Podezření zavirování

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
Kakolukian
Návštěvník
Návštěvník
Příspěvky: 38
Registrován: 22 Zář 2008 15:13

Podezření zavirování

#1 Příspěvek od Kakolukian »

Předem Děkuji =)

Logfile of random's system information tool 1.08 (written by random/random)
Run by Kakolukian at 2011-04-24 10:46:12
Microsoft Windows 7 Home Premium
System drive C: has 17 GB (12%) free of 144 GB
Total RAM: 2047 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:46:25, on 24.4.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16766)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Users\Kakolukian\AppData\Roaming\QipGuard\QipGuard.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Kakolukian\Downloads\RSIT.exe
C:\Program Files\trend micro\Kakolukian.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://qip.ru
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: QIPBHO Class - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Kakolukian\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: QIPBHO - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Kakolukian\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\1.0"
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [QIP Internet Guardian] C:\Users\Kakolukian\AppData\Roaming\QipGuard\QipGuard.exe /p
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - (no file)
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - (no file)
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - (no file)
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - (no file)
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - (no file)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: QipGuard - QIP.ru - C:\Program Files\QipGuard\QipGuard.exe

--
End of file - 7155 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\ProgramData\LangSoft\WebIE.dll [2011-03-20 520192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95289393-33EA-4F8D-B952-483415B9C955}]
QIPBHO Class - C:\Users\Kakolukian\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll [2010-12-13 141184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-02-09 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\ProgramData\LangSoft\WebIE.dll [2011-03-20 520192]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"UCam_Menu"=C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2007-08-17 218408]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2011-01-13 3396624]
"SynTPStart"=C:\Program Files\Synaptics\SynTP\SynTPStart.exe [2007-09-15 102400]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"OnScreenDisplay"=C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe [2007-09-04 554320]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-11-29 421888]
""= []
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe [2011-01-30 35736]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-11-15 932288]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"QIP Internet Guardian"=C:\Users\Kakolukian\AppData\Roaming\QipGuard\QipGuard.exe [2011-01-13 187776]
"OEXPRESS"= []
"Nektra OEAPI"= []
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-04-22 07:47:11 ----D---- C:\Program Files\CAPCOM
2011-04-21 19:07:49 ----D---- C:\Windows\system32\xlive
2011-04-21 19:07:48 ----D---- C:\Program Files\Microsoft Games for Windows - LIVE
2011-04-14 17:54:11 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-04-14 17:54:11 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-04-14 17:54:11 ----A---- C:\Windows\system32\drivers\srv.sys
2011-04-14 17:54:09 ----A---- C:\Windows\system32\vbscript.dll
2011-04-14 17:54:09 ----A---- C:\Windows\system32\jscript.dll
2011-04-14 17:54:07 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-04-14 17:54:07 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-04-14 17:54:07 ----A---- C:\Windows\system32\dnsapi.dll
2011-04-14 17:54:06 ----A---- C:\Windows\system32\atmfd.dll
2011-04-14 17:54:05 ----A---- C:\Windows\system32\atmlib.dll
2011-04-14 17:54:00 ----A---- C:\Windows\system32\mshtml.dll
2011-04-14 17:54:00 ----A---- C:\Windows\system32\ieframe.dll
2011-04-14 17:53:58 ----A---- C:\Windows\system32\urlmon.dll
2011-04-14 17:53:56 ----A---- C:\Windows\system32\wininet.dll
2011-04-14 17:53:56 ----A---- C:\Windows\system32\mstime.dll
2011-04-14 17:53:56 ----A---- C:\Windows\system32\msfeeds.dll
2011-04-14 17:53:56 ----A---- C:\Windows\system32\ieui.dll
2011-04-14 17:53:56 ----A---- C:\Windows\system32\iertutil.dll
2011-04-14 17:53:56 ----A---- C:\Windows\system32\iepeers.dll
2011-04-14 17:53:56 ----A---- C:\Windows\system32\iedkcs32.dll
2011-04-14 17:53:55 ----A---- C:\Windows\system32\mshtmled.dll
2011-04-14 17:53:55 ----A---- C:\Windows\system32\msfeedssync.exe
2011-04-14 17:53:55 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-04-14 17:53:55 ----A---- C:\Windows\system32\licmgr10.dll
2011-04-14 17:53:55 ----A---- C:\Windows\system32\jsproxy.dll
2011-04-14 17:53:32 ----A---- C:\Windows\system32\win32k.sys
2011-04-14 17:53:31 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-04-14 17:53:29 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-04-14 17:53:27 ----A---- C:\Windows\system32\inetcomm.dll
2011-04-14 17:53:24 ----A---- C:\Windows\system32\mfc42u.dll
2011-04-14 17:53:24 ----A---- C:\Windows\system32\mfc42.dll
2011-04-14 17:53:20 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-04-14 17:53:20 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-04-14 17:53:20 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-04-14 17:53:19 ----A---- C:\Windows\system32\drivers\bowser.sys

======List of files/folders modified in the last 1 months======

2011-04-24 10:46:24 ----D---- C:\Windows\Prefetch
2011-04-24 10:46:22 ----D---- C:\Windows\Temp
2011-04-24 10:46:16 ----D---- C:\Program Files\trend micro
2011-04-24 10:35:23 ----SHD---- C:\System Volume Information
2011-04-24 10:34:30 ----D---- C:\Windows\System32
2011-04-24 10:34:30 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-04-24 10:34:29 ----D---- C:\Windows\inf
2011-04-24 10:32:12 ----D---- C:\Windows\system32\config
2011-04-24 10:28:59 ----D---- C:\Program Files\Common Files\Akamai
2011-04-24 10:24:19 ----D---- C:\Windows\Tasks
2011-04-24 10:24:19 ----D---- C:\Windows\system32\wfp
2011-04-24 10:24:19 ----D---- C:\Share-rapid
2011-04-24 10:24:16 ----D---- C:\Windows\system32\wbem
2011-04-24 10:24:16 ----D---- C:\Windows
2011-04-24 10:23:14 ----D---- C:\Windows\system32\DriverStore
2011-04-24 10:23:14 ----D---- C:\Windows\system32\drivers\etc
2011-04-24 10:23:14 ----D---- C:\Windows\system32\catroot2
2011-04-24 10:23:12 ----SHD---- C:\Windows\Installer
2011-04-24 10:23:12 ----D---- C:\Windows\system32\Tasks
2011-04-24 10:23:12 ----D---- C:\Windows\system32\CodeIntegrity
2011-04-24 10:23:12 ----D---- C:\Users\Kakolukian\AppData\Roaming\LangSoft
2011-04-24 10:22:59 ----D---- C:\Windows\registration
2011-04-24 10:22:50 ----D---- C:\Windows\system32\drivers
2011-04-24 10:22:40 ----D---- C:\Users\Kakolukian\AppData\Roaming\Skype
2011-04-23 18:29:52 ----D---- C:\Users\Kakolukian\AppData\Roaming\skypePM
2011-04-22 19:18:38 ----SHD---- C:\Config.Msi
2011-04-22 07:54:19 ----RSD---- C:\Windows\assembly
2011-04-22 07:47:11 ----RD---- C:\Program Files
2011-04-15 14:43:37 ----D---- C:\Windows\Microsoft.NET
2011-04-15 13:45:53 ----D---- C:\Windows\winsxs
2011-04-15 13:43:45 ----D---- C:\Windows\system32\migration
2011-04-15 13:43:45 ----D---- C:\Program Files\Internet Explorer
2011-04-14 22:15:33 ----D---- C:\Windows\system32\catroot
2011-04-14 22:15:23 ----D---- C:\ProgramData\Microsoft Help
2011-04-14 22:06:20 ----D---- C:\Windows\debug
2011-04-14 22:06:17 ----A---- C:\Windows\system32\MRT.exe
2011-04-10 10:20:21 ----HD---- C:\Program Files\InstallShield Installation Information

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-01-02 691696]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2011-01-13 23632]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2011-01-13 294608]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2011-01-13 47440]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2011-01-13 17744]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2011-01-13 51280]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2006-11-14 37376]
R3 athr;Atheros – ovladač pro zařízení pro rozšiřitelnou bezdrátovou síť LAN; C:\Windows\system32\DRIVERS\athr.sys [2009-07-14 1096704]
R3 ATSwpWDF;AuthenTec TruePrint USB WBF WDF Driver; C:\Windows\System32\Drivers\ATSwpWDF.sys [2009-12-03 625224]
R3 HpqRemHid;HP Remote Control HID Device; C:\Windows\system32\DRIVERS\HpqRemHid.sys [2007-07-11 7168]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-14 347264]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-07-14 84992]
R3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-14 207360]
R3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-14 980992]
R3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-14 661504]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-09-15 191408]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 ae3xaw8p;ae3xaw8p; C:\Windows\system32\drivers\ae3xaw8p.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files\Garena\safedrv.sys []
S3 s1018bus;Sony Ericsson Device 1018 driver (WDM); C:\Windows\system32\DRIVERS\s1018bus.sys [2009-03-25 86824]
S3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s1018mdfl.sys [2009-03-25 15016]
S3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s1018mdm.sys [2009-03-25 114728]
S3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s1018mgmt.sys [2009-03-25 106208]
S3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS); C:\Windows\system32\DRIVERS\s1018nd5.sys [2009-03-25 26024]
S3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s1018obex.sys [2009-03-25 104744]
S3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM); C:\Windows\system32\DRIVERS\s1018unic.sys [2009-03-25 109864]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Akamai;Akamai NetSession Interface; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2011-01-13 40384]
R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2007-09-19 65536]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-10-16 600680]
R2 QipGuard;QipGuard; C:\Program Files\QipGuard\QipGuard.exe [2011-01-13 187776]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 npggsvc;nProtect GameGuard Service; C:\Windows\system32\GameMon.des [2011-02-14 4014224]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-01-05 1343400]

-----------------EOF-----------------

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Podezření zavirování

#2 Příspěvek od vyosek »

Zdravim a pekne nedelni dopoledne preji :)

:arrow: Spustte HJT a provedeme fixnuti polozek
  • HJT najdete zde C:\Program Files\trend micro\Kakolukian.exe
  • Otevre se Vam okno, kliknete na Do a system scan only
  • V dalsim okne najdete radky které jsem Vam vypsal nize, vedle nich je ctverecek, do ktereho udelate zatrzitko
  • R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://qip.ru
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: QIPBHO Class - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Kakolukian\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
    R3 - URLSearchHook: (no name) - - (no file)
    O2 - BHO: QIPBHO - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Kakolukian\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
    O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
    O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - (no file)
    O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - (no file)
    O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - (no file)
    O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - (no file)
    O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - (no file)
    O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - (no file)
    O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - (no file)
    O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - (no file)
  • Kliknete na Fix checked (vlevo dole)
  • HJT se Vas zepta zda opravdu ANO, s tim souhlasite a je hotovo Obrázek
:arrow: Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) (viz muj podpis)
  • Provedte aktualizaci - treti zalozka
  • Provedte uplny sken - nic nemazte :!:
  • MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Kakolukian
Návštěvník
Návštěvník
Příspěvky: 38
Registrován: 22 Zář 2008 15:13

Re: Podezření zavirování

#3 Příspěvek od Kakolukian »

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Verze databáze: 6433

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

24.4.2011 17:50:01
mbam-log-2011-04-24 (17-49-54).txt

Typ kontroly: Úplný test (C:\|)
Testované objekty: 330089
Uplynulý čas: 1 hodin, 50 minut, 19 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 1

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
c:\Users\kakolukian\documents\ICQ\279220929\393438818_jakub\Tadoš\Patch\fruityloops.studio.producer.edition.xxl.exe (Trojan.Downloader) -> No action taken.

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Podezření zavirování

#4 Příspěvek od vyosek »

:arrow: Nalez MBAMu smazte

:arrow: Otevrete si poznamkovy blok
  • Start->spustit->notepad
  • Vlozte text nize
  • Kód: Vybrat vše

    Windows Registry Editor Version 5.00
    
    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "QuickTime Task"=-
    ""=-
    "Adobe Reader Speed Launcher"=-
    "Adobe ARM"=-
    "SunJavaUpdateSched"=-
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "QIP Internet Guardian"=-
    "OEXPRESS"=-
    "Nektra OEAPI"=-
  • Soubor ulozte jako oprava.reg
  • Pri ukladani dejte ulozit jako typ Vsechny soubory (nastevni je uvedeno na obrazku nize)
  • Obrázek
  • Zavrit notepad a spustit dvojklikem oprava.reg
  • Pripadny dotaz na zmenu registru potvrdte
  • Okno jen problikne a opravi regsitry - soubor muzete smazat
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner (viz muj podpis)
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za 14 dni

:arrow: Doporucuji provest defragmentaci disku
  • Nejjednodussi (ale nejmene ucinny) zpusob je pomoci utility ve windowsech
    • Kliknete na Tento pocitac, dale na disk kliknete pravym tlacitkem, vyberte Vlastnosti
    • prepnete se do zalozky Nastroje
    • Nyni vidite pomucky Defragmentace - spustte ji kliknutim na Defragmentovat
    • Toto provedte se vsemi disky
  • Dalsi moznosti (a mnou doporucenou) je pres programek Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
    • Program stahnete, nainstalujte (dejte fajfku pryc u yahoo toolbaru) a spustte
    • Kliknete na Analyzovat
    • Pokud je ve sloupci Fragmentováno vice jak 5%, doporucuji provest defragmentaci (klik na Defragmentovat)
    • Postup provedte se vsemi disky
  • Posledni moznost je pres jednoduchy programek JKDefrag http://www.stahuj.centrum.cz/utility_a_ ... /jkdefrag/
    • Vyhodou programku je, ze se neinstaluje
    • Staci tedy jen stahnout dle verze vaseho OS a rozbalit
    • Nasledne spustit pomoci souboru JKDefrag pripadne JKDefrag64
    • Probehne analyza disku a nasledne i defragmentace
:arrow: Dejte novy log z RSIT a napiste jak se chova PC
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Kakolukian
Návštěvník
Návštěvník
Příspěvky: 38
Registrován: 22 Zář 2008 15:13

Re: Podezření zavirování

#5 Příspěvek od Kakolukian »

Tak počítač se zrychlil, ale mám stále problém že se mi špatně zobrazuje displej co je na displej šedé až černé chytá barvu do zelena a je to všecko jak kdyby 2x za tím. Přikládám obrázek. Stalo se mi to při hraní hry a od té doby se toho ne a ne zbavit. Jinak sem udělal vše co ste mi napsal a nainstaloval aktualizace z windows update. Myslel sem že to bude vir ale možná to bude hardwarová chyba.

Obrázek

Obrázek

Logfile of random's system information tool 1.08 (written by random/random)
Run by Kakolukian at 2011-04-26 18:59:30
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 31 GB (22%) free of 144 GB
Total RAM: 2047 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:59:42, on 26.4.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\rundll32.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\QIP 2010\qip.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Kakolukian\Downloads\RSIT.exe
C:\Program Files\trend micro\Kakolukian.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: QIPBHO - {95289393-33EA-4F8D-B952-483415B9C955} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\1.0"
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - (no file)
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - (no file)
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - (no file)
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - (no file)
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - (no file)
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: QipGuard - QIP.ru - C:\Program Files\QipGuard\QipGuard.exe

