VIRY.CZ

Zdravím prosím pomoc nefunguje mi absolutně žádná windowsová služba od wmp po obnovu absolutně nic co má něco společného s windowsem (obnova nejde ani z bootovacího cd). Je to asi způsobeno virem, tak jsem projel PC spyware terminatorem a esetem... bohužel nic nenašli... nechtěl bych přijít o data (nemám program na zálohování a windows installer samozřejmě taky nefunguje) tak jsem chtěl poprosit o řešení... přikládám log ... (všiměte si, že mezi windowsovýma službama chybí svchost atd...)
Logfile of random's system information tool 1.08 (written by random/random)
Scan saved at 11:02:05, on 27.2.2011
Platform: Unknown Windows (WinNT 6.01.3505 SP1)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\CyberLink\Shared files\brs.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\EXPERTool\TBPANEL.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Windows\System32\StikyNot.exe
C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
C:\Program Files\Opera\opera.exe
C:\Users\Eagle\AppData\Local\Apps\2.0\08M9BMW7.2J4\VLAAP056.PCK\czsh..tion_a17d8a36bc7dedfc_0000.0000_835a05bd7a620754\CZShareManager.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Java\jre6\bin\javaw.exe
C:\Users\Eagle\AppData\Local\Opera\Opera\temporary_downloads\hijackthis (1).exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=;ftp=;https=;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: QIPBHO Class - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Eagle\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
O2 - BHO: QuickStores-Toolbar - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - mscoree.dll (file missing)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: QIPBHO - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Eagle\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: QuickStores-Toolbar - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - mscoree.dll (file missing)
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [BDRegion] C:\Program Files\Cyberlink\Shared files\brs.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [GAINWARD] C:\Program Files\EXPERTool\TBPanel.exe /A
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [EPSON Stylus DX4400 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE /FU "C:\Users\Eagle\AppData\Local\Temp\E_S8836.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKUS\S-1-5-21-887571516-1347176287-2646974493-1001\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User '?')
O4 - HKUS\S-1-5-21-887571516-1347176287-2646974493-1001\..\Run: [GAINWARD] C:\Program Files\EXPERTool\TBPanel.exe /A (User '?')
O4 - HKUS\S-1-5-21-887571516-1347176287-2646974493-1001\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray (User '?')
O4 - HKUS\S-1-5-21-887571516-1347176287-2646974493-1001\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun (User '?')
O4 - HKUS\S-1-5-21-887571516-1347176287-2646974493-1001\..\Run: [EPSON Stylus DX4400 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE /FU "C:\Users\Eagle\AppData\Local\Temp\E_S8836.tmp" /EF "HKCU" (User '?')
O4 - HKUS\S-1-5-21-887571516-1347176287-2646974493-1001\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe (User '?')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O13 - Gopher Prefix:
O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} (SysInfo Class) - http://content.systemrequirementslab.co ... .3.1.0.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\system32\guard32.dll
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files\Nero\Update\NASvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

--
End of file - 9735 bytes

Dejte log z RSIT: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895 . Je podrobnější, než HijackThis.

samozřejmě posílám 2x protože asi nevyjdu s počtem znaků

Logfile of random's system information tool 1.08 (written by random/random)
Run by Eagle at 2011-02-27 12:19:07
WIN_7 Service Pack 1
System drive C: has 148 GB (64%) free of 231 GB
Total RAM: 3327 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:19:14, on 27.2.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\CyberLink\Shared files\brs.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\EXPERTool\TBPANEL.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Windows\System32\StikyNot.exe
C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
C:\Program Files\Opera\opera.exe
C:\Program Files\Defraggler\Defraggler.exe
C:\Program Files\Java\jre6\bin\javaw.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Windows\system32\taskmgr.exe
C:\Users\Eagle\AppData\Local\Opera\Opera\temporary_downloads\RSIT (2).exe
C:\Program Files\trend micro\Eagle.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=;ftp=;https=;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: QIPBHO Class - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Eagle\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
O2 - BHO: QuickStores-Toolbar - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - mscoree.dll (file missing)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: QIPBHO - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Eagle\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: QuickStores-Toolbar - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - mscoree.dll (file missing)
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [BDRegion] C:\Program Files\Cyberlink\Shared files\brs.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [GAINWARD] C:\Program Files\EXPERTool\TBPanel.exe /A
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [EPSON Stylus DX4400 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE /FU "C:\Users\Eagle\AppData\Local\Temp\E_S8836.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User '?')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User '?')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User '?')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User '?')
O4 - HKUS\S-1-5-21-887571516-1347176287-2646974493-1001\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User '?')
O4 - HKUS\S-1-5-21-887571516-1347176287-2646974493-1001\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe (User '?')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} (SysInfo Class) - http://content.systemrequirementslab.co ... .3.1.0.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\system32\guard32.dll
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files\Nero\Update\NASvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

--
End of file - 9393 bytes

======Scheduled tasks folder======

C:\Windows\tasks\AWC Startup.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10EDB994-47F8-43F7-AE96-F2EA63E9F90F}]
QuickStores-Toolbar - C:\Windows\system32\mscoree.dll [2010-11-05 297808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95289393-33EA-4F8D-B952-483415B9C955}]
QIPBHO Class - C:\Users\Eagle\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll [2010-12-13 141184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-08-27 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - QuickStores-Toolbar - C:\Windows\system32\mscoree.dll [2010-11-05 297808]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-08-12 2215064]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2011-01-19 2548552]
"BDRegion"=C:\Program Files\Cyberlink\Shared files\brs.exe [2010-12-29 75048]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe [2011-01-30 35736]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]
"UnlockerAssistant"=C:\Program Files\Unlocker\UnlockerAssistant.exe [2010-07-04 17408]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2010-12-20 443728]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
"GAINWARD"=C:\Program Files\EXPERTool\TBPanel.exe [2010-11-08 2181744]
"PC Suite Tray"=C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2010-05-14 1479680]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"EPSON Stylus DX4400 Series"=C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE [2007-03-01 180736]
"RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2009-07-14 354304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\365dni]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]
C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe -launchedbylogin []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe -launchedbylogin []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BDRegion]
C:\Program Files\Cyberlink\Shared files\brs.exe [2010-12-29 75048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Comodo EasyVPN]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EADM]
C:\Program Files\Electronic Arts\EADM\EADMUI\EADMUI.exe [2011-02-03 11509760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON Stylus DX4400 Series]
C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE [2007-03-01 180736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KPeerNexonEU]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2010-05-14 1479680]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl10]
C:\Program Files\CyberLink\PowerDVD10\PDVD10Serv.exe [2010-02-03 87336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminator]
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2010-12-25 2216960]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
c:\program files\steam\steam.exe [2010-12-02 1242448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\Windows\system32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutorun"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe"="C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe:*:Enabled:NEXON_EU_Downloader_Engine.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-02-26 23:33:00 ----D---- C:\Users\Eagle\AppData\Roaming\Malwarebytes
2011-02-26 23:32:50 ----D---- C:\ProgramData\Malwarebytes
2011-02-26 23:32:50 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys
2011-02-26 23:32:47 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-02-26 23:32:47 ----A---- C:\Windows\system32\drivers\mbam.sys
2011-02-26 23:16:06 ----D---- C:\rsit
2011-02-26 23:16:06 ----D---- C:\Program Files\trend micro
2011-02-26 21:57:02 ----A---- C:\Windows\ntbtlog.txt
2011-02-26 19:58:22 ----D---- C:\Users\Eagle\AppData\Roaming\QuickStoresToolbar
2011-02-26 19:58:21 ----D---- C:\Program Files\Unlocker
2011-02-26 19:51:48 ----D---- C:\Avenger
2011-02-26 19:51:47 ----A---- C:\avenger.txt
2011-02-25 09:49:44 ----A---- C:\Windows\system32\mkl_vml_p4.dll
2011-02-25 09:49:44 ----A---- C:\Windows\system32\mkl_vml_p3.dll
2011-02-25 09:49:44 ----A---- C:\Windows\system32\mkl_vml_def.dll
2011-02-25 09:49:44 ----A---- C:\Windows\system32\mkl_p4.dll
2011-02-25 09:49:44 ----A---- C:\Windows\system32\mkl_p3.dll
2011-02-25 09:49:44 ----A---- C:\Windows\system32\mkl_lapack64.dll
2011-02-25 09:49:44 ----A---- C:\Windows\system32\mkl_lapack32.dll
2011-02-25 09:49:43 ----A---- C:\Windows\system32\mkl_def.dll
2011-02-25 09:49:43 ----A---- C:\Windows\system32\libguide40.dll
2011-02-25 09:49:26 ----RA---- C:\Windows\system32\tmpD1B1.tmp
2011-02-25 09:47:49 ----RA---- C:\Windows\system32\tmpD1B0.tmp
2011-02-25 09:31:57 ----D---- C:\Program Files\Nero
2011-02-23 21:38:04 ----D---- C:\Windows\system32\SPReview
2011-02-23 21:37:31 ----D---- C:\Windows\system32\EventProviders
2011-02-23 21:34:30 ----A---- C:\Windows\system32\dfshim.dll
2011-02-23 21:34:25 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2011-02-23 21:34:25 ----A---- C:\Windows\system32\LSCSHostPolicy.dll
2011-02-23 21:34:25 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2011-02-23 21:34:24 ----A---- C:\Windows\system32\mstscax.dll
2011-02-23 21:34:20 ----A---- C:\Windows\system32\d3d10warp.dll
2011-02-23 21:34:19 ----A---- C:\Windows\system32\tssrvlic.dll
2011-02-23 21:34:19 ----A---- C:\Windows\system32\RDVGHelper.exe
2011-02-23 21:34:19 ----A---- C:\Windows\system32\rdpcorets.dll
2011-02-23 21:34:19 ----A---- C:\Windows\system32\mfc40u.dll
2011-02-23 21:34:19 ----A---- C:\Windows\system32\mfc40.dll
2011-02-23 21:34:17 ----A---- C:\Windows\system32\sysmain.dll
2011-02-23 21:34:15 ----A---- C:\Windows\system32\secproc_isv.dll
2011-02-23 21:34:15 ----A---- C:\Windows\system32\d2d1.dll
2011-02-23 21:34:14 ----A---- C:\Windows\system32\shell32.dll
2011-02-23 21:34:13 ----A---- C:\Windows\system32\RMActivate_isv.exe
2011-02-23 21:34:12 ----A---- C:\Windows\system32\secproc.dll
2011-02-23 21:34:11 ----A---- C:\Windows\system32\ieframe.dll
2011-02-23 21:34:10 ----A---- C:\Windows\system32\RMActivate.exe
2011-02-23 21:34:07 ----A---- C:\Windows\system32\spwizui.dll
2011-02-23 21:34:07 ----A---- C:\Windows\system32\mscoree.dll
2011-02-23 21:34:04 ----A---- C:\Windows\system32\mf.dll
2011-02-23 21:34:03 ----A---- C:\Windows\system32\ntkrnlpa.exe
2011-02-23 21:34:03 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2011-02-23 21:34:02 ----A---- C:\Windows\system32\iertutil.dll
2011-02-23 21:34:02 ----A---- C:\Windows\system32\CertEnroll.dll
2011-02-23 21:34:01 ----A---- C:\Windows\system32\mssrch.dll
2011-02-23 21:34:00 ----A---- C:\Windows\system32\wmp.dll
2011-02-23 21:33:59 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2011-02-23 21:33:59 ----A---- C:\Windows\system32\PresentationHost.exe
2011-02-23 21:33:59 ----A---- C:\Windows\system32\esent.dll
2011-02-23 21:33:59 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2011-02-23 21:33:59 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2011-02-23 21:33:58 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-02-23 21:33:57 ----A---- C:\Windows\system32\tquery.dll
2011-02-23 21:33:57 ----A---- C:\Windows\system32\schedsvc.dll
2011-02-23 21:33:56 ----A---- C:\Windows\system32\RacEngn.dll
2011-02-23 21:33:55 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2011-02-23 21:33:54 ----A---- C:\Windows\system32\ntdll.dll
2011-02-23 21:33:53 ----A---- C:\Windows\system32\rdpudd.dll
2011-02-23 21:33:53 ----A---- C:\Windows\system32\rdpdd.dll
2011-02-23 21:33:52 ----A---- C:\Windows\system32\wininet.dll
2011-02-23 21:33:52 ----A---- C:\Windows\system32\qmgr.dll
2011-02-23 21:33:51 ----A---- C:\Windows\system32\ExplorerFrame.dll
2011-02-23 21:33:50 ----A---- C:\Windows\system32\wevtsvc.dll
2011-02-23 21:33:50 ----A---- C:\Windows\system32\urlmon.dll
2011-02-23 21:33:50 ----A---- C:\Windows\system32\ole32.dll
2011-02-23 21:33:49 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-02-23 21:33:49 ----A---- C:\Windows\system32\CPFilters.dll
2011-02-23 21:33:48 ----A---- C:\Windows\system32\vssapi.dll
2011-02-23 21:33:48 ----A---- C:\Windows\system32\SearchFolder.dll
2011-02-23 21:33:48 ----A---- C:\Windows\system32\DWrite.dll
2011-02-23 21:33:48 ----A---- C:\Windows\system32\d3d9.dll
2011-02-23 21:33:47 ----A---- C:\Windows\system32\taskschd.dll
2011-02-23 21:33:47 ----A---- C:\Windows\system32\IKEEXT.DLL
2011-02-23 21:33:47 ----A---- C:\Windows\explorer.exe
2011-02-23 21:33:46 ----A---- C:\Windows\system32\kernel32.dll
2011-02-23 21:33:45 ----A---- C:\Windows\system32\PushPrinterConnections.exe
2011-02-23 21:33:45 ----A---- C:\Windows\system32\FntCache.dll
2011-02-23 21:33:45 ----A---- C:\Windows\system32\drivers\ntfs.sys
2011-02-23 21:33:45 ----A---- C:\Windows\system32\crypt32.dll
2011-02-23 21:33:44 ----A---- C:\Windows\system32\termsrv.dll
2011-02-23 21:33:44 ----A---- C:\Windows\system32\spreview.exe
2011-02-23 21:33:44 ----A---- C:\Windows\system32\spinstall.exe
2011-02-23 21:33:44 ----A---- C:\Windows\system32\mstsc.exe
2011-02-23 21:33:43 ----A---- C:\Windows\system32\wer.dll
2011-02-23 21:33:43 ----A---- C:\Windows\system32\rpcrt4.dll
2011-02-23 21:33:43 ----A---- C:\Windows\system32\certcli.dll
2011-02-23 21:33:42 ----A---- C:\Windows\system32\msxml6.dll
2011-02-23 21:33:42 ----A---- C:\Windows\system32\lsasrv.dll
2011-02-23 21:33:42 ----A---- C:\Windows\system32\gpsvc.dll
2011-02-23 21:33:42 ----A---- C:\Windows\system32\dwmcore.dll
2011-02-23 21:33:41 ----A---- C:\Windows\system32\wbengine.exe
2011-02-23 21:33:41 ----A---- C:\Windows\system32\odbc32.dll
2011-02-23 21:33:41 ----A---- C:\Windows\system32\MPSSVC.dll
2011-02-23 21:33:41 ----A---- C:\Windows\system32\diagperf.dll
2011-02-23 21:33:40 ----A---- C:\Windows\system32\WinSAT.exe
2011-02-23 21:33:40 ----A---- C:\Windows\system32\scavengeui.dll
2011-02-23 21:33:40 ----A---- C:\Windows\system32\mstime.dll
2011-02-23 21:33:39 ----A---- C:\Windows\system32\umrdp.dll
2011-02-23 21:33:39 ----A---- C:\Windows\system32\TSWorkspace.dll
2011-02-23 21:33:39 ----A---- C:\Windows\system32\tsmf.dll
2011-02-23 21:33:39 ----A---- C:\Windows\system32\quartz.dll
2011-02-23 21:33:39 ----A---- C:\Windows\system32\dot3api.dll
2011-02-23 21:33:38 ----A---- C:\Windows\system32\winhttp.dll
2011-02-23 21:33:38 ----A---- C:\Windows\system32\msfeeds.dll
2011-02-23 21:33:38 ----A---- C:\Windows\system32\localspl.dll
2011-02-23 21:33:38 ----A---- C:\Windows\system32\iedkcs32.dll
2011-02-23 21:33:38 ----A---- C:\Windows\system32\drivers\nvstor.sys
2011-02-23 21:33:37 ----A---- C:\Windows\system32\setupapi.dll
2011-02-23 21:33:37 ----A---- C:\Windows\system32\MSVidCtl.dll
2011-02-23 21:33:37 ----A---- C:\Windows\system32\apphelp.dll
2011-02-23 21:33:36 ----A---- C:\Windows\system32\VSSVC.exe
2011-02-23 21:33:36 ----A---- C:\Windows\system32\netlogon.dll
2011-02-23 21:33:36 ----A---- C:\Windows\system32\dbgeng.dll
2011-02-23 21:33:36 ----A---- C:\Windows\system32\d3d11.dll
2011-02-23 21:33:35 ----A---- C:\Windows\system32\winlogon.exe
2011-02-23 21:33:35 ----A---- C:\Windows\system32\WindowsCodecs.dll
2011-02-23 21:33:35 ----A---- C:\Windows\system32\user32.dll
2011-02-23 21:33:35 ----A---- C:\Windows\system32\rdpshell.exe
2011-02-23 21:33:35 ----A---- C:\Windows\system32\netcfgx.dll
2011-02-23 21:33:34 ----A---- C:\Windows\system32\WMVDECOD.DLL
2011-02-23 21:33:34 ----A---- C:\Windows\system32\webio.dll
2011-02-23 21:33:34 ----A---- C:\Windows\system32\Query.dll
2011-02-23 21:33:34 ----A---- C:\Windows\system32\gpprefcl.dll
2011-02-23 21:33:34 ----A---- C:\Windows\system32\drivers\srv.sys
2011-02-23 21:33:34 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2011-02-23 21:33:33 ----A---- C:\Windows\system32\WsmSvc.dll
2011-02-23 21:33:33 ----A---- C:\Windows\system32\upnp.dll
2011-02-23 21:33:33 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2011-02-23 21:33:33 ----A---- C:\Windows\system32\drivers\nvraid.sys
2011-02-23 21:33:33 ----A---- C:\Windows\system32\advapi32.dll
2011-02-23 21:33:32 ----A---- C:\Windows\system32\schannel.dll
2011-02-23 21:33:32 ----A---- C:\Windows\system32\netfxperf.dll
2011-02-23 21:33:32 ----A---- C:\Windows\system32\msv1_0.dll
2011-02-23 21:33:32 ----A---- C:\Windows\system32\mmcndmgr.dll
2011-02-23 21:33:32 ----A---- C:\Windows\system32\lsm.exe
2011-02-23 21:33:32 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-02-23 21:33:32 ----A---- C:\Windows\system32\drivers\csc.sys
2011-02-23 21:33:31 ----A---- C:\Windows\system32\sppobjs.dll
2011-02-23 21:33:31 ----A---- C:\Windows\system32\msdrm.dll
2011-02-23 21:33:31 ----A---- C:\Windows\system32\imapi2fs.dll
2011-02-23 21:33:31 ----A---- C:\Windows\system32\authui.dll
2011-02-23 21:33:30 ----A---- C:\Windows\system32\shlwapi.dll
2011-02-23 21:33:30 ----A---- C:\Windows\system32\SessEnv.dll
2011-02-23 21:33:30 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2011-02-23 21:33:29 ----A---- C:\Windows\system32\usp10.dll
2011-02-23 21:33:29 ----A---- C:\Windows\system32\mcbuilder.exe
2011-02-23 21:33:29 ----A---- C:\Windows\system32\KernelBase.dll
2011-02-23 21:33:28 ----A---- C:\Windows\system32\userenv.dll
2011-02-23 21:33:28 ----A---- C:\Windows\system32\certmgr.dll
2011-02-23 21:33:27 ----A---- C:\Windows\system32\xpsservices.dll
2011-02-23 21:33:27 ----A---- C:\Windows\system32\winload.exe
2011-02-23 21:33:27 ----A---- C:\Windows\system32\WebClnt.dll
2011-02-23 21:33:27 ----A---- C:\Windows\system32\d3d10_1core.dll
2011-02-23 21:33:27 ----A---- C:\Windows\system32\audiosrv.dll
2011-02-23 21:33:26 ----A---- C:\Windows\system32\umpnpmgr.dll
2011-02-23 21:33:26 ----A---- C:\Windows\system32\sppwinob.dll
2011-02-23 21:33:26 ----A---- C:\Windows\system32\iphlpsvc.dll
2011-02-23 21:33:26 ----A---- C:\Windows\system32\comdlg32.dll
2011-02-23 21:33:25 ----A---- C:\Windows\system32\rpcss.dll
2011-02-23 21:33:25 ----A---- C:\Windows\system32\cmd.exe
2011-02-23 21:33:24 ----A---- C:\Windows\system32\Wldap32.dll
2011-02-23 21:33:24 ----A---- C:\Windows\system32\win32spl.dll
2011-02-23 21:33:24 ----A---- C:\Windows\system32\rdpendp.dll
2011-02-23 21:33:24 ----A---- C:\Windows\system32\propsys.dll
2011-02-23 21:33:24 ----A---- C:\Windows\system32\nlasvc.dll
2011-02-23 21:33:24 ----A---- C:\Windows\system32\mfds.dll
2011-02-23 21:33:24 ----A---- C:\Windows\system32\framedynos.dll
2011-02-23 21:33:24 ----A---- C:\Windows\system32\drivers\volsnap.sys
2011-02-23 21:33:24 ----A---- C:\Windows\system32\dnsapi.dll
2011-02-23 21:33:24 ----A---- C:\Windows\system32\BFE.DLL
2011-02-23 21:33:23 ----A---- C:\Windows\system32\wuaueng.dll
2011-02-23 21:33:23 ----A---- C:\Windows\system32\samsrv.dll
2011-02-23 21:33:23 ----A---- C:\Windows\system32\drivers\netio.sys
2011-02-23 21:33:23 ----A---- C:\Windows\system32\drivers\ndis.sys
2011-02-23 21:33:23 ----A---- C:\Windows\system32\cscsvc.dll
2011-02-23 21:33:22 ----A---- C:\Windows\system32\wucltux.dll
2011-02-23 21:33:22 ----A---- C:\Windows\system32\winresume.exe
2011-02-23 21:33:22 ----A---- C:\Windows\system32\rdpclip.exe
2011-02-23 21:33:22 ----A---- C:\Windows\system32\profsvc.dll
2011-02-23 21:33:22 ----A---- C:\Windows\system32\ncsi.dll
2011-02-23 21:33:22 ----A---- C:\Windows\system32\azroles.dll
2011-02-23 21:33:21 ----A---- C:\Windows\system32\werconcpl.dll
2011-02-23 21:33:21 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-02-23 21:33:21 ----A---- C:\Windows\system32\appmgr.dll
2011-02-23 21:33:20 ----A---- C:\Windows\system32\themeui.dll
2011-02-23 21:33:20 ----A---- C:\Windows\system32\taskeng.exe
2011-02-23 21:33:20 ----A---- C:\Windows\system32\spp.dll
2011-02-23 21:33:20 ----A---- C:\Windows\system32\mswsock.dll
2011-02-23 21:33:20 ----A---- C:\Windows\system32\drivers\storport.sys
2011-02-23 21:33:20 ----A---- C:\Windows\system32\dhcpcore.dll
2011-02-23 21:33:20 ----A---- C:\Windows\system32\credui.dll
2011-02-23 21:33:19 ----A---- C:\Windows\system32\wintrust.dll
2011-02-23 21:33:19 ----A---- C:\Windows\system32\mfreadwrite.dll
2011-02-23 21:33:19 ----A---- C:\Windows\system32\inetcomm.dll
2011-02-23 21:33:19 ----A---- C:\Windows\system32\drivers\http.sys
2011-02-23 21:33:19 ----A---- C:\Windows\system32\basecsp.dll
2011-02-23 21:33:18 ----A---- C:\Windows\system32\taskcomp.dll
2011-02-23 21:33:18 ----A---- C:\Windows\system32\rdpinit.exe
2011-02-23 21:33:18 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2011-02-23 21:33:18 ----A---- C:\Windows\system32\msxml3.dll
2011-02-23 21:33:18 ----A---- C:\Windows\system32\evr.dll
2011-02-23 21:33:18 ----A---- C:\Windows\system32\dxgi.dll
2011-02-23 21:33:18 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2011-02-23 21:33:18 ----A---- C:\Windows\system32\dbghelp.dll
2011-02-23 21:33:17 ----A---- C:\Windows\system32\WinSATAPI.dll
2011-02-23 21:33:17 ----A---- C:\Windows\system32\spoolsv.exe
2011-02-23 21:33:17 ----A---- C:\Windows\system32\gdi32.dll
2011-02-23 21:33:17 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2011-02-23 21:33:17 ----A---- C:\Windows\system32\calc.exe
2011-02-23 21:33:16 ----A---- C:\Windows\system32\vpnike.dll
2011-02-23 21:33:16 ----A---- C:\Windows\system32\srvsvc.dll
2011-02-23 21:33:16 ----A---- C:\Windows\system32\sqlsrv32.dll
2011-02-23 21:33:16 ----A---- C:\Windows\system32\QAGENTRT.DLL
2011-02-23 21:33:16 ----A---- C:\Windows\system32\EncDec.dll
2011-02-23 21:33:16 ----A---- C:\Windows\system32\drivers\amdsata.sys
2011-02-23 21:33:15 ----A---- C:\Windows\system32\UIRibbon.dll
2011-02-23 21:33:15 ----A---- C:\Windows\system32\lpksetup.exe
2011-02-23 21:33:15 ----A---- C:\Windows\system32\fveapi.dll
2011-02-23 21:33:14 ----A---- C:\Windows\system32\tspubwmi.dll
2011-02-23 21:33:14 ----A---- C:\Windows\system32\sxs.dll
2011-02-23 21:33:14 ----A---- C:\Windows\system32\ie4uinit.exe
2011-02-23 21:33:14 ----A---- C:\Windows\system32\drivers\fvevol.sys
2011-02-23 21:33:14 ----A---- C:\Windows\system32\cryptsvc.dll
2011-02-23 21:33:13 ----A---- C:\Windows\system32\ws2_32.dll
2011-02-23 21:33:13 ----A---- C:\Windows\system32\stobject.dll
2011-02-23 21:33:13 ----A---- C:\Windows\system32\netshell.dll
2011-02-23 21:33:13 ----A---- C:\Windows\system32\hgprint.dll
2011-02-23 21:33:13 ----A---- C:\Windows\system32\drivers\rdbss.sys
2011-02-23 21:33:13 ----A---- C:\Windows\system32\drivers\msdsm.sys
2011-02-23 21:33:12 ----A---- C:\Windows\system32\prncache.dll
2011-02-23 21:33:12 ----A---- C:\Windows\system32\printui.dll
2011-02-23 21:33:12 ----A---- C:\Windows\system32\msi.dll
2011-02-23 21:33:12 ----A---- C:\Windows\system32\inetpp.dll
2011-02-23 21:33:12 ----A---- C:\Windows\system32\dps.dll
2011-02-23 21:33:12 ----A---- C:\Windows\system32\comctl32.dll
2011-02-23 21:33:11 ----A---- C:\Windows\system32\WSDApi.dll
2011-02-23 21:33:11 ----A---- C:\Windows\system32\wmpeffects.dll
2011-02-23 21:33:11 ----A---- C:\Windows\system32\rpchttp.dll
2011-02-23 21:33:11 ----A---- C:\Windows\system32\net1.exe
2011-02-23 21:33:11 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-02-23 21:33:11 ----A---- C:\Windows\system32\ci.dll
2011-02-23 21:33:11 ----A---- C:\Windows\system32\aitagent.exe
2011-02-23 21:33:11 ----A---- C:\Windows\system32\aepdu.dll
2011-02-23 21:33:10 ----A---- C:\Windows\system32\vds.exe
2011-02-23 21:33:10 ----A---- C:\Windows\system32\scansetting.dll
2011-02-23 21:33:10 ----A---- C:\Windows\system32\mfc42u.dll
2011-02-23 21:33:10 ----A---- C:\Windows\system32\FXSSVC.exe
2011-02-23 21:33:10 ----A---- C:\Windows\system32\drivers\vmbus.sys
2011-02-23 21:33:10 ----A---- C:\Windows\system32\drivers\pci.sys
2011-02-23 21:33:10 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-02-23 21:33:09 ----A---- C:\Windows\system32\WMVCORE.DLL
2011-02-23 21:33:09 ----A---- C:\Windows\system32\wlangpui.dll
2011-02-23 21:33:09 ----A---- C:\Windows\system32\MMDevAPI.dll
2011-02-23 21:33:09 ----A---- C:\Windows\system32\davclnt.dll
2011-02-23 21:33:09 ----A---- C:\Windows\system32\aaclient.dll
2011-02-23 21:33:08 ----A---- C:\Windows\system32\QSHVHOST.DLL
2011-02-23 21:33:08 ----A---- C:\Windows\system32\IPSECSVC.DLL
2011-02-23 21:33:08 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-02-23 21:33:08 ----A---- C:\Windows\system32\consent.exe
2011-02-23 21:33:07 ----A---- C:\Windows\system32\wpdshext.dll
2011-02-23 21:33:07 ----A---- C:\Windows\system32\webservices.dll
2011-02-23 21:33:07 ----A---- C:\Windows\system32\t2embed.dll
2011-02-23 21:33:07 ----A---- C:\Windows\system32\scrptadm.dll
2011-02-23 21:33:07 ----A---- C:\Windows\system32\pnidui.dll
2011-02-23 21:33:07 ----A---- C:\Windows\system32\drivers\termdd.sys
2011-02-23 21:33:06 ----A---- C:\Windows\system32\vmicsvc.exe
2011-02-23 21:33:06 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2011-02-23 21:33:06 ----A---- C:\Windows\system32\tscfgwmi.dll
2011-02-23 21:33:06 ----A---- C:\Windows\system32\SyncCenter.dll
2011-02-23 21:33:06 ----A---- C:\Windows\system32\netdiagfx.dll
2011-02-23 21:33:06 ----A---- C:\Windows\system32\fde.dll
2011-02-23 21:33:06 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2011-02-23 21:33:06 ----A---- C:\Windows\system32\drivers\rdpdr.sys
2011-02-23 21:33:06 ----A---- C:\Windows\system32\drivers\amdxata.sys
2011-02-23 21:33:05 ----A---- C:\Windows\system32\wuapi.dll
2011-02-23 21:33:05 ----A---- C:\Windows\system32\wscapi.dll
2011-02-23 21:33:05 ----A---- C:\Windows\system32\sdengin2.dll
2011-02-23 21:33:03 ----A---- C:\Windows\system32\wisptis.exe
2011-02-23 21:33:03 ----A---- C:\Windows\system32\WinSCard.dll
2011-02-23 21:33:03 ----A---- C:\Windows\system32\WFS.exe
2011-02-23 21:33:03 ----A---- C:\Windows\system32\pla.dll
2011-02-23 21:33:03 ----A---- C:\Windows\system32\msasn1.dll
2011-02-23 21:33:03 ----A---- C:\Windows\system32\mcmde.dll
2011-02-23 21:33:03 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2011-02-23 21:33:03 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2011-02-23 21:33:03 ----A---- C:\Windows\system32\cscobj.dll
2011-02-23 21:33:02 ----A---- C:\Windows\system32\WUDFSvc.dll
2011-02-23 21:33:02 ----A---- C:\Windows\system32\winsta.dll
2011-02-23 21:33:02 ----A---- C:\Windows\system32\wiaservc.dll
2011-02-23 21:33:02 ----A---- C:\Windows\system32\setupcl.exe
2011-02-23 21:33:02 ----A---- C:\Windows\system32\rdpcore.dll
2011-02-23 21:33:02 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2011-02-23 21:33:02 ----A---- C:\Windows\system32\imapi2.dll
2011-02-23 21:33:02 ----A---- C:\Windows\system32\iepeers.dll
2011-02-23 21:33:02 ----A---- C:\Windows\system32\drivers\msahci.sys
2011-02-23 21:33:02 ----A---- C:\Windows\system32\conhost.exe
2011-02-23 21:33:01 ----A---- C:\Windows\system32\ntshrui.dll
2011-02-23 21:33:01 ----A---- C:\Windows\system32\gameux.dll
2011-02-23 21:33:01 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2011-02-23 21:33:01 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2011-02-23 21:33:01 ----A---- C:\Windows\system32\aeinv.dll
2011-02-23 21:33:00 ----A---- C:\Windows\system32\WMPEncEn.dll
2011-02-23 21:33:00 ----A---- C:\Windows\system32\onex.dll
2011-02-23 21:33:00 ----A---- C:\Windows\system32\dwmredir.dll
2011-02-23 21:32:59 ----A---- C:\Windows\system32\winmm.dll
2011-02-23 21:32:59 ----A---- C:\Windows\system32\vaultsvc.dll
2011-02-23 21:32:59 ----A---- C:\Windows\system32\TabSvc.dll
2011-02-23 21:32:59 ----A---- C:\Windows\system32\shsvcs.dll
2011-02-23 21:32:59 ----A---- C:\Windows\system32\rasmans.dll
2011-02-23 21:32:59 ----A---- C:\Windows\system32\mssvp.dll
2011-02-23 21:32:59 ----A---- C:\Windows\system32\hbaapi.dll
2011-02-23 21:32:59 ----A---- C:\Windows\system32\drivers\udfs.sys
2011-02-23 21:32:59 ----A---- C:\Windows\system32\drivers\acpi.sys
2011-02-23 21:32:59 ----A---- C:\Windows\system32\autofmt.exe
2011-02-23 21:32:58 ----A---- C:\Windows\system32\samcli.dll
2011-02-23 21:32:58 ----A---- C:\Windows\system32\proquota.exe
2011-02-23 21:32:58 ----A---- C:\Windows\system32\netiohlp.dll
2011-02-23 21:32:58 ----A---- C:\Windows\system32\Narrator.exe
2011-02-23 21:32:58 ----A---- C:\Windows\system32\msutb.dll
2011-02-23 21:32:58 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2011-02-23 21:32:58 ----A---- C:\Windows\system32\halmacpi.dll
2011-02-23 21:32:58 ----A---- C:\Windows\system32\hal.dll
2011-02-23 21:32:58 ----A---- C:\Windows\system32\bootres.dll
2011-02-23 21:32:58 ----A---- C:\Windows\system32\autochk.exe
2011-02-23 21:32:58 ----A---- C:\Windows\system32\audiodg.exe
2011-02-23 21:32:57 ----A---- C:\Windows\system32\thumbcache.dll
2011-02-23 21:32:57 ----A---- C:\Windows\system32\sbe.dll
2011-02-23 21:32:57 ----A---- C:\Windows\system32\regapi.dll
2011-02-23 21:32:57 ----A---- C:\Windows\system32\msinfo32.exe
2011-02-23 21:32:57 ----A---- C:\Windows\system32\mimefilt.dll
2011-02-23 21:32:57 ----A---- C:\Windows\system32\ipsmsnap.dll
2011-02-23 21:32:57 ----A---- C:\Windows\system32\autoconv.exe
2011-02-23 21:32:57 ----A---- C:\Windows\system32\AudioSes.dll
2011-02-23 21:32:56 ----A---- C:\Windows\system32\wcncsvc.dll
2011-02-23 21:32:56 ----A---- C:\Windows\system32\tcpipcfg.dll
2011-02-23 21:32:56 ----A---- C:\Windows\system32\sspicli.dll
2011-02-23 21:32:56 ----A---- C:\Windows\system32\srchadmin.dll
2011-02-23 21:32:56 ----A---- C:\Windows\system32\schtasks.exe
2011-02-23 21:32:56 ----A---- C:\Windows\system32\powercpl.dll
2011-02-23 21:32:56 ----A---- C:\Windows\system32\msihnd.dll
2011-02-23 21:32:56 ----A---- C:\Windows\system32\mscorier.dll
2011-02-23 21:32:56 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-02-23 21:32:56 ----A---- C:\Windows\system32\framedyn.dll
2011-02-23 21:32:56 ----A---- C:\Windows\system32\eapphost.dll
2011-02-23 21:32:56 ----A---- C:\Windows\system32\drivers\volmgr.sys
2011-02-23 21:32:56 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-02-23 21:32:55 ----A---- C:\Windows\system32\QAGENT.DLL
2011-02-23 21:32:55 ----A---- C:\Windows\system32\netid.dll
2011-02-23 21:32:55 ----A---- C:\Windows\system32\drivers\partmgr.sys
2011-02-23 21:32:55 ----A---- C:\Windows\system32\drivers\netbt.sys
2011-02-23 21:32:55 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2011-02-23 21:32:54 ----A---- C:\Windows\system32\wdc.dll
2011-02-23 21:32:54 ----A---- C:\Windows\system32\umpo.dll
2011-02-23 21:32:54 ----A---- C:\Windows\system32\StructuredQuery.dll
2011-02-23 21:32:54 ----A---- C:\Windows\system32\scesrv.dll
2011-02-23 21:32:54 ----A---- C:\Windows\system32\DXP.dll

2011-02-23 21:32:54 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2011-02-23 21:32:54 ----A---- C:\Windows\system32\actxprxy.dll
2011-02-23 21:32:53 ----A---- C:\Windows\system32\Vault.dll
2011-02-23 21:32:53 ----A---- C:\Windows\system32\untfs.dll
2011-02-23 21:32:53 ----A---- C:\Windows\system32\sdclt.exe
2011-02-23 21:32:53 ----A---- C:\Windows\system32\rastls.dll
2011-02-23 21:32:53 ----A---- C:\Windows\system32\oleaut32.dll
2011-02-23 21:32:53 ----A---- C:\Windows\system32\nci.dll
2011-02-23 21:32:53 ----A---- C:\Windows\system32\drivers\ataport.sys
2011-02-23 21:32:52 ----A---- C:\Windows\system32\WMNetMgr.dll
2011-02-23 21:32:52 ----A---- C:\Windows\system32\wlanpref.dll
2011-02-23 21:32:52 ----A---- C:\Windows\system32\sppsvc.exe
2011-02-23 21:32:52 ----A---- C:\Windows\system32\RpcRtRemote.dll
2011-02-23 21:32:52 ----A---- C:\Windows\system32\ListSvc.dll
2011-02-23 21:32:52 ----A---- C:\Windows\system32\licmgr10.dll
2011-02-23 21:32:51 ----A---- C:\Windows\system32\Robocopy.exe
2011-02-23 21:32:51 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2011-02-23 21:32:50 ----A---- C:\Windows\system32\XpsRasterService.dll
2011-02-23 21:32:50 ----A---- C:\Windows\system32\userinit.exe
2011-02-23 21:32:50 ----A---- C:\Windows\system32\taskmgr.exe
2011-02-23 21:32:50 ----A---- C:\Windows\system32\mtxclu.dll
2011-02-23 21:32:50 ----A---- C:\Windows\system32\mssphtb.dll
2011-02-23 21:32:50 ----A---- C:\Windows\system32\msdri.dll
2011-02-23 21:32:50 ----A---- C:\Windows\system32\DxpTaskSync.dll
2011-02-23 21:32:50 ----A---- C:\Windows\system32\drivers\mpio.sys
2011-02-23 21:32:50 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2011-02-23 21:32:50 ----A---- C:\Windows\system32\Display.dll
2011-02-23 21:32:49 ----A---- C:\Windows\system32\termmgr.dll
2011-02-23 21:32:49 ----A---- C:\Windows\system32\sharemediacpl.dll
2011-02-23 21:32:49 ----A---- C:\Windows\system32\puiobj.dll
2011-02-23 21:32:49 ----A---- C:\Windows\system32\drivers\scsiport.sys
2011-02-23 21:32:49 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2011-02-23 21:32:49 ----A---- C:\Windows\system32\DiagCpl.dll
2011-02-23 21:32:49 ----A---- C:\Windows\system32\cscui.dll
2011-02-23 21:32:48 ----A---- C:\Windows\system32\msdtctm.dll
2011-02-23 21:32:48 ----A---- C:\Windows\system32\logoncli.dll
2011-02-23 21:32:48 ----A---- C:\Windows\system32\eudcedit.exe
2011-02-23 21:32:48 ----A---- C:\Windows\system32\drivers\winhv.sys
2011-02-23 21:32:48 ----A---- C:\Windows\system32\drivers\vmstorfl.sys
2011-02-23 21:32:47 ----A---- C:\Windows\system32\wiadefui.dll
2011-02-23 21:32:47 ----A---- C:\Windows\system32\sppcomapi.dll
2011-02-23 21:32:47 ----A---- C:\Windows\system32\shsetup.dll
2011-02-23 21:32:47 ----A---- C:\Windows\system32\rasppp.dll
2011-02-23 21:32:47 ----A---- C:\Windows\system32\msconfig.exe
2011-02-23 21:32:47 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2011-02-23 21:32:47 ----A---- C:\Windows\system32\drivers\storvsc.sys
2011-02-23 21:32:47 ----A---- C:\Windows\system32\cabview.dll
2011-02-23 21:32:47 ----A---- C:\Windows\system32\biocpl.dll
2011-02-23 21:32:46 ----A---- C:\Windows\system32\wpccpl.dll
2011-02-23 21:32:46 ----A---- C:\Windows\system32\themecpl.dll
2011-02-23 21:32:46 ----A---- C:\Windows\system32\SensorsCpl.dll
2011-02-23 21:32:46 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2011-02-23 21:32:46 ----A---- C:\Windows\system32\dnscmmc.dll
2011-02-23 21:32:45 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2011-02-23 21:32:44 ----A---- C:\Windows\system32\winsrv.dll
2011-02-23 21:32:44 ----A---- C:\Windows\system32\tapisrv.dll
2011-02-23 21:32:44 ----A---- C:\Windows\system32\scecli.dll
2011-02-23 21:32:44 ----A---- C:\Windows\system32\mscories.dll
2011-02-23 21:32:44 ----A---- C:\Windows\system32\mscms.dll
2011-02-23 21:32:44 ----A---- C:\Windows\system32\hgcpl.dll
2011-02-23 21:32:44 ----A---- C:\Windows\system32\fontext.dll
2011-02-23 21:32:44 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2011-02-23 21:32:43 ----A---- C:\Windows\system32\wkssvc.dll
2011-02-23 21:32:43 ----A---- C:\Windows\system32\usercpl.dll
2011-02-23 21:32:43 ----A---- C:\Windows\system32\srcore.dll
2011-02-23 21:32:43 ----A---- C:\Windows\system32\SndVolSSO.dll
2011-02-23 21:32:43 ----A---- C:\Windows\system32\mprddm.dll
2011-02-23 21:32:43 ----A---- C:\Windows\system32\localsec.dll
2011-02-23 21:32:43 ----A---- C:\Windows\system32\KMSVC.DLL
2011-02-23 21:32:43 ----A---- C:\Windows\system32\iasacct.dll
2011-02-23 21:32:43 ----A---- C:\Windows\system32\drivers\usbhub.sys
2011-02-23 21:32:43 ----A---- C:\Windows\system32\bcdsrv.dll
2011-02-23 21:32:42 ----A---- C:\Windows\system32\wlanui.dll
2011-02-23 21:32:42 ----A---- C:\Windows\system32\VAN.dll
2011-02-23 21:32:42 ----A---- C:\Windows\system32\qedit.dll
2011-02-23 21:32:42 ----A---- C:\Windows\system32\qdvd.dll
2011-02-23 21:32:42 ----A---- C:\Windows\system32\prntvpt.dll
2011-02-23 21:32:42 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2011-02-23 21:32:42 ----A---- C:\Windows\system32\netcenter.dll
2011-02-23 21:32:42 ----A---- C:\Windows\system32\mblctr.exe
2011-02-23 21:32:42 ----A---- C:\Windows\system32\batmeter.dll
2011-02-23 21:32:41 ----A---- C:\Windows\system32\wpdbusenum.dll
2011-02-23 21:32:41 ----A---- C:\Windows\system32\wksprt.exe
2011-02-23 21:32:41 ----A---- C:\Windows\system32\w32tm.exe
2011-02-23 21:32:41 ----A---- C:\Windows\system32\spwizeng.dll
2011-02-23 21:32:41 ----A---- C:\Windows\system32\SndVol.exe
2011-02-23 21:32:41 ----A---- C:\Windows\system32\azroleui.dll
2011-02-23 21:32:40 ----A---- C:\Windows\system32\zipfldr.dll
2011-02-23 21:32:40 ----A---- C:\Windows\system32\fdeploy.dll
2011-02-23 21:32:40 ----A---- C:\Windows\system32\drivers\ks.sys
2011-02-23 21:32:40 ----A---- C:\Windows\system32\drivers\afd.sys
2011-02-23 21:32:40 ----A---- C:\Windows\system32\accessibilitycpl.dll
2011-02-23 21:32:39 ----A---- C:\Windows\system32\netjoin.dll
2011-02-23 21:32:39 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2011-02-23 21:32:39 ----A---- C:\Windows\system32\cryptui.dll
2011-02-23 21:32:39 ----A---- C:\Windows\system32\adsldp.dll
2011-02-23 21:32:38 ----A---- C:\Windows\system32\wusa.exe
2011-02-23 21:32:38 ----A---- C:\Windows\system32\prnfldr.dll
2011-02-23 21:32:38 ----A---- C:\Windows\system32\networkmap.dll
2011-02-23 21:32:38 ----A---- C:\Windows\system32\mspbda.dll
2011-02-23 21:32:38 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2011-02-23 21:32:38 ----A---- C:\Windows\system32\Faultrep.dll
2011-02-23 21:32:38 ----A---- C:\Windows\system32\cfgmgr32.dll
2011-02-23 21:32:37 ----A---- C:\Windows\system32\taskhost.exe
2011-02-23 21:32:37 ----A---- C:\Windows\system32\taskbarcpl.dll
2011-02-23 21:32:37 ----A---- C:\Windows\system32\sud.dll
2011-02-23 21:32:37 ----A---- C:\Windows\system32\slui.exe
2011-02-23 21:32:37 ----A---- C:\Windows\system32\photowiz.dll
2011-02-23 21:32:37 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2011-02-23 21:32:37 ----A---- C:\Windows\system32\msieftp.dll
2011-02-23 21:32:37 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2011-02-23 21:32:37 ----A---- C:\Windows\system32\credssp.dll
2011-02-23 21:32:37 ----A---- C:\Windows\system32\ActionCenter.dll
2011-02-23 21:32:36 ----A---- C:\Windows\system32\rdpcorekmts.dll
2011-02-23 21:32:36 ----A---- C:\Windows\system32\iprtrmgr.dll
2011-02-23 21:32:36 ----A---- C:\Windows\system32\iasrad.dll
2011-02-23 21:32:36 ----A---- C:\Windows\system32\halacpi.dll
2011-02-23 21:32:36 ----A---- C:\Windows\system32\ftp.exe
2011-02-23 21:32:36 ----A---- C:\Windows\system32\drivers\hidclass.sys
2011-02-23 21:32:36 ----A---- C:\Windows\system32\dot3cfg.dll
2011-02-23 21:32:36 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2011-02-23 21:32:35 ----A---- C:\Windows\system32\wpd_ci.dll
2011-02-23 21:32:35 ----A---- C:\Windows\system32\sisbkup.dll
2011-02-23 21:32:35 ----A---- C:\Windows\system32\shwebsvc.dll
2011-02-23 21:32:35 ----A---- C:\Windows\system32\recovery.dll
2011-02-23 21:32:35 ----A---- C:\Windows\system32\odbcjt32.dll
2011-02-23 21:32:35 ----A---- C:\Windows\system32\ifsutil.dll
2011-02-23 21:32:35 ----A---- C:\Windows\system32\ieUnatt.exe
2011-02-23 21:32:35 ----A---- C:\Windows\system32\iesysprep.dll
2011-02-23 21:32:35 ----A---- C:\Windows\system32\efscore.dll
2011-02-23 21:32:35 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2011-02-23 21:32:34 ----A---- C:\Windows\system32\syncui.dll
2011-02-23 21:32:34 ----A---- C:\Windows\system32\sppnp.dll
2011-02-23 21:32:34 ----A---- C:\Windows\system32\sdcpl.dll
2011-02-23 21:32:34 ----A---- C:\Windows\system32\rdpwsx.dll
2011-02-23 21:32:34 ----A---- C:\Windows\system32\DeviceCenter.dll
2011-02-23 21:32:34 ----A---- C:\Windows\system32\bcdedit.exe
2011-02-23 21:32:34 ----A---- C:\Windows\system32\autoplay.dll
2011-02-23 21:32:33 ----A---- C:\Windows\system32\wmpmde.dll
2011-02-23 21:32:33 ----A---- C:\Windows\system32\vdsutil.dll
2011-02-23 21:32:33 ----A---- C:\Windows\system32\systemcpl.dll
2011-02-23 21:32:33 ----A---- C:\Windows\system32\rtutils.dll
2011-02-23 21:32:33 ----A---- C:\Windows\system32\recdisc.exe
2011-02-23 21:32:33 ----A---- C:\Windows\system32\OobeFldr.dll
2011-02-23 21:32:33 ----A---- C:\Windows\system32\ntlanman.dll
2011-02-23 21:32:33 ----A---- C:\Windows\system32\dskquoui.dll
2011-02-23 21:32:32 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2011-02-23 21:32:32 ----A---- C:\Windows\system32\sethc.exe
2011-02-23 21:32:32 ----A---- C:\Windows\system32\rstrui.exe
2011-02-23 21:32:32 ----A---- C:\Windows\system32\riched20.dll
2011-02-23 21:32:32 ----A---- C:\Windows\system32\rdpsign.exe
2011-02-23 21:32:32 ----A---- C:\Windows\system32\ntprint.dll
2011-02-23 21:32:32 ----A---- C:\Windows\system32\nshwfp.dll
2011-02-23 21:32:32 ----A---- C:\Windows\system32\fvecpl.dll
2011-02-23 21:32:32 ----A---- C:\Windows\system32\drivers\tdx.sys
2011-02-23 21:32:32 ----A---- C:\Windows\system32\bcdboot.exe
2011-02-23 21:32:31 ----A---- C:\Windows\system32\wmpsrcwp.dll
2011-02-23 21:32:31 ----A---- C:\Windows\system32\netplwiz.dll
2011-02-23 21:32:31 ----A---- C:\Windows\system32\NAPHLPR.DLL
2011-02-23 21:32:31 ----A---- C:\Windows\system32\migisol.dll
2011-02-23 21:32:31 ----A---- C:\Windows\system32\httpapi.dll
2011-02-23 21:32:31 ----A---- C:\Windows\system32\fms.dll
2011-02-23 21:32:31 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2011-02-23 21:32:31 ----A---- C:\Windows\system32\cdosys.dll
2011-02-23 21:32:31 ----A---- C:\Windows\system32\blackbox.dll
2011-02-23 21:32:31 ----A---- C:\Windows\system32\AxInstSv.dll
2011-02-23 21:32:31 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2011-02-23 21:32:31 ----A---- C:\Windows\system32\activeds.dll
2011-02-23 21:32:30 ----A---- C:\Windows\system32\wuwebv.dll
2011-02-23 21:32:30 ----A---- C:\Windows\system32\wsqmcons.exe
2011-02-23 21:32:30 ----A---- C:\Windows\system32\wlanmsm.dll
2011-02-23 21:32:30 ----A---- C:\Windows\system32\wavemsp.dll
2011-02-23 21:32:30 ----A---- C:\Windows\system32\ReAgent.dll
2011-02-23 21:32:30 ----A---- C:\Windows\system32\nshipsec.dll
2011-02-23 21:32:30 ----A---- C:\Windows\system32\nlaapi.dll
2011-02-23 21:32:30 ----A---- C:\Windows\system32\msftedit.dll
2011-02-23 21:32:30 ----A---- C:\Windows\system32\isoburn.exe
2011-02-23 21:32:30 ----A---- C:\Windows\system32\dot3svc.dll
2011-02-23 21:32:30 ----A---- C:\Windows\system32\asycfilt.dll
2011-02-23 21:32:29 ----A---- C:\Windows\system32\wvc.dll
2011-02-23 21:32:29 ----A---- C:\Windows\system32\wtsapi32.dll
2011-02-23 21:32:29 ----A---- C:\Windows\system32\tzutil.exe
2011-02-23 21:32:29 ----A---- C:\Windows\system32\sysclass.dll
2011-02-23 21:32:29 ----A---- C:\Windows\system32\provsvc.dll
2011-02-23 21:32:29 ----A---- C:\Windows\system32\ocsetup.exe
2011-02-23 21:32:29 ----A---- C:\Windows\system32\dsuiext.dll
2011-02-23 21:32:29 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2011-02-23 21:32:29 ----A---- C:\Windows\system32\dot3ui.dll
2011-02-23 21:32:29 ----A---- C:\Windows\system32\dfrgui.exe
2011-02-23 21:32:29 ----A---- C:\Windows\system32\appinfo.dll
2011-02-23 21:32:28 ----A---- C:\Windows\system32\wimgapi.dll
2011-02-23 21:32:28 ----A---- C:\Windows\system32\webcheck.dll
2011-02-23 21:32:28 ----A---- C:\Windows\system32\twext.dll
2011-02-23 21:32:28 ----A---- C:\Windows\system32\mstask.dll
2011-02-23 21:32:28 ----A---- C:\Windows\system32\certprop.dll
2011-02-23 21:32:28 ----A---- C:\Windows\system32\AdmTmpl.dll
2011-02-23 21:32:27 ----A---- C:\Windows\twain_32.dll
2011-02-23 21:32:27 ----A---- C:\Windows\system32\uxlib.dll
2011-02-23 21:32:27 ----A---- C:\Windows\system32\slwga.dll
2011-02-23 21:32:27 ----A---- C:\Windows\system32\shdocvw.dll
2011-02-23 21:32:27 ----A---- C:\Windows\system32\setupugc.exe
2011-02-23 21:32:27 ----A---- C:\Windows\system32\qcap.dll
2011-02-23 21:32:27 ----A---- C:\Windows\system32\qasf.dll
2011-02-23 21:32:27 ----A---- C:\Windows\system32\PresentationSettings.exe
2011-02-23 21:32:27 ----A---- C:\Windows\system32\occache.dll
2011-02-23 21:32:27 ----A---- C:\Windows\system32\msrating.dll
2011-02-23 21:32:27 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-02-23 21:32:27 ----A---- C:\Windows\system32\imm32.dll
2011-02-23 21:32:26 ----A---- C:\Windows\system32\wwanconn.dll
2011-02-23 21:32:26 ----A---- C:\Windows\system32\wmdrmsdk.dll
2011-02-23 21:32:26 ----A---- C:\Windows\system32\srrstr.dll
2011-02-23 21:32:26 ----A---- C:\Windows\system32\nslookup.exe
2011-02-23 21:32:26 ----A---- C:\Windows\system32\msvfw32.dll
2011-02-23 21:32:26 ----A---- C:\Windows\system32\mciavi32.dll
2011-02-23 21:32:26 ----A---- C:\Windows\system32\imgutil.dll
2011-02-23 21:32:26 ----A---- C:\Windows\system32\audiodev.dll
2011-02-23 21:32:25 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2011-02-23 21:32:25 ----A---- C:\Windows\system32\wimserv.exe
2011-02-23 21:32:25 ----A---- C:\Windows\system32\msscp.dll
2011-02-23 21:32:25 ----A---- C:\Windows\system32\diskraid.exe
2011-02-23 21:32:25 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2011-02-23 21:32:25 ----A---- C:\Windows\system32\clusapi.dll
2011-02-23 21:32:24 ----A---- C:\Windows\system32\TSpkg.dll
2011-02-23 21:32:24 ----A---- C:\Windows\system32\remotepg.dll
2011-02-23 21:32:24 ----A---- C:\Windows\system32\rdpencom.dll
2011-02-23 21:32:24 ----A---- C:\Windows\system32\raschap.dll
2011-02-23 21:32:24 ----A---- C:\Windows\system32\QUTIL.DLL
2011-02-23 21:32:24 ----A---- C:\Windows\system32\perfmon.exe
2011-02-23 21:32:24 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2011-02-23 21:32:24 ----A---- C:\Windows\system32\input.dll
2011-02-23 21:32:24 ----A---- C:\Windows\system32\drmmgrtn.dll
2011-02-23 21:32:24 ----A---- C:\Windows\system32\browser.dll
2011-02-23 21:32:24 ----A---- C:\Windows\system32\acppage.dll
2011-02-23 21:32:23 ----A---- C:\Windows\system32\wmpdxm.dll
2011-02-23 21:32:23 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2011-02-23 21:32:23 ----A---- C:\Windows\system32\vpnikeapi.dll
2011-02-23 21:32:23 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2011-02-23 21:32:23 ----A---- C:\Windows\system32\sdrsvc.dll
2011-02-23 21:32:23 ----A---- C:\Windows\system32\olepro32.dll
2011-02-23 21:32:23 ----A---- C:\Windows\system32\odbccp32.dll
2011-02-23 21:32:23 ----A---- C:\Windows\system32\ocsetapi.dll
2011-02-23 21:32:23 ----A---- C:\Windows\system32\nltest.exe
2011-02-23 21:32:23 ----A---- C:\Windows\system32\networkexplorer.dll
2011-02-23 21:32:22 ----A---- C:\Windows\system32\wpdwcn.dll
2011-02-23 21:32:22 ----A---- C:\Windows\system32\vdsbas.dll
2011-02-23 21:32:22 ----A---- C:\Windows\system32\sspisrv.dll
2011-02-23 21:32:22 ----A---- C:\Windows\system32\runonce.exe
2011-02-23 21:32:22 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-02-23 21:32:22 ----A---- C:\Windows\system32\onexui.dll
2011-02-23 21:32:22 ----A---- C:\Windows\system32\Mcx2Svc.dll
2011-02-23 21:32:22 ----A---- C:\Windows\system32\logagent.exe
2011-02-23 21:32:22 ----A---- C:\Windows\system32\iTVData.dll
2011-02-23 21:32:22 ----A---- C:\Windows\system32\inseng.dll
2011-02-23 21:32:22 ----A---- C:\Windows\system32\dxdiagn.dll
2011-02-23 21:32:22 ----A---- C:\Windows\bfsvc.exe
2011-02-23 21:32:21 ----A---- C:\Windows\system32\PnPUnattend.exe
2011-02-23 21:32:21 ----A---- C:\Windows\system32\msvidc32.dll
2011-02-23 21:32:21 ----A---- C:\Windows\system32\msiexec.exe
2011-02-23 21:32:21 ----A---- C:\Windows\system32\MFPlay.dll
2011-02-23 21:32:21 ----A---- C:\Windows\system32\eapp3hst.dll
2011-02-23 21:32:21 ----A---- C:\Windows\system32\drivers\rmcast.sys
2011-02-23 21:32:21 ----A---- C:\Windows\system32\d3d10level9.dll
2011-02-23 21:32:20 ----A---- C:\Windows\system32\wudriver.dll
2011-02-23 21:32:20 ----A---- C:\Windows\system32\wmpshell.dll
2011-02-23 21:32:20 ----A---- C:\Windows\system32\wmdrmdev.dll
2011-02-23 21:32:20 ----A---- C:\Windows\system32\unimdmat.dll
2011-02-23 21:32:20 ----A---- C:\Windows\system32\tabcal.exe
2011-02-23 21:32:20 ----A---- C:\Windows\system32\sqlcese30.dll
2011-02-23 21:32:20 ----A---- C:\Windows\system32\shacct.dll
2011-02-23 21:32:20 ----A---- C:\Windows\system32\rdpd3d.dll
2011-02-23 21:32:20 ----A---- C:\Windows\system32\mprapi.dll
2011-02-23 21:32:20 ----A---- C:\Windows\system32\lsmproxy.dll
2011-02-23 21:32:20 ----A---- C:\Windows\system32\iscsium.dll
2011-02-23 21:32:20 ----A---- C:\Windows\system32\bitsadmin.exe
2011-02-23 21:32:19 ----A---- C:\Windows\system32\WUDFPlatform.dll
2011-02-23 21:32:19 ----A---- C:\Windows\system32\WPDSp.dll
2011-02-23 21:32:19 ----A---- C:\Windows\system32\srvcli.dll
2011-02-23 21:32:19 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2011-02-23 21:32:19 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2011-02-23 21:32:19 ----A---- C:\Windows\system32\pdh.dll
2011-02-23 21:32:19 ----A---- C:\Windows\system32\OpcServices.dll
2011-02-23 21:32:19 ----A---- C:\Windows\system32\olethk32.dll
2011-02-23 21:32:19 ----A---- C:\Windows\system32\ncryptui.dll
2011-02-23 21:32:19 ----A---- C:\Windows\system32\MdSched.exe
2011-02-23 21:32:19 ----A---- C:\Windows\system32\logman.exe
2011-02-23 21:32:19 ----A---- C:\Windows\system32\djoin.exe
2011-02-23 21:32:19 ----A---- C:\Windows\system32\cscapi.dll
2011-02-23 21:32:18 ----A---- C:\Windows\system32\wwanprotdim.dll
2011-02-23 21:32:18 ----A---- C:\Windows\system32\WMPhoto.dll
2011-02-23 21:32:18 ----A---- C:\Windows\system32\WMADMOD.DLL
2011-02-23 21:32:18 ----A---- C:\Windows\system32\utildll.dll
2011-02-23 21:32:18 ----A---- C:\Windows\system32\tsgqec.dll
2011-02-23 21:32:18 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2011-02-23 21:32:18 ----A---- C:\Windows\system32\odbctrac.dll
2011-02-23 21:32:18 ----A---- C:\Windows\system32\mshtmled.dll
2011-02-23 21:32:18 ----A---- C:\Windows\system32\mapistub.dll
2011-02-23 21:32:18 ----A---- C:\Windows\system32\mapi32.dll
2011-02-23 21:32:18 ----A---- C:\Windows\system32\lpremove.exe
2011-02-23 21:32:18 ----A---- C:\Windows\system32\CscMig.dll
2011-02-23 21:32:18 ----A---- C:\Windows\system32\ActionQueue.dll
2011-02-23 21:32:17 ----A---- C:\Windows\system32\WMVSDECD.DLL
2011-02-23 21:32:17 ----A---- C:\Windows\system32\wmdrmnet.dll
2011-02-23 21:32:17 ----A---- C:\Windows\system32\wiavideo.dll
2011-02-23 21:32:17 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2011-02-23 21:32:17 ----A---- C:\Windows\system32\takeown.exe
2011-02-23 21:32:17 ----A---- C:\Windows\system32\sqmapi.dll
2011-02-23 21:32:17 ----A---- C:\Windows\system32\iyuv_32.dll
2011-02-23 21:32:17 ----A---- C:\Windows\system32\imagehlp.dll
2011-02-23 21:32:17 ----A---- C:\Windows\system32\fphc.dll
2011-02-23 21:32:17 ----A---- C:\Windows\system32\dot3msm.dll
2011-02-23 21:32:17 ----A---- C:\Windows\system32\avifil32.dll
2011-02-23 21:32:16 ----A---- C:\Windows\system32\WUDFx.dll
2011-02-23 21:32:16 ----A---- C:\Windows\system32\unattend.dll
2011-02-23 21:32:16 ----A---- C:\Windows\system32\sppinst.dll
2011-02-23 21:32:16 ----A---- C:\Windows\system32\qprocess.exe
2011-02-23 21:32:16 ----A---- C:\Windows\system32\qdv.dll
2011-02-23 21:32:16 ----A---- C:\Windows\system32\QCLIPROV.DLL
2011-02-23 21:32:16 ----A---- C:\Windows\system32\msyuv.dll
2011-02-23 21:32:16 ----A---- C:\Windows\system32\msrle32.dll
2011-02-23 21:32:16 ----A---- C:\Windows\system32\msnetobj.dll
2011-02-23 21:32:16 ----A---- C:\Windows\system32\EhStorAPI.dll
2011-02-23 21:32:16 ----A---- C:\Windows\system32\cmstp.exe
2011-02-23 21:32:16 ----A---- C:\Windows\system32\cca.dll
2011-02-23 21:32:15 ----A---- C:\Windows\system32\WUDFHost.exe
2011-02-23 21:32:15 ----A---- C:\Windows\system32\wuauclt.exe
2011-02-23 21:32:15 ----A---- C:\Windows\system32\wsnmp32.dll
2011-02-23 21:32:15 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2011-02-23 21:32:15 ----A---- C:\Windows\system32\vfwwdm32.dll
2011-02-23 21:32:15 ----A---- C:\Windows\system32\umb.dll
2011-02-23 21:32:15 ----A---- C:\Windows\system32\tsbyuv.dll
2011-02-23 21:32:15 ----A---- C:\Windows\system32\setupcln.dll
2011-02-23 21:32:15 ----A---- C:\Windows\system32\RelPost.exe
2011-02-23 21:32:15 ----A---- C:\Windows\system32\pdhui.dll
2011-02-23 21:32:15 ----A---- C:\Windows\system32\MuiUnattend.exe
2011-02-23 21:32:15 ----A---- C:\Windows\system32\msg.exe
2011-02-23 21:32:15 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2011-02-23 21:32:15 ----A---- C:\Windows\system32\basesrv.dll
2011-02-23 21:32:15 ----A---- C:\Windows\system32\AzSqlExt.dll
2011-02-23 21:32:14 ----A---- C:\Windows\system32\wkscli.dll
2011-02-23 21:32:14 ----A---- C:\Windows\system32\WavDest.dll
2011-02-23 21:32:14 ----A---- C:\Windows\system32\sppuinotify.dll
2011-02-23 21:32:14 ----A---- C:\Windows\system32\spbcd.dll
2011-02-23 21:32:14 ----A---- C:\Windows\system32\relog.exe
2011-02-23 21:32:14 ----A---- C:\Windows\system32\qwinsta.exe
2011-02-23 21:32:14 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2011-02-23 21:32:14 ----A---- C:\Windows\system32\netiougc.exe
2011-02-23 21:32:14 ----A---- C:\Windows\system32\mydocs.dll
2011-02-23 21:32:14 ----A---- C:\Windows\system32\msorcl32.dll
2011-02-23 21:32:14 ----A---- C:\Windows\system32\iscsicli.exe
2011-02-23 21:32:14 ----A---- C:\Windows\system32\iasrecst.dll
2011-02-23 21:32:14 ----A---- C:\Windows\system32\chglogon.exe
2011-02-23 21:32:14 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2011-02-23 21:32:14 ----A---- C:\Windows\system32\BdeHdCfg.exe
2011-02-23 21:32:14 ----A---- C:\Windows\system32\amstream.dll
2011-02-23 21:32:13 ----A---- C:\Windows\system32\syssetup.dll
2011-02-23 21:32:13 ----A---- C:\Windows\system32\setbcdlocale.dll
2011-02-23 21:32:13 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2011-02-23 21:32:13 ----A---- C:\Windows\system32\secproc_ssp.dll
2011-02-23 21:32:13 ----A---- C:\Windows\system32\resutils.dll
2011-02-23 21:32:13 ----A---- C:\Windows\system32\rastapi.dll
2011-02-23 21:32:13 ----A---- C:\Windows\system32\quser.exe
2011-02-23 21:32:13 ----A---- C:\Windows\system32\nrpsrv.dll
2011-02-23 21:32:13 ----A---- C:\Windows\system32\netbtugc.exe
2011-02-23 21:32:13 ----A---- C:\Windows\system32\MultiDigiMon.exe
2011-02-23 21:32:13 ----A---- C:\Windows\system32\itircl.dll
2011-02-23 21:32:13 ----A---- C:\Windows\system32\diskpart.exe
2011-02-23 21:32:13 ----A---- C:\Windows\system32\CertPolEng.dll
2011-02-23 21:32:12 ----A---- C:\Windows\system32\wuapp.exe
2011-02-23 21:32:12 ----A---- C:\Windows\system32\wmpps.dll
2011-02-23 21:32:12 ----A---- C:\Windows\system32\WerFaultSecure.exe
2011-02-23 21:32:12 ----A---- C:\Windows\system32\tsdiscon.exe
2011-02-23 21:32:12 ----A---- C:\Windows\system32\tscon.exe
2011-02-23 21:32:12 ----A---- C:\Windows\system32\secur32.dll
2011-02-23 21:32:12 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2011-02-23 21:32:12 ----A---- C:\Windows\system32\qappsrv.exe
2011-02-23 21:32:12 ----A---- C:\Windows\system32\PrintBrmUi.exe
2011-02-23 21:32:12 ----A---- C:\Windows\system32\chgusr.exe
2011-02-23 21:32:12 ----A---- C:\Windows\system32\chgport.exe
2011-02-23 21:32:12 ----A---- C:\Windows\system32\FXSTIFF.dll
2011-02-23 21:32:12 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2011-02-23 21:32:11 ----A---- C:\Windows\system32\wiarpc.dll
2011-02-23 21:32:11 ----A---- C:\Windows\system32\tskill.exe
2011-02-23 21:32:11 ----A---- C:\Windows\system32\tlscsp.dll
2011-02-23 21:32:11 ----A---- C:\Windows\system32\shadow.exe
2011-02-23 21:32:11 ----A---- C:\Windows\system32\rwinsta.exe
2011-02-23 21:32:11 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2011-02-23 21:32:11 ----A---- C:\Windows\system32\ReAgentc.exe
2011-02-23 21:32:11 ----A---- C:\Windows\system32\netutils.dll
2011-02-23 21:32:11 ----A---- C:\Windows\system32\mciqtz32.dll
2011-02-23 21:32:11 ----A---- C:\Windows\system32\logoff.exe
2011-02-23 21:32:11 ----A---- C:\Windows\system32\findstr.exe
2011-02-23 21:32:11 ----A---- C:\Windows\system32\eappgnui.dll
2011-02-23 21:32:11 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-02-23 21:32:10 ----A---- C:\Windows\system32\sppc.dll
2011-02-23 21:32:10 ----A---- C:\Windows\system32\spopk.dll
2011-02-23 21:32:10 ----A---- C:\Windows\system32\shimgvw.dll
2011-02-23 21:32:10 ----A---- C:\Windows\system32\prevhost.exe
2011-02-23 21:32:10 ----A---- C:\Windows\system32\netapi32.dll
2011-02-23 21:32:10 ----A---- C:\Windows\system32\muifontsetup.dll
2011-02-23 21:32:10 ----A---- C:\Windows\system32\mobsync.exe
2011-02-23 21:32:10 ----A---- C:\Windows\system32\iccvid.dll
2011-02-23 21:32:10 ----A---- C:\Windows\system32\drivers\tdi.sys
2011-02-23 21:32:10 ----A---- C:\Windows\system32\dosx.exe
2011-02-23 21:32:10 ----A---- C:\Windows\system32\cabinet.dll
2011-02-23 21:32:09 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2011-02-23 21:32:09 ----A---- C:\Windows\system32\vmicres.dll
2011-02-23 21:32:09 ----A---- C:\Windows\system32\unlodctr.exe
2011-02-23 21:32:09 ----A---- C:\Windows\system32\repair-bde.exe
2011-02-23 21:32:09 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2011-02-23 21:32:09 ----A---- C:\Windows\system32\netcfg.exe
2011-02-23 21:32:09 ----A---- C:\Windows\system32\msdmo.dll
2011-02-23 21:32:09 ----A---- C:\Windows\system32\manage-bde.exe
2011-02-23 21:32:09 ----A---- C:\Windows\system32\luainstall.dll
2011-02-23 21:32:09 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2011-02-23 21:32:09 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2011-02-23 21:32:09 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2011-02-23 21:32:08 ----A---- C:\Windows\system32\vmstorfltres.dll
2011-02-23 21:32:08 ----A---- C:\Windows\system32\reset.exe
2011-02-23 21:32:08 ----A---- C:\Windows\system32\query.exe
2011-02-23 21:32:08 ----A---- C:\Windows\system32\inetmib1.dll
2011-02-23 21:32:08 ----A---- C:\Windows\system32\change.exe
2011-02-23 21:32:07 ----A---- C:\Windows\system32\wups.dll
2011-02-23 21:32:07 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2011-02-23 21:32:07 ----A---- C:\Windows\system32\vmbusres.dll
2011-02-23 21:32:07 ----A---- C:\Windows\system32\UIRibbonRes.dll
2011-02-23 21:32:07 ----A---- C:\Windows\system32\profprov.dll
2011-02-23 21:32:07 ----A---- C:\Windows\system32\odbcconf.dll
2011-02-23 21:32:07 ----A---- C:\Windows\system32\drivers\cdrom.sys
2011-02-23 21:32:07 ----A---- C:\Windows\system32\browcli.dll
2011-02-23 21:32:06 ----A---- C:\Windows\system32\perfts.dll
2011-02-23 21:32:06 ----A---- C:\Windows\system32\icaapi.dll
2011-02-23 21:32:06 ----A---- C:\Windows\system32\FXSMON.dll
2011-02-23 21:32:06 ----A---- C:\Windows\system32\drivers\dfsc.sys
2011-02-23 21:32:05 ----A---- C:\Windows\system32\wshbth.dll
2011-02-23 21:32:05 ----A---- C:\Windows\system32\TRAPI.dll
2011-02-23 21:32:05 ----A---- C:\Windows\system32\schedcli.dll
2011-02-23 21:32:05 ----A---- C:\Windows\system32\RDPENCDD.dll
2011-02-23 21:32:05 ----A---- C:\Windows\system32\napdsnap.dll
2011-02-23 21:32:05 ----A---- C:\Windows\system32\msfeedssync.exe
2011-02-23 21:32:05 ----A---- C:\Windows\system32\elsTrans.dll
2011-02-23 21:32:05 ----A---- C:\Windows\system32\drivers\tunnel.sys
2011-02-23 21:32:05 ----A---- C:\Windows\system32\bitsperf.dll
2011-02-23 21:32:04 ----A---- C:\Windows\system32\sscore.dll
2011-02-23 21:32:04 ----A---- C:\Windows\system32\LogonUI.exe
2011-02-23 21:32:04 ----A---- C:\Windows\system32\dsauth.dll
2011-02-23 21:32:04 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2011-02-23 21:32:04 ----A---- C:\Windows\system32\cscdll.dll
2011-02-23 21:32:03 ----A---- C:\Windows\system32\wups2.dll
2011-02-23 21:32:03 ----A---- C:\Windows\system32\wsdchngr.dll
2011-02-23 21:32:03 ----A---- C:\Windows\system32\shgina.dll
2011-02-23 21:32:03 ----A---- C:\Windows\system32\riched32.dll
2011-02-23 21:32:03 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2011-02-23 21:32:02 ----A---- C:\Windows\system32\rdpcfgex.dll
2011-02-23 21:32:02 ----A---- C:\Windows\system32\drivers\VMBusHID.sys
2011-02-23 21:32:02 ----A---- C:\Windows\system32\drivers\hidusb.sys
2011-02-23 21:32:02 ----A---- C:\Windows\system32\drivers\appid.sys
2011-02-23 21:32:01 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2011-02-23 21:32:00 ----A---- C:\Windows\system32\wshirda.dll
2011-02-23 21:32:00 ----A---- C:\Windows\system32\drivers\usbser.sys
2011-02-23 21:32:00 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2011-02-23 21:32:00 ----A---- C:\Windows\system32\drivers\USBCAMD.sys
2011-02-23 21:32:00 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2011-02-23 21:31:59 ----A---- C:\Windows\system32\vmictimeprovider.dll
2011-02-23 21:31:59 ----A---- C:\Windows\system32\VmdCoinstall.dll
2011-02-23 21:31:59 ----A---- C:\Windows\system32\vmbuspipe.dll
2011-02-23 21:31:59 ----A---- C:\Windows\system32\VmbusCoinstaller.dll
2011-02-23 21:31:59 ----A---- C:\Windows\system32\spwmp.dll
2011-02-23 21:31:59 ----A---- C:\Windows\system32\IcCoinstall.dll
2011-02-23 21:31:59 ----A---- C:\Windows\system32\drivers\wanarp.sys
2011-02-23 21:31:59 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2011-02-23 21:31:59 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2011-02-23 21:31:59 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2011-02-23 21:31:59 ----A---- C:\Windows\system32\drivers\Dot4Prt.sys
2011-02-23 21:31:59 ----A---- C:\Windows\system32\browseui.dll
2011-02-23 21:31:58 ----A---- C:\Windows\system32\shunimpl.dll
2011-02-23 21:31:58 ----A---- C:\Windows\system32\RDPREFDD.dll
2011-02-23 21:31:58 ----A---- C:\Windows\system32\dxmasf.dll
2011-02-23 21:31:58 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2011-02-23 21:31:58 ----A---- C:\Windows\system32\drivers\umbus.sys
2011-02-23 21:31:58 ----A---- C:\Windows\system32\drivers\tdpipe.sys
2011-02-23 21:31:58 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2011-02-23 21:31:58 ----A---- C:\Windows\system32\drivers\scfilter.sys
2011-02-23 21:31:58 ----A---- C:\Windows\system32\drivers\RDPCDD.sys
2011-02-23 21:31:58 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2011-02-23 21:31:58 ----A---- C:\Windows\system32\C_ISCII.DLL
2011-02-23 21:31:57 ----A---- C:\Windows\system32\wmploc.DLL
2011-02-23 21:31:57 ----A---- C:\Windows\system32\KBDUS.DLL
2011-02-23 21:31:57 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2011-02-23 21:31:57 ----A---- C:\Windows\system32\KBDTURME.DLL
2011-02-23 21:31:57 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2011-02-23 21:31:57 ----A---- C:\Windows\system32\KBDMON.DLL
2011-02-23 21:31:57 ----A---- C:\Windows\system32\KBDMAORI.DLL
2011-02-23 21:31:57 ----A---- C:\Windows\system32\KBDLT1.DLL
2011-02-23 21:31:57 ----A---- C:\Windows\system32\KBDINTEL.DLL
2011-02-23 21:31:57 ----A---- C:\Windows\system32\KBDINORI.DLL
2011-02-23 21:31:57 ----A---- C:\Windows\system32\KBDINKAN.DLL
2011-02-23 21:31:57 ----A---- C:\Windows\system32\KBDGEO.DLL
2011-02-23 21:31:56 ----A---- C:\Windows\system32\tzres.dll
2011-02-23 21:31:56 ----A---- C:\Windows\system32\spwizres.dll
2011-02-23 21:31:56 ----A---- C:\Windows\system32\pifmgr.dll
2011-02-23 21:31:56 ----A---- C:\Windows\system32\nlsbres.dll
2011-02-23 21:31:56 ----A---- C:\Windows\system32\KBDTUQ.DLL
2011-02-23 21:31:56 ----A---- C:\Windows\system32\KBDTUF.DLL
2011-02-23 21:31:56 ----A---- C:\Windows\system32\KBDSG.DLL
2011-02-23 21:31:56 ----A---- C:\Windows\system32\KBDSF.DLL
2011-02-23 21:31:56 ----A---- C:\Windows\system32\KBDPO.DLL
2011-02-23 21:31:56 ----A---- C:\Windows\system32\KBDNEPR.DLL
2011-02-23 21:31:56 ----A---- C:\Windows\system32\kbdlk41a.dll
2011-02-23 21:31:56 ----A---- C:\Windows\system32\KBDINTAM.DLL
2011-02-23 21:31:56 ----A---- C:\Windows\system32\KBDINMAR.DLL
2011-02-23 21:31:56 ----A---- C:\Windows\system32\KBDINHIN.DLL
2011-02-23 21:31:56 ----A---- C:\Windows\system32\KBDINBEN.DLL
2011-02-23 21:31:56 ----A---- C:\Windows\system32\KBDGR1.DLL
2011-02-23 21:31:56 ----A---- C:\Windows\system32\KBDGKL.DLL
2011-02-23 21:31:56 ----A---- C:\Windows\system32\KBDCZ1.DLL
2011-02-23 21:31:56 ----A---- C:\Windows\system32\KBDBULG.DLL
2011-02-23 21:31:56 ----A---- C:\Windows\system32\KBDBLR.DLL
2011-02-23 21:31:56 ----A---- C:\Windows\system32\KBDBASH.DLL
2011-02-23 21:31:56 ----A---- C:\Windows\system32\drivers\vms3cap.sys
2011-02-23 21:31:56 ----A---- C:\Windows\system32\dpnaddr.dll
2011-02-23 21:31:56 ----A---- C:\Windows\system32\BlbEvents.dll
2011-02-23 21:31:30 ----A---- C:\Windows\system32\wmicmiplugin.dll
2011-02-23 21:31:30 ----A---- C:\Windows\system32\wbemcomn.dll
2011-02-23 21:31:21 ----A---- C:\Windows\system32\SmiEngine.dll
2011-02-23 21:31:15 ----A---- C:\Windows\system32\wdscore.dll
2011-02-23 21:31:15 ----A---- C:\Windows\system32\PkgMgr.exe
2011-02-23 21:30:48 ----A---- C:\Windows\system32\drvstore.dll
2011-02-23 21:30:48 ----A---- C:\Windows\system32\dpx.dll
2011-02-23 21:14:02 ----A---- C:\Windows\system32\d3d10_1.dll
2011-02-23 10:59:05 ----A---- C:\Windows\system32\XpsPrint.dll
2011-02-23 10:59:04 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-02-22 22:06:48 ----D---- C:\Program Files\Vypnutí pc
2011-02-20 17:14:04 ----D---- C:\Program Files\CodeBlocks
2011-02-15 21:30:02 ----D---- C:\Program Files\Lavalys
2011-02-15 21:11:39 ----A---- C:\Windows\system32\nvwgf2um.dll
2011-02-15 21:11:39 ----A---- C:\Windows\system32\nvoglv32.dll
2011-02-15 21:11:39 ----A---- C:\Windows\system32\nvdispco322090.dll
2011-02-15 21:11:39 ----A---- C:\Windows\system32\nvd3dum.dll
2011-02-15 21:11:39 ----A---- C:\Windows\system32\nvcuda.dll
2011-02-15 21:11:39 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2011-02-15 21:10:39 ----D---- C:\NVIDIA
2011-02-15 21:09:38 ----D---- C:\ProgramData\NVIDIA
2011-02-15 20:56:12 ----D---- C:\Program Files\Phyxion.net
2011-02-15 17:17:47 ----A---- C:\Windows\system32\Mss32.dll
2011-02-14 15:49:39 ----D---- C:\Users\Eagle\AppData\Roaming\QIP
2011-02-14 15:49:26 ----D---- C:\Users\Eagle\AppData\Roaming\QipGuard
2011-02-14 15:49:10 ----D---- C:\Program Files\QIP 2010
2011-02-09 23:23:49 ----A---- C:\Users\Eagle\AppData\Roaming\UserFlag.ini
2011-02-09 23:01:43 ----D---- C:\Program Files\Free Hide Folder
2011-02-08 20:33:01 ----A---- C:\Windows\system32\kerberos.dll
2011-02-08 20:33:00 ----A---- C:\Windows\system32\win32k.sys
2011-02-08 20:32:59 ----A---- C:\Windows\system32\fontsub.dll
2011-02-08 20:32:59 ----A---- C:\Windows\system32\atmlib.dll
2011-02-08 20:32:59 ----A---- C:\Windows\system32\atmfd.dll
2011-02-08 20:32:57 ----A---- C:\Windows\system32\vbscript.dll
2011-02-08 20:32:57 ----A---- C:\Windows\system32\jscript.dll
2011-02-08 20:32:51 ----A---- C:\Windows\system32\mshtml.dll
2011-02-08 20:32:27 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2011-02-08 20:32:27 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2011-02-08 20:32:27 ----A---- C:\Windows\system32\cdd.dll
2011-02-08 01:26:59 ----A---- C:\Windows\system32\OpenCL.dll
2011-02-08 01:26:59 ----A---- C:\Windows\system32\nvgenco322040.dll
2011-02-08 01:26:59 ----A---- C:\Windows\system32\nvcuvid.dll
2011-02-08 01:26:59 ----A---- C:\Windows\system32\nvcuvenc.dll
2011-02-08 01:26:59 ----A---- C:\Windows\system32\nvcompiler.dll
2011-02-08 00:19:08 ----HD---- C:\Windows\msdownld.tmp
2011-02-08 00:19:07 ----D---- C:\Windows\system32\directx
2011-02-06 00:53:02 ----D---- C:\Users\Eagle\AppData\Roaming\CyberLink
2011-02-06 00:51:01 ----D---- C:\ProgramData\CyberLink
2011-02-06 00:50:33 ----D---- C:\Program Files\Common Files\CyberLink
2011-02-06 00:48:53 ----D---- C:\Program Files\CyberLink
2011-02-06 00:48:53 ----A---- C:\Windows\system32\msxml3a.dll
2011-02-06 00:48:15 ----D---- C:\ProgramData\Temp
2011-02-06 00:44:46 ----D---- C:\Windows\system32\syncdb
2011-02-03 23:26:06 ----D---- C:\Windows\C5C1C0F0D62F4DBF81D4D7EF397C228B.TMP
2011-02-02 20:55:14 ----D---- C:\Program Files\Install Creator Pro
2011-02-01 01:33:20 ----D---- C:\Users\Eagle\AppData\Roaming\Zoner
2011-02-01 01:32:52 ----D---- C:\Program Files\Zoner
2011-02-01 01:01:18 ----D---- C:\ProgramData\SmartSound Software Inc
2011-01-29 22:28:35 ----A---- C:\Windows\system32\addr.txt

======List of files/folders modified in the last 1 months======

2011-02-27 12:19:08 ----D---- C:\Windows\Temp
2011-02-27 12:19:05 ----D---- C:\Windows\Prefetch
2011-02-27 10:21:34 ----D---- C:\ProgramData\Spyware Terminator
2011-02-27 10:21:33 ----D---- C:\Program Files\Spyware Terminator
2011-02-27 05:40:57 ----SHD---- C:\System Volume Information
2011-02-26 23:36:30 ----D---- C:\Users\Eagle\AppData\Roaming\Spyware Terminator
2011-02-26 23:32:50 ----HD---- C:\ProgramData
2011-02-26 23:32:50 ----D---- C:\Windows\system32\drivers
2011-02-26 23:32:47 ----RD---- C:\Program Files
2011-02-26 22:48:57 ----D---- C:\Windows\System32
2011-02-26 22:48:56 ----D---- C:\Windows\inf
2011-02-26 22:48:56 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-02-26 22:43:26 ----D---- C:\Windows\system32\Tasks
2011-02-26 22:12:27 ----D---- C:\Program Files\JDownloader
2011-02-26 21:57:02 ----D---- C:\Windows
2011-02-26 21:52:34 ----D---- C:\Program Files\Internet Explorer
2011-02-26 21:52:33 ----D---- C:\Windows\AppCompat
2011-02-26 21:52:32 ----D---- C:\Users\Eagle\AppData\Roaming\GHISLER
2011-02-26 21:52:29 ----D---- C:\Program Files\MSI Afterburner
2011-02-26 21:52:29 ----D---- C:\Program Files\Common Files\Nero
2011-02-26 21:52:29 ----D---- C:\Program Files\BRS
2011-02-26 21:52:25 ----D---- C:\ProgramData\Comodo
2011-02-26 21:52:25 ----D---- C:\Program Files\Wise Registry Cleaner
2011-02-26 21:52:23 ----SHD---- C:\Windows\Installer
2011-02-26 21:52:23 ----D---- C:\Windows\system32\DriverStore
2011-02-26 21:52:23 ----D---- C:\Windows\system32\drivers\etc
2011-02-26 21:52:23 ----D---- C:\Windows\system32\CodeIntegrity
2011-02-26 21:52:23 ----D---- C:\Windows\system32\catroot2
2011-02-26 21:52:23 ----D---- C:\Windows\rescache
2011-02-26 21:52:23 ----D---- C:\Users\Eagle\AppData\Roaming\uTorrent
2011-02-26 21:52:22 ----D---- C:\Windows\Tasks
2011-02-26 21:52:22 ----D---- C:\Windows\system32\wfp
2011-02-26 21:52:22 ----D---- C:\Windows\system32\wbem
2011-02-26 20:59:41 ----D---- C:\Windows\Logs
2011-02-26 20:50:46 ----D---- C:\Users\Eagle\AppData\Roaming\Skype
2011-02-26 19:58:23 ----RSD---- C:\Windows\assembly
2011-02-26 19:12:15 ----D---- C:\Users\Eagle\AppData\Roaming\skypePM
2011-02-26 18:10:32 ----D---- C:\ProgramData\NexonEU
2011-02-26 10:53:10 ----D---- C:\Windows\system32\config
2011-02-25 16:30:30 ----D---- C:\Users\Eagle\AppData\Roaming\App Launcher Gadget
2011-02-25 09:49:26 ----A---- C:\Windows\system32\wrap_oal.dll
2011-02-25 09:49:26 ----A---- C:\Windows\system32\OpenAL32.dll
2011-02-25 09:25:59 ----HD---- C:\Program Files\InstallShield Installation Information
2011-02-24 19:16:45 ----D---- C:\Windows\Microsoft.NET
2011-02-23 22:34:29 ----D---- C:\Windows\Minidump
2011-02-23 22:17:46 ----D---- C:\Windows\winsxs
2011-02-23 22:17:40 ----SHD---- C:\Boot
2011-02-23 22:12:55 ----D---- C:\Program Files\Windows Sidebar
2011-02-23 22:12:55 ----D---- C:\Program Files\Windows Portable Devices
2011-02-23 22:12:55 ----D---- C:\Program Files\Windows Photo Viewer
2011-02-23 22:12:55 ----D---- C:\Program Files\Windows Media Player
2011-02-23 22:12:55 ----D---- C:\Program Files\Windows Mail
2011-02-23 22:12:55 ----D---- C:\Program Files\Windows Journal
2011-02-23 22:12:55 ----D---- C:\Program Files\DVD Maker
2011-02-23 22:12:54 ----D---- C:\Windows\servicing
2011-02-23 22:12:54 ----D---- C:\Windows\ehome
2011-02-23 22:12:54 ----D---- C:\Program Files\Windows Defender
2011-02-23 22:12:48 ----SHD---- C:\Windows\BitLockerDiscoveryVolumeContents
2011-02-23 22:12:48 ----D---- C:\Windows\system32\en-US
2011-02-23 22:12:48 ----D---- C:\Windows\system32\da-DK
2011-02-23 22:12:48 ----D---- C:\Windows\PolicyDefinitions
2011-02-23 22:12:47 ----D---- C:\Windows\system32\sysprep
2011-02-23 22:12:47 ----D---- C:\Windows\system32\Setup
2011-02-23 22:12:47 ----D---- C:\Windows\system32\oobe
2011-02-23 22:12:47 ----D---- C:\Windows\system32\migration
2011-02-23 22:12:47 ----D---- C:\Windows\system32\cs-CZ
2011-02-23 22:12:47 ----D---- C:\Windows\system32\cs
2011-02-23 22:12:47 ----D---- C:\Windows\system32\AdvancedInstallers
2011-02-23 22:12:46 ----D---- C:\Windows\system32\sppui
2011-02-23 22:12:46 ----D---- C:\Windows\system32\manifeststore
2011-02-23 22:12:46 ----D---- C:\Windows\system32\es-ES
2011-02-23 22:12:46 ----D---- C:\Windows\system32\drivers\UMDF
2011-02-23 22:12:46 ----D---- C:\Windows\system32\drivers\cs-CZ
2011-02-23 22:12:45 ----D---- C:\Windows\system32\migwiz
2011-02-23 22:12:45 ----D---- C:\Windows\system32\Dism
2011-02-23 22:12:34 ----RSD---- C:\Windows\Fonts
2011-02-23 22:12:34 ----D---- C:\Windows\AppPatch
2011-02-23 22:12:26 ----D---- C:\Windows\system32\Boot
2011-02-23 21:42:41 ----A---- C:\Windows\system32\msclmd.dll
2011-02-23 21:25:04 ----D---- C:\Windows\system32\catroot
2011-02-23 19:14:58 ----D---- C:\Users\Eagle\AppData\Roaming\InstallShield Installation Information
2011-02-20 21:30:08 ----D---- C:\Users\Eagle\AppData\Roaming\codeblocks
2011-02-19 10:55:09 ----D---- C:\Program Files\Microsoft Silverlight
2011-02-19 00:06:33 ----D---- C:\Program Files\AutoHideIP
2011-02-18 21:51:45 ----SD---- C:\ProgramData\Microsoft
2011-02-18 15:10:42 ----D---- C:\Windows\system32\NDF
2011-02-15 21:12:30 ----D---- C:\Windows\Help
2011-02-12 00:12:56 ----D---- C:\ProgramData\Adobe
2011-02-10 14:48:37 ----D---- C:\Program Files\Mozilla Firefox 4.0 Beta 4
2011-02-10 02:47:47 ----D---- C:\Program Files\Defraggler
2011-02-10 02:43:48 ----D---- C:\Windows\debug
2011-02-09 02:30:17 ----A---- C:\Windows\system32\MRT.exe
2011-02-08 20:42:23 ----D---- C:\ProgramData\Microsoft Help
2011-02-08 15:25:59 ----SD---- C:\Users\Eagle\AppData\Roaming\Microsoft
2011-02-08 15:25:59 ----D---- C:\Users\Eagle\AppData\Roaming\Adobe
2011-02-08 01:27:57 ----D---- C:\Program Files\NVIDIA Corporation
2011-02-08 01:09:36 ----D---- C:\Program Files\Common Files\Adobe
2011-02-08 01:09:35 ----D---- C:\Program Files\Adobe
2011-02-07 18:02:32 ----DC---- C:\Windows\system32\DRVSTORE
2011-02-07 18:02:28 ----D---- C:\Program Files\COMODO
2011-02-07 00:30:28 ----D---- C:\Program Files\Common Files
2011-02-07 00:14:40 ----A---- C:\Windows\system32\msvcr71.dll
2011-02-07 00:14:40 ----A---- C:\Windows\system32\msvcp71.dll
2011-02-06 23:42:12 ----D---- C:\Program Files\Common Files\MAGIX Services
2011-02-06 00:38:03 ----D---- C:\Program Files\Google
2011-02-04 20:36:31 ----D---- C:\ProgramData\BioWare
2011-02-04 20:36:31 ----D---- C:\Program Files\Common Files\BioWare
2011-02-04 20:35:40 ----D---- C:\ProgramData\Media Center Programs
2011-02-04 20:27:59 ----D---- C:\Users\Eagle\AppData\Roaming\vlc
2011-02-03 23:25:58 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2011-02-03 23:10:55 ----A---- C:\Windows\system32\PnkBstrB.exe
2011-02-02 17:11:20 ----N---- C:\Windows\system32\MpSigStub.exe
2011-02-01 01:06:38 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2011-01-30 21:45:15 ----D---- C:\Program Files\MAGIX
2011-01-30 21:45:14 ----D---- C:\ProgramData\MAGIX
2011-01-29 21:29:40 ----D---- C:\Users\Eagle\AppData\Roaming\COMODO
2011-01-29 01:17:21 ----D---- C:\Program Files\Opera
2011-01-28 16:19:38 ----D---- C:\Users\Eagle\AppData\Roaming\Tropico 3

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; C:\Windows\system32\giveio.sys [1996-04-03 5248]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\Windows\System32\drivers\sfdrv01.sys [2009-02-03 59000]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\Windows\System32\drivers\sfhlp02.sys [2006-06-14 13680]
R0 speedfan;speedfan; C:\Windows\system32\speedfan.sys [2006-09-24 5248]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-08-28 691696]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2011-01-11 236600]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2011-01-11 35768]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-07-29 115008]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2011-01-11 80064]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\Windows\system32\drivers\sp_rsdrv2.sys [2010-12-25 142592]
R2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC};Power Control [2011/02/06 00:50:44]; \??\C:\Program Files\CyberLink\PowerDVD10\NavFilter\000.fcl [2010-12-29 87536]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2010-11-30 281760]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-07-29 136632]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-07-29 134512]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-07-29 41336]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2010-11-30 25888]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-07-29 32608]
R4 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\mbamswissarmy.sys [2010-12-20 38224]
S0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); C:\Windows\System32\drivers\sfsync02.sys [2006-07-10 27032]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 amqe2mxm;amqe2mxm; C:\Windows\system32\drivers\amqe2mxm.sys []
S3 ATP;Comodo EasyVPN Miniport Driver; C:\Windows\system32\DRIVERS\cmdatp.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 131072]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\drivers\Dot4Prt.sys [2010-11-20 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 36864]
S3 EagleNT;EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys []
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2010-02-26 18176]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2010-02-26 22528]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsu.sys [2010-02-26 137344]
S3 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2010-06-25 35088]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 15872]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 27192]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TBPanel;TBPanel; C:\Windows\system32\drivers\TBPanel.sys [2007-03-16 12256]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2010-02-26 8192]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2010-02-26 8192]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2011-01-19 1803224]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-08-12 810144]
R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE [2007-01-11 113664]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2011-01-07 608872]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2011-01-20 75136]
R2 ProtexisLicensing;ProtexisLicensing; C:\Windows\system32\PSIService.exe [2007-06-05 177704]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2010-12-25 496128]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-01-07 378984]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-09-06 136176]
S2 NAUpdate;@C:\Program Files\Nero\Update\NASvc.exe,-200; C:\Program Files\Nero\Update\NASvc.exe [2010-05-04 503080]
S2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 1710464]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-06-10 31064]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-08-12 33584]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2010-06-25 117264]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-10-20 630272]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2010-12-02 403240]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-12-12 1343400]
S4 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]

-----------------EOF-----------------

Log vypadá OK. Zkuste startmenu>přík. řádek (napsat) services.msc>OK. V otevřeném okně služby zkontrolujte a pokud jsou zakázané, povolte je na statut autmaticky. Ty, které není třeba automaticky spouštět, na statut ručně.

Udělal jsem, jak jste říkal a skutečně jsem našel zakázané služby, které by měly běžet a všechno jsem povolil buď ručně nebo automaticky a restartoval počítač. Bohužel bezezměny

OK. Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware