VIRY.CZ

http://www.uloz.to/8517157/log-txt

Obsahoval spoustu znaků, doufám, že se něco najde Už mě nebaví jak se mi pořád zavírá prohlížeč a otevírá se IE se stránkou na FB

Zdravim a pekny den preji

Rozdelte prosim log do vice prispevku

Logfile of random's system information tool 1.08 (written by random/random)
Run by SEVEN at 2011-04-03 00:12:22
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 37 GB (36%) free of 102 GB
Total RAM: 4091 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 0:12:26, on 3.4.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Windows\Whyjea.exe
C:\Users\SEVEN\AppData\Roaming\dwm.exe
C:\Users\SEVEN\AppData\Local\Temp\csrss.exe
C:\Users\SEVEN\AppData\Roaming\Microsoft\conhost.exe
C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
C:\Program Files (x86)\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe
C:\Users\SEVEN\AppData\Roaming\waucltwi.exe
C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Users\SEVEN\AppData\Roaming\services.exe
C:\Users\SEVEN\AppData\Local\Temp\win32.exe
C:\Users\SEVEN\AppData\Local\Temp\win32.exe
C:\Users\SEVEN\AppData\Roaming\BOTS.exe
C:\Users\SEVEN\AppData\Roaming\BOTS.exe
C:\Users\SEVEN\AppData\Roaming\BOTS.exe
C:\Users\SEVEN\AppData\Roaming\Firewallacc\Firewall.exe
C:\Users\SEVEN\AppData\Roaming\Internet Explorer\svchost.exe
C:\Users\SEVEN\AppData\Roaming\winlogon.exe
C:\Users\SEVEN\AppData\Roaming\install\winlogon.exe
C:\Users\SEVEN\AppData\Roaming\install\winlogon.exe
C:\Users\SEVEN\AppData\Local\Temp\win47.exe
C:\Users\SEVEN\AppData\Local\vghd\bin\vghd.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Users\SEVEN\AppData\Roaming\H1VZCRUQ5J.exe
C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Users\SEVEN\AppData\Local\vghd\bin\VirtuaGirl_Downloader.exe
C:\Users\SEVEN\AppData\Roaming\BOTS.exe
C:\Users\SEVEN\AppData\Roaming\WinUpdts.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Users\SEVEN\AppData\Roaming\BOTS.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
C:\Program Files (x86)\ICQ7.4\ICQ.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
C:\Program Files\trend micro\SEVEN.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:54222
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F3 - REG:win.ini: load=C:\Users\SEVEN\AppData\Local\Temp\csrss.exe
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [waucltwi] C:\Users\SEVEN\AppData\Roaming\waucltwi.exe
O4 - HKLM\..\Run: [WinUpdtr] C:\Users\SEVEN\AppData\Roaming\BOTS.exe
O4 - HKLM\..\Run: [conhost] C:\Users\SEVEN\AppData\Roaming\Microsoft\conhost.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [waucltwi] C:\Users\SEVEN\AppData\Roaming\waucltwi.exe
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [WinUpdtr] C:\Users\SEVEN\AppData\Roaming\BOTS.exe
O4 - HKCU\..\Run: [svchost] C:\Users\SEVEN\AppData\Local\Temp\svchost.exe
O4 - HKCU\..\Run: [Windows Defender] C:\Users\SEVEN\AppData\Roaming\virtual.exe
O4 - HKCU\..\Run: [conhost] C:\Users\SEVEN\AppData\Roaming\Microsoft\conhost.exe
O4 - HKCU\..\Run: [svchost connection] C:\Users\SEVEN\AppData\Roaming\Internet Explorer\svchost.exe
O4 - HKCU\..\Run: [runAPI59] "C:\Users\SEVEN\AppData\Local\Temp\runAPI53.exe"
O4 - HKCU\..\Run: [HKCU] C:\Users\SEVEN\AppData\Roaming\WinUpdts.exe
O4 - HKCU\..\Run: [runAPI84] "C:\Users\SEVEN\AppData\Local\Temp\runAPI86.exe"
O4 - HKCU\..\Run: [runAPI62] "C:\Users\SEVEN\AppData\Local\Temp\runAPI74.exe"
O4 - HKCU\..\Run: [Critical Process] C:\Users\SEVEN\AppData\Roaming\services.exe
O4 - HKCU\..\Run: [Firewallacc] C:\Users\SEVEN\AppData\Roaming\Firewallacc\Firewall.exe
O4 - HKCU\..\Run: [scvhost] C:\Users\SEVEN\AppData\Roaming\windows\svchost.exe
O4 - HKCU\..\Run: [MSWUpdate] "C:\Users\SEVEN\AppData\Roaming\svchost.exe"
O4 - HKCU\..\Run: [runAPI43] "C:\Users\SEVEN\AppData\Local\Temp\runAPI58.exe"
O4 - HKCU\..\Run: [Microsoft Windows Firewall] C:\Users\SEVEN\AppData\Roaming\winlogon.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\Users\SEVEN\AppData\Roaming\ctfmon.exe
O4 - HKCU\..\Run: [rfjnfjfjfjwkmdfsokm494e0er-0] C:\Users\SEVEN\AppData\Roaming\install\winlogon.exe
O4 - HKCU\..\Run: [java] C:\Users\SEVEN\AppData\Roaming\paid.exe
O4 - HKCU\..\Run: [OC5HMWR2QJ] C:\Users\SEVEN\AppData\Roaming\local.exe
O4 - HKCU\..\Run: [cleansweep.exe] C:\cleansweep.exe\cleansweep.exe
O4 - HKCU\..\Run: [KKE2LOWHTU3XO] C:\Users\SEVEN\AppData\Roaming\H1VZCRUQ5J.exe
O4 - HKCU\..\Run: [runAPI37] "C:\Users\SEVEN\AppData\Local\Temp\runAPI89.exe"
O4 - HKCU\..\Run: [csrss] C:\Users\SEVEN\AppData\Roaming\Microsoft\System\Services\csrss.exe
O4 - HKLM\..\Policies\Explorer\Run: [waucltwi] C:\Users\SEVEN\AppData\Roaming\waucltwi.exe
O4 - HKLM\..\Policies\Explorer\Run: [WinUpdtr] C:\Users\SEVEN\AppData\Roaming\BOTS.exe
O4 - HKLM\..\Policies\Explorer\Run: [Windows Defender] C:\Users\SEVEN\AppData\Roaming\mWare.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: DesktopVideoPlayer.lnk = SEVEN\AppData\Local\vghd\bin\vghd.exe
O4 - Startup: fliptoast.lnk = C:\Program Files (x86)\fliptoast\fliptoast.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Stáhnout pomocí &BitSpiritu - C:\Program Files (x86)\BitSpirit\bsurl.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
O9 - Extra button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files (x86)\ICQ7.4\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files (x86)\ICQ7.4\ICQ.exe
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C82983E5-0120-463B-BFF5-BF9C21634386}: NameServer = 192.168.240.1,93.91.144.100
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 16615 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
taskeng.exe {D622AC45-1D65-44C3-A2DE-A8E31DA2F08F}
C:\Windows\system32\rundll32.exe "C:\Windows\SysWOW64\bidispl2.dll",QHIHMPLJU
C:\Windows\system32\rundll32.exe "C:\Windows\SysWOW64\bidispl2.dll",QHIHMPLJU
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_00000634
\??\C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"taskhost.exe"
taskeng.exe {F8175CDE-409E-4C72-AC8D-551C01559B12}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Whyjea.exe
C:\Windows\Explorer.EXE
C:\Users\SEVEN\AppData\Roaming\dwm.exe
WLIDSvcM.exe 2040
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Users\SEVEN\AppData\Local\Temp\csrss.exe"
C:\Users\SEVEN\AppData\Roaming\Microsoft\conhost.exe
"C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
"C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
"C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun
"C:\Users\SEVEN\AppData\Roaming\waucltwi.exe"
C:\Users\SEVEN\AppData\Roaming\mWare.exe
"C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe" -Embedding
"C:\Users\SEVEN\AppData\Roaming\services.exe"
C:\Users\SEVEN\AppData\Local\Temp\win32.exe
C:\Users\SEVEN\AppData\Local\Temp\win32.exe
BOTS.exe
BOTS.exe
BOTS.exe
C:\Users\SEVEN\AppData\Roaming\Firewallacc\Firewall.exe
C:\Users\SEVEN\AppData\Roaming\Firewallacc\Firewall.exe
"C:\Users\SEVEN\AppData\Roaming\Internet Explorer\svchost.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Users\SEVEN\AppData\Roaming\winlogon.exe
"C:\Users\SEVEN\AppData\Roaming\install\winlogon.exe"
"C:\Users\SEVEN\AppData\Roaming\install\winlogon.exe"
C:\Users\SEVEN\AppData\Roaming\local.exe
C:\Users\SEVEN\AppData\Local\Temp\win47.exe
"C:\Users\SEVEN\AppData\Local\vghd\bin\vghd.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Users\SEVEN\AppData\Roaming\H1VZCRUQ5J.exe"
