dll
2011-02-23 01:43:57 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2011-02-23 01:43:57 ----A---- C:\Windows\SYSWOW64\authui.dll
2011-02-23 01:43:57 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2011-02-23 01:43:57 ----A---- C:\Windows\system32\wuaueng.dll
2011-02-23 01:43:57 ----A---- C:\Windows\system32\Wldap32.dll
2011-02-23 01:43:57 ----A---- C:\Windows\system32\winsta.dll
2011-02-23 01:43:57 ----A---- C:\Windows\system32\winresume.exe
2011-02-23 01:43:57 ----A---- C:\Windows\system32\WindowsCodecs.dll
2011-02-23 01:43:57 ----A---- C:\Windows\system32\webservices.dll
2011-02-23 01:43:57 ----A---- C:\Windows\system32\WebClnt.dll
2011-02-23 01:43:57 ----A---- C:\Windows\system32\taskcomp.dll
2011-02-23 01:43:57 ----A---- C:\Windows\system32\sxs.dll
2011-02-23 01:43:57 ----A---- C:\Windows\system32\sqlsrv32.dll
2011-02-23 01:43:57 ----A---- C:\Windows\system32\spoolsv.exe
2011-02-23 01:43:57 ----A---- C:\Windows\system32\SessEnv.dll
2011-02-23 01:43:57 ----A---- C:\Windows\system32\rdpendp.dll
2011-02-23 01:43:57 ----A---- C:\Windows\system32\pnidui.dll
2011-02-23 01:43:57 ----A---- C:\Windows\system32\mfds.dll
2011-02-23 01:43:57 ----A---- C:\Windows\system32\mcbuilder.exe
2011-02-23 01:43:57 ----A---- C:\Windows\system32\ipsmsnap.dll
2011-02-23 01:43:57 ----A---- C:\Windows\system32\iepeers.dll
2011-02-23 01:43:57 ----A---- C:\Windows\system32\hgprint.dll
2011-02-23 01:43:57 ----A---- C:\Windows\system32\gdi32.dll
2011-02-23 01:43:57 ----A---- C:\Windows\system32\fveapi.dll
2011-02-23 01:43:57 ----A---- C:\Windows\system32\drivers\volsnap.sys
2011-02-23 01:43:57 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2011-02-23 01:43:57 ----A---- C:\Windows\system32\drivers\storport.sys
2011-02-23 01:43:57 ----A---- C:\Windows\system32\drivers\msrpc.sys
2011-02-23 01:43:57 ----A---- C:\Windows\system32\dot3api.dll
2011-02-23 01:43:57 ----A---- C:\Windows\system32\cscobj.dll
2011-02-23 01:43:56 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2011-02-23 01:43:56 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2011-02-23 01:43:56 ----A---- C:\Windows\SYSWOW64\userenv.dll
2011-02-23 01:43:56 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2011-02-23 01:43:56 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2011-02-23 01:43:56 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2011-02-23 01:43:56 ----A---- C:\Windows\SYSWOW64\cmd.exe
2011-02-23 01:43:56 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2011-02-23 01:43:56 ----A---- C:\Windows\system32\wuapi.dll
2011-02-23 01:43:56 ----A---- C:\Windows\system32\wmpmde.dll
2011-02-23 01:43:56 ----A---- C:\Windows\system32\WMPEncEn.dll
2011-02-23 01:43:56 ----A---- C:\Windows\system32\wmpeffects.dll
2011-02-23 01:43:56 ----A---- C:\Windows\system32\WMNetMgr.dll
2011-02-23 01:43:56 ----A---- C:\Windows\system32\wlanpref.dll
2011-02-23 01:43:56 ----A---- C:\Windows\system32\wintrust.dll
2011-02-23 01:43:56 ----A---- C:\Windows\system32\vpnike.dll
2011-02-23 01:43:56 ----A---- C:\Windows\system32\userenv.dll
2011-02-23 01:43:56 ----A---- C:\Windows\system32\tspubwmi.dll
2011-02-23 01:43:56 ----A---- C:\Windows\system32\tscfgwmi.dll
2011-02-23 01:43:56 ----A---- C:\Windows\system32\SyncCenter.dll
2011-02-23 01:43:56 ----A---- C:\Windows\system32\srvsvc.dll
2011-02-23 01:43:56 ----A---- C:\Windows\system32\sppobjs.dll
2011-02-23 01:43:56 ----A---- C:\Windows\system32\schtasks.exe
2011-02-23 01:43:56 ----A---- C:\Windows\system32\prncache.dll
2011-02-23 01:43:56 ----A---- C:\Windows\system32\photowiz.dll
2011-02-23 01:43:56 ----A---- C:\Windows\system32\mfreadwrite.dll
2011-02-23 01:43:56 ----A---- C:\Windows\system32\mcmde.dll
2011-02-23 01:43:56 ----A---- C:\Windows\system32\IPSECSVC.DLL
2011-02-23 01:43:56 ----A---- C:\Windows\system32\FXSSVC.exe
2011-02-23 01:43:56 ----A---- C:\Windows\system32\framedyn.dll
2011-02-23 01:43:56 ----A---- C:\Windows\system32\evr.dll
2011-02-23 01:43:56 ----A---- C:\Windows\system32\drivers\rdbss.sys
2011-02-23 01:43:56 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2011-02-23 01:43:56 ----A---- C:\Windows\system32\AudioSes.dll
2011-02-23 01:43:56 ----A---- C:\Windows\system32\aepdu.dll
2011-02-23 01:43:55 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2011-02-23 01:43:55 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2011-02-23 01:43:55 ----A---- C:\Windows\SYSWOW64\rdpendp.dll
2011-02-23 01:43:55 ----A---- C:\Windows\SYSWOW64\propsys.dll
2011-02-23 01:43:55 ----A---- C:\Windows\SYSWOW64\mfds.dll
2011-02-23 01:43:55 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2011-02-23 01:43:55 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2011-02-23 01:43:55 ----A---- C:\Windows\system32\WinSATAPI.dll
2011-02-23 01:43:55 ----A---- C:\Windows\system32\vmicsvc.exe
2011-02-23 01:43:55 ----A---- C:\Windows\system32\stobject.dll
2011-02-23 01:43:55 ----A---- C:\Windows\system32\shsvcs.dll
2011-02-23 01:43:55 ----A---- C:\Windows\system32\rdpinit.exe
2011-02-23 01:43:55 ----A---- C:\Windows\system32\netdiagfx.dll
2011-02-23 01:43:55 ----A---- C:\Windows\system32\localsec.dll
2011-02-23 01:43:55 ----A---- C:\Windows\system32\imapi2.dll
2011-02-23 01:43:55 ----A---- C:\Windows\system32\fde.dll
2011-02-23 01:43:55 ----A---- C:\Windows\system32\drivers\vmbus.sys
2011-02-23 01:43:55 ----A---- C:\Windows\system32\drivers\udfs.sys
2011-02-23 01:43:55 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-02-23 01:43:55 ----A---- C:\Windows\system32\credui.dll
2011-02-23 01:43:55 ----A---- C:\Windows\system32\cdd.dll
2011-02-23 01:43:55 ----A---- C:\Windows\system32\bcryptprimitives.dll
2011-02-23 01:43:55 ----A---- C:\Windows\system32\aeinv.dll
2011-02-23 01:43:54 ----A---- C:\Windows\SYSWOW64\user32.dll
2011-02-23 01:43:54 ----A---- C:\Windows\system32\tcpipcfg.dll
2011-02-23 01:43:54 ----A---- C:\Windows\system32\spp.dll
2011-02-23 01:43:54 ----A---- C:\Windows\system32\QSHVHOST.DLL
2011-02-23 01:43:54 ----A---- C:\Windows\system32\netid.dll
2011-02-23 01:43:54 ----A---- C:\Windows\system32\iphlpsvc.dll
2011-02-23 01:43:54 ----A---- C:\Windows\system32\inetpp.dll
2011-02-23 01:43:54 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-02-23 01:43:54 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2011-02-23 01:43:54 ----A---- C:\Windows\system32\davclnt.dll
2011-02-23 01:43:53 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2011-02-23 01:43:53 ----A---- C:\Windows\SYSWOW64\azroles.dll
2011-02-23 01:43:53 ----A---- C:\Windows\SYSWOW64\appmgr.dll
2011-02-23 01:43:53 ----A---- C:\Windows\system32\profsvc.dll
2011-02-23 01:43:53 ----A---- C:\Windows\system32\msinfo32.exe
2011-02-23 01:43:53 ----A---- C:\Windows\system32\gameux.dll
2011-02-23 01:43:53 ----A---- C:\Windows\system32\cscui.dll
2011-02-23 01:43:53 ----A---- C:\Windows\system32\biocpl.dll
2011-02-23 01:43:52 ----A---- C:\Windows\SYSWOW64\themeui.dll
2011-02-23 01:43:52 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2011-02-23 01:43:52 ----A---- C:\Windows\SYSWOW64\spp.dll
2011-02-23 01:43:52 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2011-02-23 01:43:52 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2011-02-23 01:43:52 ----A---- C:\Windows\SYSWOW64\credui.dll
2011-02-23 01:43:52 ----A---- C:\Windows\system32\scansetting.dll
2011-02-23 01:43:52 ----A---- C:\Windows\system32\printui.dll
2011-02-23 01:43:52 ----A---- C:\Windows\system32\pla.dll
2011-02-23 01:43:52 ----A---- C:\Windows\system32\mspbda.dll
2011-02-23 01:43:52 ----A---- C:\Windows\system32\conhost.exe
2011-02-23 01:43:52 ----A---- C:\Windows\splwow64.exe
2011-02-23 01:43:51 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2011-02-23 01:43:51 ----A---- C:\Windows\system32\wusa.exe
2011-02-23 01:43:51 ----A---- C:\Windows\system32\msdri.dll
2011-02-23 01:43:51 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2011-02-23 01:43:51 ----A---- C:\Windows\system32\inetcomm.dll
2011-02-23 01:43:51 ----A---- C:\Windows\system32\aitagent.exe
2011-02-23 01:43:50 ----A---- C:\Windows\system32\wiaservc.dll
2011-02-23 01:43:50 ----A---- C:\Windows\system32\vds.exe
2011-02-23 01:43:49 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2011-02-23 01:43:49 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2011-02-23 01:43:49 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2011-02-23 01:43:49 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2011-02-23 01:43:49 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2011-02-23 01:43:49 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2011-02-23 01:43:49 ----A---- C:\Windows\SYSWOW64\evr.dll
2011-02-23 01:43:49 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2011-02-23 01:43:49 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2011-02-23 01:43:49 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2011-02-23 01:43:49 ----A---- C:\Windows\system32\XpsRasterService.dll
2011-02-23 01:43:49 ----A---- C:\Windows\system32\wisptis.exe
2011-02-23 01:43:49 ----A---- C:\Windows\system32\sppwinob.dll
2011-02-23 01:43:49 ----A---- C:\Windows\system32\rpchttp.dll
2011-02-23 01:43:49 ----A---- C:\Windows\system32\ocsetup.exe
2011-02-23 01:43:49 ----A---- C:\Windows\system32\msi.dll
2011-02-23 01:43:49 ----A---- C:\Windows\system32\mscms.dll
2011-02-23 01:43:49 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2011-02-23 01:43:49 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2011-02-23 01:43:49 ----A---- C:\Windows\system32\drivers\pci.sys
2011-02-23 01:43:49 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2011-02-23 01:43:49 ----A---- C:\Windows\system32\cryptsvc.dll
2011-02-23 01:43:49 ----A---- C:\Windows\system32\AdmTmpl.dll
2011-02-23 01:43:46 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2011-02-23 01:43:46 ----A---- C:\Windows\SYSWOW64\calc.exe
2011-02-23 01:43:46 ----A---- C:\Windows\system32\wpdbusenum.dll
2011-02-23 01:43:46 ----A---- C:\Windows\system32\wcncsvc.dll
2011-02-23 01:43:46 ----A---- C:\Windows\system32\rdpcore.dll
2011-02-23 01:43:46 ----A---- C:\Windows\system32\ocsetapi.dll
2011-02-23 01:43:46 ----A---- C:\Windows\system32\ntshrui.dll
2011-02-23 01:43:46 ----A---- C:\Windows\system32\mprapi.dll
2011-02-23 01:43:46 ----A---- C:\Windows\system32\eapp3hst.dll
2011-02-23 01:43:46 ----A---- C:\Windows\system32\DXP.dll
2011-02-23 01:43:46 ----A---- C:\Windows\system32\drivers\volmgr.sys
2011-02-23 01:43:46 ----A---- C:\Windows\system32\drivers\msdsm.sys
2011-02-23 01:43:46 ----A---- C:\Windows\system32\ci.dll
2011-02-23 01:43:46 ----A---- C:\Windows\system32\cfgmgr32.dll
2011-02-23 01:43:45 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2011-02-23 01:43:45 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2011-02-23 01:43:45 ----A---- C:\Windows\SYSWOW64\sxs.dll
2011-02-23 01:43:45 ----A---- C:\Windows\SYSWOW64\stobject.dll
2011-02-23 01:43:45 ----A---- C:\Windows\SYSWOW64\netshell.dll
2011-02-23 01:43:45 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2011-02-23 01:43:45 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2011-02-23 01:43:45 ----A---- C:\Windows\system32\upnp.dll
2011-02-23 01:43:45 ----A---- C:\Windows\system32\thumbcache.dll
2011-02-23 01:43:45 ----A---- C:\Windows\system32\t2embed.dll
2011-02-23 01:43:45 ----A---- C:\Windows\system32\scecli.dll
2011-02-23 01:43:45 ----A---- C:\Windows\system32\Robocopy.exe
2011-02-23 01:43:45 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2011-02-23 01:43:45 ----A---- C:\Windows\system32\hal.dll
2011-02-23 01:43:45 ----A---- C:\Windows\system32\eapphost.dll
2011-02-23 01:43:45 ----A---- C:\Windows\system32\DxpTaskSync.dll
2011-02-23 01:43:45 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-02-23 01:43:45 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2011-02-23 01:43:45 ----A---- C:\Windows\system32\drivers\HpSAMD.sys
2011-02-23 01:43:45 ----A---- C:\Windows\system32\drivers\fvevol.sys
2011-02-23 01:43:44 ----A---- C:\Windows\SYSWOW64\prncache.dll
2011-02-23 01:43:44 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2011-02-23 01:43:44 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2011-02-23 01:43:44 ----A---- C:\Windows\system32\themeui.dll
2011-02-23 01:43:44 ----A---- C:\Windows\system32\sspicli.dll
2011-02-23 01:43:44 ----A---- C:\Windows\system32\puiobj.dll
2011-02-23 01:43:44 ----A---- C:\Windows\system32\nlaapi.dll
2011-02-23 01:43:44 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2011-02-23 01:43:44 ----A---- C:\Windows\system32\msasn1.dll
2011-02-23 01:43:44 ----A---- C:\Windows\system32\iasrad.dll
2011-02-23 01:43:44 ----A---- C:\Windows\system32\dwmredir.dll
2011-02-23 01:43:44 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys
2011-02-23 01:43:44 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2011-02-23 01:43:43 ----A---- C:\Windows\SYSWOW64\printui.dll
2011-02-23 01:43:43 ----A---- C:\Windows\SYSWOW64\msi.dll
2011-02-23 01:43:43 ----A---- C:\Windows\system32\scrptadm.dll
2011-02-23 01:43:43 ----A---- C:\Windows\system32\onex.dll
2011-02-23 01:43:43 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2011-02-23 01:43:43 ----A---- C:\Windows\system32\drivers\amdxata.sys
2011-02-23 01:43:42 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2011-02-23 01:43:42 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2011-02-23 01:43:42 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2011-02-23 01:43:42 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2011-02-23 01:43:42 ----A---- C:\Windows\SYSWOW64\net1.exe
2011-02-23 01:43:42 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2011-02-23 01:43:42 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2011-02-23 01:43:42 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2011-02-23 01:43:42 ----A---- C:\Windows\system32\wow64.dll
2011-02-23 01:43:42 ----A---- C:\Windows\system32\wlangpui.dll
2011-02-23 01:43:42 ----A---- C:\Windows\system32\wiadefui.dll
2011-02-23 01:43:42 ----A---- C:\Windows\system32\wdc.dll
2011-02-23 01:43:42 ----A---- C:\Windows\system32\VAN.dll
2011-02-23 01:43:42 ----A---- C:\Windows\system32\StructuredQuery.dll
2011-02-23 01:43:42 ----A---- C:\Windows\system32\sdengin2.dll
2011-02-23 01:43:42 ----A---- C:\Windows\system32\scesrv.dll
2011-02-23 01:43:42 ----A---- C:\Windows\system32\rasmans.dll
2011-02-23 01:43:42 ----A---- C:\Windows\system32\netcenter.dll
2011-02-23 01:43:42 ----A---- C:\Windows\system32\msftedit.dll
2011-02-23 01:43:42 ----A---- C:\Windows\system32\iedkcs32.dll
2011-02-23 01:43:42 ----A---- C:\Windows\system32\dskquoui.dll
2011-02-23 01:43:42 ----A---- C:\Windows\system32\drivers\partmgr.sys
2011-02-23 01:43:42 ----A---- C:\Windows\system32\aaclient.dll
2011-02-23 01:43:41 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2011-02-23 01:43:41 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2011-02-23 01:43:41 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2011-02-23 01:43:41 ----A---- C:\Windows\SYSWOW64\webservices.dll
2011-02-23 01:43:41 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2011-02-23 01:43:41 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll
2011-02-23 01:43:41 ----A---- C:\Windows\SYSWOW64\scrptadm.dll
2011-02-23 01:43:41 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2011-02-23 01:43:41 ----A---- C:\Windows\SYSWOW64\pnidui.dll
2011-02-23 01:43:41 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2011-02-23 01:43:41 ----A---- C:\Windows\SYSWOW64\fde.dll
2011-02-23 01:43:41 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2011-02-23 01:43:41 ----A---- C:\Windows\system32\WUDFSvc.dll
2011-02-23 01:43:41 ----A---- C:\Windows\system32\wucltux.dll
2011-02-23 01:43:41 ----A---- C:\Windows\system32\wscapi.dll
2011-02-23 01:43:41 ----A---- C:\Windows\system32\wksprt.exe
2011-02-23 01:43:41 ----A---- C:\Windows\system32\taskhost.exe
2011-02-23 01:43:41 ----A---- C:\Windows\system32\TabSvc.dll
2011-02-23 01:43:41 ----A---- C:\Windows\system32\srchadmin.dll
2011-02-23 01:43:41 ----A---- C:\Windows\system32\SndVol.exe
2011-02-23 01:43:41 ----A---- C:\Windows\system32\setupcl.exe
2011-02-23 01:43:41 ----A---- C:\Windows\system32\samcli.dll
2011-02-23 01:43:41 ----A---- C:\Windows\system32\regapi.dll
2011-02-23 01:43:41 ----A---- C:\Windows\system32\rastls.dll
2011-02-23 01:43:41 ----A---- C:\Windows\system32\QUTIL.DLL
2011-02-23 01:43:41 ----A---- C:\Windows\system32\iasacct.dll
2011-02-23 01:43:41 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2011-02-23 01:43:41 ----A---- C:\Windows\system32\drivers\termdd.sys
2011-02-23 01:43:41 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2011-02-23 01:43:41 ----A---- C:\Windows\system32\drivers\msahci.sys
2011-02-23 01:43:41 ----A---- C:\Windows\system32\consent.exe
2011-02-23 01:43:40 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2011-02-23 01:43:40 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2011-02-23 01:43:40 ----A---- C:\Windows\system32\tapisrv.dll
2011-02-23 01:43:40 ----A---- C:\Windows\system32\drivers\acpi.sys
2011-02-23 01:43:39 ----A---- C:\Windows\SYSWOW64\winsta.dll
2011-02-23 01:43:39 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2011-02-23 01:43:39 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2011-02-23 01:43:39 ----A---- C:\Windows\SYSWOW64\pla.dll
2011-02-23 01:43:39 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2011-02-23 01:43:39 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2011-02-23 01:43:39 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-02-23 01:43:39 ----A---- C:\Windows\SYSWOW64\cscobj.dll
2011-02-23 01:43:39 ----A---- C:\Windows\system32\WFS.exe
2011-02-23 01:43:39 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2011-02-23 01:43:39 ----A---- C:\Windows\system32\netiohlp.dll
2011-02-23 01:43:39 ----A---- C:\Windows\system32\mtxclu.dll
2011-02-23 01:43:39 ----A---- C:\Windows\system32\msconfig.exe
2011-02-23 01:43:39 ----A---- C:\Windows\system32\mimefilt.dll
2011-02-23 01:43:39 ----A---- C:\Windows\system32\lsmproxy.dll
2011-02-23 01:43:39 ----A---- C:\Windows\system32\ListSvc.dll
2011-02-23 01:43:39 ----A---- C:\Windows\system32\hgcpl.dll
2011-02-23 01:43:39 ----A---- C:\Windows\system32\fdeploy.dll
2011-02-23 01:43:39 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2011-02-23 01:43:39 ----A---- C:\Windows\system32\drivers\raspptp.sys
2011-02-23 01:43:39 ----A---- C:\Windows\system32\drivers\ks.sys
2011-02-23 01:43:39 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2011-02-23 01:43:39 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2011-02-23 01:43:39 ----A---- C:\Windows\system32\clusapi.dll
2011-02-23 01:43:39 ----A---- C:\Windows\system32\basecsp.dll
2011-02-23 01:43:39 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2011-02-23 01:43:38 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2011-02-23 01:43:38 ----A---- C:\Windows\SYSWOW64\imapi2.dll
2011-02-23 01:43:38 ----A---- C:\Windows\system32\riched20.dll
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\WMPEncEn.dll
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\winmm.dll
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\srchadmin.dll
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\samcli.dll
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\regapi.dll
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\proquota.exe
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\powercpl.dll
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\onex.dll
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\msutb.dll
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\gameux.dll
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\eapphost.dll

[Davidov]

2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\autochk.exe
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2011-02-23 01:43:37 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\wwanconn.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\wpd_ci.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\wlanui.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\wkssvc.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\vpnikeapi.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\themecpl.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\sppcomapi.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\shsetup.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\sharemediacpl.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\SensorsCpl.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\sdclt.exe
2011-02-23 01:43:37 ----A---- C:\Windows\system32\RpcRtRemote.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\prntvpt.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\powercpl.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\nshipsec.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\netjoin.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\nci.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\Narrator.exe
2011-02-23 01:43:37 ----A---- C:\Windows\system32\mscorier.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\logoncli.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\licmgr10.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\fms.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\Faultrep.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\eudcedit.exe
2011-02-23 01:43:37 ----A---- C:\Windows\system32\drivers\winusb.sys
2011-02-23 01:43:37 ----A---- C:\Windows\system32\drivers\wanarp.sys
2011-02-23 01:43:37 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2011-02-23 01:43:37 ----A---- C:\Windows\system32\drivers\scsiport.sys
2011-02-23 01:43:37 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2011-02-23 01:43:37 ----A---- C:\Windows\system32\drivers\bthport.sys
2011-02-23 01:43:37 ----A---- C:\Windows\system32\dnscmmc.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\comctl32.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\cabview.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\bcdsrv.dll
2011-02-23 01:43:37 ----A---- C:\Windows\system32\autochk.exe
2011-02-23 01:43:37 ----A---- C:\Windows\system32\autofmt.exe
2011-02-23 01:43:37 ----A---- C:\Windows\system32\autoconv.exe
2011-02-23 01:43:37 ----A---- C:\Windows\system32\audiodg.exe
2011-02-23 01:43:36 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL
2011-02-23 01:43:36 ----A---- C:\Windows\SYSWOW64\netid.dll
2011-02-23 01:43:36 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2011-02-23 01:43:36 ----A---- C:\Windows\system32\rdpsign.exe
2011-02-23 01:43:36 ----A---- C:\Windows\system32\qedit.dll
2011-02-23 01:43:36 ----A---- C:\Windows\system32\mprddm.dll
2011-02-23 01:43:36 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-02-23 01:43:36 ----A---- C:\Windows\system32\fontext.dll
2011-02-23 01:43:36 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2011-02-23 01:43:36 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2011-02-23 01:43:36 ----A---- C:\Windows\system32\dps.dll
2011-02-23 01:43:36 ----A---- C:\Windows\system32\Display.dll
2011-02-23 01:43:36 ----A---- C:\Windows\system32\AxInstSv.dll
2011-02-23 01:43:35 ----A---- C:\Windows\system32\drivers\hidclass.sys
2011-02-23 01:43:35 ----A---- C:\Windows\system32\credssp.dll
2011-02-23 01:43:35 ----A---- C:\Windows\system32\batmeter.dll
2011-02-23 01:43:34 ----A---- C:\Windows\SYSWOW64\wdc.dll
2011-02-23 01:43:34 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2011-02-23 01:43:34 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2011-02-23 01:43:34 ----A---- C:\Windows\system32\wmpsrcwp.dll
2011-02-23 01:43:34 ----A---- C:\Windows\system32\mblctr.exe
2011-02-23 01:43:33 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2011-02-23 01:43:33 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2011-02-23 01:43:33 ----A---- C:\Windows\SYSWOW64\Vault.dll
2011-02-23 01:43:33 ----A---- C:\Windows\SYSWOW64\untfs.dll
2011-02-23 01:43:33 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll
2011-02-23 01:43:33 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2011-02-23 01:43:33 ----A---- C:\Windows\SYSWOW64\rastls.dll
2011-02-23 01:43:33 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2011-02-23 01:43:33 ----A---- C:\Windows\SYSWOW64\nci.dll
2011-02-23 01:43:33 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-02-23 01:43:33 ----A---- C:\Windows\system32\usercpl.dll
2011-02-23 01:43:33 ----A---- C:\Windows\system32\rtutils.dll
2011-02-23 01:43:33 ----A---- C:\Windows\system32\DiagCpl.dll
2011-02-23 01:43:33 ----A---- C:\Windows\system32\bootres.dll
2011-02-23 01:43:32 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2011-02-23 01:43:32 ----A---- C:\Windows\SYSWOW64\userinit.exe
2011-02-23 01:43:32 ----A---- C:\Windows\SYSWOW64\taskmgr.exe
2011-02-23 01:43:32 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2011-02-23 01:43:32 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2011-02-23 01:43:32 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2011-02-23 01:43:32 ----A---- C:\Windows\SYSWOW64\DxpTaskSync.dll
2011-02-23 01:43:32 ----A---- C:\Windows\SYSWOW64\Display.dll
2011-02-23 01:43:32 ----A---- C:\Windows\system32\wpccpl.dll
2011-02-23 01:43:32 ----A---- C:\Windows\system32\taskmgr.exe
2011-02-23 01:43:32 ----A---- C:\Windows\system32\sppsvc.exe
2011-02-23 01:43:32 ----A---- C:\Windows\system32\SndVolSSO.dll
2011-02-23 01:43:32 ----A---- C:\Windows\system32\shdocvw.dll
2011-02-23 01:43:32 ----A---- C:\Windows\system32\rasppp.dll
2011-02-23 01:43:32 ----A---- C:\Windows\system32\provsvc.dll
2011-02-23 01:43:32 ----A---- C:\Windows\system32\prnfldr.dll
2011-02-23 01:43:32 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2011-02-23 01:43:32 ----A---- C:\Windows\system32\hbaapi.dll
2011-02-23 01:43:32 ----A---- C:\Windows\system32\dxdiagn.dll
2011-02-23 01:43:32 ----A---- C:\Windows\system32\drivers\winhv.sys
2011-02-23 01:43:32 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2011-02-23 01:43:32 ----A---- C:\Windows\system32\dot3cfg.dll
2011-02-23 01:43:31 ----A---- C:\Windows\SYSWOW64\termmgr.dll
2011-02-23 01:43:30 ----A---- C:\Windows\SYSWOW64\eudcedit.exe
2011-02-23 01:43:30 ----A---- C:\Windows\system32\proquota.exe
2011-02-23 01:43:30 ----A---- C:\Windows\system32\pdh.dll
2011-02-23 01:43:30 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2011-02-23 01:43:29 ----A---- C:\Windows\SYSWOW64\wiadefui.dll
2011-02-23 01:43:29 ----A---- C:\Windows\SYSWOW64\themecpl.dll
2011-02-23 01:43:29 ----A---- C:\Windows\SYSWOW64\sppcomapi.dll
2011-02-23 01:43:29 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2011-02-23 01:43:29 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll
2011-02-23 01:43:29 ----A---- C:\Windows\SYSWOW64\scecli.dll
2011-02-23 01:43:29 ----A---- C:\Windows\SYSWOW64\rasppp.dll
2011-02-23 01:43:29 ----A---- C:\Windows\SYSWOW64\logoncli.dll
2011-02-23 01:43:29 ----A---- C:\Windows\SYSWOW64\hgcpl.dll
2011-02-23 01:43:29 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2011-02-23 01:43:29 ----A---- C:\Windows\SYSWOW64\FirewallControlPanel.dll
2011-02-23 01:43:29 ----A---- C:\Windows\SYSWOW64\dnscmmc.dll
2011-02-23 01:43:29 ----A---- C:\Windows\SYSWOW64\cabview.dll
2011-02-23 01:43:29 ----A---- C:\Windows\system32\zipfldr.dll
2011-02-23 01:43:29 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2011-02-23 01:43:29 ----A---- C:\Windows\system32\webcheck.dll
2011-02-23 01:43:29 ----A---- C:\Windows\system32\userinit.exe
2011-02-23 01:43:29 ----A---- C:\Windows\system32\untfs.dll
2011-02-23 01:43:29 ----A---- C:\Windows\system32\sud.dll
2011-02-23 01:43:29 ----A---- C:\Windows\system32\slui.exe
2011-02-23 01:43:29 ----A---- C:\Windows\system32\rdpcorekmts.dll
2011-02-23 01:43:29 ----A---- C:\Windows\system32\msieftp.dll
2011-02-23 01:43:29 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2011-02-23 01:43:29 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2011-02-23 01:43:29 ----A---- C:\Windows\system32\drivers\storvsc.sys
2011-02-23 01:43:29 ----A---- C:\Windows\system32\drivers\ataport.sys
2011-02-23 01:43:29 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2011-02-23 01:43:29 ----A---- C:\Windows\system32\accessibilitycpl.dll
2011-02-23 01:43:28 ----A---- C:\Windows\SYSWOW64\wlanui.dll
2011-02-23 01:43:28 ----A---- C:\Windows\SYSWOW64\w32tm.exe
2011-02-23 01:43:28 ----A---- C:\Windows\SYSWOW64\VAN.dll
2011-02-23 01:43:28 ----A---- C:\Windows\SYSWOW64\usercpl.dll
2011-02-23 01:43:28 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2011-02-23 01:43:28 ----A---- C:\Windows\SYSWOW64\spwizeng.dll
2011-02-23 01:43:28 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll
2011-02-23 01:43:28 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2011-02-23 01:43:28 ----A---- C:\Windows\SYSWOW64\qedit.dll
2011-02-23 01:43:28 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2011-02-23 01:43:28 ----A---- C:\Windows\SYSWOW64\prntvpt.dll
2011-02-23 01:43:28 ----A---- C:\Windows\SYSWOW64\PerfCenterCPL.dll
2011-02-23 01:43:28 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2011-02-23 01:43:28 ----A---- C:\Windows\SYSWOW64\mscories.dll
2011-02-23 01:43:28 ----A---- C:\Windows\SYSWOW64\mscms.dll
2011-02-23 01:43:28 ----A---- C:\Windows\SYSWOW64\mprddm.dll
2011-02-23 01:43:28 ----A---- C:\Windows\SYSWOW64\localsec.dll
2011-02-23 01:43:28 ----A---- C:\Windows\SYSWOW64\iasacct.dll
2011-02-23 01:43:28 ----A---- C:\Windows\SYSWOW64\fontext.dll
2011-02-23 01:43:28 ----A---- C:\Windows\SYSWOW64\batmeter.dll
2011-02-23 01:43:28 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2011-02-23 01:43:28 ----A---- C:\Windows\SYSWOW64\accessibilitycpl.dll
2011-02-23 01:43:28 ----A---- C:\Windows\system32\uxlib.dll
2011-02-23 01:43:28 ----A---- C:\Windows\system32\twext.dll
2011-02-23 01:43:28 ----A---- C:\Windows\system32\taskbarcpl.dll
2011-02-23 01:43:28 ----A---- C:\Windows\system32\srcore.dll
2011-02-23 01:43:28 ----A---- C:\Windows\system32\sisbkup.dll
2011-02-23 01:43:28 ----A---- C:\Windows\system32\recovery.dll
2011-02-23 01:43:28 ----A---- C:\Windows\system32\rdpwsx.dll
2011-02-23 01:43:28 ----A---- C:\Windows\system32\qdvd.dll
2011-02-23 01:43:28 ----A---- C:\Windows\system32\OobeFldr.dll
2011-02-23 01:43:28 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2011-02-23 01:43:28 ----A---- C:\Windows\system32\networkmap.dll
2011-02-23 01:43:28 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2011-02-23 01:43:28 ----A---- C:\Windows\system32\isoburn.exe
2011-02-23 01:43:28 ----A---- C:\Windows\system32\dsuiext.dll
2011-02-23 01:43:28 ----A---- C:\Windows\system32\drivers\usbhub.sys
2011-02-23 01:43:28 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2011-02-23 01:43:28 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2011-02-23 01:43:28 ----A---- C:\Windows\system32\dot3svc.dll
2011-02-23 01:43:28 ----A---- C:\Windows\system32\DeviceCenter.dll
2011-02-23 01:43:28 ----A---- C:\Windows\system32\cryptui.dll
2011-02-23 01:43:28 ----A---- C:\Windows\system32\cca.dll
2011-02-23 01:43:28 ----A---- C:\Windows\system32\bcdedit.exe
2011-02-23 01:43:28 ----A---- C:\Windows\system32\azroleui.dll
2011-02-23 01:43:28 ----A---- C:\Windows\system32\asycfilt.dll
2011-02-23 01:43:28 ----A---- C:\Windows\system32\ActionCenter.dll
2011-02-23 01:43:27 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2011-02-23 01:43:27 ----A---- C:\Windows\SYSWOW64\wusa.exe
2011-02-23 01:43:27 ----A---- C:\Windows\SYSWOW64\sud.dll
2011-02-23 01:43:27 ----A---- C:\Windows\SYSWOW64\prnfldr.dll
2011-02-23 01:43:27 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2011-02-23 01:43:27 ----A---- C:\Windows\SYSWOW64\OnLineIDCpl.dll
2011-02-23 01:43:27 ----A---- C:\Windows\SYSWOW64\networkmap.dll
2011-02-23 01:43:27 ----A---- C:\Windows\SYSWOW64\netjoin.dll
2011-02-23 01:43:27 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2011-02-23 01:43:27 ----A---- C:\Windows\SYSWOW64\MSAC3ENC.DLL
2011-02-23 01:43:27 ----A---- C:\Windows\SYSWOW64\MediaMetadataHandler.dll
2011-02-23 01:43:27 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2011-02-23 01:43:27 ----A---- C:\Windows\SYSWOW64\fdeploy.dll
2011-02-23 01:43:27 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2011-02-23 01:43:27 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2011-02-23 01:43:27 ----A---- C:\Windows\SYSWOW64\credssp.dll
2011-02-23 01:43:27 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2011-02-23 01:43:27 ----A---- C:\Windows\SYSWOW64\adsldp.dll
2011-02-23 01:43:27 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\wlanmsm.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\vdsutil.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\tzutil.exe
2011-02-23 01:43:27 ----A---- C:\Windows\system32\termmgr.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\systemcpl.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\sysclass.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\syncui.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\sspisrv.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\spwizeng.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\shwebsvc.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\sdrsvc.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\sdcpl.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\recdisc.exe
2011-02-23 01:43:27 ----A---- C:\Windows\system32\netplwiz.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\ncryptui.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\msvidc32.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\msscp.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\mshtmled.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\MFPlay.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\httpapi.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\fvecpl.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\efscore.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\drivers\rdpdr.sys
2011-02-23 01:43:27 ----A---- C:\Windows\system32\drivers\mpio.sys
2011-02-23 01:43:27 ----A---- C:\Windows\system32\certcli.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\autoplay.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\appinfo.dll
2011-02-23 01:43:27 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2011-02-23 01:43:26 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2011-02-23 01:43:26 ----A---- C:\Windows\SYSWOW64\syncui.dll
2011-02-23 01:43:26 ----A---- C:\Windows\SYSWOW64\sisbkup.dll
2011-02-23 01:43:26 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll
2011-02-23 01:43:26 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2011-02-23 01:43:26 ----A---- C:\Windows\SYSWOW64\ntlanman.dll
2011-02-23 01:43:26 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll
2011-02-23 01:43:26 ----A---- C:\Windows\SYSWOW64\ifsutil.dll
2011-02-23 01:43:26 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2011-02-23 01:43:26 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2011-02-23 01:43:26 ----A---- C:\Windows\SYSWOW64\iasrad.dll
2011-02-23 01:43:26 ----A---- C:\Windows\SYSWOW64\ftp.exe
2011-02-23 01:43:26 ----A---- C:\Windows\SYSWOW64\efscore.dll
2011-02-23 01:43:26 ----A---- C:\Windows\SYSWOW64\dskquoui.dll
2011-02-23 01:43:26 ----A---- C:\Windows\SYSWOW64\dot3cfg.dll
2011-02-23 01:43:26 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll
2011-02-23 01:43:26 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll
2011-02-23 01:43:26 ----A---- C:\Windows\SYSWOW64\autoplay.dll
2011-02-23 01:43:26 ----A---- C:\Windows\SYSWOW64\ActionCenterCPL.dll
2011-02-23 01:43:26 ----A---- C:\Windows\system32\wwanprotdim.dll
2011-02-23 01:43:26 ----A---- C:\Windows\system32\wmdrmsdk.dll
2011-02-23 01:43:26 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2011-02-23 01:43:26 ----A---- C:\Windows\system32\tsgqec.dll
2011-02-23 01:43:26 ----A---- C:\Windows\system32\srvcli.dll
2011-02-23 01:43:26 ----A---- C:\Windows\system32\sqlcese30.dll
2011-02-23 01:43:26 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2011-02-23 01:43:26 ----A---- C:\Windows\system32\slwga.dll
2011-02-23 01:43:26 ----A---- C:\Windows\system32\sethc.exe
2011-02-23 01:43:26 ----A---- C:\Windows\system32\secur32.dll
2011-02-23 01:43:26 ----A---- C:\Windows\system32\rstrui.exe
2011-02-23 01:43:26 ----A---- C:\Windows\system32\ReAgent.dll
2011-02-23 01:43:26 ----A---- C:\Windows\system32\rdpd3d.dll
2011-02-23 01:43:26 ----A---- C:\Windows\system32\odbctrac.dll
2011-02-23 01:43:26 ----A---- C:\Windows\system32\odbccp32.dll
2011-02-23 01:43:26 ----A---- C:\Windows\system32\ntlanman.dll
2011-02-23 01:43:26 ----A---- C:\Windows\system32\iyuv_32.dll
2011-02-23 01:43:26 ----A---- C:\Windows\system32\iTVData.dll
2011-02-23 01:43:26 ----A---- C:\Windows\system32\iprtrmgr.dll
2011-02-23 01:43:26 ----A---- C:\Windows\system32\drmmgrtn.dll
2011-02-23 01:43:26 ----A---- C:\Windows\system32\drivers\vmstorfl.sys
2011-02-23 01:43:26 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2011-02-23 01:43:25 ----A---- C:\Windows\SYSWOW64\wmpsrcwp.dll
2011-02-23 01:43:25 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2011-02-23 01:43:25 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2011-02-23 01:43:25 ----A---- C:\Windows\SYSWOW64\sethc.exe
2011-02-23 01:43:25 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2011-02-23 01:43:25 ----A---- C:\Windows\SYSWOW64\riched20.dll
2011-02-23 01:43:25 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll
2011-02-23 01:43:25 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2011-02-23 01:43:25 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2011-02-23 01:43:25 ----A---- C:\Windows\SYSWOW64\nshipsec.dll
2011-02-23 01:43:25 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2011-02-23 01:43:25 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2011-02-23 01:43:25 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL
2011-02-23 01:43:25 ----A---- C:\Windows\SYSWOW64\migisol.dll
2011-02-23 01:43:25 ----A---- C:\Windows\SYSWOW64\isoburn.exe
2011-02-23 01:43:25 ----A---- C:\Windows\SYSWOW64\httpapi.dll
2011-02-23 01:43:25 ----A---- C:\Windows\SYSWOW64\fms.dll
2011-02-23 01:43:25 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2011-02-23 01:43:25 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2011-02-23 01:43:25 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2011-02-23 01:43:25 ----A---- C:\Windows\SYSWOW64\activeds.dll
2011-02-23 01:43:25 ----A---- C:\Windows\system32\wkscli.dll
2011-02-23 01:43:25 ----A---- C:\Windows\system32\wavemsp.dll
2011-02-23 01:43:25 ----A---- C:\Windows\system32\TSpkg.dll
2011-02-23 01:43:25 ----A---- C:\Windows\system32\srrstr.dll
2011-02-23 01:43:25 ----A---- C:\Windows\system32\sppnp.dll
2011-02-23 01:43:25 ----A---- C:\Windows\system32\remotepg.dll
2011-02-23 01:43:25 ----A---- C:\Windows\system32\PresentationSettings.exe
2011-02-23 01:43:25 ----A---- C:\Windows\system32\ntprint.dll
2011-02-23 01:43:25 ----A---- C:\Windows\system32\nslookup.exe
2011-02-23 01:43:25 ----A---- C:\Windows\system32\networkexplorer.dll
2011-02-23 01:43:25 ----A---- C:\Windows\system32\NAPHLPR.DLL
2011-02-23 01:43:25 ----A---- C:\Windows\system32\msiexec.exe
2011-02-23 01:43:25 ----A---- C:\Windows\system32\fsquirt.exe
2011-02-23 01:43:25 ----A---- C:\Windows\system32\dfrgui.exe
2011-02-23 01:43:25 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2011-02-23 01:43:25 ----A---- C:\Windows\system32\certprop.dll
2011-02-23 01:43:25 ----A---- C:\Windows\system32\cdosys.dll
2011-02-23 01:43:25 ----A---- C:\Windows\system32\cabinet.dll
2011-02-23 01:43:25 ----A---- C:\Windows\system32\bcdboot.exe
2011-02-23 01:43:25 ----A---- C:\Windows\system32\acppage.dll
2011-02-23 01:43:24 ----A---- C:\Windows\SYSWOW64\wvc.dll
2011-02-23 01:43:24 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2011-02-23 01:43:24 ----A---- C:\Windows\SYSWOW64\wtsapi32.dll
2011-02-23 01:43:24 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2011-02-23 01:43:24 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2011-02-23 01:43:24 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2011-02-23 01:43:24 ----A---- C:\Windows\SYSWOW64\wavemsp.dll
2011-02-23 01:43:24 ----A---- C:\Windows\SYSWOW64\tzutil.exe
2011-02-23 01:43:24 ----A---- C:\Windows\SYSWOW64\twext.dll
2011-02-23 01:43:24 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2011-02-23 01:43:24 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2011-02-23 01:43:24 ----A---- C:\Windows\SYSWOW64\provsvc.dll
2011-02-23 01:43:24 ----A---- C:\Windows\SYSWOW64\ocsetup.exe
2011-02-23 01:43:24 ----A---- C:\Windows\SYSWOW64\mstask.dll
2011-02-23 01:43:24 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2011-02-23 01:43:24 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2011-02-23 01:43:24 ----A---- C:\Windows\SYSWOW64\dsuiext.dll
2011-02-23 01:43:24 ----A---- C:\Windows\SYSWOW64\dot3ui.dll
2011-02-23 01:43:24 ----A---- C:\Windows\SYSWOW64\dfrgui.exe
2011-02-23 01:43:24 ----A---- C:\Windows\SYSWOW64\AdmTmpl.dll
2011-02-23 01:43:24 ----A---- C:\Windows\system32\wvc.dll
2011-02-23 01:43:24 ----A---- C:\Windows\system32\wuwebv.dll
2011-02-23 01:43:24 ----A---- C:\Windows\system32\wsqmcons.exe
2011-02-23 01:43:24 ----A---- C:\Windows\system32\wsnmp32.dll
2011-02-23 01:43:24 ----A---- C:\Windows\system32\wmpdxm.dll
2011-02-23 01:43:24 ----A---- C:\Windows\system32\wmdrmdev.dll
2011-02-23 01:43:24 ----A---- C:\Windows\system32\WinSCard.dll
2011-02-23 01:43:24 ----A---- C:\Windows\system32\WerFaultSecure.exe
2011-02-23 01:43:24 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2011-02-23 01:43:24 ----A---- C:\Windows\system32\OpcServices.dll
2011-02-23 01:43:24 ----A---- C:\Windows\system32\net1.exe
2011-02-23 01:43:24 ----A---- C:\Windows\system32\msyuv.dll
2011-02-23 01:43:24 ----A---- C:\Windows\system32\mfps.dll
2011-02-23 01:43:24 ----A---- C:\Windows\system32\mapistub.dll
2011-02-23 01:43:24 ----A---- C:\Windows\system32\mapi32.dll
2011-02-23 01:43:24 ----A---- C:\Windows\system32\ftp.exe
2011-02-23 01:43:24 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2011-02-23 01:43:24 ----A---- C:\Windows\system32\blackbox.dll
2011-02-23 01:43:23 ----A---- C:\Windows\twain_32.dll
2011-02-23 01:43:23 ----A---- C:\Windows\SYSWOW64\setupugc.exe
2011-02-23 01:43:23 ----A---- C:\Windows\SYSWOW64\qcap.dll
2011-02-23 01:43:23 ----A---- C:\Windows\system32\WUDFPlatform.dll
2011-02-23 01:43:23 ----A---- C:\Windows\system32\unimdmat.dll
2011-02-23 01:43:23 ----A---- C:\Windows\system32\msrle32.dll
2011-02-23 01:43:22 ----A---- C:\Windows\SYSWOW64\WPDShServiceObj.dll
2011-02-23 01:43:22 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2011-02-23 01:43:22 ----A---- C:\Windows\SYSWOW64\wimserv.exe
2011-02-23 01:43:22 ----A---- C:\Windows\SYSWOW64\uxlib.dll
2011-02-23 01:43:22 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2011-02-23 01:43:22 ----A---- C:\Windows\SYSWOW64\slwga.dll
2011-02-23 01:43:22 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2011-02-23 01:43:22 ----A---- C:\Windows\SYSWOW64\rdpencom.dll
2011-02-23 01:43:22 ----A---- C:\Windows\SYSWOW64\qasf.dll
2011-02-23 01:43:22 ----A---- C:\Windows\SYSWOW64\occache.dll
2011-02-23 01:43:22 ----A---- C:\Windows\SYSWOW64\nslookup.exe
2011-02-23 01:43:22 ----A---- C:\Windows\SYSWOW64\msvfw32.dll
2011-02-23 01:43:22 ----A---- C:\Windows\SYSWOW64\msscp.dll
2011-02-23 01:43:22 ----A---- C:\Windows\SYSWOW64\msrating.dll
2011-02-23 01:43:22 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-02-23 01:43:22 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2011-02-23 01:43:22 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2011-02-23 01:43:22 ----A---- C:\Windows\SYSWOW64\diskraid.exe
2011-02-23 01:43:22 ----A---- C:\Windows\SYSWOW64\DevicePairingFolder.dll
2011-02-23 01:43:22 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2011-02-23 01:43:22 ----A---- C:\Windows\SYSWOW64\audiodev.dll
2011-02-23 01:43:22 ----A---- C:\Windows\SYSWOW64\acppage.dll
2011-02-23 01:43:22 ----A---- C:\Windows\system32\wmpshell.dll
2011-02-23 01:43:22 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2011-02-23 01:43:22 ----A---- C:\Windows\system32\umb.dll
2011-02-23 01:43:22 ----A---- C:\Windows\system32\tsbyuv.dll
2011-02-23 01:43:22 ----A---- C:\Windows\system32\tlscsp.dll
2011-02-23 01:43:22 ----A---- C:\Windows\system32\seclogon.dll
2011-02-23 01:43:22 ----A---- C:\Windows\system32\rdpencom.dll
2011-02-23 01:43:22 ----A---- C:\Windows\system32\qasf.dll
2011-02-23 01:43:22 ----A---- C:\Windows\system32\perfmon.exe
2011-02-23 01:43:22 ----A---- C:\Windows\system32\netutils.dll
2011-02-23 01:43:22 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2011-02-23 01:43:22 ----A---- C:\Windows\system32\muifontsetup.dll
2011-02-23 01:43:22 ----A---- C:\Windows\system32\iscsium.dll
2011-02-23 01:43:22 ----A---- C:\Windows\system32\inseng.dll
2011-02-23 01:43:22 ----A---- C:\Windows\system32\ifsutil.dll
2011-02-23 01:43:22 ----A---- C:\Windows\system32\drivers\umbus.sys
2011-02-23 01:43:22 ----A---- C:\Windows\system32\diskraid.exe
2011-02-23 01:43:22 ----A---- C:\Windows\system32\dbghelp.dll
2011-02-23 01:43:22 ----A---- C:\Windows\system32\d3d10level9.dll
2011-02-23 01:43:22 ----A---- C:\Windows\system32\AzSqlExt.dll
2011-02-23 01:43:22 ----A---- C:\Windows\system32\ActionQueue.dll
2011-02-23 01:43:21 ----A---- C:\Windows\SYSWOW64\wpdwcn.dll
2011-02-23 01:43:21 ----A---- C:\Windows\SYSWOW64\wmpdxm.dll
2011-02-23 01:43:21 ----A---- C:\Windows\SYSWOW64\vpnikeapi.dll
2011-02-23 01:43:21 ----A---- C:\Windows\SYSWOW64\vdsbas.dll
2011-02-23 01:43:21 ----A---- C:\Windows\SYSWOW64\UserAccountControlSettings.dll
2011-02-23 01:43:21 ----A---- C:\Windows\SYSWOW64\runonce.exe
2011-02-23 01:43:21 ----A---- C:\Windows\SYSWOW64\remotepg.dll
2011-02-23 01:43:21 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2011-02-23 01:43:21 ----A---- C:\Windows\SYSWOW64\raschap.dll
2011-02-23 01:43:21 ----A---- C:\Windows\SYSWOW64\QUTIL.DLL
2011-02-23 01:43:21 ----A---- C:\Windows\SYSWOW64\perfmon.exe
2011-02-23 01:43:21 ----A---- C:\Windows\SYSWOW64\onexui.dll
2011-02-23 01:43:21 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2011-02-23 01:43:21 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2011-02-23 01:43:21 ----A---- C:\Windows\SYSWOW64\ocsetapi.dll
2011-02-23 01:43:21 ----A---- C:\Windows\SYSWOW64\networkexplorer.dll
2011-02-23 01:43:21 ----A---- C:\Windows\SYSWOW64\NAPCRYPT.DLL
2011-02-23 01:43:21 ----A---- C:\Windows\SYSWOW64\logagent.exe
2011-02-23 01:43:21 ----A---- C:\Windows\SYSWOW64\iTVData.dll
2011-02-23 01:43:21 ----A---- C:\Windows\SYSWOW64\inseng.dll
2011-02-23 01:43:21 ----A---- C:\Windows\SYSWOW64\input.dll
2011-02-23 01:43:21 ----A---- C:\Windows\SYSWOW64\dxdiagn.dll
2011-02-23 01:43:21 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2011-02-23 01:43:21 ----A---- C:\Windows\system32\wpdwcn.dll
2011-02-23 01:43:21 ----A---- C:\Windows\system32\WMVSDECD.DLL
2011-02-23 01:43:21 ----A---- C:\Windows\system32\WMADMOD.DLL
2011-02-23 01:43:21 ----A---- C:\Windows\system32\wiavideo.dll
2011-02-23 01:43:21 ----A---- C:\Windows\system32\vdsbas.dll
2011-02-23 01:43:21 ----A---- C:\Windows\system32\syssetup.dll
2011-02-23 01:43:21 ----A---- C:\Windows\system32\runonce.exe
2011-02-23 01:43:21 ----A---- C:\Windows\system32\raschap.dll
2011-02-23 01:43:21 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2011-02-23 01:43:21 ----A---- C:\Windows\system32\nltest.exe
2011-02-23 01:43:21 ----A---- C:\Windows\system32\mstask.dll
2011-02-23 01:43:21 ----A---- C:\Windows\system32\MdSched.exe
2011-02-23 01:43:21 ----A---- C:\Windows\system32\Mcx2Svc.dll
2011-02-23 01:43:21 ----A---- C:\Windows\system32\FXSAPI.dll
2011-02-23 01:43:21 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2011-02-23 01:43:21 ----A---- C:\Windows\system32\drivers\rmcast.sys
2011-02-23 01:43:21 ----A---- C:\Windows\system32\browser.dll
2011-02-23 01:43:21 ----A---- C:\Windows\system32\bitsadmin.exe
2011-02-23 01:43:21 ----A---- C:\Windows\bfsvc.exe
2011-02-23 01:43:20 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2011-02-23 01:43:20 ----A---- C:\Windows\SYSWOW64\wmpshell.dll
2011-02-23 01:43:20 ----A---- C:\Windows\SYSWOW64\wmdrmdev.dll
2011-02-23 01:43:20 ----A---- C:\Windows\SYSWOW64\unimdmat.dll
2011-02-23 01:43:20 ----A---- C:\Windows\SYSWOW64\sqlcese30.dll
2011-02-23 01:43:20 ----A---- C:\Windows\SYSWOW64\shacct.dll
2011-02-23 01:43:20 ----A---- C:\Windows\SYSWOW64\rdpd3d.dll
2011-02-23 01:43:20 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2011-02-23 01:43:20 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2011-02-23 01:43:20 ----A---- C:\Windows\SYSWOW64\mprapi.dll
2011-02-23 01:43:20 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2011-02-23 01:43:20 ----A---- C:\Windows\SYSWOW64\lsmproxy.dll
2011-02-23 01:43:20 ----A---- C:\Windows\SYSWOW64\iscsium.dll
2011-02-23 01:43:20 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2011-02-23 01:43:20 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2011-02-23 01:43:20 ----A---- C:\Windows\SYSWOW64\bitsadmin.exe
2011-02-23 01:43:20 ----A---- C:\Windows\system32\wudriver.dll
2011-02-23 01:43:20 ----A---- C:\Windows\system32\WPDSp.dll
2011-02-23 01:43:20 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2011-02-23 01:43:20 ----A---- C:\Windows\system32\wmdrmnet.dll
2011-02-23 01:43:20 ----A---- C:\Windows\system32\vss_ps.dll
2011-02-23 01:43:20 ----A---- C:\Windows\system32\vmictimeprovider.dll
2011-02-23 01:43:20 ----A---- C:\Windows\system32\tabcal.exe
2011-02-23 01:43:20 ----A---- C:\Windows\system32\shacct.dll
2011-02-23 01:43:20 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2011-02-23 01:43:20 ----A---- C:\Windows\system32\secproc_ssp.dll
2011-02-23 01:43:20 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2011-02-23 01:43:20 ----A---- C:\Windows\system32\qdv.dll
2011-02-23 01:43:20 ----A---- C:\Windows\system32\qcap.dll
2011-02-23 01:43:20 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2011-02-23 01:43:20 ----A---- C:\Windows\system32\mssphtb.dll
2011-02-23 01:43:20 ----A---- C:\Windows\system32\msnetobj.dll
2011-02-23 01:43:20 ----A---- C:\Windows\system32\logman.exe
2011-02-23 01:43:20 ----A---- C:\Windows\system32\drivers\USBAUDIO.sys
2011-02-23 01:43:20 ----A---- C:\Windows\system32\CscMig.dll
2011-02-23 01:43:20 ----A---- C:\Windows\system32\cscapi.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\wsnmp32.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\WPDSp.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\wmdrmnet.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\wkscli.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\wiavideo.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\vfwwdm32.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\utildll.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\takeown.exe
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\srvcli.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\sqmapi.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\sppinst.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\spbcd.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\setupcln.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\relog.exe
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\qdv.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\QCLIPROV.DLL
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\PortableDeviceSyncProvider.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\PortableDeviceStatus.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\pdhui.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\pdh.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\OpcServices.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\olethk32.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\netiougc.exe
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\ncryptui.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\mydocs.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\MuiUnattend.exe
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\mapistub.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\mapi32.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\logman.exe
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\iscsicli.exe
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\iasrecst.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\fphc.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\EhStorAPI.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\dot3msm.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\cmstp.exe
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\cca.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\AzSqlExt.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2011-02-23 01:43:19 ----A---- C:\Windows\SYSWOW64\amstream.dll
2011-02-23 01:43:19 ----A---- C:\Windows\system32\WUDFx.dll
2011-02-23 01:43:19 ----A---- C:\Windows\system32\WUDFHost.exe
2011-02-23 01:43:19 ----A---- C:\Windows\system32\wuauclt.exe
2011-02-23 01:43:19 ----A---- C:\Windows\system32\WMPhoto.dll
2011-02-23 01:43:19 ----A---- C:\Windows\system32\WavDest.dll
2011-02-23 01:43:19 ----A---- C:\Windows\system32\vfwwdm32.dll
2011-02-23 01:43:19 ----A---- C:\Windows\system32\takeown.exe
2011-02-23 01:43:19 ----A---- C:\Windows\system32\sscore.dll
2011-02-23 01:43:19 ----A---- C:\Windows\system32\spbcd.dll
2011-02-23 01:43:19 ----A---- C:\Windows\system32\shimgvw.dll
2011-02-23 01:43:19 ----A---- C:\Windows\system32\setbcdlocale.dll
2011-02-23 01:43:19 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2011-02-23 01:43:19 ----A---- C:\Windows\system32\relog.exe
2011-02-23 01:43:19 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-02-23 01:43:19 ----A---- C:\Windows\system32\QCLIPROV.DLL
2011-02-23 01:43:19 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2011-02-23 01:43:19 ----A---- C:\Windows\system32\PnPUnattend.exe
2011-02-23 01:43:19 ----A---- C:\Windows\system32\nrpsrv.dll
2011-02-23 01:43:19 ----A---- C:\Windows\system32\netapi32.dll
2011-02-23 01:43:19 ----A---- C:\Windows\system32\mydocs.dll
2011-02-23 01:43:19 ----A---- C:\Windows\system32\MultiDigiMon.exe
2011-02-23 01:43:19 ----A---- C:\Windows\system32\msdmo.dll
2011-02-23 01:43:19 ----A---- C:\Windows\system32\mobsync.exe
2011-02-23 01:43:19 ----A---- C:\Windows\system32\KMSVC.DLL
2011-02-23 01:43:19 ----A---- C:\Windows\system32\itircl.dll
2011-02-23 01:43:19 ----A---- C:\Windows\system32\iscsicli.exe
