Stránka 2 z 4

Re: rootkit Alureon-C

Napsal: 04 čer 2011 17:37
od motji
Ted zkuste combofix v nouzovém režimu. S počítačem to ted vypadá jak?

Re: rootkit Alureon-C

Napsal: 04 čer 2011 19:34
od pete2006
combofix se chova porad stejne i v nouzaku i v normalnim rezimu, NB momentalne vypada, ze je cisty.
po kasperskym jsem zkusil spustit scan avastu, nasel jeste 5 souboru, ale uz nehlasil rootkit a po smazani techto souboru a restartu NB mi uz nic nenasel. Doufam ze to bude jiz ok. chcete pro jistotu jeste nejaky log? zkusim kdyztak jeste stahnout znovu ten combofix.
Zatim dik za pomoc

Re: rootkit Alureon-C

Napsal: 04 čer 2011 19:38
od motji
Zkuste ještě jednou ten combofix v nouzovém režimu, předtím spustte rkill

Re: rootkit Alureon-C

Napsal: 04 čer 2011 20:18
od pete2006
v nouzaku probehne rkill, pak spustim combofix:
starsi verze probehne az do bodu, kdy maj probihat nejake fafe a tam napise:
"dokoncena faze_49" a po chvilce vypise: "system nenasel zadane navesti davky-check_hal" a pak uz nic, jenom ceka.
nova verze nabehne, zalozi registry atd a pak napise:
"REGT neni nazvem vnitrniho ani venkovniho prikazu..." a vyhodi chybovou hlasku windowsu:"system windows nemuze najit polozku NIRKMD" po odkliknuti napise:
nelze vytisknout smerovaci tabulku:system nemuze nalezt uvedeny soubor"
po chvilce vyhodi windows dalsi hlasku:
:"system windows nemuze najit polozku NIRKMD" a po odkliknuti hodi combofix jeste tyhle hlasky:
"NIRCMDC neni nazvem vnitrniho ani venkovniho prikazu..."
" MTEEneni nazvem vnitrniho ani venkovniho prikazu..."
a pak uz jenom blika kzrzor a nic se nedeje

Re: rootkit Alureon-C

Napsal: 04 čer 2011 20:21
od motji
Fajn, pro jistotu dáme ještě gmer. Zítra ráno na něj mrknu :)

:arrow: Stáhněte Gmer http://www.viry.cz/forum/viewtopic.php?f=29&t=62878
- rozbalte a spusťte
-proběhne sken, po skončení se otevře okno s výsledky, klikněte na Save a tím si uložíte log,který sem vložíte

-Podle návodu v odkazu provedete druhý sken a log sem také vložíte.

Re: rootkit Alureon-C

Napsal: 04 čer 2011 23:49
od pete2006
GMER 1.0.15.15640 - http://www.gmer.net
Rootkit quick scan 2011-06-04 23:40:12
Windows 6.0.6001 Service Pack 1 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-4 Hitachi_HTS541680J9SA00 rev.SB2OC70P
Running: gmer.exe; Driver: C:\Users\TOM~1\AppData\Local\Temp\agloipob.sys


---- Devices - GMER 1.0.15 ----

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-0 851761E8
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-4 851761E8
Device \Driver\atapi \Device\Ide\IdePort0 851761E8
Device \Driver\atapi \Device\Ide\IdePort1 851761E8
Device \Driver\atapi \Device\Ide\IdePort2 851761E8
Device \Driver\atapi \Device\Ide\IdePort3 851761E8
Device \Driver\atapi \Device\Ide\IdePort4 851761E8
Device \Driver\msahci \Device\Ide\PciIde1Channel0 851771E8
Device \Driver\msahci \Device\Ide\PciIde1Channel1 851771E8
Device \Driver\msahci \Device\Ide\PciIde1Channel2 851771E8
Device \Driver\a4rdh2ql \Device\Scsi\a4rdh2ql1Port6Path0Target0Lun0 86DE01E8
Device \Driver\a4rdh2ql \Device\Scsi\a4rdh2ql1 86DE01E8
Device \FileSystem\Ntfs \Ntfs 851781E8
Device \FileSystem\fastfat \Fat 874351E8

AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Společnost Microsoft)
AttachedDevice \Driver\tdx \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/AVAST Software)
AttachedDevice \Driver\tdx \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/AVAST Software)

---- EOF - GMER 1.0.15 ----



pri podrobnem skenovani se mi uz 2x restartoval NB, tak log z nej nemam

Re: rootkit Alureon-C

Napsal: 05 čer 2011 07:09
od motji
Zkuste v nouzovém režimu.

Re: rootkit Alureon-C

Napsal: 05 čer 2011 08:37
od pete2006
tak jsem to zkusil 2x a je to stejne, hodi to po nekolika minutach modrou obrazovku s hlaskou APC_INDEX_MISMATCH a pak restart PC. hledal jsem na netu a vypada to na bug windows

Re: rootkit Alureon-C

Napsal: 05 čer 2011 08:43
od pete2006
neni to teda muj NB, delam to pro znameho a ted koukam ze mu tady chybi asi 30 aktualizaci, tak zkusim spustit aktualizace.

Re: rootkit Alureon-C

Napsal: 05 čer 2011 12:48
od pete2006
tak jsem nainstaloval vsechny aktualizace + SP2 a porad zadna zmena ani v cobofixu, ani v gmeru

Re: rootkit Alureon-C

Napsal: 05 čer 2011 16:11
od pete2006
jeste jsem zkusil jeden kompletni scan celeho NB avastem a nic nenasel.

Re: rootkit Alureon-C

Napsal: 05 čer 2011 18:35
od motji
Dobře, poprosím o nový log ze rsitu.

:arrow: stáhněte MBR
http://www2.gmer.net/mbr/mbr.exe
-uložte ho na plochu a spusťte
-vytvoří se log s názvem mbr.log, vložte ho zde

Re: rootkit Alureon-C

Napsal: 05 čer 2011 20:48
od pete2006
Logfile of random's system information tool 1.08 (written by random/random)
Run by tomáš at 2011-06-05 21:46:38
Microsoft® Windows Vista™ Ultimate Service Pack 2
System drive C: has 10 GB (26%) free of 37 GB
Total RAM: 1014 MB (42% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:46, on 2011-06-05
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\install\RSIT.exe
C:\Program Files\trend micro\tomáš.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Inbox Toolbar - {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - C:\PROGRA~1\INBOXT~1\Inbox.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll
O2 - BHO: Inbox Toolbar - {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - C:\PROGRA~1\INBOXT~1\Inbox.dll
O3 - Toolbar: &Inbox Toolbar - {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - C:\PROGRA~1\INBOXT~1\Inbox.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-18\..\Run: [Windows Explorer] rundll32.exe "C:\Windows\system32\config\SYSTEM~1\AppData\Roaming\qhyggjpb.dll",EntryPoint (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Windows Explorer] rundll32.exe "C:\Windows\system32\config\SYSTEM~1\AppData\Roaming\qhyggjpb.dll",EntryPoint (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: inbox - {37540F19-DD4C-478B-B2DF-C19281BCAF27} - C:\PROGRA~1\INBOXT~1\Inbox.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: AMService - Unknown owner - C:\Windows\Temp\qywi\setup.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