"C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe" /watchfiles startup
"C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe"
"C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
"C:\Users\SEVEN\AppData\Local\vghd\bin\VirtuaGirl_Downloader.exe"
BOTS.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Users\SEVEN\AppData\Roaming\WinUpdts.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
/stext mail.dat
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=5152.66c5f60.1103564458 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll" 5152 plugin \\.\pipe\gecko-crash-server-pipe.5152
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
/stext mail.dat
/stext mail.dat
C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
"C:\Program Files (x86)\ICQ7.4\ICQ.exe"
/stext mail.dat
C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
"C:\Users\SEVEN\AppData\Roaming\keplw.exe"
C:\Windows\system32\wbem\wmiprvse.exe
taskhost.exe $(Arg0)
C:\Windows\System32\svchost.exe -k WerSvcGroup
/stext mail.dat
"C:\Users\SEVEN\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\PCConfidential.job
C:\Windows\tasks\XGLK.job
C:\Windows\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 6722448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-11-10 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-11-22 1242504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-02-28 1089288]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-01-30 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll [2011-01-20 1581376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll [2011-01-20 988480]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-02-28 1089288]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-07-06 11057768]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2010-07-29 594080]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2010-07-29 377504]
"Apoint"=C:\Program Files\Apoint2K\Apoint.exe [2009-12-24 329728]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-12-10 1890088]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"waucltwi"=C:\Users\SEVEN\AppData\Roaming\waucltwi.exe [2011-03-29 523264]
"WinUpdtr"=C:\Users\SEVEN\AppData\Roaming\BOTS.exe [2011-04-01 386560]
"Windows Defender"=C:\Users\SEVEN\AppData\Roaming\mWare.exe [2011-04-02 196608]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
"ISUSPM"=C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [2006-09-10 218032]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [2006-12-23 143360]
"waucltwi"=C:\Users\SEVEN\AppData\Roaming\waucltwi.exe [2011-03-29 523264]
"DAEMON Tools Pro Agent"=C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [2011-03-17 842048]
"WinUpdtr"=C:\Users\SEVEN\AppData\Roaming\BOTS.exe [2011-04-01 386560]
"svchost"=C:\Users\SEVEN\AppData\Local\Temp\svchost.exe [2011-04-01 847872]
"Windows Defender"=C:\Users\SEVEN\AppData\Roaming\virtual.exe [2011-04-02 322560]
"conhost"=C:\Users\SEVEN\AppData\Roaming\Microsoft\conhost.exe [2011-04-01 152576]
"svchost connection"=C:\Users\SEVEN\AppData\Roaming\Internet Explorer\svchost.exe [2011-04-02 623104]
"runAPI59"=C:\Users\SEVEN\AppData\Local\Temp\runAPI53.exe [2011-04-02 925696]
"HKCU"=C:\Users\SEVEN\AppData\Roaming\WinUpdts.exe [2011-04-02 446464]
"runAPI84"=C:\Users\SEVEN\AppData\Local\Temp\runAPI86.exe [2011-04-02 1683456]
"runAPI62"=C:\Users\SEVEN\AppData\Local\Temp\runAPI74.exe [2011-04-02 925696]
"Critical Process"=C:\Users\SEVEN\AppData\Roaming\services.exe [2011-04-02 240640]
"Firewallacc"=C:\Users\SEVEN\AppData\Roaming\Firewallacc\Firewall.exe [2011-04-02 367104]
"scvhost"=C:\Users\SEVEN\AppData\Roaming\windows\svchost.exe [2011-04-02 144896]
"MSWUpdate"=C:\Users\SEVEN\AppData\Roaming\svchost.exe [2011-04-02 20993]
"runAPI43"=C:\Users\SEVEN\AppData\Local\Temp\runAPI58.exe [2011-04-02 925696]
"Microsoft Windows Firewall"=C:\Users\SEVEN\AppData\Roaming\winlogon.exe [2011-04-02 67072]
"ctfmon.exe"=C:\Users\SEVEN\AppData\Roaming\ctfmon.exe [2011-04-02 67072]
"rfjnfjfjfjwkmdfsokm494e0er-0"=C:\Users\SEVEN\AppData\Roaming\install\winlogon.exe [2011-04-02 606208]
"java"=C:\Users\SEVEN\AppData\Roaming\paid.exe [2011-04-02 606208]
"OC5HMWR2QJ"=C:\Users\SEVEN\AppData\Roaming\local.exe [2011-04-02 295424]
"cleansweep.exe"=C:\cleansweep.exe\cleansweep.exe [2010-11-20 204800]
"KKE2LOWHTU3XO"=C:\Users\SEVEN\AppData\Roaming\H1VZCRUQ5J.exe [2011-04-02 163840]
"runAPI37"=C:\Users\SEVEN\AppData\Local\Temp\runAPI89.exe [2011-04-02 925696]
"csrss"=C:\Users\SEVEN\AppData\Roaming\Microsoft\System\Services\csrss.exe [2011-04-02 196608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
C:\Program Files (x86)\Electronic Arts\EADM\Core.exe -silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EADM]
C:\Program Files (x86)\Electronic Arts\EADM\EADMUI\EADMUI.exe [2011-02-03 11509760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files (x86)\ICQ7.4\ICQ.exe [2011-03-01 119608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaOviSuite2]
C:\Program Files (x86)\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe [2011-01-31 703360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2011-01-03 15028104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\Steam.exe [2011-02-05 1242448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Torrent2Exe]
C:\Users\SEVEN\AppData\Local\Temp\Torrent2Exe\T2E.exe --autorun []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-10-28 98304]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2010-12-13 281768]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-01-31 35760]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-21 932288]
"NokiaMServer"=C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]
"DivXUpdate"=C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2011-02-15 1230704]
"waucltwi"=C:\Users\SEVEN\AppData\Roaming\waucltwi.exe [2011-03-29 523264]
"WinUpdtr"=C:\Users\SEVEN\AppData\Roaming\BOTS.exe [2011-04-01 386560]
"conhost"=C:\Users\SEVEN\AppData\Roaming\Microsoft\conhost.exe [2011-04-01 152576]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"waucltwi"=C:\Users\SEVEN\AppData\Roaming\waucltwi.exe [2011-03-29 523264]
"WinUpdtr"=C:\Users\SEVEN\AppData\Roaming\BOTS.exe [2011-04-01 386560]
"Windows Defender"=C:\Users\SEVEN\AppData\Roaming\mWare.exe [2011-04-02 196608]

C:\Users\SEVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
DesktopVideoPlayer.lnk - C:\Users\SEVEN\AppData\Local\vghd\bin\vghd.exe
fliptoast.lnk - C:\Program Files (x86)\fliptoast\fliptoast.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 6722448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"E:\games\Scrabble2009\ScrabblePCR.exe"="E:\games\Scrabble2009\ScrabblePCR.exe:*:Enabled:ScrabblePCR"
"C:\Users\SEVEN\AppData\Roaming\waucltwi.exe"="C:\Users\SEVEN\AppData\Roaming\waucltwi.exe:*:Enabled:Windows Messanger"
"C:\Users\SEVEN\AppData\Local\Temp\IXP000.TMP\WAUCLT~1.exe"="C:\Users\SEVEN\AppData\Local\Temp\IXP000.TMP\WAUCLT~1.exe:*:Enabled:Windows Messanger"
"C:\Users\SEVEN\AppData\Local\Temp\39670.exe"="C:\Users\SEVEN\AppData\Local\Temp\39670.exe:*:Enabled:Windows Messanger"
"C:\Users\SEVEN\AppData\Roaming\BOTS.exe"="C:\Users\SEVEN\AppData\Roaming\BOTS.exe:*:Enabled:Windows Messanger"
"C:\Windows\Microsoft.NET\Framework\v2.0.50727\csc.exe"="C:\Windows\Microsoft.NET\Framework\v2.0.50727\csc.exe:*:Enabled:Windows Messanger"
