Virus v PC (Win32/HackTool.WpaKill.C) možná !?

[xchullit]

zdar hoši ,,potřebuju udělat kontrolo přes log ,,posílám log, z RSIT
díky za kontrolu jsem na drátě


Logfile of random's system information tool 1.08 (written by random/random)
Run by XCHULLIT at 2010-10-22 22:30:31
Microsoft Windows 7 Enterprise
System drive C: has 75 GB (77%) free of 97 GB
Total RAM: 2046 MB (32% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:30:45, on 22.10.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16671)
Boot mode: Normal

Running processes:
D:\Steam\Steam.exe
C:\My Programes\xfire\Xfire.exe
C:\My Programes\Trillian pro\trillian.exe
C:\My Programes\ClamWinPortable\ClamWinPortable.exe
C:\My Programes\ClamWinPortable\App\clamwin\bin\ClamWin.exe
C:\My Programes\ClamWinPortable\App\clamwin\bin\clamscan.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\XCHULLIT.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files (x86)\XfireXO\tbXfir.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O2 - BHO: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files (x86)\XfireXO\tbXfir.dll
O3 - Toolbar: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files (x86)\XfireXO\tbXfir.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O4 - HKCU\..\Run: [SRS Audio Sandbox] "C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe" /hideme
O4 - HKCU\..\Run: [Steam] "d:\steam\steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Xfire.lnk = C:\My Programes\xfire\Xfire.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 5709 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Essentials\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey
"C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe" /hideme
"D:\Steam\Steam.exe" -silent
"C:\My Programes\xfire\Xfire.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\My Programes\Trillian pro\trillian.exe"
"C:\My Programes\ClamWinPortable\ClamWinPortable.exe"
"C:\My Programes\ClamWinPortable\App\clamwin\bin\ClamWin.exe"
"C:\My Programes\ClamWinPortable\App\clamwin\bin\clamscan.exe" --tempdir "c:\users\xchullit\appdata\local\temp" --keep-mbox --stdout --database="C:\My Programes\ClamWinPortable\Data\db" --log="c:\users\xchullit\appdata\local\temp\tmpzl51mc" --infected --max-files=500 --max-scansize=150M --max-recursion=50 --max-filesize=100M --show-progress --recursive --exclude="[^\]*\.dbx$" --exclude="[^\]*\.tbb$" --exclude="[^\]*\.pst$" --exclude="[^\]*\.dat$" --exclude="[^\]*\.log$" --exclude="[^\]*\.evt$" --exclude="[^\]*\.nsf$" --exclude="[^\]*\.ntf$" --exclude="[^\]*\.chm$" --kill "C:\\"
\??\C:\Windows\system32\conhost.exe
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\Windows\servicing\TrustedInstaller.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe7_ Global\UsGthrCtrlFltPipeMssGthrPipe7 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
"C:\Users\XCHULLIT\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\My Programes\Javax64\bin\jp2ssv.dll [2010-10-21 43520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll [2010-10-18 3908192]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}]
XfireXO Toolbar - C:\Program Files (x86)\XfireXO\tbXfir.dll [2010-10-18 3908192]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{5e5ab302-7f65-44cd-8211-c1d4caaccea3} - XfireXO Toolbar - C:\Program Files (x86)\XfireXO\tbXfir.dll [2010-10-18 3908192]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll [2010-10-18 3908192]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSSE"=C:\Program Files\Microsoft Security Essentials\msseces.exe [2010-09-15 1448568]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SRS Audio Sandbox"=C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe [2010-01-07 3676952]
"Steam"=d:\steam\steam.exe [2010-10-21 1242448]

C:\Users\XCHULLIT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Xfire.lnk - C:\My Programes\xfire\Xfire.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-10-22 22:18:30 ----D---- C:\Windows\SYSWOW64\Wat
2010-10-22 22:18:29 ----D---- C:\Windows\system32\Wat
2010-10-22 22:12:28 ----D---- C:\Program Files\trend micro
2010-10-22 22:12:26 ----D---- C:\rsit
2010-10-22 21:05:18 ----D---- C:\Program Files\SRS Labs
2010-10-22 16:30:24 ----D---- C:\Users\XCHULLIT\AppData\Roaming\Media Player Classic
2010-10-22 13:50:20 ----D---- C:\Windows\SYSWOW64\Macromed
2010-10-22 07:53:47 ----D---- C:\Program Files\Microsoft Games
2010-10-22 07:52:47 ----D---- C:\Windows\system32\appmgmt
2010-10-21 22:34:46 ----RASH---- C:\BOOTSECT.BAK
2010-10-21 22:34:45 ----SHD---- C:\Boot
2010-10-21 21:20:03 ----D---- C:\Users\XCHULLIT\AppData\Roaming\Trillian
2010-10-21 20:55:50 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2010-10-21 20:55:50 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2010-10-21 20:55:50 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2010-10-21 20:55:50 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2010-10-21 20:55:50 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2010-10-21 20:55:50 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2010-10-21 20:55:49 ----A---- C:\Windows\system32\PresentationHost.exe
2010-10-21 20:55:49 ----A---- C:\Windows\system32\netfxperf.dll
2010-10-21 20:55:49 ----A---- C:\Windows\system32\mscoree.dll
2010-10-21 20:55:49 ----A---- C:\Windows\system32\dfshim.dll
2010-10-21 20:48:11 ----A---- C:\Windows\system32\drivers\ks.sys
2010-10-21 20:37:34 ----A---- C:\Windows\system32\XAudioD2_7.dll
2010-10-21 20:37:34 ----A---- C:\Windows\system32\XAPOFXD1_5.dll
2010-10-21 20:37:34 ----A---- C:\Windows\system32\XactEngineD3_7.dll
2010-10-21 20:37:34 ----A---- C:\Windows\system32\XactEngineA3_7.dll
2010-10-21 20:37:34 ----A---- C:\Windows\system32\X3DAudioD1_7.dll
2010-10-21 20:37:34 ----A---- C:\Windows\system32\D3DX9d_43.dll
2010-10-21 20:37:33 ----A---- C:\Windows\system32\d3dx9d_33.dll
2010-10-21 20:37:33 ----A---- C:\Windows\system32\D3DX11d_43.dll
2010-10-21 20:37:33 ----A---- C:\Windows\system32\D3DX10d_43.dll
2010-10-21 20:37:33 ----A---- C:\Windows\system32\d3dref9.dll
2010-10-21 20:37:33 ----A---- C:\Windows\system32\D3DCSXd_43.dll
2010-10-21 20:37:33 ----A---- C:\Windows\system32\d3d9d.dll
2010-10-21 20:37:33 ----A---- C:\Windows\system32\D3D11SDKLayers.dll
2010-10-21 20:37:33 ----A---- C:\Windows\system32\D3D11Ref.dll
2010-10-21 20:37:32 ----A---- C:\Windows\SYSWOW64\XAudioD2_7.dll
2010-10-21 20:37:32 ----A---- C:\Windows\SYSWOW64\XAPOFXD1_5.dll
2010-10-21 20:37:32 ----A---- C:\Windows\SYSWOW64\XactEngineD3_7.dll
2010-10-21 20:37:32 ----A---- C:\Windows\SYSWOW64\XactEngineA3_7.dll
2010-10-21 20:37:32 ----A---- C:\Windows\SYSWOW64\X3DAudioD1_7.dll
2010-10-21 20:37:32 ----A---- C:\Windows\system32\D3D10SDKLayers.DLL
2010-10-21 20:37:32 ----A---- C:\Windows\system32\D3D10Ref.DLL
2010-10-21 20:37:31 ----A---- C:\Windows\SYSWOW64\D3dx9d_43.dll
2010-10-21 20:37:31 ----A---- C:\Windows\SYSWOW64\d3dx9d_33.dll
2010-10-21 20:37:31 ----A---- C:\Windows\SYSWOW64\D3DX11d_43.dll
2010-10-21 20:37:31 ----A---- C:\Windows\SYSWOW64\D3DX10d_43.dll
2010-10-21 20:37:31 ----A---- C:\Windows\SYSWOW64\d3dref9.dll
2010-10-21 20:37:31 ----A---- C:\Windows\SYSWOW64\D3DCSXd_43.dll
2010-10-21 20:37:31 ----A---- C:\Windows\SYSWOW64\d3d9d.dll
2010-10-21 20:37:30 ----A---- C:\Windows\SYSWOW64\D3D11SDKLayers.dll
2010-10-21 20:37:30 ----A---- C:\Windows\SYSWOW64\D3D11Ref.dll
2010-10-21 20:37:30 ----A---- C:\Windows\SYSWOW64\D3D10SDKLayers.DLL
2010-10-21 20:37:30 ----A---- C:\Windows\SYSWOW64\D3D10Ref.DLL
2010-10-21 20:35:27 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2010-10-21 20:35:27 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2010-10-21 20:35:27 ----A---- C:\Windows\system32\XAudio2_7.dll
2010-10-21 20:35:27 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2010-10-21 20:35:26 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2010-10-21 20:35:26 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2010-10-21 20:35:26 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2010-10-21 20:35:26 ----A---- C:\Windows\system32\xactengine3_7.dll
2010-10-21 20:35:26 ----A---- C:\Windows\system32\d3dcsx_43.dll
2010-10-21 20:35:26 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2010-10-21 20:35:25 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2010-10-21 20:35:25 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2010-10-21 20:35:25 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2010-10-21 20:35:25 ----A---- C:\Windows\system32\D3DX9_43.dll
2010-10-21 20:35:25 ----A---- C:\Windows\system32\d3dx11_43.dll
2010-10-21 20:35:25 ----A---- C:\Windows\system32\d3dx10_43.dll
2010-10-21 20:35:24 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2010-10-21 20:35:24 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2010-10-21 20:35:24 ----A---- C:\Windows\system32\XAudio2_6.dll
2010-10-21 20:35:24 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2010-10-21 20:35:23 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2010-10-21 20:35:23 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2010-10-21 20:35:23 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2010-10-21 20:35:23 ----A---- C:\Windows\system32\XAudio2_5.dll
2010-10-21 20:35:23 ----A---- C:\Windows\system32\xactengine3_6.dll
2010-10-21 20:35:23 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2010-10-21 20:35:22 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2010-10-21 20:35:22 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2010-10-21 20:35:22 ----A---- C:\Windows\system32\xactengine3_5.dll
2010-10-21 20:35:22 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2010-10-21 20:35:21 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2010-10-21 20:35:21 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2010-10-21 20:35:21 ----A---- C:\Windows\system32\d3dx11_42.dll
2010-10-21 20:35:21 ----A---- C:\Windows\system32\d3dcsx_42.dll
2010-10-21 20:35:20 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2010-10-21 20:35:20 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2010-10-21 20:35:20 ----A---- C:\Windows\system32\D3DX9_42.dll
2010-10-21 20:35:20 ----A---- C:\Windows\system32\d3dx10_42.dll
2010-10-21 20:35:19 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2010-10-21 20:35:19 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2010-10-21 20:35:19 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2010-10-21 20:35:19 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-10-21 20:35:19 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-10-21 20:35:19 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-10-21 20:35:17 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2010-10-21 20:35:17 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2010-10-21 20:35:17 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2010-10-21 20:35:17 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-10-21 20:35:17 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-10-21 20:35:17 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-10-21 20:35:16 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2010-10-21 20:35:16 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-10-21 20:35:15 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2010-10-21 20:35:15 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2010-10-21 20:35:15 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2010-10-21 20:35:15 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-10-21 20:35:15 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-10-21 20:35:15 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-10-21 20:35:11 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2010-10-21 20:35:11 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2010-10-21 20:35:11 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2010-10-21 20:35:11 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-10-21 20:35:11 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-10-21 20:35:11 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-10-21 20:35:10 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2010-10-21 20:35:10 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-10-21 20:35:09 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2010-10-21 20:35:09 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2010-10-21 20:35:09 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-10-21 20:35:09 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-10-21 20:35:08 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2010-10-21 20:35:08 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-10-21 20:35:07 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2010-10-21 20:35:07 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2010-10-21 20:35:07 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-10-21 20:35:07 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-10-21 20:35:06 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2010-10-21 20:35:06 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-10-21 20:35:05 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2010-10-21 20:35:05 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2010-10-21 20:35:05 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-10-21 20:35:05 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-10-21 20:35:04 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2010-10-21 20:35:04 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2010-10-21 20:35:04 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-10-21 20:35:04 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-10-21 20:35:03 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2010-10-21 20:35:03 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2010-10-21 20:35:03 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2010-10-21 20:35:03 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-10-21 20:35:03 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-10-21 20:35:03 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-10-21 20:35:02 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2010-10-21 20:35:02 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2010-10-21 20:35:02 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-10-21 20:35:02 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-10-21 20:35:01 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2010-10-21 20:35:01 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2010-10-21 20:35:01 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2010-10-21 20:35:01 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-10-21 20:35:01 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-10-21 20:35:01 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-10-21 20:35:00 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2010-10-21 20:35:00 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-10-21 20:34:59 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2010-10-21 20:34:59 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-10-21 20:34:58 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2010-10-21 20:34:58 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2010-10-21 20:34:58 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2010-10-21 20:34:58 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-10-21 20:34:58 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-10-21 20:34:58 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-10-21 20:34:56 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2010-10-21 20:34:56 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-10-21 20:34:55 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2010-10-21 20:34:55 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2010-10-21 20:34:55 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2010-10-21 20:34:55 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-10-21 20:34:55 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-10-21 20:34:55 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-10-21 20:34:53 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2010-10-21 20:34:53 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2010-10-21 20:34:53 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2010-10-21 20:34:53 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2010-10-21 20:34:53 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-10-21 20:34:53 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-10-21 20:34:53 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-10-21 20:34:53 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-10-21 20:34:52 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2010-10-21 20:34:52 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2010-10-21 20:34:52 ----A---- C:\Windows\system32\xinput1_3.dll
2010-10-21 20:34:52 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-10-21 20:34:51 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2010-10-21 20:34:51 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2010-10-21 20:34:51 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2010-10-21 20:34:51 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-10-21 20:34:51 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-10-21 20:34:51 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-10-21 20:34:50 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2010-10-21 20:34:50 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-10-21 20:34:49 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2010-10-21 20:34:49 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-10-21 20:34:48 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2010-10-21 20:34:48 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-10-21 20:34:47 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2010-10-21 20:34:47 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2010-10-21 20:34:47 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-10-21 20:34:47 ----A---- C:\Windows\system32\d3dx10.dll
2010-10-21 20:34:46 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2010-10-21 20:34:46 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2010-10-21 20:34:46 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-10-21 20:34:46 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-10-21 20:34:45 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2010-10-21 20:34:45 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2010-10-21 20:34:45 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2010-10-21 20:34:45 ----A---- C:\Windows\system32\xinput1_2.dll
2010-10-21 20:34:45 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-10-21 20:34:45 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-10-21 20:34:44 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2010-10-21 20:34:44 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2010-10-21 20:34:44 ----A---- C:\Windows\system32\xinput1_1.dll
2010-10-21 20:34:44 ----A---- C:\Windows\system32\xactengine2_2.dll
2010-10-21 20:34:43 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2010-10-21 20:34:43 ----A---- C:\Windows\system32\xactengine2_1.dll
2010-10-21 20:34:38 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2010-10-21 20:34:38 ----A---- C:\Windows\system32\d3dx9_30.dll
2010-10-21 20:34:36 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2010-10-21 20:34:36 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2010-10-21 20:34:36 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2010-10-21 20:34:36 ----A---- C:\Windows\system32\xactengine2_0.dll
2010-10-21 20:34:36 ----A---- C:\Windows\system32\x3daudio1_0.dll
2010-10-21 20:34:36 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-10-21 20:34:35 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2010-10-21 20:34:35 ----A---- C:\Windows\system32\d3dx9_28.dll
2010-10-21 20:34:34 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2010-10-21 20:34:34 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-10-21 20:34:33 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2010-10-21 20:34:33 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2010-10-21 20:34:33 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-10-21 20:34:33 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-10-21 20:34:29 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2010-10-21 20:34:29 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-10-21 20:32:43 ----A---- C:\Windows\dxsdkuninst.exe
2010-10-21 18:19:46 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2010-10-21 18:00:23 ----D---- C:\Windows\SYSWOW64\cs
2010-10-21 17:59:46 ----D---- C:\Windows\SYSWOW64\XPSViewer
2010-10-21 17:59:46 ----D---- C:\Windows\SYSWOW64\drivers\cs-CZ
2010-10-21 17:59:43 ----D---- C:\Windows\cs-CZ
2010-10-21 17:59:35 ----D---- C:\Windows\system32\cs
2010-10-21 17:58:57 ----D---- C:\Windows\system32\drivers\cs-CZ
2010-10-21 17:29:53 ----D---- C:\Users\XCHULLIT\AppData\Roaming\ATI
2010-10-21 17:29:53 ----D---- C:\ProgramData\ATI
2010-10-21 17:25:43 ----D---- C:\Program Files\Common Files\ATI Technologies
2010-10-21 17:24:38 ----D---- C:\Program Files\ATI
2010-10-21 17:24:36 ----D---- C:\Program Files (x86)\ATI Technologies
2010-10-21 17:17:50 ----A---- C:\Windows\system32\atiu9p64.dll
2010-10-21 17:17:35 ----A---- C:\Windows\system32\aticfx64.dll
2010-10-21 17:17:31 ----A---- C:\Windows\system32\atimpc64.dll
2010-10-21 17:17:31 ----A---- C:\Windows\system32\amdpcom64.dll
2010-10-21 17:16:47 ----A---- C:\Windows\SYSWOW64\atiglpxx.dll
2010-10-21 17:16:47 ----A---- C:\Windows\system32\atio6axx.dll
2010-10-21 17:16:47 ----A---- C:\Windows\system32\atiglpxx.dll
2010-10-21 17:16:43 ----A---- C:\Windows\system32\atig6txx.dll
2010-10-21 17:16:34 ----A---- C:\Windows\system32\atiadlxx.dll
2010-10-21 17:16:05 ----A---- C:\Windows\system32\coinst.dll
2010-10-21 17:15:20 ----A---- C:\Windows\system32\atipdl64.dll
2010-10-21 17:15:18 ----A---- C:\Windows\SYSWOW64\atimpc32.dll
2010-10-21 17:15:18 ----A---- C:\Windows\SYSWOW64\amdpcom32.dll
2010-10-21 17:15:17 ----A---- C:\Windows\SYSWOW64\atiumdva.dll
2010-10-21 17:15:17 ----A---- C:\Windows\system32\drivers\ati2erec.dll
2010-10-21 17:15:15 ----A---- C:\Windows\SYSWOW64\aticfx32.dll
2010-10-21 17:15:13 ----A---- C:\Windows\system32\atiumd64.dll
2010-10-21 17:15:12 ----A---- C:\Windows\SYSWOW64\atioglxx.dll
2010-10-21 17:15:12 ----A---- C:\Windows\SYSWOW64\atigktxx.dll
2010-10-21 17:15:12 ----A---- C:\Windows\SYSWOW64\atiadlxy.dll
2010-10-21 17:15:11 ----A---- C:\Windows\system32\ATIDEMGX.dll
2010-10-21 17:15:08 ----A---- C:\Windows\SYSWOW64\atiuxpag.dll
2010-10-21 17:14:51 ----A---- C:\Windows\system32\atig6pxx.dll
2010-10-21 17:14:46 ----A---- C:\Windows\system32\atieclxx.exe
2010-10-21 17:14:44 ----D---- C:\Program Files (x86)\Mozilla Firefox
2010-10-21 17:13:57 ----A---- C:\Windows\SYSWOW64\atipdlxx.dll
2010-10-21 17:13:50 ----A---- C:\Windows\SYSWOW64\aticaldd.dll
2010-10-21 17:13:50 ----A---- C:\Windows\system32\atiapfxx.exe
2010-10-21 17:13:29 ----A---- C:\Windows\SYSWOW64\aticalcl.dll
2010-10-21 17:13:16 ----A---- C:\Windows\system32\ATIODCLI.exe
2010-10-21 17:13:08 ----A---- C:\Windows\SYSWOW64\atiu9pag.dll
2010-10-21 17:13:04 ----A---- C:\Windows\system32\atiesrxx.exe
2010-10-21 17:13:04 ----A---- C:\Windows\system32\atiedu64.dll
2010-10-21 17:12:56 ----A---- C:\Windows\system32\atimuixx.dll
2010-10-21 17:12:43 ----A---- C:\Windows\SYSWOW64\Oemdspif.dll
2010-10-21 17:12:08 ----A---- C:\Windows\system32\aticalrt64.dll
2010-10-21 17:12:00 ----A---- C:\Windows\system32\aticaldd64.dll
2010-10-21 17:11:57 ----A---- C:\Windows\SYSWOW64\atiumdag.dll
2010-10-21 17:11:56 ----A---- C:\Windows\system32\drivers\atikmdag.sys
2010-10-21 17:11:33 ----A---- C:\Windows\system32\atiuxp64.dll
2010-10-21 17:11:23 ----A---- C:\Windows\SYSWOW64\atidxx32.dll
2010-10-21 17:11:23 ----A---- C:\Windows\SYSWOW64\aticalrt.dll
2010-10-21 17:11:23 ----A---- C:\Windows\SYSWOW64\ati2edxx.dll
2010-10-21 17:11:23 ----A---- C:\Windows\system32\atibtmon.exe
2010-10-21 17:11:04 ----A---- C:\Windows\system32\drivers\AtihdW76.sys
2010-10-21 17:10:46 ----A---- C:\Windows\system32\aticalcl64.dll
2010-10-21 17:10:25 ----A---- C:\Windows\system32\atitmm64.dll
2010-10-21 17:10:24 ----A---- C:\Windows\system32\drivers\atikmpag.sys
2010-10-21 17:10:03 ----A---- C:\Windows\system32\atiumd6a.dll
2010-10-21 17:10:03 ----A---- C:\Windows\system32\ATIODE.exe
2010-10-21 16:48:07 ----D---- C:\Users\XCHULLIT\AppData\Roaming\Adobe
2010-10-21 16:48:05 ----D---- C:\Users\XCHULLIT\AppData\Roaming\Macromedia
2010-10-21 16:14:28 ----D---- C:\Users\XCHULLIT\AppData\Roaming\VitySoft
2010-10-21 16:14:00 ----A---- C:\Windows\system32\javaws.exe
2010-10-21 16:14:00 ----A---- C:\Windows\system32\javaw.exe
2010-10-21 16:14:00 ----A---- C:\Windows\system32\java.exe
2010-10-21 16:14:00 ----A---- C:\Windows\system32\deployJava1.dll
2010-10-21 15:56:31 ----A---- C:\Windows\system32\drivers\fvevol.sys
2010-10-21 15:49:46 ----A---- C:\Windows\system32\drivers\SRS_SSCFilter_amd64.sys
2010-10-21 15:46:07 ----D---- C:\Windows\SYSWOW64\RTCOM
2010-10-21 15:46:07 ----D---- C:\Program Files\Realtek
2010-10-21 15:45:48 ----A---- C:\Windows\system32\WavesGUILib.dll
2010-10-21 15:45:48 ----A---- C:\Windows\system32\SRSWOW64.dll
2010-10-21 15:45:48 ----A---- C:\Windows\system32\SRSTSX64.dll
2010-10-21 15:45:48 ----A---- C:\Windows\system32\SRSTSH64.dll
2010-10-21 15:45:48 ----A---- C:\Windows\system32\SRSHP64.dll
2010-10-21 15:45:47 ----A---- C:\Windows\system32\RtPgEx64.dll
2010-10-21 15:45:46 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2010-10-21 15:45:46 ----A---- C:\Windows\system32\RtkCfg64.dll
2010-10-21 15:45:46 ----A---- C:\Windows\system32\RtkAPO64.dll
2010-10-21 15:45:46 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2010-10-21 15:45:45 ----A---- C:\Windows\system32\RtkApi64.dll
2010-10-21 15:45:45 ----A---- C:\Windows\system32\RTEEP64A.dll
2010-10-21 15:45:45 ----A---- C:\Windows\system32\RTEEL64A.dll
2010-10-21 15:45:45 ----A---- C:\Windows\system32\RTEEG64A.dll
2010-10-21 15:45:45 ----A---- C:\Windows\system32\RTEED64A.dll
2010-10-21 15:45:45 ----A---- C:\Windows\system32\RTCOM64.dll
2010-10-21 15:45:45 ----A---- C:\Windows\system32\RP3DHT64.dll
2010-10-21 15:45:45 ----A---- C:\Windows\system32\RP3DAA64.dll
2010-10-21 15:45:45 ----A---- C:\Windows\system32\RCoInst64.dll
2010-10-21 15:45:44 ----A---- C:\Windows\SYSWOW64\MBAPO32.dll
2010-10-21 15:45:44 ----A---- C:\Windows\system32\MBWrp64.dll
2010-10-21 15:45:44 ----A---- C:\Windows\system32\MBppld64.dll
2010-10-21 15:45:44 ----A---- C:\Windows\system32\MBPPCn64.dll
2010-10-21 15:45:44 ----A---- C:\Windows\system32\MBAPO64.dll
2010-10-21 15:45:43 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2010-10-21 15:45:43 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2010-10-21 15:45:43 ----A---- C:\Windows\system32\FMAPO64.dll
2010-10-21 15:45:41 ----D---- C:\Program Files (x86)\Realtek
2010-10-21 15:45:41 ----A---- C:\Windows\system32\AERTAR64.dll
2010-10-21 15:45:41 ----A---- C:\Windows\system32\AERTAC64.dll
2010-10-21 15:45:24 ----A---- C:\Windows\RtlExUpd.dll
2010-10-21 15:30:33 ----A---- C:\Windows\SYSWOW64\XBMC.ini
2010-10-21 15:22:37 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2010-10-21 15:22:37 ----A---- C:\Windows\system32\asycfilt.dll
2010-10-21 15:22:32 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2010-10-21 15:22:32 ----A---- C:\Windows\system32\ntdll.dll
2010-10-21 15:22:29 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2010-10-21 15:22:29 ----A---- C:\Windows\system32\t2embed.dll
2010-10-21 15:22:28 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2010-10-21 15:22:28 ----A---- C:\Windows\system32\StructuredQuery.dll
2010-10-21 15:22:27 ----A---- C:\Windows\system32\ole32.dll
2010-10-21 15:22:26 ----A---- C:\Windows\SYSWOW64\ole32.dll
2010-10-21 15:22:13 ----A---- C:\Windows\system32\shell32.dll
2010-10-21 15:22:12 ----A---- C:\Windows\SYSWOW64\shell32.dll
2010-10-21 15:22:09 ----A---- C:\Windows\system32\drivers\tcpip.sys
2010-10-21 15:22:08 ----A---- C:\Windows\system32\inetcomm.dll
2010-10-21 15:22:07 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2010-10-21 15:22:03 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2010-10-21 15:22:03 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-10-21 15:22:02 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2010-10-21 15:21:58 ----A---- C:\Windows\SYSWOW64\schannel.dll
2010-10-21 15:21:58 ----A---- C:\Windows\system32\schannel.dll
2010-10-21 15:21:56 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2010-10-21 15:21:56 ----A---- C:\Windows\system32\comctl32.dll
2010-10-21 15:21:54 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2010-10-21 15:21:54 ----A---- C:\Windows\system32\oleaut32.dll
2010-10-21 15:21:53 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2010-10-21 15:21:53 ----A---- C:\Windows\system32\rtutils.dll
2010-10-21 15:21:43 ----A---- C:\Windows\system32\spoolsv.exe
2010-10-21 15:21:41 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2010-10-21 15:21:39 ----A---- C:\Windows\system32\cdd.dll
2010-10-21 15:21:30 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2010-10-21 15:21:30 ----A---- C:\Windows\system32\CPFilters.dll
2010-10-21 15:21:28 ----A---- C:\Windows\system32\msdri.dll
2010-10-21 15:21:23 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2010-10-21 15:21:23 ----A---- C:\Windows\system32\wmpmde.dll
2010-10-21 15:21:22 ----A---- C:\Windows\system32\msxml3.dll
2010-10-21 15:21:21 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2010-10-21 15:21:17 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2010-10-21 15:21:17 ----A---- C:\Windows\SYSWOW64\secur32.dll
2010-10-21 15:21:17 ----A---- C:\Windows\system32\lsasrv.dll
2010-10-21 15:21:17 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2010-10-21 15:21:13 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2010-10-21 15:21:13 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2010-10-21 15:21:10 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2010-10-21 15:21:10 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2010-10-21 15:21:10 ----A---- C:\Windows\system32\atmlib.dll
2010-10-21 15:21:10 ----A---- C:\Windows\system32\atmfd.dll
2010-10-21 15:21:07 ----A---- C:\Windows\system32\mshtml.dll
2010-10-21 15:21:05 ----A---- C:\Windows\system32\ieframe.dll
2010-10-21 15:21:04 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2010-10-21 15:21:03 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2010-10-21 15:21:03 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2010-10-21 15:21:03 ----A---- C:\Windows\system32\iertutil.dll
2010-10-21 15:21:02 ----A---- C:\Windows\SYSWOW64\mstime.dll
2010-10-21 15:21:02 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2010-10-21 15:21:02 ----A---- C:\Windows\system32\wininet.dll
2010-10-21 15:21:02 ----A---- C:\Windows\system32\urlmon.dll
2010-10-21 15:21:02 ----A---- C:\Windows\system32\mstime.dll
2010-10-21 15:21:02 ----A---- C:\Windows\system32\msfeeds.dll
2010-10-21 15:21:01 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2010-10-21 15:21:01 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2010-10-21 15:21:01 ----A---- C:\Windows\system32\iedkcs32.dll
2010-10-21 15:21:00 ----A---- C:\Windows\SYSWOW64\wininet.dll
2010-10-21 15:21:00 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2010-10-21 15:21:00 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2010-10-21 15:21:00 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2010-10-21 15:21:00 ----A---- C:\Windows\system32\mshtmled.dll
2010-10-21 15:21:00 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-10-21 15:21:00 ----A---- C:\Windows\system32\licmgr10.dll
2010-10-21 15:21:00 ----A---- C:\Windows\system32\iepeers.dll
2010-10-21 15:20:59 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2010-10-21 15:20:59 ----A---- C:\Windows\SYSWOW64\ieui.dll
2010-10-21 15:20:59 ----A---- C:\Windows\system32\ieui.dll
2010-10-21 15:20:57 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2010-10-21 15:20:57 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2010-10-21 15:20:57 ----A---- C:\Windows\system32\msfeedssync.exe
2010-10-21 15:20:57 ----A---- C:\Windows\system32\jsproxy.dll
2010-10-21 15:20:51 ----A---- C:\Windows\system32\wmp.dll
2010-10-21 15:20:50 ----A---- C:\Windows\SYSWOW64\wmp.dll
2010-10-21 15:20:49 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2010-10-21 15:20:49 ----A---- C:\Windows\system32\wmploc.DLL
2010-10-21 15:20:46 ----A---- C:\Windows\SYSWOW64\sscore.dll
2010-10-21 15:20:46 ----A---- C:\Windows\system32\srvsvc.dll
2010-10-21 15:20:46 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-10-21 15:20:46 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-10-21 15:20:46 ----A---- C:\Windows\system32\drivers\srv.sys
2010-10-21 15:19:00 ----A---- C:\Windows\system32\win32k.sys
2010-10-21 15:03:15 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2010-10-21 15:01:27 ----D---- C:\ProgramData\SRS Labs
2010-10-21 14:58:29 ----HD---- C:\Program Files (x86)\Temp
2010-10-21 14:52:38 ----D---- C:\Program Files (x86)\Conduit
2010-10-21 14:52:36 ----D---- C:\Program Files (x86)\ConduitEngine
2010-10-21 14:52:34 ----D---- C:\Program Files (x86)\XfireXO
2010-10-21 14:52:33 ----D---- C:\Users\XCHULLIT\AppData\Roaming\Mozilla
2010-10-21 14:52:26 ----D---- C:\Users\XCHULLIT\AppData\Roaming\Xfire
2010-10-21 14:52:23 ----D---- C:\ProgramData\Xfire
2010-10-21 14:05:36 ----D---- C:\Users\XCHULLIT\AppData\Roaming\WinRAR
2010-10-21 14:03:29 ----A---- C:\Windows\SYSWOW64\tzres.dll
2010-10-21 14:03:26 ----A---- C:\Windows\system32\tzres.dll
2010-10-21 13:22:05 ----D---- C:\Users\XCHULLIT\AppData\Roaming\Roaming
2010-10-21 12:53:14 ----D---- C:\Program Files (x86)\Microsoft Antimalware
2010-10-21 12:53:12 ----D---- C:\Program Files\Microsoft Security Essentials
2010-10-21 12:53:10 ----SHD---- C:\Windows\Installer
2010-10-21 12:50:28 ----D---- C:\Users\XCHULLIT\AppData\Roaming\GHISLER
2010-10-21 12:50:28 ----A---- C:\Windows\UC.PIF
2010-10-21 12:50:28 ----A---- C:\Windows\RAR.PIF
2010-10-21 12:50:28 ----A---- C:\Windows\PKZIP.PIF
2010-10-21 12:50:28 ----A---- C:\Windows\PKUNZIP.PIF
2010-10-21 12:50:28 ----A---- C:\Windows\NOCLOSE.PIF
2010-10-21 12:50:28 ----A---- C:\Windows\LHA.PIF
2010-10-21 12:50:28 ----A---- C:\Windows\ARJ.PIF
2010-10-21 12:49:23 ----SD---- C:\My Programes
2010-10-21 12:43:47 ----D---- C:\Users\XCHULLIT\AppData\Roaming\Identities
2010-10-21 12:43:36 ----D---- C:\Users\XCHULLIT\AppData\Roaming\Media Center Programs
2010-10-21 12:43:35 ----SD---- C:\Users\XCHULLIT\AppData\Roaming\Microsoft
2010-10-21 12:43:24 ----SHD---- C:\Recovery
2010-10-21 12:43:24 ----SHD---- C:\ProgramData\Templates
2010-10-21 12:43:24 ----SHD---- C:\ProgramData\Start Menu
2010-10-21 12:43:24 ----SHD---- C:\ProgramData\Favorites
2010-10-21 12:43:24 ----SHD---- C:\ProgramData\Documents
2010-10-21 12:43:24 ----SHD---- C:\ProgramData\Desktop
2010-10-21 12:43:24 ----SHD---- C:\ProgramData\Application Data
2010-10-21 12:43:24 ----SHD---- C:\Documents and Settings
2010-10-21 12:42:51 ----D---- C:\Windows\SoftwareDistribution
2010-10-21 12:36:15 ----SHD---- C:\System Volume Information
2010-10-21 12:36:09 ----D---- C:\Windows\CSC
2010-10-21 12:35:41 ----ASH---- C:\pagefile.sys
2010-10-21 12:35:39 ----ASH---- C:\hiberfil.sys

======List of files/folders modified in the last 1 months======

2010-10-22 22:30:07 ----D---- C:\Windows\Temp
2010-10-22 22:18:45 ----D---- C:\Windows\winsxs
2010-10-22 22:18:30 ----D---- C:\Windows\SysWOW64
2010-10-22 22:18:29 ----D---- C:\Windows\System32
2010-10-22 22:18:25 ----D---- C:\Windows\system32\catroot
2010-10-22 22:16:46 ----D---- C:\Windows\system32\config
2010-10-22 22:12:28 ----RD---- C:\Program Files
2010-10-22 22:10:58 ----D---- C:\Windows\inf
2010-10-22 22:10:58 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-10-22 20:42:13 ----D---- C:\Windows\system32\wdi
2010-10-22 19:46:55 ----RD---- C:\Program Files (x86)
2010-10-22 17:54:31 ----D---- C:\Windows\system32\catroot2
2010-10-22 14:48:34 ----D---- C:\Windows\Prefetch
2010-10-22 12:48:48 ----D---- C:\Windows
2010-10-22 08:09:20 ----SD---- C:\ProgramData\Microsoft
2010-10-22 08:04:53 ----D---- C:\PerfLogs
2010-10-22 07:53:54 ----D---- C:\Windows\system32\en-US
2010-10-22 07:53:54 ----D---- C:\Windows\system32\cs-CZ
2010-10-22 01:13:08 ----D---- C:\Windows\Tasks
2010-10-22 01:13:08 ----D---- C:\Windows\system32\wfp
2010-10-22 01:13:03 ----D---- C:\Windows\system32\CodeIntegrity
2010-10-22 01:11:47 ----D---- C:\Windows\registration
2010-10-22 01:08:48 ----D---- C:\Windows\system32\LogFiles
2010-10-21 21:52:42 ----D---- C:\Windows\Microsoft.NET
2010-10-21 21:52:32 ----RSD---- C:\Windows\assembly
2010-10-21 21:29:23 ----D---- C:\Windows\system32\drivers
2010-10-21 21:29:23 ----D---- C:\Program Files\Windows Mail
2010-10-21 21:29:23 ----D---- C:\Program Files (x86)\Windows Mail
2010-10-21 21:29:22 ----D---- C:\Windows\SYSWOW64\en-US
2010-10-21 21:29:22 ----D---- C:\Windows\SYSWOW64\cs-CZ
2010-10-21 21:29:21 ----D---- C:\Windows\ehome
2010-10-21 21:29:19 ----D---- C:\Windows\SYSWOW64\migration
2010-10-21 21:29:19 ----D---- C:\Windows\system32\migration
2010-10-21 21:29:19 ----D---- C:\Program Files\Internet Explorer
2010-10-21 21:29:19 ----D---- C:\Program Files (x86)\Internet Explorer
2010-10-21 21:29:18 ----D---- C:\Windows\AppPatch
2010-10-21 21:29:18 ----D---- C:\Program Files\Windows Media Player
2010-10-21 21:29:18 ----D---- C:\Program Files (x86)\Windows Media Player
2010-10-21 21:29:16 ----D---- C:\Windows\system32\DriverStore
2010-10-21 20:38:41 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-10-21 20:31:39 ----D---- C:\Windows\Logs
2010-10-21 18:02:57 ----D---- C:\Windows\rescache
2010-10-21 18:00:49 ----D---- C:\Program Files (x86)\Windows Sidebar
2010-10-21 18:00:46 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2010-10-21 18:00:44 ----D---- C:\Program Files\Windows Sidebar
2010-10-21 18:00:44 ----D---- C:\Program Files (x86)\Windows Defender
2010-10-21 18:00:41 ----D---- C:\Program Files\DVD Maker
2010-10-21 18:00:39 ----D---- C:\Program Files\Windows Photo Viewer
2010-10-21 18:00:39 ----D---- C:\Program Files\Windows Journal
2010-10-21 18:00:38 ----D---- C:\Program Files\Common Files\System
2010-10-21 18:00:37 ----D---- C:\Windows\servicing
2010-10-21 18:00:37 ----D---- C:\Program Files\Windows Defender
2010-10-21 18:00:23 ----D---- C:\Windows\SYSWOW64\winrm
2010-10-21 18:00:23 ----D---- C:\Windows\SYSWOW64\slmgr
2010-10-21 18:00:23 ----D---- C:\Windows\SYSWOW64\migwiz
2010-10-21 17:59:46 ----D---- C:\Windows\SYSWOW64\WCN
2010-10-21 17:59:46 ----D---- C:\Windows\SYSWOW64\MUI
2010-10-21 17:59:46 ----D---- C:\Windows\SYSWOW64\DriverStore
2010-10-21 17:59:46 ----D---- C:\Windows\SYSWOW64\drivers
2010-10-21 17:59:45 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2010-10-21 17:59:45 ----D---- C:\Windows\SYSWOW64\Dism
2010-10-21 17:59:43 ----D---- C:\Windows\SYSWOW64\wbem
2010-10-21 17:59:43 ----D---- C:\Windows\SYSWOW64\com
2010-10-21 17:59:43 ----D---- C:\Windows\IME
2010-10-21 17:59:36 ----D---- C:\Windows\PolicyDefinitions
2010-10-21 17:59:35 ----D---- C:\Windows\system32\winrm
2010-10-21 17:59:35 ----D---- C:\Windows\system32\sysprep
2010-10-21 17:59:35 ----D---- C:\Windows\system32\slmgr
2010-10-21 17:59:35 ----D---- C:\Windows\system32\oobe
2010-10-21 17:59:35 ----D---- C:\Windows\system32\migwiz
2010-10-21 17:59:35 ----D---- C:\Windows\system32\Boot
2010-10-21 17:58:57 ----D---- C:\Windows\system32\WCN
2010-10-21 17:58:57 ----D---- C:\Windows\system32\MUI
2010-10-21 17:58:57 ----D---- C:\Windows\system32\drivers\UMDF
2010-10-21 17:58:56 ----D---- C:\Windows\system32\Dism
2010-10-21 17:58:50 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2010-10-21 17:58:46 ----D---- C:\Windows\system32\wbem
2010-10-21 17:58:46 ----D---- C:\Windows\system32\com
2010-10-21 17:29:53 ----HD---- C:\ProgramData
2010-10-21 17:25:43 ----D---- C:\Program Files\Common Files
2010-10-21 17:25:43 ----D---- C:\Program Files (x86)\Common Files
2010-10-21 17:11:54 ----A---- C:\Windows\system32\atidxx64.dll
2010-10-21 15:58:01 ----D---- C:\Windows\system32\Tasks
2010-10-21 13:00:35 ----D---- C:\Windows\system32\restore
2010-10-21 12:43:45 ----SHD---- C:\$Recycle.Bin
2010-10-21 12:43:33 ----RD---- C:\Users
2010-10-21 12:43:26 ----D---- C:\Windows\Panther
2010-10-21 12:42:10 ----D---- C:\Windows\debug
2010-10-19 22:51:33 ----N---- C:\Windows\system32\MpSigStub.exe
2010-10-07 11:10:34 ----A---- C:\Windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-03-25 173984]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-10-21 7767040]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-10-21 279040]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2010-10-21 116240]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-09-03 2480104]
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 40832]
R3 RTL8023x64;Realtek 10/100 NIC Family NDIS x64 Driver; C:\Windows\system32\DRIVERS\Rtnic64.sys [2008-07-22 60416]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-11-05 291328]
R3 SRS_SSCFilter;SRS Labs Audio Sandbox (WDM); C:\Windows\system32\drivers\srs_sscfilter_amd64.sys [2009-12-15 346992]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-10-21 7767040]
S3 E1G60;Intel(R) PRO/1000 NDIS 6 Adapter Driver; C:\Windows\system32\DRIVERS\E1G6032E.sys [2009-06-10 145792]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-10-21 203264]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2010-03-25 17424]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2010-10-21 411432]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-10-22 1255736]

-----------------EOF-----------------
vomrkněnte to hoši thx!!

[Rudy]

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

[xchullit]

Zdar ,
test přes , MBAM
no žadný special- log mi to nevygenerovalo , pouze takový maly a ten nic nemá ,jinak to píše komplete scan v pořádku ,tak nevim co ,,a dal ?

[Rudy]

Otevřte MBAM a přejděte na záložku protokoly. Najděte ten poslední, otevřte jej a obsah sem zkopírujte.

[xchullit]

Ahoj, no tak tady je ten LOG

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4924

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

23.10.2010 14:52:15
mbam-log-2010-10-23 (14-52-15).txt

Typ skenu: Bleskový sken
Skenované objekty: 105109
Uplynulý čas: 37 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

[Rudy]

Nevypadá, že by v PC bylo něco nelegitimního. Jaký konkrétní problém máte?

[xchullit]

Ahoj , no já sám nevim , větřim nejaký vir co zveda ping ve hrách , moje dosavadní antivirusy byl eset 4 , clam win a nebo avast 5 free , vše jen dočasné , po instalaci trialu kaspesky 2011 security jsem našel víc jak 6 zlejch virů, tet mam obyč Windows Essentials Antivirus + dojiždim přes clam win portable .

jinak mam windows 7 x64 ale RAM jen 2G 800Mhz. (mohlo by to být také ramkou )

moje hlavní podezření směřuje na nejaký vir v RAM + další neznámý útok.

[xchullit]

ahoj, tady teda ještě posílám completní test

Malwarebytes' Anti-Malware 1.46
http://www.malwarebytes.org

Verze databáze: 4929

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

23.10.2010 23:12:56
mbam-log-2010-10-23 (23-12-56).txt

Typ skenu: Úplný sken (C:\|D:\|F:\|)
Skenované objekty: 351024
Uplynulý čas: 1 hodina(y), 8 minuta(y), 43 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

[Rudy]

OK. Zkuste toto:

Stáhněte OTL: http://oldtimer.geekstogo.com/OTL.exe . Uložte na plochu, klikněte prvým myšítkem a zadejte "spustit jako správce". Zaškrtněte "pro 64b systém", "pro všechny uživatele", "kontrola na havěť LOP" a "PURITY". Do spodního okna vložte:

netsvcs
drivers32
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
c:\windows\*.* /U
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
symmpi.sys
adp3132.sys
mv61xx.sys
nvraid.sys
ndis.sys
winlogon.exe
explorer.exe
userinit.exe
lsass.exe
svchost.exe
smss.exe
hal.dll
ws2_32.dll
tcpip.sys
cryptsvc.dll
Changer.sys
JakNDis.sys
isapnp.sys
cdrom.sys
autochk.exe
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
CREATERESTOREPOINT

Klikněte na "Prohledat" a vložte logy OTL.txt. a Extras.txt.

[xchullit]

ahoj , OTL test je zde http://www.uloz.to/6295113/otl-test-by-xchullit-rar

snad vám to pomůže

[Rudy]

Ani tam nic nebezpečného nevidím. Kde ten virus má podle vás být?

[xchullit]

Ahoj , kde má být ? na to se ptám vás jako odborníka přes škodlivé odpadky ,já jiné medody neznám , snad až bude opět vyhrocená situace použiju kasperský antivirus 2011 -alias monster antivirus remover

RAM čistý (ok)
po formátu (ok)
flash bios (ok)

jaká jiná varianta čištění by nebyla? rád se poučím a vyzkouším všechny neznámé a nebo moc nepouživáné softy + utility

jsem na drátě

[Rudy]

V žádném logu není nic nebezpečného vidět, proto nemohu určit, zda tam vir máte, či ne. Zkuste ještě sken AVPTool: http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 .

[xchullit]

ahoj , AVP tool jsem měl ten je ok i po akci ,
když by si měl velký problém , co by si použil na všechny viry jako první aplikaci ? (soft + metodiku)
ja si myslím ,že v PC asi už nic nebude ..bude to asi problém mé RAMky


ALE tet pozor muj digitální příteli ,,naistaloval jsem si Total Commander Ultima Prime 5.2 Trial (klasika ) a po testu přes ClamWin Free jsem našel toto



C:\My Programes\TC UP\PLUGINS\Tools\OpenFileTC\OpenFileTC.exe: Heuristic.Trojan.SusPacked


----------- SCAN SUMMARY -----------
to nechápu
jinak momentalně mam v PC Microsoft Antivirus Essentials x64 + dojiždim ručně pravě tim ClamWin Free
diky za vyčerpávaji odpovědi

[Rudy]

Soubor C:\My Programes\TC UP\PLUGINS\Tools\OpenFileTC\OpenFileTC.exe je součást TotalCommanderu. Měl by být v pořádku. Zkuste jej zkontrolovat online na www.virustotal.com.

Co bych použil jako první? RSIT. Ten mi řekne, co všechno v systému běží a zároveň napoví, co použít jako čistitcí program. Pak se rozhodnu mezi některým skenerem, ComboFixem, OTL atd.