--
End of file - 5328 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-05-20 305328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll [2011-05-21 1007160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}]
Inbox Toolbar - C:\PROGRA~1\INBOXT~1\Inbox.dll [2010-11-04 870904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D7E97865-918F-41E4-9CD0-25AB1C574CE8} - &Inbox Toolbar - C:\PROGRA~1\INBOXT~1\Inbox.dll [2010-11-04 870904]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-05-20 305328]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2011-05-10 3459712]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-12-21 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll, mfhyyybu.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PSEXESVC]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PSEXESVC]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"\"="C:\Windows\system\178153.exe:*:Enabled:KL"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-06-05 18:56:11 ----A---- C:\Windows\system32\wininet.dll
2011-06-05 18:56:11 ----A---- C:\Windows\system32\msrating.dll
2011-06-05 18:56:11 ----A---- C:\Windows\system32\msls31.dll
2011-06-05 18:56:11 ----A---- C:\Windows\system32\jsproxy.dll
2011-06-05 18:56:11 ----A---- C:\Windows\system32\iertutil.dll
2011-06-05 18:56:10 ----A---- C:\Windows\system32\urlmon.dll
2011-06-05 18:56:10 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2011-06-05 18:56:10 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-06-05 18:56:10 ----A---- C:\Windows\system32\mshtmler.dll
2011-06-05 18:56:10 ----A---- C:\Windows\system32\ieui.dll
2011-06-05 18:56:10 ----A---- C:\Windows\system32\iesysprep.dll
2011-06-05 18:56:10 ----A---- C:\Windows\system32\ieframe.dll
2011-06-05 18:56:10 ----A---- C:\Windows\system32\ieapfltr.dll
2011-06-05 18:56:10 ----A---- C:\Windows\system32\ie4uinit.exe
2011-06-05 18:56:10 ----A---- C:\Windows\system32\icardie.dll
2011-06-05 18:56:10 ----A---- C:\Windows\system32\dxtrans.dll
2011-06-05 18:56:10 ----A---- C:\Windows\system32\dxtmsft.dll
2011-06-05 18:56:09 ----A---- C:\Windows\system32\wextract.exe
2011-06-05 18:56:09 ----A---- C:\Windows\system32\webcheck.dll
2011-06-05 18:56:09 ----A---- C:\Windows\system32\vbscript.dll
2011-06-05 18:56:09 ----A---- C:\Windows\system32\url.dll
2011-06-05 18:56:09 ----A---- C:\Windows\system32\mshtmled.dll
2011-06-05 18:56:09 ----A---- C:\Windows\system32\mshtml.dll
2011-06-05 18:56:09 ----A---- C:\Windows\system32\msfeeds.dll
2011-06-05 18:56:09 ----A---- C:\Windows\system32\licmgr10.dll
2011-06-05 18:56:09 ----A---- C:\Windows\system32\inseng.dll
2011-06-05 18:56:09 ----A---- C:\Windows\system32\iexpress.exe
2011-06-05 18:56:09 ----A---- C:\Windows\system32\iesetup.dll
2011-06-05 18:56:09 ----A---- C:\Windows\system32\iernonce.dll
2011-06-05 18:56:09 ----A---- C:\Windows\system32\iedkcs32.dll
2011-06-05 18:56:08 ----A---- C:\Windows\system32\pngfilt.dll
2011-06-05 18:56:08 ----A---- C:\Windows\system32\occache.dll
2011-06-05 18:56:08 ----A---- C:\Windows\system32\mshta.exe
2011-06-05 18:56:08 ----A---- C:\Windows\system32\msfeedssync.exe
2011-06-05 18:56:08 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-06-05 18:56:08 ----A---- C:\Windows\system32\jscript9.dll
2011-06-05 18:56:08 ----A---- C:\Windows\system32\jscript.dll
2011-06-05 18:56:08 ----A---- C:\Windows\system32\imgutil.dll
2011-06-05 18:56:08 ----A---- C:\Windows\system32\ieUnatt.exe
2011-06-05 18:56:08 ----A---- C:\Windows\system32\iepeers.dll
2011-06-05 18:56:08 ----A---- C:\Windows\system32\ieakui.dll
2011-06-05 18:56:08 ----A---- C:\Windows\system32\ieaksie.dll
2011-06-05 18:56:08 ----A---- C:\Windows\system32\ieakeng.dll
2011-06-05 18:56:08 ----A---- C:\Windows\system32\IEAdvpack.dll
2011-06-05 18:56:08 ----A---- C:\Windows\system32\advpack.dll
2011-06-05 18:56:08 ----A---- C:\Windows\system32\admparse.dll
2011-06-05 18:55:04 ----A---- C:\Windows\system32\shdocvw.dll
2011-06-05 18:55:04 ----A---- C:\Windows\system32\mfreadwrite.dll
2011-06-05 18:55:04 ----A---- C:\Windows\system32\mfps.dll
2011-06-05 18:55:04 ----A---- C:\Windows\system32\mfplat.dll
2011-06-05 18:55:04 ----A---- C:\Windows\system32\mfmp4src.dll
2011-06-05 18:55:04 ----A---- C:\Windows\system32\MFHEAACdec.dll
2011-06-05 18:55:04 ----A---- C:\Windows\system32\MFH264Dec.dll
2011-06-05 18:55:04 ----A---- C:\Windows\system32\mf.dll
2011-06-05 18:55:03 ----A---- C:\Windows\system32\stobject.dll
2011-06-05 18:55:00 ----A---- C:\Windows\system32\XpsRasterService.dll
2011-06-05 18:55:00 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-06-05 18:55:00 ----A---- C:\Windows\system32\FntCache.dll
2011-06-05 18:55:00 ----A---- C:\Windows\system32\DWrite.dll
2011-06-05 18:55:00 ----A---- C:\Windows\system32\d3d10warp.dll
2011-06-05 18:55:00 ----A---- C:\Windows\system32\d3d10level9.dll
2011-06-05 18:55:00 ----A---- C:\Windows\system32\d3d10_1core.dll
2011-06-05 18:55:00 ----A---- C:\Windows\system32\d3d10_1.dll
2011-06-05 18:55:00 ----A---- C:\Windows\system32\d2d1.dll
2011-06-05 18:54:59 ----A---- C:\Windows\system32\xpsservices.dll
2011-06-05 18:54:59 ----A---- C:\Windows\system32\XpsPrint.dll
2011-06-05 18:54:59 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2011-06-05 18:54:59 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2011-06-05 18:54:59 ----A---- C:\Windows\system32\OpcServices.dll
2011-06-05 18:54:59 ----A---- C:\Windows\system32\dxgi.dll
2011-06-05 18:54:59 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2011-06-05 18:54:59 ----A---- C:\Windows\system32\d3d10core.dll
2011-06-05 18:54:59 ----A---- C:\Windows\system32\d3d10.dll
2011-06-05 18:54:59 ----A---- C:\Windows\system32\cdd.dll
2011-06-05 18:52:48 ----A---- C:\Windows\system32\WMPhoto.dll
2011-06-05 18:52:48 ----A---- C:\Windows\system32\dxdiagn.dll
2011-06-05 18:52:48 ----A---- C:\Windows\system32\dxdiag.exe
2011-06-05 18:52:47 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2011-06-05 18:52:47 ----A---- C:\Windows\system32\WindowsCodecs.dll
2011-06-05 18:52:47 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2011-06-05 18:52:47 ----A---- C:\Windows\system32\d3d11.dll
2011-06-05 12:36:00 ----SD---- C:\žižala9662ž
2011-06-05 12:33:09 ----D---- C:\ComboFix
2011-06-05 12:33:08 ----A---- C:\Windows\system32\CF11400.exe
2011-06-05 12:09:51 ----D---- C:\Windows\system32\eu-ES
2011-06-05 12:09:51 ----D---- C:\Windows\system32\ca-ES
2011-06-05 12:09:50 ----D---- C:\Windows\system32\vi-VN
2011-06-05 11:39:17 ----D---- C:\Windows\system32\EventProviders
2011-06-05 11:34:11 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2011-06-05 11:34:07 ----A---- C:\Windows\system32\SLsvc.exe
2011-06-05 11:34:07 ----A---- C:\Windows\system32\SLCExt.dll
2011-06-05 11:34:05 ----A---- C:\Windows\system32\FunctionDiscoveryFolder.dll
2011-06-05 11:34:05 ----A---- C:\Windows\system32\DevicePairingWizard.exe
2011-06-05 11:34:03 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2011-06-05 11:34:01 ----A---- C:\Windows\system32\mssrch.dll
2011-06-05 11:34:00 ----A---- C:\Windows\system32\drivers\spsys.sys
2011-06-05 11:33:59 ----A---- C:\Windows\system32\tquery.dll
2011-06-05 11:33:58 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2011-06-05 11:33:57 ----A---- C:\Windows\system32\scavenge.dll
2011-06-05 11:33:57 ----A---- C:\Windows\system32\RMActivate_isv.exe
2011-06-05 11:33:57 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2011-06-05 11:33:56 ----A---- C:\Windows\system32\RMActivate.exe
2011-06-05 11:33:55 ----A---- C:\Windows\system32\msi.dll
2011-06-05 11:33:55 ----A---- C:\Windows\system32\imapi2fs.dll
2011-06-05 11:33:54 ----A---- C:\Windows\system32\WscEapPr.dll
2011-06-05 11:33:54 ----A---- C:\Windows\system32\wcnwiz2.dll
2011-06-05 11:33:54 ----A---- C:\Windows\system32\secproc_isv.dll
2011-06-05 11:33:54 ----A---- C:\Windows\system32\drivers\bthport.sys
2011-06-05 11:33:52 ----A---- C:\Windows\system32\sysmain.dll
2011-06-05 11:33:50 ----A---- C:\Windows\system32\icardagt.exe
2011-06-05 11:33:50 ----A---- C:\Windows\system32\EhStorShell.dll
2011-06-05 11:33:50 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2011-06-05 11:33:49 ----A---- C:\Windows\system32\spreview.exe
