zdravim, pri kontrole escanem mi to naslo 5 infekci, davam tu log RSIT, muzete se mi na to prosim podivat, děkuji
Logfile of random's system information tool 1.08 (written by random/random)
Run by user at 2011-03-24 15:30:38
Microsoft Windows 7 Starter Service Pack 1
System drive C: has 53 GB (24%) free of 225 GB
Total RAM: 987 MB (36% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:31:23, on 24.3.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\ProgramData\Badoo\Badoo Desktop\1.2.22.828\Badoo.Desktop.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\user\temp\Downloads\RSIT.exe
C:\Program Files\trend micro\user.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://espanol.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId= ... .yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Pomocník pro prihlášení ke službe Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\RunOnce: [B Register C:\Program Files\DivX\DivX Plus Player\DSEPlugins\Direct3DVideoOutput.dll] "C:\Windows\system32\rundll32.exe" "C:\Program Files\DivX\DivX Plus Player\DSEPlugins\Direct3DVideoOutput.dll",DllRegisterServer
O4 - HKLM\..\RunOnce: [B Register C:\Program Files\DivX\DivX Plus Player\DSEPlugins\DivXPlaybackModule.dll] "C:\Windows\system32\rundll32.exe" "C:\Program Files\DivX\DivX Plus Player\DSEPlugins\DivXPlaybackModule.dll",DllRegisterServer
O4 - HKLM\..\RunOnce: [B Register C:\Program Files\DivX\DivX Plus Player\DPXPlugins\DPXBannerAdPlugin.dll] "C:\Windows\system32\rundll32.exe" "C:\Program Files\DivX\DivX Plus Player\DPXPlugins\DPXBannerAdPlugin.dll",DllRegisterServer
O4 - HKLM\..\RunOnce: [B Register C:\Program Files\DivX\DivX Plus Player\DPXPlugins\DPXDownloadManagerPlugin.dll] "C:\Windows\system32\rundll32.exe" "C:\Program Files\DivX\DivX Plus Player\DPXPlugins\DPXDownloadManagerPlugin.dll",DllRegisterServer
O4 - HKLM\..\RunOnce: [B Register C:\Program Files\DivX\DivX Plus Player\DPXPlugins\DPXMediaManagerPlugin.dll] "C:\Windows\system32\rundll32.exe" "C:\Program Files\DivX\DivX Plus Player\DPXPlugins\DPXMediaManagerPlugin.dll",DllRegisterServer
O4 - HKLM\..\RunOnce: [B Register C:\Program Files\DivX\DivX Plus Player\DPXPlugins\DPXPlayerPlugin.dll] "C:\Windows\system32\rundll32.exe" "C:\Program Files\DivX\DivX Plus Player\DPXPlugins\DPXPlayerPlugin.dll",DllRegisterServer
O4 - HKCU\..\Run: [Badoo Desktop] "C:\ProgramData\Badoo\Badoo Desktop\1.2.22.828\Badoo.Desktop.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Pridat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Pridat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O16 - DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} (Windows Live OneCare safety scanner control) - http://cdn.scan.onecare.live.com/resour ... cctrl2.cab
O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} (WRC Class) - http://trial.trymicrosoftoffice.com/tri ... /wrc32.ocx
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_5576240ee6baaa25\aestsrv.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: DeviceVM Meta Data Export Service (DvmMDES) - DeviceVM, Inc. - C:\SPLASH.SYS\config\DVMExportService.exe
O23 - Service: ebjlxdcjduccrc - asm - c:\windows\system32\ztpfzyq.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\HP Game Console\GameConsoleService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: MWAgent - MicroWorld Technologies Inc. - C:\PROGRA~1\COMMON~1\MICROW~1\Agent\MWASER.EXE
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_5576240ee6baaa25\STacSV.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
--
End of file - 9650 bytes
======Scheduled tasks folder======
C:\Windows\tasks\AWC Update.job
C:\Windows\tasks\SmartDefrag.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{074C1DC5-9320-4A9A-947D-C042949C6216}]
ContributeBHO Class - C:\Program Files\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll [2010-03-27 164312]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-23 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-09-22 191792]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro prihlášení ke službe Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-12 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - Contribute Toolbar - C:\Program Files\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll [2010-03-27 164312]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-10-16 150552]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-11-03 1594664]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-06-05 186904]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray.exe [2009-10-12 495708]
"SwitchBoard"=C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-08-12 2215064]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"B Register C:\Program Files\DivX\DivX Plus Player\DSEPlugins\Direct3DVideoOutput.dll"=C:\Program Files\DivX\DivX Plus Player\DSEPlugins\Direct3DVideoOutput.dll [2010-11-12 503808]
"B Register C:\Program Files\DivX\DivX Plus Player\DSEPlugins\DivXPlaybackModule.dll"=C:\Program Files\DivX\DivX Plus Player\DSEPlugins\DivXPlaybackModule.dll [2010-11-12 1966080]
"B Register C:\Program Files\DivX\DivX Plus Player\DPXPlugins\DPXBannerAdPlugin.dll"=C:\Program Files\DivX\DivX Plus Player\DPXPlugins\DPXBannerAdPlugin.dll [2010-11-12 86016]
"B Register C:\Program Files\DivX\DivX Plus Player\DPXPlugins\DPXDownloadManagerPlugin.dll"=C:\Program Files\DivX\DivX Plus Player\DPXPlugins\DPXDownloadManagerPlugin.dll [2010-11-12 63488]
"B Register C:\Program Files\DivX\DivX Plus Player\DPXPlugins\DPXMediaManagerPlugin.dll"=C:\Program Files\DivX\DivX Plus Player\DPXPlugins\DPXMediaManagerPlugin.dll [2010-11-12 319488]
"B Register C:\Program Files\DivX\DivX Plus Player\DPXPlugins\DPXPlayerPlugin.dll"=C:\Program Files\DivX\DivX Plus Player\DPXPlugins\DPXPlayerPlugin.dll [2010-11-12 1089536]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Badoo Desktop"=C:\ProgramData\Badoo\Badoo Desktop\1.2.22.828\Badoo.Desktop.exe [2010-10-29 983552]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-23 218112]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2011-03-24 15:20:32 ----D---- C:\Program Files\trend micro
2011-03-24 15:20:30 ----D---- C:\rsit
2011-03-24 14:23:52 ----D---- C:\Windows\system32\SPReview
2011-03-24 14:22:28 ----D---- C:\Windows\system32\EventProviders
2011-03-24 13:48:46 ----A---- C:\Windows\system32\WSDApi.dll
2011-03-24 13:48:45 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2011-03-24 13:48:45 ----A---- C:\Windows\system32\PresentationHost.exe
2011-03-24 13:48:44 ----A---- C:\Windows\system32\tquery.dll
2011-03-24 13:48:44 ----A---- C:\Windows\system32\mssvp.dll
2011-03-24 13:48:43 ----A---- C:\Windows\system32\StructuredQuery.dll
2011-03-24 13:48:43 ----A---- C:\Windows\system32\mssrch.dll
2011-03-24 13:48:43 ----A---- C:\Windows\system32\mssphtb.dll
2011-03-24 13:48:40 ----A---- C:\Windows\system32\drivers\volsnap.sys
2011-03-24 13:48:40 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2011-03-24 13:48:40 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2011-03-24 13:48:40 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2011-03-24 13:48:39 ----A---- C:\Windows\system32\drivers\usbport.sys
2011-03-24 13:48:39 ----A---- C:\Windows\system32\drivers\usbhub.sys
2011-03-24 13:48:39 ----A---- C:\Windows\system32\drivers\usbehci.sys
2011-03-24 13:48:39 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2011-03-24 13:48:38 ----A---- C:\Windows\system32\umb.dll
2011-03-24 13:48:38 ----A---- C:\Windows\system32\drivers\umbus.sys
2011-03-24 13:48:32 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2011-03-24 13:48:27 ----A---- C:\Windows\system32\drivers\sdbus.sys
2011-03-24 13:48:26 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2011-03-24 13:48:22 ----A---- C:\Windows\system32\drivers\nvstor.sys
2011-03-24 13:48:22 ----A---- C:\Windows\system32\drivers\nvraid.sys
2011-03-24 13:48:20 ----A---- C:\Windows\system32\MPSSVC.dll
2011-03-24 13:48:20 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2011-03-24 13:48:18 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2011-03-24 13:48:13 ----A---- C:\Windows\system32\mscories.dll
2011-03-24 13:48:13 ----A---- C:\Windows\system32\mscorier.dll
2011-03-24 13:48:13 ----A---- C:\Windows\system32\mscoree.dll
2011-03-24 13:48:12 ----A---- C:\Windows\system32\netfxperf.dll
2011-03-24 13:48:12 ----A---- C:\Windows\system32\dfshim.dll
2011-03-24 13:48:10 ----A---- C:\Windows\system32\Narrator.exe
2011-03-24 13:48:10 ----A---- C:\Windows\system32\NAPHLPR.DLL