--
End of file - 6316 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\ProgramData\LangSoft\WebIE.dll [2011-03-20 520192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95289393-33EA-4F8D-B952-483415B9C955}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-02-09 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\ProgramData\LangSoft\WebIE.dll [2011-03-20 520192]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"UCam_Menu"=C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2007-08-17 218408]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2011-01-13 3396624]
"SynTPStart"=C:\Program Files\Synaptics\SynTP\SynTPStart.exe [2007-09-15 102400]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"OnScreenDisplay"=C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe [2007-09-04 554320]
"Malwarebytes' Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2010-12-20 963976]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-05-27 1721640]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-04-26 18:59:30 ----D---- C:\rsit
2011-04-26 15:08:53 ----D---- C:\Program Files\Defraggler
2011-04-26 14:30:01 ----D---- C:\Program Files\Microsoft Silverlight
2011-04-26 14:24:08 ----D---- C:\Windows\system32\SPReview
2011-04-26 14:23:17 ----D---- C:\Windows\system32\EventProviders
2011-04-26 14:11:23 ----D---- C:\Program Files\Common Files\Windows Live
2011-04-26 14:04:03 ----A---- C:\Windows\system32\dfshim.dll
2011-04-26 14:03:58 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2011-04-26 14:03:57 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2011-04-26 14:03:57 ----A---- C:\Windows\system32\mstscax.dll
2011-04-26 14:03:50 ----A---- C:\Windows\system32\d3d10warp.dll
2011-04-26 14:03:48 ----A---- C:\Windows\system32\mfc40u.dll
2011-04-26 14:03:48 ----A---- C:\Windows\system32\mfc40.dll
2011-04-26 14:03:44 ----A---- C:\Windows\system32\sysmain.dll
2011-04-26 14:03:42 ----A---- C:\Windows\system32\secproc_isv.dll
2011-04-26 14:03:41 ----A---- C:\Windows\system32\shell32.dll
2011-04-26 14:03:40 ----A---- C:\Windows\system32\secproc.dll
2011-04-26 14:03:40 ----A---- C:\Windows\system32\RMActivate_isv.exe
2011-04-26 14:03:38 ----A---- C:\Windows\system32\RMActivate.exe
2011-04-26 14:03:37 ----A---- C:\Windows\system32\spwizui.dll
2011-04-26 14:03:37 ----A---- C:\Windows\system32\mscoree.dll
2011-04-26 14:03:34 ----A---- C:\Windows\system32\mf.dll
2011-04-26 14:03:33 ----A---- C:\Windows\system32\ntkrnlpa.exe
2011-04-26 14:03:31 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2011-04-26 14:03:30 ----A---- C:\Windows\system32\iertutil.dll
2011-04-26 14:03:30 ----A---- C:\Windows\system32\CertEnroll.dll
2011-04-26 14:03:29 ----A---- C:\Windows\system32\mssrch.dll
2011-04-26 14:03:28 ----A---- C:\Windows\system32\wmp.dll
2011-04-26 14:03:28 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2011-04-26 14:03:28 ----A---- C:\Windows\system32\PresentationHost.exe
2011-04-26 14:03:27 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-04-26 14:03:27 ----A---- C:\Windows\system32\esent.dll
2011-04-26 14:03:27 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2011-04-26 14:03:27 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2011-04-26 14:03:26 ----A---- C:\Windows\system32\tquery.dll
2011-04-26 14:03:26 ----A---- C:\Windows\system32\schedsvc.dll
2011-04-26 14:03:26 ----A---- C:\Windows\system32\RacEngn.dll
2011-04-26 14:03:24 ----A---- C:\Windows\system32\ntdll.dll
2011-04-26 14:03:24 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2011-04-26 14:03:23 ----A---- C:\Windows\system32\rdpdd.dll
2011-04-26 14:03:23 ----A---- C:\Windows\system32\qmgr.dll
2011-04-26 14:03:22 ----A---- C:\Windows\system32\ole32.dll
2011-04-26 14:03:22 ----A---- C:\Windows\system32\ExplorerFrame.dll
2011-04-26 14:03:21 ----A---- C:\Windows\system32\wevtsvc.dll
2011-04-26 14:03:20 ----A---- C:\Windows\system32\vssapi.dll
2011-04-26 14:03:20 ----A---- C:\Windows\system32\SearchFolder.dll
2011-04-26 14:03:20 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-04-26 14:03:20 ----A---- C:\Windows\system32\d3d9.dll
2011-04-26 14:03:20 ----A---- C:\Windows\explorer.exe
2011-04-26 14:03:19 ----A---- C:\Windows\system32\taskschd.dll
2011-04-26 14:03:19 ----A---- C:\Windows\system32\IKEEXT.DLL
2011-04-26 14:03:18 ----A---- C:\Windows\system32\spreview.exe
2011-04-26 14:03:18 ----A---- C:\Windows\system32\spinstall.exe
2011-04-26 14:03:18 ----A---- C:\Windows\system32\mstsc.exe
2011-04-26 14:03:18 ----A---- C:\Windows\system32\kernel32.dll
2011-04-26 14:03:18 ----A---- C:\Windows\system32\drivers\ntfs.sys
2011-04-26 14:03:18 ----A---- C:\Windows\system32\crypt32.dll
2011-04-26 14:03:17 ----A---- C:\Windows\system32\wer.dll
2011-04-26 14:03:17 ----A---- C:\Windows\system32\termsrv.dll
2011-04-26 14:03:17 ----A---- C:\Windows\system32\certcli.dll
2011-04-26 14:03:16 ----A---- C:\Windows\system32\rpcrt4.dll
2011-04-26 14:03:16 ----A---- C:\Windows\system32\msxml6.dll
2011-04-26 14:03:16 ----A---- C:\Windows\system32\lsasrv.dll
2011-04-26 14:03:16 ----A---- C:\Windows\system32\gpsvc.dll
2011-04-26 14:03:16 ----A---- C:\Windows\system32\dwmcore.dll
2011-04-26 14:03:15 ----A---- C:\Windows\system32\odbc32.dll
2011-04-26 14:03:15 ----A---- C:\Windows\system32\diagperf.dll
2011-04-26 14:03:14 ----A---- C:\Windows\system32\WinSAT.exe
2011-04-26 14:03:14 ----A---- C:\Windows\system32\wbengine.exe
2011-04-26 14:03:14 ----A---- C:\Windows\system32\scavengeui.dll
2011-04-26 14:03:14 ----A---- C:\Windows\system32\quartz.dll
2011-04-26 14:03:14 ----A---- C:\Windows\system32\mstime.dll
2011-04-26 14:03:14 ----A---- C:\Windows\system32\MPSSVC.dll
2011-04-26 14:03:13 ----A---- C:\Windows\system32\TSWorkspace.dll
2011-04-26 14:03:13 ----A---- C:\Windows\system32\tsmf.dll
2011-04-26 14:03:13 ----A---- C:\Windows\system32\dot3api.dll
2011-04-26 14:03:12 ----A---- C:\Windows\system32\winhttp.dll
2011-04-26 14:03:12 ----A---- C:\Windows\system32\setupapi.dll
2011-04-26 14:03:12 ----A---- C:\Windows\system32\msfeeds.dll
2011-04-26 14:03:12 ----A---- C:\Windows\system32\localspl.dll
2011-04-26 14:03:12 ----A---- C:\Windows\system32\iedkcs32.dll
2011-04-26 14:03:12 ----A---- C:\Windows\system32\drivers\nvstor.sys
2011-04-26 14:03:12 ----A---- C:\Windows\system32\apphelp.dll
2011-04-26 14:03:11 ----A---- C:\Windows\system32\MSVidCtl.dll
2011-04-26 14:03:11 ----A---- C:\Windows\system32\dbgeng.dll
2011-04-26 14:03:10 ----A---- C:\Windows\system32\VSSVC.exe
2011-04-26 14:03:09 ----A---- C:\Windows\system32\WindowsCodecs.dll
2011-04-26 14:03:09 ----A---- C:\Windows\system32\netlogon.dll
2011-04-26 14:03:09 ----A---- C:\Windows\system32\d3d11.dll
2011-04-26 14:03:08 ----A---- C:\Windows\system32\WMVDECOD.DLL
2011-04-26 14:03:08 ----A---- C:\Windows\system32\winlogon.exe
2011-04-26 14:03:08 ----A---- C:\Windows\system32\user32.dll
2011-04-26 14:03:08 ----A---- C:\Windows\system32\netcfgx.dll
2011-04-26 14:03:07 ----A---- C:\Windows\system32\WsmSvc.dll
2011-04-26 14:03:07 ----A---- C:\Windows\system32\webio.dll
2011-04-26 14:03:07 ----A---- C:\Windows\system32\Query.dll
2011-04-26 14:03:07 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2011-04-26 14:03:07 ----A---- C:\Windows\system32\advapi32.dll
2011-04-26 14:03:06 ----A---- C:\Windows\system32\upnp.dll
2011-04-26 14:03:06 ----A---- C:\Windows\system32\schannel.dll
2011-04-26 14:03:06 ----A---- C:\Windows\system32\netfxperf.dll
2011-04-26 14:03:06 ----A---- C:\Windows\system32\msv1_0.dll
2011-04-26 14:03:06 ----A---- C:\Windows\system32\mmcndmgr.dll
2011-04-26 14:03:06 ----A---- C:\Windows\system32\lsm.exe
2011-04-26 14:03:06 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2011-04-26 14:03:06 ----A---- C:\Windows\system32\drivers\nvraid.sys
2011-04-26 14:03:05 ----A---- C:\Windows\system32\sppobjs.dll
2011-04-26 14:03:05 ----A---- C:\Windows\system32\msdrm.dll
2011-04-26 14:03:05 ----A---- C:\Windows\system32\imapi2fs.dll
2011-04-26 14:03:05 ----A---- C:\Windows\system32\authui.dll
2011-04-26 14:03:04 ----A---- C:\Windows\system32\usp10.dll
2011-04-26 14:03:04 ----A---- C:\Windows\system32\shlwapi.dll
2011-04-26 14:03:04 ----A---- C:\Windows\system32\SessEnv.dll
2011-04-26 14:03:04 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2011-04-26 14:03:04 ----A---- C:\Windows\system32\mcbuilder.exe
2011-04-26 14:03:04 ----A---- C:\Windows\system32\KernelBase.dll
2011-04-26 14:03:03 ----A---- C:\Windows\system32\winload.exe
2011-04-26 14:03:03 ----A---- C:\Windows\system32\userenv.dll
2011-04-26 14:03:03 ----A---- C:\Windows\system32\certmgr.dll
2011-04-26 14:03:02 ----A---- C:\Windows\system32\xpsservices.dll
2011-04-26 14:03:02 ----A---- C:\Windows\system32\WebClnt.dll
2011-04-26 14:03:02 ----A---- C:\Windows\system32\umpnpmgr.dll
2011-04-26 14:03:02 ----A---- C:\Windows\system32\sppwinob.dll
2011-04-26 14:03:02 ----A---- C:\Windows\system32\rpcss.dll
2011-04-26 14:03:02 ----A---- C:\Windows\system32\iphlpsvc.dll
2011-04-26 14:03:02 ----A---- C:\Windows\system32\comdlg32.dll
2011-04-26 14:03:02 ----A---- C:\Windows\system32\audiosrv.dll
2011-04-26 14:03:01 ----A---- C:\Windows\system32\cmd.exe
2011-04-26 14:03:01 ----A---- C:\Windows\system32\BFE.DLL
2011-04-26 14:03:00 ----A---- C:\Windows\system32\Wldap32.dll
2011-04-26 14:03:00 ----A---- C:\Windows\system32\win32spl.dll
2011-04-26 14:03:00 ----A---- C:\Windows\system32\propsys.dll
2011-04-26 14:03:00 ----A---- C:\Windows\system32\nlasvc.dll
2011-04-26 14:03:00 ----A---- C:\Windows\system32\mfds.dll
2011-04-26 14:03:00 ----A---- C:\Windows\system32\framedynos.dll
2011-04-26 14:03:00 ----A---- C:\Windows\system32\drivers\volsnap.sys
2011-04-26 14:02:59 ----A---- C:\Windows\system32\wuaueng.dll
2011-04-26 14:02:59 ----A---- C:\Windows\system32\drivers\ndis.sys
2011-04-26 14:02:58 ----A---- C:\Windows\system32\wucltux.dll
2011-04-26 14:02:58 ----A---- C:\Windows\system32\winresume.exe
2011-04-26 14:02:58 ----A---- C:\Windows\system32\werconcpl.dll
2011-04-26 14:02:58 ----A---- C:\Windows\system32\samsrv.dll
2011-04-26 14:02:58 ----A---- C:\Windows\system32\profsvc.dll
2011-04-26 14:02:58 ----A---- C:\Windows\system32\ncsi.dll
2011-04-26 14:02:58 ----A---- C:\Windows\system32\drivers\netio.sys
2011-04-26 14:02:58 ----A---- C:\Windows\system32\azroles.dll
2011-04-26 14:02:56 ----A---- C:\Windows\system32\themeui.dll
2011-04-26 14:02:56 ----A---- C:\Windows\system32\taskeng.exe
2011-04-26 14:02:56 ----A---- C:\Windows\system32\spp.dll
2011-04-26 14:02:56 ----A---- C:\Windows\system32\credui.dll
2011-04-26 14:02:55 ----A---- C:\Windows\system32\drivers\storport.sys
2011-04-26 14:02:54 ----A---- C:\Windows\system32\dhcpcore.dll
2011-04-26 14:02:53 ----A---- C:\Windows\system32\mswsock.dll
2011-04-26 14:02:53 ----A---- C:\Windows\system32\drivers\http.sys