2011-02-23 01:43:19 ----A---- C:\Windows\system32\iasrecst.dll
2011-02-23 01:43:19 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2011-02-23 01:43:19 ----A---- C:\Windows\system32\fphc.dll
2011-02-23 01:43:19 ----A---- C:\Windows\system32\fdProxy.dll
2011-02-23 01:43:19 ----A---- C:\Windows\system32\EhStorAPI.dll
2011-02-23 01:43:19 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2011-02-23 01:43:19 ----A---- C:\Windows\system32\drivers\pacer.sys
2011-02-23 01:43:19 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2011-02-23 01:43:19 ----A---- C:\Windows\system32\dot3ui.dll
2011-02-23 01:43:19 ----A---- C:\Windows\system32\dot3msm.dll
2011-02-23 01:43:19 ----A---- C:\Windows\system32\djoin.exe
2011-02-23 01:43:19 ----A---- C:\Windows\system32\diskpart.exe
2011-02-23 01:43:19 ----A---- C:\Windows\system32\cmstp.exe
2011-02-23 01:43:19 ----A---- C:\Windows\system32\CertPolEng.dll
2011-02-23 01:43:19 ----A---- C:\Windows\system32\BWUnpairElevated.dll
2011-02-23 01:43:19 ----A---- C:\Windows\system32\BdeHdCfg.exe
2011-02-23 01:43:19 ----A---- C:\Windows\system32\amstream.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\wups.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\wmpps.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\unlodctr.exe
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\TRAPI.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\tlscsp.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\syssetup.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\sppc.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\spopk.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\schedcli.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\shimgvw.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\secur32.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\resutils.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\ReAgentc.exe
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\rdprefdrvapi.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\rastapi.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\perfts.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\odbcconf.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\netutils.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\napdsnap.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\muifontsetup.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\msdmo.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\mobsync.exe
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\mciqtz32.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\luainstall.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\itircl.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\inetmib1.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\imm32.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\findstr.exe
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\elsTrans.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\dsauth.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\diskpart.exe
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\CertPolEng.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\cabinet.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\browcli.dll
2011-02-23 01:43:18 ----A---- C:\Windows\SYSWOW64\bitsperf.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\wuapp.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\wshbth.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\vmstorfltres.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\vmicres.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\vmbusres.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\UIRibbonRes.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\tskill.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\tsdiscon.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\tscon.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\TRAPI.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\sppc.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\spopk.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\schedcli.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\shadow.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\rwinsta.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\reset.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\repair-bde.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\RDPENCDD.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\query.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\qprocess.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\qappsrv.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\profprov.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\prevhost.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\onexui.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\odbcconf.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\napdsnap.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\msfeedssync.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\mciqtz32.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\manage-bde.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\luainstall.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\LogonUI.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\logoff.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\inetmib1.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\imagehlp.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\choice.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\chgusr.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\chgport.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\chglogon.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\change.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\FXSUNATD.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\FXSTIFF.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\FXSMON.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\fixmapi.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\findstr.exe
2011-02-23 01:43:18 ----A---- C:\Windows\system32\elsTrans.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\eappgnui.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\dsauth.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2011-02-23 01:43:18 ----A---- C:\Windows\system32\drivers\tunnel.sys
2011-02-23 01:43:18 ----A---- C:\Windows\system32\drivers\tdi.sys
2011-02-23 01:43:18 ----A---- C:\Windows\system32\drivers\dfsc.sys
2011-02-23 01:43:18 ----A---- C:\Windows\system32\cscdll.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\browcli.dll
2011-02-23 01:43:18 ----A---- C:\Windows\system32\bitsperf.dll
2011-02-23 01:43:17 ----AH---- C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
2011-02-23 01:43:17 ----A---- C:\Windows\SYSWOW64\wshirda.dll
2011-02-23 01:43:17 ----A---- C:\Windows\SYSWOW64\wsdchngr.dll
2011-02-23 01:43:17 ----A---- C:\Windows\SYSWOW64\sscore.dll
2011-02-23 01:43:17 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2011-02-23 01:43:17 ----A---- C:\Windows\SYSWOW64\shunimpl.dll
2011-02-23 01:43:17 ----A---- C:\Windows\SYSWOW64\shgina.dll
2011-02-23 01:43:17 ----A---- C:\Windows\SYSWOW64\riched32.dll
2011-02-23 01:43:17 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2011-02-23 01:43:17 ----A---- C:\Windows\SYSWOW64\C_ISCII.DLL
2011-02-23 01:43:17 ----A---- C:\Windows\SYSWOW64\browseui.dll
2011-02-23 01:43:17 ----A---- C:\Windows\system32\wups2.dll
2011-02-23 01:43:17 ----A---- C:\Windows\system32\wups.dll
2011-02-23 01:43:17 ----A---- C:\Windows\system32\wshirda.dll
2011-02-23 01:43:17 ----A---- C:\Windows\system32\wsdchngr.dll
2011-02-23 01:43:17 ----A---- C:\Windows\system32\wow64win.dll
2011-02-23 01:43:17 ----A---- C:\Windows\system32\wow64cpu.dll
2011-02-23 01:43:17 ----A---- C:\Windows\system32\VmdCoinstall.dll
2011-02-23 01:43:17 ----A---- C:\Windows\system32\vmbuspipe.dll
2011-02-23 01:43:17 ----A---- C:\Windows\system32\VmbusCoinstaller.dll
2011-02-23 01:43:17 ----A---- C:\Windows\system32\spwmp.dll
2011-02-23 01:43:17 ----A---- C:\Windows\system32\shunimpl.dll
2011-02-23 01:43:17 ----A---- C:\Windows\system32\shgina.dll
2011-02-23 01:43:17 ----A---- C:\Windows\system32\riched32.dll
2011-02-23 01:43:17 ----A---- C:\Windows\system32\rdpcfgex.dll
2011-02-23 01:43:17 ----A---- C:\Windows\system32\IcCoinstall.dll
2011-02-23 01:43:17 ----A---- C:\Windows\system32\dxmasf.dll
2011-02-23 01:43:17 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2011-02-23 01:43:17 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2011-02-23 01:43:17 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2011-02-23 01:43:17 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2011-02-23 01:43:17 ----A---- C:\Windows\system32\drivers\scfilter.sys
2011-02-23 01:43:17 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2011-02-23 01:43:17 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2011-02-23 01:43:17 ----A---- C:\Windows\system32\drivers\hidusb.sys
2011-02-23 01:43:17 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2011-02-23 01:43:17 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2011-02-23 01:43:17 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2011-02-23 01:43:17 ----A---- C:\Windows\system32\drivers\cdrom.sys
2011-02-23 01:43:17 ----A---- C:\Windows\system32\drivers\appid.sys
2011-02-23 01:43:17 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2011-02-23 01:43:17 ----A---- C:\Windows\system32\C_ISCII.DLL
2011-02-23 01:43:17 ----A---- C:\Windows\system32\browseui.dll
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDUS.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDUGHR1.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDTURME.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDTUQ.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDTUF.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDTAJIK.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDSG.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDSF.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDPO.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDNEPR.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDMON.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDMAORI.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDLT1.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\kbdlk41a.dll
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDINTEL.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDINTAM.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDINORI.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDINMAR.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDINKAN.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDINHIN.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDINBEN.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDGR1.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDGKL.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDGEO.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDCZ1.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDBULG.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDBLR.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\wmploc.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDUS.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDTURME.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDTUQ.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDTUF.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDSG.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDSF.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDPO.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDNEPR.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDMON.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDMAORI.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDLT1.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\kbdlk41a.dll
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDINTEL.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDINTAM.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDINORI.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDINMAR.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDINKAN.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDINHIN.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDINBEN.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDGR1.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDGKL.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDGEO.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDCZ1.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDBULG.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDBLR.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\KBDBASH.DLL
2011-02-23 01:43:16 ----A---- C:\Windows\system32\drivers\vms3cap.sys
2011-02-23 01:43:15 ----A---- C:\Windows\SYSWOW64\tzres.dll
2011-02-23 01:43:15 ----A---- C:\Windows\SYSWOW64\spwizres.dll
2011-02-23 01:43:15 ----A---- C:\Windows\SYSWOW64\pifmgr.dll
2011-02-23 01:43:15 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2011-02-23 01:43:15 ----A---- C:\Windows\SYSWOW64\dpnaddr.dll
2011-02-23 01:43:15 ----A---- C:\Windows\system32\tzres.dll
2011-02-23 01:43:15 ----A---- C:\Windows\system32\spwizres.dll
2011-02-23 01:43:15 ----A---- C:\Windows\system32\pifmgr.dll
2011-02-23 01:43:15 ----A---- C:\Windows\system32\nlsbres.dll
2011-02-23 01:43:15 ----A---- C:\Windows\system32\drivers\VMBusHID.sys
2011-02-23 01:43:15 ----A---- C:\Windows\system32\dpnaddr.dll
2011-02-23 01:43:15 ----A---- C:\Windows\system32\BlbEvents.dll
2011-02-23 01:43:07 ----A---- C:\Windows\SYSWOW64\wdscore.dll
2011-02-23 01:43:07 ----A---- C:\Windows\SYSWOW64\PkgMgr.exe
2011-02-23 01:43:06 ----A---- C:\Windows\SYSWOW64\printmanagement.msc
2011-02-23 01:42:57 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2011-02-23 01:42:56 ----A---- C:\Windows\SYSWOW64\dpx.dll
2011-02-23 01:42:52 ----A---- C:\Windows\SYSWOW64\wbemcomn.dll
2011-02-23 01:41:21 ----A---- C:\Windows\system32\wmicmiplugin.dll
2011-02-23 01:41:21 ----A---- C:\Windows\system32\wbemcomn.dll
2011-02-23 01:41:13 ----A---- C:\Windows\system32\SmiEngine.dll
2011-02-23 01:41:07 ----A---- C:\Windows\system32\PkgMgr.exe
2011-02-23 01:40:53 ----A---- C:\Windows\system32\drvstore.dll
2011-02-23 01:40:53 ----A---- C:\Windows\system32\dpx.dll
2011-02-22 22:34:03 ----A---- C:\Windows\CoD.INI
2011-02-22 19:18:40 ----A---- C:\Windows\system32\XpsPrint.dll
2011-02-22 19:18:39 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2011-02-22 19:18:39 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2011-02-22 19:18:39 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-02-20 15:57:29 ----D---- C:\Windows\pss
2011-02-20 15:51:18 ----RA---- C:\Windows\SYSWOW64\GEARAspi.dll
2011-02-20 15:51:18 ----RA---- C:\Windows\system32\GEARAspi64.dll
2011-02-20 15:51:18 ----RA---- C:\Windows\system32\drivers\GEARAspiWDM.sys
2011-02-20 15:51:17 ----D---- C:\Program Files\Symantec
2011-02-20 15:51:17 ----D---- C:\Program Files\Common Files\Symantec Shared
2011-02-20 15:51:17 ----A---- C:\Windows\system32\drivers\SYMEVENT64x86.SYS
2011-02-20 15:51:06 ----D---- C:\Windows\system32\drivers\N360x64
2011-02-20 15:51:04 ----D---- C:\Program Files (x86)\Norton 360
2011-02-20 15:50:59 ----D---- C:\Program Files (x86)\NortonInstaller
2011-02-20 15:09:14 ----D---- C:\Program Files (x86)\MSXML 4.0
2011-02-20 15:07:34 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2011-02-20 14:56:02 ----D---- C:\Program Files\Common Files\Motorola Shared
2011-02-20 14:56:01 ----D---- C:\Program Files (x86)\Motorola
2011-02-18 23:50:19 ----DC---- C:\Windows\system32\DRVSTORE
2011-02-18 23:46:59 ----D---- C:\ProgramData\pat
2011-02-18 23:45:07 ----D---- C:\Program Files (x86)\Paragon_Software
2011-02-18 23:28:19 ----D---- C:\TRANSLAT
2011-02-18 23:28:17 ----D---- C:\ProgramData\LangSoft
2011-02-18 23:27:32 ----D---- C:\Users\Dada\AppData\Roaming\LangSoft
2011-02-18 23:22:07 ----D---- C:\Users\Dada\AppData\Roaming\Thinstall
2011-02-18 23:17:16 ----A---- C:\Windows\system32\mshtml.dll
2011-02-18 23:17:09 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-02-18 23:16:44 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2011-02-18 23:16:44 ----A---- C:\Windows\system32\kerberos.dll
2011-02-18 23:16:38 ----A---- C:\Windows\system32\win32k.sys
2011-02-18 23:16:29 ----A---- C:\Windows\system32\winsrv.dll
2011-02-18 23:16:12 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-02-18 23:16:12 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-02-18 23:16:12 ----A---- C:\Windows\system32\vbscript.dll
2011-02-18 23:16:12 ----A---- C:\Windows\system32\jscript.dll
2011-02-18 23:16:11 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2011-02-18 23:16:11 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2011-02-18 23:16:11 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2011-02-18 23:16:11 ----A---- C:\Windows\system32\fontsub.dll
2011-02-18 23:16:11 ----A---- C:\Windows\system32\atmlib.dll
2011-02-18 23:16:11 ----A---- C:\Windows\system32\atmfd.dll
2011-02-18 23:15:35 ----A---- C:\Windows\SYSWOW64\javaws.exe
2011-02-18 23:15:35 ----A---- C:\Windows\SYSWOW64\javaw.exe
2011-02-18 23:15:35 ----A---- C:\Windows\SYSWOW64\java.exe
2011-02-18 23:15:30 ----D---- C:\Program Files (x86)\Java
2011-02-18 23:13:37 ----D---- C:\Program Files (x86)\Secunia

======List of files/folders modified in the last 1 months======

2011-03-14 12:34:11 ----RD---- C:\Program Files
2011-03-14 12:27:59 ----SHD---- C:\Boot
2011-03-14 12:27:59 ----D---- C:\Windows\system32\config
2011-03-14 12:26:54 ----D---- C:\Windows\Prefetch
2011-03-14 12:23:48 ----D---- C:\Windows
2011-03-14 11:17:26 ----D---- C:\Windows\System32
2011-03-14 11:17:26 ----D---- C:\Windows\inf
2011-03-14 11:17:26 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-03-14 11:13:08 ----SHD---- C:\System Volume Information
2011-03-14 01:57:16 ----D---- C:\Program Files (x86)\MSI Afterburner
2011-03-14 00:39:51 ----D---- C:\Windows\SysWOW64
2011-03-14 00:39:51 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2011-03-14 00:39:46 ----D---- C:\Users\Dada\AppData\Roaming\HLSW
2011-03-13 22:16:30 ----D---- C:\Windows\system32\Tasks
2011-03-13 19:48:44 ----D---- C:\Windows\LiveKernelReports
2011-03-13 18:32:57 ----D---- C:\Users\Dada\AppData\Roaming\Media Player Classic
2011-03-13 17:59:39 ----HD---- C:\ProgramData
2011-03-13 17:57:48 ----SHD---- C:\Windows\Installer
2011-03-13 17:57:26 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-03-12 20:31:14 ----D---- C:\Program Files (x86)\JDownloader
2011-03-12 19:39:02 ----D---- C:\Windows\Temp
2011-03-12 19:38:45 ----RSD---- C:\Windows\assembly
2011-03-12 19:38:34 ----D---- C:\Windows\Logs
2011-03-12 19:36:27 ----D---- C:\Program Files (x86)\Common Files
2011-03-12 19:36:09 ----D---- C:\Windows\winsxs
2011-03-12 19:36:08 ----D---- C:\Windows\system32\DriverStore
2011-03-12 19:36:08 ----D---- C:\Windows\system32\catroot
2011-03-12 19:36:07 ----RD---- C:\Program Files (x86)
2011-03-12 12:29:33 ----D---- C:\Windows\system32\drivers
2011-03-12 11:28:49 ----D---- C:\Windows\SYSWOW64\drivers
2011-03-10 15:12:37 ----D---- C:\Windows\system32\catroot2
2011-03-10 12:22:51 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-03-10 00:49:31 ----D---- C:\Windows\rescache
2011-03-09 23:43:07 ----D---- C:\Windows\Microsoft.NET
2011-03-09 21:41:41 ----D---- C:\Windows\debug
2011-03-09 19:34:58 ----A---- C:\Windows\system32\MRT.exe
2011-03-07 10:45:19 ----D---- C:\Program Files\CCleaner
2011-03-07 10:35:04 ----D---- C:\Windows\Downloaded Program Files
2011-02-23 02:57:03 ----D---- C:\Users\Dada\AppData\Roaming\IObit
2011-02-23 02:56:51 ----D---- C:\Windows\Tasks
2011-02-23 02:35:22 ----D---- C:\Windows\SYSWOW64\config
2011-02-23 02:31:17 ----D---- C:\Program Files (x86)\Realtek
2011-02-23 02:03:25 ----SD---- C:\ProgramData\Microsoft
2011-02-23 02:02:03 ----D---- C:\Windows\Panther
2011-02-23 01:52:35 ----D---- C:\Program Files (x86)\Windows Sidebar
2011-02-23 01:52:35 ----D---- C:\Program Files (x86)\Windows Portable Devices
2011-02-23 01:52:35 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2011-02-23 01:52:35 ----D---- C:\Program Files (x86)\Windows Media Player
2011-02-23 01:52:35 ----D---- C:\Program Files (x86)\Windows Mail
2011-02-23 01:52:35 ----D---- C:\Program Files (x86)\Internet Explorer
2011-02-23 01:52:34 ----D---- C:\Program Files\Windows Sidebar
2011-02-23 01:52:34 ----D---- C:\Program Files\Windows Portable Devices
2011-02-23 01:52:34 ----D---- C:\Program Files\Windows Photo Viewer
2011-02-23 01:52:34 ----D---- C:\Program Files\Windows Media Player
2011-02-23 01:52:34 ----D---- C:\Program Files\Windows Mail
2011-02-23 01:52:34 ----D---- C:\Program Files\Windows Journal
2011-02-23 01:52:34 ----D---- C:\Program Files\Internet Explorer
2011-02-23 01:52:34 ----D---- C:\Program Files\DVD Maker
2011-02-23 01:52:32 ----D---- C:\Windows\servicing
2011-02-23 01:52:32 ----D---- C:\Windows\ehome
2011-02-23 01:52:32 ----D---- C:\Program Files\Windows Defender
2011-02-23 01:52:27 ----SHD---- C:\Windows\BitLockerDiscoveryVolumeContents
2011-02-23 01:52:27 ----D---- C:\Windows\SYSWOW64\Setup
2011-02-23 01:52:27 ----D---- C:\Windows\SYSWOW64\oobe
2011-02-23 01:52:27 ----D---- C:\Windows\SYSWOW64\migration
2011-02-23 01:52:27 ----D---- C:\Windows\SYSWOW64\da-DK
2011-02-23 01:52:27 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-02-23 01:52:27 ----D---- C:\Windows\SYSWOW64\cs
2011-02-23 01:52:27 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2011-02-23 01:52:26 ----D---- C:\Windows\SYSWOW64\sppui
2011-02-23 01:52:26 ----D---- C:\Windows\SYSWOW64\manifeststore
2011-02-23 01:52:26 ----D---- C:\Windows\SYSWOW64\es-ES
2011-02-23 01:52:25 ----D---- C:\Windows\SYSWOW64\wbem
2011-02-23 01:52:25 ----D---- C:\Windows\SYSWOW64\migwiz
2011-02-23 01:52:25 ----D---- C:\Windows\SYSWOW64\Dism
2011-02-23 01:52:19 ----D---- C:\Windows\system32\Setup
2011-02-23 01:52:19 ----D---- C:\Windows\system32\oobe
2011-02-23 01:52:19 ----D---- C:\Windows\system32\migration
2011-02-23 01:52:19 ----D---- C:\Windows\system32\en-US
2011-02-23 01:52:19 ----D---- C:\Windows\system32\da-DK
2011-02-23 01:52:19 ----D---- C:\Windows\system32\cs
2011-02-23 01:52:19 ----D---- C:\Windows\system32\AdvancedInstallers
2011-02-23 01:52:19 ----D---- C:\Windows\PolicyDefinitions
2011-02-23 01:52:18 ----D---- C:\Windows\system32\sppui
2011-02-23 01:52:18 ----D---- C:\Windows\system32\manifeststore
2011-02-23 01:52:18 ----D---- C:\Windows\system32\es-ES
2011-02-23 01:52:18 ----D---- C:\Windows\system32\cs-CZ
2011-02-23 01:52:17 ----D---- C:\Windows\system32\wbem
2011-02-23 01:52:17 ----D---- C:\Windows\system32\drivers\UMDF
2011-02-23 01:52:17 ----D---- C:\Windows\system32\drivers\cs-CZ
2011-02-23 01:52:16 ----D---- C:\Windows\system32\migwiz
2011-02-23 01:52:16 ----D---- C:\Windows\system32\Dism
2011-02-23 01:52:10 ----RSD---- C:\Windows\Fonts
2011-02-23 01:52:09 ----D---- C:\Windows\AppPatch
2011-02-23 01:52:06 ----D---- C:\Windows\system32\Boot
2011-02-23 01:47:50 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2011-02-23 01:47:50 ----A---- C:\Windows\system32\msclmd.dll
2011-02-22 22:07:35 ----D---- C:\Users\Dada\AppData\Roaming\DAEMON Tools Lite
2011-02-20 16:03:40 ----D---- C:\ProgramData\NortonInstaller
2011-02-20 16:03:40 ----D---- C:\ProgramData\Norton
2011-02-20 15:51:17 ----D---- C:\Program Files\Common Files
2011-02-20 15:31:59 ----HD---- C:\Windows\system32\GroupPolicy
2011-02-19 01:58:07 ----D---- C:\Windows\system32\NDF
2011-02-18 23:15:30 ----A---- C:\Windows\SYSWOW64\deployJava1.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie64.sys [2010-06-17 16440]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\N360x64\0403000.005\SYMDS64.SYS [2010-02-04 433200]
R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\N360x64\0403000.005\SYMEFA64.SYS [2010-04-22 221232]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 BHDrvx64;BHDrvx64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\Definitions\BASHDefs\20110309.001\BHDrvx64.sys [2011-02-25 1124472]
R1 ccHP;Symantec Hash Provider; C:\Windows\system32\drivers\N360x64\0403000.005\ccHPx64.sys [2010-02-26 615040]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-02-04 254528]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2011-02-20 475696]
R1 IDSVia64;IDSVia64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\Definitions\IPSDefs\20110311.001\IDSvia64.sys [2011-01-31 476792]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\N360x64\0403000.005\SRTSPX64.SYS [2010-04-22 32304]
R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\N360x64\0403000.005\Ironx64.SYS [2010-04-29 150064]
R1 SYMTDIv;Symantec Vista Network Dispatch Driver; C:\Windows\System32\Drivers\N360x64\0403000.005\SYMTDIV.SYS [2010-05-06 451120]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-02-20 132656]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 34152]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-07-28 2445672]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2010-08-24 63568]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2010-08-24 57936]
R3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\Windows\System32\Drivers\LUsbFilt.Sys [2010-08-24 41040]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2010-12-20 24152]
R3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\Definitions\VirusDefs\20110313.002\ENG64.SYS [2011-02-20 117880]
R3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\Definitions\VirusDefs\20110313.002\EX64.SYS [2011-02-20 1791096]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-01-13 413800]
R3 skfiltv;skfiltv; C:\Windows\system32\drivers\skfiltv.sys [2008-08-14 24064]
R3 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\System32\Drivers\N360x64\0403000.005\SRTSP64.SYS [2010-04-22 505392]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [2011-02-20 173104]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2010-12-16 47232]
R3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Program Files\PhenomMsrTweaker\WinRing0x64.sys [2010-06-03 14544]
S0 AVGIDSEH;AVGIDSEH; C:\Windows\system32\drivers\AVGIDSEH.sys []
S1 Avgfwfd;AVG network filter service; C:\Windows\system32\drivers\Avgfwfd.sys []
S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\drivers\Avgmfx64.sys []
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2010-11-20 552448]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2010-11-20 80384]
S3 cpuz130;cpuz130; \??\D:\System odklon\temp\cpuz130\cpuz_x64.sys []
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files (x86)\MediaCoder\SysInfoX64.sys []
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2011-02-04 25640]
S3 motmodem;Motorola USB CDC ACM Driver; C:\Windows\system32\DRIVERS\motmodem.sys [2010-09-29 30208]
S3 PSI;PSI; C:\Windows\system32\DRIVERS\psi_mf.sys [2010-09-01 17976]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys []
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\system32\drivers\Synth3dVsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 VGPU;VGPU; C:\Windows\system32\drivers\VGPU.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CTAudSvcService;Creative Audio Service; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [2010-01-27 286720]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2010-12-20 363344]
R2 MotoHelper;MotoHelper Service; C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe [2010-12-03 218432]
R2 N360;Norton 360; C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ccSvcHst.exe [2010-02-26 126392]
R2 NMSAccess;NMSAccess; C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe [2010-03-04 71096]
R2 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [2011-01-07 1005160]
R2 PhenomMsrTweaker;PhenomMsrTweaker service; C:\Program Files\PhenomMsrTweaker\PhenomMsrTweakerService.exe [2010-06-03 188416]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-02-04 75136]
R2 Secunia Update Agent;Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [2011-01-10 399416]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2011-02-04 79360]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2010-10-28 357456]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Secunia PSI Agent;Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [2011-01-10 993848]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-02-04 1255736]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]

-----------------EOF-----------------

[Davidov]

dene se mi odpojuje internet a po restartu to jede (napoveda mel jsem predtim avg trba se neodinstaloval uplne ten jejich firewall) dik.

[motji]

AVG máte placené?

Stáhněte SecurityCheck http://screen317.spywareinfoforum.org/SecurityCheck.exe
-program spusťte a postupujte podle instrukcí. Log vložte zde

[Davidov]

Results of screen317's Security Check version 0.99.9
Windows 7 (UAC is disabled!)
Internet Explorer 8
``````````````````````````````
Antivirus/Firewall Check:
AVG PC Tuneup 2011
Norton 360
WMI entry may not exist for antivirus; attempting automatic update.
```````````````````````````````
Anti-malware/Other Utilities Check:
Ad-Aware
Malwarebytes' Anti-Malware
AVG PC Tuneup 2011
Java(TM) 6 Update 24
Adobe Flash Player 10.2.152.26
````````````````````````````````
Process Check:
objlist.exe by Laurent
Norton ccSvcHst.exe
Ad-Aware AAWService.exe is disabled!
Ad-Aware AAWTray.exe is disabled!
Malwarebytes' Anti-Malware mbamservice.exe
``````````End of Log````````````

[motji]

Spusťte combofix podle tohoto návodu
http://www.bleepingcomputer.com/combofi ... t-combofix

[Davidov]

Ahoj pridavam http://www.ulozto.cz/8349592/combofix-txt dik ze tak reagujete

[motji]