2011-03-24 13:48:10 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2011-03-24 13:48:10 ----A---- C:\Windows\system32\drivers\msdsm.sys
2011-03-24 13:48:10 ----A---- C:\Windows\system32\drivers\msahci.sys
2011-03-24 13:48:10 ----A---- C:\Windows\system32\drivers\ataport.sys
2011-03-24 13:48:08 ----A---- C:\Windows\system32\winhttp.dll
2011-03-24 13:48:08 ----A---- C:\Windows\system32\drivers\scsiport.sys
2011-03-24 13:48:08 ----A---- C:\Windows\system32\drivers\mpio.sys
2011-03-24 13:48:07 ----A---- C:\Windows\system32\wpd_ci.dll
2011-03-24 13:48:02 ----A---- C:\Windows\system32\zipfldr.dll
2011-03-24 13:48:01 ----A---- C:\Windows\system32\wwanprotdim.dll
2011-03-24 13:48:01 ----A---- C:\Windows\system32\wwanconn.dll
2011-03-24 13:48:01 ----A---- C:\Windows\system32\wusa.exe
2011-03-24 13:48:01 ----A---- C:\Windows\system32\CertEnroll.dll
2011-03-24 13:48:00 ----A---- C:\Windows\system32\wsdchngr.dll
2011-03-24 13:48:00 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2011-03-24 13:48:00 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2011-03-24 13:47:59 ----A---- C:\Windows\system32\wpdshext.dll
2011-03-24 13:47:59 ----A---- C:\Windows\system32\wpdbusenum.dll
2011-03-24 13:47:59 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2011-03-24 13:47:58 ----A---- C:\Windows\system32\wkssvc.dll
2011-03-24 13:47:57 ----A---- C:\Windows\system32\WMVSDECD.DLL
2011-03-24 13:47:56 ----A---- C:\Windows\system32\WMVDECOD.DLL
2011-03-24 13:47:56 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2011-03-24 13:47:54 ----A---- C:\Windows\system32\framedynos.dll
2011-03-24 13:47:54 ----A---- C:\Windows\system32\framedyn.dll
2011-03-24 13:47:53 ----A---- C:\Windows\system32\wmicmiplugin.dll
2011-03-24 13:47:53 ----A---- C:\Windows\system32\wbemcomn.dll
2011-03-24 13:47:52 ----A---- C:\Windows\system32\WMADMOD.DLL
2011-03-24 13:47:52 ----A---- C:\Windows\system32\wlanui.dll
2011-03-24 13:47:52 ----A---- C:\Windows\system32\wlanmsm.dll
2011-03-24 13:47:51 ----A---- C:\Windows\system32\wlanpref.dll
2011-03-24 13:47:51 ----A---- C:\Windows\system32\wlangpui.dll
2011-03-24 13:47:51 ----A---- C:\Windows\system32\wintrust.dll
2011-03-24 13:47:51 ----A---- C:\Windows\system32\winsrv.dll
2011-03-24 13:47:51 ----A---- C:\Windows\system32\ReAgentc.exe
2011-03-24 13:47:51 ----A---- C:\Windows\system32\drivers\afd.sys
2011-03-24 13:47:50 ----A---- C:\Windows\system32\winlogon.exe
2011-03-24 13:47:50 ----A---- C:\Windows\system32\ReAgent.dll
2011-03-24 13:47:49 ----A---- C:\Windows\system32\wucltux.dll
2011-03-24 13:47:49 ----A---- C:\Windows\system32\WindowsCodecs.dll
2011-03-24 13:47:49 ----A---- C:\Windows\system32\wimserv.exe
2011-03-24 13:47:48 ----A---- C:\Windows\system32\wimgapi.dll
2011-03-24 13:47:48 ----A---- C:\Windows\system32\webservices.dll
2011-03-24 13:47:48 ----A---- C:\Windows\system32\webio.dll
2011-03-24 13:47:48 ----A---- C:\Windows\system32\fphc.dll
2011-03-24 13:47:47 ----A---- C:\Windows\system32\WebClnt.dll
2011-03-24 13:47:47 ----A---- C:\Windows\system32\wcncsvc.dll
2011-03-24 13:47:47 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2011-03-24 13:47:47 ----A---- C:\Windows\system32\davclnt.dll
2011-03-24 13:47:46 ----A---- C:\Windows\system32\audiodev.dll
2011-03-24 13:47:45 ----A---- C:\Windows\system32\wups2.dll
2011-03-24 13:47:45 ----A---- C:\Windows\system32\wuaueng.dll
2011-03-24 13:47:45 ----A---- C:\Windows\system32\WinSAT.exe
2011-03-24 13:47:44 ----A---- C:\Windows\system32\wuauclt.exe
2011-03-24 13:47:44 ----A---- C:\Windows\system32\wiaservc.dll
2011-03-24 13:47:44 ----A---- C:\Windows\system32\wiarpc.dll
2011-03-24 13:47:44 ----A---- C:\Windows\system32\wiadefui.dll
2011-03-24 13:47:43 ----A---- C:\Windows\system32\wuwebv.dll
2011-03-24 13:47:43 ----A---- C:\Windows\system32\wuapp.exe
2011-03-24 13:47:42 ----A---- C:\Windows\system32\wups.dll
2011-03-24 13:47:42 ----A---- C:\Windows\system32\wudriver.dll
2011-03-24 13:47:42 ----A---- C:\Windows\system32\wuapi.dll
2011-03-24 13:47:41 ----A---- C:\Windows\system32\ws2_32.dll
2011-03-24 13:47:41 ----A---- C:\Windows\system32\wpdwcn.dll
2011-03-24 13:47:41 ----A---- C:\Windows\system32\wmpmde.dll
2011-03-24 13:47:40 ----A---- C:\Windows\twain_32.dll
2011-03-24 13:47:39 ----A---- C:\Windows\system32\wiavideo.dll
2011-03-24 13:47:38 ----A---- C:\Windows\system32\WsmSvc.dll
2011-03-24 13:47:38 ----A---- C:\Windows\system32\WinSATAPI.dll
2011-03-24 13:47:37 ----A---- C:\Windows\system32\WPDSp.dll
2011-03-24 13:47:37 ----A---- C:\Windows\system32\wkscli.dll
2011-03-24 13:47:36 ----A---- C:\Windows\system32\VSSVC.exe
2011-03-24 13:47:36 ----A---- C:\Windows\system32\mswsock.dll
2011-03-24 13:47:35 ----A---- C:\Windows\system32\vssapi.dll
2011-03-24 13:47:35 ----A---- C:\Windows\system32\vdsutil.dll
2011-03-24 13:47:35 ----A---- C:\Windows\system32\vds.exe
2011-03-24 13:47:35 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2011-03-24 13:47:34 ----A---- C:\Windows\system32\MSVidCtl.dll
2011-03-24 13:47:34 ----A---- C:\Windows\system32\msvidc32.dll
2011-03-24 13:47:34 ----A---- C:\Windows\system32\msvfw32.dll
2011-03-24 13:47:34 ----A---- C:\Windows\system32\msrle32.dll
2011-03-24 13:47:34 ----A---- C:\Windows\system32\mciavi32.dll
2011-03-24 13:47:34 ----A---- C:\Windows\system32\iccvid.dll
2011-03-24 13:47:34 ----A---- C:\Windows\system32\avifil32.dll
2011-03-24 13:47:33 ----A---- C:\Windows\system32\VAN.dll
2011-03-24 13:47:33 ----A---- C:\Windows\system32\cca.dll
2011-03-24 13:47:32 ----A---- C:\Windows\system32\vdsbas.dll
2011-03-24 13:47:30 ----A---- C:\Windows\system32\usp10.dll
2011-03-24 13:47:30 ----A---- C:\Windows\system32\userinit.exe
2011-03-24 13:47:30 ----A---- C:\Windows\system32\userenv.dll
2011-03-24 13:47:30 ----A---- C:\Windows\system32\umpo.dll
2011-03-24 13:47:29 ----A---- C:\Windows\system32\usercpl.dll
2011-03-24 13:47:29 ----A---- C:\Windows\system32\user32.dll
2011-03-24 13:47:29 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2011-03-24 13:47:28 ----A---- C:\Windows\system32\upnp.dll
2011-03-24 13:47:28 ----A---- C:\Windows\system32\unimdmat.dll
2011-03-24 13:47:28 ----A---- C:\Windows\system32\UIRibbonRes.dll
2011-03-24 13:47:28 ----A---- C:\Windows\system32\drivers\USBCAMD.sys
2011-03-24 13:47:28 ----A---- C:\Windows\system32\djoin.exe
2011-03-24 13:47:27 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2011-03-24 13:47:27 ----A---- C:\Windows\system32\UIRibbon.dll
2011-03-24 13:47:27 ----A---- C:\Windows\system32\drivers\udfs.sys
2011-03-24 13:47:26 ----A---- C:\Windows\system32\tzutil.exe
2011-03-24 13:47:26 ----A---- C:\Windows\system32\twext.dll
2011-03-24 13:47:26 ----A---- C:\Windows\system32\TRAPI.dll
2011-03-24 13:47:26 ----A---- C:\Windows\system32\drivers\tunnel.sys
2011-03-24 13:47:25 ----A---- C:\Windows\system32\w32tm.exe
2011-03-24 13:47:25 ----A---- C:\Windows\system32\thumbcache.dll
2011-03-24 13:47:24 ----A---- C:\Windows\system32\themeui.dll
2011-03-24 13:47:24 ----A---- C:\Windows\system32\themecpl.dll
2011-03-24 13:47:23 ----A---- C:\Windows\system32\termmgr.dll
2011-03-24 13:47:23 ----A---- C:\Windows\system32\tcpipcfg.dll
2011-03-24 13:47:23 ----A---- C:\Windows\system32\netiougc.exe
2011-03-24 13:47:23 ----A---- C:\Windows\system32\netiohlp.dll
2011-03-24 13:47:23 ----A---- C:\Windows\system32\drivers\tdx.sys
2011-03-24 13:47:23 ----A---- C:\Windows\system32\drivers\tdi.sys
2011-03-24 13:47:22 ----A---- C:\Windows\system32\schedsvc.dll
2011-03-24 13:47:22 ----A---- C:\Windows\system32\schedcli.dll
2011-03-24 13:47:22 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-03-24 13:47:22 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2011-03-24 13:47:21 ----A---- C:\Windows\system32\taskschd.dll
2011-03-24 13:47:21 ----A---- C:\Windows\system32\taskmgr.exe
2011-03-24 13:47:21 ----A---- C:\Windows\system32\taskhost.exe
2011-03-24 13:47:21 ----A---- C:\Windows\system32\taskeng.exe
2011-03-24 13:47:21 ----A---- C:\Windows\system32\taskbarcpl.dll
2011-03-24 13:47:21 ----A---- C:\Windows\system32\tapisrv.dll
2011-03-24 13:47:20 ----A---- C:\Windows\system32\wavemsp.dll
2011-03-24 13:47:20 ----A---- C:\Windows\system32\takeown.exe
2011-03-24 13:47:19 ----A---- C:\Windows\system32\tabcal.exe
2011-03-24 13:47:18 ----A---- C:\Windows\system32\MultiDigiMon.exe
2011-03-24 13:47:18 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2011-03-24 13:47:17 ----A---- C:\Windows\system32\termsrv.dll
2011-03-24 13:47:17 ----A---- C:\Windows\system32\remotepg.dll