2011-04-26 14:02:52 ----A---- C:\Windows\system32\wintrust.dll
2011-04-26 14:02:52 ----A---- C:\Windows\system32\taskcomp.dll
2011-04-26 14:02:52 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2011-04-26 14:02:52 ----A---- C:\Windows\system32\msxml3.dll
2011-04-26 14:02:52 ----A---- C:\Windows\system32\mfreadwrite.dll
2011-04-26 14:02:52 ----A---- C:\Windows\system32\evr.dll
2011-04-26 14:02:52 ----A---- C:\Windows\system32\dxgi.dll
2011-04-26 14:02:52 ----A---- C:\Windows\system32\dbghelp.dll
2011-04-26 14:02:52 ----A---- C:\Windows\system32\basecsp.dll
2011-04-26 14:02:51 ----A---- C:\Windows\system32\WinSATAPI.dll
2011-04-26 14:02:51 ----A---- C:\Windows\system32\spoolsv.exe
2011-04-26 14:02:51 ----A---- C:\Windows\system32\gdi32.dll
2011-04-26 14:02:51 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2011-04-26 14:02:50 ----A---- C:\Windows\system32\vpnike.dll
2011-04-26 14:02:50 ----A---- C:\Windows\system32\srvsvc.dll
2011-04-26 14:02:50 ----A---- C:\Windows\system32\sqlsrv32.dll
2011-04-26 14:02:50 ----A---- C:\Windows\system32\QAGENTRT.DLL
2011-04-26 14:02:50 ----A---- C:\Windows\system32\drivers\amdsata.sys
2011-04-26 14:02:50 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2011-04-26 14:02:50 ----A---- C:\Windows\system32\calc.exe
2011-04-26 14:02:49 ----A---- C:\Windows\system32\UIRibbon.dll
2011-04-26 14:02:49 ----A---- C:\Windows\system32\lpksetup.exe
2011-04-26 14:02:49 ----A---- C:\Windows\system32\fveapi.dll
2011-04-26 14:02:49 ----A---- C:\Windows\system32\cryptsvc.dll
2011-04-26 14:02:48 ----A---- C:\Windows\system32\ws2_32.dll
2011-04-26 14:02:48 ----A---- C:\Windows\system32\sxs.dll
2011-04-26 14:02:48 ----A---- C:\Windows\system32\stobject.dll
2011-04-26 14:02:48 ----A---- C:\Windows\system32\netshell.dll
2011-04-26 14:02:48 ----A---- C:\Windows\system32\ie4uinit.exe
2011-04-26 14:02:48 ----A---- C:\Windows\system32\hgprint.dll
2011-04-26 14:02:48 ----A---- C:\Windows\system32\drivers\rdbss.sys
2011-04-26 14:02:48 ----A---- C:\Windows\system32\drivers\msdsm.sys
2011-04-26 14:02:48 ----A---- C:\Windows\system32\drivers\fvevol.sys
2011-04-26 14:02:47 ----A---- C:\Windows\system32\prncache.dll
2011-04-26 14:02:47 ----A---- C:\Windows\system32\printui.dll
2011-04-26 14:02:47 ----A---- C:\Windows\system32\msi.dll
2011-04-26 14:02:47 ----A---- C:\Windows\system32\inetpp.dll
2011-04-26 14:02:47 ----A---- C:\Windows\system32\comctl32.dll
2011-04-26 14:02:46 ----A---- C:\Windows\system32\WSDApi.dll
2011-04-26 14:02:46 ----A---- C:\Windows\system32\wmpeffects.dll
2011-04-26 14:02:46 ----A---- C:\Windows\system32\rpchttp.dll
2011-04-26 14:02:46 ----A---- C:\Windows\system32\net1.exe
2011-04-26 14:02:46 ----A---- C:\Windows\system32\dps.dll
2011-04-26 14:02:46 ----A---- C:\Windows\system32\ci.dll
2011-04-26 14:02:45 ----A---- C:\Windows\system32\FXSSVC.exe
2011-04-26 14:02:45 ----A---- C:\Windows\system32\drivers\pci.sys
2011-04-26 14:02:45 ----A---- C:\Windows\system32\aitagent.exe
2011-04-26 14:02:45 ----A---- C:\Windows\system32\aepdu.dll
2011-04-26 14:02:44 ----A---- C:\Windows\system32\WMVCORE.DLL
2011-04-26 14:02:44 ----A---- C:\Windows\system32\wlangpui.dll
2011-04-26 14:02:44 ----A---- C:\Windows\system32\vds.exe
2011-04-26 14:02:44 ----A---- C:\Windows\system32\scansetting.dll
2011-04-26 14:02:44 ----A---- C:\Windows\system32\MMDevAPI.dll
2011-04-26 14:02:44 ----A---- C:\Windows\system32\davclnt.dll
2011-04-26 14:02:43 ----A---- C:\Windows\system32\QSHVHOST.DLL
2011-04-26 14:02:43 ----A---- C:\Windows\system32\pnidui.dll
2011-04-26 14:02:43 ----A---- C:\Windows\system32\IPSECSVC.DLL
2011-04-26 14:02:43 ----A---- C:\Windows\system32\consent.exe
2011-04-26 14:02:43 ----A---- C:\Windows\system32\aaclient.dll
2011-04-26 14:02:42 ----A---- C:\Windows\system32\wpdshext.dll
2011-04-26 14:02:42 ----A---- C:\Windows\system32\webservices.dll
2011-04-26 14:02:42 ----A---- C:\Windows\system32\t2embed.dll
2011-04-26 14:02:42 ----A---- C:\Windows\system32\fde.dll
2011-04-26 14:02:42 ----A---- C:\Windows\system32\drivers\termdd.sys
2011-04-26 14:02:41 ----A---- C:\Windows\system32\netdiagfx.dll
2011-04-26 14:02:41 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2011-04-26 14:02:41 ----A---- C:\Windows\system32\drivers\amdxata.sys
2011-04-26 14:02:40 ----A---- C:\Windows\system32\SyncCenter.dll
2011-04-26 14:02:39 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2011-04-26 14:02:37 ----A---- C:\Windows\system32\sdengin2.dll
2011-04-26 14:02:36 ----A---- C:\Windows\system32\wuapi.dll
2011-04-26 14:02:36 ----A---- C:\Windows\system32\wscapi.dll
2011-04-26 14:02:35 ----A---- C:\Windows\system32\wisptis.exe
2011-04-26 14:02:35 ----A---- C:\Windows\system32\WinSCard.dll
2011-04-26 14:02:35 ----A---- C:\Windows\system32\pla.dll
2011-04-26 14:02:35 ----A---- C:\Windows\system32\msasn1.dll
2011-04-26 14:02:35 ----A---- C:\Windows\system32\mcmde.dll
2011-04-26 14:02:34 ----A---- C:\Windows\system32\winsta.dll
2011-04-26 14:02:34 ----A---- C:\Windows\system32\rdpcore.dll
2011-04-26 14:02:34 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2011-04-26 14:02:34 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2011-04-26 14:02:34 ----A---- C:\Windows\system32\drivers\msahci.sys
2011-04-26 14:02:33 ----A---- C:\Windows\system32\WUDFSvc.dll
2011-04-26 14:02:33 ----A---- C:\Windows\system32\wiaservc.dll
2011-04-26 14:02:33 ----A---- C:\Windows\system32\setupcl.exe
2011-04-26 14:02:33 ----A---- C:\Windows\system32\ntshrui.dll
2011-04-26 14:02:33 ----A---- C:\Windows\system32\imapi2.dll
2011-04-26 14:02:33 ----A---- C:\Windows\system32\iepeers.dll
2011-04-26 14:02:33 ----A---- C:\Windows\system32\conhost.exe
2011-04-26 14:02:32 ----A---- C:\Windows\system32\gameux.dll
2011-04-26 14:02:32 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2011-04-26 14:02:32 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2011-04-26 14:02:32 ----A---- C:\Windows\system32\aeinv.dll
2011-04-26 14:02:31 ----A---- C:\Windows\system32\WMPEncEn.dll
2011-04-26 14:02:31 ----A---- C:\Windows\system32\onex.dll
2011-04-26 14:02:31 ----A---- C:\Windows\system32\dwmredir.dll
2011-04-26 14:02:30 ----A---- C:\Windows\system32\winmm.dll
2011-04-26 14:02:30 ----A---- C:\Windows\system32\vaultsvc.dll
2011-04-26 14:02:30 ----A---- C:\Windows\system32\TabSvc.dll
2011-04-26 14:02:30 ----A---- C:\Windows\system32\shsvcs.dll
2011-04-26 14:02:30 ----A---- C:\Windows\system32\rasmans.dll
2011-04-26 14:02:30 ----A---- C:\Windows\system32\mssvp.dll
2011-04-26 14:02:30 ----A---- C:\Windows\system32\hbaapi.dll
2011-04-26 14:02:30 ----A---- C:\Windows\system32\drivers\udfs.sys
2011-04-26 14:02:30 ----A---- C:\Windows\system32\drivers\acpi.sys
2011-04-26 14:02:30 ----A---- C:\Windows\system32\autofmt.exe
2011-04-26 14:02:29 ----A---- C:\Windows\system32\Narrator.exe
2011-04-26 14:02:29 ----A---- C:\Windows\system32\bootres.dll
2011-04-26 14:02:28 ----A---- C:\Windows\system32\thumbcache.dll
2011-04-26 14:02:28 ----A---- C:\Windows\system32\samcli.dll
2011-04-26 14:02:28 ----A---- C:\Windows\system32\regapi.dll
2011-04-26 14:02:28 ----A---- C:\Windows\system32\proquota.exe
2011-04-26 14:02:28 ----A---- C:\Windows\system32\netiohlp.dll
2011-04-26 14:02:28 ----A---- C:\Windows\system32\msutb.dll
2011-04-26 14:02:28 ----A---- C:\Windows\system32\msinfo32.exe
2011-04-26 14:02:28 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2011-04-26 14:02:28 ----A---- C:\Windows\system32\halmacpi.dll
2011-04-26 14:02:28 ----A---- C:\Windows\system32\hal.dll
2011-04-26 14:02:28 ----A---- C:\Windows\system32\autochk.exe
2011-04-26 14:02:28 ----A---- C:\Windows\system32\autoconv.exe
2011-04-26 14:02:28 ----A---- C:\Windows\system32\AudioSes.dll
2011-04-26 14:02:28 ----A---- C:\Windows\system32\audiodg.exe
2011-04-26 14:02:27 ----A---- C:\Windows\system32\tcpipcfg.dll
2011-04-26 14:02:27 ----A---- C:\Windows\system32\srchadmin.dll
2011-04-26 14:02:27 ----A---- C:\Windows\system32\schtasks.exe
2011-04-26 14:02:27 ----A---- C:\Windows\system32\powercpl.dll
2011-04-26 14:02:27 ----A---- C:\Windows\system32\mimefilt.dll
2011-04-26 14:02:27 ----A---- C:\Windows\system32\ipsmsnap.dll
2011-04-26 14:02:27 ----A---- C:\Windows\system32\eapphost.dll
2011-04-26 14:02:27 ----A---- C:\Windows\system32\drivers\winusb.sys
2011-04-26 14:02:26 ----A---- C:\Windows\system32\wcncsvc.dll
2011-04-26 14:02:26 ----A---- C:\Windows\system32\sspicli.dll
2011-04-26 14:02:26 ----A---- C:\Windows\system32\msihnd.dll
2011-04-26 14:02:26 ----A---- C:\Windows\system32\mscorier.dll
2011-04-26 14:02:26 ----A---- C:\Windows\system32\framedyn.dll
2011-04-26 14:02:26 ----A---- C:\Windows\system32\drivers\volmgr.sys
2011-04-26 14:02:26 ----A---- C:\Windows\system32\drivers\partmgr.sys
2011-04-26 14:02:26 ----A---- C:\Windows\system32\drivers\netbt.sys
2011-04-26 14:02:26 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2011-04-26 14:02:25 ----A---- C:\Windows\system32\wdc.dll
2011-04-26 14:02:25 ----A---- C:\Windows\system32\umpo.dll
2011-04-26 14:02:25 ----A---- C:\Windows\system32\StructuredQuery.dll
2011-04-26 14:02:25 ----A---- C:\Windows\system32\QAGENT.DLL
2011-04-26 14:02:25 ----A---- C:\Windows\system32\netid.dll
2011-04-26 14:02:25 ----A---- C:\Windows\system32\DXP.dll
2011-04-26 14:02:25 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2011-04-26 14:02:25 ----A---- C:\Windows\system32\actxprxy.dll
2011-04-26 14:02:24 ----A---- C:\Windows\system32\Vault.dll
2011-04-26 14:02:24 ----A---- C:\Windows\system32\untfs.dll
2011-04-26 14:02:24 ----A---- C:\Windows\system32\sdclt.exe
2011-04-26 14:02:24 ----A---- C:\Windows\system32\scesrv.dll
2011-04-26 14:02:24 ----A---- C:\Windows\system32\rastls.dll
2011-04-26 14:02:24 ----A---- C:\Windows\system32\oleaut32.dll
2011-04-26 14:02:24 ----A---- C:\Windows\system32\nci.dll
2011-04-26 14:02:24 ----A---- C:\Windows\system32\drivers\ataport.sys
2011-04-26 14:02:23 ----A---- C:\Windows\system32\wlanpref.dll
2011-04-26 14:02:23 ----A---- C:\Windows\system32\sppsvc.exe
2011-04-26 14:02:23 ----A---- C:\Windows\system32\RpcRtRemote.dll
2011-04-26 14:02:23 ----A---- C:\Windows\system32\ListSvc.dll
2011-04-26 14:02:23 ----A---- C:\Windows\system32\licmgr10.dll
2011-04-26 14:02:22 ----A---- C:\Windows\system32\WMNetMgr.dll
2011-04-26 14:02:22 ----A---- C:\Windows\system32\Robocopy.exe
2011-04-26 14:02:22 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2011-04-26 14:02:18 ----A---- C:\Windows\system32\taskmgr.exe
2011-04-26 14:02:18 ----A---- C:\Windows\system32\mtxclu.dll
2011-04-26 14:02:18 ----A---- C:\Windows\system32\DxpTaskSync.dll
2011-04-26 14:02:18 ----A---- C:\Windows\system32\Display.dll
2011-04-26 14:02:17 ----A---- C:\Windows\system32\msdri.dll
2011-04-26 14:02:17 ----A---- C:\Windows\system32\drivers\mpio.sys