ComboFix 11-03-18.05 - Dada 19.03.2011 17:03:41.1.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.8189.7107 [GMT 1:00]
Spuštěný z: c:\users\Dada\Desktop\ComboFix.exe
AV: Norton 360 *Disabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
FW: Norton 360 *Enabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
SP: Norton 360 *Disabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\XSxS
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-02-19 do 2011-03-19 )))))))))))))))))))))))))))))))
.
.
2011-03-19 16:05 . 2011-03-19 16:05 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-03-19 16:05 . 2011-03-19 16:05 -------- d-----w- c:\users\Dada\AppData\Local\temp
2011-03-17 18:16 . 2011-03-17 18:16 -------- d-----w- c:\program files (x86)\Intel
2011-03-17 16:46 . 2011-03-17 16:46 -------- d-----w- c:\program files (x86)\DExUS
2011-03-16 01:23 . 2011-03-16 01:23 -------- d-----w- c:\users\Dada\AppData\Local\Google
2011-03-14 12:44 . 2011-03-14 12:44 -------- d-----w- c:\windows\system32\%LOCALAPPDATA%
2011-03-14 12:03 . 2011-03-14 12:03 -------- d-----w- c:\users\Dada\AppData\Roaming\SUPERAntiSpyware.com
2011-03-14 12:03 . 2011-03-14 12:03 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2011-03-14 12:03 . 2011-03-14 12:03 -------- d-----w- c:\programdata\!SASCORE
2011-03-14 12:03 . 2011-03-18 18:25 -------- d-----w- c:\program files\SUPERAntiSpyware
2011-03-14 11:34 . 2011-03-14 11:48 -------- d-----w- c:\program files\trend micro
2011-03-14 11:34 . 2011-03-14 11:34 -------- d-----w- C:\rsit
2011-03-12 18:39 . 2010-02-04 09:01 78680 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2011-03-12 18:39 . 2010-02-04 09:01 74072 ----a-w- c:\windows\SysWow64\XAPOFX1_4.dll
2011-03-12 18:39 . 2010-02-04 09:01 530776 ----a-w- c:\windows\system32\XAudio2_6.dll
2011-03-12 18:39 . 2010-02-04 09:01 528216 ----a-w- c:\windows\SysWow64\XAudio2_6.dll
2011-03-12 18:39 . 2010-02-04 09:01 24920 ----a-w- c:\windows\system32\X3DAudio1_7.dll
2011-03-12 18:39 . 2010-02-04 09:01 238936 ----a-w- c:\windows\SysWow64\xactengine3_6.dll
2011-03-12 18:39 . 2010-02-04 09:01 22360 ----a-w- c:\windows\SysWow64\X3DAudio1_7.dll
2011-03-12 18:39 . 2010-02-04 09:01 176984 ----a-w- c:\windows\system32\xactengine3_6.dll
2011-03-12 18:39 . 2009-09-04 16:44 517960 ----a-w- c:\windows\system32\XAudio2_5.dll
2011-03-12 18:39 . 2009-09-04 16:44 515416 ----a-w- c:\windows\SysWow64\XAudio2_5.dll
2011-03-12 18:39 . 2009-09-04 16:44 238936 ----a-w- c:\windows\SysWow64\xactengine3_5.dll
2011-03-12 18:39 . 2009-09-04 16:44 176968 ----a-w- c:\windows\system32\xactengine3_5.dll
2011-03-12 18:36 . 2011-03-12 18:36 -------- d-----w- c:\program files (x86)\AGEIA Technologies
2011-03-12 18:36 . 2011-03-12 18:36 -------- d-----w- c:\windows\SysWow64\AGEIA
2011-03-12 18:36 . 2011-03-12 18:36 -------- d-----w- c:\program files (x86)\Common Files\Wise Installation Wizard
2011-03-12 10:28 . 2011-03-12 10:28 -------- d-----w- c:\users\Dada\AppData\Roaming\Malwarebytes
2011-03-12 10:28 . 2010-12-20 17:09 38224 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-03-12 10:28 . 2011-03-12 10:28 -------- d-----w- c:\programdata\Malwarebytes
2011-03-12 10:28 . 2011-03-12 10:28 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2011-03-12 10:28 . 2010-12-20 17:08 24152 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-03-10 12:09 . 2011-03-14 10:59 -------- d-----w- c:\users\Dada\AppData\Local\PokerStars
2011-03-10 12:09 . 2011-03-10 12:09 -------- d-----w- c:\program files (x86)\PokerStars
2011-03-08 20:27 . 2011-03-08 20:27 -------- d-----w- c:\users\Dada\AppData\Roaming\DVDFab
2011-03-08 20:20 . 2011-03-08 20:20 -------- d-----w- c:\users\Dada\AppData\Roaming\NVIDIA
2011-03-07 09:38 . 2011-01-17 11:09 197120 ----a-w- c:\windows\system32\d3d10_1.dll
2011-03-07 09:38 . 2011-01-17 05:47 161792 ----a-w- c:\windows\SysWow64\d3d10_1.dll
2011-02-23 01:41 . 2011-03-07 09:32 -------- d-----w- c:\programdata\TuneUp Software
2011-02-23 01:41 . 2011-02-23 01:41 -------- d-sh--w- c:\programdata\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2011-02-23 01:32 . 2011-02-23 01:32 -------- d-----w- c:\programdata\NVIDIA
2011-02-23 01:31 . 2011-01-13 18:58 74272 ----a-w- c:\windows\system32\RtNicProp64.dll
2011-02-23 01:31 . 2011-01-13 18:58 413800 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2011-02-23 01:29 . 2011-02-23 01:29 -------- d-----w- c:\programdata\NVIDIA Corporation
2011-02-23 01:26 . 2011-02-23 01:26 -------- d-----w- C:\NVIDIA
2011-02-23 01:25 . 2010-12-16 04:06 47232 ----a-w- c:\windows\system32\drivers\usbfilter.sys
2011-02-23 00:45 . 2011-02-23 00:45 -------- d-----w- c:\windows\system32\SPReview
2011-02-23 00:45 . 2011-02-23 00:45 -------- d-----w- c:\windows\system32\EventProviders
2011-02-23 00:43 . 2010-11-20 13:33 982912 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2011-02-23 00:42 . 2010-11-20 12:18 323072 ----a-w- c:\windows\SysWow64\drvstore.dll
2011-02-23 00:42 . 2010-11-20 12:18 257024 ----a-w- c:\windows\SysWow64\dpx.dll
2011-02-23 00:42 . 2010-11-20 12:21 363008 ----a-w- c:\windows\SysWow64\wbemcomn.dll
2011-02-23 00:42 . 2010-11-20 12:19 606208 ----a-w- c:\windows\SysWow64\wbem\fastprox.dll
2011-02-23 00:41 . 2010-11-20 13:27 524288 ----a-w- c:\windows\system32\wmicmiplugin.dll
2011-02-23 00:41 . 2010-11-20 13:27 529408 ----a-w- c:\windows\system32\wbemcomn.dll
2011-02-23 00:41 . 2010-11-20 13:27 1225216 ----a-w- c:\windows\system32\wbem\wbemcore.dll
2011-02-23 00:41 . 2010-11-20 13:27 933376 ----a-w- c:\windows\system32\SmiEngine.dll
2011-02-23 00:41 . 2010-11-20 13:25 199168 ----a-w- c:\windows\system32\PkgMgr.exe
2011-02-23 00:40 . 2010-11-20 13:26 422912 ----a-w- c:\windows\system32\drvstore.dll
2011-02-23 00:40 . 2010-11-20 13:26 399872 ----a-w- c:\windows\system32\dpx.dll
2011-02-22 18:18 . 2011-01-07 12:17 1465344 ----a-w- c:\windows\system32\XpsPrint.dll
2011-02-22 18:18 . 2011-01-07 12:17 475648 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-02-22 18:18 . 2011-01-07 07:46 870912 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2011-02-22 18:18 . 2011-01-07 07:46 288256 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2011-02-20 15:53 . 2011-03-19 00:35 -------- d-----w- c:\users\Dada\AppData\Local\CrashDumps
2011-02-20 14:51 . 2009-05-18 21:17 34152 ----a-r- c:\windows\system32\drivers\GEARAspiWDM.sys
2011-02-20 14:51 . 2008-04-17 20:12 126312 ----a-r- c:\windows\system32\GEARAspi64.dll
2011-02-20 14:51 . 2008-04-17 20:12 107368 ----a-r- c:\windows\SysWow64\GEARAspi.dll
2011-02-20 14:51 . 2011-02-20 14:51 173104 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS
2011-02-20 14:51 . 2011-02-20 14:51 -------- d-----w- c:\program files\Symantec
2011-02-20 14:51 . 2011-02-20 14:51 -------- d-----w- c:\program files\Common Files\Symantec Shared
2011-02-20 14:51 . 2011-02-22 18:14 -------- d-----w- c:\windows\system32\drivers\N360x64
2011-02-20 14:51 . 2011-02-20 14:51 -------- d-----w- c:\program files (x86)\Norton 360
2011-02-20 14:50 . 2011-02-20 14:50 -------- d-----w- c:\program files (x86)\NortonInstaller
2011-02-20 14:09 . 2011-02-20 14:09 -------- d-----w- c:\program files (x86)\MSXML 4.0
2011-02-20 14:07 . 2011-02-23 00:54 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2011-02-20 13:56 . 2011-02-20 13:56 -------- d-----w- c:\program files\Common Files\Motorola Shared
2011-02-19 00:56 . 2011-02-19 00:56 -------- d-----w- c:\users\Dada\AppData\Local\ElevatedDiagnostics
2011-02-18 22:50 . 2011-03-12 11:29 -------- dc----w- c:\windows\system32\DRVSTORE
2011-02-18 22:46 . 2011-02-23 03:46 -------- d-----w- c:\programdata\pat
2011-02-18 22:45 . 2011-02-18 22:45 -------- d-----w- c:\program files (x86)\Paragon_Software
2011-02-18 22:28 . 2011-02-18 22:29 -------- d-----w- C:\TRANSLAT
2011-02-18 22:28 . 2011-02-18 22:29 -------- d-----w- c:\programdata\LangSoft
2011-02-18 22:27 . 2011-03-07 09:43 -------- d-----w- c:\users\Dada\AppData\Roaming\LangSoft
2011-02-18 22:22 . 2011-02-18 22:22 -------- d-----w- c:\users\Dada\AppData\Roaming\Thinstall
2011-02-18 22:22 . 2011-02-18 22:22 -------- d-----w- c:\users\Dada\AppData\Local\Thinstall
2011-02-18 22:17 . 2011-01-07 09:51 1638912 ----a-w- c:\windows\system32\mshtml.tlb
2011-02-18 22:17 . 2011-01-07 06:01 1638912 ----a-w- c:\windows\SysWow64\mshtml.tlb
2011-02-18 22:15 . 2011-02-18 22:15 -------- d-----w- c:\program files (x86)\Common Files\Java
2011-02-18 22:15 . 2011-02-18 22:15 -------- d-----w- c:\program files (x86)\Java
2011-02-18 22:13 . 2011-02-18 22:13 -------- d-----w- c:\users\Dada\AppData\Local\Secunia PSI
2011-02-18 22:13 . 2011-02-18 22:13 -------- d-----w- c:\program files (x86)\Secunia
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-19 01:35 . 2011-02-04 23:48 271200 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2011-03-19 01:35 . 2011-02-04 19:56 271200 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2011-03-19 01:29 . 2011-02-04 19:56 271200 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2011-02-23 00:47 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-02-23 00:47 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-02-18 22:15 . 2011-02-04 19:11 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-02-05 02:19 . 2011-02-05 02:19 53248 ----a-r- c:\users\Dada\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
2011-02-05 02:19 . 2011-02-04 19:29 18960 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
2011-02-04 21:26 . 2011-02-04 18:48 25640 ----a-w- c:\windows\gdrv.sys
2011-02-04 20:55 . 2011-02-04 20:55 466520 ----a-w- c:\windows\system32\wrap_oal.dll
2011-02-04 20:55 . 2011-02-04 20:55 445016 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2011-02-04 20:55 . 2011-02-04 20:55 123480 ----a-w- c:\windows\system32\OpenAL32.dll
2011-02-04 20:55 . 2011-02-04 20:55 109144 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2011-02-04 20:08 . 2011-02-04 19:55 75136 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2011-02-04 19:06 . 2011-02-04 19:06 254528 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2011-02-02 16:11 . 2011-02-04 19:11 270720 ------w- c:\windows\system32\MpSigStub.exe
2011-02-02 16:10 . 2011-02-04 19:11 7844688 ------w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{27AA69DD-A224-4241-A71B-D0FDBEAEA85E}\mpengine.dll
2011-01-13 18:58 . 2011-02-04 18:44 107552 ----a-w- c:\windows\system32\RTNUninst64.dll
2011-01-08 03:27 . 2011-02-04 19:25 2200680 ----a-w- c:\windows\system32\nvapi64.dll
2011-01-07 19:50 . 2011-01-07 19:50 795752 ----a-w- c:\windows\system32\easyUpdatusAPIU64.dll
2011-01-07 19:50 . 2011-01-07 19:50 6143080 ----a-w- c:\windows\system32\nvcpl.dll
2011-01-07 19:49 . 2011-01-07 19:49 3156072 ----a-w- c:\windows\system32\nvsvc64.dll
2011-01-07 19:49 . 2011-01-07 19:49 117864 ----a-w- c:\windows\system32\nvmctray.dll
2011-01-07 19:49 . 2011-01-07 19:49 61032 ----a-w- c:\windows\system32\nvshext.dll
2011-01-07 19:49 . 2011-01-07 19:49 2558568 ----a-w- c:\windows\system32\nvsvcr.dll
2011-01-07 19:49 . 2011-01-07 19:49 1005160 ----a-w- c:\windows\system32\nvvsvc.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SharingPrivate]
@="{08244EE6-92F0-47f2-9FC9-929BAA2E7235}"
[HKEY_CLASSES_ROOT\CLSID\{08244EE6-92F0-47f2-9FC9-929BAA2E7235}]
2010-11-20 12:20 442880 ----a-w- c:\windows\System32\ntshrui.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"DisableStartupSound"= 1 (0x1)
"DisableStatusMessages"= 1 (0x1)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoThumbnailCache"= 1 (0x1)
