VIRY.CZ

RogueKiller V8.5.4 [Mar 18 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Honza [Práva správce]
Mód : Kontrola -- Datum : 04/23/2013 16:59:13
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 2 ¤¤¤
[SUSP PATH] Lightshot.exe -- C:\Users\Honza\AppData\Local\Skillbrains\lightshot\3.4.0.20\LightShot.exe [7] -> SMAZÁNO [TermProc]
[SUSP PATH] QipGuard.exe -- C:\Users\Honza\AppData\Roaming\QipGuard\QipGuard.exe [-] -> SMAZÁNO [TermProc]

¤¤¤ ¤¤¤ Záznamy Registrů: : 11 ¤¤¤
[RUN][SUSP PATH] HKCU\[...]\Run : LightShot (C:\Users\Honza\AppData\Local\Skillbrains\lightshot\LightShot.exe Flags: uninsdeletevalue) [-] -> NALEZENO
[RUN][SUSP PATH] HKCU\[...]\Run : QIP Internet Guardian (C:\Users\Honza\AppData\Roaming\QipGuard\QipGuard.exe) [-] -> NALEZENO
[RUN][SUSP PATH] HKUS\S-1-5-21-2235225708-107714369-1751721454-1000[...]\Run : LightShot (C:\Users\Honza\AppData\Local\Skillbrains\lightshot\LightShot.exe Flags: uninsdeletevalue) [-] -> NALEZENO
[RUN][SUSP PATH] HKUS\S-1-5-21-2235225708-107714369-1751721454-1000[...]\Run : QIP Internet Guardian (C:\Users\Honza\AppData\Roaming\QipGuard\QipGuard.exe) [-] -> NALEZENO
[HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> NALEZENO
[HJ] HKLM\[...]\Wow6432Node\System : ConsentPromptBehaviorAdmin (0) -> NALEZENO
[HJ] HKLM\[...]\System : EnableLUA (0) -> NALEZENO
[HJ] HKLM\[...]\Wow6432Node\System : EnableLUA (0) -> NALEZENO
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤

¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: WDC WD6400BEVT-22A0RT0 +++++
--- User ---
[MBR] 0ec89c36c956b17432277e26f2069370
[BSP] f6bec6f3881d7a872336fa159596d677 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 13312 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 27265024 | Size: 100 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 27469824 | Size: 102400 Mo
3 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 237185024 | Size: 494666 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[1]_S_04232013_02d1659.txt >>
RKreport[1]_S_04232013_02d1659.txt

Znovu spustte RogueKiller jako spravce (pokud jste ho jeste nezavrel/a, rovnou kliknete na napis Smazat)
Probehne kratoucky testik a pak se zpristupni vpravo nahore tlacitko Prohledat. Na to kliknete a probehne dalsi test.
Po dokonceni kliknete na napis Smazat.
Pak kliknete na napis Zprava a objevi se log. Ten mi sem vlozte.
Pak kliknete na napis Oprava Host a Zprava.
Objevi se dalsi log. I ten mi sem vlozte.

RogueKiller V8.5.4 [Mar 18 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Honza [Práva správce]
Mód : Odebrat -- Datum : 04/23/2013 19:01:43
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 7 ¤¤¤
[RUN][SUSP PATH] HKCU\[...]\Run : LightShot (C:\Users\Honza\AppData\Local\Skillbrains\lightshot\LightShot.exe Flags: uninsdeletevalue) [-] -> VYMAZÁNO
[RUN][SUSP PATH] HKCU\[...]\Run : QIP Internet Guardian (C:\Users\Honza\AppData\Roaming\QipGuard\QipGuard.exe) [-] -> VYMAZÁNO
[HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> NAHRAZENO (2)
[HJ] HKLM\[...]\System : EnableLUA (0) -> NAHRAZENO (1)
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> NAHRAZENO (1)
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRAZENO (0)
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: WDC WD6400BEVT-22A0RT0 +++++
--- User ---
[MBR] 0ec89c36c956b17432277e26f2069370
[BSP] f6bec6f3881d7a872336fa159596d677 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 13312 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 27265024 | Size: 100 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 27469824 | Size: 102400 Mo
3 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 237185024 | Size: 494666 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[3]_D_04232013_02d1901.txt >>
RKreport[1]_S_04232013_02d1659.txt ; RKreport[2]_S_04232013_02d1900.txt ; RKreport[3]_D_04232013_02d1901.txt

RogueKiller V8.5.4 [Mar 18 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Honza [Práva správce]
Mód : Oprava HOSTS -- Datum : 04/23/2013 19:09:17
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 0 ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\Windows\system32\drivers\etc\hosts

127.0.0.1 localhost


¤¤¤ Resetovaný HOSTS: ¤¤¤
127.0.0.1 localhost

Dokončeno : << RKreport[4]_H_04232013_02d1909.txt >>
RKreport[1]_S_04232013_02d1659.txt ; RKreport[2]_S_04232013_02d1900.txt ; RKreport[3]_D_04232013_02d1901.txt ; RKreport[4]_H_04232013_02d1909.txt

Dejte novy log z RSIT

Logfile of random's system information tool 1.08 (written by random/random)
Run by Honza at 2013-04-24 19:51:10
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 61 GB (60%) free of 102 GB
Total RAM: 3767 MB (37% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:51:14, on 24.4.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16476)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
C:\Program Files (x86)\Common Files\Nero\Lib\NMBgMonitor.exe
C:\Program Files (x86)\QIP 2012\qip.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
C:\Users\Honza\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_169.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_169.exe
C:\PROGRAM FILES (X86)\ZONER\PHOTO STUDIO 12\PROGRAM\ZPS.EXE
C:\Program Files\trend micro\Honza.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: QIPBHO - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Honza\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll (file missing)
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Rainlendar2] C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Sony PC Companion] "C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Infium] "C:\Program Files (x86)\QIP 2012\qip.exe" /autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = Honza\AppData\Roaming\Dropbox\bin\Dropbox.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9725 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\system32\WLANExt.exe 29083456
\??\C:\Windows\system32\conhost.exe "-1015134746606767992465618261-1216318019-536104528-131762502860384501-1616372426
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe"
"C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE3
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
"C:\Program Files (x86)\Common Files\Nero\Lib\NMBgMonitor.exe"
"C:\Program Files (x86)\QIP 2012\qip.exe" /autorun
"C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" -Embedding
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Users\Honza\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Windows\system32\notepad.exe"
"taskhost.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=2316.1b784a00.688328967 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox" E7CF176E110C211B 2316 "\\.\pipe\gecko-crash-server-pipe.2316" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_169.exe" --proxy-stub-channel=Flash4428.64F21D90.22132 --host-broker-channel=Flash4428.64F21D90.17532 --host-pid=4428 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_169.exe" --channel=5636.0030F858.1724159790 --proxy-stub-channel=Flash4428.64F21D90.22132 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll" --host-npapi-version=27 --type=renderer
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
"C:\PROGRAM FILES (X86)\ZONER\PHOTO STUDIO 12\PROGRAM\ZPS.EXE" "C:\Users\Honza\Desktop\rozvrh.png"
"C:\Windows\system32\wuauclt.exe"
"D:\Instal\RSIT\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\update-S-1-5-21-2235225708-107714369-1751721454-1000.job
C:\Windows\tasks\update-sys.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-04-04 462752]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95289393-33EA-4F8D-B952-483415B9C955}]
QIPBHO Class - C:\Users\Honza\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-12-18 343784]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-04-04 171424]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-12-18 343784]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-12-18 343784]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-10-21 161304]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-10-21 386584]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-10-21 414744]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-02-22 10081312]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2010-02-22 877600]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-09-17 1842472]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2013-01-27 1281512]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Rainlendar2"=C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe [2011-02-04 2346496]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"Sony PC Companion"=C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [2013-03-18 448736]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files (x86)\Common Files\Nero\Lib\NMBgMonitor.exe [2007-09-20 202024]
"Infium"=C:\Program Files (x86)\QIP 2012\qip.exe [2013-01-10 8378408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2007-09-20 1836328]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OrderReminder]
C:\Program Files (x86)\Hewlett-Packard\OrderReminder\OrderReminder.exe [2005-03-18 98304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Honza^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^KN StrongDC.lnk]
C:\PROGRA~1\KN_STR~1\StrongDC.exe [2008-07-15 3361792]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-10-12 343168]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2009-12-23 284696]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]
""= []
"Adobe Acrobat Speed Launcher"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [2012-12-18 39136]
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [2012-12-18 825560]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]

C:\Users\Honza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Honza\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-10-21 269824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2013-04-22 23:09:32 ----A---- C:\AdwCleaner[S1].txt
2013-04-22 23:08:34 ----A---- C:\AdwCleaner[R2].txt
2013-04-22 21:09:01 ----D---- C:\Users\Honza\AppData\Roaming\Malwarebytes
2013-04-22 21:08:37 ----D---- C:\ProgramData\Malwarebytes
2013-04-22 21:06:18 ----A---- C:\AdwCleaner[R1].txt
2013-04-22 18:31:13 ----D---- C:\Users\Honza\AppData\Roaming\Dropbox
2013-04-22 11:05:56 ----D---- C:\Windows\system32\SPReview
2013-04-22 10:16:23 ----A---- C:\Windows\SYSWOW64\MSAC3ENC.DLL
2013-04-22 10:16:23 ----A---- C:\Windows\SYSWOW64\mobsync.exe
2013-04-22 10:16:23 ----A---- C:\Windows\system32\mprddm.dll
2013-04-22 10:16:23 ----A---- C:\Windows\system32\mobsync.exe
2013-04-22 10:16:22 ----A---- C:\Windows\SYSWOW64\mstask.dll
2013-04-22 10:16:22 ----A---- C:\Windows\SYSWOW64\mscories.dll
2013-04-22 10:16:22 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2013-04-22 10:16:22 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2013-04-22 10:16:21 ----A---- C:\Windows\SYSWOW64\KBDLT1.DLL
2013-04-22 10:16:21 ----A---- C:\Windows\SYSWOW64\KBDINTEL.DLL
2013-04-22 10:16:21 ----A---- C:\Windows\SYSWOW64\KBDCZ1.DLL
2013-04-22 10:16:21 ----A---- C:\Windows\SYSWOW64\iTVData.dll
2013-04-22 10:16:21 ----A---- C:\Windows\system32\msdri.dll
2013-04-22 10:16:21 ----A---- C:\Windows\system32\KBDBLR.DLL
2013-04-22 10:16:21 ----A---- C:\Windows\system32\itircl.dll
2013-04-22 10:16:21 ----A---- C:\Windows\system32\iphlpsvc.dll
2013-04-22 10:16:21 ----A---- C:\Windows\system32\inetmib1.dll
2013-04-22 10:16:21 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2013-04-22 10:16:20 ----A---- C:\Windows\SYSWOW64\raschap.dll
2013-04-22 10:16:20 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2013-04-22 10:16:20 ----A---- C:\Windows\SYSWOW64\qedit.dll
2013-04-22 10:16:20 ----A---- C:\Windows\SYSWOW64\provsvc.dll
2013-04-22 10:16:20 ----A---- C:\Windows\SYSWOW64\MediaMetadataHandler.dll
2013-04-22 10:16:20 ----A---- C:\Windows\SYSWOW64\lsmproxy.dll
2013-04-22 10:16:20 ----A---- C:\Windows\SYSWOW64\logagent.exe
2013-04-22 10:16:20 ----A---- C:\Windows\system32\printui.dll
2013-04-22 10:16:20 ----A---- C:\Windows\system32\pnidui.dll
2013-04-22 10:16:20 ----A---- C:\Windows\system32\pifmgr.dll
2013-04-22 10:16:19 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2013-04-22 10:16:19 ----A---- C:\Windows\SYSWOW64\samcli.dll
2013-04-22 10:16:19 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2013-04-22 10:16:19 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2013-04-22 10:16:19 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2013-04-22 10:16:19 ----A---- C:\Windows\SYSWOW64\rdprefdrvapi.dll
2013-04-22 10:16:19 ----A---- C:\Windows\SYSWOW64\propsys.dll
2013-04-22 10:16:19 ----A---- C:\Windows\system32\sdcpl.dll
2013-04-22 10:16:19 ----A---- C:\Windows\system32\RDPENCDD.dll
2013-04-22 10:16:19 ----A---- C:\Windows\system32\rdpclip.exe
2013-04-22 10:16:19 ----A---- C:\Windows\system32\drivers\scsiport.sys
2013-04-22 10:16:18 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2013-04-22 10:16:18 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2013-04-22 10:16:18 ----A---- C:\Windows\SYSWOW64\netiougc.exe
2013-04-22 10:16:18 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2013-04-22 10:16:18 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2013-04-22 10:16:18 ----A---- C:\Windows\SYSWOW64\ncryptui.dll
2013-04-22 10:16:18 ----A---- C:\Windows\system32\nslookup.exe
2013-04-22 10:16:18 ----A---- C:\Windows\system32\nlasvc.dll
2013-04-22 10:16:18 ----A---- C:\Windows\system32\nlaapi.dll
2013-04-22 10:16:18 ----A---- C:\Windows\system32\netshell.dll
2013-04-22 10:16:18 ----A---- C:\Windows\system32\netlogon.dll
2013-04-22 10:16:18 ----A---- C:\Windows\system32\netjoin.dll
2013-04-22 10:16:18 ----A---- C:\Windows\system32\ncsi.dll
2013-04-22 10:16:18 ----A---- C:\Windows\system32\MultiDigiMon.exe
2013-04-22 10:16:17 ----A---- C:\Windows\SYSWOW64\perfmon.exe
2013-04-22 10:16:17 ----A---- C:\Windows\SYSWOW64\pdhui.dll
2013-04-22 10:16:17 ----A---- C:\Windows\SYSWOW64\ntlanman.dll
2013-04-22 10:16:17 ----A---- C:\Windows\system32\OobeFldr.dll
2013-04-22 10:16:16 ----A---- C:\Windows\SYSWOW64\cmd.exe
2013-04-22 10:16:16 ----A---- C:\Windows\SYSWOW64\C_ISCII.DLL
2013-04-22 10:16:16 ----A---- C:\Windows\system32\CertPolEng.dll
2013-04-22 10:16:16 ----A---- C:\Windows\system32\certmgr.dll
2013-04-22 10:16:16 ----A---- C:\Windows\system32\certcli.dll
2013-04-22 10:16:15 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2013-04-22 10:16:15 ----A---- C:\Windows\system32\drivers\cdrom.sys
2013-04-22 10:16:15 ----A---- C:\Windows\system32\diagperf.dll
2013-04-22 10:16:15 ----A---- C:\Windows\system32\dbghelp.dll
2013-04-22 10:16:15 ----A---- C:\Windows\system32\dbgeng.dll
2013-04-22 10:16:15 ----A---- C:\Windows\system32\d3d9.dll
2013-04-22 10:16:15 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-04-22 10:16:15 ----A---- C:\Windows\system32\comdlg32.dll
2013-04-22 10:16:15 ----A---- C:\Windows\system32\cdd.dll
2013-04-22 10:16:14 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2013-04-22 10:16:14 ----A---- C:\Windows\system32\consent.exe
2013-04-22 10:16:14 ----A---- C:\Windows\system32\aepdu.dll
2013-04-22 10:16:14 ----A---- C:\Windows\system32\aeinv.dll
2013-04-22 10:16:14 ----A---- C:\Windows\system32\AdmTmpl.dll
2013-04-22 10:16:13 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2013-04-22 10:16:13 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-04-22 10:16:13 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2013-04-22 10:16:13 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2013-04-22 10:16:13 ----A---- C:\Windows\SYSWOW64\activeds.dll
2013-04-22 10:16:13 ----A---- C:\Windows\system32\ftp.exe
2013-04-22 10:16:13 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2013-04-22 10:16:13 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2013-04-22 10:16:13 ----A---- C:\Windows\system32\drivers\appid.sys
2013-04-22 10:16:13 ----A---- C:\Windows\system32\bcdsrv.dll
2013-04-22 10:16:13 ----A---- C:\Windows\system32\bcdedit.exe
2013-04-22 10:16:13 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2013-04-22 10:16:13 ----A---- C:\Windows\system32\authui.dll
2013-04-22 10:16:13 ----A---- C:\Windows\system32\appinfo.dll
2013-04-22 10:16:13 ----A---- C:\Windows\system32\acppage.dll
2013-04-22 10:16:12 ----A---- C:\Windows\SYSWOW64\imapi2.dll
2013-04-22 10:16:12 ----A---- C:\Windows\system32\imapi2fs.dll
2013-04-22 10:16:12 ----A---- C:\Windows\system32\drivers\http.sys
2013-04-22 10:16:12 ----A---- C:\Windows\system32\drivers\HpSAMD.sys
2013-04-22 10:16:11 ----A---- C:\Windows\SYSWOW64\evr.dll
2013-04-22 10:16:11 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-04-22 10:16:11 ----A---- C:\Windows\SYSWOW64\dskquoui.dll
2013-04-22 10:16:11 ----A---- C:\Windows\SYSWOW64\diskpart.exe
2013-04-22 10:16:11 ----A---- C:\Windows\system32\elsTrans.dll
2013-04-22 10:16:11 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-04-22 10:16:11 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-04-22 10:16:11 ----A---- C:\Windows\system32\Display.dll
2013-04-22 10:16:10 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2013-04-22 10:16:10 ----A---- C:\Windows\system32\SearchFolder.dll
2013-04-22 10:16:10 ----A---- C:\Windows\system32\Faultrep.dll
2013-04-22 10:16:10 ----A---- C:\Windows\system32\ExplorerFrame.dll
2013-04-22 10:16:09 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2013-04-22 10:16:09 ----A---- C:\Windows\system32\tscfgwmi.dll
2013-04-22 10:16:08 ----A---- C:\Windows\SYSWOW64\themecpl.dll
2013-04-22 10:16:08 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2013-04-22 10:16:08 ----A---- C:\Windows\SYSWOW64\sppinst.dll
2013-04-22 10:16:08 ----A---- C:\Windows\system32\thumbcache.dll
2013-04-22 10:16:08 ----A---- C:\Windows\system32\taskschd.dll
2013-04-22 10:16:08 ----A---- C:\Windows\system32\tabcal.exe
2013-04-22 10:16:08 ----A---- C:\Windows\system32\shwebsvc.dll
2013-04-22 10:16:07 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2013-04-22 10:16:07 ----A---- C:\Windows\SYSWOW64\srvcli.dll
2013-04-22 10:16:07 ----A---- C:\Windows\SYSWOW64\spp.dll
2013-04-22 10:16:07 ----A---- C:\Windows\SYSWOW64\spbcd.dll
2013-04-22 10:16:07 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2013-04-22 10:16:07 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2013-04-22 10:16:07 ----A---- C:\Windows\system32\sysmain.dll
2013-04-22 10:16:07 ----A---- C:\Windows\system32\sysclass.dll
2013-04-22 10:16:07 ----A---- C:\Windows\system32\sppsvc.exe
2013-04-22 10:16:07 ----A---- C:\Windows\system32\spp.dll
2013-04-22 10:16:06 ----A---- C:\Windows\SYSWOW64\wmpsrcwp.dll
2013-04-22 10:16:06 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2013-04-22 10:16:06 ----A---- C:\Windows\system32\WMVDECOD.DLL
2013-04-22 10:16:06 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2013-04-22 10:16:06 ----A---- C:\Windows\system32\wmdrmnet.dll
2013-04-22 10:16:06 ----A---- C:\Windows\system32\wmdrmdev.dll
2013-04-22 10:16:06 ----A---- C:\Windows\system32\WMADMOD.DLL
2013-04-22 10:16:06 ----A---- C:\Windows\system32\wkssvc.dll
2013-04-22 10:16:06 ----A---- C:\Windows\system32\srchadmin.dll
2013-04-22 10:16:06 ----A---- C:\Windows\system32\sqmapi.dll
2013-04-22 10:16:05 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2013-04-22 10:16:05 ----A---- C:\Windows\SYSWOW64\wvc.dll
2013-04-22 10:16:05 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2013-04-22 10:16:05 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2013-04-22 10:16:05 ----A---- C:\Windows\SYSWOW64\wtsapi32.dll
2013-04-22 10:16:05 ----A---- C:\Windows\SYSWOW64\WPDSp.dll
2013-04-22 10:16:05 ----A---- C:\Windows\system32\wwanconn.dll
2013-04-22 10:16:05 ----A---- C:\Windows\system32\wsqmcons.exe
2013-04-22 10:16:05 ----A---- C:\Windows\system32\wpdwcn.dll
2013-04-22 10:16:05 ----A---- C:\Windows\system32\wpd_ci.dll
2013-04-22 10:16:05 ----A---- C:\Windows\system32\wmpeffects.dll
2013-04-22 10:16:05 ----A---- C:\Windows\system32\winhttp.dll
2013-04-22 10:16:04 ----A---- C:\Windows\twain_32.dll
2013-04-22 10:16:04 ----A---- C:\Windows\SYSWOW64\untfs.dll
2013-04-22 10:16:04 ----A---- C:\Windows\SYSWOW64\unlodctr.exe
2013-04-22 10:16:04 ----A---- C:\Windows\SYSWOW64\tzutil.exe
2013-04-22 10:16:04 ----A---- C:\Windows\system32\wsdchngr.dll
2013-04-22 10:16:04 ----A---- C:\Windows\system32\ws2_32.dll
2013-04-22 10:16:04 ----A---- C:\Windows\system32\userinit.exe
2013-04-22 10:16:04 ----A---- C:\Windows\system32\umrdp.dll
2013-04-22 10:16:04 ----A---- C:\Windows\system32\umb.dll
2013-04-22 10:16:04 ----A---- C:\Windows\system32\drivers\volsnap.sys
2013-04-22 10:16:04 ----A---- C:\Windows\system32\drivers\umbus.sys
2013-04-22 10:16:03 ----A---- C:\Windows\SYSWOW64\wiadefui.dll
2013-04-22 10:16:03 ----A---- C:\Windows\SYSWOW64\wdc.dll
2013-04-22 10:16:03 ----A---- C:\Windows\SYSWOW64\wavemsp.dll
2013-04-22 10:16:03 ----A---- C:\Windows\SYSWOW64\shacct.dll
2013-04-22 10:16:03 ----A---- C:\Windows\system32\WerFaultSecure.exe
2013-04-22 10:16:03 ----A---- C:\Windows\system32\VSSVC.exe
2013-04-22 10:16:03 ----A---- C:\Windows\system32\vssapi.dll
2013-04-22 10:16:03 ----A---- C:\Windows\system32\vss_ps.dll
2013-04-22 10:16:02 ----A---- C:\Windows\SYSWOW64\secproc.dll
2013-04-22 10:16:01 ----A---- C:\Windows\SYSWOW64\setupugc.exe
2013-04-22 10:16:01 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2013-04-22 10:16:00 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2013-04-22 10:16:00 ----A---- C:\Windows\system32\mimefilt.dll
2013-04-22 10:16:00 ----A---- C:\Windows\system32\mfps.dll
2013-04-22 10:16:00 ----A---- C:\Windows\system32\MFPlay.dll
2013-04-22 10:16:00 ----A---- C:\Windows\system32\mfds.dll
2013-04-22 10:16:00 ----A---- C:\Windows\system32\mf.dll
2013-04-22 10:16:00 ----A---- C:\Windows\system32\Mcx2Svc.dll
2013-04-22 10:15:59 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2013-04-22 10:15:59 ----A---- C:\Windows\SYSWOW64\mprapi.dll
2013-04-22 10:15:59 ----A---- C:\Windows\SYSWOW64\logoncli.dll
2013-04-22 10:15:59 ----A---- C:\Windows\SYSWOW64\KBDSF.DLL
2013-04-22 10:15:59 ----A---- C:\Windows\SYSWOW64\itircl.dll
2013-04-22 10:15:59 ----A---- C:\Windows\system32\mscorier.dll
2013-04-22 10:15:59 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2013-04-22 10:15:59 ----A---- C:\Windows\system32\LogonUI.exe
2013-04-22 10:15:59 ----A---- C:\Windows\system32\KBDTUF.DLL
2013-04-22 10:15:59 ----A---- C:\Windows\system32\KBDINBEN.DLL
2013-04-22 10:15:59 ----A---- C:\Windows\system32\KBDGKL.DLL
2013-04-22 10:15:59 ----A---- C:\Windows\system32\IPSECSVC.DLL
2013-04-22 10:15:58 ----A---- C:\Windows\SYSWOW64\nshipsec.dll
2013-04-22 10:15:58 ----A---- C:\Windows\SYSWOW64\logman.exe
2013-04-22 10:15:58 ----A---- C:\Windows\system32\netutils.dll
2013-04-22 10:15:58 ----A---- C:\Windows\system32\mblctr.exe
2013-04-22 10:15:58 ----A---- C:\Windows\system32\luainstall.dll
2013-04-22 10:15:58 ----A---- C:\Windows\system32\logoff.exe
2013-04-22 10:15:58 ----A---- C:\Windows\system32\KBDUS.DLL
2013-04-22 10:15:57 ----A---- C:\Windows\SYSWOW64\OnLineIDCpl.dll
2013-04-22 10:15:57 ----A---- C:\Windows\SYSWOW64\ocsetup.exe
2013-04-22 10:15:57 ----A---- C:\Windows\SYSWOW64\ocsetapi.dll
2013-04-22 10:15:57 ----A---- C:\Windows\system32\OpcServices.dll
2013-04-22 10:15:57 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2013-04-22 10:15:57 ----A---- C:\Windows\system32\ole32.dll
2013-04-22 10:15:56 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2013-04-22 10:15:56 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2013-04-22 10:15:56 ----A---- C:\Windows\system32\msrle32.dll
2013-04-22 10:15:56 ----A---- C:\Windows\system32\mspbda.dll
2013-04-22 10:15:56 ----A---- C:\Windows\system32\msdmo.dll
2013-04-22 10:15:55 ----A---- C:\Windows\SYSWOW64\NAPCRYPT.DLL
2013-04-22 10:15:55 ----A---- C:\Windows\SYSWOW64\MuiUnattend.exe
2013-04-22 10:15:55 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2013-04-22 10:15:55 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2013-04-22 10:15:55 ----A---- C:\Windows\system32\muifontsetup.dll
2013-04-22 10:15:55 ----A---- C:\Windows\system32\msvidc32.dll
2013-04-22 10:15:55 ----A---- C:\Windows\system32\msdrm.dll
2013-04-22 10:15:55 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2013-04-22 10:15:55 ----A---- C:\Windows\system32\drivers\msdsm.sys
2013-04-22 10:15:55 ----A---- C:\Windows\system32\CscMig.dll
2013-04-22 10:15:54 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-04-22 10:15:54 ----A---- C:\Windows\SYSWOW64\credui.dll
2013-04-22 10:15:54 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2013-04-22 10:15:54 ----A---- C:\Windows\system32\choice.exe
2013-04-22 10:15:54 ----A---- C:\Windows\system32\chgusr.exe
2013-04-22 10:15:54 ----A---- C:\Windows\system32\drivers\csc.sys
2013-04-22 10:15:54 ----A---- C:\Windows\system32\dot3cfg.dll
2013-04-22 10:15:54 ----A---- C:\Windows\system32\d3d11.dll
2013-04-22 10:15:53 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2013-04-22 10:15:53 ----A---- C:\Windows\SYSWOW64\dot3ui.dll
2013-04-22 10:15:53 ----A---- C:\Windows\SYSWOW64\dot3cfg.dll
2013-04-22 10:15:53 ----A---- C:\Windows\SYSWOW64\autochk.exe
2013-04-22 10:15:53 ----A---- C:\Windows\SYSWOW64\accessibilitycpl.dll
2013-04-22 10:15:53 ----A---- C:\Windows\system32\diskraid.exe
2013-04-22 10:15:53 ----A---- C:\Windows\system32\asycfilt.dll
2013-04-22 10:15:53 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2013-04-22 10:15:52 ----A---- C:\Windows\SYSWOW64\AdmTmpl.dll
2013-04-22 10:15:52 ----A---- C:\Windows\system32\chgport.exe
2013-04-22 10:15:52 ----A---- C:\Windows\system32\chglogon.exe
2013-04-22 10:15:52 ----A---- C:\Windows\system32\change.exe
2013-04-22 10:15:52 ----A---- C:\Windows\system32\cca.dll
2013-04-22 10:15:52 ----A---- C:\Windows\system32\apphelp.dll
2013-04-22 10:15:51 ----A---- C:\Windows\SYSWOW64\gpprefcl.dll
2013-04-22 10:15:51 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2013-04-22 10:15:51 ----A---- C:\Windows\SYSWOW64\cabview.dll
2013-04-22 10:15:51 ----A---- C:\Windows\system32\IcCoinstall.dll
2013-04-22 10:15:51 ----A---- C:\Windows\system32\iasrad.dll
2013-04-22 10:15:51 ----A---- C:\Windows\system32\iasacct.dll
2013-04-22 10:15:51 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2013-04-22 10:15:51 ----A---- C:\Windows\system32\fveapi.dll
2013-04-22 10:15:51 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2013-04-22 10:15:50 ----A---- C:\Windows\SYSWOW64\imm32.dll
2013-04-22 10:15:50 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2013-04-22 10:15:50 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2013-04-22 10:15:50 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2013-04-22 10:15:50 ----A---- C:\Windows\SYSWOW64\DxpTaskSync.dll
2013-04-22 10:15:50 ----A---- C:\Windows\SYSWOW64\dxdiagn.dll
2013-04-22 10:15:50 ----A---- C:\Windows\system32\imapi2.dll
2013-04-22 10:15:50 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2013-04-22 10:15:49 ----A---- C:\Windows\SYSWOW64\fde.dll
2013-04-22 10:15:49 ----A---- C:\Windows\SYSWOW64\elsTrans.dll
2013-04-22 10:15:49 ----A---- C:\Windows\SYSWOW64\efscore.dll
2013-04-22 10:15:49 ----A---- C:\Windows\system32\fontext.dll
2013-04-22 10:15:49 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2013-04-22 10:15:48 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2013-04-22 10:15:48 ----A---- C:\Windows\SYSWOW64\TRAPI.dll
2013-04-22 10:15:48 ----A---- C:\Windows\SYSWOW64\themeui.dll
2013-04-22 10:15:48 ----A---- C:\Windows\system32\UIRibbon.dll
2013-04-22 10:15:48 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-04-22 10:15:48 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-04-22 10:15:48 ----A---- C:\Windows\system32\tsmf.dll
2013-04-22 10:15:48 ----A---- C:\Windows\system32\tskill.exe
2013-04-22 10:15:48 ----A---- C:\Windows\system32\tsdiscon.exe
2013-04-22 10:15:48 ----A---- C:\Windows\system32\tscon.exe
2013-04-22 10:15:48 ----A---- C:\Windows\system32\TRAPI.dll
2013-04-22 10:15:47 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2013-04-22 10:15:47 ----A---- C:\Windows\system32\UIRibbonRes.dll
2013-04-22 10:15:47 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-04-22 10:15:46 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2013-04-22 10:15:46 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2013-04-22 10:15:46 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2013-04-22 10:15:46 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll
2013-04-22 10:15:46 ----A---- C:\Windows\system32\termsrv.dll
2013-04-22 10:15:46 ----A---- C:\Windows\system32\taskmgr.exe
2013-04-22 10:15:46 ----A---- C:\Windows\system32\taskbarcpl.dll
2013-04-22 10:15:46 ----A---- C:\Windows\system32\takeown.exe
2013-04-22 10:15:46 ----A---- C:\Windows\system32\t2embed.dll
2013-04-22 10:15:46 ----A---- C:\Windows\system32\syssetup.dll
2013-04-22 10:15:45 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2013-04-22 10:15:45 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2013-04-22 10:15:45 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2013-04-22 10:15:45 ----A---- C:\Windows\SYSWOW64\WMPEncEn.dll
2013-04-22 10:15:45 ----A---- C:\Windows\SYSWOW64\wlanui.dll
2013-04-22 10:15:45 ----A---- C:\Windows\SYSWOW64\winmm.dll
2013-04-22 10:15:45 ----A---- C:\Windows\system32\WMNetMgr.dll
2013-04-22 10:15:45 ----A---- C:\Windows\system32\WinSAT.exe
2013-04-22 10:15:44 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2013-04-22 10:15:44 ----A---- C:\Windows\system32\XpsRasterService.dll
2013-04-22 10:15:44 ----A---- C:\Windows\system32\wvc.dll
2013-04-22 10:15:44 ----A---- C:\Windows\system32\wusa.exe
2013-04-22 10:15:44 ----A---- C:\Windows\system32\wpdshext.dll
2013-04-22 10:15:43 ----A---- C:\Windows\SYSWOW64\wdscore.dll
2013-04-22 10:15:43 ----A---- C:\Windows\SYSWOW64\wbemcomn.dll
2013-04-22 10:15:43 ----A---- C:\Windows\SYSWOW64\usercpl.dll
2013-04-22 10:15:43 ----A---- C:\Windows\SYSWOW64\user32.dll
2013-04-22 10:15:43 ----A---- C:\Windows\SYSWOW64\upnp.dll
2013-04-22 10:15:43 ----A---- C:\Windows\system32\wsnmp32.dll
2013-04-22 10:15:43 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2013-04-22 10:15:43 ----A---- C:\Windows\system32\WMVSDECD.DLL
2013-04-22 10:15:43 ----A---- C:\Windows\system32\wdc.dll
2013-04-22 10:15:43 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2013-04-22 10:15:43 ----A---- C:\Windows\system32\drivers\wanarp.sys
2013-04-22 10:15:43 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2013-04-22 10:15:43 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2013-04-22 10:15:42 ----A---- C:\Windows\system32\vmictimeprovider.dll
2013-04-22 10:15:42 ----A---- C:\Windows\system32\vmicsvc.exe
2013-04-22 10:15:42 ----A---- C:\Windows\system32\vmicres.dll
2013-04-22 10:15:42 ----A---- C:\Windows\system32\SyncCenter.dll
2013-04-22 10:15:42 ----A---- C:\Windows\system32\Robocopy.exe
2013-04-22 10:15:41 ----A---- C:\Windows\SYSWOW64\schedcli.dll
2013-04-22 10:15:41 ----A---- C:\Windows\SYSWOW64\relog.exe
2013-04-22 10:15:41 ----A---- C:\Windows\system32\schedsvc.dll
2013-04-22 10:15:41 ----A---- C:\Windows\system32\scesrv.dll
2013-04-22 10:15:41 ----A---- C:\Windows\system32\scansetting.dll
2013-04-22 10:15:41 ----A---- C:\Windows\system32\rwinsta.exe
2013-04-22 10:15:41 ----A---- C:\Windows\system32\runonce.exe
2013-04-22 10:15:41 ----A---- C:\Windows\system32\rtutils.dll
2013-04-22 10:15:41 ----A---- C:\Windows\system32\riched32.dll
2013-04-22 10:15:41 ----A---- C:\Windows\system32\riched20.dll
2013-04-22 10:15:41 ----A---- C:\Windows\system32\reset.exe
2013-04-22 10:15:41 ----A---- C:\Windows\system32\regapi.dll
2013-04-22 10:15:40 ----A---- C:\Windows\SYSWOW64\rastls.dll
2013-04-22 10:15:40 ----A---- C:\Windows\SYSWOW64\rastapi.dll
2013-04-22 10:15:40 ----A---- C:\Windows\SYSWOW64\qcap.dll
2013-04-22 10:15:40 ----A---- C:\Windows\SYSWOW64\powercpl.dll
2013-04-22 10:15:40 ----A---- C:\Windows\SYSWOW64\PortableDeviceSyncProvider.dll
2013-04-22 10:15:40 ----A---- C:\Windows\SYSWOW64\pla.dll
2013-04-22 10:15:40 ----A---- C:\Windows\SYSWOW64\PerfCenterCPL.dll
2013-04-22 10:15:40 ----A---- C:\Windows\SYSWOW64\pdh.dll
2013-04-22 10:15:40 ----A---- C:\Windows\system32\rdpdd.dll
2013-04-22 10:15:40 ----A---- C:\Windows\system32\rasmans.dll
2013-04-22 10:15:40 ----A---- C:\Windows\system32\qdv.dll
2013-04-22 10:15:40 ----A---- C:\Windows\system32\qappsrv.exe
2013-04-22 10:15:40 ----A---- C:\Windows\system32\perfmon.exe
2013-04-22 10:15:40 ----A---- C:\Windows\system32\drivers\rdbss.sys
2013-04-22 10:15:40 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2013-04-22 10:15:39 ----A---- C:\Windows\SYSWOW64\sud.dll
2013-04-22 10:15:39 ----A---- C:\Windows\SYSWOW64\sppcomapi.dll
2013-04-22 10:15:39 ----A---- C:\Windows\SYSWOW64\slwga.dll
2013-04-22 10:15:39 ----A---- C:\Windows\system32\StructuredQuery.dll
2013-04-22 10:15:39 ----A---- C:\Windows\system32\spwizui.dll
2013-04-22 10:15:39 ----A---- C:\Windows\system32\spreview.exe
2013-04-22 10:15:39 ----A---- C:\Windows\system32\sppwinob.dll
2013-04-22 10:15:39 ----A---- C:\Windows\system32\sppcomapi.dll
2013-04-22 10:15:39 ----A---- C:\Windows\system32\spinstall.exe
2013-04-22 10:15:39 ----A---- C:\Windows\system32\SmiEngine.dll
2013-04-22 10:15:39 ----A---- C:\Windows\system32\slui.exe
2013-04-22 10:15:39 ----A---- C:\Windows\system32\query.exe
2013-04-22 10:15:39 ----A---- C:\Windows\system32\qprocess.exe
2013-04-22 10:15:39 ----A---- C:\Windows\system32\PushPrinterConnections.exe
2013-04-22 10:15:38 ----A---- C:\Windows\SYSWOW64\setupcln.dll
2013-04-22 10:15:38 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2013-04-22 10:15:38 ----A---- C:\Windows\system32\srrstr.dll
2013-04-22 10:15:38 ----A---- C:\Windows\system32\shunimpl.dll
2013-04-22 10:15:38 ----A---- C:\Windows\system32\sharemediacpl.dll
2013-04-22 10:15:38 ----A---- C:\Windows\system32\shadow.exe
2013-04-22 10:15:38 ----A---- C:\Windows\system32\logman.exe
2013-04-22 10:15:37 ----A---- C:\Windows\SYSWOW64\migisol.dll
2013-04-22 10:15:37 ----A---- C:\Windows\SYSWOW64\KBDUGHR1.DLL
2013-04-22 10:15:37 ----A---- C:\Windows\SYSWOW64\KBDTUF.DLL
2013-04-22 10:15:37 ----A---- C:\Windows\SYSWOW64\KBDSG.DLL
2013-04-22 10:15:37 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2013-04-22 10:15:37 ----A---- C:\Windows\system32\mcbuilder.exe
2013-04-22 10:15:37 ----A---- C:\Windows\system32\manage-bde.exe
2013-04-22 10:15:37 ----A---- C:\Windows\system32\lpksetup.exe
2013-04-22 10:15:37 ----A---- C:\Windows\system32\KMSVC.DLL
2013-04-22 10:15:37 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2013-04-22 10:15:37 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2013-04-22 10:15:37 ----A---- C:\Windows\system32\KBDSG.DLL
2013-04-22 10:15:36 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2013-04-22 10:15:36 ----A---- C:\Windows\system32\KBDBULG.DLL
2013-04-22 10:15:36 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2013-04-22 10:15:36 ----A---- C:\Windows\system32\IKEEXT.DLL
2013-04-22 10:15:36 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2013-04-22 10:15:36 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys
2013-04-22 10:15:35 ----A---- C:\Windows\SYSWOW64\odbcconf.dll
2013-04-22 10:15:35 ----A---- C:\Windows\SYSWOW64\netshell.dll
2013-04-22 10:15:35 ----A---- C:\Windows\SYSWOW64\KBDPO.DLL
2013-04-22 10:15:35 ----A---- C:\Windows\SYSWOW64\KBDMAORI.DLL
2013-04-22 10:15:35 ----A---- C:\Windows\SYSWOW64\KBDINORI.DLL
2013-04-22 10:15:35 ----A---- C:\Windows\SYSWOW64\KBDINKAN.DLL
2013-04-22 10:15:35 ----A---- C:\Windows\SYSWOW64\KBDBLR.DLL
2013-04-22 10:15:35 ----A---- C:\Windows\SYSWOW64\isoburn.exe
2013-04-22 10:15:35 ----A---- C:\Windows\SYSWOW64\iscsium.dll
2013-04-22 10:15:35 ----A---- C:\Windows\SYSWOW64\iscsicli.exe
2013-04-22 10:15:35 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2013-04-22 10:15:35 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll
2013-04-22 10:15:35 ----A---- C:\Windows\system32\odbc32.dll
2013-04-22 10:15:35 ----A---- C:\Windows\system32\KBDNEPR.DLL
2013-04-22 10:15:35 ----A---- C:\Windows\system32\kbdlk41a.dll
2013-04-22 10:15:35 ----A---- C:\Windows\system32\KBDINKAN.DLL
2013-04-22 10:15:35 ----A---- C:\Windows\system32\KBDINHIN.DLL
2013-04-22 10:15:35 ----A---- C:\Windows\system32\iTVData.dll
2013-04-22 10:15:35 ----A---- C:\Windows\system32\iprtrmgr.dll
2013-04-22 10:15:34 ----A---- C:\Windows\SYSWOW64\pnidui.dll
2013-04-22 10:15:34 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2013-04-22 10:15:34 ----A---- C:\Windows\SYSWOW64\networkmap.dll
2013-04-22 10:15:34 ----A---- C:\Windows\SYSWOW64\networkexplorer.dll
2013-04-22 10:15:34 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2013-04-22 10:15:34 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2013-04-22 10:15:34 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2013-04-22 10:15:34 ----A---- C:\Windows\system32\PnPUnattend.exe
2013-04-22 10:15:34 ----A---- C:\Windows\system32\nrpsrv.dll
2013-04-22 10:15:34 ----A---- C:\Windows\system32\nlsbres.dll
2013-04-22 10:15:34 ----A---- C:\Windows\system32\netid.dll
2013-04-22 10:15:34 ----A---- C:\Windows\system32\drivers\netbt.sys
2013-04-22 10:15:33 ----A---- C:\Windows\SYSWOW64\olethk32.dll
2013-04-22 10:15:33 ----A---- C:\Windows\SYSWOW64\ole32.dll
2013-04-22 10:15:33 ----A---- C:\Windows\SYSWOW64\muifontsetup.dll
2013-04-22 10:15:33 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2013-04-22 10:15:33 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2013-04-22 10:15:33 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2013-04-22 10:15:33 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2013-04-22 10:15:33 ----A---- C:\Windows\system32\mswsock.dll
2013-04-22 10:15:33 ----A---- C:\Windows\system32\mscoree.dll
2013-04-22 10:15:33 ----A---- C:\Windows\system32\mscms.dll
2013-04-22 10:15:33 ----A---- C:\Windows\system32\MPSSVC.dll
2013-04-22 10:15:33 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2013-04-22 10:15:33 ----A---- C:\Windows\system32\drivers\mpio.sys
2013-04-22 10:15:32 ----A---- C:\Windows\SYSWOW64\nci.dll
2013-04-22 10:15:32 ----A---- C:\Windows\SYSWOW64\napdsnap.dll
2013-04-22 10:15:32 ----A---- C:\Windows\system32\NAPHLPR.DLL
2013-04-22 10:15:32 ----A---- C:\Windows\system32\napdsnap.dll
2013-04-22 10:15:32 ----A---- C:\Windows\system32\msnetobj.dll
2013-04-22 10:15:32 ----A---- C:\Windows\system32\msiexec.exe
2013-04-22 10:15:32 ----A---- C:\Windows\system32\msftedit.dll
2013-04-22 10:15:31 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2013-04-22 10:15:31 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2013-04-22 10:15:31 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2013-04-22 10:15:31 ----A---- C:\Windows\SYSWOW64\credssp.dll
2013-04-22 10:15:31 ----A---- C:\Windows\SYSWOW64\CertPolEng.dll
2013-04-22 10:15:31 ----A---- C:\Windows\SYSWOW64\calc.exe
2013-04-22 10:15:31 ----A---- C:\Windows\system32\msv1_0.dll
2013-04-22 10:15:31 ----A---- C:\Windows\system32\mstask.dll
2013-04-22 10:15:31 ----A---- C:\Windows\system32\msscp.dll
2013-04-22 10:15:31 ----A---- C:\Windows\system32\cryptui.dll
2013-04-22 10:15:31 ----A---- C:\Windows\system32\clusapi.dll
2013-04-22 10:15:31 ----A---- C:\Windows\system32\CertEnroll.dll
2013-04-22 10:15:31 ----A---- C:\Windows\system32\cabview.dll
2013-04-22 10:15:31 ----A---- C:\Windows\system32\browseui.dll
2013-04-22 10:15:30 ----A---- C:\Windows\SYSWOW64\DevicePairingFolder.dll
2013-04-22 10:15:30 ----A---- C:\Windows\system32\drivers\dfsc.sys
2013-04-22 10:15:30 ----A---- C:\Windows\system32\dhcpcore.dll
2013-04-22 10:15:30 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2013-04-22 10:15:30 ----A---- C:\Windows\system32\cscobj.dll
2013-04-22 10:15:30 ----A---- C:\Windows\system32\certprop.dll
2013-04-22 10:15:29 ----A---- C:\Windows\SYSWOW64\batmeter.dll
2013-04-22 10:15:29 ----A---- C:\Windows\SYSWOW64\appmgr.dll
2013-04-22 10:15:29 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2013-04-22 10:15:29 ----A---- C:\Windows\SYSWOW64\ActionCenterCPL.dll
2013-04-22 10:15:29 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2013-04-22 10:15:29 ----A---- C:\Windows\SYSWOW64\acppage.dll
2013-04-22 10:15:29 ----A---- C:\Windows\system32\drivers\acpi.sys
2013-04-22 10:15:29 ----A---- C:\Windows\system32\BFE.DLL
2013-04-22 10:15:29 ----A---- C:\Windows\system32\bcryptprimitives.dll
2013-04-22 10:15:29 ----A---- C:\Windows\system32\basecsp.dll
2013-04-22 10:15:29 ----A---- C:\Windows\bfsvc.exe
2013-04-22 10:15:28 ----A---- C:\Windows\SYSWOW64\FirewallControlPanel.dll
2013-04-22 10:15:28 ----A---- C:\Windows\SYSWOW64\findstr.exe
2013-04-22 10:15:28 ----A---- C:\Windows\system32\hgcpl.dll
2013-04-22 10:15:28 ----A---- C:\Windows\system32\gdi32.dll
2013-04-22 10:15:28 ----A---- C:\Windows\system32\fphc.dll
2013-04-22 10:15:28 ----A---- C:\Windows\system32\fms.dll
2013-04-22 10:15:28 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2013-04-22 10:15:28 ----A---- C:\Windows\system32\BlbEvents.dll
2013-04-22 10:15:28 ----A---- C:\Windows\system32\blackbox.dll
2013-04-22 10:15:28 ----A---- C:\Windows\system32\biocpl.dll
2013-04-22 10:15:28 ----A---- C:\Windows\system32\AxInstSv.dll
2013-04-22 10:15:28 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2013-04-22 10:15:28 ----A---- C:\Windows\system32\autochk.exe
2013-04-22 10:15:27 ----A---- C:\Windows\SYSWOW64\hgcpl.dll
2013-04-22 10:15:27 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2013-04-22 10:15:27 ----A---- C:\Windows\SYSWOW64\ftp.exe
2013-04-22 10:15:27 ----A---- C:\Windows\system32\hgprint.dll
2013-04-22 10:15:27 ----A---- C:\Windows\system32\FXSUNATD.exe
2013-04-22 10:15:27 ----A---- C:\Windows\system32\FXSSVC.exe
2013-04-22 10:15:27 ----A---- C:\Windows\system32\FXSMON.dll
2013-04-22 10:15:27 ----A---- C:\Windows\system32\drmmgrtn.dll
2013-04-22 10:15:27 ----A---- C:\Windows\system32\drivers\hidusb.sys
2013-04-22 10:15:27 ----A---- C:\Windows\system32\drivers\hidclass.sys
2013-04-22 10:15:26 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll
2013-04-22 10:15:26 ----A---- C:\Windows\SYSWOW64\dsauth.dll
2013-04-22 10:15:26 ----A---- C:\Windows\SYSWOW64\dpx.dll
2013-04-22 10:15:26 ----A---- C:\Windows\SYSWOW64\dnscmmc.dll
2013-04-22 10:15:26 ----A---- C:\Windows\system32\DXP.dll
2013-04-22 10:15:26 ----A---- C:\Windows\system32\dot3ui.dll
2013-04-22 10:15:26 ----A---- C:\Windows\system32\diskpart.exe
2013-04-22 10:15:25 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2013-04-22 10:15:25 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2013-04-22 10:15:25 ----A---- C:\Windows\SYSWOW64\takeown.exe
2013-04-22 10:15:25 ----A---- C:\Windows\SYSWOW64\fdeploy.dll
2013-04-22 10:15:25 ----A---- C:\Windows\SYSWOW64\eudcedit.exe
2013-04-22 10:15:25 ----A---- C:\Windows\system32\tlscsp.dll
2013-04-22 10:15:25 ----A---- C:\Windows\system32\eudcedit.exe
2013-04-22 10:15:25 ----A---- C:\Windows\system32\DxpTaskSync.dll
2013-04-22 10:15:25 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2013-04-22 10:15:24 ----A---- C:\Windows\SYSWOW64\unimdmat.dll
2013-04-22 10:15:24 ----A---- C:\Windows\SYSWOW64\twext.dll
2013-04-22 10:15:24 ----A---- C:\Windows\system32\upnp.dll
2013-04-22 10:15:24 ----A---- C:\Windows\system32\untfs.dll
2013-04-22 10:15:24 ----A---- C:\Windows\system32\tzutil.exe
2013-04-22 10:15:24 ----A---- C:\Windows\system32\twext.dll
2013-04-22 10:15:24 ----A---- C:\Windows\system32\themecpl.dll
2013-04-22 10:15:24 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2013-04-22 10:15:24 ----A---- C:\Windows\system32\drivers\udfs.sys
2013-04-22 10:15:24 ----A---- C:\Windows\system32\drivers\tunnel.sys
2013-04-22 10:15:24 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-04-22 10:15:23 ----A---- C:\Windows\SYSWOW64\stobject.dll
2013-04-22 10:15:21 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2013-04-22 10:15:21 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2013-04-22 10:15:21 ----A---- C:\Windows\system32\wmpsrcwp.dll
2013-04-22 10:15:21 ----A---- C:\Windows\system32\WMPhoto.dll
2013-04-22 10:15:21 ----A---- C:\Windows\system32\wlanmsm.dll
2013-04-22 10:15:21 ----A---- C:\Windows\system32\wlangpui.dll
2013-04-22 10:15:21 ----A---- C:\Windows\system32\wkscli.dll
2013-04-22 10:15:20 ----A---- C:\Windows\SYSWOW64\wsnmp32.dll
2013-04-22 10:15:20 ----A---- C:\Windows\system32\wmdrmsdk.dll
2013-04-22 10:15:20 ----A---- C:\Windows\system32\winlogon.exe
2013-04-22 10:15:20 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-04-22 10:15:20 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2013-04-22 10:15:19 ----A---- C:\Windows\SYSWOW64\wusa.exe
2013-04-22 10:15:19 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2013-04-22 10:15:19 ----A---- C:\Windows\SYSWOW64\WPDShServiceObj.dll
2013-04-22 10:15:19 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2013-04-22 10:15:19 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2013-04-22 10:15:19 ----A---- C:\Windows\system32\wwanprotdim.dll
2013-04-22 10:15:19 ----A---- C:\Windows\system32\WsmSvc.dll
2013-04-22 10:15:19 ----A---- C:\Windows\system32\WSDApi.dll
2013-04-22 10:15:19 ----A---- C:\Windows\system32\WPDSp.dll
2013-04-22 10:15:19 ----A---- C:\Windows\system32\vfwwdm32.dll
2013-04-22 10:15:19 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2013-04-22 10:15:18 ----A---- C:\Windows\SYSWOW64\wer.dll
2013-04-22 10:15:18 ----A---- C:\Windows\SYSWOW64\webservices.dll
2013-04-22 10:15:18 ----A---- C:\Windows\SYSWOW64\w32tm.exe
2013-04-22 10:15:18 ----A---- C:\Windows\SYSWOW64\Vault.dll
2013-04-22 10:15:18 ----A---- C:\Windows\SYSWOW64\userinit.exe
2013-04-22 10:15:18 ----A---- C:\Windows\SYSWOW64\userenv.dll
2013-04-22 10:15:18 ----A---- C:\Windows\system32\wevtsvc.dll
2013-04-22 10:15:18 ----A---- C:\Windows\system32\werconcpl.dll
2013-04-22 10:15:18 ----A---- C:\Windows\system32\webservices.dll
2013-04-22 10:15:18 ----A---- C:\Windows\system32\vdsutil.dll
2013-04-22 10:15:18 ----A---- C:\Windows\system32\vds.exe
2013-04-22 10:15:18 ----A---- C:\Windows\system32\VAN.dll
2013-04-22 10:15:17 ----A---- C:\Windows\SYSWOW64\wimserv.exe
2013-04-22 10:15:17 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2013-04-22 10:15:17 ----A---- C:\Windows\SYSWOW64\wiavideo.dll
2013-04-22 10:15:17 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2013-04-22 10:15:17 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2013-04-22 10:15:17 ----A---- C:\Windows\SYSWOW64\remotepg.dll
2013-04-22 10:15:17 ----A---- C:\Windows\SYSWOW64\ReAgentc.exe
2013-04-22 10:15:17 ----A---- C:\Windows\SYSWOW64\rdpd3d.dll
2013-04-22 10:15:17 ----A---- C:\Windows\system32\wiadefui.dll
2013-04-22 10:15:17 ----A---- C:\Windows\system32\wcncsvc.dll
2013-04-22 10:15:17 ----A---- C:\Windows\system32\wavemsp.dll
2013-04-22 10:15:17 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2013-04-22 10:15:17 ----A---- C:\Windows\system32\relog.exe
2013-04-22 10:15:17 ----A---- C:\Windows\system32\rastls.dll
2013-04-22 10:15:17 ----A---- C:\Windows\system32\drivers\scfilter.sys
2013-04-22 10:15:17 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2013-04-22 10:15:16 ----A---- C:\Windows\SYSWOW64\scecli.dll
2013-04-22 10:15:16 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2013-04-22 10:15:16 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll
2013-04-22 10:15:16 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2013-04-22 10:15:16 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2013-04-22 10:15:16 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL
2013-04-22 10:15:16 ----A---- C:\Windows\system32\scecli.dll
2013-04-22 10:15:16 ----A---- C:\Windows\system32\rpcrt4.dll
2013-04-22 10:15:16 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2013-04-22 10:15:16 ----A---- C:\Windows\system32\QCLIPROV.DLL
2013-04-22 10:15:16 ----A---- C:\Windows\system32\QAGENTRT.DLL
2013-04-22 10:15:16 ----A---- C:\Windows\system32\proquota.exe
2013-04-22 10:15:16 ----A---- C:\Windows\system32\propsys.dll
2013-04-22 10:15:15 ----A---- C:\Windows\SYSWOW64\QUTIL.DLL
2013-04-22 10:15:15 ----A---- C:\Windows\SYSWOW64\QCLIPROV.DLL
2013-04-22 10:15:15 ----A---- C:\Windows\SYSWOW64\prntvpt.dll
2013-04-22 10:15:15 ----A---- C:\Windows\system32\raschap.dll
2013-04-22 10:15:15 ----A---- C:\Windows\system32\RacEngn.dll
2013-04-22 10:15:15 ----A---- C:\Windows\system32\Query.dll
2013-04-22 10:15:15 ----A---- C:\Windows\system32\qmgr.dll
2013-04-22 10:15:15 ----A---- C:\Windows\system32\QAGENT.DLL
2013-04-22 10:15:14 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll
2013-04-22 10:15:14 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2013-04-22 10:15:14 ----A---- C:\Windows\system32\sqlcese30.dll
2013-04-22 10:15:14 ----A---- C:\Windows\system32\shsvcs.dll
2013-04-22 10:15:13 ----A---- C:\Windows\system32\sppnp.dll
2013-04-22 10:15:13 ----A---- C:\Windows\system32\spopk.dll
2013-04-22 10:15:12 ----A---- C:\Windows\SYSWOW64\mfds.dll
2013-04-22 10:15:12 ----A---- C:\Windows\SYSWOW64\mf.dll
2013-04-22 10:15:12 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2013-04-22 10:15:12 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe
2013-04-22 10:15:12 ----A---- C:\Windows\SYSWOW64\mapistub.dll
2013-04-22 10:15:11 ----A---- C:\Windows\SYSWOW64\mprddm.dll
2013-04-22 10:15:11 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2013-04-22 10:15:11 ----A---- C:\Windows\SYSWOW64\KBDNEPR.DLL
2013-04-22 10:15:11 ----A---- C:\Windows\SYSWOW64\KBDGR1.DLL
2013-04-22 10:15:11 ----A---- C:\Windows\SYSWOW64\KBDGEO.DLL
2013-04-22 10:15:11 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2013-04-22 10:15:11 ----A---- C:\Windows\system32\mmcndmgr.dll
2013-04-22 10:15:11 ----A---- C:\Windows\system32\KBDMON.DLL
2013-04-22 10:15:11 ----A---- C:\Windows\system32\KBDINMAR.DLL
2013-04-22 10:15:11 ----A---- C:\Windows\system32\KBDGEO.DLL
2013-04-22 10:15:11 ----A---- C:\Windows\system32\iyuv_32.dll
2013-04-22 10:15:10 ----A---- C:\Windows\SYSWOW64\nslookup.exe
2013-04-22 10:15:10 ----A---- C:\Windows\SYSWOW64\mapi32.dll
2013-04-22 10:15:10 ----A---- C:\Windows\SYSWOW64\KBDTURME.DLL
2013-04-22 10:15:10 ----A---- C:\Windows\SYSWOW64\KBDTUQ.DLL
2013-04-22 10:15:10 ----A---- C:\Windows\system32\ntlanman.dll
2013-04-22 10:15:10 ----A---- C:\Windows\system32\logoncli.dll
2013-04-22 10:15:10 ----A---- C:\Windows\system32\KBDSF.DLL
2013-04-22 10:15:10 ----A---- C:\Windows\system32\KBDPO.DLL
2013-04-22 10:15:09 ----A---- C:\Windows\SYSWOW64\PortableDeviceStatus.dll
2013-04-22 10:15:09 ----A---- C:\Windows\SYSWOW64\pifmgr.dll
2013-04-22 10:15:09 ----A---- C:\Windows\SYSWOW64\onexui.dll
2013-04-22 10:15:09 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2013-04-22 10:15:09 ----A---- C:\Windows\SYSWOW64\netid.dll
2013-04-22 10:15:09 ----A---- C:\Windows\system32\ocsetup.exe
2013-04-22 10:15:09 ----A---- C:\Windows\system32\ocsetapi.dll
2013-04-22 10:15:09 ----A---- C:\Windows\system32\netplwiz.dll
2013-04-22 10:15:09 ----A---- C:\Windows\system32\netfxperf.dll
2013-04-22 10:15:08 ----A---- C:\Windows\SYSWOW64\onex.dll
2013-04-22 10:15:08 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2013-04-22 10:15:08 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2013-04-22 10:15:08 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2013-04-22 10:15:08 ----A---- C:\Windows\system32\odbcconf.dll
2013-04-22 10:15:08 ----A---- C:\Windows\system32\msieftp.dll
2013-04-22 10:15:08 ----A---- C:\Windows\system32\msasn1.dll
2013-04-22 10:15:07 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2013-04-22 10:15:07 ----A---- C:\Windows\SYSWOW64\msvfw32.dll
2013-04-22 10:15:07 ----A---- C:\Windows\system32\net1.exe
2013-04-22 10:15:07 ----A---- C:\Windows\system32\ncryptui.dll
2013-04-22 10:15:07 ----A---- C:\Windows\system32\mydocs.dll
2013-04-22 10:15:07 ----A---- C:\Windows\system32\msyuv.dll
2013-04-22 10:15:07 ----A---- C:\Windows\system32\mstsc.exe
2013-04-22 10:15:06 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2013-04-22 10:15:05 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2013-04-22 10:15:05 ----A---- C:\Windows\SYSWOW64\certcli.dll
2013-04-22 10:15:05 ----A---- C:\Windows\system32\cmstp.exe
2013-04-22 10:15:04 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2013-04-22 10:15:04 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2013-04-22 10:15:04 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2013-04-22 10:15:04 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-04-22 10:15:04 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2013-04-22 10:15:04 ----A---- C:\Windows\system32\DeviceCenter.dll
2013-04-22 10:15:04 ----A---- C:\Windows\system32\davclnt.dll
2013-04-22 10:15:04 ----A---- C:\Windows\system32\d3d10warp.dll
2013-04-22 10:15:03 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2013-04-22 10:15:03 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2013-04-22 10:15:03 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2013-04-22 10:15:03 ----A---- C:\Windows\SYSWOW64\adsldp.dll
2013-04-22 10:15:03 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2013-04-22 10:15:03 ----A---- C:\Windows\system32\cabinet.dll
2013-04-22 10:15:03 ----A---- C:\Windows\system32\bcdboot.exe
2013-04-22 10:15:03 ----A---- C:\Windows\system32\autoplay.dll
2013-04-22 10:15:03 ----A---- C:\Windows\system32\autofmt.exe
2013-04-22 10:15:03 ----A---- C:\Windows\system32\actxprxy.dll
2013-04-22 10:15:03 ----A---- C:\Windows\system32\ActionQueue.dll
2013-04-22 10:15:03 ----A---- C:\Windows\system32\ActionCenter.dll
2013-04-22 10:15:03 ----A---- C:\Windows\system32\accessibilitycpl.dll
2013-04-22 10:15:02 ----A---- C:\Windows\SYSWOW64\iasrad.dll
2013-04-22 10:15:02 ----A---- C:\Windows\SYSWOW64\iasacct.dll
2013-04-22 10:15:02 ----A---- C:\Windows\SYSWOW64\httpapi.dll
2013-04-22 10:15:02 ----A---- C:\Windows\system32\hal.dll
2013-04-22 10:15:02 ----A---- C:\Windows\system32\gpsvc.dll
2013-04-22 10:15:01 ----A---- C:\Windows\system32\inetpp.dll
2013-04-22 10:15:00 ----A---- C:\Windows\system32\evr.dll
2013-04-22 10:15:00 ----A---- C:\Windows\system32\dwmredir.dll
2013-04-22 10:15:00 ----A---- C:\Windows\system32\dsauth.dll
2013-04-22 10:15:00 ----A---- C:\Windows\system32\drvstore.dll
2013-04-22 10:14:59 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2013-04-22 10:14:59 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2013-04-22 10:14:59 ----A---- C:\Windows\SYSWOW64\Display.dll
2013-04-22 10:14:59 ----A---- C:\Windows\system32\efscore.dll
2013-04-22 10:14:59 ----A---- C:\Windows\system32\dot3svc.dll
2013-04-22 10:14:59 ----A---- C:\Windows\system32\dot3msm.dll
2013-04-22 10:14:59 ----A---- C:\Windows\system32\dot3api.dll
2013-04-22 10:14:58 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2013-04-22 10:14:58 ----A---- C:\Windows\SYSWOW64\fontext.dll
2013-04-22 10:14:58 ----A---- C:\Windows\system32\fde.dll
2013-04-22 10:14:57 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2013-04-22 10:14:57 ----A---- C:\Windows\system32\tcpipcfg.dll
2013-04-22 10:14:57 ----A---- C:\Windows\system32\syncui.dll
2013-04-22 10:14:57 ----A---- C:\Windows\system32\drivers\tdx.sys
2013-04-22 10:14:56 ----A---- C:\Windows\SYSWOW64\srchadmin.dll
2013-04-22 10:14:56 ----A---- C:\Windows\SYSWOW64\spwizeng.dll
2013-04-22 10:14:56 ----A---- C:\Windows\SYSWOW64\sppc.dll
2013-04-22 10:14:56 ----A---- C:\Windows\system32\srvcli.dll
2013-04-22 10:14:56 ----A---- C:\Windows\system32\SndVolSSO.dll
2013-04-22 10:14:56 ----A---- C:\Windows\system32\SndVol.exe
2013-04-22 10:14:56 ----A---- C:\Windows\system32\drivers\storvsc.sys
2013-04-22 10:14:55 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2013-04-22 10:14:55 ----A---- C:\Windows\SYSWOW64\wmpps.dll
2013-04-22 10:14:55 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-04-22 10:14:55 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2013-04-22 10:14:55 ----A---- C:\Windows\SYSWOW64\sqlcese30.dll
2013-04-22 10:14:55 ----A---- C:\Windows\SYSWOW64\spwizres.dll
2013-04-22 10:14:55 ----A---- C:\Windows\system32\WinSCard.dll
2013-04-22 10:14:55 ----A---- C:\Windows\system32\WebClnt.dll
2013-04-22 10:14:55 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2013-04-22 10:14:55 ----A---- C:\Windows\system32\wbengine.exe
2013-04-22 10:14:54 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2013-04-22 10:14:54 ----A---- C:\Windows\SYSWOW64\wmpdxm.dll
2013-04-22 10:14:54 ----A---- C:\Windows\SYSWOW64\wmdrmnet.dll
2013-04-22 10:14:54 ----A---- C:\Windows\SYSWOW64\wmdrmdev.dll
2013-04-22 10:14:54 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2013-04-22 10:14:54 ----A---- C:\Windows\system32\wmpdxm.dll
2013-04-22 10:14:54 ----A---- C:\Windows\system32\tsbyuv.dll
2013-04-22 10:14:53 ----A---- C:\Windows\SYSWOW64\uxlib.dll
2013-04-22 10:14:53 ----A---- C:\Windows\SYSWOW64\utildll.dll
2013-04-22 10:14:53 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2013-04-22 10:14:53 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2013-04-22 10:14:53 ----A---- C:\Windows\system32\wbemcomn.dll
2013-04-22 10:14:53 ----A---- C:\Windows\system32\vpnikeapi.dll
2013-04-22 10:14:53 ----A---- C:\Windows\system32\vpnike.dll
2013-04-22 10:14:53 ----A---- C:\Windows\system32\vmstorfltres.dll
2013-04-22 10:14:53 ----A---- C:\Windows\system32\VmdCoinstall.dll
2013-04-22 10:14:53 ----A---- C:\Windows\system32\Vault.dll
2013-04-22 10:14:53 ----A---- C:\Windows\system32\secproc_ssp.dll
2013-04-22 10:14:53 ----A---- C:\Windows\system32\drivers\vmstorfl.sys
2013-04-22 10:14:52 ----A---- C:\Windows\system32\schtasks.exe
2013-04-22 10:14:52 ----A---- C:\Windows\system32\schedcli.dll
2013-04-22 10:14:51 ----A---- C:\Windows\SYSWOW64\riched32.dll
2013-04-22 10:14:51 ----A---- C:\Windows\SYSWOW64\riched20.dll
2013-04-22 10:14:51 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL
2013-04-22 10:14:51 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2013-04-22 10:14:51 ----A---- C:\Windows\SYSWOW64\qdv.dll
2013-04-22 10:14:51 ----A---- C:\Windows\SYSWOW64\qasf.dll
2013-04-22 10:14:51 ----A---- C:\Windows\SYSWOW64\proquota.exe
2013-04-22 10:14:51 ----A---- C:\Windows\SYSWOW64\prnfldr.dll
2013-04-22 10:14:51 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2013-04-22 10:14:51 ----A---- C:\Windows\system32\QUTIL.DLL
2013-04-22 10:14:51 ----A---- C:\Windows\system32\prncache.dll
2013-04-22 10:14:51 ----A---- C:\Windows\system32\PresentationSettings.exe
2013-04-22 10:14:50 ----A---- C:\Windows\SYSWOW64\shimgvw.dll
2013-04-22 10:14:50 ----A---- C:\Windows\system32\shlwapi.dll
2013-04-22 10:14:50 ----A---- C:\Windows\system32\shdocvw.dll
2013-04-22 10:14:50 ----A---- C:\Windows\system32\shacct.dll
2013-04-22 10:14:50 ----A---- C:\Windows\system32\setupapi.dll
2013-04-22 10:14:50 ----A---- C:\Windows\system32\SensorsCpl.dll
2013-04-22 10:14:50 ----A---- C:\Windows\system32\rpchttp.dll
2013-04-22 10:14:50 ----A---- C:\Windows\system32\recovery.dll
2013-04-22 10:14:50 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2013-04-22 10:14:49 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2013-04-22 10:14:49 ----A---- C:\Windows\SYSWOW64\mciqtz32.dll
2013-04-22 10:14:49 ----A---- C:\Windows\system32\MdSched.exe
2013-04-22 10:14:49 ----A---- C:\Windows\system32\mciqtz32.dll
2013-04-22 10:14:49 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2013-04-22 10:14:49 ----A---- C:\Windows\system32\lsmproxy.dll
2013-04-22 10:14:47 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2013-04-22 10:14:47 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2013-04-22 10:14:46 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2013-04-22 10:14:46 ----A---- C:\Windows\SYSWOW64\mydocs.dll
2013-04-22 10:14:46 ----A---- C:\Windows\SYSWOW64\localsec.dll
2013-04-22 10:14:46 ----A---- C:\Windows\SYSWOW64\kbdlk41a.dll
2013-04-22 10:14:46 ----A---- C:\Windows\SYSWOW64\KBDINBEN.DLL
2013-04-22 10:14:46 ----A---- C:\Windows\SYSWOW64\KBDGKL.DLL
2013-04-22 10:14:46 ----A---- C:\Windows\SYSWOW64\KBDBULG.DLL
2013-04-22 10:14:46 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2013-04-22 10:14:46 ----A---- C:\Windows\SYSWOW64\input.dll
2013-04-22 10:14:46 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2013-04-22 10:14:46 ----A---- C:\Windows\system32\ListSvc.dll
2013-04-22 10:14:46 ----A---- C:\Windows\system32\KBDTURME.DLL
2013-04-22 10:14:46 ----A---- C:\Windows\system32\KBDMAORI.DLL
2013-04-22 10:14:46 ----A---- C:\Windows\system32\KBDINTAM.DLL
2013-04-22 10:14:46 ----A---- C:\Windows\system32\KBDGR1.DLL
2013-04-22 10:14:46 ----A---- C:\Windows\system32\KBDCZ1.DLL
2013-04-22 10:14:46 ----A---- C:\Windows\system32\isoburn.exe
2013-04-22 10:14:46 ----A---- C:\Windows\system32\iscsium.dll
2013-04-22 10:14:46 ----A---- C:\Windows\system32\iscsicli.exe
2013-04-22 10:14:46 ----A---- C:\Windows\system32\iasrecst.dll
2013-04-22 10:14:46 ----A---- C:\Windows\system32\httpapi.dll
2013-04-22 10:14:45 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2013-04-22 10:14:45 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2013-04-22 10:14:45 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL
2013-04-22 10:14:45 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2013-04-22 10:14:45 ----A---- C:\Windows\system32\netiohlp.dll
2013-04-22 10:14:45 ----A---- C:\Windows\system32\netcfgx.dll
2013-04-22 10:14:45 ----A---- C:\Windows\system32\netcenter.dll
2013-04-22 10:14:45 ----A---- C:\Windows\system32\mtxclu.dll
2013-04-22 10:14:45 ----A---- C:\Windows\system32\MSVidCtl.dll
2013-04-22 10:14:44 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2013-04-22 10:14:44 ----A---- C:\Windows\SYSWOW64\netutils.dll
2013-04-22 10:14:44 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2013-04-22 10:14:44 ----A---- C:\Windows\SYSWOW64\netjoin.dll
2013-04-22 10:14:44 ----A---- C:\Windows\system32\ntprint.dll
2013-04-22 10:14:44 ----A---- C:\Windows\system32\nltest.exe
2013-04-22 10:14:44 ----A---- C:\Windows\system32\mprapi.dll
2013-04-22 10:14:44 ----A---- C:\Windows\system32\drivers\msahci.sys
2013-04-22 10:14:43 ----A---- C:\Windows\SYSWOW64\msscp.dll
2013-04-22 10:14:43 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2013-04-22 10:14:43 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2013-04-22 10:14:43 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2013-04-22 10:14:43 ----A---- C:\Windows\system32\msdtctm.dll
2013-04-22 10:14:42 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2013-04-22 10:14:42 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-04-22 10:14:42 ----A---- C:\Windows\SYSWOW64\cscobj.dll
2013-04-22 10:14:42 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2013-04-22 10:14:42 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2013-04-22 10:14:42 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2013-04-22 10:14:42 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2013-04-22 10:14:42 ----A---- C:\Windows\system32\BWUnpairElevated.dll
2013-04-22 10:14:42 ----A---- C:\Windows\system32\bootres.dll

2013-04-22 10:14:41 ----AH---- C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
2013-04-22 10:14:41 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2013-04-22 10:14:41 ----A---- C:\Windows\SYSWOW64\cmstp.exe
2013-04-22 10:14:41 ----A---- C:\Windows\SYSWOW64\audiodev.dll
2013-04-22 10:14:41 ----A---- C:\Windows\system32\drivers\ataport.sys
2013-04-22 10:14:41 ----A---- C:\Windows\system32\credui.dll
2013-04-22 10:14:41 ----A---- C:\Windows\system32\cmd.exe
2013-04-22 10:14:40 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2013-04-22 10:14:40 ----A---- C:\Windows\SYSWOW64\bitsadmin.exe
2013-04-22 10:14:40 ----A---- C:\Windows\SYSWOW64\AzSqlExt.dll
2013-04-22 10:14:40 ----A---- C:\Windows\SYSWOW64\azroles.dll
2013-04-22 10:14:40 ----A---- C:\Windows\SYSWOW64\autoplay.dll
2013-04-22 10:14:40 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2013-04-22 10:14:40 ----A---- C:\Windows\SYSWOW64\amstream.dll
2013-04-22 10:14:40 ----A---- C:\Windows\system32\bitsperf.dll
2013-04-22 10:14:40 ----A---- C:\Windows\system32\batmeter.dll
2013-04-22 10:14:40 ----A---- C:\Windows\system32\AzSqlExt.dll
2013-04-22 10:14:40 ----A---- C:\Windows\system32\azroles.dll
2013-04-22 10:14:40 ----A---- C:\Windows\system32\autoconv.exe
2013-04-22 10:14:40 ----A---- C:\Windows\system32\audiosrv.dll
2013-04-22 10:14:40 ----A---- C:\Windows\system32\AudioSes.dll
2013-04-22 10:14:40 ----A---- C:\Windows\system32\audiodg.exe
2013-04-22 10:14:40 ----A---- C:\Windows\system32\amstream.dll
2013-04-22 10:14:40 ----A---- C:\Windows\system32\aitagent.exe
2013-04-22 10:14:39 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2013-04-22 10:14:39 ----A---- C:\Windows\SYSWOW64\dsuiext.dll
2013-04-22 10:14:39 ----A---- C:\Windows\system32\fdProxy.dll
2013-04-22 10:14:39 ----A---- C:\Windows\system32\eapphost.dll
2013-04-22 10:14:39 ----A---- C:\Windows\system32\eappgnui.dll
2013-04-22 10:14:39 ----A---- C:\Windows\system32\eapp3hst.dll
2013-04-22 10:14:39 ----A---- C:\Windows\system32\dxgi.dll
2013-04-22 10:14:39 ----A---- C:\Windows\system32\dxdiagn.dll
2013-04-22 10:14:38 ----A---- C:\Windows\SYSWOW64\fphc.dll
2013-04-22 10:14:38 ----A---- C:\Windows\system32\hbaapi.dll
2013-04-22 10:14:38 ----A---- C:\Windows\system32\framedynos.dll
2013-04-22 10:14:38 ----A---- C:\Windows\system32\framedyn.dll
2013-04-22 10:14:38 ----A---- C:\Windows\system32\dxmasf.dll
2013-04-22 10:14:37 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2013-04-22 10:14:37 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2013-04-22 10:14:37 ----A---- C:\Windows\SYSWOW64\diskraid.exe
2013-04-22 10:14:37 ----A---- C:\Windows\SYSWOW64\dfrgui.exe
2013-04-22 10:14:37 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll
2013-04-22 10:14:37 ----A---- C:\Windows\system32\dpx.dll
2013-04-22 10:14:37 ----A---- C:\Windows\system32\djoin.exe
2013-04-22 10:14:37 ----A---- C:\Windows\system32\dfshim.dll
2013-04-22 10:14:36 ----A---- C:\Windows\SYSWOW64\tlscsp.dll
2013-04-22 10:14:36 ----A---- C:\Windows\SYSWOW64\dot3msm.dll
2013-04-22 10:14:36 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2013-04-22 10:14:36 ----A---- C:\Windows\system32\unimdmat.dll
2013-04-22 10:14:36 ----A---- C:\Windows\system32\taskhost.exe
2013-04-22 10:14:36 ----A---- C:\Windows\system32\taskeng.exe
2013-04-22 10:14:36 ----A---- C:\Windows\system32\taskcomp.dll
2013-04-22 10:14:36 ----A---- C:\Windows\system32\TabSvc.dll
2013-04-22 10:14:36 ----A---- C:\Windows\system32\drivers\termdd.sys
2013-04-22 10:14:36 ----A---- C:\Windows\system32\dps.dll
2013-04-22 10:14:35 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2013-04-22 10:14:35 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2013-04-22 10:14:35 ----A---- C:\Windows\SYSWOW64\sxs.dll
2013-04-22 10:14:35 ----A---- C:\Windows\SYSWOW64\sscore.dll
2013-04-22 10:14:35 ----A---- C:\Windows\system32\user32.dll
2013-04-22 10:14:35 ----A---- C:\Windows\system32\sud.dll
2013-04-22 10:14:35 ----A---- C:\Windows\system32\spwmp.dll
2013-04-22 10:14:35 ----A---- C:\Windows\system32\sppobjs.dll
2013-04-22 10:14:35 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2013-04-22 10:14:34 ----A---- C:\Windows\SYSWOW64\syssetup.dll
2013-04-22 10:14:34 ----A---- C:\Windows\SYSWOW64\syncui.dll
2013-04-22 10:14:34 ----A---- C:\Windows\SYSWOW64\spopk.dll
2013-04-22 10:14:33 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2013-04-22 10:14:33 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2013-04-22 10:14:33 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2013-04-22 10:14:33 ----A---- C:\Windows\system32\WMVCORE.DLL
2013-04-22 10:14:33 ----A---- C:\Windows\system32\wmpmde.dll
2013-04-22 10:14:33 ----A---- C:\Windows\system32\wmploc.DLL
2013-04-22 10:14:33 ----A---- C:\Windows\system32\wmp.dll
2013-04-22 10:14:33 ----A---- C:\Windows\system32\Wldap32.dll
2013-04-22 10:14:33 ----A---- C:\Windows\system32\wlanui.dll
2013-04-22 10:14:33 ----A---- C:\Windows\system32\wlanpref.dll
2013-04-22 10:14:33 ----A---- C:\Windows\system32\wisptis.exe
2013-04-22 10:14:33 ----A---- C:\Windows\system32\winsta.dll
2013-04-22 10:14:32 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2013-04-22 10:14:32 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2013-04-22 10:14:32 ----A---- C:\Windows\SYSWOW64\wpdwcn.dll
2013-04-22 10:14:32 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2013-04-22 10:14:32 ----A---- C:\Windows\system32\xpsservices.dll
2013-04-22 10:14:32 ----A---- C:\Windows\system32\wshbth.dll
2013-04-22 10:14:32 ----A---- C:\Windows\system32\vmbusres.dll
2013-04-22 10:14:32 ----A---- C:\Windows\system32\vmbuspipe.dll
2013-04-22 10:14:31 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2013-04-22 10:14:31 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2013-04-22 10:14:31 ----A---- C:\Windows\SYSWOW64\vpnikeapi.dll
2013-04-22 10:14:31 ----A---- C:\Windows\system32\WinSATAPI.dll
2013-04-22 10:14:31 ----A---- C:\Windows\system32\WavDest.dll
2013-04-22 10:14:31 ----A---- C:\Windows\system32\VmbusCoinstaller.dll
2013-04-22 10:14:31 ----A---- C:\Windows\system32\vdsbas.dll
2013-04-22 10:14:31 ----A---- C:\Windows\system32\drivers\winhv.sys
2013-04-22 10:14:31 ----A---- C:\Windows\system32\drivers\volmgr.sys
2013-04-22 10:14:31 ----A---- C:\Windows\system32\drivers\vmbus.sys
2013-04-22 10:14:31 ----A---- C:\Windows\system32\drivers\raspptp.sys
2013-04-22 10:14:30 ----A---- C:\Windows\SYSWOW64\regapi.dll
2013-04-22 10:14:30 ----A---- C:\Windows\SYSWOW64\rdpendp.dll
2013-04-22 10:14:30 ----A---- C:\Windows\SYSWOW64\rdpencom.dll
2013-04-22 10:14:30 ----A---- C:\Windows\SYSWOW64\rasppp.dll
2013-04-22 10:14:30 ----A---- C:\Windows\system32\rdpendp.dll
2013-04-22 10:14:30 ----A---- C:\Windows\system32\rdpd3d.dll
2013-04-22 10:14:30 ----A---- C:\Windows\system32\rasppp.dll
2013-04-22 10:14:30 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2013-04-22 10:14:30 ----A---- C:\Windows\system32\QSHVHOST.DLL
2013-04-22 10:14:30 ----A---- C:\Windows\system32\qasf.dll
2013-04-22 10:14:30 ----A---- C:\Windows\system32\puiobj.dll
2013-04-22 10:14:30 ----A---- C:\Windows\system32\drivers\rdpdr.sys
2013-04-22 10:14:29 ----A---- C:\Windows\SYSWOW64\resutils.dll
2013-04-22 10:14:29 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2013-04-22 10:14:29 ----A---- C:\Windows\SYSWOW64\PkgMgr.exe
2013-04-22 10:14:29 ----A---- C:\Windows\system32\remotepg.dll
2013-04-22 10:14:29 ----A---- C:\Windows\system32\ReAgent.dll
2013-04-22 10:14:29 ----A---- C:\Windows\system32\PresentationHost.exe
2013-04-22 10:14:29 ----A---- C:\Windows\system32\powercpl.dll
2013-04-22 10:14:29 ----A---- C:\Windows\system32\pla.dll
2013-04-22 10:14:29 ----A---- C:\Windows\system32\PkgMgr.exe
2013-04-22 10:14:29 ----A---- C:\Windows\system32\photowiz.dll
2013-04-22 10:14:28 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2013-04-22 10:14:28 ----A---- C:\Windows\SYSWOW64\prncache.dll
2013-04-22 10:14:28 ----A---- C:\Windows\SYSWOW64\printui.dll
2013-04-22 10:14:28 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2013-04-22 10:14:28 ----A---- C:\Windows\SYSWOW64\perfts.dll
2013-04-22 10:14:28 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll
2013-04-22 10:14:28 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2013-04-22 10:14:28 ----A---- C:\Windows\system32\setupcl.exe
2013-04-22 10:14:28 ----A---- C:\Windows\system32\SessEnv.dll
2013-04-22 10:14:28 ----A---- C:\Windows\system32\provsvc.dll
2013-04-22 10:14:28 ----A---- C:\Windows\system32\prnfldr.dll
2013-04-22 10:14:28 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2013-04-22 10:14:28 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2013-04-22 10:14:28 ----A---- C:\Windows\system32\pdh.dll
2013-04-22 10:14:28 ----A---- C:\Windows\system32\drivers\pci.sys
2013-04-22 10:14:28 ----A---- C:\Windows\system32\drivers\pacer.sys
2013-04-22 10:14:27 ----A---- C:\Windows\SYSWOW64\sisbkup.dll
2013-04-22 10:14:27 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll
2013-04-22 10:14:27 ----A---- C:\Windows\SYSWOW64\shunimpl.dll
2013-04-22 10:14:27 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2013-04-22 10:14:27 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2013-04-22 10:14:27 ----A---- C:\Windows\SYSWOW64\runonce.exe
2013-04-22 10:14:27 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2013-04-22 10:14:27 ----A---- C:\Windows\system32\shimgvw.dll
2013-04-22 10:14:27 ----A---- C:\Windows\system32\shgina.dll
2013-04-22 10:14:27 ----A---- C:\Windows\system32\secproc.dll
2013-04-22 10:14:27 ----A---- C:\Windows\system32\scrptadm.dll
2013-04-22 10:14:27 ----A---- C:\Windows\system32\samsrv.dll
2013-04-22 10:14:27 ----A---- C:\Windows\system32\samcli.dll
2013-04-22 10:14:26 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2013-04-22 10:14:26 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2013-04-22 10:14:26 ----A---- C:\Windows\system32\scavengeui.dll
2013-04-22 10:14:26 ----A---- C:\Windows\system32\RpcRtRemote.dll
2013-04-22 10:14:26 ----A---- C:\Windows\system32\RMActivate.exe
2013-04-22 10:14:26 ----A---- C:\Windows\system32\drivers\rmcast.sys
2013-04-22 10:14:25 ----A---- C:\Windows\SYSWOW64\shgina.dll
2013-04-22 10:14:25 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2013-04-22 10:14:25 ----A---- C:\Windows\SYSWOW64\msdmo.dll
2013-04-22 10:14:25 ----A---- C:\Windows\SYSWOW64\mscms.dll
2013-04-22 10:14:25 ----A---- C:\Windows\system32\slwga.dll
2013-04-22 10:14:25 ----A---- C:\Windows\system32\sisbkup.dll
2013-04-22 10:14:25 ----A---- C:\Windows\system32\shsetup.dll
2013-04-22 10:14:25 ----A---- C:\Windows\system32\msconfig.exe
2013-04-22 10:14:25 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2013-04-22 10:14:24 ----A---- C:\Windows\SYSWOW64\sethc.exe
2013-04-22 10:14:24 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll
2013-04-22 10:14:24 ----A---- C:\Windows\system32\sethc.exe
2013-04-22 10:14:23 ----A---- C:\Windows\SYSWOW64\wkscli.dll
2013-04-22 10:14:23 ----A---- C:\Windows\SYSWOW64\winsta.dll
2013-04-22 10:14:23 ----A---- C:\Windows\system32\wmicmiplugin.dll
2013-04-22 10:14:23 ----A---- C:\Windows\system32\wksprt.exe
2013-04-22 10:14:22 ----A---- C:\Windows\SYSWOW64\wmpshell.dll
2013-04-22 10:14:22 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2013-04-22 10:14:22 ----A---- C:\Windows\SYSWOW64\wmp.dll
2013-04-22 10:14:22 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2013-04-22 10:14:22 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2013-04-22 10:14:22 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2013-04-22 10:14:22 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2013-04-22 10:14:22 ----A---- C:\Windows\system32\wmpshell.dll
2013-04-22 10:14:22 ----A---- C:\Windows\system32\wmpps.dll
2013-04-22 10:14:22 ----A---- C:\Windows\system32\WMPEncEn.dll
2013-04-22 10:14:21 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2013-04-22 10:14:21 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2013-04-22 10:14:21 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2013-04-22 10:14:21 ----A---- C:\Windows\system32\TSpkg.dll
2013-04-22 10:14:21 ----A---- C:\Windows\system32\azroleui.dll
2013-04-22 10:14:21 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2013-04-22 10:14:20 ----A---- C:\Windows\system32\sxs.dll
2013-04-22 10:14:20 ----A---- C:\Windows\system32\stobject.dll
2013-04-22 10:14:20 ----A---- C:\Windows\system32\sscore.dll
2013-04-22 10:14:20 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2013-04-22 10:14:20 ----A---- C:\Windows\system32\appmgr.dll
2013-04-22 10:14:19 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2013-04-22 10:14:19 ----A---- C:\Windows\SYSWOW64\termmgr.dll
2013-04-22 10:14:19 ----A---- C:\Windows\SYSWOW64\taskmgr.exe
2013-04-22 10:14:19 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2013-04-22 10:14:19 ----A---- C:\Windows\SYSWOW64\sqmapi.dll
2013-04-22 10:14:19 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2013-04-22 10:14:19 ----A---- C:\Windows\system32\themeui.dll
2013-04-22 10:14:19 ----A---- C:\Windows\system32\termmgr.dll
2013-04-22 10:14:19 ----A---- C:\Windows\system32\tapisrv.dll
2013-04-22 10:14:19 ----A---- C:\Windows\system32\systemcpl.dll
2013-04-22 10:14:19 ----A---- C:\Windows\system32\srvsvc.dll
2013-04-22 10:14:19 ----A---- C:\Windows\system32\sqlsrv32.dll
2013-04-22 10:14:19 ----A---- C:\Windows\system32\spwizres.dll
2013-04-22 10:14:19 ----A---- C:\Windows\system32\spwizeng.dll
2013-04-22 10:14:19 ----A---- C:\Windows\system32\sppc.dll
2013-04-22 10:14:19 ----A---- C:\Windows\system32\spbcd.dll
2013-04-22 10:14:19 ----A---- C:\Windows\system32\drivers\tdi.sys
2013-04-22 10:14:17 ----A---- C:\Windows\SYSWOW64\printmanagement.msc
2013-04-22 10:14:17 ----A---- C:\Windows\SYSWOW64\ppcsnap.dll
2013-04-22 10:14:17 ----A---- C:\Windows\SYSWOW64\pmcsnap.dll
2013-04-22 10:14:17 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2013-04-22 10:14:17 ----A---- C:\Windows\SYSWOW64\OpcServices.dll
2013-04-22 10:14:17 ----A---- C:\Windows\system32\prntvpt.dll
2013-04-22 10:14:17 ----A---- C:\Windows\system32\onexui.dll
2013-04-22 10:14:17 ----A---- C:\Windows\system32\onex.dll
2013-04-22 10:14:17 ----A---- C:\Windows\system32\nshipsec.dll
2013-04-22 10:14:16 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2013-04-22 10:14:16 ----A---- C:\Windows\system32\seclogon.dll
2013-04-22 10:14:16 ----A---- C:\Windows\system32\sdrsvc.dll
2013-04-22 10:14:16 ----A---- C:\Windows\system32\sdengin2.dll
2013-04-22 10:14:16 ----A---- C:\Windows\system32\sdclt.exe
2013-04-22 10:14:16 ----A---- C:\Windows\system32\networkmap.dll
2013-04-22 10:14:16 ----A---- C:\Windows\system32\networkexplorer.dll
2013-04-22 10:14:15 ----A---- C:\Windows\SYSWOW64\scrptadm.dll
2013-04-22 10:14:15 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2013-04-22 10:14:15 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2013-04-22 10:14:15 ----A---- C:\Windows\system32\rpcss.dll
2013-04-22 10:14:15 ----A---- C:\Windows\system32\RMActivate_isv.exe
2013-04-22 10:14:15 ----A---- C:\Windows\system32\repair-bde.exe
2013-04-22 10:14:15 ----A---- C:\Windows\system32\recdisc.exe
2013-04-22 10:14:15 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2013-04-22 10:14:14 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2013-04-22 10:14:14 ----A---- C:\Windows\SYSWOW64\wsdchngr.dll
2013-04-22 10:14:14 ----A---- C:\Windows\SYSWOW64\Query.dll
2013-04-22 10:14:14 ----A---- C:\Windows\SYSWOW64\PushPrinterConnections.exe
2013-04-22 10:14:14 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2013-04-22 10:14:14 ----A---- C:\Windows\system32\wscapi.dll
2013-04-22 10:14:14 ----A---- C:\Windows\system32\wpdbusenum.dll
2013-04-22 10:14:14 ----A---- C:\Windows\system32\wpccpl.dll
2013-04-22 10:14:14 ----A---- C:\Windows\system32\rdpencom.dll
2013-04-22 10:14:14 ----A---- C:\Windows\system32\rdpcfgex.dll
2013-04-22 10:14:14 ----A---- C:\Windows\system32\qedit.dll
2013-04-22 10:14:14 ----A---- C:\Windows\system32\qcap.dll
2013-04-22 10:14:13 ----A---- C:\Windows\SYSWOW64\wups.dll
2013-04-22 10:14:13 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2013-04-22 10:14:13 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2013-04-22 10:14:13 ----A---- C:\Windows\SYSWOW64\wshirda.dll
2013-04-22 10:14:13 ----A---- C:\Windows\SYSWOW64\msutb.dll
2013-04-22 10:14:13 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2013-04-22 10:14:13 ----A---- C:\Windows\system32\wshirda.dll
2013-04-22 10:14:13 ----A---- C:\Windows\system32\drivers\msrpc.sys
2013-04-22 10:14:12 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2013-04-22 10:14:12 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2013-04-22 10:14:12 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2013-04-22 10:14:12 ----A---- C:\Windows\SYSWOW64\net1.exe
2013-04-22 10:14:12 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2013-04-22 10:14:12 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2013-04-22 10:14:12 ----A---- C:\Windows\system32\secproc_isv.dll
2013-04-22 10:14:12 ----A---- C:\Windows\system32\netdiagfx.dll
2013-04-22 10:14:12 ----A---- C:\Windows\system32\msinfo32.exe
2013-04-22 10:14:12 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2013-04-22 10:14:12 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2013-04-22 10:14:11 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2013-04-22 10:14:11 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2013-04-22 10:14:11 ----A---- C:\Windows\system32\nci.dll
2013-04-22 10:14:11 ----A---- C:\Windows\system32\Narrator.exe
2013-04-22 10:14:11 ----A---- C:\Windows\system32\lsm.exe
2013-04-22 10:14:11 ----A---- C:\Windows\system32\localsec.dll
2013-04-22 10:14:11 ----A---- C:\Windows\system32\drivers\ndis.sys
2013-04-22 10:14:11 ----A---- C:\Windows\system32\drivers\ks.sys
2013-04-22 10:14:11 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2013-04-22 10:14:10 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2013-04-22 10:14:10 ----A---- C:\Windows\system32\ipsmsnap.dll
2013-04-22 10:14:09 ----A---- C:\Windows\SYSWOW64\vfwwdm32.dll
2013-04-22 10:14:09 ----A---- C:\Windows\SYSWOW64\vdsbas.dll
2013-04-22 10:14:09 ----A---- C:\Windows\SYSWOW64\KBDUS.DLL
2013-04-22 10:14:09 ----A---- C:\Windows\SYSWOW64\KBDTAJIK.DLL
2013-04-22 10:14:09 ----A---- C:\Windows\SYSWOW64\KBDMON.DLL
2013-04-22 10:14:09 ----A---- C:\Windows\SYSWOW64\KBDINTAM.DLL
2013-04-22 10:14:09 ----A---- C:\Windows\SYSWOW64\KBDINMAR.DLL
2013-04-22 10:14:09 ----A---- C:\Windows\SYSWOW64\KBDINHIN.DLL
2013-04-22 10:14:09 ----A---- C:\Windows\SYSWOW64\inetmib1.dll
2013-04-22 10:14:09 ----A---- C:\Windows\system32\uxlib.dll
2013-04-22 10:14:09 ----A---- C:\Windows\system32\userenv.dll
2013-04-22 10:14:09 ----A---- C:\Windows\system32\KBDTUQ.DLL
2013-04-22 10:14:09 ----A---- C:\Windows\system32\KBDLT1.DLL
2013-04-22 10:14:09 ----A---- C:\Windows\system32\KBDINTEL.DLL
2013-04-22 10:14:09 ----A---- C:\Windows\system32\KBDINORI.DLL
2013-04-22 10:14:09 ----A---- C:\Windows\system32\KBDBASH.DLL
2013-04-22 10:14:09 ----A---- C:\Windows\system32\drivers\vms3cap.sys
2013-04-22 10:14:09 ----A---- C:\Windows\system32\drivers\VMBusHID.sys
2013-04-22 10:14:08 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-04-22 10:14:08 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2013-04-22 10:14:08 ----A---- C:\Windows\SYSWOW64\VAN.dll
2013-04-22 10:14:08 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2013-04-22 10:14:08 ----A---- C:\Windows\system32\wiavideo.dll
2013-04-22 10:14:08 ----A---- C:\Windows\system32\wiaservc.dll
2013-04-22 10:14:08 ----A---- C:\Windows\system32\mcmde.dll
2013-04-22 10:14:07 ----A---- C:\Windows\SYSWOW64\UserAccountControlSettings.dll
2013-04-22 10:14:07 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2013-04-22 10:14:07 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2013-04-22 10:14:07 ----A---- C:\Windows\SYSWOW64\luainstall.dll
2013-04-22 10:14:07 ----A---- C:\Windows\system32\usercpl.dll
2013-04-22 10:14:07 ----A---- C:\Windows\system32\TSWorkspace.dll
2013-04-22 10:14:07 ----A---- C:\Windows\system32\mfreadwrite.dll
2013-04-22 10:14:07 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2013-04-22 10:14:07 ----A---- C:\Windows\system32\mapistub.dll
2013-04-22 10:14:07 ----A---- C:\Windows\system32\mapi32.dll
2013-04-22 10:14:07 ----A---- C:\Windows\system32\DiagCpl.dll
2013-04-22 10:14:05 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll
2013-04-22 10:14:05 ----A---- C:\Windows\system32\dskquoui.dll
2013-04-22 10:14:05 ----A---- C:\Windows\system32\dfrgui.exe
2013-04-22 10:14:05 ----A---- C:\Windows\system32\cscui.dll
2013-04-22 10:14:04 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2013-04-22 10:14:04 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2013-04-22 10:14:04 ----A---- C:\Windows\SYSWOW64\cca.dll
2013-04-22 10:14:04 ----A---- C:\Windows\SYSWOW64\cabinet.dll
2013-04-22 10:14:04 ----A---- C:\Windows\SYSWOW64\browseui.dll
2013-04-22 10:14:04 ----A---- C:\Windows\system32\dwmcore.dll
2013-04-22 10:14:04 ----A---- C:\Windows\system32\dsuiext.dll
2013-04-22 10:14:04 ----A---- C:\Windows\system32\dnscmmc.dll
2013-04-22 10:14:04 ----A---- C:\Windows\system32\C_ISCII.DLL
2013-04-22 10:14:03 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2013-04-22 10:14:03 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2013-04-22 10:14:03 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2013-04-22 10:14:03 ----A---- C:\Windows\SYSWOW64\bitsperf.dll
2013-04-22 10:14:03 ----A---- C:\Windows\system32\gpprefcl.dll
2013-04-22 10:14:03 ----A---- C:\Windows\system32\cscsvc.dll
2013-04-22 10:14:03 ----A---- C:\Windows\system32\cscdll.dll
2013-04-22 10:14:03 ----A---- C:\Windows\system32\cscapi.dll
2013-04-22 10:14:03 ----A---- C:\Windows\system32\credssp.dll
2013-04-22 10:14:03 ----A---- C:\Windows\system32\comctl32.dll
2013-04-22 10:14:03 ----A---- C:\Windows\system32\ci.dll
2013-04-22 10:14:03 ----A---- C:\Windows\system32\bitsadmin.exe
2013-04-22 10:14:02 ----A---- C:\Windows\SYSWOW64\ifsutil.dll
2013-04-22 10:14:02 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2013-04-22 10:14:02 ----A---- C:\Windows\SYSWOW64\fms.dll
2013-04-22 10:14:02 ----A---- C:\Windows\system32\FXSTIFF.dll
2013-04-22 10:14:02 ----A---- C:\Windows\system32\FXSAPI.dll
2013-04-22 10:14:02 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2013-04-22 10:14:01 ----A---- C:\Windows\system32\zipfldr.dll
2013-04-22 10:14:00 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2013-04-22 10:14:00 ----A---- C:\Windows\SYSWOW64\iasrecst.dll
2013-04-22 10:14:00 ----A---- C:\Windows\system32\ifsutil.dll
2013-04-22 10:13:56 ----A---- C:\Windows\system32\EhStorAPI.dll
2013-04-22 10:13:55 ----A---- C:\Windows\SYSWOW64\EhStorAPI.dll
2013-04-22 10:13:55 ----A---- C:\Windows\system32\findstr.exe
2013-04-22 10:13:55 ----A---- C:\Windows\system32\fdeploy.dll
2013-04-22 10:13:54 ----A---- C:\Windows\system32\fixmapi.exe
2013-04-22 10:11:06 ----D---- C:\Windows\system32\EventProviders
2013-04-22 09:49:28 ----A---- C:\Windows\system32\Wdfres.dll
2013-04-22 09:49:28 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2013-04-22 09:49:28 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2013-04-22 09:47:57 ----A---- C:\Windows\system32\WUDFSvc.dll
2013-04-22 09:47:57 ----A---- C:\Windows\system32\WUDFPlatform.dll
2013-04-22 09:47:57 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2013-04-22 09:47:57 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2013-04-22 09:47:56 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2013-04-22 09:47:55 ----A---- C:\Windows\system32\WUDFx.dll
2013-04-22 09:47:55 ----A---- C:\Windows\system32\WUDFHost.exe
2013-04-22 09:46:17 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-04-22 09:46:17 ----A---- C:\Windows\system32\wow64win.dll
2013-04-22 09:46:17 ----A---- C:\Windows\system32\KernelBase.dll
2013-04-22 09:46:17 ----A---- C:\Windows\system32\kernel32.dll
2013-04-22 09:46:17 ----A---- C:\Windows\system32\conhost.exe
2013-04-22 09:46:16 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2013-04-22 09:46:16 ----A---- C:\Windows\system32\wow64cpu.dll
2013-04-22 09:46:16 ----A---- C:\Windows\system32\wow64.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-04-22 09:46:15 ----A---- C:\Windows\system32\ntvdm64.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-04-22 09:46:02 ----A---- C:\Windows\system32\profsvc.dll
2013-04-22 09:46:02 ----A---- C:\Windows\system32\profprov.dll
2013-04-22 09:46:02 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-04-22 09:45:58 ----A---- C:\Windows\SYSWOW64\gameux.dll
2013-04-22 09:45:58 ----A---- C:\Windows\system32\Wpc.dll
2013-04-22 09:45:58 ----A---- C:\Windows\system32\gameux.dll
2013-04-22 09:45:57 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2013-04-22 09:45:49 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-04-22 09:45:49 ----A---- C:\Windows\system32\XpsPrint.dll
2013-04-22 09:45:47 ----A---- C:\Windows\SYSWOW64\esent.dll
2013-04-22 09:45:47 ----A---- C:\Windows\system32\esent.dll
2013-04-22 09:45:47 ----A---- C:\Windows\system32\drivers\nvstor.sys
2013-04-22 09:45:46 ----A---- C:\Windows\system32\drivers\storport.sys
2013-04-22 09:45:46 ----A---- C:\Windows\system32\drivers\nvraid.sys
2013-04-22 09:45:46 ----A---- C:\Windows\system32\drivers\amdsata.sys
2013-04-22 09:45:45 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2013-04-22 09:45:45 ----A---- C:\Windows\system32\drivers\amdxata.sys
2013-04-22 09:45:44 ----A---- C:\Windows\system32\fsutil.exe
2013-04-22 09:45:44 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2013-04-22 09:45:43 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2013-04-22 09:45:27 ----A---- C:\Windows\system32\tquery.dll
2013-04-22 09:45:26 ----A---- C:\Windows\SYSWOW64\tquery.dll
2013-04-22 09:45:26 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2013-04-22 09:45:26 ----A---- C:\Windows\system32\mssrch.dll
2013-04-22 09:45:25 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2013-04-22 09:45:25 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2013-04-22 09:45:25 ----A---- C:\Windows\system32\SearchIndexer.exe
2013-04-22 09:45:25 ----A---- C:\Windows\system32\mssvp.dll
2013-04-22 09:45:24 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2013-04-22 09:45:24 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2013-04-22 09:45:24 ----A---- C:\Windows\SYSWOW64\mssph.dll
2013-04-22 09:45:24 ----A---- C:\Windows\system32\SearchFilterHost.exe
2013-04-22 09:45:24 ----A---- C:\Windows\system32\mssphtb.dll
2013-04-22 09:45:24 ----A---- C:\Windows\system32\mssph.dll
2013-04-22 09:45:23 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2013-04-22 09:45:23 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2013-04-22 09:45:23 ----A---- C:\Windows\system32\msscntrs.dll
2013-04-22 09:45:22 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2013-04-22 09:45:18 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2013-04-22 09:45:18 ----A---- C:\Windows\system32\ntshrui.dll
2013-04-22 09:45:15 ----A---- C:\Windows\SYSWOW64\msi.dll
2013-04-22 09:45:15 ----A---- C:\Windows\system32\msi.dll
2013-04-22 09:45:14 ----A---- C:\Windows\SYSWOW64\usp10.dll
2013-04-22 09:45:14 ----A---- C:\Windows\system32\usp10.dll
2013-04-22 09:45:12 ----A---- C:\Windows\system32\FntCache.dll
2013-04-22 09:45:11 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-04-22 09:45:11 ----A---- C:\Windows\system32\d3d10level9.dll
2013-04-22 09:45:11 ----A---- C:\Windows\system32\d2d1.dll
2013-04-22 09:45:10 ----A---- C:\Windows\SYSWOW64\explorer.exe
2013-04-22 09:45:10 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-04-22 09:45:10 ----A---- C:\Windows\explorer.exe
2013-04-22 09:45:09 ----A---- C:\Windows\system32\srcore.dll
2013-04-22 09:45:09 ----A---- C:\Windows\system32\rstrui.exe
2013-04-22 09:45:08 ----A---- C:\Windows\SYSWOW64\srclient.dll
2013-04-22 09:45:05 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-04-22 09:45:05 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-04-22 09:45:03 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2013-04-22 09:45:03 ----A---- C:\Windows\system32\drivers\usbport.sys
2013-04-22 09:45:03 ----A---- C:\Windows\system32\drivers\usbohci.sys
2013-04-22 09:45:03 ----A---- C:\Windows\system32\drivers\usbhub.sys
2013-04-22 09:45:03 ----A---- C:\Windows\system32\drivers\usbehci.sys
2013-04-22 09:45:03 ----A---- C:\Windows\system32\drivers\usbd.sys
2013-04-22 09:45:03 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2013-04-22 09:45:03 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2013-04-22 09:44:23 ----A---- C:\Windows\system32\drivers\bthport.sys
2013-04-22 09:44:22 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2013-04-22 09:44:22 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2013-04-22 09:44:22 ----A---- C:\Windows\system32\xmllite.dll
2013-04-22 09:44:22 ----A---- C:\Windows\system32\prevhost.exe
2013-04-22 09:44:21 ----A---- C:\Windows\system32\drivers\fvevol.sys
2013-04-22 09:41:23 ----A---- C:\Windows\system32\spoolsv.exe
2013-04-22 09:41:23 ----A---- C:\Windows\splwow64.exe
2013-04-22 09:40:46 ----A---- C:\Windows\system32\drivers\usb8023.sys
2013-04-22 09:40:44 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-04-22 09:40:44 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-04-22 09:40:44 ----A---- C:\Windows\system32\winsrv.dll
2013-04-22 09:40:43 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-04-22 09:40:43 ----A---- C:\Windows\SYSWOW64\user.exe
2013-04-22 09:40:43 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-04-22 09:17:06 ----A---- C:\Windows\system32\MRT.exe
2013-04-22 09:14:25 ----A---- C:\Windows\system32\mshtmled.dll
2013-04-22 09:14:24 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-04-22 09:14:24 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-04-22 09:14:23 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-04-22 09:14:23 ----A---- C:\Windows\system32\ieui.dll
2013-04-22 09:14:22 ----A---- C:\Windows\SYSWOW64\url.dll
2013-04-22 09:14:22 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-04-22 09:14:22 ----A---- C:\Windows\system32\url.dll
2013-04-22 09:14:22 ----A---- C:\Windows\system32\ieUnatt.exe
2013-04-22 09:14:21 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-04-22 09:14:21 ----A---- C:\Windows\system32\urlmon.dll
2013-04-22 09:14:21 ----A---- C:\Windows\system32\jscript9.dll
2013-04-22 09:14:20 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-04-22 09:14:20 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-04-22 09:14:20 ----A---- C:\Windows\system32\msfeeds.dll
2013-04-22 09:14:19 ----A---- C:\Windows\system32\wininet.dll
2013-04-22 09:14:19 ----A---- C:\Windows\system32\jsproxy.dll
2013-04-22 09:14:18 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-04-22 09:14:18 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-04-22 09:14:17 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-04-22 09:14:17 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-04-22 09:14:17 ----A---- C:\Windows\system32\vbscript.dll
2013-04-22 09:14:17 ----A---- C:\Windows\system32\jscript.dll
2013-04-22 09:14:17 ----A---- C:\Windows\system32\iertutil.dll
2013-04-22 09:14:13 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-04-22 09:14:13 ----A---- C:\Windows\system32\mshtml.dll
2013-04-22 09:14:11 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-04-22 09:14:11 ----A---- C:\Windows\system32\ieframe.dll
2013-04-22 00:12:50 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-04-22 00:12:50 ----A---- C:\Windows\system32\mstscax.dll
2013-04-22 00:12:47 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2013-04-22 00:12:47 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2013-04-22 00:12:47 ----A---- C:\Windows\system32\tsgqec.dll
2013-04-22 00:12:47 ----A---- C:\Windows\system32\aaclient.dll
2013-04-22 00:12:42 ----A---- C:\Windows\system32\win32k.sys
2013-04-22 00:12:37 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-04-22 00:12:36 ----A---- C:\Windows\system32\drivers\netio.sys
2013-04-22 00:12:36 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-04-22 00:12:35 ----A---- C:\Windows\system32\fsquirt.exe
2013-04-22 00:12:35 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2013-04-22 00:12:33 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-04-22 00:12:30 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-04-22 00:12:30 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-04-22 00:12:29 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2013-04-22 00:12:29 ----A---- C:\Windows\system32\smss.exe
2013-04-22 00:12:29 ----A---- C:\Windows\system32\csrsrv.dll
2013-04-20 10:06:17 ----D---- C:\Program Files (x86)\Sony Ericsson
2013-04-17 07:40:50 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2013-04-17 07:40:50 ----A---- C:\Windows\SYSWOW64\javaw.exe
2013-04-17 07:40:50 ----A---- C:\Windows\SYSWOW64\java.exe
2013-04-16 23:34:15 ----D---- C:\Program Files\trend micro
2013-04-16 23:34:14 ----D---- C:\rsit
2013-04-12 10:20:07 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-04-05 14:54:26 ----D---- C:\Users\Honza\AppData\Roaming\Nero
2013-03-31 15:21:20 ----D---- C:\ProgramData\Sony
2013-03-31 15:21:20 ----D---- C:\Program Files (x86)\Sony
2013-03-31 15:18:14 ----D---- C:\ProgramData\Avanquest
2013-03-31 15:18:14 ----D---- C:\Program Files (x86)\Avanquest update
2013-03-31 15:16:17 ----D---- C:\ProgramData\BVRP Software
2013-03-31 15:14:38 ----D---- C:\ProgramData\Sony Ericsson

======List of files/folders modified in the last 1 months======

2013-04-24 19:51:11 ----D---- C:\Windows\Prefetch
2013-04-24 18:05:37 ----D---- C:\Windows\System32
2013-04-24 18:05:37 ----D---- C:\Windows\inf
2013-04-24 18:05:37 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-04-24 17:50:33 ----D---- C:\Windows\Temp
2013-04-24 17:47:11 ----D---- C:\Windows\Microsoft.NET
2013-04-24 13:23:09 ----D---- C:\Downloads
2013-04-24 10:17:17 ----D---- C:\Windows\system32\catroot
2013-04-24 10:15:07 ----D---- C:\Windows\winsxs
2013-04-24 10:14:44 ----SHD---- C:\Windows\Installer
2013-04-24 10:12:33 ----SHD---- C:\System Volume Information
2013-04-24 10:12:16 ----D---- C:\Windows\system32\config
2013-04-23 22:02:29 ----D---- C:\Program Files (x86)\The KMPlayer
2013-04-23 21:50:07 ----D---- C:\Program Files\JDownloader 2
2013-04-23 09:37:45 ----RD---- C:\Program Files (x86)
2013-04-23 09:37:44 ----D---- C:\Windows\system32\drivers
2013-04-23 09:26:34 ----D---- C:\Windows\system32\catroot2
2013-04-22 22:59:00 ----D---- C:\Users\Honza\AppData\Roaming\AIMP3
2013-04-22 21:08:37 ----HD---- C:\ProgramData
2013-04-22 11:55:19 ----D---- C:\Windows\rescache
2013-04-22 11:34:48 ----RSD---- C:\Windows\assembly
2013-04-22 11:15:15 ----D---- C:\Windows
2013-04-22 11:13:46 ----D---- C:\Windows\system32\DriverStore
2013-04-22 11:09:22 ----D---- C:\Program Files (x86)\Windows Sidebar
2013-04-22 11:09:22 ----D---- C:\Program Files (x86)\Windows Portable Devices
2013-04-22 11:09:22 ----D---- C:\Program Files (x86)\Windows Media Player
2013-04-22 11:09:22 ----D---- C:\Program Files (x86)\Windows Mail
2013-04-22 11:09:21 ----D---- C:\Program Files\Windows Sidebar
2013-04-22 11:09:21 ----D---- C:\Program Files\Windows Portable Devices
2013-04-22 11:09:21 ----D---- C:\Program Files\Windows Photo Viewer
2013-04-22 11:09:21 ----D---- C:\Program Files\Windows Media Player
2013-04-22 11:09:21 ----D---- C:\Program Files\Windows Mail
2013-04-22 11:09:21 ----D---- C:\Program Files\Windows Journal
2013-04-22 11:09:21 ----D---- C:\Program Files\DVD Maker
2013-04-22 11:09:21 ----D---- C:\Program Files\Common Files\System
2013-04-22 11:09:21 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2013-04-22 11:09:20 ----D---- C:\Windows\servicing
2013-04-22 11:09:20 ----D---- C:\Windows\ehome
2013-04-22 11:09:20 ----D---- C:\Program Files\Windows Defender
2013-04-22 11:09:13 ----D---- C:\Windows\SYSWOW64\sppui
2013-04-22 11:09:13 ----D---- C:\Windows\SYSWOW64\Setup
2013-04-22 11:09:13 ----D---- C:\Windows\SYSWOW64\oobe
2013-04-22 11:09:13 ----D---- C:\Windows\SYSWOW64\migration
2013-04-22 11:09:13 ----D---- C:\Windows\SYSWOW64\manifeststore
2013-04-22 11:09:13 ----D---- C:\Windows\SYSWOW64\es-ES
2013-04-22 11:09:13 ----D---- C:\Windows\SYSWOW64\da-DK
2013-04-22 11:09:13 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-04-22 11:09:13 ----D---- C:\Windows\SYSWOW64\cs
2013-04-22 11:09:13 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2013-04-22 11:09:12 ----D---- C:\Windows\SYSWOW64\wbem
2013-04-22 11:09:12 ----D---- C:\Windows\SYSWOW64\migwiz
2013-04-22 11:09:12 ----D---- C:\Windows\SYSWOW64\Dism
2013-04-22 11:09:12 ----D---- C:\Windows\SysWOW64
2013-04-22 11:09:04 ----D---- C:\Windows\system32\oobe
2013-04-22 11:09:04 ----D---- C:\Windows\system32\migration
2013-04-22 11:09:04 ----D---- C:\Windows\system32\en-US
2013-04-22 11:09:04 ----D---- C:\Windows\system32\da-DK
2013-04-22 11:09:04 ----D---- C:\Windows\PolicyDefinitions
2013-04-22 11:09:03 ----D---- C:\Windows\system32\Setup
2013-04-22 11:09:03 ----D---- C:\Windows\system32\cs
2013-04-22 11:09:03 ----D---- C:\Windows\system32\AdvancedInstallers
2013-04-22 11:08:58 ----D---- C:\Windows\system32\cs-CZ
2013-04-22 11:08:57 ----D---- C:\Windows\system32\wbem
2013-04-22 11:08:57 ----D---- C:\Windows\system32\sppui
2013-04-22 11:08:57 ----D---- C:\Windows\system32\migwiz
2013-04-22 11:08:57 ----D---- C:\Windows\system32\manifeststore
2013-04-22 11:08:57 ----D---- C:\Windows\system32\es-ES
2013-04-22 11:08:57 ----D---- C:\Windows\system32\drivers\cs-CZ
2013-04-22 11:08:57 ----D---- C:\Windows\system32\Dism
2013-04-22 11:08:41 ----RSD---- C:\Windows\Fonts
2013-04-22 11:08:40 ----D---- C:\Windows\AppPatch
2013-04-22 11:08:31 ----D---- C:\Windows\system32\Boot
2013-04-22 10:55:46 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2013-04-22 10:55:45 ----A---- C:\Windows\system32\msclmd.dll
2013-04-22 09:48:49 ----D---- C:\Program Files (x86)\Microsoft Office
2013-04-22 09:37:55 ----D---- C:\ProgramData\Adobe
2013-04-22 09:37:53 ----D---- C:\Windows\Tasks
2013-04-22 09:37:53 ----D---- C:\Windows\system32\Tasks
2013-04-22 09:37:49 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-04-22 09:28:30 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-04-22 09:26:58 ----D---- C:\Program Files (x86)\Internet Explorer
2013-04-22 09:26:57 ----D---- C:\Program Files\Internet Explorer
2013-04-22 09:19:19 ----D---- C:\ProgramData\Microsoft Help
2013-04-22 09:17:07 ----D---- C:\Windows\debug
2013-04-22 09:15:37 ----D---- C:\Program Files\Microsoft Security Client
2013-04-22 09:15:36 ----D---- C:\Program Files (x86)\Microsoft Security Client
2013-04-21 23:13:19 ----D---- C:\Users\Honza\AppData\Roaming\vlc
2013-04-20 10:03:18 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-04-18 21:44:24 ----A---- C:\Windows\NeroDigital.ini
2013-04-17 07:40:56 ----D---- C:\Program Files (x86)\Common Files
2013-04-17 07:40:50 ----D---- C:\Program Files (x86)\Java
2013-04-16 23:34:15 ----RD---- C:\Program Files
2013-04-12 17:26:34 ----D---- C:\Windows\system32\NDF
2013-04-09 22:33:21 ----SD---- C:\Users\Honza\AppData\Roaming\Microsoft
2013-04-08 22:57:16 ----D---- C:\Windows\Minidump
2013-04-02 12:34:28 ----N---- C:\Windows\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-12-17 538136]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-01-20 230320]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2011-03-18 29592]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2013-02-04 834544]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-01-20 130008]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-10-21 6856704]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-10-21 264704]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 125456]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl664.sys [2009-08-21 2978296]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-02-22 2271648]
R3 intelkmd;intelkmd; C:\Windows\system32\DRIVERS\igdpmd64.sys [2010-10-21 10331840]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2009-12-22 74280]
R3 MarvinBus;Pinnacle Marvin Bus 64; C:\Windows\system32\DRIVERS\MarvinBus64.sys [2005-09-23 261120]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-09-17 292912]
S3 a5wnr59t;a5wnr59t; C:\Windows\system32\drivers\a5wnr59t.sys []
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM); C:\Windows\system32\DRIVERS\s0016bus.sys [2008-05-16 115240]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s0016mdfl.sys [2008-05-16 19496]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s0016mdm.sys [2008-05-16 158760]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s0016mgmt.sys [2008-05-16 137256]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS); C:\Windows\system32\DRIVERS\s0016nd5.sys [2008-05-16 34344]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s0016obex.sys [2008-05-16 136744]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM); C:\Windows\system32\DRIVERS\s0016unic.sys [2008-05-16 151592]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-10-21 203264]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2009-09-21 1420560]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2009-12-23 13336]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-01-27 22056]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [2007-09-20 853288]
R2 PanService;PandoraService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [2012-06-22 625816]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2009-09-21 831760]
R3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-01-27 379360]
R3 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [2007-09-20 382248]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-22 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-04-22 256904]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-22 116648]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-04-12 115608]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-02-06 1255736]

-----------------EOF-----------------

Najdete tento soubor C:\Program Files\trend micro\Honza.exe , kliknete na nej pravym mysidlem a levym na Spustit jako spravce
Kliknete na Main menu a na Do a system scan only
U techto radku dejte vlevo zatrzitko Kliknete na nápis Fix checked a potvrdte




Stahnete OTM http://oldtimer.geekstogo.com/OTM.exe a ulozte nejlepe na plochu.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Do leveho okna zkopirujte tento skript (vcetne te dvojtecky pred slovem commands) Kliknete na MoveIt a nechte program pracovat. Pri otazce na restart souhlaste.
Po restartu sem dejte log, ktery na vas vyskoci, nebo bude zde C:\_OTM\MovedFiles\xxxxxxxx_xxxxxx (misto tech x budou cisla, predstavujici datum a cas spusteni)

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Honza
->Temp folder emptied: 783962016 bytes
->Temporary Internet Files folder emptied: 81540466 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 421139736 bytes
->Google Chrome cache emptied: 9488563 bytes
->Flash cache emptied: 19181 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 5054424 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 1470754 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 46450642 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 1 287,00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Honza
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb

C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
Restore point Set: OTM Restore Point
========== SERVICES/DRIVERS ==========
Service AdobeARMservice stopped successfully!
Service AdobeARMservice deleted successfully!
Service Nero BackItUp Scheduler 3 stopped successfully!
Service Nero BackItUp Scheduler 3 deleted successfully!
Service NMIndexingService stopped successfully!
Service NMIndexingService deleted successfully!
Service gupdate stopped successfully!
Service gupdate deleted successfully!
Service AdobeFlashPlayerUpdateSvc stopped successfully!
Service AdobeFlashPlayerUpdateSvc deleted successfully!
Service gupdatem stopped successfully!
Service gupdatem deleted successfully!
Error: Unable to stop service PanService!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PanService deleted successfully.
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
C:\Windows\tasks\Adobe Flash Player Updater.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Windows\tasks\update-S-1-5-21-2235225708-107714369-1751721454-1000.job moved successfully.
C:\Windows\tasks\update-sys.job moved successfully.
========== REGISTRY ==========
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.

OTM by OldTimer - Version 3.1.21.0 log created on 04252013_135157

Files moved on Reboot...
File C:\Users\Honza\AppData\Local\Temp\hsperfdata_Honza\2692 not found!
C:\Users\Honza\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

Registry entries deleted on Reboot...

Dejte novy log z RSIT.


Co pc, jak to s nim vypada?

Logfile of random's system information tool 1.08 (written by random/random)
Run by Honza at 2013-04-28 11:54:37
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 59 GB (58%) free of 102 GB
Total RAM: 3767 MB (42% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:54:41, on 28.4.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16476)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe
C:\Program Files (x86)\QIP 2012\qip.exe
C:\Users\Honza\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Users\Honza\AppData\Local\Skillbrains\lightshot\3.4.0.20\LightShot.exe
C:\Program Files (x86)\AIMP3\AIMP3.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_169.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_169.exe
C:\Program Files\trend micro\Honza.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKCU\..\Run: [Rainlendar2] C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Infium] "C:\Program Files (x86)\QIP 2012\qip.exe" /autorun
O4 - Startup: Dropbox.lnk = Honza\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Startup: LightShot .lnk = Honza\AppData\Local\Skillbrains\lightshot\LightShot.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{279407B8-9D4C-4533-A973-8324F03C6AD9}: NameServer = 82.113.51.27,82.113.51.3
O17 - HKLM\System\CS1\Services\Tcpip\..\{279407B8-9D4C-4533-A973-8324F03C6AD9}: NameServer = 82.113.51.27,82.113.51.3
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7413 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\system32\WLANExt.exe 29568128
\??\C:\Windows\system32\conhost.exe "1983410803468646872929169768-160054681419045188369338555881545571470-1183509715
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
taskeng.exe {341C9BCD-2686-4A98-A981-F5447DCCE48E}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"taskhost.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE3
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\QIP 2012\qip.exe" /autorun
"C:\Users\Honza\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Users\Honza\AppData\Local\Skillbrains\lightshot\3.4.0.20\LightShot.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe" Restart Start Dashboard SingleAspectPage LeafName=Leaf_PowerXpress
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\AIMP3\AIMP3.exe"
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe"
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=7088.19b07800.1024027830 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox" E7CF176E110C211B 7088 "\\.\pipe\gecko-crash-server-pipe.7088" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_169.exe" --proxy-stub-channel=Flash6892.61EE1D90.22537 --host-broker-channel=Flash6892.61EE1D90.18949 --host-pid=6892 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_169.exe" --channel=1740.0027F468.746776283 --proxy-stub-channel=Flash6892.61EE1D90.22537 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll" --host-npapi-version=27 --type=renderer
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
"D:\Instal\RSIT\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-04-04 462752]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-12-18 343784]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-04-04 171424]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-12-18 343784]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-10-21 161304]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-10-21 386584]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-10-21 414744]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-02-22 10081312]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2010-02-22 877600]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-09-17 1842472]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2013-01-27 1281512]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Rainlendar2"=C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe [2011-02-04 2346496]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"Infium"=C:\Program Files (x86)\QIP 2012\qip.exe [2013-01-10 8378408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OrderReminder]
C:\Program Files (x86)\Hewlett-Packard\OrderReminder\OrderReminder.exe [2005-03-18 98304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Honza^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^KN StrongDC.lnk]
C:\PROGRA~1\KN_STR~1\StrongDC.exe [2008-07-15 3361792]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2009-12-23 284696]

C:\Users\Honza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Honza\AppData\Roaming\Dropbox\bin\Dropbox.exe
LightShot .lnk - C:\Users\Honza\AppData\Local\Skillbrains\lightshot\LightShot.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-10-21 269824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2013-04-25 13:51:57 ----D---- C:\_OTM
2013-04-24 10:17:51 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-04-23 09:26:43 ----A---- C:\Windows\system32\taskhost.exe
2013-04-22 23:09:32 ----A---- C:\AdwCleaner[S1].txt
2013-04-22 23:08:34 ----A---- C:\AdwCleaner[R2].txt
2013-04-22 21:09:01 ----D---- C:\Users\Honza\AppData\Roaming\Malwarebytes
2013-04-22 21:08:37 ----D---- C:\ProgramData\Malwarebytes
2013-04-22 21:06:18 ----A---- C:\AdwCleaner[R1].txt
2013-04-22 18:31:13 ----D---- C:\Users\Honza\AppData\Roaming\Dropbox
2013-04-22 11:05:56 ----D---- C:\Windows\system32\SPReview
2013-04-22 10:16:23 ----A---- C:\Windows\SYSWOW64\MSAC3ENC.DLL
2013-04-22 10:16:23 ----A---- C:\Windows\SYSWOW64\mobsync.exe
2013-04-22 10:16:23 ----A---- C:\Windows\system32\mprddm.dll
2013-04-22 10:16:23 ----A---- C:\Windows\system32\mobsync.exe
2013-04-22 10:16:22 ----A---- C:\Windows\SYSWOW64\mstask.dll
2013-04-22 10:16:22 ----A---- C:\Windows\SYSWOW64\mscories.dll
2013-04-22 10:16:22 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2013-04-22 10:16:22 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2013-04-22 10:16:21 ----A---- C:\Windows\SYSWOW64\KBDLT1.DLL
2013-04-22 10:16:21 ----A---- C:\Windows\SYSWOW64\KBDINTEL.DLL
2013-04-22 10:16:21 ----A---- C:\Windows\SYSWOW64\KBDCZ1.DLL
2013-04-22 10:16:21 ----A---- C:\Windows\SYSWOW64\iTVData.dll
2013-04-22 10:16:21 ----A---- C:\Windows\system32\msdri.dll
2013-04-22 10:16:21 ----A---- C:\Windows\system32\KBDBLR.DLL
2013-04-22 10:16:21 ----A---- C:\Windows\system32\itircl.dll
2013-04-22 10:16:21 ----A---- C:\Windows\system32\iphlpsvc.dll
2013-04-22 10:16:21 ----A---- C:\Windows\system32\inetmib1.dll
2013-04-22 10:16:21 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2013-04-22 10:16:20 ----A---- C:\Windows\SYSWOW64\raschap.dll
2013-04-22 10:16:20 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2013-04-22 10:16:20 ----A---- C:\Windows\SYSWOW64\qedit.dll
2013-04-22 10:16:20 ----A---- C:\Windows\SYSWOW64\provsvc.dll
2013-04-22 10:16:20 ----A---- C:\Windows\SYSWOW64\MediaMetadataHandler.dll
2013-04-22 10:16:20 ----A---- C:\Windows\SYSWOW64\lsmproxy.dll
2013-04-22 10:16:20 ----A---- C:\Windows\SYSWOW64\logagent.exe
2013-04-22 10:16:20 ----A---- C:\Windows\system32\printui.dll
2013-04-22 10:16:20 ----A---- C:\Windows\system32\pnidui.dll
2013-04-22 10:16:20 ----A---- C:\Windows\system32\pifmgr.dll
2013-04-22 10:16:19 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2013-04-22 10:16:19 ----A---- C:\Windows\SYSWOW64\samcli.dll
2013-04-22 10:16:19 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2013-04-22 10:16:19 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2013-04-22 10:16:19 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2013-04-22 10:16:19 ----A---- C:\Windows\SYSWOW64\rdprefdrvapi.dll
2013-04-22 10:16:19 ----A---- C:\Windows\SYSWOW64\propsys.dll
2013-04-22 10:16:19 ----A---- C:\Windows\system32\sdcpl.dll
2013-04-22 10:16:19 ----A---- C:\Windows\system32\RDPENCDD.dll
2013-04-22 10:16:19 ----A---- C:\Windows\system32\rdpclip.exe
2013-04-22 10:16:19 ----A---- C:\Windows\system32\drivers\scsiport.sys
2013-04-22 10:16:18 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2013-04-22 10:16:18 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2013-04-22 10:16:18 ----A---- C:\Windows\SYSWOW64\netiougc.exe
2013-04-22 10:16:18 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2013-04-22 10:16:18 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2013-04-22 10:16:18 ----A---- C:\Windows\SYSWOW64\ncryptui.dll
2013-04-22 10:16:18 ----A---- C:\Windows\system32\nslookup.exe
2013-04-22 10:16:18 ----A---- C:\Windows\system32\nlasvc.dll
2013-04-22 10:16:18 ----A---- C:\Windows\system32\nlaapi.dll
2013-04-22 10:16:18 ----A---- C:\Windows\system32\netshell.dll
2013-04-22 10:16:18 ----A---- C:\Windows\system32\netlogon.dll
2013-04-22 10:16:18 ----A---- C:\Windows\system32\netjoin.dll
2013-04-22 10:16:18 ----A---- C:\Windows\system32\ncsi.dll
2013-04-22 10:16:18 ----A---- C:\Windows\system32\MultiDigiMon.exe
2013-04-22 10:16:17 ----A---- C:\Windows\SYSWOW64\perfmon.exe
2013-04-22 10:16:17 ----A---- C:\Windows\SYSWOW64\pdhui.dll
2013-04-22 10:16:17 ----A---- C:\Windows\SYSWOW64\ntlanman.dll
2013-04-22 10:16:17 ----A---- C:\Windows\system32\OobeFldr.dll
2013-04-22 10:16:16 ----A---- C:\Windows\SYSWOW64\cmd.exe
2013-04-22 10:16:16 ----A---- C:\Windows\SYSWOW64\C_ISCII.DLL
2013-04-22 10:16:16 ----A---- C:\Windows\system32\CertPolEng.dll
2013-04-22 10:16:16 ----A---- C:\Windows\system32\certmgr.dll
2013-04-22 10:16:16 ----A---- C:\Windows\system32\certcli.dll
2013-04-22 10:16:15 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2013-04-22 10:16:15 ----A---- C:\Windows\system32\drivers\cdrom.sys
2013-04-22 10:16:15 ----A---- C:\Windows\system32\diagperf.dll
2013-04-22 10:16:15 ----A---- C:\Windows\system32\dbghelp.dll
2013-04-22 10:16:15 ----A---- C:\Windows\system32\dbgeng.dll
2013-04-22 10:16:15 ----A---- C:\Windows\system32\d3d9.dll
2013-04-22 10:16:15 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-04-22 10:16:15 ----A---- C:\Windows\system32\comdlg32.dll
2013-04-22 10:16:15 ----A---- C:\Windows\system32\cdd.dll
2013-04-22 10:16:14 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2013-04-22 10:16:14 ----A---- C:\Windows\system32\consent.exe
2013-04-22 10:16:14 ----A---- C:\Windows\system32\aepdu.dll
2013-04-22 10:16:14 ----A---- C:\Windows\system32\aeinv.dll
2013-04-22 10:16:14 ----A---- C:\Windows\system32\AdmTmpl.dll
2013-04-22 10:16:13 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2013-04-22 10:16:13 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-04-22 10:16:13 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2013-04-22 10:16:13 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2013-04-22 10:16:13 ----A---- C:\Windows\SYSWOW64\activeds.dll
2013-04-22 10:16:13 ----A---- C:\Windows\system32\ftp.exe
2013-04-22 10:16:13 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2013-04-22 10:16:13 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2013-04-22 10:16:13 ----A---- C:\Windows\system32\drivers\appid.sys
2013-04-22 10:16:13 ----A---- C:\Windows\system32\bcdsrv.dll
2013-04-22 10:16:13 ----A---- C:\Windows\system32\bcdedit.exe
2013-04-22 10:16:13 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2013-04-22 10:16:13 ----A---- C:\Windows\system32\authui.dll
2013-04-22 10:16:13 ----A---- C:\Windows\system32\appinfo.dll
2013-04-22 10:16:13 ----A---- C:\Windows\system32\acppage.dll
2013-04-22 10:16:12 ----A---- C:\Windows\SYSWOW64\imapi2.dll
2013-04-22 10:16:12 ----A---- C:\Windows\system32\imapi2fs.dll
2013-04-22 10:16:12 ----A---- C:\Windows\system32\drivers\http.sys
2013-04-22 10:16:12 ----A---- C:\Windows\system32\drivers\HpSAMD.sys
2013-04-22 10:16:11 ----A---- C:\Windows\SYSWOW64\evr.dll
2013-04-22 10:16:11 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-04-22 10:16:11 ----A---- C:\Windows\SYSWOW64\dskquoui.dll
2013-04-22 10:16:11 ----A---- C:\Windows\SYSWOW64\diskpart.exe
2013-04-22 10:16:11 ----A---- C:\Windows\system32\elsTrans.dll
2013-04-22 10:16:11 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-04-22 10:16:11 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-04-22 10:16:11 ----A---- C:\Windows\system32\Display.dll
2013-04-22 10:16:10 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2013-04-22 10:16:10 ----A---- C:\Windows\system32\SearchFolder.dll
2013-04-22 10:16:10 ----A---- C:\Windows\system32\Faultrep.dll
2013-04-22 10:16:10 ----A---- C:\Windows\system32\ExplorerFrame.dll
2013-04-22 10:16:09 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2013-04-22 10:16:09 ----A---- C:\Windows\system32\tscfgwmi.dll
2013-04-22 10:16:08 ----A---- C:\Windows\SYSWOW64\themecpl.dll
2013-04-22 10:16:08 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2013-04-22 10:16:08 ----A---- C:\Windows\SYSWOW64\sppinst.dll
2013-04-22 10:16:08 ----A---- C:\Windows\system32\thumbcache.dll
2013-04-22 10:16:08 ----A---- C:\Windows\system32\taskschd.dll
2013-04-22 10:16:08 ----A---- C:\Windows\system32\tabcal.exe
2013-04-22 10:16:08 ----A---- C:\Windows\system32\shwebsvc.dll
2013-04-22 10:16:07 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2013-04-22 10:16:07 ----A---- C:\Windows\SYSWOW64\srvcli.dll
2013-04-22 10:16:07 ----A---- C:\Windows\SYSWOW64\spp.dll
2013-04-22 10:16:07 ----A---- C:\Windows\SYSWOW64\spbcd.dll
2013-04-22 10:16:07 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2013-04-22 10:16:07 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2013-04-22 10:16:07 ----A---- C:\Windows\system32\sysmain.dll
2013-04-22 10:16:07 ----A---- C:\Windows\system32\sysclass.dll
2013-04-22 10:16:07 ----A---- C:\Windows\system32\sppsvc.exe
2013-04-22 10:16:07 ----A---- C:\Windows\system32\spp.dll
2013-04-22 10:16:06 ----A---- C:\Windows\SYSWOW64\wmpsrcwp.dll
2013-04-22 10:16:06 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2013-04-22 10:16:06 ----A---- C:\Windows\system32\WMVDECOD.DLL
2013-04-22 10:16:06 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2013-04-22 10:16:06 ----A---- C:\Windows\system32\wmdrmnet.dll
2013-04-22 10:16:06 ----A---- C:\Windows\system32\wmdrmdev.dll
2013-04-22 10:16:06 ----A---- C:\Windows\system32\WMADMOD.DLL
2013-04-22 10:16:06 ----A---- C:\Windows\system32\wkssvc.dll
2013-04-22 10:16:06 ----A---- C:\Windows\system32\srchadmin.dll
2013-04-22 10:16:06 ----A---- C:\Windows\system32\sqmapi.dll
2013-04-22 10:16:05 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2013-04-22 10:16:05 ----A---- C:\Windows\SYSWOW64\wvc.dll
2013-04-22 10:16:05 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2013-04-22 10:16:05 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2013-04-22 10:16:05 ----A---- C:\Windows\SYSWOW64\wtsapi32.dll
2013-04-22 10:16:05 ----A---- C:\Windows\SYSWOW64\WPDSp.dll
2013-04-22 10:16:05 ----A---- C:\Windows\system32\wwanconn.dll
2013-04-22 10:16:05 ----A---- C:\Windows\system32\wsqmcons.exe
2013-04-22 10:16:05 ----A---- C:\Windows\system32\wpdwcn.dll
2013-04-22 10:16:05 ----A---- C:\Windows\system32\wpd_ci.dll
2013-04-22 10:16:05 ----A---- C:\Windows\system32\wmpeffects.dll
2013-04-22 10:16:05 ----A---- C:\Windows\system32\winhttp.dll
2013-04-22 10:16:04 ----A---- C:\Windows\twain_32.dll
2013-04-22 10:16:04 ----A---- C:\Windows\SYSWOW64\untfs.dll
2013-04-22 10:16:04 ----A---- C:\Windows\SYSWOW64\unlodctr.exe
2013-04-22 10:16:04 ----A---- C:\Windows\SYSWOW64\tzutil.exe
2013-04-22 10:16:04 ----A---- C:\Windows\system32\wsdchngr.dll
2013-04-22 10:16:04 ----A---- C:\Windows\system32\ws2_32.dll
2013-04-22 10:16:04 ----A---- C:\Windows\system32\userinit.exe
2013-04-22 10:16:04 ----A---- C:\Windows\system32\umrdp.dll
2013-04-22 10:16:04 ----A---- C:\Windows\system32\umb.dll
2013-04-22 10:16:04 ----A---- C:\Windows\system32\drivers\volsnap.sys
2013-04-22 10:16:04 ----A---- C:\Windows\system32\drivers\umbus.sys
2013-04-22 10:16:03 ----A---- C:\Windows\SYSWOW64\wiadefui.dll
2013-04-22 10:16:03 ----A---- C:\Windows\SYSWOW64\wdc.dll
2013-04-22 10:16:03 ----A---- C:\Windows\SYSWOW64\wavemsp.dll
2013-04-22 10:16:03 ----A---- C:\Windows\SYSWOW64\shacct.dll
2013-04-22 10:16:03 ----A---- C:\Windows\system32\WerFaultSecure.exe
2013-04-22 10:16:03 ----A---- C:\Windows\system32\VSSVC.exe
2013-04-22 10:16:03 ----A---- C:\Windows\system32\vssapi.dll
2013-04-22 10:16:03 ----A---- C:\Windows\system32\vss_ps.dll
2013-04-22 10:16:02 ----A---- C:\Windows\SYSWOW64\secproc.dll
2013-04-22 10:16:01 ----A---- C:\Windows\SYSWOW64\setupugc.exe
2013-04-22 10:16:01 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2013-04-22 10:16:00 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2013-04-22 10:16:00 ----A---- C:\Windows\system32\mimefilt.dll
2013-04-22 10:16:00 ----A---- C:\Windows\system32\mfps.dll
2013-04-22 10:16:00 ----A---- C:\Windows\system32\MFPlay.dll
2013-04-22 10:16:00 ----A---- C:\Windows\system32\mfds.dll
2013-04-22 10:16:00 ----A---- C:\Windows\system32\mf.dll
2013-04-22 10:16:00 ----A---- C:\Windows\system32\Mcx2Svc.dll
2013-04-22 10:15:59 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2013-04-22 10:15:59 ----A---- C:\Windows\SYSWOW64\mprapi.dll
2013-04-22 10:15:59 ----A---- C:\Windows\SYSWOW64\logoncli.dll
2013-04-22 10:15:59 ----A---- C:\Windows\SYSWOW64\KBDSF.DLL
2013-04-22 10:15:59 ----A---- C:\Windows\SYSWOW64\itircl.dll
2013-04-22 10:15:59 ----A---- C:\Windows\system32\mscorier.dll
2013-04-22 10:15:59 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2013-04-22 10:15:59 ----A---- C:\Windows\system32\LogonUI.exe
2013-04-22 10:15:59 ----A---- C:\Windows\system32\KBDTUF.DLL
2013-04-22 10:15:59 ----A---- C:\Windows\system32\KBDINBEN.DLL
2013-04-22 10:15:59 ----A---- C:\Windows\system32\KBDGKL.DLL
2013-04-22 10:15:59 ----A---- C:\Windows\system32\IPSECSVC.DLL
2013-04-22 10:15:58 ----A---- C:\Windows\SYSWOW64\nshipsec.dll
2013-04-22 10:15:58 ----A---- C:\Windows\SYSWOW64\logman.exe
2013-04-22 10:15:58 ----A---- C:\Windows\system32\netutils.dll
2013-04-22 10:15:58 ----A---- C:\Windows\system32\mblctr.exe
2013-04-22 10:15:58 ----A---- C:\Windows\system32\luainstall.dll
2013-04-22 10:15:58 ----A---- C:\Windows\system32\logoff.exe
2013-04-22 10:15:58 ----A---- C:\Windows\system32\KBDUS.DLL
2013-04-22 10:15:57 ----A---- C:\Windows\SYSWOW64\OnLineIDCpl.dll
2013-04-22 10:15:57 ----A---- C:\Windows\SYSWOW64\ocsetup.exe
2013-04-22 10:15:57 ----A---- C:\Windows\SYSWOW64\ocsetapi.dll
2013-04-22 10:15:57 ----A---- C:\Windows\system32\OpcServices.dll
2013-04-22 10:15:57 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2013-04-22 10:15:57 ----A---- C:\Windows\system32\ole32.dll
2013-04-22 10:15:56 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2013-04-22 10:15:56 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2013-04-22 10:15:56 ----A---- C:\Windows\system32\msrle32.dll
2013-04-22 10:15:56 ----A---- C:\Windows\system32\mspbda.dll
2013-04-22 10:15:56 ----A---- C:\Windows\system32\msdmo.dll
2013-04-22 10:15:55 ----A---- C:\Windows\SYSWOW64\NAPCRYPT.DLL
2013-04-22 10:15:55 ----A---- C:\Windows\SYSWOW64\MuiUnattend.exe
2013-04-22 10:15:55 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2013-04-22 10:15:55 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2013-04-22 10:15:55 ----A---- C:\Windows\system32\muifontsetup.dll
2013-04-22 10:15:55 ----A---- C:\Windows\system32\msvidc32.dll
2013-04-22 10:15:55 ----A---- C:\Windows\system32\msdrm.dll
2013-04-22 10:15:55 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2013-04-22 10:15:55 ----A---- C:\Windows\system32\drivers\msdsm.sys
2013-04-22 10:15:55 ----A---- C:\Windows\system32\CscMig.dll
2013-04-22 10:15:54 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-04-22 10:15:54 ----A---- C:\Windows\SYSWOW64\credui.dll
2013-04-22 10:15:54 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2013-04-22 10:15:54 ----A---- C:\Windows\system32\choice.exe
2013-04-22 10:15:54 ----A---- C:\Windows\system32\chgusr.exe
2013-04-22 10:15:54 ----A---- C:\Windows\system32\drivers\csc.sys
2013-04-22 10:15:54 ----A---- C:\Windows\system32\dot3cfg.dll
2013-04-22 10:15:54 ----A---- C:\Windows\system32\d3d11.dll
2013-04-22 10:15:53 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2013-04-22 10:15:53 ----A---- C:\Windows\SYSWOW64\dot3ui.dll
2013-04-22 10:15:53 ----A---- C:\Windows\SYSWOW64\dot3cfg.dll
2013-04-22 10:15:53 ----A---- C:\Windows\SYSWOW64\autochk.exe
2013-04-22 10:15:53 ----A---- C:\Windows\SYSWOW64\accessibilitycpl.dll
2013-04-22 10:15:53 ----A---- C:\Windows\system32\diskraid.exe
2013-04-22 10:15:53 ----A---- C:\Windows\system32\asycfilt.dll
2013-04-22 10:15:53 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2013-04-22 10:15:52 ----A---- C:\Windows\SYSWOW64\AdmTmpl.dll
2013-04-22 10:15:52 ----A---- C:\Windows\system32\chgport.exe
2013-04-22 10:15:52 ----A---- C:\Windows\system32\chglogon.exe
2013-04-22 10:15:52 ----A---- C:\Windows\system32\change.exe
2013-04-22 10:15:52 ----A---- C:\Windows\system32\cca.dll
2013-04-22 10:15:52 ----A---- C:\Windows\system32\apphelp.dll
2013-04-22 10:15:51 ----A---- C:\Windows\SYSWOW64\gpprefcl.dll
2013-04-22 10:15:51 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2013-04-22 10:15:51 ----A---- C:\Windows\SYSWOW64\cabview.dll
2013-04-22 10:15:51 ----A---- C:\Windows\system32\IcCoinstall.dll
2013-04-22 10:15:51 ----A---- C:\Windows\system32\iasrad.dll
2013-04-22 10:15:51 ----A---- C:\Windows\system32\iasacct.dll
2013-04-22 10:15:51 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2013-04-22 10:15:51 ----A---- C:\Windows\system32\fveapi.dll
2013-04-22 10:15:51 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2013-04-22 10:15:50 ----A---- C:\Windows\SYSWOW64\imm32.dll
2013-04-22 10:15:50 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2013-04-22 10:15:50 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2013-04-22 10:15:50 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2013-04-22 10:15:50 ----A---- C:\Windows\SYSWOW64\DxpTaskSync.dll
2013-04-22 10:15:50 ----A---- C:\Windows\SYSWOW64\dxdiagn.dll
2013-04-22 10:15:50 ----A---- C:\Windows\system32\imapi2.dll
2013-04-22 10:15:50 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2013-04-22 10:15:49 ----A---- C:\Windows\SYSWOW64\fde.dll
2013-04-22 10:15:49 ----A---- C:\Windows\SYSWOW64\elsTrans.dll
2013-04-22 10:15:49 ----A---- C:\Windows\SYSWOW64\efscore.dll
2013-04-22 10:15:49 ----A---- C:\Windows\system32\fontext.dll
2013-04-22 10:15:49 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2013-04-22 10:15:48 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2013-04-22 10:15:48 ----A---- C:\Windows\SYSWOW64\TRAPI.dll
2013-04-22 10:15:48 ----A---- C:\Windows\SYSWOW64\themeui.dll
2013-04-22 10:15:48 ----A---- C:\Windows\system32\UIRibbon.dll
2013-04-22 10:15:48 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-04-22 10:15:48 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-04-22 10:15:48 ----A---- C:\Windows\system32\tsmf.dll
2013-04-22 10:15:48 ----A---- C:\Windows\system32\tskill.exe
2013-04-22 10:15:48 ----A---- C:\Windows\system32\tsdiscon.exe
2013-04-22 10:15:48 ----A---- C:\Windows\system32\tscon.exe
2013-04-22 10:15:48 ----A---- C:\Windows\system32\TRAPI.dll
2013-04-22 10:15:47 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2013-04-22 10:15:47 ----A---- C:\Windows\system32\UIRibbonRes.dll
2013-04-22 10:15:47 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-04-22 10:15:46 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2013-04-22 10:15:46 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2013-04-22 10:15:46 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2013-04-22 10:15:46 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll
2013-04-22 10:15:46 ----A---- C:\Windows\system32\termsrv.dll
2013-04-22 10:15:46 ----A---- C:\Windows\system32\taskmgr.exe
2013-04-22 10:15:46 ----A---- C:\Windows\system32\taskbarcpl.dll
2013-04-22 10:15:46 ----A---- C:\Windows\system32\takeown.exe
2013-04-22 10:15:46 ----A---- C:\Windows\system32\t2embed.dll
2013-04-22 10:15:46 ----A---- C:\Windows\system32\syssetup.dll
2013-04-22 10:15:45 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2013-04-22 10:15:45 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2013-04-22 10:15:45 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2013-04-22 10:15:45 ----A---- C:\Windows\SYSWOW64\WMPEncEn.dll
2013-04-22 10:15:45 ----A---- C:\Windows\SYSWOW64\wlanui.dll
2013-04-22 10:15:45 ----A---- C:\Windows\SYSWOW64\winmm.dll
2013-04-22 10:15:45 ----A---- C:\Windows\system32\WMNetMgr.dll
2013-04-22 10:15:45 ----A---- C:\Windows\system32\WinSAT.exe
2013-04-22 10:15:44 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2013-04-22 10:15:44 ----A---- C:\Windows\system32\XpsRasterService.dll
2013-04-22 10:15:44 ----A---- C:\Windows\system32\wvc.dll
2013-04-22 10:15:44 ----A---- C:\Windows\system32\wusa.exe
2013-04-22 10:15:44 ----A---- C:\Windows\system32\wpdshext.dll
2013-04-22 10:15:43 ----A---- C:\Windows\SYSWOW64\wdscore.dll
2013-04-22 10:15:43 ----A---- C:\Windows\SYSWOW64\wbemcomn.dll
2013-04-22 10:15:43 ----A---- C:\Windows\SYSWOW64\usercpl.dll
2013-04-22 10:15:43 ----A---- C:\Windows\SYSWOW64\user32.dll
2013-04-22 10:15:43 ----A---- C:\Windows\SYSWOW64\upnp.dll
2013-04-22 10:15:43 ----A---- C:\Windows\system32\wsnmp32.dll
2013-04-22 10:15:43 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2013-04-22 10:15:43 ----A---- C:\Windows\system32\WMVSDECD.DLL
2013-04-22 10:15:43 ----A---- C:\Windows\system32\wdc.dll
2013-04-22 10:15:43 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2013-04-22 10:15:43 ----A---- C:\Windows\system32\drivers\wanarp.sys
2013-04-22 10:15:43 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2013-04-22 10:15:43 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2013-04-22 10:15:42 ----A---- C:\Windows\system32\vmictimeprovider.dll
2013-04-22 10:15:42 ----A---- C:\Windows\system32\vmicsvc.exe
2013-04-22 10:15:42 ----A---- C:\Windows\system32\vmicres.dll
2013-04-22 10:15:42 ----A---- C:\Windows\system32\SyncCenter.dll
2013-04-22 10:15:42 ----A---- C:\Windows\system32\Robocopy.exe
2013-04-22 10:15:41 ----A---- C:\Windows\SYSWOW64\schedcli.dll
2013-04-22 10:15:41 ----A---- C:\Windows\SYSWOW64\relog.exe
2013-04-22 10:15:41 ----A---- C:\Windows\system32\schedsvc.dll
2013-04-22 10:15:41 ----A---- C:\Windows\system32\scesrv.dll
2013-04-22 10:15:41 ----A---- C:\Windows\system32\scansetting.dll
2013-04-22 10:15:41 ----A---- C:\Windows\system32\rwinsta.exe
2013-04-22 10:15:41 ----A---- C:\Windows\system32\runonce.exe
2013-04-22 10:15:41 ----A---- C:\Windows\system32\rtutils.dll
2013-04-22 10:15:41 ----A---- C:\Windows\system32\riched32.dll
2013-04-22 10:15:41 ----A---- C:\Windows\system32\riched20.dll
2013-04-22 10:15:41 ----A---- C:\Windows\system32\reset.exe
2013-04-22 10:15:41 ----A---- C:\Windows\system32\regapi.dll
2013-04-22 10:15:40 ----A---- C:\Windows\SYSWOW64\rastls.dll
2013-04-22 10:15:40 ----A---- C:\Windows\SYSWOW64\rastapi.dll
2013-04-22 10:15:40 ----A---- C:\Windows\SYSWOW64\qcap.dll
2013-04-22 10:15:40 ----A---- C:\Windows\SYSWOW64\powercpl.dll
2013-04-22 10:15:40 ----A---- C:\Windows\SYSWOW64\PortableDeviceSyncProvider.dll
2013-04-22 10:15:40 ----A---- C:\Windows\SYSWOW64\pla.dll
2013-04-22 10:15:40 ----A---- C:\Windows\SYSWOW64\PerfCenterCPL.dll
2013-04-22 10:15:40 ----A---- C:\Windows\SYSWOW64\pdh.dll
2013-04-22 10:15:40 ----A---- C:\Windows\system32\rdpdd.dll
2013-04-22 10:15:40 ----A---- C:\Windows\system32\rasmans.dll
2013-04-22 10:15:40 ----A---- C:\Windows\system32\qdv.dll
2013-04-22 10:15:40 ----A---- C:\Windows\system32\qappsrv.exe
2013-04-22 10:15:40 ----A---- C:\Windows\system32\perfmon.exe
2013-04-22 10:15:40 ----A---- C:\Windows\system32\drivers\rdbss.sys
2013-04-22 10:15:40 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2013-04-22 10:15:39 ----A---- C:\Windows\SYSWOW64\sud.dll
2013-04-22 10:15:39 ----A---- C:\Windows\SYSWOW64\sppcomapi.dll
2013-04-22 10:15:39 ----A---- C:\Windows\SYSWOW64\slwga.dll
2013-04-22 10:15:39 ----A---- C:\Windows\system32\StructuredQuery.dll
2013-04-22 10:15:39 ----A---- C:\Windows\system32\spwizui.dll
2013-04-22 10:15:39 ----A---- C:\Windows\system32\spreview.exe
2013-04-22 10:15:39 ----A---- C:\Windows\system32\sppwinob.dll
2013-04-22 10:15:39 ----A---- C:\Windows\system32\sppcomapi.dll
2013-04-22 10:15:39 ----A---- C:\Windows\system32\spinstall.exe
2013-04-22 10:15:39 ----A---- C:\Windows\system32\SmiEngine.dll
2013-04-22 10:15:39 ----A---- C:\Windows\system32\slui.exe
2013-04-22 10:15:39 ----A---- C:\Windows\system32\query.exe
2013-04-22 10:15:39 ----A---- C:\Windows\system32\qprocess.exe
2013-04-22 10:15:39 ----A---- C:\Windows\system32\PushPrinterConnections.exe
2013-04-22 10:15:38 ----A---- C:\Windows\SYSWOW64\setupcln.dll
2013-04-22 10:15:38 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2013-04-22 10:15:38 ----A---- C:\Windows\system32\srrstr.dll
2013-04-22 10:15:38 ----A---- C:\Windows\system32\shunimpl.dll
2013-04-22 10:15:38 ----A---- C:\Windows\system32\sharemediacpl.dll
2013-04-22 10:15:38 ----A---- C:\Windows\system32\shadow.exe
2013-04-22 10:15:38 ----A---- C:\Windows\system32\logman.exe
2013-04-22 10:15:37 ----A---- C:\Windows\SYSWOW64\migisol.dll
2013-04-22 10:15:37 ----A---- C:\Windows\SYSWOW64\KBDUGHR1.DLL
2013-04-22 10:15:37 ----A---- C:\Windows\SYSWOW64\KBDTUF.DLL
2013-04-22 10:15:37 ----A---- C:\Windows\SYSWOW64\KBDSG.DLL
2013-04-22 10:15:37 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2013-04-22 10:15:37 ----A---- C:\Windows\system32\mcbuilder.exe
2013-04-22 10:15:37 ----A---- C:\Windows\system32\manage-bde.exe
2013-04-22 10:15:37 ----A---- C:\Windows\system32\lpksetup.exe
2013-04-22 10:15:37 ----A---- C:\Windows\system32\KMSVC.DLL
2013-04-22 10:15:37 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2013-04-22 10:15:37 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2013-04-22 10:15:37 ----A---- C:\Windows\system32\KBDSG.DLL
2013-04-22 10:15:36 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2013-04-22 10:15:36 ----A---- C:\Windows\system32\KBDBULG.DLL
2013-04-22 10:15:36 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2013-04-22 10:15:36 ----A---- C:\Windows\system32\IKEEXT.DLL
2013-04-22 10:15:36 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2013-04-22 10:15:36 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys
2013-04-22 10:15:35 ----A---- C:\Windows\SYSWOW64\odbcconf.dll
2013-04-22 10:15:35 ----A---- C:\Windows\SYSWOW64\netshell.dll
2013-04-22 10:15:35 ----A---- C:\Windows\SYSWOW64\KBDPO.DLL
2013-04-22 10:15:35 ----A---- C:\Windows\SYSWOW64\KBDMAORI.DLL
2013-04-22 10:15:35 ----A---- C:\Windows\SYSWOW64\KBDINORI.DLL
2013-04-22 10:15:35 ----A---- C:\Windows\SYSWOW64\KBDINKAN.DLL
2013-04-22 10:15:35 ----A---- C:\Windows\SYSWOW64\KBDBLR.DLL
2013-04-22 10:15:35 ----A---- C:\Windows\SYSWOW64\isoburn.exe
2013-04-22 10:15:35 ----A---- C:\Windows\SYSWOW64\iscsium.dll
2013-04-22 10:15:35 ----A---- C:\Windows\SYSWOW64\iscsicli.exe
2013-04-22 10:15:35 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2013-04-22 10:15:35 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll
2013-04-22 10:15:35 ----A---- C:\Windows\system32\odbc32.dll
2013-04-22 10:15:35 ----A---- C:\Windows\system32\KBDNEPR.DLL
2013-04-22 10:15:35 ----A---- C:\Windows\system32\kbdlk41a.dll
2013-04-22 10:15:35 ----A---- C:\Windows\system32\KBDINKAN.DLL
2013-04-22 10:15:35 ----A---- C:\Windows\system32\KBDINHIN.DLL
2013-04-22 10:15:35 ----A---- C:\Windows\system32\iTVData.dll
2013-04-22 10:15:35 ----A---- C:\Windows\system32\iprtrmgr.dll
2013-04-22 10:15:34 ----A---- C:\Windows\SYSWOW64\pnidui.dll
2013-04-22 10:15:34 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2013-04-22 10:15:34 ----A---- C:\Windows\SYSWOW64\networkmap.dll
2013-04-22 10:15:34 ----A---- C:\Windows\SYSWOW64\networkexplorer.dll
2013-04-22 10:15:34 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2013-04-22 10:15:34 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2013-04-22 10:15:34 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2013-04-22 10:15:34 ----A---- C:\Windows\system32\PnPUnattend.exe
2013-04-22 10:15:34 ----A---- C:\Windows\system32\nrpsrv.dll
2013-04-22 10:15:34 ----A---- C:\Windows\system32\nlsbres.dll
2013-04-22 10:15:34 ----A---- C:\Windows\system32\netid.dll
2013-04-22 10:15:34 ----A---- C:\Windows\system32\drivers\netbt.sys
2013-04-22 10:15:33 ----A---- C:\Windows\SYSWOW64\olethk32.dll
2013-04-22 10:15:33 ----A---- C:\Windows\SYSWOW64\ole32.dll
2013-04-22 10:15:33 ----A---- C:\Windows\SYSWOW64\muifontsetup.dll
2013-04-22 10:15:33 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2013-04-22 10:15:33 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2013-04-22 10:15:33 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2013-04-22 10:15:33 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2013-04-22 10:15:33 ----A---- C:\Windows\system32\mswsock.dll
2013-04-22 10:15:33 ----A---- C:\Windows\system32\mscoree.dll
2013-04-22 10:15:33 ----A---- C:\Windows\system32\mscms.dll
2013-04-22 10:15:33 ----A---- C:\Windows\system32\MPSSVC.dll
2013-04-22 10:15:33 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2013-04-22 10:15:33 ----A---- C:\Windows\system32\drivers\mpio.sys
2013-04-22 10:15:32 ----A---- C:\Windows\SYSWOW64\nci.dll
2013-04-22 10:15:32 ----A---- C:\Windows\SYSWOW64\napdsnap.dll
2013-04-22 10:15:32 ----A---- C:\Windows\system32\NAPHLPR.DLL
2013-04-22 10:15:32 ----A---- C:\Windows\system32\napdsnap.dll
2013-04-22 10:15:32 ----A---- C:\Windows\system32\msnetobj.dll
2013-04-22 10:15:32 ----A---- C:\Windows\system32\msiexec.exe
2013-04-22 10:15:32 ----A---- C:\Windows\system32\msftedit.dll
2013-04-22 10:15:31 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2013-04-22 10:15:31 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2013-04-22 10:15:31 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2013-04-22 10:15:31 ----A---- C:\Windows\SYSWOW64\credssp.dll
2013-04-22 10:15:31 ----A---- C:\Windows\SYSWOW64\CertPolEng.dll
2013-04-22 10:15:31 ----A---- C:\Windows\SYSWOW64\calc.exe
2013-04-22 10:15:31 ----A---- C:\Windows\system32\msv1_0.dll
2013-04-22 10:15:31 ----A---- C:\Windows\system32\mstask.dll
2013-04-22 10:15:31 ----A---- C:\Windows\system32\msscp.dll
2013-04-22 10:15:31 ----A---- C:\Windows\system32\cryptui.dll
2013-04-22 10:15:31 ----A---- C:\Windows\system32\clusapi.dll
2013-04-22 10:15:31 ----A---- C:\Windows\system32\CertEnroll.dll
2013-04-22 10:15:31 ----A---- C:\Windows\system32\cabview.dll
2013-04-22 10:15:31 ----A---- C:\Windows\system32\browseui.dll
2013-04-22 10:15:30 ----A---- C:\Windows\SYSWOW64\DevicePairingFolder.dll
2013-04-22 10:15:30 ----A---- C:\Windows\system32\drivers\dfsc.sys
2013-04-22 10:15:30 ----A---- C:\Windows\system32\dhcpcore.dll
2013-04-22 10:15:30 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2013-04-22 10:15:30 ----A---- C:\Windows\system32\cscobj.dll
2013-04-22 10:15:30 ----A---- C:\Windows\system32\certprop.dll
2013-04-22 10:15:29 ----A---- C:\Windows\SYSWOW64\batmeter.dll
2013-04-22 10:15:29 ----A---- C:\Windows\SYSWOW64\appmgr.dll
2013-04-22 10:15:29 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2013-04-22 10:15:29 ----A---- C:\Windows\SYSWOW64\ActionCenterCPL.dll
2013-04-22 10:15:29 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2013-04-22 10:15:29 ----A---- C:\Windows\SYSWOW64\acppage.dll
2013-04-22 10:15:29 ----A---- C:\Windows\system32\drivers\acpi.sys
2013-04-22 10:15:29 ----A---- C:\Windows\system32\BFE.DLL
2013-04-22 10:15:29 ----A---- C:\Windows\system32\bcryptprimitives.dll
2013-04-22 10:15:29 ----A---- C:\Windows\system32\basecsp.dll
2013-04-22 10:15:29 ----A---- C:\Windows\bfsvc.exe
2013-04-22 10:15:28 ----A---- C:\Windows\SYSWOW64\FirewallControlPanel.dll
2013-04-22 10:15:28 ----A---- C:\Windows\SYSWOW64\findstr.exe
2013-04-22 10:15:28 ----A---- C:\Windows\system32\hgcpl.dll
2013-04-22 10:15:28 ----A---- C:\Windows\system32\gdi32.dll
2013-04-22 10:15:28 ----A---- C:\Windows\system32\fphc.dll
2013-04-22 10:15:28 ----A---- C:\Windows\system32\fms.dll
2013-04-22 10:15:28 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2013-04-22 10:15:28 ----A---- C:\Windows\system32\BlbEvents.dll
2013-04-22 10:15:28 ----A---- C:\Windows\system32\blackbox.dll
2013-04-22 10:15:28 ----A---- C:\Windows\system32\biocpl.dll
2013-04-22 10:15:28 ----A---- C:\Windows\system32\AxInstSv.dll
2013-04-22 10:15:28 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2013-04-22 10:15:28 ----A---- C:\Windows\system32\autochk.exe
2013-04-22 10:15:27 ----A---- C:\Windows\SYSWOW64\hgcpl.dll
2013-04-22 10:15:27 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2013-04-22 10:15:27 ----A---- C:\Windows\SYSWOW64\ftp.exe
2013-04-22 10:15:27 ----A---- C:\Windows\system32\hgprint.dll
2013-04-22 10:15:27 ----A---- C:\Windows\system32\FXSUNATD.exe
2013-04-22 10:15:27 ----A---- C:\Windows\system32\FXSSVC.exe
2013-04-22 10:15:27 ----A---- C:\Windows\system32\FXSMON.dll
2013-04-22 10:15:27 ----A---- C:\Windows\system32\drmmgrtn.dll
2013-04-22 10:15:27 ----A---- C:\Windows\system32\drivers\hidusb.sys
2013-04-22 10:15:27 ----A---- C:\Windows\system32\drivers\hidclass.sys
2013-04-22 10:15:26 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll
2013-04-22 10:15:26 ----A---- C:\Windows\SYSWOW64\dsauth.dll
2013-04-22 10:15:26 ----A---- C:\Windows\SYSWOW64\dpx.dll
2013-04-22 10:15:26 ----A---- C:\Windows\SYSWOW64\dnscmmc.dll
2013-04-22 10:15:26 ----A---- C:\Windows\system32\DXP.dll
2013-04-22 10:15:26 ----A---- C:\Windows\system32\dot3ui.dll
2013-04-22 10:15:26 ----A---- C:\Windows\system32\diskpart.exe
2013-04-22 10:15:25 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2013-04-22 10:15:25 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2013-04-22 10:15:25 ----A---- C:\Windows\SYSWOW64\takeown.exe
2013-04-22 10:15:25 ----A---- C:\Windows\SYSWOW64\fdeploy.dll
2013-04-22 10:15:25 ----A---- C:\Windows\SYSWOW64\eudcedit.exe
2013-04-22 10:15:25 ----A---- C:\Windows\system32\tlscsp.dll
2013-04-22 10:15:25 ----A---- C:\Windows\system32\eudcedit.exe
2013-04-22 10:15:25 ----A---- C:\Windows\system32\DxpTaskSync.dll
2013-04-22 10:15:25 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2013-04-22 10:15:24 ----A---- C:\Windows\SYSWOW64\unimdmat.dll
2013-04-22 10:15:24 ----A---- C:\Windows\SYSWOW64\twext.dll
2013-04-22 10:15:24 ----A---- C:\Windows\system32\upnp.dll
2013-04-22 10:15:24 ----A---- C:\Windows\system32\untfs.dll
2013-04-22 10:15:24 ----A---- C:\Windows\system32\tzutil.exe
2013-04-22 10:15:24 ----A---- C:\Windows\system32\twext.dll
2013-04-22 10:15:24 ----A---- C:\Windows\system32\themecpl.dll
2013-04-22 10:15:24 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2013-04-22 10:15:24 ----A---- C:\Windows\system32\drivers\udfs.sys
2013-04-22 10:15:24 ----A---- C:\Windows\system32\drivers\tunnel.sys
2013-04-22 10:15:24 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-04-22 10:15:23 ----A---- C:\Windows\SYSWOW64\stobject.dll
2013-04-22 10:15:21 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2013-04-22 10:15:21 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2013-04-22 10:15:21 ----A---- C:\Windows\system32\wmpsrcwp.dll
2013-04-22 10:15:21 ----A---- C:\Windows\system32\WMPhoto.dll
2013-04-22 10:15:21 ----A---- C:\Windows\system32\wlanmsm.dll
2013-04-22 10:15:21 ----A---- C:\Windows\system32\wlangpui.dll
2013-04-22 10:15:21 ----A---- C:\Windows\system32\wkscli.dll
2013-04-22 10:15:20 ----A---- C:\Windows\SYSWOW64\wsnmp32.dll
2013-04-22 10:15:20 ----A---- C:\Windows\system32\wmdrmsdk.dll
2013-04-22 10:15:20 ----A---- C:\Windows\system32\winlogon.exe
2013-04-22 10:15:20 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-04-22 10:15:20 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2013-04-22 10:15:19 ----A---- C:\Windows\SYSWOW64\wusa.exe
2013-04-22 10:15:19 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2013-04-22 10:15:19 ----A---- C:\Windows\SYSWOW64\WPDShServiceObj.dll
2013-04-22 10:15:19 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2013-04-22 10:15:19 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2013-04-22 10:15:19 ----A---- C:\Windows\system32\wwanprotdim.dll
2013-04-22 10:15:19 ----A---- C:\Windows\system32\WsmSvc.dll
2013-04-22 10:15:19 ----A---- C:\Windows\system32\WSDApi.dll
2013-04-22 10:15:19 ----A---- C:\Windows\system32\WPDSp.dll
2013-04-22 10:15:19 ----A---- C:\Windows\system32\vfwwdm32.dll
2013-04-22 10:15:19 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2013-04-22 10:15:18 ----A---- C:\Windows\SYSWOW64\wer.dll
2013-04-22 10:15:18 ----A---- C:\Windows\SYSWOW64\webservices.dll
2013-04-22 10:15:18 ----A---- C:\Windows\SYSWOW64\w32tm.exe
2013-04-22 10:15:18 ----A---- C:\Windows\SYSWOW64\Vault.dll
2013-04-22 10:15:18 ----A---- C:\Windows\SYSWOW64\userinit.exe
2013-04-22 10:15:18 ----A---- C:\Windows\SYSWOW64\userenv.dll
2013-04-22 10:15:18 ----A---- C:\Windows\system32\wevtsvc.dll
2013-04-22 10:15:18 ----A---- C:\Windows\system32\werconcpl.dll
2013-04-22 10:15:18 ----A---- C:\Windows\system32\webservices.dll
2013-04-22 10:15:18 ----A---- C:\Windows\system32\vdsutil.dll
2013-04-22 10:15:18 ----A---- C:\Windows\system32\vds.exe
2013-04-22 10:15:18 ----A---- C:\Windows\system32\VAN.dll
2013-04-22 10:15:17 ----A---- C:\Windows\SYSWOW64\wimserv.exe
2013-04-22 10:15:17 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2013-04-22 10:15:17 ----A---- C:\Windows\SYSWOW64\wiavideo.dll
2013-04-22 10:15:17 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2013-04-22 10:15:17 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2013-04-22 10:15:17 ----A---- C:\Windows\SYSWOW64\remotepg.dll
2013-04-22 10:15:17 ----A---- C:\Windows\SYSWOW64\ReAgentc.exe
2013-04-22 10:15:17 ----A---- C:\Windows\SYSWOW64\rdpd3d.dll
2013-04-22 10:15:17 ----A---- C:\Windows\system32\wiadefui.dll
2013-04-22 10:15:17 ----A---- C:\Windows\system32\wcncsvc.dll
2013-04-22 10:15:17 ----A---- C:\Windows\system32\wavemsp.dll
2013-04-22 10:15:17 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2013-04-22 10:15:17 ----A---- C:\Windows\system32\relog.exe
2013-04-22 10:15:17 ----A---- C:\Windows\system32\rastls.dll
2013-04-22 10:15:17 ----A---- C:\Windows\system32\drivers\scfilter.sys
2013-04-22 10:15:17 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2013-04-22 10:15:16 ----A---- C:\Windows\SYSWOW64\scecli.dll
2013-04-22 10:15:16 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2013-04-22 10:15:16 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll
2013-04-22 10:15:16 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2013-04-22 10:15:16 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2013-04-22 10:15:16 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL
2013-04-22 10:15:16 ----A---- C:\Windows\system32\scecli.dll
2013-04-22 10:15:16 ----A---- C:\Windows\system32\rpcrt4.dll
2013-04-22 10:15:16 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2013-04-22 10:15:16 ----A---- C:\Windows\system32\QCLIPROV.DLL
2013-04-22 10:15:16 ----A---- C:\Windows\system32\QAGENTRT.DLL
2013-04-22 10:15:16 ----A---- C:\Windows\system32\proquota.exe
2013-04-22 10:15:16 ----A---- C:\Windows\system32\propsys.dll
2013-04-22 10:15:15 ----A---- C:\Windows\SYSWOW64\QUTIL.DLL
2013-04-22 10:15:15 ----A---- C:\Windows\SYSWOW64\QCLIPROV.DLL
2013-04-22 10:15:15 ----A---- C:\Windows\SYSWOW64\prntvpt.dll
2013-04-22 10:15:15 ----A---- C:\Windows\system32\raschap.dll
2013-04-22 10:15:15 ----A---- C:\Windows\system32\RacEngn.dll
2013-04-22 10:15:15 ----A---- C:\Windows\system32\Query.dll
2013-04-22 10:15:15 ----A---- C:\Windows\system32\qmgr.dll
2013-04-22 10:15:15 ----A---- C:\Windows\system32\QAGENT.DLL
2013-04-22 10:15:14 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll
2013-04-22 10:15:14 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2013-04-22 10:15:14 ----A---- C:\Windows\system32\sqlcese30.dll
2013-04-22 10:15:14 ----A---- C:\Windows\system32\shsvcs.dll
2013-04-22 10:15:13 ----A---- C:\Windows\system32\sppnp.dll
2013-04-22 10:15:13 ----A---- C:\Windows\system32\spopk.dll
2013-04-22 10:15:12 ----A---- C:\Windows\SYSWOW64\mfds.dll
2013-04-22 10:15:12 ----A---- C:\Windows\SYSWOW64\mf.dll
2013-04-22 10:15:12 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2013-04-22 10:15:12 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe
2013-04-22 10:15:12 ----A---- C:\Windows\SYSWOW64\mapistub.dll
2013-04-22 10:15:11 ----A---- C:\Windows\SYSWOW64\mprddm.dll
2013-04-22 10:15:11 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2013-04-22 10:15:11 ----A---- C:\Windows\SYSWOW64\KBDNEPR.DLL
2013-04-22 10:15:11 ----A---- C:\Windows\SYSWOW64\KBDGR1.DLL
2013-04-22 10:15:11 ----A---- C:\Windows\SYSWOW64\KBDGEO.DLL
2013-04-22 10:15:11 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2013-04-22 10:15:11 ----A---- C:\Windows\system32\mmcndmgr.dll
2013-04-22 10:15:11 ----A---- C:\Windows\system32\KBDMON.DLL
2013-04-22 10:15:11 ----A---- C:\Windows\system32\KBDINMAR.DLL
2013-04-22 10:15:11 ----A---- C:\Windows\system32\KBDGEO.DLL
2013-04-22 10:15:11 ----A---- C:\Windows\system32\iyuv_32.dll
2013-04-22 10:15:10 ----A---- C:\Windows\SYSWOW64\nslookup.exe
2013-04-22 10:15:10 ----A---- C:\Windows\SYSWOW64\mapi32.dll
2013-04-22 10:15:10 ----A---- C:\Windows\SYSWOW64\KBDTURME.DLL
2013-04-22 10:15:10 ----A---- C:\Windows\SYSWOW64\KBDTUQ.DLL
2013-04-22 10:15:10 ----A---- C:\Windows\system32\ntlanman.dll
2013-04-22 10:15:10 ----A---- C:\Windows\system32\logoncli.dll
2013-04-22 10:15:10 ----A---- C:\Windows\system32\KBDSF.DLL
2013-04-22 10:15:10 ----A---- C:\Windows\system32\KBDPO.DLL
2013-04-22 10:15:09 ----A---- C:\Windows\SYSWOW64\PortableDeviceStatus.dll
2013-04-22 10:15:09 ----A---- C:\Windows\SYSWOW64\pifmgr.dll
2013-04-22 10:15:09 ----A---- C:\Windows\SYSWOW64\onexui.dll
2013-04-22 10:15:09 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2013-04-22 10:15:09 ----A---- C:\Windows\SYSWOW64\netid.dll
2013-04-22 10:15:09 ----A---- C:\Windows\system32\ocsetup.exe
2013-04-22 10:15:09 ----A---- C:\Windows\system32\ocsetapi.dll
2013-04-22 10:15:09 ----A---- C:\Windows\system32\netplwiz.dll
2013-04-22 10:15:09 ----A---- C:\Windows\system32\netfxperf.dll
2013-04-22 10:15:08 ----A---- C:\Windows\SYSWOW64\onex.dll
2013-04-22 10:15:08 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2013-04-22 10:15:08 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2013-04-22 10:15:08 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2013-04-22 10:15:08 ----A---- C:\Windows\system32\odbcconf.dll
2013-04-22 10:15:08 ----A---- C:\Windows\system32\msieftp.dll
2013-04-22 10:15:08 ----A---- C:\Windows\system32\msasn1.dll
2013-04-22 10:15:07 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2013-04-22 10:15:07 ----A---- C:\Windows\SYSWOW64\msvfw32.dll
2013-04-22 10:15:07 ----A---- C:\Windows\system32\net1.exe
2013-04-22 10:15:07 ----A---- C:\Windows\system32\ncryptui.dll
2013-04-22 10:15:07 ----A---- C:\Windows\system32\mydocs.dll
2013-04-22 10:15:07 ----A---- C:\Windows\system32\msyuv.dll
2013-04-22 10:15:07 ----A---- C:\Windows\system32\mstsc.exe
2013-04-22 10:15:06 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2013-04-22 10:15:05 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2013-04-22 10:15:05 ----A---- C:\Windows\SYSWOW64\certcli.dll
2013-04-22 10:15:05 ----A---- C:\Windows\system32\cmstp.exe
2013-04-22 10:15:04 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2013-04-22 10:15:04 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2013-04-22 10:15:04 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2013-04-22 10:15:04 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-04-22 10:15:04 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2013-04-22 10:15:04 ----A---- C:\Windows\system32\DeviceCenter.dll
2013-04-22 10:15:04 ----A---- C:\Windows\system32\davclnt.dll
2013-04-22 10:15:04 ----A---- C:\Windows\system32\d3d10warp.dll
2013-04-22 10:15:03 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2013-04-22 10:15:03 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2013-04-22 10:15:03 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2013-04-22 10:15:03 ----A---- C:\Windows\SYSWOW64\adsldp.dll
2013-04-22 10:15:03 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2013-04-22 10:15:03 ----A---- C:\Windows\system32\cabinet.dll
2013-04-22 10:15:03 ----A---- C:\Windows\system32\bcdboot.exe
2013-04-22 10:15:03 ----A---- C:\Windows\system32\autoplay.dll
2013-04-22 10:15:03 ----A---- C:\Windows\system32\autofmt.exe
2013-04-22 10:15:03 ----A---- C:\Windows\system32\actxprxy.dll
2013-04-22 10:15:03 ----A---- C:\Windows\system32\ActionQueue.dll
2013-04-22 10:15:03 ----A---- C:\Windows\system32\ActionCenter.dll
2013-04-22 10:15:03 ----A---- C:\Windows\system32\accessibilitycpl.dll
2013-04-22 10:15:02 ----A---- C:\Windows\SYSWOW64\iasrad.dll
2013-04-22 10:15:02 ----A---- C:\Windows\SYSWOW64\iasacct.dll
2013-04-22 10:15:02 ----A---- C:\Windows\SYSWOW64\httpapi.dll
2013-04-22 10:15:02 ----A---- C:\Windows\system32\hal.dll
2013-04-22 10:15:02 ----A---- C:\Windows\system32\gpsvc.dll
2013-04-22 10:15:01 ----A---- C:\Windows\system32\inetpp.dll
2013-04-22 10:15:00 ----A---- C:\Windows\system32\evr.dll
2013-04-22 10:15:00 ----A---- C:\Windows\system32\dwmredir.dll
2013-04-22 10:15:00 ----A---- C:\Windows\system32\dsauth.dll
2013-04-22 10:15:00 ----A---- C:\Windows\system32\drvstore.dll
2013-04-22 10:14:59 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2013-04-22 10:14:59 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2013-04-22 10:14:59 ----A---- C:\Windows\SYSWOW64\Display.dll
2013-04-22 10:14:59 ----A---- C:\Windows\system32\efscore.dll
2013-04-22 10:14:59 ----A---- C:\Windows\system32\dot3svc.dll
2013-04-22 10:14:59 ----A---- C:\Windows\system32\dot3msm.dll
2013-04-22 10:14:59 ----A---- C:\Windows\system32\dot3api.dll
2013-04-22 10:14:58 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2013-04-22 10:14:58 ----A---- C:\Windows\SYSWOW64\fontext.dll
2013-04-22 10:14:58 ----A---- C:\Windows\system32\fde.dll
2013-04-22 10:14:57 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2013-04-22 10:14:57 ----A---- C:\Windows\system32\tcpipcfg.dll
2013-04-22 10:14:57 ----A---- C:\Windows\system32\syncui.dll
2013-04-22 10:14:57 ----A---- C:\Windows\system32\drivers\tdx.sys
2013-04-22 10:14:56 ----A---- C:\Windows\SYSWOW64\srchadmin.dll
2013-04-22 10:14:56 ----A---- C:\Windows\SYSWOW64\spwizeng.dll
2013-04-22 10:14:56 ----A---- C:\Windows\SYSWOW64\sppc.dll
2013-04-22 10:14:56 ----A---- C:\Windows\system32\srvcli.dll
2013-04-22 10:14:56 ----A---- C:\Windows\system32\SndVolSSO.dll
2013-04-22 10:14:56 ----A---- C:\Windows\system32\SndVol.exe
2013-04-22 10:14:56 ----A---- C:\Windows\system32\drivers\storvsc.sys
2013-04-22 10:14:55 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2013-04-22 10:14:55 ----A---- C:\Windows\SYSWOW64\wmpps.dll
2013-04-22 10:14:55 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-04-22 10:14:55 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2013-04-22 10:14:55 ----A---- C:\Windows\SYSWOW64\sqlcese30.dll
2013-04-22 10:14:55 ----A---- C:\Windows\SYSWOW64\spwizres.dll
2013-04-22 10:14:55 ----A---- C:\Windows\system32\WinSCard.dll
2013-04-22 10:14:55 ----A---- C:\Windows\system32\WebClnt.dll
2013-04-22 10:14:55 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2013-04-22 10:14:55 ----A---- C:\Windows\system32\wbengine.exe
2013-04-22 10:14:54 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2013-04-22 10:14:54 ----A---- C:\Windows\SYSWOW64\wmpdxm.dll
2013-04-22 10:14:54 ----A---- C:\Windows\SYSWOW64\wmdrmnet.dll
2013-04-22 10:14:54 ----A---- C:\Windows\SYSWOW64\wmdrmdev.dll
2013-04-22 10:14:54 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2013-04-22 10:14:54 ----A---- C:\Windows\system32\wmpdxm.dll
2013-04-22 10:14:54 ----A---- C:\Windows\system32\tsbyuv.dll
2013-04-22 10:14:53 ----A---- C:\Windows\SYSWOW64\uxlib.dll
2013-04-22 10:14:53 ----A---- C:\Windows\SYSWOW64\utildll.dll
2013-04-22 10:14:53 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2013-04-22 10:14:53 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2013-04-22 10:14:53 ----A---- C:\Windows\system32\wbemcomn.dll
2013-04-22 10:14:53 ----A---- C:\Windows\system32\vpnikeapi.dll
2013-04-22 10:14:53 ----A---- C:\Windows\system32\vpnike.dll
2013-04-22 10:14:53 ----A---- C:\Windows\system32\vmstorfltres.dll
2013-04-22 10:14:53 ----A---- C:\Windows\system32\VmdCoinstall.dll
2013-04-22 10:14:53 ----A---- C:\Windows\system32\Vault.dll
2013-04-22 10:14:53 ----A---- C:\Windows\system32\secproc_ssp.dll
2013-04-22 10:14:53 ----A---- C:\Windows\system32\drivers\vmstorfl.sys
2013-04-22 10:14:52 ----A---- C:\Windows\system32\schtasks.exe
2013-04-22 10:14:52 ----A---- C:\Windows\system32\schedcli.dll
2013-04-22 10:14:51 ----A---- C:\Windows\SYSWOW64\riched32.dll
2013-04-22 10:14:51 ----A---- C:\Windows\SYSWOW64\riched20.dll
2013-04-22 10:14:51 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL
2013-04-22 10:14:51 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2013-04-22 10:14:51 ----A---- C:\Windows\SYSWOW64\qdv.dll
2013-04-22 10:14:51 ----A---- C:\Windows\SYSWOW64\qasf.dll
2013-04-22 10:14:51 ----A---- C:\Windows\SYSWOW64\proquota.exe
2013-04-22 10:14:51 ----A---- C:\Windows\SYSWOW64\prnfldr.dll
2013-04-22 10:14:51 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2013-04-22 10:14:51 ----A---- C:\Windows\system32\QUTIL.DLL
2013-04-22 10:14:51 ----A---- C:\Windows\system32\prncache.dll
2013-04-22 10:14:51 ----A---- C:\Windows\system32\PresentationSettings.exe
2013-04-22 10:14:50 ----A---- C:\Windows\SYSWOW64\shimgvw.dll
2013-04-22 10:14:50 ----A---- C:\Windows\system32\shlwapi.dll
2013-04-22 10:14:50 ----A---- C:\Windows\system32\shdocvw.dll
2013-04-22 10:14:50 ----A---- C:\Windows\system32\shacct.dll
2013-04-22 10:14:50 ----A---- C:\Windows\system32\setupapi.dll
2013-04-22 10:14:50 ----A---- C:\Windows\system32\SensorsCpl.dll
2013-04-22 10:14:50 ----A---- C:\Windows\system32\rpchttp.dll
2013-04-22 10:14:50 ----A---- C:\Windows\system32\recovery.dll
2013-04-22 10:14:50 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2013-04-22 10:14:49 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2013-04-22 10:14:49 ----A---- C:\Windows\SYSWOW64\mciqtz32.dll
2013-04-22 10:14:49 ----A---- C:\Windows\system32\MdSched.exe
2013-04-22 10:14:49 ----A---- C:\Windows\system32\mciqtz32.dll
2013-04-22 10:14:49 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2013-04-22 10:14:49 ----A---- C:\Windows\system32\lsmproxy.dll
2013-04-22 10:14:47 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2013-04-22 10:14:47 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2013-04-22 10:14:46 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2013-04-22 10:14:46 ----A---- C:\Windows\SYSWOW64\mydocs.dll
2013-04-22 10:14:46 ----A---- C:\Windows\SYSWOW64\localsec.dll
2013-04-22 10:14:46 ----A---- C:\Windows\SYSWOW64\kbdlk41a.dll
2013-04-22 10:14:46 ----A---- C:\Windows\SYSWOW64\KBDINBEN.DLL
2013-04-22 10:14:46 ----A---- C:\Windows\SYSWOW64\KBDGKL.DLL
2013-04-22 10:14:46 ----A---- C:\Windows\SYSWOW64\KBDBULG.DLL
2013-04-22 10:14:46 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2013-04-22 10:14:46 ----A---- C:\Windows\SYSWOW64\input.dll
2013-04-22 10:14:46 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2013-04-22 10:14:46 ----A---- C:\Windows\system32\ListSvc.dll
2013-04-22 10:14:46 ----A---- C:\Windows\system32\KBDTURME.DLL
2013-04-22 10:14:46 ----A---- C:\Windows\system32\KBDMAORI.DLL
2013-04-22 10:14:46 ----A---- C:\Windows\system32\KBDINTAM.DLL
2013-04-22 10:14:46 ----A---- C:\Windows\system32\KBDGR1.DLL
2013-04-22 10:14:46 ----A---- C:\Windows\system32\KBDCZ1.DLL
2013-04-22 10:14:46 ----A---- C:\Windows\system32\isoburn.exe
2013-04-22 10:14:46 ----A---- C:\Windows\system32\iscsium.dll
2013-04-22 10:14:46 ----A---- C:\Windows\system32\iscsicli.exe
2013-04-22 10:14:46 ----A---- C:\Windows\system32\iasrecst.dll
2013-04-22 10:14:46 ----A---- C:\Windows\system32\httpapi.dll
2013-04-22 10:14:45 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2013-04-22 10:14:45 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2013-04-22 10:14:45 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL
2013-04-22 10:14:45 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2013-04-22 10:14:45 ----A---- C:\Windows\system32\netiohlp.dll
2013-04-22 10:14:45 ----A---- C:\Windows\system32\netcfgx.dll
2013-04-22 10:14:45 ----A---- C:\Windows\system32\netcenter.dll
2013-04-22 10:14:45 ----A---- C:\Windows\system32\mtxclu.dll
2013-04-22 10:14:45 ----A---- C:\Windows\system32\MSVidCtl.dll
2013-04-22 10:14:44 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2013-04-22 10:14:44 ----A---- C:\Windows\SYSWOW64\netutils.dll
2013-04-22 10:14:44 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2013-04-22 10:14:44 ----A---- C:\Windows\SYSWOW64\netjoin.dll
2013-04-22 10:14:44 ----A---- C:\Windows\system32\ntprint.dll
2013-04-22 10:14:44 ----A---- C:\Windows\system32\nltest.exe
2013-04-22 10:14:44 ----A---- C:\Windows\system32\mprapi.dll
2013-04-22 10:14:44 ----A---- C:\Windows\system32\drivers\msahci.sys
2013-04-22 10:14:43 ----A---- C:\Windows\SYSWOW64\msscp.dll
2013-04-22 10:14:43 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2013-04-22 10:14:43 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2013-04-22 10:14:43 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2013-04-22 10:14:43 ----A---- C:\Windows\system32\msdtctm.dll
2013-04-22 10:14:42 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2013-04-22 10:14:42 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-04-22 10:14:42 ----A---- C:\Windows\SYSWOW64\cscobj.dll
2013-04-22 10:14:42 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2013-04-22 10:14:42 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2013-04-22 10:14:42 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2013-04-22 10:14:42 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2013-04-22 10:14:42 ----A---- C:\Windows\system32\BWUnpairElevated.dll
2013-04-22 10:14:42 ----A---- C:\Windows\system32\bootres.dll

2013-04-22 10:14:41 ----AH---- C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
2013-04-22 10:14:41 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2013-04-22 10:14:41 ----A---- C:\Windows\SYSWOW64\cmstp.exe
2013-04-22 10:14:41 ----A---- C:\Windows\SYSWOW64\audiodev.dll
2013-04-22 10:14:41 ----A---- C:\Windows\system32\drivers\ataport.sys
2013-04-22 10:14:41 ----A---- C:\Windows\system32\credui.dll
2013-04-22 10:14:41 ----A---- C:\Windows\system32\cmd.exe
2013-04-22 10:14:40 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2013-04-22 10:14:40 ----A---- C:\Windows\SYSWOW64\bitsadmin.exe
2013-04-22 10:14:40 ----A---- C:\Windows\SYSWOW64\AzSqlExt.dll
2013-04-22 10:14:40 ----A---- C:\Windows\SYSWOW64\azroles.dll
2013-04-22 10:14:40 ----A---- C:\Windows\SYSWOW64\autoplay.dll
2013-04-22 10:14:40 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2013-04-22 10:14:40 ----A---- C:\Windows\SYSWOW64\amstream.dll
2013-04-22 10:14:40 ----A---- C:\Windows\system32\bitsperf.dll
2013-04-22 10:14:40 ----A---- C:\Windows\system32\batmeter.dll
2013-04-22 10:14:40 ----A---- C:\Windows\system32\AzSqlExt.dll
2013-04-22 10:14:40 ----A---- C:\Windows\system32\azroles.dll
2013-04-22 10:14:40 ----A---- C:\Windows\system32\autoconv.exe
2013-04-22 10:14:40 ----A---- C:\Windows\system32\audiosrv.dll
2013-04-22 10:14:40 ----A---- C:\Windows\system32\AudioSes.dll
2013-04-22 10:14:40 ----A---- C:\Windows\system32\audiodg.exe
2013-04-22 10:14:40 ----A---- C:\Windows\system32\amstream.dll
2013-04-22 10:14:40 ----A---- C:\Windows\system32\aitagent.exe
2013-04-22 10:14:39 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2013-04-22 10:14:39 ----A---- C:\Windows\SYSWOW64\dsuiext.dll
2013-04-22 10:14:39 ----A---- C:\Windows\system32\fdProxy.dll
2013-04-22 10:14:39 ----A---- C:\Windows\system32\eapphost.dll
2013-04-22 10:14:39 ----A---- C:\Windows\system32\eappgnui.dll
2013-04-22 10:14:39 ----A---- C:\Windows\system32\eapp3hst.dll
2013-04-22 10:14:39 ----A---- C:\Windows\system32\dxgi.dll
2013-04-22 10:14:39 ----A---- C:\Windows\system32\dxdiagn.dll
2013-04-22 10:14:38 ----A---- C:\Windows\SYSWOW64\fphc.dll
2013-04-22 10:14:38 ----A---- C:\Windows\system32\hbaapi.dll
2013-04-22 10:14:38 ----A---- C:\Windows\system32\framedynos.dll
2013-04-22 10:14:38 ----A---- C:\Windows\system32\framedyn.dll
2013-04-22 10:14:38 ----A---- C:\Windows\system32\dxmasf.dll
2013-04-22 10:14:37 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2013-04-22 10:14:37 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2013-04-22 10:14:37 ----A---- C:\Windows\SYSWOW64\diskraid.exe
2013-04-22 10:14:37 ----A---- C:\Windows\SYSWOW64\dfrgui.exe
2013-04-22 10:14:37 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll
2013-04-22 10:14:37 ----A---- C:\Windows\system32\dpx.dll
2013-04-22 10:14:37 ----A---- C:\Windows\system32\djoin.exe
2013-04-22 10:14:37 ----A---- C:\Windows\system32\dfshim.dll
2013-04-22 10:14:36 ----A---- C:\Windows\SYSWOW64\tlscsp.dll
2013-04-22 10:14:36 ----A---- C:\Windows\SYSWOW64\dot3msm.dll
2013-04-22 10:14:36 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2013-04-22 10:14:36 ----A---- C:\Windows\system32\unimdmat.dll
2013-04-22 10:14:36 ----A---- C:\Windows\system32\taskeng.exe
2013-04-22 10:14:36 ----A---- C:\Windows\system32\taskcomp.dll
2013-04-22 10:14:36 ----A---- C:\Windows\system32\TabSvc.dll
2013-04-22 10:14:36 ----A---- C:\Windows\system32\drivers\termdd.sys
2013-04-22 10:14:36 ----A---- C:\Windows\system32\dps.dll
2013-04-22 10:14:35 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2013-04-22 10:14:35 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2013-04-22 10:14:35 ----A---- C:\Windows\SYSWOW64\sxs.dll
2013-04-22 10:14:35 ----A---- C:\Windows\SYSWOW64\sscore.dll
2013-04-22 10:14:35 ----A---- C:\Windows\system32\user32.dll
2013-04-22 10:14:35 ----A---- C:\Windows\system32\sud.dll
2013-04-22 10:14:35 ----A---- C:\Windows\system32\spwmp.dll
2013-04-22 10:14:35 ----A---- C:\Windows\system32\sppobjs.dll
2013-04-22 10:14:35 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2013-04-22 10:14:34 ----A---- C:\Windows\SYSWOW64\syssetup.dll
2013-04-22 10:14:34 ----A---- C:\Windows\SYSWOW64\syncui.dll
2013-04-22 10:14:34 ----A---- C:\Windows\SYSWOW64\spopk.dll
2013-04-22 10:14:33 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2013-04-22 10:14:33 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2013-04-22 10:14:33 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2013-04-22 10:14:33 ----A---- C:\Windows\system32\WMVCORE.DLL
2013-04-22 10:14:33 ----A---- C:\Windows\system32\wmpmde.dll
2013-04-22 10:14:33 ----A---- C:\Windows\system32\wmploc.DLL
2013-04-22 10:14:33 ----A---- C:\Windows\system32\wmp.dll
2013-04-22 10:14:33 ----A---- C:\Windows\system32\Wldap32.dll
2013-04-22 10:14:33 ----A---- C:\Windows\system32\wlanui.dll
2013-04-22 10:14:33 ----A---- C:\Windows\system32\wlanpref.dll
2013-04-22 10:14:33 ----A---- C:\Windows\system32\wisptis.exe
2013-04-22 10:14:33 ----A---- C:\Windows\system32\winsta.dll
2013-04-22 10:14:32 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2013-04-22 10:14:32 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2013-04-22 10:14:32 ----A---- C:\Windows\SYSWOW64\wpdwcn.dll
2013-04-22 10:14:32 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2013-04-22 10:14:32 ----A---- C:\Windows\system32\xpsservices.dll
2013-04-22 10:14:32 ----A---- C:\Windows\system32\wshbth.dll
2013-04-22 10:14:32 ----A---- C:\Windows\system32\vmbusres.dll
2013-04-22 10:14:32 ----A---- C:\Windows\system32\vmbuspipe.dll
2013-04-22 10:14:31 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2013-04-22 10:14:31 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2013-04-22 10:14:31 ----A---- C:\Windows\SYSWOW64\vpnikeapi.dll
2013-04-22 10:14:31 ----A---- C:\Windows\system32\WinSATAPI.dll
2013-04-22 10:14:31 ----A---- C:\Windows\system32\WavDest.dll
2013-04-22 10:14:31 ----A---- C:\Windows\system32\VmbusCoinstaller.dll
2013-04-22 10:14:31 ----A---- C:\Windows\system32\vdsbas.dll
2013-04-22 10:14:31 ----A---- C:\Windows\system32\drivers\winhv.sys
2013-04-22 10:14:31 ----A---- C:\Windows\system32\drivers\volmgr.sys
2013-04-22 10:14:31 ----A---- C:\Windows\system32\drivers\vmbus.sys
2013-04-22 10:14:31 ----A---- C:\Windows\system32\drivers\raspptp.sys
2013-04-22 10:14:30 ----A---- C:\Windows\SYSWOW64\regapi.dll
2013-04-22 10:14:30 ----A---- C:\Windows\SYSWOW64\rdpendp.dll
2013-04-22 10:14:30 ----A---- C:\Windows\SYSWOW64\rdpencom.dll
2013-04-22 10:14:30 ----A---- C:\Windows\SYSWOW64\rasppp.dll
2013-04-22 10:14:30 ----A---- C:\Windows\system32\rdpendp.dll
2013-04-22 10:14:30 ----A---- C:\Windows\system32\rdpd3d.dll
2013-04-22 10:14:30 ----A---- C:\Windows\system32\rasppp.dll
2013-04-22 10:14:30 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2013-04-22 10:14:30 ----A---- C:\Windows\system32\QSHVHOST.DLL
2013-04-22 10:14:30 ----A---- C:\Windows\system32\qasf.dll
2013-04-22 10:14:30 ----A---- C:\Windows\system32\puiobj.dll
2013-04-22 10:14:30 ----A---- C:\Windows\system32\drivers\rdpdr.sys
2013-04-22 10:14:29 ----A---- C:\Windows\SYSWOW64\resutils.dll
2013-04-22 10:14:29 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2013-04-22 10:14:29 ----A---- C:\Windows\SYSWOW64\PkgMgr.exe
2013-04-22 10:14:29 ----A---- C:\Windows\system32\remotepg.dll
2013-04-22 10:14:29 ----A---- C:\Windows\system32\ReAgent.dll
2013-04-22 10:14:29 ----A---- C:\Windows\system32\PresentationHost.exe
2013-04-22 10:14:29 ----A---- C:\Windows\system32\powercpl.dll
2013-04-22 10:14:29 ----A---- C:\Windows\system32\pla.dll
2013-04-22 10:14:29 ----A---- C:\Windows\system32\PkgMgr.exe
2013-04-22 10:14:29 ----A---- C:\Windows\system32\photowiz.dll
2013-04-22 10:14:28 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2013-04-22 10:14:28 ----A---- C:\Windows\SYSWOW64\prncache.dll
2013-04-22 10:14:28 ----A---- C:\Windows\SYSWOW64\printui.dll
2013-04-22 10:14:28 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2013-04-22 10:14:28 ----A---- C:\Windows\SYSWOW64\perfts.dll
2013-04-22 10:14:28 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll
2013-04-22 10:14:28 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2013-04-22 10:14:28 ----A---- C:\Windows\system32\setupcl.exe
2013-04-22 10:14:28 ----A---- C:\Windows\system32\SessEnv.dll
2013-04-22 10:14:28 ----A---- C:\Windows\system32\provsvc.dll
2013-04-22 10:14:28 ----A---- C:\Windows\system32\prnfldr.dll
2013-04-22 10:14:28 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2013-04-22 10:14:28 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2013-04-22 10:14:28 ----A---- C:\Windows\system32\pdh.dll
2013-04-22 10:14:28 ----A---- C:\Windows\system32\drivers\pci.sys
2013-04-22 10:14:28 ----A---- C:\Windows\system32\drivers\pacer.sys
2013-04-22 10:14:27 ----A---- C:\Windows\SYSWOW64\sisbkup.dll
2013-04-22 10:14:27 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll
2013-04-22 10:14:27 ----A---- C:\Windows\SYSWOW64\shunimpl.dll
2013-04-22 10:14:27 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2013-04-22 10:14:27 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2013-04-22 10:14:27 ----A---- C:\Windows\SYSWOW64\runonce.exe
2013-04-22 10:14:27 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2013-04-22 10:14:27 ----A---- C:\Windows\system32\shimgvw.dll
2013-04-22 10:14:27 ----A---- C:\Windows\system32\shgina.dll
2013-04-22 10:14:27 ----A---- C:\Windows\system32\secproc.dll
2013-04-22 10:14:27 ----A---- C:\Windows\system32\scrptadm.dll
2013-04-22 10:14:27 ----A---- C:\Windows\system32\samsrv.dll
2013-04-22 10:14:27 ----A---- C:\Windows\system32\samcli.dll
2013-04-22 10:14:26 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2013-04-22 10:14:26 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2013-04-22 10:14:26 ----A---- C:\Windows\system32\scavengeui.dll
2013-04-22 10:14:26 ----A---- C:\Windows\system32\RpcRtRemote.dll
2013-04-22 10:14:26 ----A---- C:\Windows\system32\RMActivate.exe
2013-04-22 10:14:26 ----A---- C:\Windows\system32\drivers\rmcast.sys
2013-04-22 10:14:25 ----A---- C:\Windows\SYSWOW64\shgina.dll
2013-04-22 10:14:25 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2013-04-22 10:14:25 ----A---- C:\Windows\SYSWOW64\msdmo.dll
2013-04-22 10:14:25 ----A---- C:\Windows\SYSWOW64\mscms.dll
2013-04-22 10:14:25 ----A---- C:\Windows\system32\slwga.dll
2013-04-22 10:14:25 ----A---- C:\Windows\system32\sisbkup.dll
2013-04-22 10:14:25 ----A---- C:\Windows\system32\shsetup.dll
2013-04-22 10:14:25 ----A---- C:\Windows\system32\msconfig.exe
2013-04-22 10:14:25 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2013-04-22 10:14:24 ----A---- C:\Windows\SYSWOW64\sethc.exe
2013-04-22 10:14:24 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll
2013-04-22 10:14:24 ----A---- C:\Windows\system32\sethc.exe
2013-04-22 10:14:23 ----A---- C:\Windows\SYSWOW64\wkscli.dll
2013-04-22 10:14:23 ----A---- C:\Windows\SYSWOW64\winsta.dll
2013-04-22 10:14:23 ----A---- C:\Windows\system32\wmicmiplugin.dll
2013-04-22 10:14:23 ----A---- C:\Windows\system32\wksprt.exe
2013-04-22 10:14:22 ----A---- C:\Windows\SYSWOW64\wmpshell.dll
2013-04-22 10:14:22 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2013-04-22 10:14:22 ----A---- C:\Windows\SYSWOW64\wmp.dll
2013-04-22 10:14:22 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2013-04-22 10:14:22 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2013-04-22 10:14:22 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2013-04-22 10:14:22 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2013-04-22 10:14:22 ----A---- C:\Windows\system32\wmpshell.dll
2013-04-22 10:14:22 ----A---- C:\Windows\system32\wmpps.dll
2013-04-22 10:14:22 ----A---- C:\Windows\system32\WMPEncEn.dll
2013-04-22 10:14:21 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2013-04-22 10:14:21 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2013-04-22 10:14:21 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2013-04-22 10:14:21 ----A---- C:\Windows\system32\TSpkg.dll
2013-04-22 10:14:21 ----A---- C:\Windows\system32\azroleui.dll
2013-04-22 10:14:21 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2013-04-22 10:14:20 ----A---- C:\Windows\system32\sxs.dll
2013-04-22 10:14:20 ----A---- C:\Windows\system32\stobject.dll
2013-04-22 10:14:20 ----A---- C:\Windows\system32\sscore.dll
2013-04-22 10:14:20 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2013-04-22 10:14:20 ----A---- C:\Windows\system32\appmgr.dll
2013-04-22 10:14:19 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2013-04-22 10:14:19 ----A---- C:\Windows\SYSWOW64\termmgr.dll
2013-04-22 10:14:19 ----A---- C:\Windows\SYSWOW64\taskmgr.exe
2013-04-22 10:14:19 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2013-04-22 10:14:19 ----A---- C:\Windows\SYSWOW64\sqmapi.dll
2013-04-22 10:14:19 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2013-04-22 10:14:19 ----A---- C:\Windows\system32\themeui.dll
2013-04-22 10:14:19 ----A---- C:\Windows\system32\termmgr.dll
2013-04-22 10:14:19 ----A---- C:\Windows\system32\tapisrv.dll
2013-04-22 10:14:19 ----A---- C:\Windows\system32\systemcpl.dll
2013-04-22 10:14:19 ----A---- C:\Windows\system32\srvsvc.dll
2013-04-22 10:14:19 ----A---- C:\Windows\system32\sqlsrv32.dll
2013-04-22 10:14:19 ----A---- C:\Windows\system32\spwizres.dll
2013-04-22 10:14:19 ----A---- C:\Windows\system32\spwizeng.dll
2013-04-22 10:14:19 ----A---- C:\Windows\system32\sppc.dll
2013-04-22 10:14:19 ----A---- C:\Windows\system32\spbcd.dll
2013-04-22 10:14:19 ----A---- C:\Windows\system32\drivers\tdi.sys
2013-04-22 10:14:17 ----A---- C:\Windows\SYSWOW64\printmanagement.msc
2013-04-22 10:14:17 ----A---- C:\Windows\SYSWOW64\ppcsnap.dll
2013-04-22 10:14:17 ----A---- C:\Windows\SYSWOW64\pmcsnap.dll
2013-04-22 10:14:17 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2013-04-22 10:14:17 ----A---- C:\Windows\SYSWOW64\OpcServices.dll
2013-04-22 10:14:17 ----A---- C:\Windows\system32\prntvpt.dll
2013-04-22 10:14:17 ----A---- C:\Windows\system32\onexui.dll
2013-04-22 10:14:17 ----A---- C:\Windows\system32\onex.dll
2013-04-22 10:14:17 ----A---- C:\Windows\system32\nshipsec.dll
2013-04-22 10:14:16 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2013-04-22 10:14:16 ----A---- C:\Windows\system32\seclogon.dll
2013-04-22 10:14:16 ----A---- C:\Windows\system32\sdrsvc.dll
2013-04-22 10:14:16 ----A---- C:\Windows\system32\sdengin2.dll
2013-04-22 10:14:16 ----A---- C:\Windows\system32\sdclt.exe
2013-04-22 10:14:16 ----A---- C:\Windows\system32\networkmap.dll
2013-04-22 10:14:16 ----A---- C:\Windows\system32\networkexplorer.dll
2013-04-22 10:14:15 ----A---- C:\Windows\SYSWOW64\scrptadm.dll
2013-04-22 10:14:15 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2013-04-22 10:14:15 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2013-04-22 10:14:15 ----A---- C:\Windows\system32\rpcss.dll
2013-04-22 10:14:15 ----A---- C:\Windows\system32\RMActivate_isv.exe
2013-04-22 10:14:15 ----A---- C:\Windows\system32\repair-bde.exe
2013-04-22 10:14:15 ----A---- C:\Windows\system32\recdisc.exe
2013-04-22 10:14:15 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2013-04-22 10:14:14 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2013-04-22 10:14:14 ----A---- C:\Windows\SYSWOW64\wsdchngr.dll
2013-04-22 10:14:14 ----A---- C:\Windows\SYSWOW64\Query.dll
2013-04-22 10:14:14 ----A---- C:\Windows\SYSWOW64\PushPrinterConnections.exe
2013-04-22 10:14:14 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2013-04-22 10:14:14 ----A---- C:\Windows\system32\wscapi.dll
2013-04-22 10:14:14 ----A---- C:\Windows\system32\wpdbusenum.dll
2013-04-22 10:14:14 ----A---- C:\Windows\system32\wpccpl.dll
2013-04-22 10:14:14 ----A---- C:\Windows\system32\rdpencom.dll
2013-04-22 10:14:14 ----A---- C:\Windows\system32\rdpcfgex.dll
2013-04-22 10:14:14 ----A---- C:\Windows\system32\qedit.dll
2013-04-22 10:14:14 ----A---- C:\Windows\system32\qcap.dll
2013-04-22 10:14:13 ----A---- C:\Windows\SYSWOW64\wups.dll
2013-04-22 10:14:13 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2013-04-22 10:14:13 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2013-04-22 10:14:13 ----A---- C:\Windows\SYSWOW64\wshirda.dll
2013-04-22 10:14:13 ----A---- C:\Windows\SYSWOW64\msutb.dll
2013-04-22 10:14:13 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2013-04-22 10:14:13 ----A---- C:\Windows\system32\wshirda.dll
2013-04-22 10:14:13 ----A---- C:\Windows\system32\drivers\msrpc.sys
2013-04-22 10:14:12 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2013-04-22 10:14:12 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2013-04-22 10:14:12 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2013-04-22 10:14:12 ----A---- C:\Windows\SYSWOW64\net1.exe
2013-04-22 10:14:12 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2013-04-22 10:14:12 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2013-04-22 10:14:12 ----A---- C:\Windows\system32\secproc_isv.dll
2013-04-22 10:14:12 ----A---- C:\Windows\system32\netdiagfx.dll
2013-04-22 10:14:12 ----A---- C:\Windows\system32\msinfo32.exe
2013-04-22 10:14:12 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2013-04-22 10:14:12 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2013-04-22 10:14:11 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2013-04-22 10:14:11 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2013-04-22 10:14:11 ----A---- C:\Windows\system32\nci.dll
2013-04-22 10:14:11 ----A---- C:\Windows\system32\Narrator.exe
2013-04-22 10:14:11 ----A---- C:\Windows\system32\lsm.exe
2013-04-22 10:14:11 ----A---- C:\Windows\system32\localsec.dll
2013-04-22 10:14:11 ----A---- C:\Windows\system32\drivers\ndis.sys
2013-04-22 10:14:11 ----A---- C:\Windows\system32\drivers\ks.sys
2013-04-22 10:14:11 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2013-04-22 10:14:10 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2013-04-22 10:14:10 ----A---- C:\Windows\system32\ipsmsnap.dll
2013-04-22 10:14:09 ----A---- C:\Windows\SYSWOW64\vfwwdm32.dll
2013-04-22 10:14:09 ----A---- C:\Windows\SYSWOW64\vdsbas.dll
2013-04-22 10:14:09 ----A---- C:\Windows\SYSWOW64\KBDUS.DLL
2013-04-22 10:14:09 ----A---- C:\Windows\SYSWOW64\KBDTAJIK.DLL
2013-04-22 10:14:09 ----A---- C:\Windows\SYSWOW64\KBDMON.DLL
2013-04-22 10:14:09 ----A---- C:\Windows\SYSWOW64\KBDINTAM.DLL
2013-04-22 10:14:09 ----A---- C:\Windows\SYSWOW64\KBDINMAR.DLL
2013-04-22 10:14:09 ----A---- C:\Windows\SYSWOW64\KBDINHIN.DLL
2013-04-22 10:14:09 ----A---- C:\Windows\SYSWOW64\inetmib1.dll
2013-04-22 10:14:09 ----A---- C:\Windows\system32\uxlib.dll
2013-04-22 10:14:09 ----A---- C:\Windows\system32\userenv.dll
2013-04-22 10:14:09 ----A---- C:\Windows\system32\KBDTUQ.DLL
2013-04-22 10:14:09 ----A---- C:\Windows\system32\KBDLT1.DLL
2013-04-22 10:14:09 ----A---- C:\Windows\system32\KBDINTEL.DLL
2013-04-22 10:14:09 ----A---- C:\Windows\system32\KBDINORI.DLL
2013-04-22 10:14:09 ----A---- C:\Windows\system32\KBDBASH.DLL
2013-04-22 10:14:09 ----A---- C:\Windows\system32\drivers\vms3cap.sys
2013-04-22 10:14:09 ----A---- C:\Windows\system32\drivers\VMBusHID.sys
2013-04-22 10:14:08 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-04-22 10:14:08 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2013-04-22 10:14:08 ----A---- C:\Windows\SYSWOW64\VAN.dll
2013-04-22 10:14:08 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2013-04-22 10:14:08 ----A---- C:\Windows\system32\wiavideo.dll
2013-04-22 10:14:08 ----A---- C:\Windows\system32\wiaservc.dll
2013-04-22 10:14:08 ----A---- C:\Windows\system32\mcmde.dll
2013-04-22 10:14:07 ----A---- C:\Windows\SYSWOW64\UserAccountControlSettings.dll
2013-04-22 10:14:07 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2013-04-22 10:14:07 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2013-04-22 10:14:07 ----A---- C:\Windows\SYSWOW64\luainstall.dll
2013-04-22 10:14:07 ----A---- C:\Windows\system32\usercpl.dll
2013-04-22 10:14:07 ----A---- C:\Windows\system32\TSWorkspace.dll
2013-04-22 10:14:07 ----A---- C:\Windows\system32\mfreadwrite.dll
2013-04-22 10:14:07 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2013-04-22 10:14:07 ----A---- C:\Windows\system32\mapistub.dll
2013-04-22 10:14:07 ----A---- C:\Windows\system32\mapi32.dll
2013-04-22 10:14:07 ----A---- C:\Windows\system32\DiagCpl.dll
2013-04-22 10:14:05 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll
2013-04-22 10:14:05 ----A---- C:\Windows\system32\dskquoui.dll
2013-04-22 10:14:05 ----A---- C:\Windows\system32\dfrgui.exe
2013-04-22 10:14:05 ----A---- C:\Windows\system32\cscui.dll
2013-04-22 10:14:04 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2013-04-22 10:14:04 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2013-04-22 10:14:04 ----A---- C:\Windows\SYSWOW64\cca.dll
2013-04-22 10:14:04 ----A---- C:\Windows\SYSWOW64\cabinet.dll
2013-04-22 10:14:04 ----A---- C:\Windows\SYSWOW64\browseui.dll
2013-04-22 10:14:04 ----A---- C:\Windows\system32\dwmcore.dll
2013-04-22 10:14:04 ----A---- C:\Windows\system32\dsuiext.dll
2013-04-22 10:14:04 ----A---- C:\Windows\system32\dnscmmc.dll
2013-04-22 10:14:04 ----A---- C:\Windows\system32\C_ISCII.DLL
2013-04-22 10:14:03 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2013-04-22 10:14:03 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2013-04-22 10:14:03 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2013-04-22 10:14:03 ----A---- C:\Windows\SYSWOW64\bitsperf.dll
2013-04-22 10:14:03 ----A---- C:\Windows\system32\gpprefcl.dll
2013-04-22 10:14:03 ----A---- C:\Windows\system32\cscsvc.dll
2013-04-22 10:14:03 ----A---- C:\Windows\system32\cscdll.dll
2013-04-22 10:14:03 ----A---- C:\Windows\system32\cscapi.dll
2013-04-22 10:14:03 ----A---- C:\Windows\system32\credssp.dll
2013-04-22 10:14:03 ----A---- C:\Windows\system32\comctl32.dll
2013-04-22 10:14:03 ----A---- C:\Windows\system32\ci.dll
2013-04-22 10:14:03 ----A---- C:\Windows\system32\bitsadmin.exe
2013-04-22 10:14:02 ----A---- C:\Windows\SYSWOW64\ifsutil.dll
2013-04-22 10:14:02 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2013-04-22 10:14:02 ----A---- C:\Windows\SYSWOW64\fms.dll
2013-04-22 10:14:02 ----A---- C:\Windows\system32\FXSTIFF.dll
2013-04-22 10:14:02 ----A---- C:\Windows\system32\FXSAPI.dll
2013-04-22 10:14:02 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2013-04-22 10:14:01 ----A---- C:\Windows\system32\zipfldr.dll
2013-04-22 10:14:00 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2013-04-22 10:14:00 ----A---- C:\Windows\SYSWOW64\iasrecst.dll
2013-04-22 10:14:00 ----A---- C:\Windows\system32\ifsutil.dll
2013-04-22 10:13:56 ----A---- C:\Windows\system32\EhStorAPI.dll
2013-04-22 10:13:55 ----A---- C:\Windows\SYSWOW64\EhStorAPI.dll
2013-04-22 10:13:55 ----A---- C:\Windows\system32\findstr.exe
2013-04-22 10:13:55 ----A---- C:\Windows\system32\fdeploy.dll
2013-04-22 10:13:54 ----A---- C:\Windows\system32\fixmapi.exe
2013-04-22 10:11:06 ----D---- C:\Windows\system32\EventProviders
2013-04-22 09:49:28 ----A---- C:\Windows\system32\Wdfres.dll
2013-04-22 09:49:28 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2013-04-22 09:49:28 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2013-04-22 09:47:57 ----A---- C:\Windows\system32\WUDFSvc.dll
2013-04-22 09:47:57 ----A---- C:\Windows\system32\WUDFPlatform.dll
2013-04-22 09:47:57 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2013-04-22 09:47:57 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2013-04-22 09:47:56 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2013-04-22 09:47:55 ----A---- C:\Windows\system32\WUDFx.dll
2013-04-22 09:47:55 ----A---- C:\Windows\system32\WUDFHost.exe
2013-04-22 09:46:17 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-04-22 09:46:17 ----A---- C:\Windows\system32\wow64win.dll
2013-04-22 09:46:17 ----A---- C:\Windows\system32\KernelBase.dll
2013-04-22 09:46:17 ----A---- C:\Windows\system32\kernel32.dll
2013-04-22 09:46:17 ----A---- C:\Windows\system32\conhost.exe
2013-04-22 09:46:16 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2013-04-22 09:46:16 ----A---- C:\Windows\system32\wow64cpu.dll
2013-04-22 09:46:16 ----A---- C:\Windows\system32\wow64.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-04-22 09:46:15 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-04-22 09:46:15 ----A---- C:\Windows\system32\ntvdm64.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-04-22 09:46:14 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-04-22 09:46:02 ----A---- C:\Windows\system32\profsvc.dll
2013-04-22 09:46:02 ----A---- C:\Windows\system32\profprov.dll
2013-04-22 09:45:58 ----A---- C:\Windows\SYSWOW64\gameux.dll
2013-04-22 09:45:58 ----A---- C:\Windows\system32\Wpc.dll
2013-04-22 09:45:58 ----A---- C:\Windows\system32\gameux.dll
2013-04-22 09:45:57 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2013-04-22 09:45:49 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-04-22 09:45:49 ----A---- C:\Windows\system32\XpsPrint.dll
2013-04-22 09:45:47 ----A---- C:\Windows\SYSWOW64\esent.dll
2013-04-22 09:45:47 ----A---- C:\Windows\system32\esent.dll
2013-04-22 09:45:47 ----A---- C:\Windows\system32\drivers\nvstor.sys
2013-04-22 09:45:46 ----A---- C:\Windows\system32\drivers\storport.sys
2013-04-22 09:45:46 ----A---- C:\Windows\system32\drivers\nvraid.sys
2013-04-22 09:45:46 ----A---- C:\Windows\system32\drivers\amdsata.sys
2013-04-22 09:45:45 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2013-04-22 09:45:45 ----A---- C:\Windows\system32\drivers\amdxata.sys
2013-04-22 09:45:44 ----A---- C:\Windows\system32\fsutil.exe
2013-04-22 09:45:44 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2013-04-22 09:45:43 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2013-04-22 09:45:27 ----A---- C:\Windows\system32\tquery.dll
2013-04-22 09:45:26 ----A---- C:\Windows\SYSWOW64\tquery.dll
2013-04-22 09:45:26 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2013-04-22 09:45:26 ----A---- C:\Windows\system32\mssrch.dll
2013-04-22 09:45:25 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2013-04-22 09:45:25 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2013-04-22 09:45:25 ----A---- C:\Windows\system32\SearchIndexer.exe
2013-04-22 09:45:25 ----A---- C:\Windows\system32\mssvp.dll
2013-04-22 09:45:24 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2013-04-22 09:45:24 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2013-04-22 09:45:24 ----A---- C:\Windows\SYSWOW64\mssph.dll
2013-04-22 09:45:24 ----A---- C:\Windows\system32\SearchFilterHost.exe
2013-04-22 09:45:24 ----A---- C:\Windows\system32\mssphtb.dll
2013-04-22 09:45:24 ----A---- C:\Windows\system32\mssph.dll
2013-04-22 09:45:23 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2013-04-22 09:45:23 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2013-04-22 09:45:23 ----A---- C:\Windows\system32\msscntrs.dll
2013-04-22 09:45:22 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2013-04-22 09:45:18 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2013-04-22 09:45:18 ----A---- C:\Windows\system32\ntshrui.dll
2013-04-22 09:45:15 ----A---- C:\Windows\SYSWOW64\msi.dll
2013-04-22 09:45:15 ----A---- C:\Windows\system32\msi.dll
2013-04-22 09:45:14 ----A---- C:\Windows\SYSWOW64\usp10.dll
2013-04-22 09:45:14 ----A---- C:\Windows\system32\usp10.dll
2013-04-22 09:45:12 ----A---- C:\Windows\system32\FntCache.dll
2013-04-22 09:45:11 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-04-22 09:45:11 ----A---- C:\Windows\system32\d3d10level9.dll
2013-04-22 09:45:11 ----A---- C:\Windows\system32\d2d1.dll
2013-04-22 09:45:10 ----A---- C:\Windows\SYSWOW64\explorer.exe
2013-04-22 09:45:10 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-04-22 09:45:10 ----A---- C:\Windows\explorer.exe
2013-04-22 09:45:09 ----A---- C:\Windows\system32\srcore.dll
2013-04-22 09:45:09 ----A---- C:\Windows\system32\rstrui.exe
2013-04-22 09:45:08 ----A---- C:\Windows\SYSWOW64\srclient.dll
2013-04-22 09:45:05 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-04-22 09:45:05 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-04-22 09:45:03 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2013-04-22 09:45:03 ----A---- C:\Windows\system32\drivers\usbport.sys
2013-04-22 09:45:03 ----A---- C:\Windows\system32\drivers\usbohci.sys
2013-04-22 09:45:03 ----A---- C:\Windows\system32\drivers\usbhub.sys
2013-04-22 09:45:03 ----A---- C:\Windows\system32\drivers\usbehci.sys
2013-04-22 09:45:03 ----A---- C:\Windows\system32\drivers\usbd.sys
2013-04-22 09:45:03 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2013-04-22 09:45:03 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2013-04-22 09:44:23 ----A---- C:\Windows\system32\drivers\bthport.sys
2013-04-22 09:44:22 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2013-04-22 09:44:22 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2013-04-22 09:44:22 ----A---- C:\Windows\system32\xmllite.dll
2013-04-22 09:44:22 ----A---- C:\Windows\system32\prevhost.exe
2013-04-22 09:44:21 ----A---- C:\Windows\system32\drivers\fvevol.sys
2013-04-22 09:41:23 ----A---- C:\Windows\system32\spoolsv.exe
2013-04-22 09:41:23 ----A---- C:\Windows\splwow64.exe
2013-04-22 09:40:46 ----A---- C:\Windows\system32\drivers\usb8023.sys
2013-04-22 09:40:44 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-04-22 09:40:44 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-04-22 09:40:44 ----A---- C:\Windows\system32\winsrv.dll
2013-04-22 09:40:43 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-04-22 09:40:43 ----A---- C:\Windows\SYSWOW64\user.exe
2013-04-22 09:40:43 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-04-22 09:17:06 ----A---- C:\Windows\system32\MRT.exe
2013-04-22 09:14:25 ----A---- C:\Windows\system32\mshtmled.dll
2013-04-22 09:14:24 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-04-22 09:14:24 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-04-22 09:14:23 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-04-22 09:14:23 ----A---- C:\Windows\system32\ieui.dll
2013-04-22 09:14:22 ----A---- C:\Windows\SYSWOW64\url.dll
2013-04-22 09:14:22 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-04-22 09:14:22 ----A---- C:\Windows\system32\url.dll
2013-04-22 09:14:22 ----A---- C:\Windows\system32\ieUnatt.exe
2013-04-22 09:14:21 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-04-22 09:14:21 ----A---- C:\Windows\system32\urlmon.dll
2013-04-22 09:14:21 ----A---- C:\Windows\system32\jscript9.dll
2013-04-22 09:14:20 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-04-22 09:14:20 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-04-22 09:14:20 ----A---- C:\Windows\system32\msfeeds.dll
2013-04-22 09:14:19 ----A---- C:\Windows\system32\wininet.dll
2013-04-22 09:14:19 ----A---- C:\Windows\system32\jsproxy.dll
2013-04-22 09:14:18 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-04-22 09:14:18 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-04-22 09:14:17 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-04-22 09:14:17 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-04-22 09:14:17 ----A---- C:\Windows\system32\vbscript.dll
2013-04-22 09:14:17 ----A---- C:\Windows\system32\jscript.dll
2013-04-22 09:14:17 ----A---- C:\Windows\system32\iertutil.dll
2013-04-22 09:14:13 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-04-22 09:14:13 ----A---- C:\Windows\system32\mshtml.dll
2013-04-22 09:14:11 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-04-22 09:14:11 ----A---- C:\Windows\system32\ieframe.dll
2013-04-22 00:12:50 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-04-22 00:12:50 ----A---- C:\Windows\system32\mstscax.dll
2013-04-22 00:12:47 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2013-04-22 00:12:47 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2013-04-22 00:12:47 ----A---- C:\Windows\system32\tsgqec.dll
2013-04-22 00:12:47 ----A---- C:\Windows\system32\aaclient.dll
2013-04-22 00:12:42 ----A---- C:\Windows\system32\win32k.sys
2013-04-22 00:12:37 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-04-22 00:12:36 ----A---- C:\Windows\system32\drivers\netio.sys
2013-04-22 00:12:36 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-04-22 00:12:35 ----A---- C:\Windows\system32\fsquirt.exe
2013-04-22 00:12:35 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2013-04-22 00:12:33 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-04-22 00:12:30 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-04-22 00:12:30 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-04-22 00:12:29 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2013-04-22 00:12:29 ----A---- C:\Windows\system32\smss.exe
2013-04-22 00:12:29 ----A---- C:\Windows\system32\csrsrv.dll
2013-04-20 10:06:17 ----D---- C:\Program Files (x86)\Sony Ericsson
2013-04-17 07:40:50 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2013-04-17 07:40:50 ----A---- C:\Windows\SYSWOW64\javaw.exe
2013-04-17 07:40:50 ----A---- C:\Windows\SYSWOW64\java.exe
2013-04-16 23:34:15 ----D---- C:\Program Files\trend micro
2013-04-16 23:34:14 ----D---- C:\rsit
2013-04-12 10:20:07 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-04-05 14:54:26 ----D---- C:\Users\Honza\AppData\Roaming\Nero
2013-03-31 15:21:20 ----D---- C:\ProgramData\Sony
2013-03-31 15:21:20 ----D---- C:\Program Files (x86)\Sony
2013-03-31 15:18:14 ----D---- C:\ProgramData\Avanquest
2013-03-31 15:18:14 ----D---- C:\Program Files (x86)\Avanquest update
2013-03-31 15:16:17 ----D---- C:\ProgramData\BVRP Software
2013-03-31 15:14:38 ----D---- C:\ProgramData\Sony Ericsson

======List of files/folders modified in the last 1 months======

2013-04-28 11:54:41 ----D---- C:\Windows\Prefetch
2013-04-28 11:41:38 ----D---- C:\Windows\System32
2013-04-28 11:41:38 ----D---- C:\Windows\inf
2013-04-28 11:41:38 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-04-28 11:39:14 ----D---- C:\Windows\Temp
2013-04-28 09:12:03 ----D---- C:\Program Files\JDownloader 2
2013-04-28 09:11:49 ----D---- C:\Program Files (x86)\The KMPlayer
2013-04-28 09:11:03 ----D---- C:\Users\Honza\AppData\Roaming\AIMP3
2013-04-27 19:12:59 ----D---- C:\Windows\system32\config
2013-04-25 14:31:52 ----D---- C:\Windows\Microsoft.NET
2013-04-25 14:31:45 ----RSD---- C:\Windows\assembly
2013-04-25 13:56:11 ----D---- C:\Windows\winsxs
2013-04-25 13:54:37 ----D---- C:\Windows\system32\drivers
2013-04-25 13:54:17 ----D---- C:\Windows\Tasks
2013-04-25 13:52:57 ----SHD---- C:\System Volume Information
2013-04-25 13:52:53 ----D---- C:\Windows\system32\drivers\etc
2013-04-25 13:50:46 ----D---- C:\Downloads
2013-04-24 10:17:17 ----D---- C:\Windows\system32\catroot
2013-04-24 10:14:44 ----SHD---- C:\Windows\Installer
2013-04-23 09:37:45 ----RD---- C:\Program Files (x86)
2013-04-23 09:26:34 ----D---- C:\Windows\system32\catroot2
2013-04-22 21:08:37 ----HD---- C:\ProgramData
2013-04-22 11:55:19 ----D---- C:\Windows\rescache
2013-04-22 11:15:15 ----D---- C:\Windows
2013-04-22 11:13:46 ----D---- C:\Windows\system32\DriverStore
2013-04-22 11:09:22 ----D---- C:\Program Files (x86)\Windows Sidebar
2013-04-22 11:09:22 ----D---- C:\Program Files (x86)\Windows Portable Devices
2013-04-22 11:09:22 ----D---- C:\Program Files (x86)\Windows Media Player
2013-04-22 11:09:22 ----D---- C:\Program Files (x86)\Windows Mail
2013-04-22 11:09:21 ----D---- C:\Program Files\Windows Sidebar
2013-04-22 11:09:21 ----D---- C:\Program Files\Windows Portable Devices
2013-04-22 11:09:21 ----D---- C:\Program Files\Windows Photo Viewer
2013-04-22 11:09:21 ----D---- C:\Program Files\Windows Media Player
2013-04-22 11:09:21 ----D---- C:\Program Files\Windows Mail
2013-04-22 11:09:21 ----D---- C:\Program Files\Windows Journal
2013-04-22 11:09:21 ----D---- C:\Program Files\DVD Maker
2013-04-22 11:09:21 ----D---- C:\Program Files\Common Files\System
2013-04-22 11:09:21 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2013-04-22 11:09:20 ----D---- C:\Windows\servicing
2013-04-22 11:09:20 ----D---- C:\Windows\ehome
2013-04-22 11:09:20 ----D---- C:\Program Files\Windows Defender
2013-04-22 11:09:13 ----D---- C:\Windows\SYSWOW64\sppui
2013-04-22 11:09:13 ----D---- C:\Windows\SYSWOW64\Setup
2013-04-22 11:09:13 ----D---- C:\Windows\SYSWOW64\oobe
2013-04-22 11:09:13 ----D---- C:\Windows\SYSWOW64\migration
2013-04-22 11:09:13 ----D---- C:\Windows\SYSWOW64\manifeststore
2013-04-22 11:09:13 ----D---- C:\Windows\SYSWOW64\es-ES
2013-04-22 11:09:13 ----D---- C:\Windows\SYSWOW64\da-DK
2013-04-22 11:09:13 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-04-22 11:09:13 ----D---- C:\Windows\SYSWOW64\cs
2013-04-22 11:09:13 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2013-04-22 11:09:12 ----D---- C:\Windows\SYSWOW64\wbem
2013-04-22 11:09:12 ----D---- C:\Windows\SYSWOW64\migwiz
2013-04-22 11:09:12 ----D---- C:\Windows\SYSWOW64\Dism
2013-04-22 11:09:12 ----D---- C:\Windows\SysWOW64
2013-04-22 11:09:04 ----D---- C:\Windows\system32\oobe
2013-04-22 11:09:04 ----D---- C:\Windows\system32\migration
2013-04-22 11:09:04 ----D---- C:\Windows\system32\en-US
2013-04-22 11:09:04 ----D---- C:\Windows\system32\da-DK
2013-04-22 11:09:04 ----D---- C:\Windows\PolicyDefinitions
2013-04-22 11:09:03 ----D---- C:\Windows\system32\Setup
2013-04-22 11:09:03 ----D---- C:\Windows\system32\cs
2013-04-22 11:09:03 ----D---- C:\Windows\system32\AdvancedInstallers
2013-04-22 11:08:58 ----D---- C:\Windows\system32\cs-CZ
2013-04-22 11:08:57 ----D---- C:\Windows\system32\wbem
2013-04-22 11:08:57 ----D---- C:\Windows\system32\sppui
2013-04-22 11:08:57 ----D---- C:\Windows\system32\migwiz
2013-04-22 11:08:57 ----D---- C:\Windows\system32\manifeststore
2013-04-22 11:08:57 ----D---- C:\Windows\system32\es-ES
2013-04-22 11:08:57 ----D---- C:\Windows\system32\drivers\cs-CZ
2013-04-22 11:08:57 ----D---- C:\Windows\system32\Dism
2013-04-22 11:08:41 ----RSD---- C:\Windows\Fonts
2013-04-22 11:08:40 ----D---- C:\Windows\AppPatch
2013-04-22 11:08:31 ----D---- C:\Windows\system32\Boot
2013-04-22 10:55:46 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2013-04-22 10:55:45 ----A---- C:\Windows\system32\msclmd.dll
2013-04-22 09:48:49 ----D---- C:\Program Files (x86)\Microsoft Office
2013-04-22 09:37:55 ----D---- C:\ProgramData\Adobe
2013-04-22 09:37:53 ----D---- C:\Windows\system32\Tasks
2013-04-22 09:37:49 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-04-22 09:28:30 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-04-22 09:26:58 ----D---- C:\Program Files (x86)\Internet Explorer
2013-04-22 09:26:57 ----D---- C:\Program Files\Internet Explorer
2013-04-22 09:19:19 ----D---- C:\ProgramData\Microsoft Help
2013-04-22 09:17:07 ----D---- C:\Windows\debug
2013-04-22 09:15:37 ----D---- C:\Program Files\Microsoft Security Client
2013-04-22 09:15:36 ----D---- C:\Program Files (x86)\Microsoft Security Client
2013-04-21 23:13:19 ----D---- C:\Users\Honza\AppData\Roaming\vlc
2013-04-20 10:03:18 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-04-18 21:44:24 ----A---- C:\Windows\NeroDigital.ini
2013-04-17 07:40:56 ----D---- C:\Program Files (x86)\Common Files
2013-04-17 07:40:50 ----D---- C:\Program Files (x86)\Java
2013-04-16 23:34:15 ----RD---- C:\Program Files
2013-04-12 17:26:34 ----D---- C:\Windows\system32\NDF
2013-04-09 22:33:21 ----SD---- C:\Users\Honza\AppData\Roaming\Microsoft
2013-04-08 22:57:16 ----D---- C:\Windows\Minidump
2013-04-02 12:34:28 ----N---- C:\Windows\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-12-17 538136]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-01-20 230320]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2011-03-18 29592]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2013-02-04 834544]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-01-20 130008]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-10-21 6856704]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-10-21 264704]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 125456]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl664.sys [2009-08-21 2978296]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-02-22 2271648]
R3 intelkmd;intelkmd; C:\Windows\system32\DRIVERS\igdpmd64.sys [2010-10-21 10331840]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2009-12-22 74280]
R3 MarvinBus;Pinnacle Marvin Bus 64; C:\Windows\system32\DRIVERS\MarvinBus64.sys [2005-09-23 261120]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-09-17 292912]
S3 a1yuqdxo;a1yuqdxo; C:\Windows\system32\drivers\a1yuqdxo.sys []
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM); C:\Windows\system32\DRIVERS\s0016bus.sys [2008-05-16 115240]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s0016mdfl.sys [2008-05-16 19496]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s0016mdm.sys [2008-05-16 158760]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s0016mgmt.sys [2008-05-16 137256]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS); C:\Windows\system32\DRIVERS\s0016nd5.sys [2008-05-16 34344]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s0016obex.sys [2008-05-16 136744]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM); C:\Windows\system32\DRIVERS\s0016unic.sys [2008-05-16 151592]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-10-21 203264]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2009-09-21 1420560]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2009-12-23 13336]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-01-27 22056]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2009-09-21 831760]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-01-27 379360]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-04-12 115608]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-02-06 1255736]

-----------------EOF-----------------

Zadny bluescreen, ale predtim to take nebylo pravidelne. Firefox se stale obcas kousne na 2-4 sekundy. Jinak zadne problemy. Pokud uz v logu neni zadna breberka tak vas nadale nebudu obtezovat. Dekuji

Jelikoz mate starou verzi RSIT, nevidim vypis z firefoxu. Ale doporucuji jeho preinstalaci. Zalozky i nastaveni si muzete zazalohovat pomoci mozbackup http://www.stahuj.centrum.cz/utility_a_ ... mozbackup/



Vsechny tyto programy - vcetne pripadne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce)

vyosek píše: T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry mohou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

Stahnete OTC http://oldtimer.geekstogo.com/OTC.exe , ulozte a spustte.
Kliknete na napis CleanUp a pote OK - Po uklidu dojde k restartu pc.

Stahnete TFC http://oldtimer.geekstogo.com/TFC.exe , ulozte a spustte
Kliknete na START a pote OK - Po uklidu dojde k restartu pc.
Po pouziti muzete programek smazat

Stahnete Ccleaner http://www.stahuj.centrum.cz/utility_a_ ... /ccleaner/ a spustte.
Pri instalaci pozor na toolbar (ci jine doplnky), jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete.
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!

Defragmentujte disk(y)
Stahnete program Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
Pri instalaci opet pozor na toolbar
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci.




Pak napiste, jak je na tom pc a zda se neobjevila BSOD.