2011-03-24 13:47:17 ----A---- C:\Windows\system32\input.dll
2011-03-24 13:47:16 ----A---- C:\Windows\system32\wtsapi32.dll
2011-03-24 13:47:16 ----A---- C:\Windows\system32\tsgqec.dll
2011-03-24 13:47:16 ----A---- C:\Windows\system32\SessEnv.dll
2011-03-24 13:47:16 ----A---- C:\Windows\system32\rdpencom.dll
2011-03-24 13:47:16 ----A---- C:\Windows\system32\rdpdd.dll
2011-03-24 13:47:15 ----A---- C:\Windows\system32\regapi.dll
2011-03-24 13:47:15 ----A---- C:\Windows\system32\rdpd3d.dll
2011-03-24 13:47:15 ----A---- C:\Windows\system32\perfts.dll
2011-03-24 13:47:15 ----A---- C:\Windows\system32\mstscax.dll
2011-03-24 13:47:15 ----A---- C:\Windows\system32\aaclient.dll
2011-03-24 13:47:14 ----A---- C:\Windows\system32\wisptis.exe
2011-03-24 13:47:14 ----A---- C:\Windows\system32\TabSvc.dll
2011-03-24 13:47:13 ----A---- C:\Windows\system32\winsta.dll
2011-03-24 13:47:13 ----A---- C:\Windows\system32\utildll.dll
2011-03-24 13:47:13 ----A---- C:\Windows\system32\mstask.dll
2011-03-24 13:47:13 ----A---- C:\Windows\system32\icaapi.dll
2011-03-24 13:47:13 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2011-03-24 13:47:13 ----A---- C:\Windows\system32\drivers\RDPCDD.sys
2011-03-24 13:47:12 ----A---- C:\Windows\system32\TSWorkspace.dll
2011-03-24 13:47:12 ----A---- C:\Windows\system32\mstsc.exe
2011-03-24 13:47:11 ----A---- C:\Windows\system32\RDPENCDD.dll
2011-03-24 13:47:11 ----A---- C:\Windows\system32\lsm.exe
2011-03-24 13:47:10 ----A---- C:\Windows\system32\rdpwsx.dll
2011-03-24 13:47:10 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2011-03-24 13:47:10 ----A---- C:\Windows\system32\RDPREFDD.dll
2011-03-24 13:47:10 ----A---- C:\Windows\system32\rdpcorekmts.dll
2011-03-24 13:47:10 ----A---- C:\Windows\system32\msutb.dll
2011-03-24 13:47:09 ----A---- C:\Windows\system32\wksprt.exe
2011-03-24 13:47:09 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2011-03-24 13:47:09 ----A---- C:\Windows\system32\drivers\tdpipe.sys
2011-03-24 13:47:06 ----A---- C:\Windows\system32\tsmf.dll
2011-03-24 13:47:06 ----A---- C:\Windows\system32\taskcomp.dll
2011-03-24 13:47:06 ----A---- C:\Windows\system32\rdpcfgex.dll
2011-03-24 13:47:06 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2011-03-24 13:47:06 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2011-03-24 13:47:05 ----A---- C:\Windows\system32\tlscsp.dll
2011-03-24 13:47:05 ----A---- C:\Windows\system32\srcore.dll
2011-03-24 13:47:05 ----A---- C:\Windows\system32\rdpcore.dll
2011-03-24 13:47:05 ----A---- C:\Windows\system32\lsmproxy.dll
2011-03-24 13:47:05 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2011-03-24 13:47:04 ----A---- C:\Windows\system32\systemcpl.dll
2011-03-24 13:47:04 ----A---- C:\Windows\system32\syssetup.dll
2011-03-24 13:47:04 ----A---- C:\Windows\system32\sysclass.dll
2011-03-24 13:47:04 ----A---- C:\Windows\system32\syncui.dll
2011-03-24 13:47:04 ----A---- C:\Windows\system32\spopk.dll
2011-03-24 13:47:04 ----A---- C:\Windows\system32\spbcd.dll
2011-03-24 13:47:04 ----A---- C:\Windows\system32\rstrui.exe
2011-03-24 13:47:03 ----A---- C:\Windows\system32\sxs.dll
2011-03-24 13:47:03 ----A---- C:\Windows\system32\sud.dll
2011-03-24 13:47:03 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2011-03-24 13:47:02 ----A---- C:\Windows\system32\stobject.dll
2011-03-24 13:47:02 ----A---- C:\Windows\system32\drivers\storport.sys
2011-03-24 13:47:01 ----A---- C:\Windows\system32\wsqmcons.exe
2011-03-24 13:47:01 ----A---- C:\Windows\system32\sqmapi.dll
2011-03-24 13:47:01 ----A---- C:\Windows\system32\sqlcese30.dll
2011-03-24 13:47:01 ----A---- C:\Windows\system32\spp.dll
2011-03-24 13:47:00 ----A---- C:\Windows\system32\WavDest.dll
2011-03-24 13:46:57 ----A---- C:\Windows\system32\wsnmp32.dll
2011-03-24 13:46:57 ----A---- C:\Windows\system32\inetmib1.dll
2011-03-24 13:46:56 ----A---- C:\Windows\system32\sscore.dll
2011-03-24 13:46:56 ----A---- C:\Windows\system32\srvsvc.dll
2011-03-24 13:46:56 ----A---- C:\Windows\system32\srvcli.dll
2011-03-24 13:46:56 ----A---- C:\Windows\system32\SmiEngine.dll
2011-03-24 13:46:56 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-03-24 13:46:56 ----A---- C:\Windows\system32\drivers\srv.sys
2011-03-24 13:46:55 ----A---- C:\Windows\system32\sisbkup.dll
2011-03-24 13:46:55 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-03-24 13:46:55 ----A---- C:\Windows\system32\drivers\scfilter.sys
2011-03-24 13:46:55 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-03-24 13:46:55 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-03-24 13:46:55 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-03-24 13:46:55 ----A---- C:\Windows\system32\certprop.dll
2011-03-24 13:46:55 ----A---- C:\Windows\system32\basecsp.dll
2011-03-24 13:46:54 ----A---- C:\Windows\system32\shwebsvc.dll
2011-03-24 13:46:54 ----A---- C:\Windows\system32\shunimpl.dll
2011-03-24 13:46:54 ----A---- C:\Windows\system32\shsvcs.dll
2011-03-24 13:46:53 ----A---- C:\Windows\system32\shlwapi.dll
2011-03-24 13:46:53 ----A---- C:\Windows\system32\shimgvw.dll
2011-03-24 13:46:53 ----A---- C:\Windows\system32\shgina.dll
2011-03-24 13:46:49 ----A---- C:\Windows\system32\shsetup.dll
2011-03-24 13:46:49 ----A---- C:\Windows\system32\shell32.dll
2011-03-24 13:46:49 ----A---- C:\Windows\system32\prevhost.exe
2011-03-24 13:46:48 ----A---- C:\Windows\system32\shdocvw.dll
2011-03-24 13:46:48 ----A---- C:\Windows\system32\shacct.dll
2011-03-24 13:46:48 ----A---- C:\Windows\system32\setupcl.exe
2011-03-24 13:46:48 ----A---- C:\Windows\system32\setupapi.dll
2011-03-24 13:46:48 ----A---- C:\Windows\system32\comctl32.dll
2011-03-24 13:46:47 ----A---- C:\Windows\system32\unattend.dll
2011-03-24 13:46:45 ----A---- C:\Windows\system32\setupcln.dll
2011-03-24 13:46:45 ----A---- C:\Windows\system32\ActionQueue.dll
2011-03-24 13:46:44 ----A---- C:\Windows\system32\wscapi.dll
2011-03-24 13:46:44 ----A---- C:\Windows\system32\spwizui.dll
2011-03-24 13:46:44 ----A---- C:\Windows\system32\spreview.exe
2011-03-24 13:46:44 ----A---- C:\Windows\system32\spinstall.exe
2011-03-24 13:46:44 ----A---- C:\Windows\system32\sethc.exe
2011-03-24 13:46:43 ----A---- C:\Windows\system32\vaultsvc.dll
2011-03-24 13:46:43 ----A---- C:\Windows\system32\Vault.dll
2011-03-24 13:46:43 ----A---- C:\Windows\system32\nltest.exe
2011-03-24 13:46:42 ----A---- C:\Windows\system32\sppuinotify.dll
2011-03-24 13:46:42 ----A---- C:\Windows\system32\sppsvc.exe
2011-03-24 13:46:42 ----A---- C:\Windows\system32\sppcomapi.dll
2011-03-24 13:46:42 ----A---- C:\Windows\system32\slwga.dll
2011-03-24 13:46:41 ----A---- C:\Windows\system32\sppinst.dll
2011-03-24 13:46:41 ----A---- C:\Windows\system32\sppc.dll
2011-03-24 13:46:41 ----A---- C:\Windows\system32\slui.exe
2011-03-24 13:46:41 ----A---- C:\Windows\system32\schannel.dll
2011-03-24 13:46:41 ----A---- C:\Windows\system32\netlogon.dll
2011-03-24 13:46:41 ----A---- C:\Windows\system32\msv1_0.dll
2011-03-24 13:46:40 ----A---- C:\Windows\system32\TSpkg.dll
2011-03-24 13:46:40 ----A---- C:\Windows\system32\manage-bde.exe
2011-03-24 13:46:40 ----A---- C:\Windows\system32\fveapi.dll
2011-03-24 13:46:40 ----A---- C:\Windows\system32\credssp.dll
2011-03-24 13:46:39 ----A---- C:\Windows\system32\schtasks.exe
2011-03-24 13:46:39 ----A---- C:\Windows\system32\SearchFolder.dll
2011-03-24 13:46:38 ----A---- C:\Windows\system32\sdrsvc.dll
2011-03-24 13:46:38 ----A---- C:\Windows\system32\sdengin2.dll
2011-03-24 13:46:38 ----A---- C:\Windows\system32\scavengeui.dll
2011-03-24 13:46:38 ----A---- C:\Windows\system32\scansetting.dll
2011-03-24 13:46:37 ----A---- C:\Windows\system32\sppobjs.dll
2011-03-24 13:46:37 ----A---- C:\Windows\system32\sdclt.exe
2011-03-24 13:46:37 ----A---- C:\Windows\system32\scecli.dll
2011-03-24 13:46:36 ----A---- C:\Windows\system32\secproc.dll
2011-03-24 13:46:36 ----A---- C:\Windows\system32\drivers\fvevol.sys
2011-03-24 13:46:35 ----A---- C:\Windows\system32\RMActivate.exe
2011-03-24 13:46:35 ----A---- C:\Windows\system32\repair-bde.exe
2011-03-24 13:46:30 ----A---- C:\Windows\system32\uxlib.dll
2011-03-24 13:46:30 ----A---- C:\Windows\system32\spwizres.dll
2011-03-24 13:46:30 ----A---- C:\Windows\system32\spwizeng.dll
2011-03-24 13:46:30 ----A---- C:\Windows\system32\secproc_ssp.dll
2011-03-24 13:46:30 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2011-03-24 13:46:29 ----A---- C:\Windows\system32\secproc_isv.dll
2011-03-24 13:46:29 ----A---- C:\Windows\system32\RMActivate_isv.exe
2011-03-24 13:46:28 ----A---- C:\Windows\system32\sysmain.dll
2011-03-24 13:46:28 ----A---- C:\Windows\system32\logoncli.dll
2011-03-24 13:46:27 ----A---- C:\Windows\system32\srrstr.dll
2011-03-24 13:46:27 ----A---- C:\Windows\system32\CertPolEng.dll
2011-03-24 13:46:26 ----A---- C:\Windows\system32\sharemediacpl.dll
2011-03-24 13:46:26 ----A---- C:\Windows\system32\scesrv.dll
2011-03-24 13:46:25 ----A---- C:\Windows\system32\WinSCard.dll
2011-03-24 13:46:25 ----A---- C:\Windows\system32\sppwinob.dll
2011-03-24 13:46:25 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2011-03-24 13:46:25 ----A---- C:\Windows\system32\runonce.exe
2011-03-24 13:46:25 ----A---- C:\Windows\system32\RpcRtRemote.dll
2011-03-24 13:46:25 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2011-03-24 13:46:24 ----A---- C:\Windows\system32\rpchttp.dll
2011-03-24 13:46:24 ----A---- C:\Windows\system32\rpcrt4.dll
2011-03-24 13:46:24 ----A---- C:\Windows\system32\Robocopy.exe
2011-03-24 13:46:23 ----A---- C:\Windows\system32\riched32.dll
2011-03-24 13:46:23 ----A---- C:\Windows\system32\riched20.dll
2011-03-24 13:46:23 ----A---- C:\Windows\system32\RelPost.exe
2011-03-24 13:46:23 ----A---- C:\Windows\system32\recovery.dll
2011-03-24 13:46:23 ----A---- C:\Windows\system32\drivers\rmcast.sys
2011-03-24 13:46:22 ----A---- C:\Windows\system32\recdisc.exe
2011-03-24 13:46:22 ----A---- C:\Windows\system32\rastls.dll
2011-03-24 13:46:22 ----A---- C:\Windows\system32\rastapi.dll
2011-03-24 13:46:22 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2011-03-24 13:46:22 ----A---- C:\Windows\system32\drivers\rdbss.sys
2011-03-24 13:46:21 ----A---- C:\Windows\system32\rtutils.dll
2011-03-24 13:46:21 ----A---- C:\Windows\system32\rasppp.dll
2011-03-24 13:46:21 ----A---- C:\Windows\system32\rasmans.dll
2011-03-24 13:46:21 ----A---- C:\Windows\system32\mprddm.dll
2011-03-24 13:46:21 ----A---- C:\Windows\system32\iprtrmgr.dll
2011-03-24 13:46:21 ----A---- C:\Windows\system32\cmstp.exe
2011-03-24 13:46:19 ----A---- C:\Windows\system32\vpnikeapi.dll
2011-03-24 13:46:19 ----A---- C:\Windows\system32\raschap.dll
2011-03-24 13:46:19 ----A---- C:\Windows\system32\drivers\wanarp.sys
2011-03-24 13:46:19 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2011-03-24 13:46:18 ----A---- C:\Windows\system32\vpnike.dll
2011-03-24 13:46:18 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2011-03-24 13:46:17 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2011-03-24 13:46:17 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2011-03-24 13:46:17 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2011-03-24 13:46:15 ----A---- C:\Windows\system32\RacEngn.dll
2011-03-24 13:46:14 ----A---- C:\Windows\system32\qedit.dll
2011-03-24 13:46:14 ----A---- C:\Windows\system32\proquota.exe
2011-03-24 13:46:14 ----A---- C:\Windows\system32\msdrm.dll
2011-03-24 13:46:13 ----A---- C:\Windows\system32\propsys.dll
2011-03-24 13:46:13 ----A---- C:\Windows\system32\profsvc.dll
2011-03-24 13:46:13 ----A---- C:\Windows\system32\profprov.dll
2011-03-24 13:46:12 ----A---- C:\Windows\system32\spoolsv.exe
2011-03-24 13:46:12 ----A---- C:\Windows\system32\prncache.dll
2011-03-24 13:46:12 ----A---- C:\Windows\system32\hgprint.dll
2011-03-24 13:46:11 ----A---- C:\Windows\system32\sppnp.dll
2011-03-24 13:46:11 ----A---- C:\Windows\system32\powercpl.dll
2011-03-24 13:46:11 ----A---- C:\Windows\system32\pifmgr.dll
2011-03-24 13:46:10 ----A---- C:\Windows\system32\WMPhoto.dll
2011-03-24 13:46:10 ----A---- C:\Windows\system32\photowiz.dll
2011-03-24 13:46:09 ----A---- C:\Windows\system32\wvc.dll
2011-03-24 13:46:09 ----A---- C:\Windows\system32\wdc.dll
2011-03-24 13:46:08 ----A---- C:\Windows\system32\wpccpl.dll
2011-03-24 13:46:08 ----A---- C:\Windows\system32\wdscore.dll
2011-03-24 13:46:08 ----A---- C:\Windows\system32\perfmon.exe
2011-03-24 13:46:08 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2011-03-24 13:46:08 ----A---- C:\Windows\system32\pdhui.dll
2011-03-24 13:46:08 ----A---- C:\Windows\system32\drivers\partmgr.sys
2011-03-24 13:46:07 ----A---- C:\Windows\system32\unlodctr.exe
2011-03-24 13:46:07 ----A---- C:\Windows\system32\PnPUnattend.exe
2011-03-24 13:46:07 ----A---- C:\Windows\system32\PkgMgr.exe
2011-03-24 13:46:06 ----A---- C:\Windows\system32\pla.dll
2011-03-24 13:46:06 ----A---- C:\Windows\system32\pdh.dll
2011-03-24 13:46:05 ----A---- C:\Windows\system32\prnfldr.dll
2011-03-24 13:46:05 ----A---- C:\Windows\system32\printui.dll
2011-03-24 13:46:05 ----A---- C:\Windows\system32\ntprint.dll
2011-03-24 13:46:04 ----A---- C:\Windows\system32\win32spl.dll
2011-03-24 13:46:04 ----A---- C:\Windows\system32\localspl.dll
2011-03-24 13:46:03 ----A---- C:\Windows\system32\relog.exe
2011-03-24 13:46:03 ----A---- C:\Windows\system32\puiobj.dll
2011-03-24 13:46:03 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2011-03-24 13:46:03 ----A---- C:\Windows\system32\logman.exe
2011-03-24 13:46:01 ----A---- C:\Windows\system32\prntvpt.dll
2011-03-24 13:45:59 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-03-24 13:45:58 ----A---- C:\Windows\system32\ntkrnlpa.exe
2011-03-24 13:45:52 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2011-03-24 13:45:52 ----A---- C:\Windows\system32\onexui.dll
2011-03-24 13:45:52 ----A---- C:\Windows\system32\onex.dll
2011-03-24 13:45:51 ----A---- C:\Windows\system32\olepro32.dll
2011-03-24 13:45:51 ----A---- C:\Windows\system32\oleaut32.dll
2011-03-24 13:45:50 ----A---- C:\Windows\system32\ocsetup.exe
2011-03-24 13:45:50 ----A---- C:\Windows\system32\ocsetapi.dll
2011-03-24 13:45:49 ----A---- C:\Windows\system32\cscdll.dll
2011-03-24 13:45:49 ----A---- C:\Windows\system32\cscapi.dll
2011-03-24 13:45:49 ----A---- C:\Windows\system32\asycfilt.dll
2011-03-24 13:45:48 ----A---- C:\Windows\system32\ntshrui.dll
2011-03-24 13:45:48 ----A---- C:\Windows\system32\ntlanman.dll
2011-03-24 13:45:48 ----A---- C:\Windows\system32\dosx.exe
2011-03-24 13:45:47 ----A---- C:\Windows\system32\ntdll.dll
2011-03-24 13:45:47 ----A---- C:\Windows\system32\nslookup.exe
2011-03-24 13:45:47 ----A---- C:\Windows\system32\nlasvc.dll
2011-03-24 13:45:47 ----A---- C:\Windows\system32\nlaapi.dll
2011-03-24 13:45:47 ----A---- C:\Windows\system32\drivers\ntfs.sys
2011-03-24 13:45:46 ----A---- C:\Windows\system32\ncsi.dll
2011-03-24 13:45:45 ----A---- C:\Windows\system32\networkmap.dll
2011-03-24 13:45:45 ----A---- C:\Windows\system32\networkexplorer.dll
2011-03-24 13:45:44 ----A---- C:\Windows\system32\nshwfp.dll
2011-03-24 13:45:44 ----A---- C:\Windows\system32\netcenter.dll
2011-03-24 13:45:44 ----A---- C:\Windows\system32\IKEEXT.DLL
2011-03-24 13:45:44 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2011-03-24 13:45:43 ----A---- C:\Windows\system32\pnidui.dll
2011-03-24 13:45:43 ----A---- C:\Windows\system32\netutils.dll
2011-03-24 13:45:43 ----A---- C:\Windows\system32\BFE.DLL
2011-03-24 13:45:42 ----A---- C:\Windows\system32\netshell.dll
2011-03-24 13:45:42 ----A---- C:\Windows\system32\netplwiz.dll
2011-03-24 13:45:42 ----A---- C:\Windows\system32\netjoin.dll
2011-03-24 13:45:41 ----A---- C:\Windows\system32\netcfg.exe
2011-03-24 13:45:41 ----A---- C:\Windows\system32\netbtugc.exe
2011-03-24 13:45:41 ----A---- C:\Windows\system32\netapi32.dll
2011-03-24 13:45:41 ----A---- C:\Windows\system32\net1.exe
2011-03-24 13:45:41 ----A---- C:\Windows\system32\nci.dll
2011-03-24 13:45:41 ----A---- C:\Windows\system32\drivers\netio.sys
2011-03-24 13:45:41 ----A---- C:\Windows\system32\drivers\netbt.sys
2011-03-24 13:45:40 ----A---- C:\Windows\system32\netcfgx.dll
2011-03-24 13:45:40 ----A---- C:\Windows\system32\ncryptui.dll
2011-03-24 13:45:40 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2011-03-24 13:45:40 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2011-03-24 13:45:40 ----A---- C:\Windows\system32\drivers\ndis.sys
2011-03-24 13:45:39 ----A---- C:\Windows\system32\QUTIL.DLL
2011-03-24 13:45:39 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2011-03-24 13:45:39 ----A---- C:\Windows\system32\QSHVHOST.DLL
2011-03-24 13:45:39 ----A---- C:\Windows\system32\KMSVC.DLL
2011-03-24 13:45:38 ----A---- C:\Windows\system32\ipsmsnap.dll
2011-03-24 13:45:37 ----A---- C:\Windows\system32\QCLIPROV.DLL
2011-03-24 13:45:37 ----A---- C:\Windows\system32\nshipsec.dll
2011-03-24 13:45:37 ----A---- C:\Windows\system32\netdiagfx.dll
2011-03-24 13:45:37 ----A---- C:\Windows\system32\napdsnap.dll
2011-03-24 13:45:37 ----A---- C:\Windows\system32\iasrecst.dll
2011-03-24 13:45:37 ----A---- C:\Windows\system32\iasrad.dll
2011-03-24 13:45:37 ----A---- C:\Windows\system32\iasacct.dll
2011-03-24 13:45:36 ----A---- C:\Windows\system32\QAGENTRT.DLL
2011-03-24 13:45:36 ----A---- C:\Windows\system32\QAGENT.DLL
2011-03-24 13:45:36 ----A---- C:\Windows\system32\IPSECSVC.DLL
2011-03-24 13:45:35 ----A---- C:\Windows\system32\mydocs.dll
2011-03-24 13:45:35 ----A---- C:\Windows\system32\msxml6.dll
2011-03-24 13:45:35 ----A---- C:\Windows\system32\mcbuilder.exe
2011-03-24 13:45:34 ----A---- C:\Windows\system32\msxml3.dll
2011-03-24 13:45:33 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2011-03-24 13:45:33 ----A---- C:\Windows\system32\msinfo32.exe
2011-03-24 13:45:32 ----A---- C:\Windows\system32\msieftp.dll
2011-03-24 13:45:32 ----A---- C:\Windows\system32\msftedit.dll
2011-03-24 13:45:32 ----A---- C:\Windows\system32\msconfig.exe
2011-03-24 13:45:32 ----A---- C:\Windows\system32\msasn1.dll
2011-03-24 13:45:31 ----A---- C:\Windows\system32\SyncCenter.dll
2011-03-24 13:45:31 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2011-03-24 13:45:31 ----A---- C:\Windows\system32\mprapi.dll
2011-03-24 13:45:31 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2011-03-24 13:45:30 ----A---- C:\Windows\system32\mobsync.exe
2011-03-24 13:45:29 ----A---- C:\Windows\system32\MMDevAPI.dll
2011-03-24 13:45:27 ----A---- C:\Windows\system32\mfreadwrite.dll
2011-03-24 13:45:27 ----A---- C:\Windows\system32\MFPlay.dll
2011-03-24 13:45:27 ----A---- C:\Windows\system32\mfds.dll
2011-03-24 13:45:26 ----A---- C:\Windows\system32\mfc42u.dll
2011-03-24 13:45:26 ----A---- C:\Windows\system32\mfc40.dll
2011-03-24 13:45:25 ----A---- C:\Windows\system32\wmdrmnet.dll
2011-03-24 13:45:25 ----A---- C:\Windows\system32\wmdrmdev.dll
2011-03-24 13:45:25 ----A---- C:\Windows\system32\mfc40u.dll
2011-03-24 13:45:24 ----A---- C:\Windows\system32\WMVCORE.DLL
2011-03-24 13:45:24 ----A---- C:\Windows\system32\wmpsrcwp.dll
2011-03-24 13:45:24 ----A---- C:\Windows\system32\wmpshell.dll
2011-03-24 13:45:24 ----A---- C:\Windows\system32\wmpps.dll
2011-03-24 13:45:23 ----A---- C:\Windows\system32\WMPEncEn.dll
2011-03-24 13:45:23 ----A---- C:\Windows\system32\wmpeffects.dll
2011-03-24 13:45:23 ----A---- C:\Windows\system32\wmpdxm.dll
2011-03-24 13:45:23 ----A---- C:\Windows\system32\WMNetMgr.dll
2011-03-24 13:45:22 ----A---- C:\Windows\system32\wmdrmsdk.dll
2011-03-24 13:45:22 ----A---- C:\Windows\system32\logagent.exe
2011-03-24 13:45:21 ----A---- C:\Windows\system32\wmploc.DLL
2011-03-24 13:45:21 ----A---- C:\Windows\system32\msscp.dll
2011-03-24 13:45:21 ----A---- C:\Windows\system32\msnetobj.dll
2011-03-24 13:45:21 ----A---- C:\Windows\system32\drmmgrtn.dll
2011-03-24 13:45:21 ----A---- C:\Windows\system32\blackbox.dll
2011-03-24 13:45:17 ----A---- C:\Windows\system32\wmp.dll
2011-03-24 13:45:17 ----A---- C:\Windows\system32\spwmp.dll
2011-03-24 13:45:17 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2011-03-24 13:45:17 ----A---- C:\Windows\system32\dxmasf.dll
2011-03-24 13:45:16 ----A---- C:\Windows\system32\mf.dll
2011-03-24 13:45:16 ----A---- C:\Windows\system32\mapistub.dll
2011-03-24 13:45:15 ----A---- C:\Windows\system32\mapi32.dll
2011-03-24 13:45:14 ----A---- C:\Windows\system32\migisol.dll
2011-03-24 13:45:14 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2011-03-24 13:45:14 ----A---- C:\Windows\system32\inetcomm.dll
2011-03-24 13:45:13 ----A---- C:\Windows\system32\odbcconf.dll
2011-03-24 13:45:11 ----A---- C:\Windows\system32\sqlsrv32.dll
2011-03-24 13:45:06 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2011-03-24 13:45:04 ----A---- C:\Windows\system32\odbctrac.dll
2011-03-24 13:45:04 ----A---- C:\Windows\system32\MdSched.exe
2011-03-24 13:45:03 ----A---- C:\Windows\system32\msorcl32.dll
2011-03-24 13:45:03 ----A---- C:\Windows\system32\mmcndmgr.dll
2011-03-24 13:45:02 ----A---- C:\Windows\system32\odbc32.dll
2011-03-24 13:45:01 ----A---- C:\Windows\system32\odbcjt32.dll
2011-03-24 13:45:01 ----A---- C:\Windows\system32\odbccp32.dll
2011-03-24 13:44:59 ----A---- C:\Windows\system32\sspisrv.dll
2011-03-24 13:44:59 ----A---- C:\Windows\system32\sspicli.dll
2011-03-24 13:44:59 ----A---- C:\Windows\system32\secur32.dll
2011-03-24 13:44:59 ----A---- C:\Windows\system32\luainstall.dll
2011-03-24 13:44:59 ----A---- C:\Windows\system32\consent.exe
2011-03-24 13:44:59 ----A---- C:\Windows\system32\appinfo.dll
2011-03-24 13:44:58 ----A---- C:\Windows\system32\lsasrv.dll
2011-03-24 13:44:58 ----A---- C:\Windows\system32\lpremove.exe
2011-03-24 13:44:58 ----A---- C:\Windows\system32\lpksetup.exe
2011-03-24 13:44:58 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2011-03-24 13:44:57 ----A---- C:\Windows\system32\Wldap32.dll
2011-03-24 13:44:57 ----A---- C:\Windows\system32\nrpsrv.dll
2011-03-24 13:44:49 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2011-03-24 13:44:41 ----A---- C:\Windows\system32\KernelBase.dll
2011-03-24 13:44:41 ----A---- C:\Windows\system32\kernel32.dll
2011-03-24 13:44:41 ----A---- C:\Windows\system32\drivers\ks.sys
2011-03-24 13:44:40 ----A---- C:\Windows\system32\wshirda.dll
2011-03-24 13:44:40 ----A---- C:\Windows\system32\isoburn.exe
2011-03-24 13:44:39 ----A---- C:\Windows\system32\nlsbres.dll
2011-03-24 13:44:39 ----A---- C:\Windows\system32\MuiUnattend.exe
2011-03-24 13:44:39 ----A---- C:\Windows\system32\msihnd.dll
2011-03-24 13:44:39 ----A---- C:\Windows\system32\msiexec.exe
2011-03-24 13:44:38 ----A---- C:\Windows\system32\msi.dll
2011-03-24 13:44:38 ----A---- C:\Windows\system32\imm32.dll
2011-03-24 13:44:37 ----A---- C:\Windows\system32\imapi2.dll
2011-03-24 13:44:36 ----A---- C:\Windows\system32\dbghelp.dll
2011-03-24 13:44:35 ----A---- C:\Windows\system32\dbgeng.dll
2011-03-24 13:44:28 ----A---- C:\Windows\system32\ieframe.dll
2011-03-24 13:44:27 ----A---- C:\Windows\system32\msrating.dll
2011-03-24 13:44:27 ----A---- C:\Windows\system32\inseng.dll
2011-03-24 13:44:27 ----A---- C:\Windows\system32\iesysprep.dll
2011-03-24 13:44:27 ----A---- C:\Windows\system32\iertutil.dll
2011-03-24 13:44:27 ----A---- C:\Windows\system32\ie4uinit.exe
2011-03-24 13:44:26 ----A---- C:\Windows\system32\webcheck.dll
2011-03-24 13:44:26 ----A---- C:\Windows\system32\occache.dll
2011-03-24 13:44:25 ----A---- C:\Windows\system32\imgutil.dll
2011-03-24 13:44:25 ----A---- C:\Windows\system32\ieUnatt.exe
2011-03-24 13:44:22 ----A---- C:\Windows\system32\mshtmled.dll
2011-03-24 13:44:21 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-03-24 13:44:21 ----A---- C:\Windows\system32\msfeedssync.exe
2011-03-24 13:44:21 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-03-24 13:44:21 ----A---- C:\Windows\system32\msfeeds.dll
2011-03-24 13:44:20 ----A---- C:\Windows\system32\mscms.dll
2011-03-24 13:44:20 ----A---- C:\Windows\system32\licmgr10.dll
2011-03-24 13:44:20 ----A---- C:\Windows\system32\iepeers.dll
2011-03-24 13:44:20 ----A---- C:\Windows\system32\iedkcs32.dll
2011-03-24 13:44:19 ----A---- C:\Windows\system32\wininet.dll
2011-03-24 13:44:18 ----A---- C:\Windows\system32\tzres.dll
2011-03-24 13:44:18 ----A---- C:\Windows\system32\kbdlk41a.dll
2011-03-24 13:44:15 ----A---- C:\Windows\system32\KBDUS.DLL
2011-03-24 13:44:15 ----A---- C:\Windows\system32\KBDSF.DLL
2011-03-24 13:44:14 ----A---- C:\Windows\system32\mstime.dll
2011-03-24 13:44:14 ----A---- C:\Windows\system32\iphlpsvc.dll
2011-03-24 13:44:14 ----A---- C:\Windows\system32\C_ISCII.DLL
2011-03-24 13:44:13 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2011-03-24 13:44:13 ----A---- C:\Windows\system32\KBDTUF.DLL
2011-03-24 13:44:13 ----A---- C:\Windows\system32\KBDSG.DLL
2011-03-24 13:44:13 ----A---- C:\Windows\system32\KBDPO.DLL
2011-03-24 13:44:13 ----A---- C:\Windows\system32\KBDMAORI.DLL
2011-03-24 13:44:13 ----A---- C:\Windows\system32\KBDLT1.DLL
2011-03-24 13:44:13 ----A---- C:\Windows\system32\KBDINHIN.DLL
2011-03-24 13:44:13 ----A---- C:\Windows\system32\KBDGR1.DLL
2011-03-24 13:44:13 ----A---- C:\Windows\system32\KBDGKL.DLL
2011-03-24 13:44:13 ----A---- C:\Windows\system32\KBDCZ1.DLL
2011-03-24 13:44:13 ----A---- C:\Windows\system32\KBDBULG.DLL
2011-03-24 13:44:13 ----A---- C:\Windows\system32\KBDBASH.DLL
2011-03-24 13:44:12 ----A---- C:\Windows\system32\KBDTURME.DLL
2011-03-24 13:44:12 ----A---- C:\Windows\system32\KBDTUQ.DLL
2011-03-24 13:44:12 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2011-03-24 13:44:12 ----A---- C:\Windows\system32\KBDNEPR.DLL
2011-03-24 13:44:12 ----A---- C:\Windows\system32\KBDMON.DLL
2011-03-24 13:44:12 ----A---- C:\Windows\system32\KBDINTEL.DLL
2011-03-24 13:44:12 ----A---- C:\Windows\system32\KBDINTAM.DLL
2011-03-24 13:44:12 ----A---- C:\Windows\system32\KBDINORI.DLL
2011-03-24 13:44:12 ----A---- C:\Windows\system32\KBDINMAR.DLL
2011-03-24 13:44:12 ----A---- C:\Windows\system32\KBDINKAN.DLL
2011-03-24 13:44:12 ----A---- C:\Windows\system32\KBDINBEN.DLL
2011-03-24 13:44:12 ----A---- C:\Windows\system32\KBDGEO.DLL
2011-03-24 13:44:12 ----A---- C:\Windows\system32\KBDBLR.DLL
2011-03-24 13:44:12 ----A---- C:\Windows\system32\iscsium.dll
2011-03-24 13:44:12 ----A---- C:\Windows\system32\iscsicli.exe
2011-03-24 13:44:11 ----A---- C:\Windows\system32\elsTrans.dll
2011-03-24 13:44:10 ----A---- C:\Windows\system32\urlmon.dll
2011-03-24 13:44:09 ----A---- C:\Windows\system32\imapi2fs.dll
2011-03-24 13:44:09 ----A---- C:\Windows\system32\httpapi.dll
2011-03-24 13:44:09 ----A---- C:\Windows\system32\drivers\http.sys
2011-03-24 13:44:08 ----A---- C:\Windows\system32\provsvc.dll
2011-03-24 13:44:08 ----A---- C:\Windows\system32\ListSvc.dll
2011-03-24 13:44:08 ----A---- C:\Windows\system32\itircl.dll
2011-03-24 13:44:08 ----A---- C:\Windows\system32\hgcpl.dll
2011-03-24 13:44:07 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2011-03-24 13:44:07 ----A---- C:\Windows\system32\ActionCenter.dll
2011-03-24 13:44:06 ----A---- C:\Windows\system32\hbaapi.dll
2011-03-24 13:44:06 ----A---- C:\Windows\system32\halmacpi.dll
2011-03-24 13:44:06 ----A---- C:\Windows\system32\halacpi.dll
2011-03-24 13:44:06 ----A---- C:\Windows\system32\hal.dll
2011-03-24 13:44:06 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2011-03-24 13:43:58 ----A---- C:\Windows\system32\gpsvc.dll
2011-03-24 13:43:57 ----A---- C:\Windows\system32\gdi32.dll
2011-03-24 13:43:56 ----A---- C:\Windows\system32\gameux.dll
2011-03-24 13:43:53 ----A---- C:\Windows\system32\muifontsetup.dll
2011-03-24 13:43:53 ----A---- C:\Windows\system32\ftp.exe
2011-03-24 13:43:53 ----A---- C:\Windows\system32\fontext.dll
2011-03-24 13:43:52 ----A---- C:\Windows\system32\t2embed.dll
2011-03-24 13:43:52 ----A---- C:\Windows\system32\fms.dll
2011-03-24 13:43:52 ----A---- C:\Windows\system32\findstr.exe
2011-03-24 13:43:52 ----A---- C:\Windows\system32\fde.dll
2011-03-24 13:43:51 ----A---- C:\Windows\system32\ifsutil.dll
2011-03-24 13:43:51 ----A---- C:\Windows\system32\FXSTIFF.dll
2011-03-24 13:43:51 ----A---- C:\Windows\system32\FXSSVC.exe
2011-03-24 13:43:51 ----A---- C:\Windows\system32\FXSMON.dll
2011-03-24 13:43:51 ----A---- C:\Windows\system32\fdeploy.dll
2011-03-24 13:43:50 ----A---- C:\Windows\system32\untfs.dll
2011-03-24 13:43:50 ----A---- C:\Windows\system32\resutils.dll
2011-03-24 13:43:50 ----A---- C:\Windows\system32\clusapi.dll
2011-03-24 13:43:49 ----A---- C:\Windows\system32\WFS.exe
2011-03-24 13:43:49 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-03-24 13:43:48 ----A---- C:\Windows\explorer.exe
2011-03-24 13:43:47 ----A---- C:\Windows\system32\wevtsvc.dll
2011-03-24 13:43:47 ----A---- C:\Windows\system32\ExplorerFrame.dll
2011-03-24 13:43:47 ----A---- C:\Windows\system32\eudcedit.exe
2011-03-24 13:43:46 ----A---- C:\Windows\system32\WerFaultSecure.exe
2011-03-24 13:43:46 ----A---- C:\Windows\system32\werconcpl.dll
2011-03-24 13:43:46 ----A---- C:\Windows\system32\wer.dll
2011-03-24 13:43:46 ----A---- C:\Windows\system32\Faultrep.dll
2011-03-24 13:43:45 ----A---- C:\Windows\system32\evr.dll
2011-03-24 13:43:45 ----A---- C:\Windows\system32\EhStorAPI.dll
2011-03-24 13:43:41 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2011-03-24 13:43:41 ----A---- C:\Windows\system32\efscore.dll
2011-03-24 13:43:40 ----A---- C:\Windows\system32\esent.dll
2011-03-24 13:43:40 ----A---- C:\Windows\system32\eapphost.dll
2011-03-24 13:43:40 ----A---- C:\Windows\system32\eappgnui.dll
2011-03-24 13:43:39 ----A---- C:\Windows\system32\eapp3hst.dll
2011-03-24 13:43:38 ----A---- C:\Windows\system32\DxpTaskSync.dll
2011-03-24 13:43:38 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2011-03-24 13:43:38 ----A---- C:\Windows\system32\DXP.dll
2011-03-24 13:43:38 ----A---- C:\Windows\system32\dskquoui.dll
2011-03-24 13:43:37 ----A---- C:\Windows\system32\drvstore.dll
2011-03-24 13:43:37 ----A---- C:\Windows\system32\dot3ui.dll
2011-03-24 13:43:37 ----A---- C:\Windows\system32\dot3svc.dll
2011-03-24 13:43:37 ----A---- C:\Windows\system32\dot3msm.dll
2011-03-24 13:43:37 ----A---- C:\Windows\system32\dot3cfg.dll
2011-03-24 13:43:37 ----A---- C:\Windows\system32\dot3api.dll
2011-03-24 13:43:37 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-03-24 13:43:37 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-03-24 13:43:36 ----A---- C:\Windows\system32\dnscmmc.dll
2011-03-24 13:43:36 ----A---- C:\Windows\system32\dnsapi.dll
2011-03-24 13:43:36 ----A---- C:\Windows\system32\Display.dll
2011-03-24 13:43:36 ----A---- C:\Windows\system32\diskraid.exe
2011-03-24 13:43:35 ----A---- C:\Windows\system32\dxgi.dll
2011-03-24 13:43:35 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2011-03-24 13:43:35 ----A---- C:\Windows\system32\dpnaddr.dll
2011-03-24 13:43:35 ----A---- C:\Windows\system32\diskpart.exe
2011-03-24 13:43:35 ----A---- C:\Windows\system32\d3d10warp.dll
2011-03-24 13:43:34 ----A---- C:\Windows\system32\d3d9.dll
2011-03-24 13:43:34 ----A---- C:\Windows\system32\d3d11.dll
2011-03-24 13:43:33 ----A---- C:\Windows\system32\vfwwdm32.dll
2011-03-24 13:43:33 ----A---- C:\Windows\system32\d3d10level9.dll
2011-03-24 13:43:33 ----A---- C:\Windows\system32\d3d10_1core.dll
2011-03-24 13:43:32 ----A---- C:\Windows\system32\qdvd.dll
2011-03-24 13:43:32 ----A---- C:\Windows\system32\qdv.dll
2011-03-24 13:43:32 ----A---- C:\Windows\system32\msdmo.dll
2011-03-24 13:43:32 ----A---- C:\Windows\system32\mciqtz32.dll
2011-03-24 13:43:32 ----A---- C:\Windows\system32\amstream.dll
2011-03-24 13:43:31 ----A---- C:\Windows\system32\samsrv.dll
2011-03-24 13:43:31 ----A---- C:\Windows\system32\quartz.dll
2011-03-24 13:43:31 ----A---- C:\Windows\system32\qcap.dll
2011-03-24 13:43:31 ----A---- C:\Windows\system32\qasf.dll
2011-03-24 13:43:30 ----A---- C:\Windows\system32\dsauth.dll
2011-03-24 13:43:30 ----A---- C:\Windows\system32\drivers\dfsc.sys
2011-03-24 13:43:30 ----A---- C:\Windows\system32\DiagCpl.dll
2011-03-24 13:43:30 ----A---- C:\Windows\system32\dhcpcore.dll
2011-03-24 13:43:30 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2011-03-24 13:43:29 ----A---- C:\Windows\system32\setupugc.exe
2011-03-24 13:43:29 ----A---- C:\Windows\system32\dpx.dll
2011-03-24 13:43:29 ----A---- C:\Windows\system32\dfrgui.exe
2011-03-24 13:43:29 ----A---- C:\Windows\system32\DeviceCenter.dll
2011-03-24 13:43:28 ----A---- C:\Windows\system32\dxdiagn.dll
2011-03-24 13:43:27 ----A---- C:\Windows\system32\samcli.dll
2011-03-24 13:43:27 ----A---- C:\Windows\system32\dwmredir.dll
2011-03-24 13:43:24 ----A---- C:\Windows\system32\tsbyuv.dll
2011-03-24 13:43:24 ----A---- C:\Windows\system32\msyuv.dll
2011-03-24 13:43:24 ----A---- C:\Windows\system32\iyuv_32.dll
2011-03-24 13:43:24 ----A---- C:\Windows\system32\dwmcore.dll
2011-03-24 13:43:19 ----A---- C:\Windows\system32\dps.dll
2011-03-24 13:43:18 ----A---- C:\Windows\system32\WUDFx.dll
2011-03-24 13:43:18 ----A---- C:\Windows\system32\WUDFSvc.dll
2011-03-24 13:43:18 ----A---- C:\Windows\system32\WUDFPlatform.dll
2011-03-24 13:43:18 ----A---- C:\Windows\system32\WUDFHost.exe
2011-03-24 13:43:18 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2011-03-24 13:43:18 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2011-03-24 13:43:18 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2011-03-24 13:43:16 ----A---- C:\Windows\system32\localsec.dll
2011-03-24 13:43:15 ----A---- C:\Windows\system32\cryptui.dll
2011-03-24 13:43:14 ----A---- C:\Windows\system32\cryptsvc.dll
2011-03-24 13:43:14 ----A---- C:\Windows\system32\crypt32.dll
2011-03-24 13:43:14 ----A---- C:\Windows\system32\credui.dll
2011-03-24 13:43:13 ----A---- C:\Windows\system32\umpnpmgr.dll
2011-03-24 13:43:13 ----A---- C:\Windows\system32\imagehlp.dll
2011-03-24 13:43:13 ----A---- C:\Windows\system32\cfgmgr32.dll
2011-03-24 13:43:12 ----A---- C:\Windows\system32\OpcServices.dll
2011-03-24 13:43:12 ----A---- C:\Windows\system32\netid.dll
2011-03-24 13:43:12 ----A---- C:\Windows\system32\mimefilt.dll
2011-03-24 13:43:12 ----A---- C:\Windows\system32\conhost.exe
2011-03-24 13:43:12 ----A---- C:\Windows\system32\autoconv.exe
2011-03-24 13:43:11 ----A---- C:\Windows\system32\olethk32.dll
2011-03-24 13:43:11 ----A---- C:\Windows\system32\msdtctm.dll
2011-03-24 13:43:11 ----A---- C:\Windows\system32\comdlg32.dll
2011-03-24 13:43:11 ----A---- C:\Windows\system32\cmd.exe
2011-03-24 13:43:10 ----A---- C:\Windows\system32\rpcss.dll
2011-03-24 13:43:10 ----A---- C:\Windows\system32\ole32.dll
2011-03-24 13:43:10 ----A---- C:\Windows\system32\ci.dll
2011-03-24 13:43:08 ----A---- C:\Windows\system32\cdosys.dll
2011-03-24 13:43:08 ----A---- C:\Windows\system32\calc.exe
2011-03-24 13:43:08 ----A---- C:\Windows\system32\cabview.dll
2011-03-24 13:43:08 ----A---- C:\Windows\system32\cabinet.dll
2011-03-24 13:43:07 ----A---- C:\Windows\system32\xpsservices.dll
2011-03-24 13:43:07 ----A---- C:\Windows\system32\diagperf.dll
2011-03-24 13:43:07 ----A---- C:\Windows\system32\certcli.dll
2011-03-24 13:43:05 ----A---- C:\Windows\system32\XpsRasterService.dll
2011-03-24 13:43:05 ----A---- C:\Windows\system32\Query.dll
2011-03-24 13:43:04 ----A---- C:\Windows\system32\mtxclu.dll
2011-03-24 13:43:04 ----A---- C:\Windows\system32\certmgr.dll
2011-03-24 13:43:03 ----A---- C:\Windows\system32\wshbth.dll
2011-03-24 13:43:03 ----A---- C:\Windows\system32\browseui.dll
2011-03-24 13:43:03 ----A---- C:\Windows\system32\browser.dll
2011-03-24 13:43:03 ----A---- C:\Windows\system32\browcli.dll
2011-03-24 13:43:02 ----A---- C:\Windows\system32\bootres.dll
2011-03-24 13:43:02 ----A---- C:\Windows\system32\BlbEvents.dll
2011-03-24 13:43:01 ----A---- C:\Windows\system32\wbengine.exe
2011-03-24 13:43:01 ----A---- C:\Windows\system32\qmgr.dll
2011-03-24 13:43:01 ----A---- C:\Windows\system32\bitsperf.dll
2011-03-24 13:43:01 ----A---- C:\Windows\system32\bitsadmin.exe
2011-03-24 13:43:01 ----A---- C:\Windows\system32\biocpl.dll
2011-03-24 13:43:00 ----A---- C:\Windows\system32\winresume.exe
2011-03-24 13:43:00 ----A---- C:\Windows\system32\winload.exe
2011-03-24 13:43:00 ----A---- C:\Windows\system32\sdcpl.dll
2011-03-24 13:43:00 ----A---- C:\Windows\system32\bcdboot.exe
2011-03-24 13:43:00 ----A---- C:\Windows\system32\batmeter.dll
2011-03-24 13:43:00 ----A---- C:\Windows\system32\basesrv.dll
2011-03-24 13:43:00 ----A---- C:\Windows\bfsvc.exe
2011-03-24 13:42:59 ----A---- C:\Windows\system32\bcdsrv.dll
2011-03-24 13:42:57 ----A---- C:\Windows\system32\setbcdlocale.dll
2011-03-24 13:42:57 ----A---- C:\Windows\system32\bcdedit.exe
2011-03-24 13:42:56 ----A---- C:\Windows\system32\AzSqlExt.dll
2011-03-24 13:42:56 ----A---- C:\Windows\system32\azroles.dll
2011-03-24 13:42:56 ----A---- C:\Windows\system32\AxInstSv.dll
2011-03-24 13:42:56 ----A---- C:\Windows\system32\autoplay.dll
2011-03-24 13:42:55 ----A---- C:\Windows\system32\LogonUI.exe
2011-03-24 13:42:55 ----A---- C:\Windows\system32\azroleui.dll
2011-03-24 13:42:55 ----A---- C:\Windows\system32\autochk.exe
2011-03-24 13:42:55 ----A---- C:\Windows\system32\autofmt.exe
2011-03-24 13:42:54 ----A---- C:\Windows\system32\winmm.dll
2011-03-24 13:42:54 ----A---- C:\Windows\system32\SndVolSSO.dll
2011-03-24 13:42:54 ----A---- C:\Windows\system32\SndVol.exe
2011-03-24 13:42:54 ----A---- C:\Windows\system32\authui.dll
2011-03-24 13:42:53 ----A---- C:\Windows\system32\drivers\appid.sys
2011-03-24 13:42:53 ----A---- C:\Windows\system32\audiosrv.dll
2011-03-24 13:42:53 ----A---- C:\Windows\system32\AudioSes.dll
2011-03-24 13:42:53 ----A---- C:\Windows\system32\audiodg.exe
2011-03-24 13:42:52 ----A---- C:\Windows\system32\WindowsAnytimeUpgrade.exe
2011-03-24 13:42:52 ----A---- C:\Windows\system32\advapi32.dll
2011-03-24 13:42:52 ----A---- C:\Windows\system32\actxprxy.dll
2011-03-24 13:42:51 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2011-03-24 13:42:51 ----A---- C:\Windows\system32\accessibilitycpl.dll
2011-03-24 13:42:50 ----A---- C:\Windows\system32\aepdu.dll
2011-03-24 13:42:50 ----A---- C:\Windows\system32\aeinv.dll
2011-03-24 13:42:50 ----A---- C:\Windows\system32\adsldp.dll
2011-03-24 13:42:50 ----A---- C:\Windows\system32\acppage.dll
2011-03-24 13:42:49 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2011-03-24 13:42:49 ----A---- C:\Windows\system32\aitagent.exe
2011-03-24 13:42:48 ----A---- C:\Windows\system32\activeds.dll
2011-03-24 13:42:47 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2011-03-24 13:42:47 ----A---- C:\Windows\system32\apphelp.dll
2011-03-24 13:42:44 ----A---- C:\Windows\system32\drivers\volmgr.sys
2011-03-24 13:42:44 ----A---- C:\Windows\system32\drivers\termdd.sys
2011-03-24 13:42:44 ----A---- C:\Windows\system32\drivers\pci.sys
2011-03-24 13:42:44 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2011-03-24 13:42:43 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2011-03-24 13:42:43 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2011-03-24 13:42:43 ----A---- C:\Windows\system32\drivers\hidusb.sys
2011-03-24 13:42:42 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2011-03-24 13:42:42 ----A---- C:\Windows\system32\drivers\hidclass.sys
2011-03-24 13:42:41 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2011-03-24 13:42:41 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2011-03-24 13:42:40 ----A---- C:\Windows\system32\dsuiext.dll
2011-03-24 13:42:39 ----A---- C:\Windows\system32\srchadmin.dll
2011-03-24 13:42:39 ----A---- C:\Windows\system32\OobeFldr.dll
2011-03-24 13:42:39 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2011-03-24 13:42:38 ----A---- C:\Windows\system32\fsquirt.exe
2011-03-24 13:42:38 ----A---- C:\Windows\system32\drivers\cdrom.sys
2011-03-24 13:42:38 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2011-03-24 13:42:38 ----A---- C:\Windows\system32\drivers\bthport.sys
2011-03-24 13:42:36 ----A---- C:\Windows\system32\drivers\amdxata.sys
2011-03-24 13:42:36 ----A---- C:\Windows\system32\drivers\amdsata.sys
2011-03-24 13:42:35 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2011-03-24 13:42:35 ----A---- C:\Windows\system32\drivers\acpi.sys
2011-03-24 13:42:35 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2011-03-24 03:36:24 ----AD---- C:\Windows\rundll16.exe
2011-03-24 03:36:24 ----AD---- C:\Windows\logo1_.exe
2011-03-17 15:11:25 ----A---- C:\Windows\system32\IJL_11.DLL
2011-03-15 02:04:23 ----D---- C:\ProgramData\DriverScanner
2011-03-15 02:02:44 ----HDC---- C:\ProgramData\{D5ABFFAD-D592-4F98-B02B-587125B4801F}
2011-03-09 09:59:38 ----A---- C:\Windows\system32\DWrite.dll
2011-03-09 09:59:36 ----A---- C:\Windows\system32\FntCache.dll
2011-03-09 09:59:35 ----A---- C:\Windows\system32\d2d1.dll
2011-03-09 09:59:33 ----A---- C:\Windows\system32\CPFilters.dll
2011-03-09 09:59:32 ----A---- C:\Windows\system32\EncDec.dll
2011-03-09 09:59:31 ----A---- C:\Windows\system32\sbe.dll
2011-03-06 15:50:29 ----D---- C:\Program Files\Your Uninstaller 2010
======List of files/folders modified in the last 1 months======
2011-03-24 15:30:55 ----D---- C:\Windows\Temp
2011-03-24 15:29:29 ----D---- C:\Windows\System32
2011-03-24 15:29:29 ----AD---- C:\ProgramData\Temp
2011-03-24 15:28:43 ----D---- C:\Windows
2011-03-24 15:27:55 ----D---- C:\Windows\system32\catroot2
2011-03-24 15:20:32 ----RD---- C:\Program Files
2011-03-24 15:16:46 ----D---- C:\Windows\Prefetch
2011-03-24 15:16:45 ----D---- C:\Windows\system32\config
2011-03-24 15:15:24 ----D---- C:\Windows\Microsoft.NET
2011-03-24 15:15:21 ----RSD---- C:\Windows\assembly
2011-03-24 15:10:32 ----D---- C:\Windows\inf
2011-03-24 15:10:32 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-03-24 14:59:43 ----D---- C:\Windows\winsxs
2011-03-24 14:53:24 ----D---- C:\Windows\system32\DriverStore
2011-03-24 14:48:03 ----D---- C:\Program Files\Windows Sidebar
2011-03-24 14:48:03 ----D---- C:\Program Files\Windows Portable Devices
2011-03-24 14:48:03 ----D---- C:\Program Files\Windows Mail
2011-03-24 14:48:03 ----D---- C:\Program Files\Internet Explorer
2011-03-24 14:48:03 ----D---- C:\Program Files\DVD Maker
2011-03-24 14:48:02 ----D---- C:\Program Files\Windows Photo Viewer
2011-03-24 14:48:02 ----D---- C:\Program Files\Windows Media Player
2011-03-24 14:48:01 ----D---- C:\Windows\servicing
2011-03-24 14:48:01 ----D---- C:\Program Files\Windows Defender
2011-03-24 14:47:54 ----D---- C:\Windows\system32\en-US
2011-03-24 14:47:54 ----D---- C:\Windows\system32\da-DK
2011-03-24 14:47:54 ----D---- C:\Windows\PolicyDefinitions
2011-03-24 14:47:53 ----D---- C:\Windows\system32\sysprep
2011-03-24 14:47:53 ----D---- C:\Windows\system32\oobe
2011-03-24 14:47:52 ----D---- C:\Windows\system32\sppui
2011-03-24 14:47:52 ----D---- C:\Windows\system32\Setup
2011-03-24 14:47:52 ----D---- C:\Windows\system32\migration
2011-03-24 14:47:52 ----D---- C:\Windows\system32\manifeststore
2011-03-24 14:47:52 ----D---- C:\Windows\system32\es-ES
2011-03-24 14:47:52 ----D---- C:\Windows\system32\en
2011-03-24 14:47:52 ----D---- C:\Windows\system32\drivers\en-US
2011-03-24 14:47:52 ----D---- C:\Windows\system32\drivers
2011-03-24 14:47:52 ----D---- C:\Windows\system32\cs-CZ
2011-03-24 14:47:52 ----D---- C:\Windows\system32\AdvancedInstallers
2011-03-24 14:47:51 ----D---- C:\Windows\system32\wbem
2011-03-24 14:47:51 ----D---- C:\Windows\system32\migwiz
2011-03-24 14:47:50 ----D---- C:\Windows\system32\Dism
2011-03-24 14:47:35 ----RSD---- C:\Windows\Fonts
2011-03-24 14:47:34 ----D---- C:\Windows\AppPatch
2011-03-24 14:47:22 ----D---- C:\Windows\system32\Boot
2011-03-24 14:42:31 ----D---- C:\Windows\system32\Tasks
2011-03-24 14:36:33 ----A---- C:\Windows\system32\msclmd.dll
2011-03-24 14:22:00 ----SHD---- C:\System Volume Information
2011-03-24 14:13:53 ----D---- C:\Windows\system32\catroot
2011-03-24 13:30:51 ----D---- C:\Windows\Tasks
2011-03-24 13:01:57 ----D---- C:\Windows\system32\wfp
2011-03-24 13:00:48 ----D---- C:\Windows\system32\ias
2011-03-24 13:00:48 ----D---- C:\Program Files\Common Files\Services
2011-03-24 13:00:43 ----D---- C:\Windows\system32\zh-TW
2011-03-24 13:00:43 ----D---- C:\Windows\system32\zh-HK
2011-03-24 13:00:43 ----D---- C:\Windows\system32\zh-CN
2011-03-24 13:00:43 ----D---- C:\Windows\system
2011-03-24 13:00:42 ----D---- C:\Windows\system32\uk-UA
2011-03-24 13:00:42 ----D---- C:\Windows\system32\tr-TR
2011-03-24 13:00:42 ----D---- C:\Windows\system32\th-TH
2011-03-24 13:00:42 ----D---- C:\Windows\system32\sv-SE
2011-03-24 13:00:42 ----D---- C:\Windows\system32\sr-Latn-CS
2011-03-24 13:00:42 ----D---- C:\Windows\system32\sl-SI
2011-03-24 13:00:42 ----D---- C:\Windows\system32\sk-SK
2011-03-24 13:00:42 ----D---- C:\Windows\system32\ru-RU
2011-03-24 13:00:42 ----D---- C:\Windows\system32\ro-RO
2011-03-24 13:00:42 ----D---- C:\Windows\system32\ras
2011-03-24 13:00:42 ----D---- C:\Windows\system32\pt-PT
2011-03-24 13:00:42 ----D---- C:\Windows\system32\pt-BR
2011-03-24 13:00:42 ----D---- C:\Windows\system32\pl-PL
2011-03-24 13:00:42 ----D---- C:\Windows\system32\nl-NL
2011-03-24 13:00:42 ----D---- C:\Windows\system32\nb-NO
2011-03-24 13:00:40 ----D---- C:\Windows\system32\lv-LV
2011-03-24 13:00:40 ----D---- C:\Windows\system32\lt-LT
2011-03-24 13:00:40 ----D---- C:\Windows\system32\ko-KR
2011-03-24 13:00:40 ----D---- C:\Windows\system32\ja-JP
2011-03-24 13:00:40 ----D---- C:\Windows\system32\it-IT
2011-03-24 13:00:40 ----D---- C:\Windows\system32\hu-HU
2011-03-24 13:00:40 ----D---- C:\Windows\system32\hr-HR
2011-03-24 13:00:40 ----D---- C:\Windows\system32\he-IL
2011-03-24 13:00:40 ----D---- C:\Windows\system32\fr-FR
2011-03-24 13:00:40 ----D---- C:\Windows\system32\fi-FI
2011-03-24 13:00:40 ----D---- C:\Windows\system32\et-EE
2011-03-24 13:00:40 ----D---- C:\Windows\system32\el-GR
2011-03-24 13:00:39 ----D---- C:\Windows\system32\de-DE
2011-03-24 13:00:39 ----D---- C:\Windows\system32\CodeIntegrity
2011-03-24 13:00:39 ----D---- C:\Windows\system32\bg-BG
2011-03-24 13:00:39 ----D---- C:\Windows\system32\ar-SA
2011-03-24 13:00:39 ----D---- C:\Windows\Media
2011-03-24 13:00:39 ----D---- C:\Windows\L2Schemas
2011-03-24 13:00:39 ----D---- C:\Windows\IME
2011-03-24 13:00:38 ----D---- C:\Program Files\Common Files\System
2011-03-24 13:00:22 ----D---- C:\Windows\AppCompat
2011-03-24 13:00:19 ----HD---- C:\dvmexp
2011-03-24 12:59:06 ----D---- C:\Windows\registration
2011-03-24 02:59:00 ----D---- C:\ProgramData\Recovery
2011-03-18 03:04:29 ----D---- C:\Users\user\AppData\Roaming\Skype
2011-03-15 02:04:27 ----SHD---- C:\Windows\Installer
2011-03-15 02:04:23 ----HD---- C:\ProgramData
2011-03-10 03:33:10 ----D---- C:\Windows\debug
2011-03-09 10:02:52 ----A---- C:\Windows\system32\MRT.exe
2011-03-09 10:02:35 ----D---- C:\ProgramData\Microsoft Help
2011-03-06 01:05:02 ----D---- C:\Program Files\Microsoft Silverlight
2011-03-02 14:56:13 ----D---- C:\Users\user\AppData\Roaming\Media Player Classic
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-06-05 330264]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2010-07-12 45648]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 DVMIO;DVMIO; \??\C:\SPLASH.SYS\config\dvmio.sys [2009-09-30 17624]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-07-29 115008]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-07-29 136632]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-07-29 134512]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-07-29 41336]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2009-10-27 2494968]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-07-29 32608]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2009-04-29 15872]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-09-23 4808192]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-10-02 204288]
R3 STHDA;IDT High Definition Audio CODEC; C:\Windows\system32\DRIVERS\stwrt.sys [2009-10-12 420864]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-05-27 245936]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 amdagp;Ovladac filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 bdfsfltr;bdfsfltr; C:\Windows\system32\DRIVERS\bdfsfltr.sys [2009-07-24 285704]
S3 BthEnum;Ovladac pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Ovladac portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2010-11-20 393216]
S3 BTHUSB;Ovladac rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2010-11-20 60416]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2009-09-17 86056]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\DRIVERS\btwavdt.sys [2009-09-17 108072]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-09-17 29472]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2009-09-17 18472]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-09-02 174592]
S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 84992]
S3 sisagp;Filtr SIS sbernice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 viaagp;Filtr VIA sbernice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7-Prozessortreiber; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AESTFilters;Andrea ST Filters Service; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_5576240ee6baaa25\aestsrv.exe [2009-03-02 81920]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-09-04 595232]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 DvmMDES;DeviceVM Meta Data Export Service; C:\SPLASH.SYS\config\DVMExportService.exe [2009-07-09 323584]
R2 ebjlxdcjduccrc;ebjlxdcjduccrc; c:\windows\system32\ztpfzyq.exe [2010-04-26 81997]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-08-12 810144]
R2 HP Health Check Service;HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2010-03-24 121344]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-06-05 354840]
R2 MWAgent;MWAgent; C:\PROGRA~1\COMMON~1\MICROW~1\Agent\MWASER.EXE [2010-03-25 845320]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-09-22 249136]
R2 STacSV;Audio Service; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_5576240ee6baaa25\STacSV.exe [2009-10-12 221266]
S3 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2009-02-06 109056]
S3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-08-12 33584]
S3 GameConsoleService;GameConsoleService; C:\Program Files\HP Games\HP Game Console\GameConsoleService.exe [2010-07-28 246520]
S3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2009-04-30 229944]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
-----------------EOF-----------------

Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
mwav mi nasel havet
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
- Rudy
- Site Admin
- Příspěvky: 119506
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: mwav mi nasel havet
Log vypadá OK. O jaké infekce se jednalo?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: mwav mi nasel havet
ja vůl jsem to zavrel, takze mam jen ten cely velky log,bylo to ve files, a taky mi hlasi eset trojana, ze ho znicil a po restartu ze bude ok, ale po restartu se to po nejake dobe objevi zas.hlasi trojana v keyloger,
- Rudy
- Site Admin
- Příspěvky: 119506
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: mwav mi nasel havet
Keylogger rovnou smažte. Jeho použití je jednak protizákonné a za druhé většina jich vir opravdu obsahuje. Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.