"DisableThumbnailsOnNetworkFolders"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~2\AVG\AVG10\avgchsva.exe /sync\0c:\progra~2\AVG\AVG10\avgrsa.exe /sync /restart
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
@="IEEE 1394 Bus host controllers"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
@="SBP2 IEEE 1394 Devices"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
@="SecurityDevices"
.
R0 AVGIDSEH;AVGIDSEH; [x]
R1 Avgfwfd;AVG network filter service; [x]
R1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 sppsvc;Ochrana softwaru;c:\windows\system32\sppsvc.exe [x]
R3 AcpiPmi;Ovladač měřiče napájení standardu ACPI;c:\windows\system32\drivers\acpipmi.sys [x]
R3 adp94xx;adp94xx;c:\windows\system32\DRIVERS\adp94xx.sys [x]
R3 adpahci;adpahci;c:\windows\system32\DRIVERS\adpahci.sys [x]
R3 amdsata;amdsata;c:\windows\system32\drivers\amdsata.sys [x]
R3 amdsbs;amdsbs;c:\windows\system32\DRIVERS\amdsbs.sys [x]
R3 AppID;Ovladač AppID;c:\windows\system32\drivers\appid.sys [x]
R3 AppIDSvc;Identita aplikace;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 Appinfo;Informace o aplikaci;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 arcsas;arcsas;c:\windows\system32\DRIVERS\arcsas.sys [x]
R3 AVG Security Toolbar Service;AVG Security Toolbar Service; [x]
R3 b06bdrv;Broadcom NetXtreme II VBD;c:\windows\system32\DRIVERS\bxvbda.sys [x]
R3 b57nd60a;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\b57nd60a.sys [x]
R3 BDESVC;Služba BitLocker Drive Encryption;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 BrFiltLo;Brother USB Mass-Storage Lower Filter Driver;c:\windows\system32\DRIVERS\BrFiltLo.sys [x]
R3 BrFiltUp;Brother USB Mass-Storage Upper Filter Driver;c:\windows\system32\DRIVERS\BrFiltUp.sys [x]
R3 Brserid;Brother MFC Serial Port Interface Driver (WDM);c:\windows\System32\Drivers\Brserid.sys [x]
R3 BrSerWdm;Brother WDM Serial driver;c:\windows\System32\Drivers\BrSerWdm.sys [x]
R3 BrUsbMdm;Brother MFC USB Fax Only Modem;c:\windows\System32\Drivers\BrUsbMdm.sys [x]
R3 circlass;Consumer IR Devices;c:\windows\system32\DRIVERS\circlass.sys [x]
R3 cpuz130;cpuz130;d:\system odklon\temp\cpuz130\cpuz_x64.sys [x]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2011-02-04 79360]
R3 defragsvc;Defragmentace disku;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 DPS;Služba DPS (Diagnostic Policy Service);c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 ebdrv;Broadcom NetXtreme II 10 GigE VBD;c:\windows\system32\DRIVERS\evbda.sys [x]
R3 elxstor;elxstor;c:\windows\system32\DRIVERS\elxstor.sys [x]
R3 Filetrace;Filetrace;c:\windows\system32\drivers\filetrace.sys [x]
R3 FsDepends;File System Dependency Minifilter;c:\windows\system32\drivers\FsDepends.sys [x]
R3 hcw85cir;Hauppauge Consumer Infrared Receiver;c:\windows\system32\drivers\hcw85cir.sys [x]
R3 HomeGroupListener;Naslouchací proces domácí skupiny;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 HomeGroupProvider;Zprostředkovatel domácích skupin;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 HpSAMD;HpSAMD;c:\windows\system32\drivers\HpSAMD.sys [x]
R3 iaStorV;Řadič Intel diskového pole RAID – Windows 7;c:\windows\system32\drivers\iaStorV.sys [x]
R3 IPBusEnum;Rozpoznávací modul sběrnice PnP-X IP;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 iphlpsvc;Pomocná služba protokolu IP;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 IPMIDRV;IPMIDRV;c:\windows\system32\drivers\IPMIDrv.sys [x]
R3 iScsiPrt;Ovladač iScsiPort;c:\windows\system32\drivers\msiscsi.sys [x]
R3 KeyIso;Izolace klíče CNG;c:\windows\system32\lsass.exe [x]
R3 KtmRm;Služba KTMRM pro koordinátor DTC;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 lltdsvc;Mapovač zjišťování topologie linkové vrstvy;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 LSI_FC;LSI_FC;c:\windows\system32\DRIVERS\lsi_fc.sys [x]
R3 LSI_SAS;LSI_SAS;c:\windows\system32\DRIVERS\lsi_sas.sys [x]
R3 LSI_SAS2;LSI_SAS2;c:\windows\system32\DRIVERS\lsi_sas2.sys [x]
R3 LSI_SCSI;LSI_SCSI;c:\windows\system32\DRIVERS\lsi_scsi.sys [x]
R3 Mcx2Svc;Služba zařízení Media Center Extender;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 megasas;megasas;c:\windows\system32\DRIVERS\megasas.sys [x]
R3 mpio;Ovladač sběrnice Microsoft Multi-Path;c:\windows\system32\drivers\mpio.sys [x]
R3 msdsm;Specifický modul zařízení Microsoft Multi-Path;c:\windows\system32\drivers\msdsm.sys [x]
R3 mshidkmdf;Pass-through HID to KMDF Filter Driver;c:\windows\System32\drivers\mshidkmdf.sys [x]
R3 MSiSCSI;Služba iniciátoru iSCSI společnosti Microsoft;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 MsRPC;MsRPC; [x]
R3 MTConfig;Microsoft Input Configuration Driver;c:\windows\system32\DRIVERS\MTConfig.sys [x]
R3 NativeWifiP;NativeWiFi Filter;c:\windows\system32\DRIVERS\nwifi.sys [x]
R3 NdisCap;NDIS Capture LightWeight Filter;c:\windows\system32\DRIVERS\ndiscap.sys [x]
R3 nfrd960;nfrd960;c:\windows\system32\DRIVERS\nfrd960.sys [x]
R3 PeerDistSvc;BranchCache;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 PerfHost;Hostitel knihoven DLL čítačů výkonu;c:\windows\SysWow64\perfhost.exe [2009-07-14 20992]
R3 pla;Výstrahy a protokolování výkonu;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 PNRPAutoReg;Služba publikování názvu počítače pomocí protokolu PNRP;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf.sys [x]
R3 ql2300;ql2300;c:\windows\system32\DRIVERS\ql2300.sys [x]
R3 ql40xx;ql40xx;c:\windows\system32\DRIVERS\ql40xx.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 s3cap;s3cap;c:\windows\system32\drivers\vms3cap.sys [x]
R3 scfilter;Ovladač filtru čipových karet třídy PnP;c:\windows\system32\DRIVERS\scfilter.sys [x]
R3 SDRSVC;Windows Zálohování;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 Secunia PSI Agent;Secunia PSI Agent;c:\program files (x86)\Secunia\PSI\PSIA.exe [2011-01-10 993848]
R3 SensrSvc;Adaptivní jas;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 SessionEnv;Konfigurace vzdálené plochy;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 sffp_mmc;Ovladač protokolu úložiště SFF pro konzolu MMC;c:\windows\system32\drivers\sffp_mmc.sys [x]
R3 SiSRaid4;SiSRaid4;c:\windows\system32\DRIVERS\sisraid4.sys [x]
R3 Smb;Protokol TCP/IP a TCP/IPv6 orientovaný na zprávy (relace SMB);c:\windows\system32\DRIVERS\smb.sys [x]
R3 sppuinotify;Služba Oznámení platformy SPP;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 stexstor;stexstor;c:\windows\system32\DRIVERS\stexstor.sys [x]
R3 storvsc;storvsc;c:\windows\system32\drivers\storvsc.sys [x]
R3 Synth3dVsc;Synth3dVsc; [x]
R3 TBS;Služba TPM Base Services;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 THREADORDER;Server pro řazení podprocesů;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 TrustedInstaller;Instalační služba modulů systému Windows;c:\windows\servicing\TrustedInstaller.exe [2010-11-20 194048]
R3 tssecsrv;Remote Desktop Services Security Filter Driver;c:\windows\system32\DRIVERS\tssecsrv.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub; [x]
R3 UI0Detect;Zjišťování interaktivních služeb;c:\windows\system32\UI0Detect.exe [x]
R3 uliagpkx;Filtr sběrnice Uli AGP;c:\windows\system32\drivers\uliagpkx.sys [x]
R3 UmRdpService;Přesměrovač portů uživatelského režimu služby Vzdálená plocha;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 usbcir;Infračervený přijímač eHome (USBCIR);c:\windows\system32\drivers\usbcir.sys [x]
R3 UxSms;Správce relací správce oken plochy;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 VaultSvc;Správce pověření;c:\windows\system32\lsass.exe [x]
R3 VGPU;VGPU; [x]
R3 vhdmp;vhdmp;c:\windows\system32\drivers\vhdmp.sys [x]
R3 VMBusHID;VMBusHID;c:\windows\system32\drivers\VMBusHID.sys [x]
R3 vsmraid;vsmraid;c:\windows\system32\DRIVERS\vsmraid.sys [x]
R3 vwifibus;Ovladač sběrnice Virtual WiFi;c:\windows\System32\drivers\vwifibus.sys [x]
R3 WacomPen;Wacom Serial Pen HID Driver;c:\windows\system32\DRIVERS\wacompen.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 wbengine;Služba jádra pro zálohování dat na úrovni bloků;c:\windows\system32\wbengine.exe [x]
R3 WbioSrvc;Biometrická služba systému Windows;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 wcncsvc;Technologie Windows Connect Now – Registrátor konfigurací;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 WcsPlugInService;Systém barev systému Windows;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 Wd;Wd;c:\windows\system32\DRIVERS\wd.sys [x]
R3 WdiServiceHost;Hostitel diagnostické služby;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 WdiSystemHost;Hostitel diagnostického systému;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 Wecsvc;Sběr událostí systému Windows;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 wercplsupport;Podpora ovládacího panelu Oznámení a řešení problémů;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 WIMMount;WIMMount;c:\windows\system32\drivers\wimmount.sys [2009-07-14 22096]
R3 WinDefend;Windows Defender;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 WinRM;Vzdálená správa systému Windows (WS-Management);c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 WPCSvc;Parental Controls;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 WwanSvc;Automatická konfigurace sítě WWAN;c:\windows\system32\svchost.exe [2009-07-14 27136]
R4 CertPropSvc;Šíření certifikátů;c:\windows\system32\svchost.exe [2009-07-14 27136]
R4 clr_optimization_v2.0.50727_64;Microsoft .NET Framework NGEN v2.0.50727_X64;c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [2009-06-10 89920]
R4 CscService;Offline soubory;c:\windows\System32\svchost.exe [2009-07-14 27136]
R4 fdPHost;Hostitel poskytovatele rozpoznávání funkce;c:\windows\system32\svchost.exe [2009-07-14 27136]
R4 FDResPub;Publikování prostředků rozpoznávání funkcí;c:\windows\system32\svchost.exe [2009-07-14 27136]
R4 PcaSvc;Program Compatibility Assistant Service;c:\windows\system32\svchost.exe [2009-07-14 27136]
R4 SCPolicySvc;Zásady odebrání čipové karty;c:\windows\system32\svchost.exe [2009-07-14 27136]
R4 SysMain;Superfetch;c:\windows\system32\svchost.exe [2009-07-14 27136]
R4 TabletInputService;Služba Vstupní panel počítače Tablet PC;c:\windows\System32\svchost.exe [2009-07-14 27136]
R4 WerSvc;Služba Zasílání zpráv o chybách systému Windows;c:\windows\System32\svchost.exe [2009-07-14 27136]
R4 Wlansvc;Automatická konfigurace sítě WLAN;c:\windows\system32\svchost.exe [2009-07-14 27136]
R4 WPDBusEnum;Služba Výčet přenosných zařízení;c:\windows\system32\svchost.exe [2009-07-14 27136]
S0 amdxata;amdxata;c:\windows\system32\drivers\amdxata.sys [x]
S0 CLFS;Systém souborů CLFS;c:\windows\System32\CLFS.sys [x]
S0 CNG;CNG;c:\windows\System32\Drivers\cng.sys [x]
S0 FileInfo;File Information FS MiniFilter;c:\windows\system32\drivers\fileinfo.sys [x]
S0 fvevol;Ovladač filtru nástroje Bitlocker Drive Encryption;c:\windows\System32\DRIVERS\fvevol.sys [x]
S0 hwpolicy;Hardware Policy Driver;c:\windows\System32\drivers\hwpolicy.sys [x]
S0 KSecPkg;KSecPkg;c:\windows\System32\Drivers\ksecpkg.sys [x]
S0 msahci;msahci;c:\windows\system32\drivers\msahci.sys [x]
S0 msisadrv;msisadrv;c:\windows\system32\drivers\msisadrv.sys [x]
S0 pcw;Performance Counters for Windows Driver;c:\windows\System32\drivers\pcw.sys [x]
S0 rdyboost;ReadyBoost;c:\windows\System32\drivers\rdyboost.sys [x]
S0 spldr;Security Processor Loader Driver; [x]
S0 storflt;Diskový ovladač filtru akcelerace sběrnice virtuálního počítače;c:\windows\system32\drivers\vmstorfl.sys [x]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\N360x64\0403000.005\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360x64\0403000.005\SYMEFA64.SYS [x]