2011-04-26 14:02:16 ----A---- C:\Windows\system32\XpsRasterService.dll
2011-04-26 14:02:16 ----A---- C:\Windows\system32\userinit.exe
2011-04-26 14:02:16 ----A---- C:\Windows\system32\sharemediacpl.dll
2011-04-26 14:02:16 ----A---- C:\Windows\system32\puiobj.dll
2011-04-26 14:02:16 ----A---- C:\Windows\system32\mssphtb.dll
2011-04-26 14:02:16 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2011-04-26 14:02:16 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2011-04-26 14:02:15 ----A---- C:\Windows\system32\termmgr.dll
2011-04-26 14:02:15 ----A---- C:\Windows\system32\eudcedit.exe
2011-04-26 14:02:15 ----A---- C:\Windows\system32\drivers\scsiport.sys
2011-04-26 14:02:15 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2011-04-26 14:02:15 ----A---- C:\Windows\system32\DiagCpl.dll
2011-04-26 14:02:14 ----A---- C:\Windows\system32\msdtctm.dll
2011-04-26 14:02:14 ----A---- C:\Windows\system32\logoncli.dll
2011-04-26 14:02:13 ----A---- C:\Windows\system32\wiadefui.dll
2011-04-26 14:02:13 ----A---- C:\Windows\system32\sppcomapi.dll
2011-04-26 14:02:13 ----A---- C:\Windows\system32\shsetup.dll
2011-04-26 14:02:13 ----A---- C:\Windows\system32\rasppp.dll
2011-04-26 14:02:13 ----A---- C:\Windows\system32\msconfig.exe
2011-04-26 14:02:13 ----A---- C:\Windows\system32\biocpl.dll
2011-04-26 14:02:12 ----A---- C:\Windows\system32\themecpl.dll
2011-04-26 14:02:12 ----A---- C:\Windows\system32\SensorsCpl.dll
2011-04-26 14:02:12 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2011-04-26 14:02:12 ----A---- C:\Windows\system32\cabview.dll
2011-04-26 14:02:11 ----A---- C:\Windows\system32\wpccpl.dll
2011-04-26 14:02:11 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2011-04-26 14:02:11 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2011-04-26 14:02:11 ----A---- C:\Windows\system32\dnscmmc.dll
2011-04-26 14:02:10 ----A---- C:\Windows\system32\winsrv.dll
2011-04-26 14:02:10 ----A---- C:\Windows\system32\tapisrv.dll
2011-04-26 14:02:10 ----A---- C:\Windows\system32\scecli.dll
2011-04-26 14:02:10 ----A---- C:\Windows\system32\hgcpl.dll
2011-04-26 14:02:10 ----A---- C:\Windows\system32\fontext.dll
2011-04-26 14:02:10 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2011-04-26 14:02:09 ----A---- C:\Windows\system32\srcore.dll
2011-04-26 14:02:09 ----A---- C:\Windows\system32\SndVolSSO.dll
2011-04-26 14:02:09 ----A---- C:\Windows\system32\mscories.dll
2011-04-26 14:02:09 ----A---- C:\Windows\system32\mscms.dll
2011-04-26 14:02:09 ----A---- C:\Windows\system32\mprddm.dll
2011-04-26 14:02:09 ----A---- C:\Windows\system32\localsec.dll
2011-04-26 14:02:09 ----A---- C:\Windows\system32\iasacct.dll
2011-04-26 14:02:09 ----A---- C:\Windows\system32\drivers\usbhub.sys
2011-04-26 14:02:09 ----A---- C:\Windows\system32\bcdsrv.dll
2011-04-26 14:02:08 ----A---- C:\Windows\system32\wlanui.dll
2011-04-26 14:02:08 ----A---- C:\Windows\system32\wkssvc.dll
2011-04-26 14:02:08 ----A---- C:\Windows\system32\w32tm.exe
2011-04-26 14:02:08 ----A---- C:\Windows\system32\VAN.dll
2011-04-26 14:02:08 ----A---- C:\Windows\system32\usercpl.dll
2011-04-26 14:02:08 ----A---- C:\Windows\system32\SndVol.exe
2011-04-26 14:02:08 ----A---- C:\Windows\system32\qedit.dll
2011-04-26 14:02:08 ----A---- C:\Windows\system32\qdvd.dll
2011-04-26 14:02:08 ----A---- C:\Windows\system32\prntvpt.dll
2011-04-26 14:02:08 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2011-04-26 14:02:08 ----A---- C:\Windows\system32\netcenter.dll
2011-04-26 14:02:08 ----A---- C:\Windows\system32\mblctr.exe
2011-04-26 14:02:08 ----A---- C:\Windows\system32\KMSVC.DLL
2011-04-26 14:02:08 ----A---- C:\Windows\system32\batmeter.dll
2011-04-26 14:02:07 ----A---- C:\Windows\system32\wpdbusenum.dll
2011-04-26 14:02:07 ----A---- C:\Windows\system32\wksprt.exe
2011-04-26 14:02:07 ----A---- C:\Windows\system32\spwizeng.dll
2011-04-26 14:02:07 ----A---- C:\Windows\system32\azroleui.dll
2011-04-26 14:02:07 ----A---- C:\Windows\system32\accessibilitycpl.dll
2011-04-26 14:02:06 ----A---- C:\Windows\system32\zipfldr.dll
2011-04-26 14:02:06 ----A---- C:\Windows\system32\netjoin.dll
2011-04-26 14:02:06 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2011-04-26 14:02:06 ----A---- C:\Windows\system32\fdeploy.dll
2011-04-26 14:02:06 ----A---- C:\Windows\system32\drivers\ks.sys
2011-04-26 14:02:06 ----A---- C:\Windows\system32\drivers\afd.sys
2011-04-26 14:02:06 ----A---- C:\Windows\system32\cryptui.dll
2011-04-26 14:02:05 ----A---- C:\Windows\system32\wusa.exe
2011-04-26 14:02:05 ----A---- C:\Windows\system32\networkmap.dll
2011-04-26 14:02:05 ----A---- C:\Windows\system32\mspbda.dll
2011-04-26 14:02:05 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2011-04-26 14:02:05 ----A---- C:\Windows\system32\Faultrep.dll
2011-04-26 14:02:05 ----A---- C:\Windows\system32\cfgmgr32.dll
2011-04-26 14:02:05 ----A---- C:\Windows\system32\adsldp.dll
2011-04-26 14:02:04 ----A---- C:\Windows\system32\taskhost.exe
2011-04-26 14:02:04 ----A---- C:\Windows\system32\taskbarcpl.dll
2011-04-26 14:02:04 ----A---- C:\Windows\system32\sud.dll
2011-04-26 14:02:04 ----A---- C:\Windows\system32\slui.exe
2011-04-26 14:02:04 ----A---- C:\Windows\system32\prnfldr.dll
2011-04-26 14:02:04 ----A---- C:\Windows\system32\photowiz.dll
2011-04-26 14:02:04 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2011-04-26 14:02:04 ----A---- C:\Windows\system32\msieftp.dll
2011-04-26 14:02:04 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2011-04-26 14:02:04 ----A---- C:\Windows\system32\credssp.dll
2011-04-26 14:02:04 ----A---- C:\Windows\system32\ActionCenter.dll
2011-04-26 14:02:03 ----A---- C:\Windows\system32\rdpcorekmts.dll
2011-04-26 14:02:03 ----A---- C:\Windows\system32\iprtrmgr.dll
2011-04-26 14:02:03 ----A---- C:\Windows\system32\iasrad.dll
2011-04-26 14:02:03 ----A---- C:\Windows\system32\drivers\hidclass.sys
2011-04-26 14:02:03 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2011-04-26 14:02:02 ----A---- C:\Windows\system32\halacpi.dll
2011-04-26 14:02:02 ----A---- C:\Windows\system32\ftp.exe
2011-04-26 14:02:02 ----A---- C:\Windows\system32\dot3cfg.dll
2011-04-26 14:02:01 ----A---- C:\Windows\system32\sisbkup.dll
2011-04-26 14:02:01 ----A---- C:\Windows\system32\ieUnatt.exe
2011-04-26 14:02:00 ----A---- C:\Windows\system32\wpd_ci.dll
2011-04-26 14:02:00 ----A---- C:\Windows\system32\shwebsvc.dll
2011-04-26 14:02:00 ----A---- C:\Windows\system32\ifsutil.dll
2011-04-26 14:01:58 ----A---- C:\Windows\system32\syncui.dll
2011-04-26 14:01:58 ----A---- C:\Windows\system32\sdcpl.dll
2011-04-26 14:01:58 ----A---- C:\Windows\system32\recovery.dll
2011-04-26 14:01:58 ----A---- C:\Windows\system32\rdpwsx.dll
2011-04-26 14:01:58 ----A---- C:\Windows\system32\odbcjt32.dll
2011-04-26 14:01:58 ----A---- C:\Windows\system32\iesysprep.dll
2011-04-26 14:01:58 ----A---- C:\Windows\system32\efscore.dll
2011-04-26 14:01:58 ----A---- C:\Windows\system32\autoplay.dll
2011-04-26 14:01:58 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2011-04-26 14:01:57 ----A---- C:\Windows\system32\wmpmde.dll
2011-04-26 14:01:57 ----A---- C:\Windows\system32\sppnp.dll
2011-04-26 14:01:57 ----A---- C:\Windows\system32\ntlanman.dll
2011-04-26 14:01:57 ----A---- C:\Windows\system32\DeviceCenter.dll
2011-04-26 14:01:57 ----A---- C:\Windows\system32\bcdedit.exe
2011-04-26 14:01:56 ----A---- C:\Windows\system32\vdsutil.dll
2011-04-26 14:01:56 ----A---- C:\Windows\system32\systemcpl.dll
2011-04-26 14:01:56 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2011-04-26 14:01:56 ----A---- C:\Windows\system32\rtutils.dll
2011-04-26 14:01:56 ----A---- C:\Windows\system32\recdisc.exe
2011-04-26 14:01:56 ----A---- C:\Windows\system32\OobeFldr.dll
2011-04-26 14:01:56 ----A---- C:\Windows\system32\ntprint.dll
2011-04-26 14:01:56 ----A---- C:\Windows\system32\nshwfp.dll
2011-04-26 14:01:56 ----A---- C:\Windows\system32\dskquoui.dll
2011-04-26 14:01:56 ----A---- C:\Windows\system32\bcdboot.exe
2011-04-26 14:01:55 ----A---- C:\Windows\system32\sethc.exe
2011-04-26 14:01:55 ----A---- C:\Windows\system32\rstrui.exe
2011-04-26 14:01:55 ----A---- C:\Windows\system32\riched20.dll
2011-04-26 14:01:55 ----A---- C:\Windows\system32\drivers\tdx.sys
2011-04-26 14:01:55 ----A---- C:\Windows\system32\blackbox.dll
2011-04-26 14:01:55 ----A---- C:\Windows\system32\AxInstSv.dll
2011-04-26 14:01:54 ----A---- C:\Windows\system32\wmpsrcwp.dll
2011-04-26 14:01:54 ----A---- C:\Windows\system32\netplwiz.dll
2011-04-26 14:01:54 ----A---- C:\Windows\system32\NAPHLPR.DLL
2011-04-26 14:01:54 ----A---- C:\Windows\system32\migisol.dll
2011-04-26 14:01:54 ----A---- C:\Windows\system32\httpapi.dll
2011-04-26 14:01:54 ----A---- C:\Windows\system32\fms.dll
2011-04-26 14:01:54 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2011-04-26 14:01:54 ----A---- C:\Windows\system32\cdosys.dll
2011-04-26 14:01:54 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2011-04-26 14:01:54 ----A---- C:\Windows\system32\activeds.dll
2011-04-26 14:01:53 ----A---- C:\Windows\system32\wsqmcons.exe
2011-04-26 14:01:53 ----A---- C:\Windows\system32\nshipsec.dll
2011-04-26 14:01:53 ----A---- C:\Windows\system32\nlaapi.dll
2011-04-26 14:01:53 ----A---- C:\Windows\system32\msftedit.dll
2011-04-26 14:01:53 ----A---- C:\Windows\system32\isoburn.exe
2011-04-26 14:01:53 ----A---- C:\Windows\system32\dot3svc.dll
2011-04-26 14:01:53 ----A---- C:\Windows\system32\asycfilt.dll
2011-04-26 14:01:52 ----A---- C:\Windows\system32\wvc.dll
2011-04-26 14:01:52 ----A---- C:\Windows\system32\wuwebv.dll
2011-04-26 14:01:52 ----A---- C:\Windows\system32\wtsapi32.dll
2011-04-26 14:01:52 ----A---- C:\Windows\system32\wlanmsm.dll
2011-04-26 14:01:52 ----A---- C:\Windows\system32\wavemsp.dll
2011-04-26 14:01:52 ----A---- C:\Windows\system32\tzutil.exe
2011-04-26 14:01:52 ----A---- C:\Windows\system32\sysclass.dll
2011-04-26 14:01:52 ----A---- C:\Windows\system32\ReAgent.dll
2011-04-26 14:01:52 ----A---- C:\Windows\system32\provsvc.dll
2011-04-26 14:01:52 ----A---- C:\Windows\system32\ocsetup.exe
2011-04-26 14:01:52 ----A---- C:\Windows\system32\dsuiext.dll
2011-04-26 14:01:52 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2011-04-26 14:01:52 ----A---- C:\Windows\system32\dot3ui.dll
2011-04-26 14:01:52 ----A---- C:\Windows\system32\dfrgui.exe
2011-04-26 14:01:52 ----A---- C:\Windows\system32\appinfo.dll
2011-04-26 14:01:51 ----A---- C:\Windows\system32\wimgapi.dll
2011-04-26 14:01:51 ----A---- C:\Windows\system32\webcheck.dll
2011-04-26 14:01:51 ----A---- C:\Windows\system32\twext.dll
2011-04-26 14:01:51 ----A---- C:\Windows\system32\mstask.dll
2011-04-26 14:01:51 ----A---- C:\Windows\system32\certprop.dll
2011-04-26 14:01:50 ----A---- C:\Windows\twain_32.dll
2011-04-26 14:01:50 ----A---- C:\Windows\system32\uxlib.dll
2011-04-26 14:01:50 ----A---- C:\Windows\system32\shdocvw.dll
2011-04-26 14:01:50 ----A---- C:\Windows\system32\setupugc.exe
2011-04-26 14:01:50 ----A---- C:\Windows\system32\qcap.dll
2011-04-26 14:01:50 ----A---- C:\Windows\system32\qasf.dll
2011-04-26 14:01:50 ----A---- C:\Windows\system32\occache.dll
2011-04-26 14:01:50 ----A---- C:\Windows\system32\msrating.dll
2011-04-26 14:01:50 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-04-26 14:01:50 ----A---- C:\Windows\system32\imm32.dll
2011-04-26 14:01:49 ----A---- C:\Windows\system32\wwanconn.dll
2011-04-26 14:01:49 ----A---- C:\Windows\system32\wmdrmsdk.dll
2011-04-26 14:01:49 ----A---- C:\Windows\system32\srrstr.dll
2011-04-26 14:01:49 ----A---- C:\Windows\system32\slwga.dll
2011-04-26 14:01:49 ----A---- C:\Windows\system32\nslookup.exe
2011-04-26 14:01:49 ----A---- C:\Windows\system32\msvfw32.dll
2011-04-26 14:01:49 ----A---- C:\Windows\system32\mciavi32.dll
2011-04-26 14:01:49 ----A---- C:\Windows\system32\imgutil.dll
2011-04-26 14:01:49 ----A---- C:\Windows\system32\audiodev.dll
2011-04-26 14:01:48 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2011-04-26 14:01:48 ----A---- C:\Windows\system32\wimserv.exe
2011-04-26 14:01:48 ----A---- C:\Windows\system32\msscp.dll
2011-04-26 14:01:48 ----A---- C:\Windows\system32\diskraid.exe
2011-04-26 14:01:48 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2011-04-26 14:01:48 ----A---- C:\Windows\system32\clusapi.dll
2011-04-26 14:01:47 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2011-04-26 14:01:47 ----A---- C:\Windows\system32\TSpkg.dll
2011-04-26 14:01:47 ----A---- C:\Windows\system32\sdrsvc.dll
2011-04-26 14:01:47 ----A---- C:\Windows\system32\remotepg.dll
2011-04-26 14:01:47 ----A---- C:\Windows\system32\rdpencom.dll
2011-04-26 14:01:47 ----A---- C:\Windows\system32\raschap.dll
2011-04-26 14:01:47 ----A---- C:\Windows\system32\QUTIL.DLL
2011-04-26 14:01:47 ----A---- C:\Windows\system32\perfmon.exe
2011-04-26 14:01:47 ----A---- C:\Windows\system32\odbccp32.dll
2011-04-26 14:01:47 ----A---- C:\Windows\system32\networkexplorer.dll
2011-04-26 14:01:47 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2011-04-26 14:01:47 ----A---- C:\Windows\system32\input.dll
2011-04-26 14:01:47 ----A---- C:\Windows\system32\drmmgrtn.dll
2011-04-26 14:01:47 ----A---- C:\Windows\system32\browser.dll
2011-04-26 14:01:47 ----A---- C:\Windows\system32\acppage.dll
2011-04-26 14:01:46 ----A---- C:\Windows\system32\wmpdxm.dll
2011-04-26 14:01:46 ----A---- C:\Windows\system32\vpnikeapi.dll
2011-04-26 14:01:46 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2011-04-26 14:01:46 ----A---- C:\Windows\system32\onexui.dll
2011-04-26 14:01:46 ----A---- C:\Windows\system32\olepro32.dll
2011-04-26 14:01:46 ----A---- C:\Windows\system32\ocsetapi.dll
2011-04-26 14:01:46 ----A---- C:\Windows\system32\nltest.exe
2011-04-26 14:01:45 ----A---- C:\Windows\system32\wpdwcn.dll
2011-04-26 14:01:45 ----A---- C:\Windows\system32\vdsbas.dll
2011-04-26 14:01:45 ----A---- C:\Windows\system32\iTVData.dll
2011-04-26 14:01:44 ----A---- C:\Windows\system32\runonce.exe
2011-04-26 14:01:44 ----A---- C:\Windows\bfsvc.exe
2011-04-26 14:01:43 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-04-26 14:01:43 ----A---- C:\Windows\system32\Mcx2Svc.dll
2011-04-26 14:01:43 ----A---- C:\Windows\system32\logagent.exe
2011-04-26 14:01:43 ----A---- C:\Windows\system32\inseng.dll
2011-04-26 14:01:43 ----A---- C:\Windows\system32\dxdiagn.dll
2011-04-26 14:01:42 ----A---- C:\Windows\system32\sspisrv.dll
2011-04-26 14:01:42 ----A---- C:\Windows\system32\drivers\sdbus.sys
2011-04-26 14:01:41 ----A---- C:\Windows\system32\msvidc32.dll
2011-04-26 14:01:41 ----A---- C:\Windows\system32\msiexec.exe
2011-04-26 14:01:41 ----A---- C:\Windows\system32\MFPlay.dll
2011-04-26 14:01:41 ----A---- C:\Windows\system32\eapp3hst.dll
2011-04-26 14:01:41 ----A---- C:\Windows\system32\drivers\rmcast.sys
2011-04-26 14:01:41 ----A---- C:\Windows\system32\d3d10level9.dll
2011-04-26 14:01:40 ----A---- C:\Windows\system32\wudriver.dll
2011-04-26 14:01:40 ----A---- C:\Windows\system32\wmpshell.dll
2011-04-26 14:01:40 ----A---- C:\Windows\system32\wmdrmdev.dll
2011-04-26 14:01:40 ----A---- C:\Windows\system32\unimdmat.dll
2011-04-26 14:01:40 ----A---- C:\Windows\system32\sqlcese30.dll
2011-04-26 14:01:40 ----A---- C:\Windows\system32\shacct.dll
2011-04-26 14:01:40 ----A---- C:\Windows\system32\rdpd3d.dll
2011-04-26 14:01:40 ----A---- C:\Windows\system32\PnPUnattend.exe
2011-04-26 14:01:40 ----A---- C:\Windows\system32\lsmproxy.dll
2011-04-26 14:01:40 ----A---- C:\Windows\system32\iscsium.dll
2011-04-26 14:01:40 ----A---- C:\Windows\system32\bitsadmin.exe
2011-04-26 14:01:39 ----A---- C:\Windows\system32\tabcal.exe
2011-04-26 14:01:39 ----A---- C:\Windows\system32\pdh.dll
2011-04-26 14:01:39 ----A---- C:\Windows\system32\OpcServices.dll
2011-04-26 14:01:39 ----A---- C:\Windows\system32\mprapi.dll
2011-04-26 14:01:39 ----A---- C:\Windows\system32\cscapi.dll
2011-04-26 14:01:38 ----A---- C:\Windows\system32\wwanprotdim.dll
2011-04-26 14:01:38 ----A---- C:\Windows\system32\WUDFPlatform.dll
2011-04-26 14:01:38 ----A---- C:\Windows\system32\WPDSp.dll
2011-04-26 14:01:38 ----A---- C:\Windows\system32\srvcli.dll
2011-04-26 14:01:38 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2011-04-26 14:01:38 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2011-04-26 14:01:38 ----A---- C:\Windows\system32\olethk32.dll
2011-04-26 14:01:38 ----A---- C:\Windows\system32\odbctrac.dll
2011-04-26 14:01:38 ----A---- C:\Windows\system32\ncryptui.dll
2011-04-26 14:01:38 ----A---- C:\Windows\system32\MdSched.exe
2011-04-26 14:01:38 ----A---- C:\Windows\system32\logman.exe
2011-04-26 14:01:38 ----A---- C:\Windows\system32\djoin.exe
2011-04-26 14:01:37 ----A---- C:\Windows\system32\WMPhoto.dll
2011-04-26 14:01:37 ----A---- C:\Windows\system32\WMADMOD.DLL
2011-04-26 14:01:37 ----A---- C:\Windows\system32\utildll.dll
2011-04-26 14:01:37 ----A---- C:\Windows\system32\tsgqec.dll
2011-04-26 14:01:37 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2011-04-26 14:01:37 ----A---- C:\Windows\system32\mshtmled.dll
2011-04-26 14:01:37 ----A---- C:\Windows\system32\mapistub.dll
2011-04-26 14:01:37 ----A---- C:\Windows\system32\mapi32.dll
2011-04-26 14:01:37 ----A---- C:\Windows\system32\lpremove.exe
2011-04-26 14:01:37 ----A---- C:\Windows\system32\fphc.dll
2011-04-26 14:01:37 ----A---- C:\Windows\system32\avifil32.dll
2011-04-26 14:01:37 ----A---- C:\Windows\system32\ActionQueue.dll
2011-04-26 14:01:36 ----A---- C:\Windows\system32\WMVSDECD.DLL
2011-04-26 14:01:36 ----A---- C:\Windows\system32\wmdrmnet.dll
2011-04-26 14:01:36 ----A---- C:\Windows\system32\WindowsAnytimeUpgrade.exe
2011-04-26 14:01:36 ----A---- C:\Windows\system32\wiavideo.dll
2011-04-26 14:01:36 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2011-04-26 14:01:36 ----A---- C:\Windows\system32\takeown.exe
2011-04-26 14:01:36 ----A---- C:\Windows\system32\sqmapi.dll
2011-04-26 14:01:36 ----A---- C:\Windows\system32\qdv.dll
2011-04-26 14:01:36 ----A---- C:\Windows\system32\iyuv_32.dll
2011-04-26 14:01:36 ----A---- C:\Windows\system32\imagehlp.dll
2011-04-26 14:01:36 ----A---- C:\Windows\system32\EhStorAPI.dll
2011-04-26 14:01:36 ----A---- C:\Windows\system32\dot3msm.dll
2011-04-26 14:01:35 ----A---- C:\Windows\system32\WUDFx.dll
2011-04-26 14:01:35 ----A---- C:\Windows\system32\unattend.dll
2011-04-26 14:01:35 ----A---- C:\Windows\system32\sppinst.dll
2011-04-26 14:01:35 ----A---- C:\Windows\system32\RelPost.exe
2011-04-26 14:01:35 ----A---- C:\Windows\system32\QCLIPROV.DLL
2011-04-26 14:01:35 ----A---- C:\Windows\system32\msyuv.dll
2011-04-26 14:01:35 ----A---- C:\Windows\system32\msrle32.dll
2011-04-26 14:01:35 ----A---- C:\Windows\system32\msnetobj.dll
2011-04-26 14:01:35 ----A---- C:\Windows\system32\cmstp.exe
2011-04-26 14:01:35 ----A---- C:\Windows\system32\cca.dll
2011-04-26 14:01:34 ----A---- C:\Windows\system32\WUDFHost.exe
2011-04-26 14:01:34 ----A---- C:\Windows\system32\wuauclt.exe
2011-04-26 14:01:34 ----A---- C:\Windows\system32\wsnmp32.dll
2011-04-26 14:01:34 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2011-04-26 14:01:34 ----A---- C:\Windows\system32\vfwwdm32.dll
2011-04-26 14:01:34 ----A---- C:\Windows\system32\umb.dll
2011-04-26 14:01:34 ----A---- C:\Windows\system32\tsbyuv.dll
2011-04-26 14:01:34 ----A---- C:\Windows\system32\setupcln.dll
2011-04-26 14:01:34 ----A---- C:\Windows\system32\pdhui.dll
2011-04-26 14:01:34 ----A---- C:\Windows\system32\MuiUnattend.exe
2011-04-26 14:01:34 ----A---- C:\Windows\system32\msorcl32.dll
2011-04-26 14:01:34 ----A---- C:\Windows\system32\iasrecst.dll
2011-04-26 14:01:34 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2011-04-26 14:01:34 ----A---- C:\Windows\system32\basesrv.dll
2011-04-26 14:01:34 ----A---- C:\Windows\system32\AzSqlExt.dll
2011-04-26 14:01:33 ----A---- C:\Windows\system32\WavDest.dll
2011-04-26 14:01:33 ----A---- C:\Windows\system32\relog.exe
2011-04-26 14:01:33 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2011-04-26 14:01:33 ----A---- C:\Windows\system32\netiougc.exe
2011-04-26 14:01:33 ----A---- C:\Windows\system32\iscsicli.exe
2011-04-26 14:01:33 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2011-04-26 14:01:32 ----A---- C:\Windows\system32\wkscli.dll
2011-04-26 14:01:32 ----A---- C:\Windows\system32\sppuinotify.dll
2011-04-26 14:01:32 ----A---- C:\Windows\system32\spbcd.dll
2011-04-26 14:01:32 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2011-04-26 14:01:32 ----A---- C:\Windows\system32\resutils.dll
2011-04-26 14:01:32 ----A---- C:\Windows\system32\rastapi.dll
2011-04-26 14:01:32 ----A---- C:\Windows\system32\netbtugc.exe
2011-04-26 14:01:32 ----A---- C:\Windows\system32\mydocs.dll
2011-04-26 14:01:32 ----A---- C:\Windows\system32\MultiDigiMon.exe
2011-04-26 14:01:32 ----A---- C:\Windows\system32\diskpart.exe
2011-04-26 14:01:32 ----A---- C:\Windows\system32\amstream.dll
2011-04-26 14:01:31 ----A---- C:\Windows\system32\wmpps.dll
2011-04-26 14:01:31 ----A---- C:\Windows\system32\syssetup.dll
2011-04-26 14:01:31 ----A---- C:\Windows\system32\setbcdlocale.dll
2011-04-26 14:01:31 ----A---- C:\Windows\system32\secproc_ssp.dll
2011-04-26 14:01:31 ----A---- C:\Windows\system32\nrpsrv.dll
2011-04-26 14:01:31 ----A---- C:\Windows\system32\itircl.dll
2011-04-26 14:01:31 ----A---- C:\Windows\system32\CertPolEng.dll
2011-04-26 14:01:30 ----A---- C:\Windows\system32\FXSTIFF.dll
2011-04-26 14:01:30 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2011-04-26 14:01:28 ----A---- C:\Windows\system32\wuapp.exe
2011-04-26 14:01:28 ----A---- C:\Windows\system32\wiarpc.dll
2011-04-26 14:01:28 ----A---- C:\Windows\system32\WerFaultSecure.exe
2011-04-26 14:01:28 ----A---- C:\Windows\system32\tlscsp.dll
2011-04-26 14:01:28 ----A---- C:\Windows\system32\secur32.dll
2011-04-26 14:01:28 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2011-04-26 14:01:28 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2011-04-26 14:01:28 ----A---- C:\Windows\system32\ReAgentc.exe
2011-04-26 14:01:28 ----A---- C:\Windows\system32\netutils.dll
2011-04-26 14:01:28 ----A---- C:\Windows\system32\findstr.exe
2011-04-26 14:01:28 ----A---- C:\Windows\system32\eappgnui.dll
2011-04-26 14:01:27 ----A---- C:\Windows\system32\netapi32.dll
2011-04-26 14:01:27 ----A---- C:\Windows\system32\muifontsetup.dll
2011-04-26 14:01:27 ----A---- C:\Windows\system32\mobsync.exe
2011-04-26 14:01:27 ----A---- C:\Windows\system32\mciqtz32.dll
2011-04-26 14:01:27 ----A---- C:\Windows\system32\iccvid.dll
2011-04-26 14:01:27 ----A---- C:\Windows\system32\cabinet.dll
2011-04-26 14:01:26 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2011-04-26 14:01:26 ----A---- C:\Windows\system32\unlodctr.exe
2011-04-26 14:01:26 ----A---- C:\Windows\system32\sppc.dll
2011-04-26 14:01:26 ----A---- C:\Windows\system32\spopk.dll
2011-04-26 14:01:26 ----A---- C:\Windows\system32\shimgvw.dll
2011-04-26 14:01:26 ----A---- C:\Windows\system32\repair-bde.exe
2011-04-26 14:01:26 ----A---- C:\Windows\system32\prevhost.exe
2011-04-26 14:01:26 ----A---- C:\Windows\system32\luainstall.dll
2011-04-26 14:01:26 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2011-04-26 14:01:26 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2011-04-26 14:01:26 ----A---- C:\Windows\system32\drivers\tdi.sys
2011-04-26 14:01:26 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2011-04-26 14:01:26 ----A---- C:\Windows\system32\dosx.exe
2011-04-26 14:01:25 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2011-04-26 14:01:25 ----A---- C:\Windows\system32\netcfg.exe
2011-04-26 14:01:25 ----A---- C:\Windows\system32\msdmo.dll
2011-04-26 14:01:25 ----A---- C:\Windows\system32\manage-bde.exe
2011-04-26 14:01:25 ----A---- C:\Windows\system32\inetmib1.dll
2011-04-26 14:01:24 ----A---- C:\Windows\system32\wups.dll
2011-04-26 14:01:24 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2011-04-26 14:01:24 ----A---- C:\Windows\system32\UIRibbonRes.dll
2011-04-26 14:01:24 ----A---- C:\Windows\system32\profprov.dll
2011-04-26 14:01:24 ----A---- C:\Windows\system32\odbcconf.dll
2011-04-26 14:01:24 ----A---- C:\Windows\system32\drivers\cdrom.sys
2011-04-26 14:01:24 ----A---- C:\Windows\system32\browcli.dll
2011-04-26 14:01:23 ----A---- C:\Windows\system32\perfts.dll
2011-04-26 14:01:23 ----A---- C:\Windows\system32\icaapi.dll
2011-04-26 14:01:22 ----A---- C:\Windows\system32\TRAPI.dll
2011-04-26 14:01:22 ----A---- C:\Windows\system32\RDPENCDD.dll
2011-04-26 14:01:22 ----A---- C:\Windows\system32\msfeedssync.exe
2011-04-26 14:01:22 ----A---- C:\Windows\system32\FXSMON.dll
2011-04-26 14:01:22 ----A---- C:\Windows\system32\elsTrans.dll
2011-04-26 14:01:22 ----A---- C:\Windows\system32\drivers\tunnel.sys
2011-04-26 14:01:22 ----A---- C:\Windows\system32\drivers\dfsc.sys
2011-04-26 14:01:21 ----A---- C:\Windows\system32\bitsperf.dll
2011-04-26 14:01:20 ----A---- C:\Windows\system32\wshbth.dll
2011-04-26 14:01:20 ----A---- C:\Windows\system32\schedcli.dll
2011-04-26 14:01:20 ----A---- C:\Windows\system32\napdsnap.dll
2011-04-26 14:01:20 ----A---- C:\Windows\system32\LogonUI.exe
2011-04-26 14:01:20 ----A---- C:\Windows\system32\dsauth.dll
2011-04-26 14:01:20 ----A---- C:\Windows\system32\cscdll.dll
2011-04-26 14:01:19 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2011-04-26 14:01:18 ----A---- C:\Windows\system32\wsdchngr.dll
2011-04-26 14:01:18 ----A---- C:\Windows\system32\sscore.dll
2011-04-26 14:01:18 ----A---- C:\Windows\system32\shgina.dll
2011-04-26 14:01:18 ----A---- C:\Windows\system32\riched32.dll
2011-04-26 14:01:17 ----A---- C:\Windows\system32\wups2.dll
2011-04-26 14:01:17 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2011-04-26 14:01:16 ----A---- C:\Windows\system32\rdpcfgex.dll
2011-04-26 14:01:16 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2011-04-26 14:01:16 ----A---- C:\Windows\system32\drivers\hidusb.sys
2011-04-26 14:01:16 ----A---- C:\Windows\system32\drivers\appid.sys
2011-04-26 14:01:12 ----A---- C:\Windows\system32\wshirda.dll
2011-04-26 14:01:12 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2011-04-26 14:01:11 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2011-04-26 14:01:11 ----A---- C:\Windows\system32\drivers\USBCAMD.sys
2011-04-26 14:01:11 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2011-04-26 14:01:11 ----A---- C:\Windows\system32\browseui.dll
2011-04-26 14:01:10 ----A---- C:\Windows\system32\spwmp.dll
2011-04-26 14:01:10 ----A---- C:\Windows\system32\drivers\wanarp.sys
2011-04-26 14:01:10 ----A---- C:\Windows\system32\drivers\umbus.sys
2011-04-26 14:01:10 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2011-04-26 14:01:10 ----A---- C:\Windows\system32\drivers\tdpipe.sys
2011-04-26 14:01:10 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2011-04-26 14:01:10 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2011-04-26 14:01:10 ----A---- C:\Windows\system32\C_ISCII.DLL
2011-04-26 14:01:09 ----A---- C:\Windows\system32\shunimpl.dll
2011-04-26 14:01:09 ----A---- C:\Windows\system32\RDPREFDD.dll
2011-04-26 14:01:09 ----A---- C:\Windows\system32\dxmasf.dll
2011-04-26 14:01:09 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2011-04-26 14:01:09 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2011-04-26 14:01:09 ----A---- C:\Windows\system32\drivers\scfilter.sys
2011-04-26 14:01:09 ----A---- C:\Windows\system32\drivers\RDPCDD.sys
2011-04-26 14:01:08 ----A---- C:\Windows\system32\wmploc.DLL
2011-04-26 14:01:07 ----A---- C:\Windows\system32\KBDUS.DLL
2011-04-26 14:01:07 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2011-04-26 14:01:07 ----A---- C:\Windows\system32\KBDTURME.DLL
2011-04-26 14:01:07 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2011-04-26 14:01:07 ----A---- C:\Windows\system32\KBDMON.DLL
2011-04-26 14:01:07 ----A---- C:\Windows\system32\KBDINTEL.DLL
2011-04-26 14:01:07 ----A---- C:\Windows\system32\KBDINKAN.DLL
2011-04-26 14:01:06 ----A---- C:\Windows\system32\tzres.dll
2011-04-26 14:01:06 ----A---- C:\Windows\system32\KBDTUQ.DLL
2011-04-26 14:01:06 ----A---- C:\Windows\system32\KBDTUF.DLL
2011-04-26 14:01:06 ----A---- C:\Windows\system32\KBDSG.DLL
2011-04-26 14:01:06 ----A---- C:\Windows\system32\KBDSF.DLL
2011-04-26 14:01:06 ----A---- C:\Windows\system32\KBDPO.DLL
2011-04-26 14:01:06 ----A---- C:\Windows\system32\KBDNEPR.DLL
2011-04-26 14:01:06 ----A---- C:\Windows\system32\KBDMAORI.DLL
2011-04-26 14:01:06 ----A---- C:\Windows\system32\KBDLT1.DLL
2011-04-26 14:01:06 ----A---- C:\Windows\system32\kbdlk41a.dll
2011-04-26 14:01:06 ----A---- C:\Windows\system32\KBDINTAM.DLL
2011-04-26 14:01:06 ----A---- C:\Windows\system32\KBDINORI.DLL
2011-04-26 14:01:06 ----A---- C:\Windows\system32\KBDINMAR.DLL
2011-04-26 14:01:06 ----A---- C:\Windows\system32\KBDINHIN.DLL
2011-04-26 14:01:06 ----A---- C:\Windows\system32\KBDINBEN.DLL
2011-04-26 14:01:06 ----A---- C:\Windows\system32\KBDGR1.DLL
2011-04-26 14:01:06 ----A---- C:\Windows\system32\KBDGKL.DLL
2011-04-26 14:01:06 ----A---- C:\Windows\system32\KBDGEO.DLL
2011-04-26 14:01:06 ----A---- C:\Windows\system32\KBDCZ1.DLL
2011-04-26 14:01:06 ----A---- C:\Windows\system32\KBDBULG.DLL
2011-04-26 14:01:06 ----A---- C:\Windows\system32\KBDBLR.DLL
2011-04-26 14:01:06 ----A---- C:\Windows\system32\KBDBASH.DLL
2011-04-26 14:01:06 ----A---- C:\Windows\system32\dpnaddr.dll
2011-04-26 14:01:05 ----A---- C:\Windows\system32\spwizres.dll
2011-04-26 14:01:05 ----A---- C:\Windows\system32\pifmgr.dll
2011-04-26 14:01:05 ----A---- C:\Windows\system32\nlsbres.dll
2011-04-26 14:01:05 ----A---- C:\Windows\system32\BlbEvents.dll
2011-04-26 14:00:26 ----A---- C:\Windows\system32\wmicmiplugin.dll
2011-04-26 14:00:26 ----A---- C:\Windows\system32\wbemcomn.dll
2011-04-26 14:00:13 ----A---- C:\Windows\system32\SmiEngine.dll
2011-04-26 14:00:04 ----A---- C:\Windows\system32\wdscore.dll
2011-04-26 14:00:04 ----A---- C:\Windows\system32\PkgMgr.exe
2011-04-26 13:59:22 ----A---- C:\Windows\system32\drvstore.dll
2011-04-26 13:59:21 ----A---- C:\Windows\system32\dpx.dll
2011-04-26 13:32:05 ----A---- C:\Windows\system32\d3d10_1core.dll
2011-04-26 13:32:05 ----A---- C:\Windows\system32\d3d10_1.dll
2011-04-24 11:09:55 ----D---- C:\Users\Kakolukian\AppData\Roaming\Malwarebytes
2011-04-24 11:09:35 ----D---- C:\ProgramData\Malwarebytes
2011-04-24 11:09:35 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys
2011-04-24 11:09:32 ----A---- C:\Windows\system32\drivers\mbam.sys
2011-04-24 11:09:31 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-04-21 19:07:49 ----D---- C:\Windows\system32\xlive
2011-04-21 19:07:48 ----D---- C:\Program Files\Microsoft Games for Windows - LIVE
2011-04-14 17:54:11 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-04-14 17:54:11 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-04-14 17:54:11 ----A---- C:\Windows\system32\drivers\srv.sys
2011-04-14 17:54:09 ----A---- C:\Windows\system32\vbscript.dll
2011-04-14 17:54:09 ----A---- C:\Windows\system32\jscript.dll
2011-04-14 17:54:07 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-04-14 17:54:07 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-04-14 17:54:07 ----A---- C:\Windows\system32\dnsapi.dll
2011-04-14 17:54:05 ----A---- C:\Windows\system32\atmlib.dll
2011-04-14 17:54:05 ----A---- C:\Windows\system32\atmfd.dll
2011-04-14 17:53:59 ----A---- C:\Windows\system32\ieframe.dll
2011-04-14 17:53:58 ----A---- C:\Windows\system32\wininet.dll
2011-04-14 17:53:58 ----A---- C:\Windows\system32\urlmon.dll
2011-04-14 17:53:57 ----A---- C:\Windows\system32\mshtml.dll
2011-04-14 17:53:56 ----A---- C:\Windows\system32\ieui.dll
2011-04-14 17:53:55 ----A---- C:\Windows\system32\jsproxy.dll
2011-04-14 17:53:32 ----A---- C:\Windows\system32\win32k.sys
2011-04-14 17:53:31 ----A---- C:\Windows\system32\WFS.exe
2011-04-14 17:53:31 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-04-14 17:53:29 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-04-14 17:53:27 ----A---- C:\Windows\system32\inetcomm.dll
2011-04-14 17:53:25 ----A---- C:\Windows\system32\mfc42.dll
2011-04-14 17:53:24 ----A---- C:\Windows\system32\mfc42u.dll
2011-04-14 17:53:20 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-04-14 17:53:20 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-04-14 17:53:20 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-04-14 17:53:20 ----A---- C:\Windows\system32\drivers\bowser.sys

======List of files/folders modified in the last 1 months======

2011-04-26 18:59:33 ----D---- C:\Program Files\trend micro
2011-04-26 18:59:18 ----D---- C:\Windows\Temp
2011-04-26 18:56:44 ----D---- C:\Program Files\Common Files\Akamai
2011-04-26 18:54:27 ----D---- C:\Windows\system32\config
2011-04-26 18:54:08 ----D---- C:\Users\Kakolukian\AppData\Roaming\Skype
2011-04-26 18:49:22 ----D---- C:\Windows\Microsoft.NET
2011-04-26 16:26:24 ----SHD---- C:\System Volume Information
2011-04-26 16:07:33 ----D---- C:\Users\Kakolukian\AppData\Roaming\skypePM
2011-04-26 15:59:59 ----RSD---- C:\Windows\assembly
2011-04-26 15:37:38 ----SHD---- C:\Windows\Installer
2011-04-26 15:37:38 ----SHD---- C:\Config.Msi
2011-04-26 15:37:22 ----RD---- C:\Program Files
2011-04-26 15:15:45 ----D---- C:\Windows\winsxs
2011-04-26 15:08:39 ----D---- C:\Windows
2011-04-26 15:07:19 ----D---- C:\Windows\System32
2011-04-26 15:07:19 ----D---- C:\Windows\inf
2011-04-26 15:07:19 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-04-26 15:05:27 ----D---- C:\Windows\debug
2011-04-26 14:52:31 ----SHD---- C:\Boot
2011-04-26 14:50:26 ----D---- C:\Windows\Prefetch
2011-04-26 14:49:57 ----D---- C:\Windows\system32\DriverStore
2011-04-26 14:45:25 ----D---- C:\Program Files\Windows Mail
2011-04-26 14:45:24 ----D---- C:\Program Files\Windows Sidebar
2011-04-26 14:45:24 ----D---- C:\Program Files\Windows Portable Devices
2011-04-26 14:45:24 ----D---- C:\Program Files\Windows Photo Viewer
2011-04-26 14:45:24 ----D---- C:\Program Files\Windows Media Player
2011-04-26 14:45:24 ----D---- C:\Program Files\Windows Journal
2011-04-26 14:45:24 ----D---- C:\Program Files\Internet Explorer
2011-04-26 14:45:24 ----D---- C:\Program Files\DVD Maker
2011-04-26 14:45:22 ----D---- C:\Windows\servicing
2011-04-26 14:45:22 ----D---- C:\Windows\ehome
2011-04-26 14:45:22 ----D---- C:\Program Files\Windows Defender
2011-04-26 14:45:14 ----D---- C:\Windows\system32\oobe
2011-04-26 14:45:14 ----D---- C:\Windows\system32\en-US
2011-04-26 14:45:14 ----D---- C:\Windows\system32\da-DK
2011-04-26 14:45:14 ----D---- C:\Windows\PolicyDefinitions
2011-04-26 14:45:13 ----D---- C:\Windows\system32\sysprep
2011-04-26 14:45:13 ----D---- C:\Windows\system32\Setup
2011-04-26 14:45:13 ----D---- C:\Windows\system32\migration
2011-04-26 14:45:13 ----D---- C:\Windows\system32\cs
2011-04-26 14:45:13 ----D---- C:\Windows\system32\AdvancedInstallers
2011-04-26 14:45:12 ----D---- C:\Windows\system32\sppui
2011-04-26 14:45:12 ----D---- C:\Windows\system32\manifeststore
2011-04-26 14:45:12 ----D---- C:\Windows\system32\es-ES
2011-04-26 14:45:12 ----D---- C:\Windows\system32\cs-CZ
2011-04-26 14:45:11 ----D---- C:\Windows\system32\drivers\cs-CZ
2011-04-26 14:45:11 ----D---- C:\Windows\system32\drivers
2011-04-26 14:45:10 ----D---- C:\Windows\system32\wbem
2011-04-26 14:45:10 ----D---- C:\Windows\system32\migwiz
2011-04-26 14:45:10 ----D---- C:\Windows\system32\Dism
2011-04-26 14:44:50 ----RSD---- C:\Windows\Fonts
2011-04-26 14:44:50 ----D---- C:\Windows\AppPatch
2011-04-26 14:44:39 ----D---- C:\Windows\system32\Boot
2011-04-26 14:41:13 ----A---- C:\Windows\system32\msclmd.dll
2011-04-26 14:31:20 ----SD---- C:\ProgramData\Microsoft
2011-04-26 14:28:56 ----D---- C:\Windows\system32\catroot
2011-04-26 14:28:26 ----D---- C:\Windows\Logs
2011-04-26 14:11:23 ----D---- C:\Program Files\Common Files
2011-04-26 14:10:51 ----D---- C:\Windows\system32\catroot2
2011-04-26 14:09:57 ----D---- C:\Program Files\Common Files\microsoft shared
2011-04-26 14:09:00 ----D---- C:\Program Files\CONEXANT
2011-04-24 11:09:35 ----HD---- C:\ProgramData
2011-04-24 10:24:19 ----D---- C:\Windows\Tasks
2011-04-24 10:24:19 ----D---- C:\Windows\system32\wfp
2011-04-24 10:24:19 ----D---- C:\Share-rapid
2011-04-24 10:23:14 ----D---- C:\Windows\system32\drivers\etc
2011-04-24 10:23:12 ----D---- C:\Windows\system32\Tasks
2011-04-24 10:23:12 ----D---- C:\Windows\system32\CodeIntegrity
2011-04-24 10:23:12 ----D---- C:\Users\Kakolukian\AppData\Roaming\LangSoft
2011-04-24 10:22:59 ----D---- C:\Windows\registration
2011-04-14 22:15:23 ----D---- C:\ProgramData\Microsoft Help
2011-04-14 22:06:17 ----A---- C:\Windows\system32\MRT.exe
2011-04-10 10:20:21 ----HD---- C:\Program Files\InstallShield Installation Information

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-01-02 691696]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2011-01-13 23632]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2011-01-13 294608]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2011-01-13 47440]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2011-01-13 17744]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2011-01-13 51280]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-17 12672]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2006-11-14 37376]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\XAudio32.sys [2009-04-29 8704]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-10-09 1096704]
R3 ATSwpWDF;AuthenTec TruePrint USB WBF WDF Driver; C:\Windows\System32\Drivers\ATSwpWDF.sys [2009-12-03 625224]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT32.sys [2008-03-04 188416]
R3 HpqRemHid;HP Remote Control HID Device; C:\Windows\system32\DRIVERS\HpqRemHid.sys [2007-07-11 7168]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2009-02-12 980992]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2009-02-12 207360]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-14 347264]
R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 84992]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-05-27 245936]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2009-02-12 661504]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 awjrr2dv;awjrr2dv; C:\Windows\system32\drivers\awjrr2dv.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files\Garena\safedrv.sys []
S3 s1018bus;Sony Ericsson Device 1018 driver (WDM); C:\Windows\system32\DRIVERS\s1018bus.sys [2009-03-25 86824]
S3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s1018mdfl.sys [2009-03-25 15016]
S3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s1018mdm.sys [2009-03-25 114728]
S3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s1018mgmt.sys [2009-03-25 106208]
S3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS); C:\Windows\system32\DRIVERS\s1018nd5.sys [2009-03-25 26024]
S3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s1018obex.sys [2009-03-25 104744]
S3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM); C:\Windows\system32\DRIVERS\s1018unic.sys [2009-03-25 109864]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-14 207360]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-14 980992]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-14 661504]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Akamai;Akamai NetSession Interface; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2011-01-13 40384]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2007-09-19 65536]
R2 HsfXAudioService;HsfXAudioService; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-10-16 600680]
R2 QipGuard;QipGuard; C:\Program Files\QipGuard\QipGuard.exe [2011-01-13 187776]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 1710464]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 npggsvc;nProtect GameGuard Service; C:\Windows\system32\GameMon.des [2011-02-14 4014224]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-01-05 1343400]

-----------------EOF-----------------

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Podezření zavirování

#6 Příspěvek od vyosek »

Zkuste preinstalovat ovladav graficke karty na nejnovejsi. Taky se podivejte ci ma GK ciste kontakty
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Kakolukian
Návštěvník
Návštěvník
Příspěvky: 38
Registrován: 22 Zář 2008 15:13

Re: Podezření zavirování

#7 Příspěvek od Kakolukian »

Tak děkuji za radu =) Nějak sem otevřel noťas pohl s káblama a už to je v pořádku=)

Ještě jednou děkuji moc za všechno =) Počítač se celkově zrychlil :-)

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Podezření zavirování

#8 Příspěvek od vyosek »

Nemate zac, rad jsem pomohl :) Zase nekdy Obrázek
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

rimotion
Návštěvník
Návštěvník
Příspěvky: 1
Registrován: 04 Kvě 2011 16:34

Re: Podezření zavirování

#9 Příspěvek od rimotion »

set38.tmp -?-

byl na originální hře
Předem děkuji

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Podezření zavirování

#10 Příspěvek od vyosek »

rimotion napsal:set38.tmp -?-

byl na originální hře
Předem děkuji
Zdravim,
nejak nechapu Vas dotaz. Nehlede na to, ze se cpete do ciziho threadu - zalozte si prosim sve nove tema.

Dekuji.

Toto tema je :closed:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Odpovědět