2011-06-05 11:33:48 ----A---- C:\Windows\system32\spinstall.exe
2011-06-05 11:33:48 ----A---- C:\Windows\system32\drmv2clt.dll
2011-06-05 11:33:47 ----A---- C:\Windows\system32\spwizui.dll
2011-06-05 11:33:47 ----A---- C:\Windows\system32\secproc.dll
2011-06-05 11:33:47 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2011-06-05 11:33:45 ----A---- C:\Windows\system32\SearchIndexer.exe
2011-06-05 11:33:45 ----A---- C:\Windows\system32\p2psvc.dll
2011-06-05 11:33:45 ----A---- C:\Windows\system32\mssvp.dll
2011-06-05 11:33:44 ----A---- C:\Windows\system32\mssphtb.dll
2011-06-05 11:33:44 ----A---- C:\Windows\system32\MSMPEG2VDEC.DLL
2011-06-05 11:33:43 ----A---- C:\Windows\system32\mssph.dll
2011-06-05 11:33:43 ----A---- C:\Windows\system32\imapi2.dll
2011-06-05 11:33:42 ----A---- C:\Windows\system32\sdohlp.dll
2011-06-05 11:33:42 ----A---- C:\Windows\system32\esent.dll
2011-06-05 11:33:41 ----A---- C:\Windows\system32\IMJP10K.DLL
2011-06-05 11:33:41 ----A---- C:\Windows\system32\DevicePairing.dll
2011-06-05 11:33:40 ----A---- C:\Windows\system32\wevtsvc.dll
2011-06-05 11:33:40 ----A---- C:\Windows\system32\sperror.dll
2011-06-05 11:33:40 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2011-06-05 11:33:40 ----A---- C:\Windows\system32\korwbrkr.dll
2011-06-05 11:33:39 ----A---- C:\Windows\system32\SLC.dll
2011-06-05 11:33:39 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2011-06-05 11:33:38 ----A---- C:\Windows\system32\pmcsnap.dll
2011-06-05 11:33:37 ----A---- C:\Windows\system32\msjet40.dll
2011-06-05 11:33:37 ----A---- C:\Windows\system32\MPSSVC.dll
2011-06-05 11:33:36 ----A---- C:\Windows\system32\Query.dll
2011-06-05 11:33:35 ----A---- C:\Windows\system32\qmgr.dll
2011-06-05 11:33:35 ----A---- C:\Windows\system32\msexch40.dll
2011-06-05 11:33:34 ----A---- C:\Windows\system32\P2PGraph.dll
2011-06-05 11:33:34 ----A---- C:\Windows\system32\IasMigReader.exe
2011-06-05 11:33:34 ----A---- C:\Windows\system32\diagperf.dll
2011-06-05 11:33:33 ----A---- C:\Windows\system32\winload.exe
2011-06-05 11:33:33 ----A---- C:\Windows\system32\srchadmin.dll
2011-06-05 11:33:33 ----A---- C:\Windows\system32\mblctr.exe
2011-06-05 11:33:32 ----A---- C:\Windows\system32\uDWM.dll
2011-06-05 11:33:32 ----A---- C:\Windows\system32\mmc.exe
2011-06-05 11:33:32 ----A---- C:\Windows\system32\IasMigPlugin.dll
2011-06-05 11:33:32 ----A---- C:\Windows\system32\dfsr.exe
2011-06-05 11:33:31 ----A---- C:\Windows\system32\riched20.dll
2011-06-05 11:33:31 ----A---- C:\Windows\system32\fdBth.dll
2011-06-05 11:33:30 ----A---- C:\Windows\system32\RacEngn.dll
2011-06-05 11:33:30 ----A---- C:\Windows\system32\kernel32.dll
2011-06-05 11:33:29 ----A---- C:\Windows\system32\spoolss.dll
2011-06-05 11:33:29 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2011-06-05 11:33:29 ----A---- C:\Windows\system32\SearchFilterHost.exe
2011-06-05 11:33:29 ----A---- C:\Windows\system32\milcore.dll
2011-06-05 11:33:29 ----A---- C:\Windows\system32\EhStorAPI.dll
2011-06-05 11:33:29 ----A---- C:\Windows\system32\CertEnroll.dll
2011-06-05 11:33:28 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2011-06-05 11:33:27 ----A---- C:\Windows\system32\msvcp60.dll
2011-06-05 11:33:27 ----A---- C:\Windows\system32\msjtes40.dll
2011-06-05 11:33:27 ----A---- C:\Windows\system32\gpedit.dll
2011-06-05 11:33:27 ----A---- C:\Windows\system32\fsquirt.exe
2011-06-05 11:33:27 ----A---- C:\Windows\system32\AuxiliaryDisplayDriverLib.dll
2011-06-05 11:33:26 ----A---- C:\Windows\system32\infocardapi.dll
2011-06-05 11:33:25 ----A---- C:\Windows\system32\WinSAT.exe
2011-06-05 11:33:25 ----A---- C:\Windows\system32\PresentationSettings.exe
2011-06-05 11:33:25 ----A---- C:\Windows\system32\fveapi.dll
2011-06-05 11:33:25 ----A---- C:\Windows\system32\es.dll
2011-06-05 11:33:25 ----A---- C:\Windows\system32\cscsvc.dll
2011-06-05 11:33:24 ----A---- C:\Windows\system32\mstext40.dll
2011-06-05 11:33:24 ----A---- C:\Windows\system32\Magnify.exe
2011-06-05 11:33:24 ----A---- C:\Windows\system32\drivers\ntfs.sys
2011-06-05 11:33:24 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2011-06-05 11:33:24 ----A---- C:\Windows\system32\advapi32.dll
2011-06-05 11:33:23 ----A---- C:\Windows\system32\WebClnt.dll
2011-06-05 11:33:23 ----A---- C:\Windows\system32\slwmi.dll
2011-06-05 11:33:23 ----A---- C:\Windows\system32\msexcl40.dll
2011-06-05 11:33:22 ----A---- C:\Windows\system32\vssapi.dll
2011-06-05 11:33:22 ----A---- C:\Windows\system32\msxbde40.dll
2011-06-05 11:33:22 ----A---- C:\Windows\system32\comsvcs.dll
2011-06-05 11:33:21 ----A---- C:\Windows\system32\NetProjW.dll
2011-06-05 11:33:21 ----A---- C:\Windows\system32\authui.dll
2011-06-05 11:33:20 ----A---- C:\Windows\system32\propsys.dll
2011-06-05 11:33:20 ----A---- C:\Windows\system32\newdev.dll
2011-06-05 11:33:20 ----A---- C:\Windows\system32\msrepl40.dll
2011-06-05 11:33:19 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2011-06-05 11:33:19 ----A---- C:\Windows\system32\iasrecst.dll
2011-06-05 11:33:19 ----A---- C:\Windows\system32\gpsvc.dll
2011-06-05 11:33:19 ----A---- C:\Windows\system32\eudcedit.exe
2011-06-05 11:33:19 ----A---- C:\Windows\system32\crypt32.dll
2011-06-05 11:33:19 ----A---- C:\Windows\explorer.exe
2011-06-05 11:33:18 ----A---- C:\Windows\system32\setupapi.dll
2011-06-05 11:33:18 ----A---- C:\Windows\system32\rpcss.dll
2011-06-05 11:33:18 ----A---- C:\Windows\system32\mspbde40.dll
2011-06-05 11:33:17 ----A---- C:\Windows\system32\msltus40.dll
2011-06-05 11:33:17 ----A---- C:\Windows\system32\davclnt.dll
2011-06-05 11:33:17 ----A---- C:\Windows\system32\d3d9.dll
2011-06-05 11:33:16 ----A---- C:\Windows\system32\msrd3x40.dll
2011-06-05 11:33:16 ----A---- C:\Windows\system32\msdtctm.dll
2011-06-05 11:33:16 ----A---- C:\Windows\system32\EhStorPwdMgr.dll
2011-06-05 11:33:16 ----A---- C:\Windows\system32\EhStorAuthn.dll
2011-06-05 11:33:16 ----A---- C:\Windows\system32\browseui.dll
2011-06-05 11:33:15 ----A---- C:\Windows\system32\wevtapi.dll
2011-06-05 11:33:15 ----A---- C:\Windows\system32\photowiz.dll
2011-06-05 11:33:15 ----A---- C:\Windows\system32\nlhtml.dll
2011-06-05 11:33:14 ----A---- C:\Windows\system32\user32.dll
2011-06-05 11:33:14 ----A---- C:\Windows\system32\samsrv.dll
2011-06-05 11:33:14 ----A---- C:\Windows\system32\ci.dll
2011-06-05 11:33:13 ----A---- C:\Windows\system32\win32spl.dll
2011-06-05 11:33:13 ----A---- C:\Windows\system32\WcnNetsh.dll
2011-06-05 11:33:13 ----A---- C:\Windows\system32\SLCommDlg.dll
2011-06-05 11:33:13 ----A---- C:\Windows\system32\oleaut32.dll
2011-06-05 11:33:12 ----A---- C:\Windows\system32\netshell.dll
2011-06-05 11:33:12 ----A---- C:\Windows\system32\IKEEXT.DLL
2011-06-05 11:33:12 ----A---- C:\Windows\system32\drivers\rdbss.sys
2011-06-05 11:33:12 ----A---- C:\Windows\system32\compcln.exe
2011-06-05 11:33:12 ----A---- C:\Windows\system32\apds.dll
2011-06-05 11:33:11 ----A---- C:\Windows\system32\xmlfilter.dll
2011-06-05 11:33:11 ----A---- C:\Windows\system32\mswstr10.dll
2011-06-05 11:33:11 ----A---- C:\Windows\system32\msctf.dll
2011-06-05 11:33:11 ----A---- C:\Windows\system32\emdmgmt.dll
2011-06-05 11:33:11 ----A---- C:\Windows\system32\audiosrv.dll
2011-06-05 11:33:10 ----A---- C:\Windows\system32\QAGENTRT.DLL
2011-06-05 11:33:10 ----A---- C:\Windows\system32\msvcrt.dll
2011-06-05 11:33:10 ----A---- C:\Windows\system32\gdi32.dll
2011-06-05 11:33:10 ----A---- C:\Windows\system32\drivers\netio.sys
2011-06-05 11:33:10 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2011-06-05 11:33:09 ----A---- C:\Windows\system32\VSSVC.exe
2011-06-05 11:33:09 ----A---- C:\Windows\system32\SLUI.exe
2011-06-05 11:33:09 ----A---- C:\Windows\system32\iphlpsvc.dll
2011-06-05 11:33:09 ----A---- C:\Windows\system32\eapphost.dll
2011-06-05 11:33:08 ----A---- C:\Windows\system32\sqlsrv32.dll
2011-06-05 11:33:08 ----A---- C:\Windows\system32\msrd2x40.dll
2011-06-05 11:33:08 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2011-06-05 11:33:07 ----A---- C:\Windows\system32\winresume.exe
2011-06-05 11:33:07 ----A---- C:\Windows\system32\wbengine.exe