S0 vdrvroot;Ovladač rozpoznávacího modulu virtuální jednotky společnosti Microsoft;c:\windows\system32\drivers\vdrvroot.sys [x]
S0 vmbus;Sběrnice virtuálního počítače;c:\windows\system32\drivers\vmbus.sys [x]
S0 volmgr;Ovladač správce svazků;c:\windows\system32\drivers\volmgr.sys [x]
S0 volmgrx;Správce dynamických svazků;c:\windows\System32\drivers\volmgrx.sys [x]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\Definitions\BASHDefs\20110309.001\BHDrvx64.sys [2011-02-25 1124472]
S1 blbdrive;blbdrive;c:\windows\system32\DRIVERS\blbdrive.sys [x]
S1 CSC;Ovladač souborů pro režim offline;c:\windows\system32\drivers\csc.sys [x]
S1 DfsC;DFS Namespace Client Driver;c:\windows\system32\Drivers\dfsc.sys [x]
S1 discache;System Attribute Cache;c:\windows\system32\drivers\discache.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\Definitions\IPSDefs\20110317.002\IDSvia64.sys [2011-01-31 476792]
S1 nsiproxy;NSI proxy service driver.;c:\windows\system32\drivers\nsiproxy.sys [x]
S1 RDPENCDD;RDP Encoder Mirror Driver;c:\windows\system32\drivers\rdpencdd.sys [x]
S1 RDPREFMP;Reflector Display Driver used to gain access to graphics data;c:\windows\system32\drivers\rdprefmp.sys [x]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [2010-02-17 14920]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [2010-02-17 12360]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\N360x64\0403000.005\Ironx64.SYS [x]
S1 SYMTDIv;Symantec Vista Network Dispatch Driver;c:\windows\System32\Drivers\N360x64\0403000.005\SYMTDIV.SYS [x]
S1 tdx;Ovladač pro podporu zastaralého rozhraní TDI NetIO;c:\windows\system32\DRIVERS\tdx.sys [x]
S1 Wanarpv6;Ovladač pro vzdálený přístup IPv6 ARP;c:\windows\system32\DRIVERS\wanarp.sys [x]
S1 WfpLwf;WFP Lightweight Filter;c:\windows\system32\DRIVERS\wfplwf.sys [x]
S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [2010-06-29 128752]
S2 AudioEndpointBuilder;Koncové vytváření služby Windows Audio;c:\windows\System32\svchost.exe [2009-07-14 27136]
S2 BFE;Služba BFE (Base Filtering Engine);c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 FontCache;Mezipaměť písem Windows;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 gpsvc;Klient zásad skupiny;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 IKEEXT;Služba IKE and AuthIP IPsec Keying Modules;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 lltdio;Link-Layer Topology Discovery Mapper I/O Driver;c:\windows\system32\DRIVERS\lltdio.sys [x]
S2 luafv;Virtualizace souborů nástroje Řízení uživatelských účtů;c:\windows\system32\drivers\luafv.sys [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2010-12-20 363344]
S2 MMCSS;Služba Plánovač multimédií;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 MpsSvc;Brána Windows Firewall;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 N360;Norton 360;c:\program files (x86)\Norton 360\Engine\4.3.0.5\ccSvcHst.exe [2010-02-26 126392]
S2 NlaSvc;Sledování umístění v síti (NLA);c:\windows\System32\svchost.exe [2009-07-14 27136]
S2 nsi;Služba rozhraní síťového úložiště;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 PEAUTH;PEAUTH;c:\windows\system32\drivers\peauth.sys [x]
S2 PhenomMsrTweaker;PhenomMsrTweaker service;c:\program files\PhenomMsrTweaker\PhenomMsrTweakerService.exe [2010-06-03 188416]
S2 Power;Napájení;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 ProfSvc;Služba Profil uživatele;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 RpcEptMapper;Mapovač koncových bodů protokolu RPC;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 Secunia Update Agent;Secunia Update Agent;c:\program files (x86)\Secunia\PSI\sua.exe [2011-01-10 399416]
S2 tcpipreg;TCP/IP Registry Compatibility;c:\windows\system32\drivers\tcpipreg.sys [x]
S3 1394ohci;Hostitelský řadič pro rozhraní OHCI standardu 1394;c:\windows\system32\drivers\1394ohci.sys [x]
S3 bowser;Ovladač podpory prohlížeče;c:\windows\system32\DRIVERS\bowser.sys [x]
S3 CompositeBus;Ovladač rozpoznávacího modulu složené sběrnice;c:\windows\system32\drivers\CompositeBus.sys [x]
S3 DXGKrnl;LDDM Graphics Subsystem;c:\windows\System32\drivers\dxgkrnl.sys [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-02-20 132656]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 monitor;Služba ovladače funkce třídy monitorů Microsoft;c:\windows\system32\DRIVERS\monitor.sys [x]
S3 mpsdrv;Ovladač ověření brány Windows Firewall;c:\windows\system32\drivers\mpsdrv.sys [x]
S3 mrxsmb10;Mini-přesměrovač SMB 1.x;c:\windows\system32\DRIVERS\mrxsmb10.sys [x]
S3 mrxsmb20;Mini-přesměrovač SMB 2.0;c:\windows\system32\DRIVERS\mrxsmb20.sys [x]
S3 netprofm;Služba seznamu sítí;c:\windows\System32\svchost.exe [2009-07-14 27136]
S3 RasAgileVpn;WAN Miniport (IKEv2);c:\windows\system32\DRIVERS\AgileVpn.sys [x]
S3 rdpbus;Remote Desktop Device Redirector Bus Driver;c:\windows\system32\DRIVERS\rdpbus.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 skfiltv;skfiltv;c:\windows\system32\drivers\skfiltv.sys [x]
S3 srv2;Ovladač pro server SMB 2.xxx;c:\windows\system32\DRIVERS\srv2.sys [x]
S3 srvnet;srvnet;c:\windows\system32\DRIVERS\srvnet.sys [x]
S3 tunnel;Microsoft Tunnel Miniport Adapter Driver;c:\windows\system32\DRIVERS\tunnel.sys [x]
S3 umbus;Ovladač sběrnice UMBus Enumerator;c:\windows\system32\drivers\umbus.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [x]
S3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files\PhenomMsrTweaker\WinRing0x64.sys [2010-06-03 14544]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS QWAVE wcncsvc
DcomLaunch REG_MULTI_SZ Power PlugPlay DcomLaunch
wcssvc REG_MULTI_SZ WcsPlugInService
.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
AeLookupSvc
CertPropSvc
SCPolicySvc
lanmanserver
gpsvc
AudioSrv
FastUserSwitchingCompatibility
Nla
NWCWorkstation
SRService
Wmi
WmdmPmSp
TermService
wuauserv
BITS
ShellHWDetection
LogonHours
PCAudit
helpsvc
uploadmgr
iphlpsvc
msiscsi
schedule
SessionEnv
winmgmt
AppMgmt
.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
sppuinotify
.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - LocalServiceNetworkRestricted
BthHFSrv
.
.
Obsah adresáře 'Naplánované úlohy'
.
2011-03-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1226735113-4089776709-3244801095-1000Core.job
- c:\users\Dada\AppData\Local\Google\Update\GoogleUpdate.exe [2011-03-16 01:23]
.
2011-03-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1226735113-4089776709-3244801095-1000UA.job
- c:\users\Dada\AppData\Local\Google\Update\GoogleUpdate.exe [2011-03-16 01:23]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SharingPrivate]
@="{08244EE6-92F0-47f2-9FC9-929BAA2E7235}"
[HKEY_CLASSES_ROOT\CLSID\{08244EE6-92F0-47f2-9FC9-929BAA2E7235}]
2010-11-20 13:27 509952 ----a-w- c:\windows\System32\ntshrui.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2010-10-28 1680976]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
AeLookupSvc
CertPropSvc
SCPolicySvc
lanmanserver
gpsvc
IKEEXT
AudioSrv
FastUserSwitchingCompatibility
Nla
NWCWorkstation
SRService
Wmi
WmdmPmSp
TermService
wuauserv
BITS
ShellHWDetection
LogonHours
PCAudit
helpsvc
uploadmgr
iphlpsvc
seclogon
AppInfo
msiscsi
MMCSS
winmgmt
SessionEnv
browser
EapHost
schedule
hkmsvc
wercplsupport
ProfSvc
Themes
BDESVC
AppMgmt
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalSystemNetworkRestricted
homegrouplistener
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
WdiServiceHost
sppuinotify
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetworkService
lanmanworkstation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalServiceNetworkRestricted
BthHFSrv
homegroupprovider
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748449} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\programdata\LangSoft\WebIE.dll
FF - ProfilePath - c:\users\Dada\AppData\Roaming\Mozilla\Firefox\Profiles\goss3y1q.default\
FF - prefs.js: browser.search.selectedEngine - Seznam
FF - prefs.js: browser.startup.homepage - www.gogle.com
FF - prefs.js: keyword.URL - hxxp://search.avg.com/route/?d=4d4c71e0&v=6.011.025.001&i=26&tp=ab&iy=&ychte=us&lng=cs&q=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: Seznam lištička: {ea614400-e918-4741-9a97-7a972ff7c30b} - c:\program files (x86)\Mozilla Firefox\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
FF - Ext: WebTran: {003D3EDC-99B9-4a34-9C20-60CB94F7E829} - %profile%\extensions\{003D3EDC-99B9-4a34-9C20-60CB94F7E829}
FF - Ext: Surf Canyon - Search Engine Assistant: {75623d5d-4683-402a-b610-ac4bab767c86} - %profile%\extensions\{75623d5d-4683-402a-b610-ac4bab767c86}
FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
FF - Ext: Seznam lištička: {ea614400-e918-4741-9a97-7a972ff7c30b} - %profile%\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
FF - Ext: Search Image Everywhere: images@snark.co.il - %profile%\extensions\images@snark.co.il
FF - Ext: NoScript: {73a6fe31-595d-460b-a920-fcc0f8843232} - %profile%\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}
FF - Ext: Norton IPS: {BBDA0591-3099-440a-AA10-41764D9DB4DB} - c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\IPSFFPlgn
FF - Ext: Norton Toolbar: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62} - c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\coFFPlgn
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.urlbar.autofill - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.notify.backoffcount - 5
FF - user.js: content.notify.interval - 600000
FF - user.js: content.notify.ontimer - true
FF - user.js: content.switch.threshold - 600000
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 8
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: network.http.pipelining - true
FF - user.js: network.http.pipelining.firstrequest - true
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.proxy.pipelining - true
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
SafeBoot-WudfPf
SafeBoot-WudfRd
SafeBoot-sacsvr
SafeBoot-vmms
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\N360]
"ImagePath"="\"c:\program files (x86)\Norton 360\Engine\4.3.0.5\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files (x86)\Norton 360\Engine\4.3.0.5\diMaster.dll\" /prefetch:1"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10m_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10m_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10m.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10m.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10m.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10m.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2011-03-19 17:07:10
ComboFix-quarantined-files.txt 2011-03-19 16:07
.
Před spuštěním: Volných bajtů: 10 139 320 320
Po spuštění: Volných bajtů: 10 014 752 768
.
- - End Of File - - BABBC788596F28BD0F4E8C185A10AEA8

[motji]

Změnilo se něco?
Pak Vám domažu zbytky po AVG, je možné že je to tím.

[Davidov]

Zatim to vypada vporadku ale nebyla by utilita na to promazani po Avgcku dik.

[motji]

Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka

Kód: Vybrat vše

Firefox::
FF - ProfilePath - c:\users\Dada\AppData\Roaming\Mozilla\Firefox\Profiles\goss3y1q.default\
FF - prefs.js: keyword.URL - hxxp://search.avg.com/route/?d=4d4c71e0 ... &lng=cs&q=

driver::
VGPU
Avgmfx64
Avgfwfd
AVGIDSEH

-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:




-po aplikaci na Vás vypadne další log,vložte ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci