kontrola prosím pro jistotu... děkuji
Napsal: 30 srp 2010 14:10
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:00:36, on 30.8.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal
Running processes:
D:\Program Files (x86)\Ashampoo\Ashampoo HDD Control\HDDControlGuard.exe
D:\Program Files (x86)\RocketDock\RocketDock.exe
D:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.Exe
D:\Program Files (x86)\FlashGet Network\FlashGet 3\Flashget3.exe
D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
E:\Setup.exe
C:\Users\SAIXX\AppData\Local\Temp\is-REJ77.tmp\Setup.tmp
C:\Users\SAIXX\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\SAIXX\AppData\Local\Google\Chrome\Application\chrome.exe
D:\RSIT.exe
C:\Users\SAIXX\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\trend micro\SAIXX.exe
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O2 - BHO: FlashGetBHO - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - D:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGetBHO3.dll
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [SpywareTerminator] "D:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [StartCCC] "D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [RocketDock] "D:\Program Files (x86)\RocketDock\RocketDock.exe"
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: Free YouTube Download - C:\Users\SAIXX\AppData\Roaming\DVDVideoSoftIEHelpers\youtubedownload.htm
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\SAIXX\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm
O8 - Extra context menu item: Stahnou vse FlashGet3 - C:\Users\SAIXX\AppData\Roaming\FlashGetBHO\GetAllUrl.htm
O8 - Extra context menu item: Stahnout FlashGet3 - C:\Users\SAIXX\AppData\Roaming\FlashGetBHO\GetUrl.htm
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Defragmentation-Service (DfSdkS) - mst software GmbH, Germany - D:\Program Files (x86)\Ashampoo\Ashampoo HDD Control\DfsdkS.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - D:\Program Files (x86)\Spyware Terminator\sp_rsser.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 6136 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3367574848-2455517582-3598705173-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3367574848-2455517582-3598705173-1001UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
C:\PROGRA~2\Crawler\Toolbar\ctbr.dll [2010-06-23 1241448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0}]
FlashGetBHO - D:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGetBHO3.dll [2010-05-11 144944]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler lišta - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll [2010-06-23 1241448]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ATICustomerCare"=C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe [2010-03-04 311296]
"NPSStartup"= []
"SpywareTerminator"=D:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2010-06-24 2176512]
"StartCCC"=D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-08-03 98304]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"=D:\Program Files (x86)\RocketDock\RocketDock.exe [2007-09-02 495616]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=
"NoActiveDesktopChanges"=
"ForceActiveDesktopOn"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"D:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe"="D:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{535e148e-73f0-11df-a60a-002354076bba}]
shell\AutoRun\command - E:\Setup.exe
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 3 months======
2010-08-30 15:00:08 ----D---- C:\Program Files (x86)\trend micro
2010-08-30 15:00:04 ----D---- C:\rsit
2010-08-28 23:39:03 ----D---- C:\ProgramData\ATI
2010-08-28 14:48:54 ----D---- C:\ProgramData\LightScribe
2010-08-28 14:15:50 ----D---- C:\Program Files (x86)\Common Files\LightScribe
2010-08-25 12:49:32 ----A---- C:\Windows\SysWOW64\oleaut32.dll
2010-08-23 14:34:57 ----D---- C:\Users\SAIXX\AppData\Roaming\XWindows Dock
2010-08-19 01:17:08 ----A---- C:\Windows\SysWOW64\pbsvc.exe
2010-08-19 00:14:28 ----RA---- C:\Windows\SysWOW64\tmpC68D.tmp
2010-08-19 00:08:56 ----RA---- C:\Windows\SysWOW64\tmpC583.tmp
2010-08-18 16:46:17 ----A---- C:\Windows\SysWOW64\mkl_vml_p4.dll
2010-08-18 16:46:17 ----A---- C:\Windows\SysWOW64\mkl_vml_p3.dll
2010-08-18 16:46:16 ----A---- C:\Windows\SysWOW64\mkl_vml_def.dll
2010-08-18 16:46:16 ----A---- C:\Windows\SysWOW64\mkl_p4.dll
2010-08-18 16:46:16 ----A---- C:\Windows\SysWOW64\mkl_p3.dll
2010-08-18 16:46:16 ----A---- C:\Windows\SysWOW64\mkl_lapack64.dll
2010-08-18 16:46:16 ----A---- C:\Windows\SysWOW64\mkl_lapack32.dll
2010-08-18 16:46:16 ----A---- C:\Windows\SysWOW64\mkl_def.dll
2010-08-18 16:46:15 ----A---- C:\Windows\SysWOW64\rapture3d_oal.dll
2010-08-18 16:46:15 ----A---- C:\Windows\SysWOW64\libguide40.dll
2010-08-18 16:46:14 ----D---- C:\Program Files (x86)\BRS
2010-08-18 16:45:00 ----D---- C:\Windows\SysWOW64\xlive
2010-08-18 16:44:59 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2010-08-18 16:44:38 ----RA---- C:\Windows\SysWOW64\tmp89BC.tmp
2010-08-18 16:41:27 ----RA---- C:\Windows\SysWOW64\tmp891F.tmp
2010-08-15 18:16:30 ----D---- C:\Program Files (x86)\Google
2010-08-14 14:59:14 ----D---- C:\ProgramData\Synetic
2010-08-13 13:02:59 ----D---- C:\ProgramData\Codemasters
2010-08-13 12:52:31 ----D---- C:\Program Files (x86)\OpenAL
2010-08-13 12:52:31 ----A---- C:\Windows\SysWOW64\wrap_oal.dll
2010-08-13 12:52:31 ----A---- C:\Windows\SysWOW64\OpenAL32.dll
2010-08-11 21:48:35 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2010-08-11 21:47:13 ----A---- C:\Windows\SysWOW64\XAPOFX1_5.dll
2010-08-11 21:47:12 ----A---- C:\Windows\SysWOW64\XAudio2_7.dll
2010-08-11 21:47:12 ----A---- C:\Windows\SysWOW64\xactengine3_7.dll
2010-08-11 21:47:11 ----A---- C:\Windows\SysWOW64\D3DCompiler_43.dll
2010-08-11 21:47:10 ----A---- C:\Windows\SysWOW64\d3dcsx_43.dll
2010-08-11 21:47:09 ----A---- C:\Windows\SysWOW64\d3dx11_43.dll
2010-08-11 21:47:08 ----A---- C:\Windows\SysWOW64\d3dx10_43.dll
2010-08-11 21:47:07 ----A---- C:\Windows\SysWOW64\D3DX9_43.dll
2010-08-11 21:46:43 ----A---- C:\Windows\SysWOW64\d3dx10_40.dll
2010-08-11 21:46:43 ----A---- C:\Windows\SysWOW64\D3DCompiler_40.dll
2010-08-11 21:46:41 ----A---- C:\Windows\SysWOW64\D3DX9_40.dll
2010-08-10 20:10:29 ----A---- C:\Windows\SysWOW64\msxml3.dll
2010-08-10 20:10:03 ----A---- C:\Windows\SysWOW64\mshtml.dll
2010-08-10 20:10:02 ----A---- C:\Windows\SysWOW64\ieframe.dll
2010-08-10 20:10:01 ----A---- C:\Windows\SysWOW64\wininet.dll
2010-08-10 20:10:01 ----A---- C:\Windows\SysWOW64\urlmon.dll
2010-08-10 20:10:00 ----A---- C:\Windows\SysWOW64\mstime.dll
2010-08-10 20:10:00 ----A---- C:\Windows\SysWOW64\iepeers.dll
2010-08-10 20:10:00 ----A---- C:\Windows\SysWOW64\iedkcs32.dll
2010-08-10 20:09:59 ----A---- C:\Windows\SysWOW64\msfeedsbs.dll
2010-08-10 20:09:59 ----A---- C:\Windows\SysWOW64\ieui.dll
2010-08-10 20:09:58 ----A---- C:\Windows\SysWOW64\msfeedssync.exe
2010-08-10 20:09:58 ----A---- C:\Windows\SysWOW64\jsproxy.dll
2010-08-10 20:09:56 ----A---- C:\Windows\SysWOW64\rtutils.dll
2010-08-10 20:09:55 ----A---- C:\Windows\SysWOW64\schannel.dll
2010-08-10 20:09:51 ----A---- C:\Windows\SysWOW64\ntoskrnl.exe
2010-08-10 20:09:51 ----A---- C:\Windows\SysWOW64\ntkrnlpa.exe
2010-08-10 20:09:46 ----A---- C:\Windows\SysWOW64\iccvid.dll
2010-08-06 23:14:31 ----D---- C:\ProgramData\Pinnacle VideoSpin
2010-08-06 23:14:31 ----D---- C:\Program Files (x86)\Pinnacle
2010-08-06 23:10:07 ----D---- C:\ProgramData\Pinnacle
2010-08-04 03:54:50 ----A---- C:\Windows\SysWOW64\aticfx32.dll
2010-08-04 03:49:50 ----A---- C:\Windows\SysWOW64\atipdlxx.dll
2010-08-04 03:49:48 ----A---- C:\Windows\SysWOW64\atioglxx.dll
2010-08-04 03:49:40 ----A---- C:\Windows\SysWOW64\Oemdspif.dll
2010-08-04 03:49:26 ----A---- C:\Windows\SysWOW64\ati2edxx.dll
2010-08-04 03:46:32 ----A---- C:\Windows\SysWOW64\atidxx32.dll
2010-08-04 03:28:26 ----A---- C:\Windows\SysWOW64\atiumdag.dll
2010-08-04 03:26:00 ----A---- C:\Windows\SysWOW64\aticalrt.dll
2010-08-04 03:25:50 ----A---- C:\Windows\SysWOW64\aticalcl.dll
2010-08-04 03:24:34 ----A---- C:\Windows\SysWOW64\aticaldd.dll
2010-08-04 03:21:38 ----A---- C:\Windows\SysWOW64\atiumdva.dll
2010-08-04 03:16:06 ----A---- C:\Windows\SysWOW64\atiadlxy.dll
2010-08-04 03:15:54 ----A---- C:\Windows\SysWOW64\atiglpxx.dll
2010-08-04 03:15:48 ----A---- C:\Windows\SysWOW64\atigktxx.dll
2010-08-04 03:15:02 ----A---- C:\Windows\SysWOW64\atiuxpag.dll
2010-08-04 03:14:48 ----A---- C:\Windows\SysWOW64\atiu9pag.dll
2010-08-04 03:09:22 ----A---- C:\Windows\SysWOW64\atimpc32.dll
2010-08-04 03:09:22 ----A---- C:\Windows\SysWOW64\amdpcom32.dll
2010-08-02 19:47:13 ----A---- C:\Windows\SysWOW64\shell32.dll
2010-07-27 14:23:36 ----D---- C:\Program Files (x86)\ATI
2010-07-26 19:26:38 ----D---- C:\Users\SAIXX\AppData\Roaming\InstallShield Installation Information
2010-07-24 16:28:56 ----A---- C:\Windows\SysWOW64\PnkBstrA.exe
2010-07-24 16:28:48 ----A---- C:\Windows\SysWOW64\PnkBstrB.exe
2010-07-24 16:27:50 ----A---- C:\Windows\SysWOW64\CmdLineExt_x64.dll
2010-06-27 22:42:28 ----A---- C:\Windows\Ascd_tmp.ini
2010-06-27 22:42:09 ----A---- C:\Windows\AS_Debug.txt
2010-06-27 22:34:02 ----A---- C:\Windows\SysWOW64\MSVCRTD.DLL
2010-06-27 22:34:02 ----A---- C:\Windows\SysWOW64\mfc42d.dll
2010-06-27 18:24:31 ----AD---- C:\ProgramData\TEMP
2010-06-27 16:50:58 ----D---- C:\ProgramData\Kaspersky Lab
2010-06-27 16:49:42 ----D---- C:\Users\SAIXX\AppData\Roaming\Malwarebytes
2010-06-27 16:49:28 ----D---- C:\ProgramData\Malwarebytes
2010-06-27 16:44:42 ----D---- C:\Program Files (x86)\MSXML 4.0
2010-06-26 20:52:51 ----D---- C:\Users\SAIXX\AppData\Roaming\Unity
2010-06-26 15:43:20 ----D---- C:\Windows\pss
2010-06-26 15:08:33 ----D---- C:\Users\SAIXX\AppData\Roaming\BITS
2010-06-24 21:27:28 ----D---- C:\ProgramData\Spyware Terminator
2010-06-24 17:38:33 ----D---- C:\Users\SAIXX\AppData\Roaming\Auslogics
2010-06-24 16:53:50 ----D---- C:\ProgramData\SITEguard
2010-06-24 16:51:47 ----D---- C:\Program Files (x86)\Common Files\iS3
2010-06-24 16:20:44 ----D---- C:\Program Files (x86)\Crawler
2010-06-24 16:20:30 ----D---- C:\Users\SAIXX\AppData\Roaming\Spyware Terminator
2010-06-23 20:07:57 ----A---- C:\Windows\SysWOW64\DfSdkBt.exe
2010-06-23 18:20:21 ----D---- C:\Program Files (x86)\MyFree Codec
2010-06-23 18:10:22 ----A---- C:\Windows\SysWOW64\FsExService64.Exe
2010-06-23 18:08:13 ----D---- C:\Program Files (x86)\MarkAny
2010-06-23 18:08:12 ----D---- C:\ProgramData\Samsung
2010-06-23 18:07:50 ----D---- C:\Program Files (x86)\Common Files\Samsung
2010-06-23 17:54:26 ----A---- C:\Windows\SysWOW64\DfSdkBt32.exe
2010-06-23 14:50:58 ----D---- C:\ProgramData\NETGATE
2010-06-23 14:08:10 ----D---- C:\ProgramData\!SASCORE
2010-06-22 23:05:35 ----A---- C:\Windows\SysWOW64\PresentationHostProxy.dll
2010-06-22 23:05:35 ----A---- C:\Windows\SysWOW64\PresentationHost.exe
2010-06-22 23:05:35 ----A---- C:\Windows\SysWOW64\netfxperf.dll
2010-06-22 23:05:35 ----A---- C:\Windows\SysWOW64\mscoree.dll
2010-06-22 23:05:34 ----A---- C:\Windows\SysWOW64\dfshim.dll
2010-06-22 23:00:51 ----A---- C:\Windows\SysWOW64\ntdll.dll
2010-06-22 23:00:24 ----A---- C:\Windows\SysWOW64\CPFilters.dll
2010-06-20 19:29:00 ----A---- C:\Windows\EAConfigInfo.txt
2010-06-20 17:22:09 ----A---- C:\Windows\SysWOW64\NPSExec.exe
2010-06-18 14:14:47 ----A---- C:\Windows\SysWOW64\MSVCP50.DLL
2010-06-18 14:13:19 ----A---- C:\Windows\IsUninst.exe
2010-06-17 15:17:36 ----A---- C:\Windows\SysWOW64\GkSui18.EXE
2010-06-17 15:11:42 ----D---- C:\Users\SAIXX\AppData\Roaming\Samsung
2010-06-13 13:05:34 ----D---- C:\Users\SAIXX\AppData\Roaming\ESET
2010-06-13 13:04:29 ----D---- C:\ProgramData\ESET
2010-06-13 03:22:25 ----D---- C:\Program Files (x86)\Microsoft Antimalware
2010-06-13 02:24:43 ----D---- C:\Windows\SysWOW64\Adobe
2010-06-13 01:59:48 ----D---- C:\Windows\Sun
2010-06-13 01:58:32 ----D---- C:\ProgramData\Sun
2010-06-13 01:58:30 ----D---- C:\Program Files (x86)\Common Files\Java
2010-06-13 01:58:06 ----A---- C:\Windows\SysWOW64\javaws.exe
2010-06-13 01:58:06 ----A---- C:\Windows\SysWOW64\javaw.exe
2010-06-13 01:58:06 ----A---- C:\Windows\SysWOW64\java.exe
2010-06-13 01:58:06 ----A---- C:\Windows\SysWOW64\deployJava1.dll
2010-06-13 01:57:57 ----D---- C:\Program Files (x86)\Java
2010-06-11 22:57:31 ----D---- C:\Program Files (x86)\Common Files\Adobe
2010-06-10 18:04:00 ----RHD---- C:\MSOCache
2010-06-10 17:48:51 ----A---- C:\Windows\SysWOW64\PerfStringBackup.INI
2010-06-10 17:43:02 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2010-06-10 17:39:03 ----D---- C:\Users\SAIXX\AppData\Roaming\QIP
2010-06-10 17:24:56 ----D---- C:\Program Files (x86)\Microsoft Works
2010-06-10 17:24:20 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2010-06-10 17:24:20 ----D---- C:\Program Files (x86)\Common Files\DESIGNER
2010-06-10 17:24:07 ----D---- C:\Windows\PCHEALTH
2010-06-10 17:24:07 ----D---- C:\Program Files (x86)\Microsoft.NET
2010-06-10 17:21:37 ----D---- C:\ProgramData\Microsoft Help
2010-06-10 15:35:36 ----D---- C:\Users\SAIXX\AppData\Roaming\DVDVideoSoftIEHelpers
2010-06-10 15:34:44 ----D---- C:\Program Files (x86)\Common Files\DVDVideoSoft
2010-06-10 14:52:22 ----D---- C:\Users\SAIXX\AppData\Roaming\Ashampoo
2010-06-10 14:49:48 ----D---- C:\Users\SAIXX\AppData\Roaming\Leadertech
2010-06-10 14:49:39 ----D---- C:\Program Files (x86)\Common Files\LogiShrd
2010-06-10 14:48:29 ----D---- C:\ProgramData\Logishrd
2010-06-10 04:20:58 ----D---- C:\Windows\Panther
2010-06-10 04:20:46 ----RASH---- C:\BOOTSECT.BAK
2010-06-10 04:20:44 ----SHD---- C:\Boot
2010-06-09 19:52:08 ----D---- C:\Users\SAIXX\AppData\Roaming\ATI
2010-06-09 19:48:29 ----A---- C:\Windows\SysWOW64\AsIO.dll
2010-06-09 19:48:28 ----D---- C:\Program Files (x86)\ASUS
2010-06-09 19:48:08 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2010-06-09 19:47:37 ----D---- C:\Program Files (x86)\Common Files\InstallShield
2010-06-09 19:47:36 ----A---- C:\Windows\Language_trs.ini
2010-06-09 19:46:15 ----D---- C:\Program Files (x86)\Canon
2010-06-09 19:42:50 ----HD---- C:\ProgramData\CanonBJ
2010-06-09 19:32:42 ----A---- C:\Windows\libem.INI
2010-06-09 19:31:28 ----D---- C:\Users\SAIXX\AppData\Roaming\Logitech
2010-06-09 19:31:09 ----D---- C:\Users\SAIXX\AppData\Roaming\FlashGetBHO
2010-06-09 19:29:07 ----D---- C:\Users\SAIXX\AppData\Roaming\DAEMON Tools Lite
2010-06-09 19:28:01 ----D---- C:\NVIDIA
2010-06-09 19:18:19 ----D---- C:\Users\SAIXX\AppData\Roaming\WinRAR
2010-06-09 19:16:38 ----D---- C:\Users\SAIXX\AppData\Roaming\THQ
2010-06-09 19:12:26 ----D---- C:\Program Files (x86)\Common Files\Steam
2010-06-09 19:08:30 ----D---- C:\Users\SAIXX\AppData\Roaming\Opera
2010-06-09 19:05:42 ----SHD---- C:\Windows\Installer
2010-06-09 19:04:54 ----D---- C:\Users\SAIXX\AppData\Roaming\Macromedia
2010-06-09 19:04:54 ----D---- C:\Users\SAIXX\AppData\Roaming\Adobe
2010-06-09 19:04:52 ----D---- C:\Windows\SysWOW64\Macromed
2010-06-09 19:01:43 ----D---- C:\Users\SAIXX\AppData\Roaming\ImgBurn
2010-06-09 19:01:33 ----D---- C:\Users\SAIXX\AppData\Roaming\Logishrd
2010-06-09 18:59:55 ----D---- C:\Users\SAIXX\AppData\Roaming\ICQ
2010-06-09 18:59:22 ----D---- C:\Users\SAIXX\AppData\Roaming\GRETECH
2010-06-09 18:57:54 ----D---- C:\Users\SAIXX\AppData\Roaming\FlashGet
2010-06-09 18:53:52 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-06-09 18:52:34 ----D---- C:\Users\SAIXX\AppData\Roaming\Audacity
2010-06-09 18:52:30 ----A---- C:\Windows\SysWOW64\msv1_0.dll
2010-06-09 18:45:31 ----A---- C:\Windows\SysWOW64\XAudio2_6.dll
2010-06-09 18:45:31 ----A---- C:\Windows\SysWOW64\XAudio2_5.dll
2010-06-09 18:45:31 ----A---- C:\Windows\SysWOW64\XAPOFX1_4.dll
2010-06-09 18:45:31 ----A---- C:\Windows\SysWOW64\xactengine3_6.dll
2010-06-09 18:45:31 ----A---- C:\Windows\SysWOW64\X3DAudio1_7.dll
2010-06-09 18:45:30 ----A---- C:\Windows\SysWOW64\xactengine3_5.dll
2010-06-09 18:45:30 ----A---- C:\Windows\SysWOW64\D3DCompiler_42.dll
2010-06-09 18:45:29 ----A---- C:\Windows\SysWOW64\d3dcsx_42.dll
2010-06-09 18:45:27 ----A---- C:\Windows\SysWOW64\D3DX9_42.dll
2010-06-09 18:45:27 ----A---- C:\Windows\SysWOW64\d3dx11_42.dll
2010-06-09 18:45:27 ----A---- C:\Windows\SysWOW64\d3dx10_42.dll
2010-06-09 18:45:25 ----A---- C:\Windows\SysWOW64\d3dx10_41.dll
2010-06-09 18:45:25 ----A---- C:\Windows\SysWOW64\D3DCompiler_41.dll
2010-06-09 18:45:24 ----A---- C:\Windows\SysWOW64\D3DX9_41.dll
2010-06-09 18:45:23 ----A---- C:\Windows\SysWOW64\XAudio2_4.dll
2010-06-09 18:45:23 ----A---- C:\Windows\SysWOW64\XAPOFX1_3.dll
2010-06-09 18:45:22 ----A---- C:\Windows\SysWOW64\xactengine3_4.dll
2010-06-09 18:45:22 ----A---- C:\Windows\SysWOW64\X3DAudio1_6.dll
2010-06-09 18:45:19 ----A---- C:\Windows\SysWOW64\XAudio2_3.dll
2010-06-09 18:45:19 ----A---- C:\Windows\SysWOW64\XAPOFX1_2.dll
2010-06-09 18:45:18 ----A---- C:\Windows\SysWOW64\xactengine3_3.dll
2010-06-09 18:45:17 ----A---- C:\Windows\SysWOW64\X3DAudio1_5.dll
2010-06-09 18:45:16 ----A---- C:\Windows\SysWOW64\XAudio2_2.dll
2010-06-09 18:45:16 ----A---- C:\Windows\SysWOW64\XAPOFX1_1.dll
2010-06-09 18:45:16 ----A---- C:\Windows\SysWOW64\xactengine3_2.dll
2010-06-09 18:45:16 ----A---- C:\Windows\SysWOW64\D3DX9_39.dll
2010-06-09 18:45:16 ----A---- C:\Windows\SysWOW64\d3dx10_39.dll
2010-06-09 18:45:16 ----A---- C:\Windows\SysWOW64\D3DCompiler_39.dll
2010-06-09 18:45:15 ----A---- C:\Windows\SysWOW64\XAudio2_1.dll
2010-06-09 18:45:15 ----A---- C:\Windows\SysWOW64\XAPOFX1_0.dll
2010-06-09 18:45:15 ----A---- C:\Windows\SysWOW64\xactengine3_1.dll
2010-06-09 18:45:15 ----A---- C:\Windows\SysWOW64\X3DAudio1_4.dll
2010-06-09 18:45:13 ----A---- C:\Windows\SysWOW64\d3dx10_38.dll
2010-06-09 18:45:13 ----A---- C:\Windows\SysWOW64\D3DCompiler_38.dll
2010-06-09 18:45:12 ----A---- C:\Windows\SysWOW64\D3DX9_38.dll
2010-06-09 18:45:11 ----A---- C:\Windows\SysWOW64\XAudio2_0.dll
2010-06-09 18:45:11 ----A---- C:\Windows\SysWOW64\xactengine3_0.dll
2010-06-09 18:45:11 ----A---- C:\Windows\SysWOW64\X3DAudio1_3.dll
2010-06-09 18:45:11 ----A---- C:\Windows\SysWOW64\d3dx10_37.dll
2010-06-09 18:45:11 ----A---- C:\Windows\SysWOW64\D3DCompiler_37.dll
2010-06-09 18:45:10 ----A---- C:\Windows\SysWOW64\xactengine2_10.dll
2010-06-09 18:45:10 ----A---- C:\Windows\SysWOW64\D3DX9_37.dll
2010-06-09 18:45:10 ----A---- C:\Windows\SysWOW64\d3dx10_36.dll
2010-06-09 18:45:10 ----A---- C:\Windows\SysWOW64\D3DCompiler_36.dll
2010-06-09 18:45:09 ----A---- C:\Windows\SysWOW64\xactengine2_9.dll
2010-06-09 18:45:09 ----A---- C:\Windows\SysWOW64\d3dx9_36.dll
2010-06-09 18:45:09 ----A---- C:\Windows\SysWOW64\d3dx10_35.dll
2010-06-09 18:45:09 ----A---- C:\Windows\SysWOW64\D3DCompiler_35.dll
2010-06-09 18:45:08 ----A---- C:\Windows\SysWOW64\xactengine2_8.dll
2010-06-09 18:45:08 ----A---- C:\Windows\SysWOW64\X3DAudio1_2.dll
2010-06-09 18:45:08 ----A---- C:\Windows\SysWOW64\d3dx9_35.dll
2010-06-09 18:45:08 ----A---- C:\Windows\SysWOW64\d3dx9_34.dll
2010-06-09 18:45:08 ----A---- C:\Windows\SysWOW64\d3dx10_34.dll
2010-06-09 18:45:08 ----A---- C:\Windows\SysWOW64\D3DCompiler_34.dll
2010-06-09 18:45:07 ----A---- C:\Windows\SysWOW64\xinput1_3.dll
2010-06-09 18:45:07 ----A---- C:\Windows\SysWOW64\xactengine2_7.dll
2010-06-09 18:45:07 ----A---- C:\Windows\SysWOW64\d3dx10_33.dll
2010-06-09 18:45:07 ----A---- C:\Windows\SysWOW64\D3DCompiler_33.dll
2010-06-09 18:45:06 ----A---- C:\Windows\SysWOW64\d3dx9_33.dll
2010-06-09 18:45:05 ----A---- C:\Windows\SysWOW64\xactengine2_6.dll
2010-06-09 18:45:04 ----A---- C:\Windows\SysWOW64\xactengine2_5.dll
2010-06-09 18:45:02 ----A---- C:\Windows\SysWOW64\d3dx10.dll
2010-06-09 18:45:01 ----A---- C:\Windows\SysWOW64\xactengine2_4.dll
2010-06-09 18:45:01 ----A---- C:\Windows\SysWOW64\x3daudio1_1.dll
2010-06-09 18:45:01 ----A---- C:\Windows\SysWOW64\d3dx9_32.dll
2010-06-09 18:45:01 ----A---- C:\Windows\SysWOW64\d3dx9_31.dll
2010-06-09 18:45:00 ----A---- C:\Windows\SysWOW64\xinput1_2.dll
2010-06-09 18:45:00 ----A---- C:\Windows\SysWOW64\xactengine2_3.dll
2010-06-09 18:45:00 ----A---- C:\Windows\SysWOW64\xactengine2_2.dll
2010-06-09 18:44:59 ----A---- C:\Windows\SysWOW64\xinput1_1.dll
2010-06-09 18:44:59 ----A---- C:\Windows\SysWOW64\xactengine2_1.dll
2010-06-09 18:44:58 ----A---- C:\Windows\SysWOW64\d3dx9_30.dll
2010-06-09 18:44:57 ----A---- C:\Windows\SysWOW64\xactengine2_0.dll
2010-06-09 18:44:57 ----A---- C:\Windows\SysWOW64\x3daudio1_0.dll
2010-06-09 18:44:57 ----A---- C:\Windows\SysWOW64\d3dx9_29.dll
2010-06-09 18:44:55 ----A---- C:\Windows\SysWOW64\d3dx9_28.dll
2010-06-09 18:44:54 ----A---- C:\Windows\SysWOW64\d3dx9_27.dll
2010-06-09 18:44:52 ----A---- C:\Windows\SysWOW64\d3dx9_26.dll
2010-06-09 18:44:51 ----A---- C:\Windows\SysWOW64\d3dx9_25.dll
2010-06-09 18:44:48 ----A---- C:\Windows\SysWOW64\d3dx9_24.dll
2010-06-09 18:44:09 ----A---- C:\Windows\SysWOW64\asycfilt.dll
2010-06-09 18:43:53 ----A---- C:\Windows\SysWOW64\wmp.dll
2010-06-09 18:43:52 ----A---- C:\Windows\SysWOW64\CertEnroll.dll
2010-06-09 18:43:51 ----A---- C:\Windows\SysWOW64\wmploc.DLL
2010-06-09 18:43:47 ----A---- C:\Windows\SysWOW64\t2embed.dll
2010-06-09 18:43:46 ----A---- C:\Windows\SysWOW64\msasn1.dll
2010-06-09 18:43:42 ----A---- C:\Windows\SysWOW64\sspicli.dll
2010-06-09 18:43:42 ----A---- C:\Windows\SysWOW64\secur32.dll
2010-06-09 18:43:26 ----A---- C:\Windows\SysWOW64\psisdecd.dll
2010-06-09 18:43:25 ----A---- C:\Windows\SysWOW64\explorer.exe
2010-06-09 18:43:25 ----A---- C:\Windows\explorer.exe
2010-06-09 18:43:24 ----A---- C:\Windows\SysWOW64\secproc_isv.dll
2010-06-09 18:43:24 ----A---- C:\Windows\SysWOW64\secproc.dll
2010-06-09 18:43:23 ----A---- C:\Windows\SysWOW64\secproc_ssp_isv.dll
2010-06-09 18:43:23 ----A---- C:\Windows\SysWOW64\secproc_ssp.dll
2010-06-09 18:43:23 ----A---- C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2010-06-09 18:43:23 ----A---- C:\Windows\SysWOW64\RMActivate_isv.exe
2010-06-09 18:43:23 ----A---- C:\Windows\SysWOW64\RMActivate.exe
2010-06-09 18:43:22 ----A---- C:\Windows\SysWOW64\RMActivate_ssp.exe
2010-06-09 18:43:19 ----A---- C:\Windows\SysWOW64\quartz.dll
2010-06-09 18:43:18 ----A---- C:\Windows\SysWOW64\tsbyuv.dll
2010-06-09 18:43:18 ----A---- C:\Windows\SysWOW64\msyuv.dll
2010-06-09 18:43:18 ----A---- C:\Windows\SysWOW64\msvidc32.dll
2010-06-09 18:43:18 ----A---- C:\Windows\SysWOW64\msrle32.dll
2010-06-09 18:43:18 ----A---- C:\Windows\SysWOW64\mciavi32.dll
2010-06-09 18:43:18 ----A---- C:\Windows\SysWOW64\iyuv_32.dll
2010-06-09 18:43:18 ----A---- C:\Windows\SysWOW64\avifil32.dll
2010-06-09 18:43:11 ----A---- C:\Windows\SysWOW64\inetcomm.dll
2010-06-09 18:43:01 ----A---- C:\Windows\SysWOW64\wintrust.dll
2010-06-09 18:42:50 ----A---- C:\Windows\SysWOW64\fontsub.dll
2010-06-09 18:42:50 ----A---- C:\Windows\SysWOW64\atmlib.dll
2010-06-09 18:42:50 ----A---- C:\Windows\SysWOW64\atmfd.dll
2010-06-09 18:42:49 ----A---- C:\Windows\SysWOW64\jscript.dll
2010-06-09 18:42:48 ----A---- C:\Windows\SysWOW64\vbscript.dll
2010-06-09 18:42:47 ----A---- C:\Windows\SysWOW64\wow32.dll
2010-06-09 18:42:47 ----A---- C:\Windows\SysWOW64\user.exe
2010-06-09 18:42:47 ----A---- C:\Windows\SysWOW64\setup16.exe
2010-06-09 18:42:47 ----A---- C:\Windows\SysWOW64\ntvdm64.dll
2010-06-09 18:42:47 ----A---- C:\Windows\SysWOW64\instnm.exe
2010-06-09 18:42:45 ----A---- C:\Windows\SysWOW64\cabview.dll
2010-06-09 18:42:44 ----D---- C:\Users\SAIXX\AppData\Roaming\AnvSoft
2010-06-09 18:42:21 ----A---- C:\Windows\SysWOW64\tzres.dll
2010-06-09 18:41:23 ----D---- C:\Windows\SysWOW64\directx
2010-06-09 18:31:20 ----D---- C:\Users\SAIXX\AppData\Roaming\Identities
2010-06-09 18:30:59 ----SD---- C:\Users\SAIXX\AppData\Roaming\Microsoft
2010-06-09 18:30:59 ----D---- C:\Users\SAIXX\AppData\Roaming\Media Center Programs
2010-06-09 18:28:59 ----SHD---- C:\Recovery
2010-06-09 18:28:58 ----SHD---- C:\ProgramData\Šablony
2010-06-09 18:28:58 ----SHD---- C:\ProgramData\Plocha
2010-06-09 18:28:58 ----SHD---- C:\ProgramData\Oblíbené položky
2010-06-09 18:28:58 ----SHD---- C:\ProgramData\Nabídka Start
2010-06-09 18:28:58 ----SHD---- C:\ProgramData\Dokumenty
2010-06-09 18:28:58 ----SHD---- C:\ProgramData\Data aplikací
2010-06-09 18:24:49 ----D---- C:\Windows\SoftwareDistribution
2010-06-09 18:22:10 ----D---- C:\Windows\Prefetch
2010-06-09 18:21:50 ----SHD---- C:\System Volume Information
Scan saved at 15:00:36, on 30.8.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal
Running processes:
D:\Program Files (x86)\Ashampoo\Ashampoo HDD Control\HDDControlGuard.exe
D:\Program Files (x86)\RocketDock\RocketDock.exe
D:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.Exe
D:\Program Files (x86)\FlashGet Network\FlashGet 3\Flashget3.exe
D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
E:\Setup.exe
C:\Users\SAIXX\AppData\Local\Temp\is-REJ77.tmp\Setup.tmp
C:\Users\SAIXX\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\SAIXX\AppData\Local\Google\Chrome\Application\chrome.exe
D:\RSIT.exe
C:\Users\SAIXX\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\trend micro\SAIXX.exe
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O2 - BHO: FlashGetBHO - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - D:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGetBHO3.dll
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [SpywareTerminator] "D:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [StartCCC] "D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [RocketDock] "D:\Program Files (x86)\RocketDock\RocketDock.exe"
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: Free YouTube Download - C:\Users\SAIXX\AppData\Roaming\DVDVideoSoftIEHelpers\youtubedownload.htm
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\SAIXX\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm
O8 - Extra context menu item: Stahnou vse FlashGet3 - C:\Users\SAIXX\AppData\Roaming\FlashGetBHO\GetAllUrl.htm
O8 - Extra context menu item: Stahnout FlashGet3 - C:\Users\SAIXX\AppData\Roaming\FlashGetBHO\GetUrl.htm
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Defragmentation-Service (DfSdkS) - mst software GmbH, Germany - D:\Program Files (x86)\Ashampoo\Ashampoo HDD Control\DfsdkS.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - D:\Program Files (x86)\Spyware Terminator\sp_rsser.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 6136 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3367574848-2455517582-3598705173-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3367574848-2455517582-3598705173-1001UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
C:\PROGRA~2\Crawler\Toolbar\ctbr.dll [2010-06-23 1241448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0}]
FlashGetBHO - D:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGetBHO3.dll [2010-05-11 144944]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler lišta - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll [2010-06-23 1241448]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ATICustomerCare"=C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe [2010-03-04 311296]
"NPSStartup"= []
"SpywareTerminator"=D:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2010-06-24 2176512]
"StartCCC"=D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-08-03 98304]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"=D:\Program Files (x86)\RocketDock\RocketDock.exe [2007-09-02 495616]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=
"NoActiveDesktopChanges"=
"ForceActiveDesktopOn"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"D:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe"="D:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{535e148e-73f0-11df-a60a-002354076bba}]
shell\AutoRun\command - E:\Setup.exe
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 3 months======
2010-08-30 15:00:08 ----D---- C:\Program Files (x86)\trend micro
2010-08-30 15:00:04 ----D---- C:\rsit
2010-08-28 23:39:03 ----D---- C:\ProgramData\ATI
2010-08-28 14:48:54 ----D---- C:\ProgramData\LightScribe
2010-08-28 14:15:50 ----D---- C:\Program Files (x86)\Common Files\LightScribe
2010-08-25 12:49:32 ----A---- C:\Windows\SysWOW64\oleaut32.dll
2010-08-23 14:34:57 ----D---- C:\Users\SAIXX\AppData\Roaming\XWindows Dock
2010-08-19 01:17:08 ----A---- C:\Windows\SysWOW64\pbsvc.exe
2010-08-19 00:14:28 ----RA---- C:\Windows\SysWOW64\tmpC68D.tmp
2010-08-19 00:08:56 ----RA---- C:\Windows\SysWOW64\tmpC583.tmp
2010-08-18 16:46:17 ----A---- C:\Windows\SysWOW64\mkl_vml_p4.dll
2010-08-18 16:46:17 ----A---- C:\Windows\SysWOW64\mkl_vml_p3.dll
2010-08-18 16:46:16 ----A---- C:\Windows\SysWOW64\mkl_vml_def.dll
2010-08-18 16:46:16 ----A---- C:\Windows\SysWOW64\mkl_p4.dll
2010-08-18 16:46:16 ----A---- C:\Windows\SysWOW64\mkl_p3.dll
2010-08-18 16:46:16 ----A---- C:\Windows\SysWOW64\mkl_lapack64.dll
2010-08-18 16:46:16 ----A---- C:\Windows\SysWOW64\mkl_lapack32.dll
2010-08-18 16:46:16 ----A---- C:\Windows\SysWOW64\mkl_def.dll
2010-08-18 16:46:15 ----A---- C:\Windows\SysWOW64\rapture3d_oal.dll
2010-08-18 16:46:15 ----A---- C:\Windows\SysWOW64\libguide40.dll
2010-08-18 16:46:14 ----D---- C:\Program Files (x86)\BRS
2010-08-18 16:45:00 ----D---- C:\Windows\SysWOW64\xlive
2010-08-18 16:44:59 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2010-08-18 16:44:38 ----RA---- C:\Windows\SysWOW64\tmp89BC.tmp
2010-08-18 16:41:27 ----RA---- C:\Windows\SysWOW64\tmp891F.tmp
2010-08-15 18:16:30 ----D---- C:\Program Files (x86)\Google
2010-08-14 14:59:14 ----D---- C:\ProgramData\Synetic
2010-08-13 13:02:59 ----D---- C:\ProgramData\Codemasters
2010-08-13 12:52:31 ----D---- C:\Program Files (x86)\OpenAL
2010-08-13 12:52:31 ----A---- C:\Windows\SysWOW64\wrap_oal.dll
2010-08-13 12:52:31 ----A---- C:\Windows\SysWOW64\OpenAL32.dll
2010-08-11 21:48:35 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2010-08-11 21:47:13 ----A---- C:\Windows\SysWOW64\XAPOFX1_5.dll
2010-08-11 21:47:12 ----A---- C:\Windows\SysWOW64\XAudio2_7.dll
2010-08-11 21:47:12 ----A---- C:\Windows\SysWOW64\xactengine3_7.dll
2010-08-11 21:47:11 ----A---- C:\Windows\SysWOW64\D3DCompiler_43.dll
2010-08-11 21:47:10 ----A---- C:\Windows\SysWOW64\d3dcsx_43.dll
2010-08-11 21:47:09 ----A---- C:\Windows\SysWOW64\d3dx11_43.dll
2010-08-11 21:47:08 ----A---- C:\Windows\SysWOW64\d3dx10_43.dll
2010-08-11 21:47:07 ----A---- C:\Windows\SysWOW64\D3DX9_43.dll
2010-08-11 21:46:43 ----A---- C:\Windows\SysWOW64\d3dx10_40.dll
2010-08-11 21:46:43 ----A---- C:\Windows\SysWOW64\D3DCompiler_40.dll
2010-08-11 21:46:41 ----A---- C:\Windows\SysWOW64\D3DX9_40.dll
2010-08-10 20:10:29 ----A---- C:\Windows\SysWOW64\msxml3.dll
2010-08-10 20:10:03 ----A---- C:\Windows\SysWOW64\mshtml.dll
2010-08-10 20:10:02 ----A---- C:\Windows\SysWOW64\ieframe.dll
2010-08-10 20:10:01 ----A---- C:\Windows\SysWOW64\wininet.dll
2010-08-10 20:10:01 ----A---- C:\Windows\SysWOW64\urlmon.dll
2010-08-10 20:10:00 ----A---- C:\Windows\SysWOW64\mstime.dll
2010-08-10 20:10:00 ----A---- C:\Windows\SysWOW64\iepeers.dll
2010-08-10 20:10:00 ----A---- C:\Windows\SysWOW64\iedkcs32.dll
2010-08-10 20:09:59 ----A---- C:\Windows\SysWOW64\msfeedsbs.dll
2010-08-10 20:09:59 ----A---- C:\Windows\SysWOW64\ieui.dll
2010-08-10 20:09:58 ----A---- C:\Windows\SysWOW64\msfeedssync.exe
2010-08-10 20:09:58 ----A---- C:\Windows\SysWOW64\jsproxy.dll
2010-08-10 20:09:56 ----A---- C:\Windows\SysWOW64\rtutils.dll
2010-08-10 20:09:55 ----A---- C:\Windows\SysWOW64\schannel.dll
2010-08-10 20:09:51 ----A---- C:\Windows\SysWOW64\ntoskrnl.exe
2010-08-10 20:09:51 ----A---- C:\Windows\SysWOW64\ntkrnlpa.exe
2010-08-10 20:09:46 ----A---- C:\Windows\SysWOW64\iccvid.dll
2010-08-06 23:14:31 ----D---- C:\ProgramData\Pinnacle VideoSpin
2010-08-06 23:14:31 ----D---- C:\Program Files (x86)\Pinnacle
2010-08-06 23:10:07 ----D---- C:\ProgramData\Pinnacle
2010-08-04 03:54:50 ----A---- C:\Windows\SysWOW64\aticfx32.dll
2010-08-04 03:49:50 ----A---- C:\Windows\SysWOW64\atipdlxx.dll
2010-08-04 03:49:48 ----A---- C:\Windows\SysWOW64\atioglxx.dll
2010-08-04 03:49:40 ----A---- C:\Windows\SysWOW64\Oemdspif.dll
2010-08-04 03:49:26 ----A---- C:\Windows\SysWOW64\ati2edxx.dll
2010-08-04 03:46:32 ----A---- C:\Windows\SysWOW64\atidxx32.dll
2010-08-04 03:28:26 ----A---- C:\Windows\SysWOW64\atiumdag.dll
2010-08-04 03:26:00 ----A---- C:\Windows\SysWOW64\aticalrt.dll
2010-08-04 03:25:50 ----A---- C:\Windows\SysWOW64\aticalcl.dll
2010-08-04 03:24:34 ----A---- C:\Windows\SysWOW64\aticaldd.dll
2010-08-04 03:21:38 ----A---- C:\Windows\SysWOW64\atiumdva.dll
2010-08-04 03:16:06 ----A---- C:\Windows\SysWOW64\atiadlxy.dll
2010-08-04 03:15:54 ----A---- C:\Windows\SysWOW64\atiglpxx.dll
2010-08-04 03:15:48 ----A---- C:\Windows\SysWOW64\atigktxx.dll
2010-08-04 03:15:02 ----A---- C:\Windows\SysWOW64\atiuxpag.dll
2010-08-04 03:14:48 ----A---- C:\Windows\SysWOW64\atiu9pag.dll
2010-08-04 03:09:22 ----A---- C:\Windows\SysWOW64\atimpc32.dll
2010-08-04 03:09:22 ----A---- C:\Windows\SysWOW64\amdpcom32.dll
2010-08-02 19:47:13 ----A---- C:\Windows\SysWOW64\shell32.dll
2010-07-27 14:23:36 ----D---- C:\Program Files (x86)\ATI
2010-07-26 19:26:38 ----D---- C:\Users\SAIXX\AppData\Roaming\InstallShield Installation Information
2010-07-24 16:28:56 ----A---- C:\Windows\SysWOW64\PnkBstrA.exe
2010-07-24 16:28:48 ----A---- C:\Windows\SysWOW64\PnkBstrB.exe
2010-07-24 16:27:50 ----A---- C:\Windows\SysWOW64\CmdLineExt_x64.dll
2010-06-27 22:42:28 ----A---- C:\Windows\Ascd_tmp.ini
2010-06-27 22:42:09 ----A---- C:\Windows\AS_Debug.txt
2010-06-27 22:34:02 ----A---- C:\Windows\SysWOW64\MSVCRTD.DLL
2010-06-27 22:34:02 ----A---- C:\Windows\SysWOW64\mfc42d.dll
2010-06-27 18:24:31 ----AD---- C:\ProgramData\TEMP
2010-06-27 16:50:58 ----D---- C:\ProgramData\Kaspersky Lab
2010-06-27 16:49:42 ----D---- C:\Users\SAIXX\AppData\Roaming\Malwarebytes
2010-06-27 16:49:28 ----D---- C:\ProgramData\Malwarebytes
2010-06-27 16:44:42 ----D---- C:\Program Files (x86)\MSXML 4.0
2010-06-26 20:52:51 ----D---- C:\Users\SAIXX\AppData\Roaming\Unity
2010-06-26 15:43:20 ----D---- C:\Windows\pss
2010-06-26 15:08:33 ----D---- C:\Users\SAIXX\AppData\Roaming\BITS
2010-06-24 21:27:28 ----D---- C:\ProgramData\Spyware Terminator
2010-06-24 17:38:33 ----D---- C:\Users\SAIXX\AppData\Roaming\Auslogics
2010-06-24 16:53:50 ----D---- C:\ProgramData\SITEguard
2010-06-24 16:51:47 ----D---- C:\Program Files (x86)\Common Files\iS3
2010-06-24 16:20:44 ----D---- C:\Program Files (x86)\Crawler
2010-06-24 16:20:30 ----D---- C:\Users\SAIXX\AppData\Roaming\Spyware Terminator
2010-06-23 20:07:57 ----A---- C:\Windows\SysWOW64\DfSdkBt.exe
2010-06-23 18:20:21 ----D---- C:\Program Files (x86)\MyFree Codec
2010-06-23 18:10:22 ----A---- C:\Windows\SysWOW64\FsExService64.Exe
2010-06-23 18:08:13 ----D---- C:\Program Files (x86)\MarkAny
2010-06-23 18:08:12 ----D---- C:\ProgramData\Samsung
2010-06-23 18:07:50 ----D---- C:\Program Files (x86)\Common Files\Samsung
2010-06-23 17:54:26 ----A---- C:\Windows\SysWOW64\DfSdkBt32.exe
2010-06-23 14:50:58 ----D---- C:\ProgramData\NETGATE
2010-06-23 14:08:10 ----D---- C:\ProgramData\!SASCORE
2010-06-22 23:05:35 ----A---- C:\Windows\SysWOW64\PresentationHostProxy.dll
2010-06-22 23:05:35 ----A---- C:\Windows\SysWOW64\PresentationHost.exe
2010-06-22 23:05:35 ----A---- C:\Windows\SysWOW64\netfxperf.dll
2010-06-22 23:05:35 ----A---- C:\Windows\SysWOW64\mscoree.dll
2010-06-22 23:05:34 ----A---- C:\Windows\SysWOW64\dfshim.dll
2010-06-22 23:00:51 ----A---- C:\Windows\SysWOW64\ntdll.dll
2010-06-22 23:00:24 ----A---- C:\Windows\SysWOW64\CPFilters.dll
2010-06-20 19:29:00 ----A---- C:\Windows\EAConfigInfo.txt
2010-06-20 17:22:09 ----A---- C:\Windows\SysWOW64\NPSExec.exe
2010-06-18 14:14:47 ----A---- C:\Windows\SysWOW64\MSVCP50.DLL
2010-06-18 14:13:19 ----A---- C:\Windows\IsUninst.exe
2010-06-17 15:17:36 ----A---- C:\Windows\SysWOW64\GkSui18.EXE
2010-06-17 15:11:42 ----D---- C:\Users\SAIXX\AppData\Roaming\Samsung
2010-06-13 13:05:34 ----D---- C:\Users\SAIXX\AppData\Roaming\ESET
2010-06-13 13:04:29 ----D---- C:\ProgramData\ESET
2010-06-13 03:22:25 ----D---- C:\Program Files (x86)\Microsoft Antimalware
2010-06-13 02:24:43 ----D---- C:\Windows\SysWOW64\Adobe
2010-06-13 01:59:48 ----D---- C:\Windows\Sun
2010-06-13 01:58:32 ----D---- C:\ProgramData\Sun
2010-06-13 01:58:30 ----D---- C:\Program Files (x86)\Common Files\Java
2010-06-13 01:58:06 ----A---- C:\Windows\SysWOW64\javaws.exe
2010-06-13 01:58:06 ----A---- C:\Windows\SysWOW64\javaw.exe
2010-06-13 01:58:06 ----A---- C:\Windows\SysWOW64\java.exe
2010-06-13 01:58:06 ----A---- C:\Windows\SysWOW64\deployJava1.dll
2010-06-13 01:57:57 ----D---- C:\Program Files (x86)\Java
2010-06-11 22:57:31 ----D---- C:\Program Files (x86)\Common Files\Adobe
2010-06-10 18:04:00 ----RHD---- C:\MSOCache
2010-06-10 17:48:51 ----A---- C:\Windows\SysWOW64\PerfStringBackup.INI
2010-06-10 17:43:02 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2010-06-10 17:39:03 ----D---- C:\Users\SAIXX\AppData\Roaming\QIP
2010-06-10 17:24:56 ----D---- C:\Program Files (x86)\Microsoft Works
2010-06-10 17:24:20 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2010-06-10 17:24:20 ----D---- C:\Program Files (x86)\Common Files\DESIGNER
2010-06-10 17:24:07 ----D---- C:\Windows\PCHEALTH
2010-06-10 17:24:07 ----D---- C:\Program Files (x86)\Microsoft.NET
2010-06-10 17:21:37 ----D---- C:\ProgramData\Microsoft Help
2010-06-10 15:35:36 ----D---- C:\Users\SAIXX\AppData\Roaming\DVDVideoSoftIEHelpers
2010-06-10 15:34:44 ----D---- C:\Program Files (x86)\Common Files\DVDVideoSoft
2010-06-10 14:52:22 ----D---- C:\Users\SAIXX\AppData\Roaming\Ashampoo
2010-06-10 14:49:48 ----D---- C:\Users\SAIXX\AppData\Roaming\Leadertech
2010-06-10 14:49:39 ----D---- C:\Program Files (x86)\Common Files\LogiShrd
2010-06-10 14:48:29 ----D---- C:\ProgramData\Logishrd
2010-06-10 04:20:58 ----D---- C:\Windows\Panther
2010-06-10 04:20:46 ----RASH---- C:\BOOTSECT.BAK
2010-06-10 04:20:44 ----SHD---- C:\Boot
2010-06-09 19:52:08 ----D---- C:\Users\SAIXX\AppData\Roaming\ATI
2010-06-09 19:48:29 ----A---- C:\Windows\SysWOW64\AsIO.dll
2010-06-09 19:48:28 ----D---- C:\Program Files (x86)\ASUS
2010-06-09 19:48:08 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2010-06-09 19:47:37 ----D---- C:\Program Files (x86)\Common Files\InstallShield
2010-06-09 19:47:36 ----A---- C:\Windows\Language_trs.ini
2010-06-09 19:46:15 ----D---- C:\Program Files (x86)\Canon
2010-06-09 19:42:50 ----HD---- C:\ProgramData\CanonBJ
2010-06-09 19:32:42 ----A---- C:\Windows\libem.INI
2010-06-09 19:31:28 ----D---- C:\Users\SAIXX\AppData\Roaming\Logitech
2010-06-09 19:31:09 ----D---- C:\Users\SAIXX\AppData\Roaming\FlashGetBHO
2010-06-09 19:29:07 ----D---- C:\Users\SAIXX\AppData\Roaming\DAEMON Tools Lite
2010-06-09 19:28:01 ----D---- C:\NVIDIA
2010-06-09 19:18:19 ----D---- C:\Users\SAIXX\AppData\Roaming\WinRAR
2010-06-09 19:16:38 ----D---- C:\Users\SAIXX\AppData\Roaming\THQ
2010-06-09 19:12:26 ----D---- C:\Program Files (x86)\Common Files\Steam
2010-06-09 19:08:30 ----D---- C:\Users\SAIXX\AppData\Roaming\Opera
2010-06-09 19:05:42 ----SHD---- C:\Windows\Installer
2010-06-09 19:04:54 ----D---- C:\Users\SAIXX\AppData\Roaming\Macromedia
2010-06-09 19:04:54 ----D---- C:\Users\SAIXX\AppData\Roaming\Adobe
2010-06-09 19:04:52 ----D---- C:\Windows\SysWOW64\Macromed
2010-06-09 19:01:43 ----D---- C:\Users\SAIXX\AppData\Roaming\ImgBurn
2010-06-09 19:01:33 ----D---- C:\Users\SAIXX\AppData\Roaming\Logishrd
2010-06-09 18:59:55 ----D---- C:\Users\SAIXX\AppData\Roaming\ICQ
2010-06-09 18:59:22 ----D---- C:\Users\SAIXX\AppData\Roaming\GRETECH
2010-06-09 18:57:54 ----D---- C:\Users\SAIXX\AppData\Roaming\FlashGet
2010-06-09 18:53:52 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-06-09 18:52:34 ----D---- C:\Users\SAIXX\AppData\Roaming\Audacity
2010-06-09 18:52:30 ----A---- C:\Windows\SysWOW64\msv1_0.dll
2010-06-09 18:45:31 ----A---- C:\Windows\SysWOW64\XAudio2_6.dll
2010-06-09 18:45:31 ----A---- C:\Windows\SysWOW64\XAudio2_5.dll
2010-06-09 18:45:31 ----A---- C:\Windows\SysWOW64\XAPOFX1_4.dll
2010-06-09 18:45:31 ----A---- C:\Windows\SysWOW64\xactengine3_6.dll
2010-06-09 18:45:31 ----A---- C:\Windows\SysWOW64\X3DAudio1_7.dll
2010-06-09 18:45:30 ----A---- C:\Windows\SysWOW64\xactengine3_5.dll
2010-06-09 18:45:30 ----A---- C:\Windows\SysWOW64\D3DCompiler_42.dll
2010-06-09 18:45:29 ----A---- C:\Windows\SysWOW64\d3dcsx_42.dll
2010-06-09 18:45:27 ----A---- C:\Windows\SysWOW64\D3DX9_42.dll
2010-06-09 18:45:27 ----A---- C:\Windows\SysWOW64\d3dx11_42.dll
2010-06-09 18:45:27 ----A---- C:\Windows\SysWOW64\d3dx10_42.dll
2010-06-09 18:45:25 ----A---- C:\Windows\SysWOW64\d3dx10_41.dll
2010-06-09 18:45:25 ----A---- C:\Windows\SysWOW64\D3DCompiler_41.dll
2010-06-09 18:45:24 ----A---- C:\Windows\SysWOW64\D3DX9_41.dll
2010-06-09 18:45:23 ----A---- C:\Windows\SysWOW64\XAudio2_4.dll
2010-06-09 18:45:23 ----A---- C:\Windows\SysWOW64\XAPOFX1_3.dll
2010-06-09 18:45:22 ----A---- C:\Windows\SysWOW64\xactengine3_4.dll
2010-06-09 18:45:22 ----A---- C:\Windows\SysWOW64\X3DAudio1_6.dll
2010-06-09 18:45:19 ----A---- C:\Windows\SysWOW64\XAudio2_3.dll
2010-06-09 18:45:19 ----A---- C:\Windows\SysWOW64\XAPOFX1_2.dll
2010-06-09 18:45:18 ----A---- C:\Windows\SysWOW64\xactengine3_3.dll
2010-06-09 18:45:17 ----A---- C:\Windows\SysWOW64\X3DAudio1_5.dll
2010-06-09 18:45:16 ----A---- C:\Windows\SysWOW64\XAudio2_2.dll
2010-06-09 18:45:16 ----A---- C:\Windows\SysWOW64\XAPOFX1_1.dll
2010-06-09 18:45:16 ----A---- C:\Windows\SysWOW64\xactengine3_2.dll
2010-06-09 18:45:16 ----A---- C:\Windows\SysWOW64\D3DX9_39.dll
2010-06-09 18:45:16 ----A---- C:\Windows\SysWOW64\d3dx10_39.dll
2010-06-09 18:45:16 ----A---- C:\Windows\SysWOW64\D3DCompiler_39.dll
2010-06-09 18:45:15 ----A---- C:\Windows\SysWOW64\XAudio2_1.dll
2010-06-09 18:45:15 ----A---- C:\Windows\SysWOW64\XAPOFX1_0.dll
2010-06-09 18:45:15 ----A---- C:\Windows\SysWOW64\xactengine3_1.dll
2010-06-09 18:45:15 ----A---- C:\Windows\SysWOW64\X3DAudio1_4.dll
2010-06-09 18:45:13 ----A---- C:\Windows\SysWOW64\d3dx10_38.dll
2010-06-09 18:45:13 ----A---- C:\Windows\SysWOW64\D3DCompiler_38.dll
2010-06-09 18:45:12 ----A---- C:\Windows\SysWOW64\D3DX9_38.dll
2010-06-09 18:45:11 ----A---- C:\Windows\SysWOW64\XAudio2_0.dll
2010-06-09 18:45:11 ----A---- C:\Windows\SysWOW64\xactengine3_0.dll
2010-06-09 18:45:11 ----A---- C:\Windows\SysWOW64\X3DAudio1_3.dll
2010-06-09 18:45:11 ----A---- C:\Windows\SysWOW64\d3dx10_37.dll
2010-06-09 18:45:11 ----A---- C:\Windows\SysWOW64\D3DCompiler_37.dll
2010-06-09 18:45:10 ----A---- C:\Windows\SysWOW64\xactengine2_10.dll
2010-06-09 18:45:10 ----A---- C:\Windows\SysWOW64\D3DX9_37.dll
2010-06-09 18:45:10 ----A---- C:\Windows\SysWOW64\d3dx10_36.dll
2010-06-09 18:45:10 ----A---- C:\Windows\SysWOW64\D3DCompiler_36.dll
2010-06-09 18:45:09 ----A---- C:\Windows\SysWOW64\xactengine2_9.dll
2010-06-09 18:45:09 ----A---- C:\Windows\SysWOW64\d3dx9_36.dll
2010-06-09 18:45:09 ----A---- C:\Windows\SysWOW64\d3dx10_35.dll
2010-06-09 18:45:09 ----A---- C:\Windows\SysWOW64\D3DCompiler_35.dll
2010-06-09 18:45:08 ----A---- C:\Windows\SysWOW64\xactengine2_8.dll
2010-06-09 18:45:08 ----A---- C:\Windows\SysWOW64\X3DAudio1_2.dll
2010-06-09 18:45:08 ----A---- C:\Windows\SysWOW64\d3dx9_35.dll
2010-06-09 18:45:08 ----A---- C:\Windows\SysWOW64\d3dx9_34.dll
2010-06-09 18:45:08 ----A---- C:\Windows\SysWOW64\d3dx10_34.dll
2010-06-09 18:45:08 ----A---- C:\Windows\SysWOW64\D3DCompiler_34.dll
2010-06-09 18:45:07 ----A---- C:\Windows\SysWOW64\xinput1_3.dll
2010-06-09 18:45:07 ----A---- C:\Windows\SysWOW64\xactengine2_7.dll
2010-06-09 18:45:07 ----A---- C:\Windows\SysWOW64\d3dx10_33.dll
2010-06-09 18:45:07 ----A---- C:\Windows\SysWOW64\D3DCompiler_33.dll
2010-06-09 18:45:06 ----A---- C:\Windows\SysWOW64\d3dx9_33.dll
2010-06-09 18:45:05 ----A---- C:\Windows\SysWOW64\xactengine2_6.dll
2010-06-09 18:45:04 ----A---- C:\Windows\SysWOW64\xactengine2_5.dll
2010-06-09 18:45:02 ----A---- C:\Windows\SysWOW64\d3dx10.dll
2010-06-09 18:45:01 ----A---- C:\Windows\SysWOW64\xactengine2_4.dll
2010-06-09 18:45:01 ----A---- C:\Windows\SysWOW64\x3daudio1_1.dll
2010-06-09 18:45:01 ----A---- C:\Windows\SysWOW64\d3dx9_32.dll
2010-06-09 18:45:01 ----A---- C:\Windows\SysWOW64\d3dx9_31.dll
2010-06-09 18:45:00 ----A---- C:\Windows\SysWOW64\xinput1_2.dll
2010-06-09 18:45:00 ----A---- C:\Windows\SysWOW64\xactengine2_3.dll
2010-06-09 18:45:00 ----A---- C:\Windows\SysWOW64\xactengine2_2.dll
2010-06-09 18:44:59 ----A---- C:\Windows\SysWOW64\xinput1_1.dll
2010-06-09 18:44:59 ----A---- C:\Windows\SysWOW64\xactengine2_1.dll
2010-06-09 18:44:58 ----A---- C:\Windows\SysWOW64\d3dx9_30.dll
2010-06-09 18:44:57 ----A---- C:\Windows\SysWOW64\xactengine2_0.dll
2010-06-09 18:44:57 ----A---- C:\Windows\SysWOW64\x3daudio1_0.dll
2010-06-09 18:44:57 ----A---- C:\Windows\SysWOW64\d3dx9_29.dll
2010-06-09 18:44:55 ----A---- C:\Windows\SysWOW64\d3dx9_28.dll
2010-06-09 18:44:54 ----A---- C:\Windows\SysWOW64\d3dx9_27.dll
2010-06-09 18:44:52 ----A---- C:\Windows\SysWOW64\d3dx9_26.dll
2010-06-09 18:44:51 ----A---- C:\Windows\SysWOW64\d3dx9_25.dll
2010-06-09 18:44:48 ----A---- C:\Windows\SysWOW64\d3dx9_24.dll
2010-06-09 18:44:09 ----A---- C:\Windows\SysWOW64\asycfilt.dll
2010-06-09 18:43:53 ----A---- C:\Windows\SysWOW64\wmp.dll
2010-06-09 18:43:52 ----A---- C:\Windows\SysWOW64\CertEnroll.dll
2010-06-09 18:43:51 ----A---- C:\Windows\SysWOW64\wmploc.DLL
2010-06-09 18:43:47 ----A---- C:\Windows\SysWOW64\t2embed.dll
2010-06-09 18:43:46 ----A---- C:\Windows\SysWOW64\msasn1.dll
2010-06-09 18:43:42 ----A---- C:\Windows\SysWOW64\sspicli.dll
2010-06-09 18:43:42 ----A---- C:\Windows\SysWOW64\secur32.dll
2010-06-09 18:43:26 ----A---- C:\Windows\SysWOW64\psisdecd.dll
2010-06-09 18:43:25 ----A---- C:\Windows\SysWOW64\explorer.exe
2010-06-09 18:43:25 ----A---- C:\Windows\explorer.exe
2010-06-09 18:43:24 ----A---- C:\Windows\SysWOW64\secproc_isv.dll
2010-06-09 18:43:24 ----A---- C:\Windows\SysWOW64\secproc.dll
2010-06-09 18:43:23 ----A---- C:\Windows\SysWOW64\secproc_ssp_isv.dll
2010-06-09 18:43:23 ----A---- C:\Windows\SysWOW64\secproc_ssp.dll
2010-06-09 18:43:23 ----A---- C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2010-06-09 18:43:23 ----A---- C:\Windows\SysWOW64\RMActivate_isv.exe
2010-06-09 18:43:23 ----A---- C:\Windows\SysWOW64\RMActivate.exe
2010-06-09 18:43:22 ----A---- C:\Windows\SysWOW64\RMActivate_ssp.exe
2010-06-09 18:43:19 ----A---- C:\Windows\SysWOW64\quartz.dll
2010-06-09 18:43:18 ----A---- C:\Windows\SysWOW64\tsbyuv.dll
2010-06-09 18:43:18 ----A---- C:\Windows\SysWOW64\msyuv.dll
2010-06-09 18:43:18 ----A---- C:\Windows\SysWOW64\msvidc32.dll
2010-06-09 18:43:18 ----A---- C:\Windows\SysWOW64\msrle32.dll
2010-06-09 18:43:18 ----A---- C:\Windows\SysWOW64\mciavi32.dll
2010-06-09 18:43:18 ----A---- C:\Windows\SysWOW64\iyuv_32.dll
2010-06-09 18:43:18 ----A---- C:\Windows\SysWOW64\avifil32.dll
2010-06-09 18:43:11 ----A---- C:\Windows\SysWOW64\inetcomm.dll
2010-06-09 18:43:01 ----A---- C:\Windows\SysWOW64\wintrust.dll
2010-06-09 18:42:50 ----A---- C:\Windows\SysWOW64\fontsub.dll
2010-06-09 18:42:50 ----A---- C:\Windows\SysWOW64\atmlib.dll
2010-06-09 18:42:50 ----A---- C:\Windows\SysWOW64\atmfd.dll
2010-06-09 18:42:49 ----A---- C:\Windows\SysWOW64\jscript.dll
2010-06-09 18:42:48 ----A---- C:\Windows\SysWOW64\vbscript.dll
2010-06-09 18:42:47 ----A---- C:\Windows\SysWOW64\wow32.dll
2010-06-09 18:42:47 ----A---- C:\Windows\SysWOW64\user.exe
2010-06-09 18:42:47 ----A---- C:\Windows\SysWOW64\setup16.exe
2010-06-09 18:42:47 ----A---- C:\Windows\SysWOW64\ntvdm64.dll
2010-06-09 18:42:47 ----A---- C:\Windows\SysWOW64\instnm.exe
2010-06-09 18:42:45 ----A---- C:\Windows\SysWOW64\cabview.dll
2010-06-09 18:42:44 ----D---- C:\Users\SAIXX\AppData\Roaming\AnvSoft
2010-06-09 18:42:21 ----A---- C:\Windows\SysWOW64\tzres.dll
2010-06-09 18:41:23 ----D---- C:\Windows\SysWOW64\directx
2010-06-09 18:31:20 ----D---- C:\Users\SAIXX\AppData\Roaming\Identities
2010-06-09 18:30:59 ----SD---- C:\Users\SAIXX\AppData\Roaming\Microsoft
2010-06-09 18:30:59 ----D---- C:\Users\SAIXX\AppData\Roaming\Media Center Programs
2010-06-09 18:28:59 ----SHD---- C:\Recovery
2010-06-09 18:28:58 ----SHD---- C:\ProgramData\Šablony
2010-06-09 18:28:58 ----SHD---- C:\ProgramData\Plocha
2010-06-09 18:28:58 ----SHD---- C:\ProgramData\Oblíbené položky
2010-06-09 18:28:58 ----SHD---- C:\ProgramData\Nabídka Start
2010-06-09 18:28:58 ----SHD---- C:\ProgramData\Dokumenty
2010-06-09 18:28:58 ----SHD---- C:\ProgramData\Data aplikací
2010-06-09 18:24:49 ----D---- C:\Windows\SoftwareDistribution
2010-06-09 18:22:10 ----D---- C:\Windows\Prefetch
2010-06-09 18:21:50 ----SHD---- C:\System Volume Information