2011-06-05 11:33:07 ----A---- C:\Windows\system32\propdefs.dll
2011-06-05 11:33:06 ----A---- C:\Windows\system32\drivers\usbhub.sys
2011-06-05 11:33:06 ----A---- C:\Windows\system32\dbgeng.dll
2011-06-05 11:33:05 ----A---- C:\Windows\system32\wevtutil.exe
2011-06-05 11:33:05 ----A---- C:\Windows\system32\mssitlb.dll
2011-06-05 11:33:04 ----A---- C:\Windows\system32\WsmSvc.dll
2011-06-05 11:33:04 ----A---- C:\Windows\system32\swprv.dll
2011-06-05 11:33:04 ----A---- C:\Windows\system32\mmcndmgr.dll
2011-06-05 11:33:03 ----A---- C:\Windows\system32\vds.exe
2011-06-05 11:33:02 ----A---- C:\Windows\system32\netlogon.dll
2011-06-05 11:33:02 ----A---- C:\Windows\system32\msscb.dll
2011-06-05 11:33:02 ----A---- C:\Windows\system32\msctfp.dll
2011-06-05 11:33:02 ----A---- C:\Windows\system32\fdBthProxy.dll
2011-06-05 11:33:02 ----A---- C:\Windows\system32\drvinst.exe
2011-06-05 11:33:02 ----A---- C:\Windows\system32\devmgr.dll
2011-06-05 11:33:02 ----A---- C:\Windows\system32\DevicePairingProxy.dll
2011-06-05 11:33:02 ----A---- C:\Windows\system32\BFE.DLL
2011-06-05 11:33:02 ----A---- C:\Windows\system32\adsldpc.dll
2011-06-05 11:33:01 ----A---- C:\Windows\system32\Wldap32.dll
2011-06-05 11:33:01 ----A---- C:\Windows\system32\wcnwiz.dll
2011-06-05 11:33:01 ----A---- C:\Windows\system32\evr.dll
2011-06-05 11:33:00 ----A---- C:\Windows\system32\WMVSDECD.DLL
2011-06-05 11:33:00 ----A---- C:\Windows\system32\services.exe
2011-06-05 11:32:59 ----A---- C:\Windows\system32\wercon.exe
2011-06-05 11:32:59 ----A---- C:\Windows\system32\wcncsvc.dll
2011-06-05 11:32:59 ----A---- C:\Windows\system32\mimefilt.dll
2011-06-05 11:32:59 ----A---- C:\Windows\system32\comdlg32.dll
2011-06-05 11:32:59 ----A---- C:\Windows\system32\adtschema.dll
2011-06-05 11:32:58 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2011-06-05 11:32:58 ----A---- C:\Windows\system32\mswdat10.dll
2011-06-05 11:32:58 ----A---- C:\Windows\system32\msjter40.dll
2011-06-05 11:32:58 ----A---- C:\Windows\system32\msdtcprx.dll
2011-06-05 11:32:58 ----A---- C:\Windows\system32\msdrm.dll
2011-06-05 11:32:58 ----A---- C:\Windows\system32\ipsmsnap.dll
2011-06-05 11:32:58 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2011-06-05 11:32:58 ----A---- C:\Windows\system32\certcli.dll
2011-06-05 11:32:57 ----A---- C:\Windows\system32\WMNetMgr.dll
2011-06-05 11:32:57 ----A---- C:\Windows\system32\w32time.dll
2011-06-05 11:32:57 ----A---- C:\Windows\system32\umpnpmgr.dll
2011-06-05 11:32:57 ----A---- C:\Windows\system32\rtffilt.dll
2011-06-05 11:32:57 ----A---- C:\Windows\system32\reg.exe
2011-06-05 11:32:57 ----A---- C:\Windows\system32\certutil.exe
2011-06-05 11:32:56 ----A---- C:\Windows\system32\msshooks.dll
2011-06-05 11:32:56 ----A---- C:\Windows\system32\msscntrs.dll
2011-06-05 11:32:56 ----A---- C:\Windows\system32\IPSECSVC.DLL
2011-06-05 11:32:56 ----A---- C:\Windows\system32\drivers\usbport.sys
2011-06-05 11:32:56 ----A---- C:\Windows\system32\bthserv.dll
2011-06-05 11:32:56 ----A---- C:\Windows\system32\bcrypt.dll
2011-06-05 11:32:55 ----A---- C:\Windows\system32\TsWpfWrp.exe
2011-06-05 11:32:55 ----A---- C:\Windows\system32\rsaenh.dll
2011-06-05 11:32:55 ----A---- C:\Windows\system32\msihnd.dll
2011-06-05 11:32:55 ----A---- C:\Windows\system32\MMDevAPI.dll
2011-06-05 11:32:55 ----A---- C:\Windows\system32\drivers\ndis.sys
2011-06-05 11:32:53 ----A---- C:\Windows\system32\scrptadm.dll
2011-06-05 11:32:53 ----A---- C:\Windows\system32\msstrc.dll
2011-06-05 11:32:53 ----A---- C:\Windows\system32\drivers\csc.sys
2011-06-05 11:32:52 ----A---- C:\Windows\system32\netapi32.dll
2011-06-05 11:32:52 ----A---- C:\Windows\system32\mtxclu.dll
2011-06-05 11:32:52 ----A---- C:\Windows\system32\mscories.dll
2011-06-05 11:32:52 ----A---- C:\Windows\system32\inetpp.dll
2011-06-05 11:32:52 ----A---- C:\Windows\system32\hidserv.dll
2011-06-05 11:32:52 ----A---- C:\Windows\system32\fundisc.dll
2011-06-05 11:32:52 ----A---- C:\Windows\system32\cryptsvc.dll
2011-06-05 11:32:51 ----A---- C:\Windows\system32\termsrv.dll
2011-06-05 11:32:51 ----A---- C:\Windows\system32\profsvc.dll
2011-06-05 11:32:51 ----A---- C:\Windows\system32\drivers\msahci.sys
2011-06-05 11:32:51 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2011-06-05 11:32:50 ----A---- C:\Windows\system32\gameux.dll
2011-06-05 11:32:49 ----A---- C:\Windows\system32\wdc.dll
2011-06-05 11:32:49 ----A---- C:\Windows\system32\msiexec.exe
2011-06-05 11:32:49 ----A---- C:\Windows\system32\imapi.dll
2011-06-05 11:32:49 ----A---- C:\Windows\system32\chsbrkr.dll
2011-06-05 11:32:49 ----A---- C:\Windows\system32\drivers\pci.sys
2011-06-05 11:32:49 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2011-06-05 11:32:48 ----A---- C:\Windows\system32\rasmans.dll
2011-06-05 11:32:48 ----A---- C:\Windows\system32\pnidui.dll
2011-06-05 11:32:48 ----A---- C:\Windows\system32\icardres.dll
2011-06-05 11:32:48 ----A---- C:\Windows\system32\iassdo.dll
2011-06-05 11:32:47 ----A---- C:\Windows\system32\wersvc.dll
2011-06-05 11:32:47 ----A---- C:\Windows\system32\scrrun.dll
2011-06-05 11:32:47 ----A---- C:\Windows\system32\PSHED.DLL
2011-06-05 11:32:47 ----A---- C:\Windows\system32\drivers\termdd.sys
2011-06-05 11:32:47 ----A---- C:\Windows\system32\drivers\crashdmp.sys
2011-06-05 11:32:47 ----A---- C:\Windows\system32\drivers\acpi.sys
2011-06-05 11:32:47 ----A---- C:\Windows\system32\autofmt.exe
2011-06-05 11:32:46 ----A---- C:\Windows\system32\slmgr.vbs
2011-06-05 11:32:46 ----A---- C:\Windows\system32\pdh.dll
2011-06-05 11:32:46 ----A---- C:\Windows\system32\drivers\Storport.sys
2011-06-05 11:32:46 ----A---- C:\Windows\system32\drivers\ataport.sys
2011-06-05 11:32:46 ----A---- C:\Windows\system32\dhcpcsvc.dll
2011-06-05 11:32:46 ----A---- C:\Windows\system32\clfs.sys
2011-06-05 11:32:46 ----A---- C:\Windows\system32\CertEnrollUI.dll
2011-06-05 11:32:46 ----A---- C:\Windows\system32\azroles.dll
2011-06-05 11:32:45 ----A---- C:\Windows\system32\pidgenx.dll
2011-06-05 11:32:45 ----A---- C:\Windows\system32\drivers\partmgr.sys
2011-06-05 11:32:45 ----A---- C:\Windows\system32\drivers\fvevol.sys
2011-06-05 11:32:44 ----A---- C:\Windows\system32\winlogon.exe
2011-06-05 11:32:44 ----A---- C:\Windows\system32\SyncCenter.dll
2011-06-05 11:32:43 ----A---- C:\Windows\system32\SLUINotify.dll
2011-06-05 11:32:43 ----A---- C:\Windows\system32\sethc.exe
2011-06-05 11:32:43 ----A---- C:\Windows\system32\ncrypt.dll
2011-06-05 11:32:43 ----A---- C:\Windows\system32\msjetoledb40.dll
2011-06-05 11:32:43 ----A---- C:\Windows\system32\kd1394.dll
2011-06-05 11:32:43 ----A---- C:\Windows\system32\drivers\mup.sys
2011-06-05 11:32:43 ----A---- C:\Windows\system32\comuid.dll
2011-06-05 11:32:43 ----A---- C:\Windows\system32\certmgr.dll
2011-06-05 11:32:42 ----A---- C:\Windows\system32\wisptis.exe
2011-06-05 11:32:42 ----A---- C:\Windows\system32\untfs.dll
2011-06-05 11:32:42 ----A---- C:\Windows\system32\spp.dll
2011-06-05 11:32:42 ----A---- C:\Windows\system32\scrobj.dll
2011-06-05 11:32:42 ----A---- C:\Windows\system32\iassam.dll
2011-06-05 11:32:42 ----A---- C:\Windows\system32\drivers\disk.sys
2011-06-05 11:32:41 ----A---- C:\Windows\system32\dwm.exe
2011-06-05 11:32:41 ----A---- C:\Windows\system32\drivers\volsnap.sys
2011-06-05 11:32:41 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2011-06-05 11:32:41 ----A---- C:\Windows\system32\drivers\pciidex.sys
2011-06-05 11:32:41 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2011-06-05 11:32:41 ----A---- C:\Windows\system32\cscui.dll
2011-06-05 11:32:41 ----A---- C:\Windows\system32\autochk.exe
2011-06-05 11:32:40 ----A---- C:\Windows\system32\printui.dll
2011-06-05 11:32:40 ----A---- C:\Windows\system32\iasnap.dll
2011-06-05 11:32:40 ----A---- C:\Windows\system32\drivers\pcmcia.sys
2011-06-05 11:32:40 ----A---- C:\Windows\system32\drivers\msrpc.sys
2011-06-05 11:32:40 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2011-06-05 11:32:40 ----A---- C:\Windows\system32\drivers\ecache.sys
2011-06-05 11:32:40 ----A---- C:\Windows\system32\autoconv.exe
2011-06-05 11:32:39 ----A---- C:\Windows\system32\winsrv.dll
2011-06-05 11:32:39 ----A---- C:\Windows\system32\onex.dll
2011-06-05 11:32:39 ----A---- C:\Windows\system32\kdcom.dll
2011-06-05 11:32:39 ----A---- C:\Windows\system32\drivers\Dumpata.sys
2011-06-05 11:32:39 ----A---- C:\Windows\system32\cscript.exe
2011-06-05 11:32:39 ----A---- C:\Windows\system32\basecsp.dll
2011-06-05 11:32:38 ----A---- C:\Windows\system32\wow32.dll
2011-06-05 11:32:38 ----A---- C:\Windows\system32\userenv.dll
2011-06-05 11:32:38 ----A---- C:\Windows\system32\osk.exe
2011-06-05 11:32:38 ----A---- C:\Windows\system32\mswsock.dll
2011-06-05 11:32:38 ----A---- C:\Windows\system32\audiodg.exe
2011-06-05 11:32:37 ----A---- C:\Windows\system32\winmm.dll
2011-06-05 11:32:37 ----A---- C:\Windows\system32\RelMon.dll
2011-06-05 11:32:37 ----A---- C:\Windows\system32\rdpencom.dll
2011-06-05 11:32:37 ----A---- C:\Windows\system32\kdusb.dll
2011-06-05 11:32:37 ----A---- C:\Windows\system32\drivers\netbt.sys
2011-06-05 11:32:37 ----A---- C:\Windows\system32\drivers\atapi.sys
2011-06-05 11:32:36 ----A---- C:\Windows\system32\WinSCard.dll
2011-06-05 11:32:36 ----A---- C:\Windows\system32\WerFaultSecure.exe
2011-06-05 11:32:36 ----A---- C:\Windows\system32\spcmsg.dll
2011-06-05 11:32:36 ----A---- C:\Windows\system32\offfilt.dll
2011-06-05 11:32:36 ----A---- C:\Windows\system32\msftedit.dll
2011-06-05 11:32:35 ----A---- C:\Windows\system32\WerFault.exe
2011-06-05 11:32:35 ----A---- C:\Windows\system32\Utilman.exe
2011-06-05 11:32:35 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2011-06-05 11:32:35 ----A---- C:\Windows\system32\secproc_ssp.dll
2011-06-05 11:32:34 ----A---- C:\Windows\system32\wsepno.dll
2011-06-05 11:32:34 ----A---- C:\Windows\system32\SndVol.exe
2011-06-05 11:32:34 ----A---- C:\Windows\system32\msnetobj.dll
2011-06-05 11:32:34 ----A---- C:\Windows\system32\mscms.dll
2011-06-05 11:32:34 ----A---- C:\Windows\system32\mcmde.dll
2011-06-05 11:32:34 ----A---- C:\Windows\system32\diskraid.exe
2011-06-05 11:32:34 ----A---- C:\Windows\system32\apphelp.dll
2011-06-05 11:32:34 ----A---- C:\Windows\system32\adsmsext.dll
2011-06-05 11:32:33 ----A---- C:\Windows\system32\wscript.exe
2011-06-05 11:32:33 ----A---- C:\Windows\system32\wiaservc.dll
2011-06-05 11:32:33 ----A---- C:\Windows\system32\ulib.dll
2011-06-05 11:32:33 ----A---- C:\Windows\system32\sysclass.dll
2011-06-05 11:32:33 ----A---- C:\Windows\system32\prnntfy.dll
2011-06-05 11:32:33 ----A---- C:\Windows\system32\odbccp32.dll
2011-06-05 11:32:33 ----A---- C:\Windows\system32\iasdatastore.dll
2011-06-05 11:32:32 ----A---- C:\Windows\system32\wscntfy.dll
2011-06-05 11:32:32 ----A---- C:\Windows\system32\rastapi.dll
2011-06-05 11:32:32 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2011-06-05 11:32:32 ----A---- C:\Windows\system32\dsound.dll
2011-06-05 11:32:32 ----A---- C:\Windows\system32\cryptui.dll
2011-06-05 11:32:31 ----A---- C:\Windows\system32\wlangpui.dll
2011-06-05 11:32:31 ----A---- C:\Windows\system32\pnpsetup.dll
2011-06-05 11:32:31 ----A---- C:\Windows\system32\ipsecsnp.dll
2011-06-05 11:32:31 ----A---- C:\Windows\system32\gpapi.dll
2011-06-05 11:32:31 ----A---- C:\Windows\system32\fdProxy.dll
2011-06-05 11:32:31 ----A---- C:\Windows\system32\diskpart.exe
2011-06-05 11:32:31 ----A---- C:\Windows\system32\brcpl.dll
2011-06-05 11:32:30 ----A---- C:\Windows\system32\wscsvc.dll
2011-06-05 11:32:30 ----A---- C:\Windows\system32\WMVENCOD.DLL
2011-06-05 11:32:30 ----A---- C:\Windows\system32\vdsdyn.dll
2011-06-05 11:32:30 ----A---- C:\Windows\system32\rasapi32.dll
2011-06-05 11:32:30 ----A---- C:\Windows\system32\logman.exe
2011-06-05 11:32:30 ----A---- C:\Windows\system32\iashlpr.dll
2011-06-05 11:32:29 ----A---- C:\Windows\system32\zipfldr.dll
2011-06-05 11:32:29 ----A---- C:\Windows\system32\wusa.exe
2011-06-05 11:32:29 ----A---- C:\Windows\system32\regsvc.dll
2011-06-05 11:32:29 ----A---- C:\Windows\system32\ntprint.dll
2011-06-05 11:32:29 ----A---- C:\Windows\system32\mscorier.dll
2011-06-05 11:32:29 ----A---- C:\Windows\system32\iasrad.dll
2011-06-05 11:32:29 ----A---- C:\Windows\system32\findstr.exe
2011-06-05 11:32:28 ----A---- C:\Windows\system32\wshext.dll
2011-06-05 11:32:28 ----A---- C:\Windows\system32\wpccpl.dll
2011-06-05 11:32:28 ----A---- C:\Windows\system32\netcenter.dll
2011-06-05 11:32:27 ----A---- C:\Windows\system32\wsnmp32.dll
2011-06-05 11:32:27 ----A---- C:\Windows\system32\wer.dll
2011-06-05 11:32:27 ----A---- C:\Windows\system32\rasdlg.dll
2011-06-05 11:32:27 ----A---- C:\Windows\system32\iassvcs.dll
2011-06-05 11:32:27 ----A---- C:\Windows\system32\drivers\usbehci.sys
2011-06-05 11:32:26 ----A---- C:\Windows\system32\themecpl.dll
2011-06-05 11:32:25 ----A---- C:\Windows\system32\uxsms.dll
2011-06-05 11:32:25 ----A---- C:\Windows\system32\scansetting.dll
2011-06-05 11:32:25 ----A---- C:\Windows\system32\ntmarta.dll
2011-06-05 11:32:25 ----A---- C:\Windows\system32\mssprxy.dll
2011-06-05 11:32:25 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2011-06-05 11:32:24 ----A---- C:\Windows\system32\slcc.dll
2011-06-05 11:32:24 ----A---- C:\Windows\system32\powrprof.dll
2011-06-05 11:32:24 ----A---- C:\Windows\system32\msutb.dll
2011-06-05 11:32:24 ----A---- C:\Windows\system32\mstlsapi.dll
2011-06-05 11:32:24 ----A---- C:\Windows\system32\iasads.dll
2011-06-05 11:32:23 ----A---- C:\Windows\system32\iasacct.dll
2011-06-05 11:32:23 ----A---- C:\Windows\system32\drivers\ks.sys
2011-06-05 11:32:22 ----A---- C:\Windows\system32\powercpl.dll
2011-06-05 11:32:22 ----A---- C:\Windows\system32\networkmap.dll
2011-06-05 11:32:21 ----A---- C:\Windows\system32\umrdp.dll
2011-06-05 11:32:21 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2011-06-05 11:32:21 ----A---- C:\Windows\system32\newdev.exe
2011-06-05 11:32:21 ----A---- C:\Windows\system32\fveui.dll
2011-06-05 11:32:21 ----A---- C:\Windows\system32\connect.dll
2011-06-05 11:32:21 ----A---- C:\Windows\system32\authz.dll
2011-06-05 11:32:20 ----A---- C:\Windows\system32\themeui.dll
2011-06-05 11:32:20 ----A---- C:\Windows\system32\systemcpl.dll
2011-06-05 11:32:20 ----A---- C:\Windows\system32\sud.dll
2011-06-05 11:32:20 ----A---- C:\Windows\system32\pcaui.dll
2011-06-05 11:32:20 ----A---- C:\Windows\system32\dot3svc.dll
2011-06-05 11:32:19 ----A---- C:\Windows\system32\usercpl.dll
2011-06-05 11:32:19 ----A---- C:\Windows\system32\samlib.dll
2011-06-05 11:32:19 ----A---- C:\Windows\system32\mmci.dll
2011-06-05 11:32:19 ----A---- C:\Windows\system32\drivers\sdbus.sys
2011-06-05 11:32:19 ----A---- C:\Windows\system32\accessibilitycpl.dll
2011-06-05 11:32:18 ----A---- C:\Windows\system32\wlanpref.dll
2011-06-05 11:32:18 ----A---- C:\Windows\system32\rpchttp.dll
2011-06-05 11:32:18 ----A---- C:\Windows\system32\qdvd.dll
2011-06-05 11:32:18 ----A---- C:\Windows\system32\brcplsiw.dll
2011-06-05 11:32:18 ----A---- C:\Windows\system32\autoplay.dll
2011-06-05 11:32:17 ----A---- C:\Windows\system32\wpcao.dll
2011-06-05 11:32:17 ----A---- C:\Windows\system32\vdsutil.dll
2011-06-05 11:32:17 ----A---- C:\Windows\system32\tapisrv.dll
2011-06-05 11:32:17 ----A---- C:\Windows\system32\regapi.dll
2011-06-05 11:32:17 ----A---- C:\Windows\system32\msinfo32.exe
2011-06-05 11:32:17 ----A---- C:\Windows\system32\fvecpl.dll
2011-06-05 11:32:17 ----A---- C:\Windows\system32\drivers\rdpdr.sys
2011-06-05 11:32:17 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2011-06-05 11:32:17 ----A---- C:\Windows\system32\cscobj.dll
2011-06-05 11:32:16 ----A---- C:\Windows\system32\scksp.dll
2011-06-05 11:32:16 ----A---- C:\Windows\system32\scesrv.dll
2011-06-05 11:32:16 ----A---- C:\Windows\system32\psisdecd.dll
2011-06-05 11:32:16 ----A---- C:\Windows\system32\oleprn.dll
2011-06-05 11:32:16 ----A---- C:\Windows\system32\mpr.dll
2011-06-05 11:32:16 ----A---- C:\Windows\system32\imm32.dll
2011-06-05 11:32:16 ----A---- C:\Windows\system32\feclient.dll
2011-06-05 11:32:16 ----A---- C:\Windows\system32\drivers\exfat.sys
2011-06-05 11:32:16 ----A---- C:\Windows\system32\AudioSes.dll
2011-06-05 11:32:15 ----A---- C:\Windows\system32\wscisvif.dll
2011-06-05 11:32:15 ----A---- C:\Windows\system32\WindowsUltimateExtrasCPL.dll
2011-06-05 11:32:15 ----A---- C:\Windows\system32\rekeywiz.exe
2011-06-05 11:32:15 ----A---- C:\Windows\system32\iaspolcy.dll
2011-06-05 11:32:15 ----A---- C:\Windows\system32\Faultrep.dll
2011-06-05 11:32:15 ----A---- C:\Windows\system32\dot3msm.dll
2011-06-05 11:32:15 ----A---- C:\Windows\system32\DeviceEject.exe
2011-06-05 11:32:14 ----A---- C:\Windows\system32\qedit.dll
2011-06-05 11:32:14 ----A---- C:\Windows\system32\pnpui.dll
2011-06-05 11:32:14 ----A---- C:\Windows\system32\perfdisk.dll
2011-06-05 11:32:14 ----A---- C:\Windows\system32\ncryptui.dll
2011-06-05 11:32:14 ----A---- C:\Windows\system32\hdwwiz.exe
2011-06-05 11:32:14 ----A---- C:\Windows\system32\dpapimig.exe
2011-06-05 11:32:14 ----A---- C:\Windows\system32\certreq.exe
2011-06-05 11:32:13 ----A---- C:\Windows\system32\TSTheme.exe
2011-06-05 11:32:13 ----A---- C:\Windows\system32\spwinsat.dll
2011-06-05 11:32:13 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2011-06-05 11:32:13 ----A---- C:\Windows\system32\scecli.dll
2011-06-05 11:32:13 ----A---- C:\Windows\system32\rasplap.dll
2011-06-05 11:32:13 ----A---- C:\Windows\system32\rasgcw.dll
2011-06-05 11:32:13 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2011-06-05 11:32:12 ----A---- C:\Windows\system32\whealogr.dll
2011-06-05 11:32:12 ----A---- C:\Windows\system32\tcpmon.dll
2011-06-05 11:32:12 ----A---- C:\Windows\system32\tcpipcfg.dll
2011-06-05 11:32:12 ----A---- C:\Windows\system32\srcore.dll
2011-06-05 11:32:12 ----A---- C:\Windows\system32\PnPUnattend.exe
2011-06-05 11:32:12 ----A---- C:\Windows\system32\fdWSD.dll
2011-06-05 11:32:12 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2011-06-05 11:32:12 ----A---- C:\Windows\system32\drivers\USBCAMD.sys
2011-06-05 11:32:12 ----A---- C:\Windows\system32\drivers\portcls.sys
2011-06-05 11:32:12 ----A---- C:\Windows\system32\cmmon32.exe
2011-06-05 11:32:11 ----A---- C:\Windows\system32\SnippingTool.exe
2011-06-05 11:32:11 ----A---- C:\Windows\system32\SCardSvr.dll
2011-06-05 11:32:11 ----A---- C:\Windows\system32\raschap.dll
2011-06-05 11:32:11 ----A---- C:\Windows\system32\conime.exe
2011-06-05 11:32:11 ----A---- C:\Windows\system32\cmdial32.dll
2011-06-05 11:32:10 ----A---- C:\Windows\system32\WMVXENCD.DLL
2011-06-05 11:32:10 ----A---- C:\Windows\system32\wlanui.dll
2011-06-05 11:32:10 ----A---- C:\Windows\system32\wiaaut.dll
2011-06-05 11:32:10 ----A---- C:\Windows\system32\rasppp.dll
2011-06-05 11:32:10 ----A---- C:\Windows\system32\MSVidCtl.dll
2011-06-05 11:32:10 ----A---- C:\Windows\system32\fontext.dll
2011-06-05 11:32:10 ----A---- C:\Windows\system32\drivers\npfs.sys
2011-06-05 11:32:10 ----A---- C:\Windows\system32\drivers\afd.sys
2011-06-05 11:32:09 ----A---- C:\Windows\system32\shwebsvc.dll
2011-06-05 11:32:09 ----A---- C:\Windows\system32\PnPutil.exe
2011-06-05 11:32:09 ----A---- C:\Windows\system32\oobefldr.dll
2011-06-05 11:32:09 ----A---- C:\Windows\system32\dsprop.dll
2011-06-05 11:32:09 ----A---- C:\Windows\system32\drivers\tdx.sys
2011-06-05 11:32:09 ----A---- C:\Windows\system32\dimsroam.dll
2011-06-05 11:32:08 ----A---- C:\Windows\system32\shsetup.dll
2011-06-05 11:32:08 ----A---- C:\Windows\system32\rasmontr.dll
2011-06-05 11:32:08 ----A---- C:\Windows\system32\modemui.dll
2011-06-05 11:32:08 ----A---- C:\Windows\system32\drivers\pacer.sys
2011-06-05 11:32:07 ----A---- C:\Windows\system32\wmdrmsdk.dll
2011-06-05 11:32:07 ----A---- C:\Windows\system32\mscandui.dll
2011-06-05 11:32:07 ----A---- C:\Windows\system32\chtbrkr.dll
2011-06-05 11:32:07 ----A---- C:\Windows\system32\dataclen.dll
2011-06-05 11:32:06 ----A---- C:\Windows\system32\wlgpclnt.dll
2011-06-05 11:32:06 ----A---- C:\Windows\system32\tscfgwmi.dll
2011-06-05 11:32:06 ----A---- C:\Windows\system32\smss.exe
2011-06-05 11:32:06 ----A---- C:\Windows\system32\rdpwsx.dll
2011-06-05 11:32:06 ----A---- C:\Windows\system32\drivers\fastfat.sys
2011-06-05 11:32:06 ----A---- C:\Windows\system32\credui.dll
2011-06-05 11:32:06 ----A---- C:\Windows\system32\blackbox.dll
2011-06-05 11:32:06 ----A---- C:\Windows\system32\appmgmts.dll
2011-06-05 11:32:05 ----A---- C:\Windows\system32\WSDMon.dll
2011-06-05 11:32:05 ----A---- C:\Windows\system32\wmpeffects.dll
2011-06-05 11:32:05 ----A---- C:\Windows\system32\netplwiz.dll
2011-06-05 11:32:05 ----A---- C:\Windows\system32\CscMig.dll
2011-06-05 11:32:05 ----A---- C:\Windows\system32\certprop.dll
2011-06-05 11:32:04 ----A---- C:\Windows\system32\networkexplorer.dll
2011-06-05 11:32:04 ----A---- C:\Windows\system32\ifmon.dll
2011-06-05 11:32:04 ----A---- C:\Windows\system32\drivers\rmcast.sys
2011-06-05 11:32:04 ----A---- C:\Windows\system32\drivers\ohci1394.sys
2011-06-05 11:32:03 ----A---- C:\Windows\system32\wscapi.dll
2011-06-05 11:32:03 ----A---- C:\Windows\system32\wpcsvc.dll
2011-06-05 11:32:03 ----A---- C:\Windows\system32\msscp.dll
2011-06-05 11:32:03 ----A---- C:\Windows\system32\msimtf.dll
2011-06-05 11:32:03 ----A---- C:\Windows\system32\logagent.exe
2011-06-05 11:32:03 ----A---- C:\Windows\system32\InkEd.dll
2011-06-05 11:32:03 ----A---- C:\Windows\system32\gpresult.exe
2011-06-05 11:32:03 ----A---- C:\Windows\system32\drivers\watchdog.sys
2011-06-05 11:32:03 ----A---- C:\Windows\system32\cipher.exe
2011-06-05 11:32:02 ----A---- C:\Windows\system32\thawbrkr.dll
2011-06-05 11:32:02 ----A---- C:\Windows\system32\softkbd.dll
2011-06-05 11:32:02 ----A---- C:\Windows\system32\sendmail.dll
2011-06-05 11:32:02 ----A---- C:\Windows\system32\msctfui.dll
2011-06-05 11:32:02 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2011-06-05 11:32:02 ----A---- C:\Windows\system32\drivers\smb.sys
2011-06-05 11:32:01 ----A---- C:\Windows\system32\rdpclip.exe
2011-06-05 11:32:01 ----A---- C:\Windows\system32\olepro32.dll
2011-06-05 11:32:01 ----A---- C:\Windows\system32\drmmgrtn.dll
2011-06-05 11:32:01 ----A---- C:\Windows\system32\drivers\udfs.sys
2011-06-05 11:32:01 ----A---- C:\Windows\system32\drivers\hidusb.sys
2011-06-05 11:32:01 ----A---- C:\Windows\system32\dmsynth.dll
2011-06-05 11:32:01 ----A---- C:\Windows\system32\Apphlpdm.dll
2011-06-05 11:32:00 ----A---- C:\Windows\system32\puiapi.dll
2011-06-05 11:32:00 ----A---- C:\Windows\system32\input.dll
2011-06-05 11:32:00 ----A---- C:\Windows\system32\gpprnext.dll
2011-06-05 11:32:00 ----A---- C:\Windows\system32\ExplorerFrame.dll
2011-06-05 11:31:59 ----A---- C:\Windows\system32\wshbth.dll
2011-06-05 11:31:59 ----A---- C:\Windows\system32\version.dll
2011-06-05 11:31:59 ----A---- C:\Windows\system32\SLLUA.exe
2011-06-05 11:31:59 ----A---- C:\Windows\system32\msisip.dll
2011-06-05 11:31:59 ----A---- C:\Windows\system32\mprapi.dll
2011-06-05 11:31:59 ----A---- C:\Windows\system32\fc.exe
2011-06-05 11:31:58 ----A---- C:\Windows\system32\rdpendp.dll
2011-06-05 11:31:58 ----A---- C:\Windows\system32\msjint40.dll
2011-06-05 11:31:58 ----A---- C:\Windows\system32\MsCtfMonitor.dll
2011-06-05 11:31:58 ----A---- C:\Windows\system32\fdSSDP.dll
2011-06-05 11:31:58 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2011-06-05 11:31:58 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2011-06-05 11:31:58 ----A---- C:\Windows\system32\dmusic.dll
2011-06-05 11:31:58 ----A---- C:\Windows\system32\cscapi.dll
2011-06-05 11:31:57 ----A---- C:\Windows\system32\wsdchngr.dll
2011-06-05 11:31:57 ----A---- C:\Windows\system32\SMBHelperClass.dll
2011-06-05 11:31:57 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll
2011-06-05 11:31:57 ----A---- C:\Windows\system32\l2nacp.dll
2011-06-05 11:31:57 ----A---- C:\Windows\system32\ftp.exe
2011-06-05 11:31:57 ----A---- C:\Windows\system32\eapp3hst.dll
2011-06-05 11:31:57 ----A---- C:\Windows\system32\cscdll.dll
2011-06-05 11:31:56 ----A---- C:\Windows\system32\Storprop.dll
2011-06-05 11:31:56 ----A---- C:\Windows\system32\rasdial.exe
2011-06-05 11:31:56 ----A---- C:\Windows\system32\rasdiag.dll
2011-06-05 11:31:56 ----A---- C:\Windows\system32\PortableDeviceTypes.dll
2011-06-05 11:31:56 ----A---- C:\Windows\system32\gpscript.exe
2011-06-05 11:31:56 ----A---- C:\Windows\system32\fdWCN.dll
2011-06-05 11:31:56 ----A---- C:\Windows\system32\dot3cfg.dll
2011-06-05 11:31:56 ----A---- C:\Windows\system32\bthudtask.exe
2011-06-05 11:31:56 ----A---- C:\Windows\system32\bthci.dll
2011-06-05 11:31:55 ----A---- C:\Windows\system32\slcinst.dll
2011-06-05 11:31:55 ----A---- C:\Windows\system32\PrintBrmUi.exe
2011-06-05 11:31:55 ----A---- C:\Windows\system32\networkitemfactory.dll
2011-06-05 11:31:55 ----A---- C:\Windows\system32\ipconfig.exe
2011-06-05 11:31:55 ----A---- C:\Windows\system32\CHxReadingStringIME.dll
2011-06-05 11:31:55 ----A---- C:\Windows\system32\eappcfg.dll
2011-06-05 11:31:55 ----A---- C:\Windows\system32\drivers\rassstp.sys
2011-06-05 11:31:54 ----A---- C:\Windows\system32\ocsetup.exe
2011-06-05 11:31:54 ----A---- C:\Windows\system32\nslookup.exe
2011-06-05 11:31:54 ----A---- C:\Windows\system32\gpscript.dll
2011-06-05 11:31:54 ----A---- C:\Windows\system32\FwRemoteSvr.dll
2011-06-05 11:31:54 ----A---- C:\Windows\system32\eappgnui.dll
2011-06-05 11:31:54 ----A---- C:\Windows\system32\drivers\hidclass.sys
2011-06-05 11:31:53 ----A---- C:\Windows\system32\qprocess.exe
2011-06-05 11:31:53 ----A---- C:\Windows\system32\PNPXAssoc.dll
2011-06-05 11:31:53 ----A---- C:\Windows\system32\mmcico.dll
2011-06-05 11:31:53 ----A---- C:\Windows\system32\hbaapi.dll
2011-06-05 11:31:53 ----A---- C:\Windows\system32\fdeploy.dll
2011-06-05 11:31:53 ----A---- C:\Windows\system32\drivers\dfsc.sys
2011-06-05 11:31:53 ----A---- C:\Windows\system32\drivers\cdrom.sys
2011-06-05 11:31:52 ----A---- C:\Windows\system32\chgusr.exe
2011-06-05 11:31:52 ----A---- C:\Windows\system32\chgport.exe
2011-06-05 11:31:52 ----A---- C:\Windows\system32\gpupdate.exe
2011-06-05 11:31:52 ----A---- C:\Windows\system32\drivers\nwifi.sys
2011-06-05 11:31:51 ----A---- C:\Windows\system32\tscon.exe
2011-06-05 11:31:51 ----A---- C:\Windows\system32\shadow.exe
2011-06-05 11:31:51 ----A---- C:\Windows\system32\logoff.exe
2011-06-05 11:31:51 ----A---- C:\Windows\system32\csrstub.exe
2011-06-05 11:31:51 ----A---- C:\Windows\system32\cbsra.exe
2011-06-05 11:31:51 ----A---- C:\Windows\system32\bitsigd.dll
2011-06-05 11:31:50 ----A---- C:\Windows\system32\NcdProp.dll
2011-06-05 11:31:50 ----A---- C:\Windows\system32\iscsilog.dll
2011-06-05 11:31:50 ----A---- C:\Windows\system32\chglogon.exe
2011-06-05 11:31:49 ----A---- C:\Windows\system32\tskill.exe
2011-06-05 11:31:49 ----A---- C:\Windows\system32\rwinsta.exe
2011-06-05 11:31:49 ----A---- C:\Windows\system32\qappsrv.exe
2011-06-05 11:31:48 ----A---- C:\Windows\system32\tsdiscon.exe
2011-06-05 11:31:47 ----A---- C:\Windows\system32\vdmdbg.dll
2011-06-05 11:31:47 ----A---- C:\Windows\system32\slwga.dll
2011-06-05 11:31:47 ----A---- C:\Windows\system32\reset.exe
2011-06-05 11:31:47 ----A---- C:\Windows\system32\query.exe
2011-06-05 11:31:47 ----A---- C:\Windows\system32\odbcconf.dll
2011-06-05 11:31:47 ----A---- C:\Windows\system32\drivers\dxg.sys
2011-06-05 11:31:47 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2011-06-05 11:31:46 ----A---- C:\Windows\system32\winrnr.dll
2011-06-05 11:31:46 ----A---- C:\Windows\system32\inetppui.dll
2011-06-05 11:31:46 ----A---- C:\Windows\system32\change.exe
2011-06-05 11:31:45 ----A---- C:\Windows\system32\midimap.dll
2011-06-05 11:31:43 ----A---- C:\Windows\system32\drivers\stream.sys
2011-06-05 11:31:43 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2011-06-05 11:31:42 ----A---- C:\Windows\system32\drivers\usb8023.sys
2011-06-05 11:31:42 ----A---- C:\Windows\system32\drivers\bridge.sys
2011-06-05 11:31:41 ----A---- C:\Windows\system32\f3ahvoas.dll
2011-06-05 11:31:41 ----A---- C:\Windows\system32\drivers\raspppoe.sys
2011-06-05 11:31:40 ----A---- C:\Windows\system32\msimsg.dll
2011-06-05 11:31:00 ----A---- C:\Windows\system32\SmiEngine.dll
2011-06-05 11:30:48 ----A---- C:\Windows\system32\wdscore.dll
2011-06-05 11:30:48 ----A---- C:\Windows\system32\PkgMgr.exe
2011-06-05 11:30:08 ----A---- C:\Windows\system32\drvstore.dll
2011-06-05 10:31:27 ----SD---- C:\žižala9696ž
2011-06-05 10:30:00 ----D---- C:\Windows\temp
2011-06-05 10:29:13 ----A---- C:\Windows\system32\CF19960.exe
2011-06-05 09:54:54 ----A---- C:\Windows\system32\win32k.sys
2011-06-05 09:54:48 ----A---- C:\Windows\system32\inetcomm.dll
2011-06-05 09:54:33 ----A---- C:\Windows\system32\shsvcs.dll
2011-06-05 09:54:16 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-06-05 09:54:16 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-06-05 09:54:16 ----A---- C:\Windows\system32\drivers\bowser.sys
2011-06-05 09:54:15 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-06-05 09:54:11 ----A---- C:\Windows\system32\sbe.dll
2011-06-05 09:54:11 ----A---- C:\Windows\system32\EncDec.dll
2011-06-05 09:54:10 ----A---- C:\Windows\system32\sbeio.dll
2011-06-05 09:54:05 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-06-05 09:54:05 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-06-05 09:54:05 ----A---- C:\Windows\system32\dnsapi.dll
2011-06-05 09:53:35 ----A---- C:\Windows\system32\mfc42u.dll
2011-06-05 09:53:35 ----A---- C:\Windows\system32\mfc42.dll
2011-06-05 09:53:26 ----A---- C:\Windows\system32\atmfd.dll
2011-06-05 09:53:24 ----A---- C:\Windows\system32\atmlib.dll
2011-06-05 09:53:02 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-06-05 09:53:02 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-06-05 09:53:02 ----A---- C:\Windows\system32\drivers\srv.sys
2011-06-05 09:48:59 ----A---- C:\Windows\system32\tscupgrd.exe
2011-06-05 09:48:59 ----A---- C:\Windows\system32\mstscax.dll
2011-06-05 09:48:59 ----A---- C:\Windows\system32\mstsc.exe
2011-06-05 09:48:49 ----A---- C:\Windows\system32\WFS.exe
2011-06-05 09:48:49 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-06-04 21:02:14 ----SD---- C:\žižala1515ž
2011-06-04 20:59:41 ----A---- C:\Windows\system32\CF25188.exe
2011-06-04 20:57:25 ----A---- C:\Windows\system32\CF24737.exe
2011-06-04 20:45:44 ----A---- C:\Windows\system32\CF22435.exe
2011-06-04 20:21:10 ----D---- C:\zizala
2011-06-04 20:21:08 ----A---- C:\Windows\system32\CF17622.exe
2011-06-04 20:19:15 ----SD---- C:\žižala26834ž
2011-06-04 18:56:47 ----SD---- C:\žižala1047ž
2011-06-04 18:54:47 ----A---- C:\Windows\system32\CF713.exe
2011-06-04 18:53:48 ----SD---- C:\zizala_25744z
2011-06-04 18:52:14 ----SD---- C:\žižala20727ž
2011-06-04 18:50:56 ----SD---- C:\žižala29018ž
2011-06-04 18:47:29 ----A---- C:\Windows\ntbtlog.txt
2011-06-03 21:27:04 ----SD---- C:\zizala_6021z
2011-06-03 21:26:16 ----SD---- C:\zizala_6567z
2011-06-03 21:22:17 ----SD---- C:\zizala_22603z
2011-06-03 21:07:08 ----SD---- C:\žižala5307ž
2011-06-03 21:01:19 ----A---- C:\Windows\system32\CF5496.exe
2011-06-03 20:29:34 ----SD---- C:\žižala17098ž
2011-06-03 20:20:57 ----A---- C:\Windows\system32\CF30355.exe
2011-06-03 20:10:06 ----SD---- C:\žižala
2011-06-03 19:39:30 ----A---- C:\TDSSKiller.2.5.3.0_03.06.2011_19.39.30_log.txt
2011-06-03 17:17:51 ----A---- C:\Windows\system32\CF27231.exe
2011-06-03 17:06:24 ----SD---- C:\zizala_376z
2011-06-03 16:29:42 ----SD---- C:\zizala_
2011-06-03 16:19:50 ----A---- C:\Windows\system32\CF15837.exe
2011-06-03 16:13:43 ----SD---- C:\zizala4077z
2011-06-03 16:10:14 ----A---- C:\Windows\PEV.exe
2011-06-03 16:10:14 ----A---- C:\Windows\MBR.exe
2011-06-03 16:10:03 ----SD---- C:\zizala20615z
2011-06-03 16:09:05 ----A---- C:\Windows\system32\CF13770.exe
2011-06-03 15:58:30 ----A---- C:\Windows\system32\CF11700.exe
2011-06-03 15:10:09 ----A---- C:\Windows\zip.exe
2011-06-03 15:10:09 ----A---- C:\Windows\SWSC.exe
2011-06-03 15:10:09 ----A---- C:\Windows\SWREG.exe
2011-06-03 15:10:09 ----A---- C:\Windows\sed.exe
2011-06-03 15:10:09 ----A---- C:\Windows\NIRCMD.exe
2011-06-03 15:10:09 ----A---- C:\Windows\grep.exe
2011-06-03 15:09:50 ----D---- C:\Windows\ERDNT
2011-06-03 15:09:48 ----A---- C:\Windows\system32\CF2148.exe
2011-06-03 15:09:47 ----A---- C:\Windows\system32\swsc.exe
2011-06-03 15:09:44 ----D---- C:\Qoobox
2011-06-03 11:25:45 ----D---- C:\Program Files\trend micro
2011-06-03 11:25:44 ----D---- C:\rsit
2011-06-03 10:21:31 ----A---- C:\Windows\system32\drivers\AvgArCln.sys
2011-06-03 10:21:29 ----D---- C:\Program Files\GRISOFT
2011-06-03 09:54:41 ----D---- C:\Program Files\CCleaner
2011-06-01 16:22:06 ----A---- C:\Windows\system32\drivers\aswSnx.sys

======List of files/folders modified in the last 1 months======

2011-06-05 21:46:50 ----D---- C:\Windows\Prefetch
2011-06-05 19:24:56 ----D---- C:\Windows\rescache
2011-06-05 19:15:24 ----D---- C:\Windows\System32
2011-06-05 19:15:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-06-05 19:15:23 ----D---- C:\Windows\inf
2011-06-05 19:11:25 ----D---- C:\Windows\system32\Tasks
2011-06-05 19:06:08 ----D---- C:\Windows\system32\cs-CZ
2011-06-05 19:06:07 ----RD---- C:\Windows\Offline Web Pages
2011-06-05 19:06:07 ----D---- C:\Windows\system32\wbem
2011-06-05 19:06:07 ----D---- C:\Windows\system32\migration
2011-06-05 19:06:07 ----D---- C:\Windows\system32\en-US
2011-06-05 19:06:07 ----D---- C:\Windows\PolicyDefinitions
2011-06-05 19:06:07 ----D---- C:\Program Files\Internet Explorer
2011-06-05 19:06:04 ----SD---- C:\Windows\Downloaded Program Files
2011-06-05 19:06:02 ----D---- C:\Windows\system32\drivers
2011-06-05 19:06:01 ----D---- C:\Windows\system32\drivers\cs-CZ
2011-06-05 18:56:58 ----D---- C:\Windows\winsxs
2011-06-05 18:56:55 ----D---- C:\Windows\system32\catroot2
2011-06-05 18:56:55 ----D---- C:\Windows\system32\catroot
2011-06-05 18:56:34 ----D---- C:\Windows\Logs
2011-06-05 18:47:21 ----D---- C:\Windows
2011-06-05 18:47:13 ----SHD---- C:\System Volume Information
2011-06-05 17:40:57 ----D---- C:\Windows\Microsoft.NET
2011-06-05 17:40:44 ----RSD---- C:\Windows\assembly
2011-06-05 17:27:04 ----D---- C:\Windows\tracing
2011-06-05 13:22:48 ----D---- C:\Windows\Minidump
2011-06-05 12:24:53 ----SHD---- C:\Boot
2011-06-05 12:14:51 ----D---- C:\Program Files\Windows Sidebar
2011-06-05 12:14:51 ----D---- C:\Program Files\Windows Mail
2011-06-05 12:14:51 ----D---- C:\Program Files\Windows Calendar
2011-06-05 12:14:51 ----D---- C:\Program Files\Movie Maker
2011-06-05 12:14:50 ----D---- C:\Program Files\Windows Photo Gallery
2011-06-05 12:14:50 ----D---- C:\Program Files\Windows Media Player
2011-06-05 12:14:50 ----D---- C:\Program Files\Windows Journal
2011-06-05 12:14:50 ----D---- C:\Program Files\Windows Collaboration
2011-06-05 12:14:48 ----D---- C:\Program Files\Common Files\System
2011-06-05 12:14:47 ----D---- C:\Windows\servicing
2011-06-05 12:14:47 ----D---- C:\Windows\ehome
2011-06-05 12:14:47 ----D---- C:\Program Files\Windows Defender
2011-06-05 12:14:37 ----D---- C:\Windows\IME
2011-06-05 12:14:36 ----D---- C:\Windows\system32\XPSViewer
2011-06-05 12:14:36 ----D---- C:\Windows\system32\sk-SK
2011-06-05 12:14:36 ----D---- C:\Windows\system32\lv-LV
2011-06-05 12:14:36 ----D---- C:\Windows\system32\ko-KR
2011-06-05 12:14:36 ----D---- C:\Windows\system32\hr-HR
2011-06-05 12:14:36 ----D---- C:\Windows\system32\et-EE
2011-06-05 12:14:36 ----D---- C:\Windows\system32\da-DK
2011-06-05 12:14:35 ----D---- C:\Windows\system32\oobe
2011-06-05 12:14:35 ----D---- C:\Windows\system32\it-IT
2011-06-05 12:14:35 ----D---- C:\Windows\system32\el-GR
2011-06-05 12:14:35 ----D---- C:\Windows\system32\de-DE
2011-06-05 12:14:33 ----D---- C:\Windows\system32\sv-SE
2011-06-05 12:14:33 ----D---- C:\Windows\system32\setup
2011-06-05 12:14:33 ----D---- C:\Windows\system32\ru-RU
2011-06-05 12:14:33 ----D---- C:\Windows\system32\he-IL
2011-06-05 12:14:33 ----D---- C:\Windows\system32\fr-FR
2011-06-05 12:14:33 ----D---- C:\Windows\system32\fi-FI
2011-06-05 12:14:33 ----D---- C:\Windows\system32\cs
2011-06-05 12:14:33 ----D---- C:\Windows\system32\AdvancedInstallers
2011-06-05 12:14:30 ----D---- C:\Windows\system32\SLUI
2011-06-05 12:14:30 ----D---- C:\Windows\system32\pt-PT
2011-06-05 12:14:30 ----D---- C:\Windows\system32\hu-HU
2011-06-05 12:14:29 ----D---- C:\Windows\system32\zh-TW
2011-06-05 12:14:29 ----D---- C:\Windows\system32\zh-CN
2011-06-05 12:14:29 ----D---- C:\Windows\system32\uk-UA
2011-06-05 12:14:29 ----D---- C:\Windows\system32\sr-Latn-CS
2011-06-05 12:14:29 ----D---- C:\Windows\system32\sl-SI
2011-06-05 12:14:29 ----D---- C:\Windows\system32\pl-PL
2011-06-05 12:14:29 ----D---- C:\Windows\system32\manifeststore
2011-06-05 12:14:29 ----D---- C:\Windows\system32\ja-JP
2011-06-05 12:14:29 ----D---- C:\Windows\system32\es-ES
2011-06-05 12:14:29 ----D---- C:\Windows\system32\bg-BG
2011-06-05 12:14:28 ----D---- C:\Windows\system32\th-TH
2011-06-05 12:14:28 ----D---- C:\Windows\system32\ro-RO
2011-06-05 12:14:28 ----D---- C:\Windows\system32\drivers\UMDF
2011-06-05 12:14:27 ----D---- C:\Windows\system32\tr-TR
2011-06-05 12:14:26 ----D---- C:\Windows\system32\nl-NL
2011-06-05 12:14:26 ----D---- C:\Windows\system32\nb-NO
2011-06-05 12:14:25 ----D---- C:\Windows\system32\pt-BR
2011-06-05 12:14:25 ----D---- C:\Windows\system32\migwiz
2011-06-05 12:14:25 ----D---- C:\Windows\system32\lt-LT
2011-06-05 12:14:25 ----D---- C:\Windows\system32\ar-SA
2011-06-05 12:13:49 ----RSD---- C:\Windows\Fonts
2011-06-05 12:13:48 ----D---- C:\Windows\AppPatch
2011-06-05 12:09:50 ----D---- C:\Windows\system32\Boot
2011-06-05 11:55:51 ----A---- C:\Windows\fonts\GlobalUserInterface.CompositeFont
2011-06-05 10:59:51 ----SHD---- C:\Windows\Installer
2011-06-05 10:58:55 ----D---- C:\Program Files\Common Files\microsoft shared
2011-06-05 10:09:52 ----D---- C:\ProgramData\Microsoft Help
2011-06-05 10:04:46 ----D---- C:\Windows\Debug
2011-06-05 08:32:38 ----RD---- C:\Users
2011-06-05 08:10:49 ----D---- C:\ProgramData\Kaspersky Lab
2011-06-03 11:25:45 ----RD---- C:\Program Files
2011-06-03 09:54:15 ----D---- C:\Program Files\Google
2011-05-27 16:45:30 ----D---- C:\Program Files\Mozilla Firefox
2011-05-24 19:14:10 ----N---- C:\Windows\system32\MpSigStub.exe
2011-05-10 14:10:55 ----A---- C:\Windows\system32\aswBoot.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVG Anti-Rootkit;AVG Anti-Rootkit; C:\Windows\System32\DRIVERS\avgarkt.sys [2007-01-31 5632]
R0 fvevol;BitLocker Drive Encryption Filter Driver; C:\Windows\System32\DRIVERS\fvevol.sys [2009-04-11 143848]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2009-10-13 685816]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2011-05-10 25432]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2011-05-10 441176]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2011-05-10 307928]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2011-05-10 49240]
R1 AvgArCln;Avg Anti-Rootkit Clean Driver; C:\Windows\System32\DRIVERS\AvgArCln.sys [2007-01-18 3968]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2011-05-10 19544]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2011-05-10 53592]
R2 irda;IrDA Protocol; C:\Windows\system32\DRIVERS\irda.sys [2008-04-05 95744]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2008-04-05 179712]
R3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-11-02 464384]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2008-04-05 987648]
R3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2008-04-05 200704]
R3 NSCIRDA;NSC Infrared Device Driver; C:\Windows\system32\DRIVERS\nscirda.sys [2008-04-05 30720]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2008-04-05 654336]
S3 abq4xubs;abq4xubs; C:\Windows\system32\drivers\abq4xubs.sys []
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-04-11 507904]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-04-11 29696]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-04-05 5632]
S3 IpwP;IPWireless 3G Network Adapter; C:\Windows\system32\DRIVERS\ipw3gnet.sys [2007-06-12 51040]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-04-05 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-04-05 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-04-05 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-04-05 6016]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-04-05 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-04-05 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-04-05 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2011-05-10 42184]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-04-05 21504]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-04-05 21504]
R2 Irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\Windows\system32\svchost.exe [2008-04-05 21504]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
S2 AMService;AMService; C:\Windows\Temp\qywi\setup.exe run []
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-12-21 135664]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-12-21 135664]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-12-21 182768]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

-----------------EOF-----------------

Re: rootkit Alureon-C

Napsal: 05 čer 2011 20:51
od pete2006
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 6.0.6002 Disk: Hitachi_HTS541680J9SA00 rev.SB2OC70P -> Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-4

device: opened successfully
user: MBR read successfully
kernel: MBR read successfully
user & kernel MBR OK

Re: rootkit Alureon-C

Napsal: 05 čer 2011 20:54
od motji
Ve rsitu ještě něco vidím, můžete prosím zopakovat OTL se skriptem? Jinak Mbr je už ok :) .