"C:\Users\SEVEN\AppData\Roaming\PNAT1HLLT1.exe"="C:\Users\SEVEN\AppData\Roaming\PNAT1HLLT1.exe:*:Enabled:Windows Messanger"
"C:\Users\SEVEN\AppData\Roaming\mWare.exe"="C:\Users\SEVEN\AppData\Roaming\mWare.exe:*:Enabled:Windows Messanger"
"C:\Users\SEVEN\AppData\Local\Temp\41067.exe"="C:\Users\SEVEN\AppData\Local\Temp\41067.exe:*:Enabled:Windows Messanger"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"E:\games\Scrabble2009\ScrabblePCR.exe"="E:\games\Scrabble2009\ScrabblePCR.exe:*:Enabled:ScrabblePCR"

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-04-02 23:59:34 ----AH---- C:\Users\SEVEN\AppData\Roaming\keplw.exe
2011-04-02 23:59:34 ----A---- C:\Users\SEVEN\AppData\Roaming\virtual.exe
2011-04-02 23:54:09 ----D---- C:\rsit
2011-04-02 23:54:09 ----D---- C:\Program Files\trend micro
2011-04-02 23:36:56 ----D---- C:\Program Files (x86)\Ultimate Process Manager
2011-04-02 23:19:24 ----A---- C:\Windows\SYSWOW64\drivers\ilra.sys
2011-04-02 23:19:24 ----A---- C:\kecek.txt
2011-04-02 23:19:24 ----A---- C:\avexport.bat
2011-04-02 22:57:46 ----A---- C:\Users\SEVEN\AppData\Roaming\H1VZCRUQ5J.exe
2011-04-02 22:40:51 ----H---- C:\Users\SEVEN\AppData\Roaming\local.exe
2011-04-02 22:32:14 ----D---- C:\Users\SEVEN\AppData\Roaming\install
2011-04-02 22:32:14 ----A---- C:\Users\SEVEN\AppData\Roaming\paid.exe
2011-04-02 22:09:45 ----A---- C:\Users\SEVEN\AppData\Roaming\temp2F00_l4[k8]k-o.tmp
2011-04-02 22:09:44 ----A---- C:\Users\SEVEN\AppData\Roaming\tempF00_l4[k8]k-o.tmp
2011-04-02 22:09:41 ----RSH---- C:\Users\SEVEN\AppData\Roaming\winlogon.exe
2011-04-02 22:09:41 ----RSH---- C:\Users\SEVEN\AppData\Roaming\ctfmon.exe
2011-04-02 21:51:33 ----RSH---- C:\Users\SEVEN\AppData\Roaming\svchost.exe
2011-04-02 21:51:29 ----D---- C:\Users\SEVEN\AppData\Roaming\windows
2011-04-02 21:49:01 ----D---- C:\Users\SEVEN\AppData\Roaming\Firewallacc
2011-04-02 21:45:43 ----RSH---- C:\Users\SEVEN\AppData\Roaming\services.exe
2011-04-02 21:22:19 ----A---- C:\Users\SEVEN\AppData\Roaming\WinUpdts.exe
2011-04-02 17:13:38 ----A---- C:\Users\SEVEN\AppData\Roaming\scvhost.exe
2011-04-02 17:13:27 ----D---- C:\Users\SEVEN\AppData\Roaming\Internet Explorer
2011-04-02 00:19:17 ----H---- C:\Users\SEVEN\AppData\Roaming\mWare.exe
2011-04-01 21:50:26 ----A---- C:\Users\SEVEN\AppData\Roaming\dwm.exe
2011-04-01 21:43:27 ----A---- C:\Users\SEVEN\AppData\Roaming\BOTS.exe
2011-04-01 21:22:04 ----A---- C:\Windows\Whyjea.exe
2011-04-01 21:21:40 ----RASH---- C:\Windows\SYSWOW64\bidispl2.dll
2011-04-01 19:01:44 ----D---- C:\Users\SEVEN\AppData\Roaming\updates
2011-04-01 14:13:23 ----D---- C:\Program Files (x86)\MegaDev
2011-03-31 18:47:37 ----D---- C:\Program Files (x86)\DAEMON Tools Pro
2011-03-31 18:47:11 ----D---- C:\Users\SEVEN\AppData\Roaming\DAEMON Tools Pro
2011-03-31 18:47:11 ----D---- C:\ProgramData\DAEMON Tools Pro
2011-03-29 22:22:40 ----D---- C:\Users\SEVEN\AppData\Roaming\The Creative Assembly
2011-03-29 17:58:04 ----A---- C:\Users\SEVEN\AppData\Roaming\waucltwi.exe
2011-03-26 20:52:07 ----D---- C:\Users\SEVEN\AppData\Roaming\LolClient
2011-03-26 16:38:32 ----D---- C:\ProgramData\PMB Files
2011-03-26 16:37:17 ----D---- C:\Program Files (x86)\Pando Networks
2011-03-25 12:01:25 ----D---- C:\Users\SEVEN\AppData\Roaming\Ubisoft
2011-03-20 05:09:13 ----D---- C:\ProgramData\Symantec
2011-03-20 05:09:08 ----D---- C:\ProgramData\Norton
2011-03-20 05:09:06 ----D---- C:\ProgramData\NortonInstaller
2011-03-20 02:14:53 ----D---- C:\Users\SEVEN\AppData\Roaming\DivX
2011-03-20 02:14:28 ----D---- C:\Program Files\DivX
2011-03-20 02:07:16 ----D---- C:\ProgramData\DivX
2011-03-20 02:05:37 ----D---- C:\Program Files (x86)\DivX
2011-03-18 17:18:24 ----D---- C:\Windows\system32\SPReview
2011-03-18 17:07:50 ----A---- C:\Windows\system32\netfxperf.dll
2011-03-18 17:07:50 ----A---- C:\Windows\system32\dfshim.dll
2011-03-18 17:07:39 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2011-03-18 17:07:34 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-03-18 17:07:33 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2011-03-18 17:07:33 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2011-03-18 17:07:32 ----A---- C:\Windows\system32\mstscax.dll
2011-03-18 17:07:32 ----A---- C:\Windows\system32\d3d10warp.dll
2011-03-18 17:07:30 ----A---- C:\Windows\system32\ieframe.dll
2011-03-18 17:07:28 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2011-03-18 17:07:24 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2011-03-18 17:07:23 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2011-03-18 17:07:23 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2011-03-18 17:07:23 ----A---- C:\Windows\system32\sysmain.dll
2011-03-18 17:07:23 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-03-18 17:07:22 ----A---- C:\Windows\system32\shell32.dll
2011-03-18 17:07:19 ----A---- C:\Windows\system32\MSVidCtl.dll
2011-03-18 17:07:18 ----A---- C:\Windows\system32\wmp.dll
2011-03-18 17:07:18 ----A---- C:\Windows\system32\tquery.dll
2011-03-18 17:07:13 ----A---- C:\Windows\system32\mssrch.dll
2011-03-18 17:07:13 ----A---- C:\Windows\system32\mscoree.dll
2011-03-18 17:07:12 ----A---- C:\Windows\system32\ntdll.dll
2011-03-18 17:07:11 ----A---- C:\Windows\system32\mmcndmgr.dll
2011-03-18 17:07:09 ----A---- C:\Windows\system32\secproc_isv.dll
2011-03-18 17:07:08 ----A---- C:\Windows\system32\mf.dll
2011-03-18 17:07:07 ----A---- C:\Windows\system32\RMActivate_isv.exe
2011-03-18 17:07:05 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2011-03-18 17:07:05 ----A---- C:\Windows\system32\xpsservices.dll
2011-03-18 17:07:05 ----A---- C:\Windows\system32\secproc.dll
2011-03-18 17:07:05 ----A---- C:\Windows\system32\RMActivate.exe
2011-03-18 17:07:04 ----A---- C:\Windows\SYSWOW64\shell32.dll
2011-03-18 17:07:02 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2011-03-18 17:07:01 ----A---- C:\Windows\SYSWOW64\secproc.dll
2011-03-18 17:07:01 ----A---- C:\Windows\system32\rpcrt4.dll
2011-03-18 17:07:00 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-03-18 17:06:59 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2011-03-18 17:06:58 ----A---- C:\Windows\system32\schedsvc.dll
2011-03-18 17:06:58 ----A---- C:\Windows\system32\ole32.dll
2011-03-18 17:06:55 ----A---- C:\Windows\system32\spwizui.dll
2011-03-18 17:06:55 ----A---- C:\Windows\system32\iertutil.dll
2011-03-18 17:06:54 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2011-03-18 17:06:54 ----A---- C:\Windows\system32\wininet.dll
2011-03-18 17:06:54 ----A---- C:\Windows\system32\esent.dll
2011-03-18 17:06:53 ----A---- C:\Windows\system32\drivers\ntfs.sys
2011-03-18 17:06:52 ----A---- C:\Windows\system32\urlmon.dll
2011-03-18 17:06:52 ----A---- C:\Windows\system32\taskschd.dll
2011-03-18 17:06:51 ----A---- C:\Windows\system32\RacEngn.dll
2011-03-18 17:06:51 ----A---- C:\Windows\system32\diagperf.dll
2011-03-18 17:06:50 ----A---- C:\Windows\system32\wevtsvc.dll
2011-03-18 17:06:49 ----A---- C:\Windows\SYSWOW64\mf.dll
2011-03-18 17:06:48 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-03-18 17:06:48 ----A---- C:\Windows\system32\ExplorerFrame.dll
2011-03-18 17:06:47 ----A---- C:\Windows\system32\vssapi.dll
2011-03-18 17:06:47 ----A---- C:\Windows\system32\msxml3.dll
2011-03-18 17:06:46 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2011-03-18 17:06:46 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2011-03-18 17:06:45 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2011-03-18 17:06:45 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-03-18 17:06:45 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2011-03-18 17:06:44 ----A---- C:\Windows\system32\UIRibbon.dll
2011-03-18 17:06:44 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2011-03-18 17:06:44 ----A---- C:\Windows\explorer.exe
2011-03-18 17:06:43 ----A---- C:\Windows\SYSWOW64\wmp.dll
2011-03-18 17:06:42 ----A---- C:\Windows\SYSWOW64\esent.dll
2011-03-18 17:06:41 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2011-03-18 17:06:41 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2011-03-18 17:06:41 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-03-18 17:06:41 ----A---- C:\Windows\system32\WsmSvc.dll
2011-03-18 17:06:41 ----A---- C:\Windows\system32\WMVCORE.DLL
2011-03-18 17:06:41 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2011-03-18 17:06:41 ----A---- C:\Windows\system32\PresentationHost.exe
2011-03-18 17:06:40 ----A---- C:\Windows\system32\rdpdd.dll
2011-03-18 17:06:39 ----A---- C:\Windows\system32\spreview.exe
2011-03-18 17:06:39 ----A---- C:\Windows\system32\spinstall.exe
2011-03-18 17:06:39 ----A---- C:\Windows\system32\MPSSVC.dll
2011-03-18 17:06:39 ----A---- C:\Windows\system32\CertEnroll.dll
2011-03-18 17:06:38 ----A---- C:\Windows\system32\WinSAT.exe
2011-03-18 17:06:37 ----A---- C:\Windows\SYSWOW64\tquery.dll
2011-03-18 17:06:36 ----A---- C:\Windows\system32\WMVDECOD.DLL
2011-03-18 17:06:36 ----A---- C:\Windows\system32\d3d9.dll
2011-03-18 17:06:35 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2011-03-18 17:06:35 ----A---- C:\Windows\system32\msxml6.dll
2011-03-18 17:06:35 ----A---- C:\Windows\system32\IKEEXT.DLL
2011-03-18 17:06:34 ----A---- C:\Windows\system32\SearchFolder.dll
2011-03-18 17:06:33 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2011-03-18 17:06:33 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2011-03-18 17:06:32 ----A---- C:\Windows\system32\kernel32.dll
2011-03-18 17:06:32 ----A---- C:\Windows\system32\gpsvc.dll
2011-03-18 17:06:31 ----A---- C:\Windows\system32\VSSVC.exe
2011-03-18 17:06:31 ----A---- C:\Windows\system32\dwmcore.dll
2011-03-18 17:06:31 ----A---- C:\Windows\system32\dbgeng.dll
2011-03-18 17:06:30 ----A---- C:\Windows\system32\mstime.dll
2011-03-18 17:06:30 ----A---- C:\Windows\system32\drivers\http.sys
2011-03-18 17:06:28 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-03-18 17:06:28 ----A---- C:\Windows\system32\drivers\ndis.sys
2011-03-18 17:06:28 ----A---- C:\Windows\system32\crypt32.dll
2011-03-18 17:06:27 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2011-03-18 17:06:25 ----A---- C:\Windows\SYSWOW64\ole32.dll
2011-03-18 17:06:25 ----A---- C:\Windows\system32\TSWorkspace.dll
2011-03-18 17:06:25 ----A---- C:\Windows\system32\schannel.dll
2011-03-18 17:06:25 ----A---- C:\Windows\system32\qmgr.dll
2011-03-18 17:06:25 ----A---- C:\Windows\system32\KernelBase.dll
2011-03-18 17:06:25 ----A---- C:\Windows\system32\drivers\afd.sys
2011-03-18 17:06:25 ----A---- C:\Windows\system32\audiosrv.dll
2011-03-18 17:06:25 ----A---- C:\Windows\system32\actxprxy.dll
2011-03-18 17:06:24 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-03-18 17:06:24 ----A---- C:\Windows\system32\lsasrv.dll
2011-03-18 17:06:23 ----A---- C:\Windows\system32\termsrv.dll
2011-03-18 17:06:23 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-03-18 17:06:23 ----A---- C:\Windows\system32\drivers\srv.sys
2011-03-18 17:06:21 ----A---- C:\Windows\system32\sqmapi.dll
2011-03-18 17:06:21 ----A---- C:\Windows\system32\mstsc.exe
2011-03-18 17:06:18 ----A---- C:\Windows\system32\netlogon.dll
2011-03-18 17:06:18 ----A---- C:\Windows\system32\imapi2fs.dll
2011-03-18 17:06:17 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2011-03-18 17:06:17 ----A---- C:\Windows\system32\winhttp.dll
2011-03-18 17:06:17 ----A---- C:\Windows\system32\d3d11.dll
2011-03-18 17:06:16 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2011-03-18 17:06:16 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2011-03-18 17:06:15 ----A---- C:\Windows\SYSWOW64\explorer.exe
2011-03-18 17:06:15 ----A---- C:\Windows\system32\setupapi.dll
2011-03-18 17:06:15 ----A---- C:\Windows\system32\QAGENTRT.DLL
2011-03-18 17:06:15 ----A---- C:\Windows\system32\propsys.dll
2011-03-18 17:06:15 ----A---- C:\Windows\system32\msv1_0.dll
2011-03-18 17:06:14 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2011-03-18 17:06:14 ----A---- C:\Windows\system32\wbengine.exe
2011-03-18 17:06:14 ----A---- C:\Windows\system32\rpcss.dll
2011-03-18 17:06:13 ----A---- C:\Windows\system32\authui.dll
2011-03-18 17:06:12 ----A---- C:\Windows\system32\werconcpl.dll
2011-03-18 17:06:11 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2011-03-18 17:06:11 ----A---- C:\Windows\system32\taskeng.exe
2011-03-18 17:06:11 ----A---- C:\Windows\system32\odbc32.dll
2011-03-18 17:06:11 ----A---- C:\Windows\system32\msfeeds.dll
2011-03-18 17:06:10 ----A---- C:\Windows\system32\user32.dll
2011-03-18 17:06:10 ----A---- C:\Windows\system32\oleaut32.dll
2011-03-18 17:06:10 ----A---- C:\Windows\system32\drivers\nvstor.sys
2011-03-18 17:06:10 ----A---- C:\Windows\system32\dnsapi.dll
2011-03-18 17:06:09 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2011-03-18 17:06:09 ----A---- C:\Windows\system32\WSDApi.dll
2011-03-18 17:06:09 ----A---- C:\Windows\system32\drivers\netio.sys
2011-03-18 17:06:08 ----A---- C:\Windows\system32\dhcpcore.dll
2011-03-18 17:06:08 ----A---- C:\Windows\system32\certmgr.dll
2011-03-18 17:06:07 ----HD---- C:\cleansweep.exe
2011-03-18 17:06:07 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2011-03-18 17:06:07 ----A---- C:\Windows\system32\drivers\tdx.sys
2011-03-18 17:06:06 ----A---- C:\Windows\SYSWOW64\wer.dll
2011-03-18 17:06:06 ----A---- C:\Windows\system32\webio.dll
2011-03-18 17:06:06 ----A---- C:\Windows\system32\scavengeui.dll
2011-03-18 17:06:06 ----A---- C:\Windows\system32\drivers\netbt.sys
2011-03-18 17:06:05 ----A---- C:\Windows\SYSWOW64\certcli.dll
2011-03-18 17:06:05 ----A---- C:\Windows\system32\localspl.dll
2011-03-18 17:06:04 ----A---- C:\Windows\system32\tsmf.dll
2011-03-18 17:06:04 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2011-03-18 17:06:04 ----A---- C:\Windows\system32\ncsi.dll
2011-03-18 17:06:03 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2011-03-18 17:06:03 ----A---- C:\Windows\system32\msdrm.dll
2011-03-18 17:06:03 ----A---- C:\Windows\system32\drivers\nvraid.sys
2011-03-18 17:06:02 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2011-03-18 17:06:02 ----A---- C:\Windows\system32\shlwapi.dll
2011-03-18 17:06:01 ----A---- C:\Windows\system32\netshell.dll
2011-03-18 17:06:01 ----A---- C:\Windows\system32\msdtctm.dll
2011-03-18 17:06:01 ----A---- C:\Windows\system32\framedynos.dll
2011-03-18 17:06:00 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2011-03-18 17:06:00 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2011-03-18 17:06:00 ----A---- C:\Windows\system32\umpnpmgr.dll
2011-03-18 17:06:00 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-03-18 17:06:00 ----A---- C:\Windows\system32\drivers\cng.sys
2011-03-18 17:05:59 ----A---- C:\Windows\SYSWOW64\mstime.dll
2011-03-18 17:05:59 ----A---- C:\Windows\system32\ws2_32.dll
2011-03-18 17:05:59 ----A---- C:\Windows\system32\winlogon.exe
2011-03-18 17:05:59 ----A---- C:\Windows\system32\usp10.dll
2011-03-18 17:05:59 ----A---- C:\Windows\system32\netcfgx.dll
2011-03-18 17:05:58 ----A---- C:\Windows\system32\quartz.dll
2011-03-18 17:05:58 ----A---- C:\Windows\system32\nlasvc.dll
2011-03-18 17:05:57 ----A---- C:\Windows\SYSWOW64\quartz.dll
2011-03-18 17:05:57 ----A---- C:\Windows\system32\wmpps.dll
2011-03-18 17:05:57 ----A---- C:\Windows\system32\lsm.exe
2011-03-18 17:05:57 ----A---- C:\Windows\system32\dxgi.dll
2011-03-18 17:05:57 ----A---- C:\Windows\system32\d3d10_1core.dll
2011-03-18 17:05:57 ----A---- C:\Windows\system32\comdlg32.dll
2011-03-18 17:05:56 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2011-03-18 17:05:56 ----A---- C:\Windows\system32\Query.dll
2011-03-18 17:05:56 ----A---- C:\Windows\system32\mswsock.dll
2011-03-18 17:05:56 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2011-03-18 17:05:56 ----A---- C:\Windows\system32\apphelp.dll
2011-03-18 17:05:55 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2011-03-18 17:05:55 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-03-18 17:05:55 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-03-18 17:05:55 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2011-03-18 17:05:55 ----A---- C:\Windows\system32\wpdshext.dll
2011-03-18 17:05:55 ----A---- C:\Windows\system32\azroles.dll
2011-03-18 17:05:54 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2011-03-18 17:05:54 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2011-03-18 17:05:54 ----A---- C:\Windows\system32\QAGENT.DLL
2011-03-18 17:05:54 ----A---- C:\Windows\system32\BFE.DLL
2011-03-18 17:05:53 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2011-03-18 17:05:53 ----A---- C:\Windows\system32\Vault.dll
2011-03-18 17:05:53 ----A---- C:\Windows\system32\samsrv.dll
2011-03-18 17:05:53 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2011-03-18 17:05:53 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2011-03-18 17:05:53 ----A---- C:\Windows\system32\cmd.exe
2011-03-18 17:05:52 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2011-03-18 17:05:52 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2011-03-18 17:05:52 ----A---- C:\Windows\system32\lpksetup.exe
2011-03-18 17:05:51 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2011-03-18 17:05:51 ----A---- C:\Windows\system32\winload.exe
2011-03-18 17:05:51 ----A---- C:\Windows\system32\win32spl.dll
2011-03-18 17:05:51 ----A---- C:\Windows\system32\mssvp.dll
2011-03-18 17:05:50 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2011-03-18 17:05:50 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-03-18 17:05:49 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2011-03-18 17:05:49 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2011-03-18 17:05:48 ----A---- C:\Windows\system32\WebClnt.dll
2011-03-18 17:05:47 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2011-03-18 17:05:47 ----A---- C:\Windows\SYSWOW64\webio.dll
2011-03-18 17:05:47 ----A---- C:\Windows\system32\WindowsCodecs.dll
2011-03-18 17:05:46 ----A---- C:\Windows\system32\sxs.dll
2011-03-18 17:05:46 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2011-03-18 17:05:45 ----A---- C:\Windows\SYSWOW64\Query.dll
2011-03-18 17:05:44 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2011-03-18 17:05:44 ----A---- C:\Windows\system32\Wldap32.dll
2011-03-18 17:05:44 ----A---- C:\Windows\system32\mcbuilder.exe
2011-03-18 17:05:43 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2011-03-18 17:05:43 ----A---- C:\Windows\system32\taskcomp.dll
2011-03-18 17:05:43 ----A---- C:\Windows\system32\mfds.dll
2011-03-18 17:05:42 ----A---- C:\Windows\SYSWOW64\upnp.dll
2011-03-18 17:05:42 ----A---- C:\Windows\system32\drivers\storport.sys
2011-03-18 17:05:41 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2011-03-18 17:05:41 ----A---- C:\Windows\system32\pnidui.dll
2011-03-18 17:05:41 ----A---- C:\Windows\system32\ipsmsnap.dll
2011-03-18 17:05:40 ----A---- C:\Windows\SYSWOW64\schannel.dll
2011-03-18 17:05:40 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2011-03-18 17:05:40 ----A---- C:\Windows\system32\hgprint.dll
2011-03-18 17:05:39 ----A---- C:\Windows\system32\wuaueng.dll
2011-03-18 17:05:39 ----A---- C:\Windows\system32\webservices.dll
2011-03-18 17:05:38 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2011-03-18 17:05:38 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2011-03-18 17:05:38 ----A---- C:\Windows\system32\SessEnv.dll
2011-03-18 17:05:38 ----A---- C:\Users\SEVEN\AppData\Roaming\HR4ZFJ7XA7.exe
2011-03-18 17:05:38 ----A---- C:\Users\SEVEN\AppData\Roaming\bot.exe
2011-03-18 17:05:37 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2011-03-18 17:05:37 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2011-03-18 17:05:37 ----A---- C:\Windows\system32\winresume.exe
2011-03-18 17:05:37 ----A---- C:\Windows\system32\spoolsv.exe
2011-03-18 17:05:36 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2011-03-18 17:05:36 ----A---- C:\Windows\SYSWOW64\authui.dll
2011-03-18 17:05:36 ----A---- C:\Windows\system32\winsta.dll
2011-03-18 17:05:36 ----A---- C:\Windows\system32\sqlsrv32.dll
2011-03-18 17:05:35 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2011-03-18 17:05:35 ----A---- C:\Windows\system32\iepeers.dll
2011-03-18 17:05:35 ----A---- C:\Windows\system32\fveapi.dll
2011-03-18 17:05:35 ----A---- C:\Windows\system32\dot3api.dll
2011-03-18 17:05:34 ----A---- C:\Windows\SYSWOW64\usp10.dll
2011-03-18 17:05:34 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2011-03-18 17:05:34 ----A---- C:\Windows\system32\drivers\msrpc.sys
2011-03-18 17:05:33 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe
2011-03-18 17:05:33 ----A---- C:\Windows\system32\prncache.dll
2011-03-18 17:05:33 ----A---- C:\Windows\system32\gdi32.dll
2011-03-18 17:05:33 ----A---- C:\Windows\system32\drivers\volsnap.sys
2011-03-18 17:05:32 ----A---- C:\Windows\system32\mcmde.dll
2011-03-18 17:05:29 ----A---- C:\Windows\system32\WMNetMgr.dll
2011-03-18 17:05:29 ----A---- C:\Windows\system32\schtasks.exe
2011-03-18 17:05:28 ----A---- C:\Windows\SYSWOW64\userenv.dll
2011-03-18 17:05:28 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2011-03-18 17:05:28 ----A---- C:\Windows\system32\wlanpref.dll
2011-03-18 17:05:27 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2011-03-18 17:05:27 ----A---- C:\Windows\system32\wuapi.dll
2011-03-18 17:05:27 ----A---- C:\Windows\system32\vpnike.dll
2011-03-18 17:05:27 ----A---- C:\Windows\system32\userenv.dll
2011-03-18 17:05:27 ----A---- C:\Windows\system32\drivers\rdbss.sys
2011-03-18 17:05:26 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2011-03-18 17:05:26 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2011-03-18 17:05:26 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2011-03-18 17:05:26 ----A---- C:\Windows\system32\wintrust.dll
2011-03-18 17:05:25 ----A---- C:\Windows\system32\photowiz.dll
2011-03-18 17:05:25 ----A---- C:\Windows\system32\evr.dll
2011-03-18 17:05:25 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2011-03-18 17:05:24 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2011-03-18 17:05:23 ----A---- C:\Windows\system32\IPSECSVC.DLL
2011-03-18 17:05:23 ----A---- C:\Windows\system32\framedyn.dll
2011-03-18 17:05:23 ----A---- C:\Windows\system32\AudioSes.dll
2011-03-18 17:05:22 ----A---- C:\Windows\system32\wmpmde.dll
2011-03-18 17:05:22 ----A---- C:\Windows\system32\FXSSVC.exe
2011-03-18 17:05:22 ----A---- C:\Windows\system32\aepdu.dll
2011-03-18 17:05:21 ----A---- C:\Windows\SYSWOW64\cmd.exe
2011-03-18 17:05:21 ----A---- C:\Windows\system32\WMPEncEn.dll
2011-03-18 17:05:21 ----A---- C:\Windows\system32\wmpeffects.dll
2011-03-18 17:05:21 ----A---- C:\Windows\system32\SyncCenter.dll
2011-03-18 17:05:21 ----A---- C:\Windows\system32\sppobjs.dll
2011-03-18 17:05:20 ----A---- C:\Windows\system32\srvsvc.dll
2011-03-18 17:05:20 ----A---- C:\Windows\system32\mfreadwrite.dll
2011-03-18 17:05:19 ----A---- C:\Windows\system32\shsvcs.dll
2011-03-18 17:05:19 ----A---- C:\Windows\system32\aeinv.dll
2011-03-18 17:05:18 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2011-03-18 17:05:18 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2011-03-18 17:05:18 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2011-03-18 17:05:18 ----A---- C:\Windows\system32\fde.dll
2011-03-18 17:05:17 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2011-03-18 17:05:17 ----A---- C:\Windows\SYSWOW64\propsys.dll
2011-03-18 17:05:17 ----A---- C:\Windows\SYSWOW64\mfds.dll
2011-03-18 17:05:17 ----A---- C:\Windows\system32\WinSATAPI.dll
2011-03-18 17:05:17 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-03-18 17:05:16 ----A---- C:\Windows\system32\stobject.dll
2011-03-18 17:05:15 ----A---- C:\Windows\system32\netdiagfx.dll
2011-03-18 17:05:15 ----A---- C:\Windows\system32\localsec.dll
2011-03-18 17:05:15 ----A---- C:\Windows\system32\imapi2.dll
2011-03-18 17:05:15 ----A---- C:\Windows\system32\credui.dll
2011-03-18 17:05:14 ----A---- C:\Windows\system32\iphlpsvc.dll
2011-03-18 17:05:14 ----A---- C:\Windows\system32\drivers\udfs.sys
2011-03-18 17:05:14 ----A---- C:\Windows\system32\cdd.dll
2011-03-18 17:05:14 ----A---- C:\Windows\system32\bcryptprimitives.dll
2011-03-18 17:05:13 ----A---- C:\Windows\SYSWOW64\user32.dll
2011-03-18 17:05:13 ----A---- C:\Windows\system32\inetpp.dll
2011-03-18 17:05:13 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2011-03-18 17:05:12 ----A---- C:\Windows\system32\tcpipcfg.dll
2011-03-18 17:05:12 ----A---- C:\Windows\system32\QSHVHOST.DLL
2011-03-18 17:05:12 ----A---- C:\Windows\system32\netid.dll
2011-03-18 17:05:12 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-03-18 17:05:12 ----A---- C:\Windows\system32\davclnt.dll
2011-03-18 17:05:11 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2011-03-18 17:05:11 ----A---- C:\Windows\SYSWOW64\azroles.dll
2011-03-18 17:05:11 ----A---- C:\Windows\system32\spp.dll
2011-03-18 17:05:11 ----A---- C:\Windows\system32\biocpl.dll
2011-03-18 17:05:10 ----A---- C:\Windows\system32\profsvc.dll
2011-03-18 17:05:10 ----A---- C:\Windows\system32\msinfo32.exe
2011-03-18 17:05:09 ----A---- C:\Windows\system32\scansetting.dll
2011-03-18 17:05:09 ----A---- C:\Windows\system32\printui.dll
2011-03-18 17:05:09 ----A---- C:\Windows\system32\gameux.dll
2011-03-18 17:05:08 ----A---- C:\Windows\SYSWOW64\themeui.dll
2011-03-18 17:05:08 ----A---- C:\Windows\system32\mspbda.dll
2011-03-18 17:05:07 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2011-03-18 17:05:07 ----A---- C:\Windows\SYSWOW64\spp.dll
2011-03-18 17:05:07 ----A---- C:\Windows\SYSWOW64\credui.dll
2011-03-18 17:05:07 ----A---- C:\Windows\system32\pla.dll
2011-03-18 17:05:07 ----A---- C:\Windows\system32\conhost.exe
2011-03-18 17:05:07 ----A---- C:\Windows\splwow64.exe
2011-03-18 17:05:06 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2011-03-18 17:05:06 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2011-03-18 17:05:06 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2011-03-18 17:05:05 ----A---- C:\Windows\system32\wusa.exe
2011-03-18 17:05:05 ----A---- C:\Windows\system32\vds.exe
2011-03-18 17:05:05 ----A---- C:\Windows\system32\msdri.dll
2011-03-18 17:05:05 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2011-03-18 17:05:05 ----A---- C:\Windows\system32\inetcomm.dll
2011-03-18 17:05:05 ----A---- C:\Windows\system32\aitagent.exe
2011-03-18 17:05:04 ----A---- C:\Windows\system32\wiaservc.dll
2011-03-18 17:05:04 ----A---- C:\Windows\system32\drivers\pci.sys
2011-03-18 17:05:03 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2011-03-18 17:05:03 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2011-03-18 17:05:03 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2011-03-18 17:05:03 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2011-03-18 17:05:03 ----A---- C:\Windows\system32\rpchttp.dll
2011-03-18 17:05:03 ----A---- C:\Windows\system32\mscms.dll
2011-03-18 17:05:03 ----A---- C:\Windows\system32\cryptsvc.dll
2011-03-18 17:05:02 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2011-03-18 17:05:01 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2011-03-18 17:05:01 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2011-03-18 17:05:01 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2011-03-18 17:05:00 ----A---- C:\Windows\system32\XpsRasterService.dll
2011-03-18 17:05:00 ----A---- C:\Windows\system32\wisptis.exe
2011-03-18 17:05:00 ----A---- C:\Windows\system32\msi.dll
2011-03-18 17:05:00 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2011-03-18 17:04:59 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2011-03-18 17:04:59 ----A---- C:\Windows\system32\ocsetup.exe
2011-03-18 17:04:58 ----A---- C:\Windows\SYSWOW64\evr.dll
2011-03-18 17:04:58 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2011-03-18 17:04:57 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2011-03-18 17:04:57 ----A---- C:\Windows\SYSWOW64\calc.exe
2011-03-18 17:04:57 ----A---- C:\Windows\system32\sppwinob.dll
2011-03-18 17:04:57 ----A---- C:\Windows\system32\ocsetapi.dll
2011-03-18 17:04:57 ----A---- C:\Windows\system32\DXP.dll
2011-03-18 17:04:57 ----A---- C:\Windows\system32\drivers\volmgr.sys
2011-03-18 17:04:56 ----A---- C:\Windows\system32\rdpcore.dll
2011-03-18 17:04:56 ----A---- C:\Windows\system32\cfgmgr32.dll
2011-03-18 17:04:55 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2011-03-18 17:04:55 ----A---- C:\Windows\system32\wpdbusenum.dll
2011-03-18 17:04:55 ----A---- C:\Windows\system32\ntshrui.dll
2011-03-18 17:04:55 ----A---- C:\Windows\system32\eapp3hst.dll
2011-03-18 17:04:55 ----A---- C:\Windows\system32\drivers\msdsm.sys
2011-03-18 17:04:55 ----A---- C:\Windows\system32\ci.dll
2011-03-18 17:04:54 ----A---- C:\Windows\system32\wcncsvc.dll
2011-03-18 17:04:54 ----A---- C:\Windows\system32\upnp.dll

2011-03-18 17:04:54 ----A---- C:\Windows\system32\Robocopy.exe
2011-03-18 17:04:54 ----A---- C:\Windows\system32\mprapi.dll
2011-03-18 17:04:54 ----A---- C:\Windows\system32\eapphost.dll
2011-03-18 17:04:53 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2011-03-18 17:04:53 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2011-03-18 17:04:53 ----A---- C:\Windows\system32\t2embed.dll
2011-03-18 17:04:53 ----A---- C:\Windows\system32\drivers\HpSAMD.sys
2011-03-18 17:04:52 ----A---- C:\Windows\SYSWOW64\sxs.dll
2011-03-18 17:04:52 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2011-03-18 17:04:52 ----A---- C:\Windows\system32\thumbcache.dll
2011-03-18 17:04:51 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2011-03-18 17:04:51 ----A---- C:\Windows\SYSWOW64\stobject.dll
2011-03-18 17:04:51 ----A---- C:\Windows\SYSWOW64\netshell.dll
2011-03-18 17:04:51 ----A---- C:\Windows\system32\hal.dll
2011-03-18 17:04:51 ----A---- C:\Windows\system32\DxpTaskSync.dll
2011-03-18 17:04:51 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2011-03-18 17:04:50 ----A---- C:\Windows\system32\scecli.dll
2011-03-18 17:04:50 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2011-03-18 17:04:50 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2011-03-18 17:04:50 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-03-18 17:04:50 ----A---- C:\Windows\system32\drivers\fvevol.sys
2011-03-18 17:04:49 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2011-03-18 17:04:49 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2011-03-18 17:04:49 ----A---- C:\Windows\system32\dwmredir.dll
2011-03-18 17:04:48 ----A---- C:\Windows\system32\msasn1.dll
2011-03-18 17:04:48 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2011-03-18 17:04:47 ----A---- C:\Windows\SYSWOW64\prncache.dll
2011-03-18 17:04:47 ----A---- C:\Windows\system32\themeui.dll
2011-03-18 17:04:47 ----A---- C:\Windows\system32\sspicli.dll
2011-03-18 17:04:47 ----A---- C:\Windows\system32\puiobj.dll
2011-03-18 17:04:47 ----A---- C:\Windows\system32\onex.dll
2011-03-18 17:04:47 ----A---- C:\Windows\system32\nlaapi.dll
2011-03-18 17:04:47 ----A---- C:\Windows\system32\iasrad.dll
2011-03-18 17:04:47 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys
2011-03-18 17:04:46 ----A---- C:\Windows\SYSWOW64\printui.dll
2011-03-18 17:04:46 ----A---- C:\Windows\SYSWOW64\msi.dll
2011-03-18 17:04:46 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2011-03-18 17:04:44 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2011-03-18 17:04:44 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2011-03-18 17:04:44 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2011-03-18 17:04:44 ----A---- C:\Windows\SYSWOW64\net1.exe
2011-03-18 17:04:44 ----A---- C:\Windows\system32\iedkcs32.dll
2011-03-18 17:04:44 ----A---- C:\Windows\system32\aaclient.dll
2011-03-18 17:04:43 ----A---- C:\Windows\system32\wow64.dll
2011-03-18 17:04:43 ----A---- C:\Windows\system32\wdc.dll
2011-03-18 17:04:42 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2011-03-18 17:04:42 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2011-03-18 17:04:41 ----A---- C:\Windows\system32\wlangpui.dll
2011-03-18 17:04:41 ----A---- C:\Windows\system32\scesrv.dll
2011-03-18 17:04:41 ----A---- C:\Windows\system32\rasmans.dll
2011-03-18 17:04:41 ----A---- C:\Windows\system32\msftedit.dll
2011-03-18 17:04:40 ----A---- C:\Windows\system32\sdengin2.dll
2011-03-18 17:04:39 ----A---- C:\Windows\system32\wiadefui.dll
2011-03-18 17:04:39 ----A---- C:\Windows\system32\VAN.dll
2011-03-18 17:04:39 ----A---- C:\Windows\system32\StructuredQuery.dll
2011-03-18 17:04:39 ----A---- C:\Windows\system32\netcenter.dll
2011-03-18 17:04:39 ----A---- C:\Windows\system32\dskquoui.dll
2011-03-18 17:04:38 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2011-03-18 17:04:38 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2011-03-18 17:04:38 ----A---- C:\Windows\system32\SndVol.exe
2011-03-18 17:04:38 ----A---- C:\Windows\system32\samcli.dll
2011-03-18 17:04:38 ----A---- C:\Windows\system32\drivers\partmgr.sys
2011-03-18 17:04:38 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2011-03-18 17:04:37 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2011-03-18 17:04:37 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2011-03-18 17:04:37 ----A---- C:\Windows\system32\wscapi.dll
2011-03-18 17:04:37 ----A---- C:\Windows\system32\regapi.dll
2011-03-18 17:04:37 ----A---- C:\Windows\system32\iasacct.dll
2011-03-18 17:04:37 ----A---- C:\Windows\system32\drivers\termdd.sys
2011-03-18 17:04:36 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2011-03-18 17:04:36 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2011-03-18 17:04:36 ----A---- C:\Windows\system32\wucltux.dll
2011-03-18 17:04:36 ----A---- C:\Windows\system32\consent.exe
2011-03-18 17:04:35 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2011-03-18 17:04:35 ----A---- C:\Windows\SYSWOW64\pnidui.dll
2011-03-18 17:04:35 ----A---- C:\Windows\system32\TabSvc.dll
2011-03-18 17:04:35 ----A---- C:\Windows\system32\srchadmin.dll
2011-03-18 17:04:35 ----A---- C:\Windows\system32\QUTIL.DLL
2011-03-18 17:04:34 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2011-03-18 17:04:33 ----A---- C:\Windows\SYSWOW64\webservices.dll
2011-03-18 17:04:33 ----A---- C:\Windows\SYSWOW64\fde.dll
2011-03-18 17:04:33 ----A---- C:\Windows\system32\WUDFSvc.dll
2011-03-18 17:04:32 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2011-03-18 17:04:32 ----A---- C:\Windows\system32\wksprt.exe
2011-03-18 17:04:32 ----A---- C:\Windows\system32\taskhost.exe
2011-03-18 17:04:32 ----A---- C:\Windows\system32\setupcl.exe
2011-03-18 17:04:32 ----A---- C:\Windows\system32\rastls.dll
2011-03-18 17:04:32 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2011-03-18 17:04:32 ----A---- C:\Windows\system32\drivers\msahci.sys
2011-03-18 17:04:31 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll
2011-03-18 17:04:30 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2011-03-18 17:04:30 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2011-03-18 17:04:30 ----A---- C:\Windows\system32\drivers\acpi.sys
2011-03-18 17:04:29 ----A---- C:\Windows\system32\tapisrv.dll
2011-03-18 17:04:29 ----A---- C:\Windows\system32\netiohlp.dll
2011-03-18 17:04:29 ----A---- C:\Windows\system32\mimefilt.dll
2011-03-18 17:04:29 ----A---- C:\Windows\system32\drivers\raspptp.sys
2011-03-18 17:04:28 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2011-03-18 17:04:28 ----A---- C:\Windows\system32\msconfig.exe
2011-03-18 17:04:28 ----A---- C:\Windows\system32\ListSvc.dll
2011-03-18 17:04:27 ----A---- C:\Windows\SYSWOW64\pla.dll
2011-03-18 17:04:27 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2011-03-18 17:04:27 ----A---- C:\Windows\system32\hgcpl.dll
2011-03-18 17:04:26 ----A---- C:\Windows\system32\lsmproxy.dll
2011-03-18 17:04:26 ----A---- C:\Windows\system32\drivers\ks.sys
2011-03-18 17:04:26 ----A---- C:\Windows\system32\clusapi.dll
2011-03-18 17:04:26 ----A---- C:\Windows\system32\basecsp.dll
2011-03-18 17:04:25 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2011-03-18 17:04:25 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2011-03-18 17:04:25 ----A---- C:\Windows\system32\fdeploy.dll
2011-03-18 17:04:25 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2011-03-18 17:04:24 ----A---- C:\Windows\SYSWOW64\winsta.dll
2011-03-18 17:04:24 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2011-03-18 17:04:23 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-03-18 17:04:23 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2011-03-18 17:04:22 ----A---- C:\Windows\system32\WFS.exe
2011-03-18 17:04:22 ----A---- C:\Windows\system32\mtxclu.dll
2011-03-18 17:04:22 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2011-03-18 17:04:21 ----A---- C:\Windows\SYSWOW64\imapi2.dll
2011-03-18 17:04:21 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2011-03-18 17:04:20 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2011-03-18 17:04:20 ----A---- C:\Windows\system32\riched20.dll
2011-03-18 17:04:19 ----A---- C:\Windows\SYSWOW64\gameux.dll
2011-03-18 17:04:19 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll
2011-03-18 17:04:19 ----A---- C:\Windows\system32\dnscmmc.dll
2011-03-18 17:04:18 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2011-03-18 17:04:17 ----A---- C:\Windows\system32\RpcRtRemote.dll
2011-03-18 17:04:17 ----A---- C:\Windows\system32\powercpl.dll
2011-03-18 17:04:17 ----A---- C:\Windows\system32\logoncli.dll
2011-03-18 17:04:16 ----A---- C:\Windows\SYSWOW64\WMPEncEn.dll
2011-03-18 17:04:16 ----A---- C:\Windows\SYSWOW64\onex.dll
2011-03-18 17:04:16 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2011-03-18 17:04:16 ----A---- C:\Windows\system32\sharemediacpl.dll
2011-03-18 17:04:15 ----A---- C:\Windows\SYSWOW64\winmm.dll
2011-03-18 17:04:15 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2011-03-18 17:04:15 ----A---- C:\Windows\system32\themecpl.dll
2011-03-18 17:04:15 ----A---- C:\Windows\system32\SensorsCpl.dll
2011-03-18 17:04:15 ----A---- C:\Windows\system32\nci.dll
2011-03-18 17:04:15 ----A---- C:\Windows\system32\eudcedit.exe
2011-03-18 17:04:14 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2011-03-18 17:04:14 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2011-03-18 17:04:14 ----A---- C:\Windows\system32\netjoin.dll
2011-03-18 17:04:14 ----A---- C:\Windows\system32\Narrator.exe
2011-03-18 17:04:14 ----A---- C:\Windows\system32\Faultrep.dll
2011-03-18 17:04:13 ----A---- C:\Windows\SYSWOW64\samcli.dll
2011-03-18 17:04:13 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2011-03-18 17:04:13 ----A---- C:\Windows\SYSWOW64\autochk.exe
2011-03-18 17:04:13 ----A---- C:\Windows\system32\wkssvc.dll
2011-03-18 17:04:13 ----A---- C:\Windows\system32\vpnikeapi.dll
2011-03-18 17:04:13 ----A---- C:\Windows\system32\licmgr10.dll
2011-03-18 17:04:11 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2011-03-18 17:04:09 ----A---- C:\Windows\SYSWOW64\proquota.exe
2011-03-18 17:04:09 ----A---- C:\Windows\system32\sppcomapi.dll
2011-03-18 17:04:09 ----A---- C:\Windows\system32\comctl32.dll
2011-03-18 17:04:09 ----A---- C:\Windows\system32\cabview.dll
2011-03-18 17:04:08 ----A---- C:\Windows\SYSWOW64\msutb.dll
2011-03-18 17:04:08 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2011-03-18 17:04:08 ----A---- C:\Windows\system32\autochk.exe
2011-03-18 17:04:08 ----A---- C:\Windows\system32\autofmt.exe
2011-03-18 17:04:07 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2011-03-18 17:04:07 ----A---- C:\Windows\SYSWOW64\regapi.dll
2011-03-18 17:04:07 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2011-03-18 17:04:07 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2011-03-18 17:04:07 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2011-03-18 17:04:07 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2011-03-18 17:04:07 ----A---- C:\Windows\system32\autoconv.exe
2011-03-18 17:04:06 ----A---- C:\Windows\system32\nshipsec.dll
2011-03-18 17:04:06 ----A---- C:\Windows\system32\fms.dll
2011-03-18 17:04:06 ----A---- C:\Windows\system32\audiodg.exe
2011-03-18 17:04:05 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2011-03-18 17:04:05 ----A---- C:\Windows\SYSWOW64\srchadmin.dll
2011-03-18 17:04:05 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2011-03-18 17:04:05 ----A---- C:\Windows\SYSWOW64\powercpl.dll
2011-03-18 17:04:05 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2011-03-18 17:04:05 ----A---- C:\Windows\system32\wpd_ci.dll
2011-03-18 17:04:05 ----A---- C:\Windows\system32\shsetup.dll
2011-03-18 17:04:05 ----A---- C:\Windows\system32\bcdsrv.dll
2011-03-18 17:04:04 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2011-03-18 17:04:04 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2011-03-18 17:04:04 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2011-03-18 17:04:04 ----A---- C:\Windows\system32\sdclt.exe
2011-03-18 17:04:04 ----A---- C:\Windows\system32\drivers\wanarp.sys
2011-03-18 17:04:03 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2011-03-18 17:04:03 ----A---- C:\Windows\system32\wwanconn.dll
2011-03-18 17:04:03 ----A---- C:\Windows\system32\wlanui.dll
2011-03-18 17:04:03 ----A---- C:\Windows\system32\prntvpt.dll
2011-03-18 17:04:03 ----A---- C:\Windows\system32\mscorier.dll
2011-03-18 17:04:03 ----A---- C:\Windows\system32\drivers\winusb.sys
2011-03-18 17:04:03 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2011-03-18 17:04:03 ----A---- C:\Windows\system32\drivers\scsiport.sys
2011-03-18 17:04:02 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2011-03-18 17:04:02 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2011-03-18 17:04:02 ----A---- C:\Windows\system32\drivers\bthport.sys
2011-03-18 17:04:01 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL
2011-03-18 17:04:01 ----A---- C:\Windows\system32\fontext.dll
2011-03-18 17:04:01 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2011-03-18 17:04:01 ----A---- C:\Windows\system32\dps.dll
2011-03-18 17:04:00 ----A---- C:\Windows\SYSWOW64\netid.dll
2011-03-18 17:04:00 ----A---- C:\Windows\system32\qedit.dll
2011-03-18 17:04:00 ----A---- C:\Windows\system32\mprddm.dll
2011-03-18 17:04:00 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-03-18 17:04:00 ----A---- C:\Windows\system32\Display.dll
2011-03-18 17:04:00 ----A---- C:\Windows\system32\AxInstSv.dll
2011-03-18 17:03:59 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2011-03-18 17:03:59 ----A---- C:\Windows\system32\drivers\hidclass.sys
2011-03-18 17:03:59 ----A---- C:\Windows\system32\credssp.dll
2011-03-18 17:03:59 ----A---- C:\Windows\system32\batmeter.dll
2011-03-18 17:03:58 ----A---- C:\Windows\SYSWOW64\wdc.dll
2011-03-18 17:03:58 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2011-03-18 17:03:58 ----A---- C:\Windows\system32\mblctr.exe
2011-03-18 17:03:57 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2011-03-18 17:03:55 ----A---- C:\Windows\system32\wmpsrcwp.dll
2011-03-18 17:03:54 ----A---- C:\Windows\SYSWOW64\Vault.dll
2011-03-18 17:03:54 ----A---- C:\Windows\SYSWOW64\untfs.dll
2011-03-18 17:03:54 ----A---- C:\Windows\SYSWOW64\rastls.dll
2011-03-18 17:03:54 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2011-03-18 17:03:54 ----A---- C:\Windows\SYSWOW64\nci.dll
2011-03-18 17:03:53 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2011-03-18 17:03:53 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2011-03-18 17:03:53 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll
2011-03-18 17:03:53 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-03-18 17:03:53 ----A---- C:\Windows\system32\usercpl.dll
2011-03-18 17:03:53 ----A---- C:\Windows\system32\rtutils.dll
2011-03-18 17:03:53 ----A---- C:\Windows\system32\DiagCpl.dll
2011-03-18 17:03:52 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2011-03-18 17:03:52 ----A---- C:\Windows\system32\provsvc.dll
2011-03-18 17:03:52 ----A---- C:\Windows\system32\bootres.dll
2011-03-18 17:03:51 ----A---- C:\Windows\system32\wpccpl.dll
2011-03-18 17:03:51 ----A---- C:\Windows\system32\sppsvc.exe
2011-03-18 17:03:51 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2011-03-18 17:03:50 ----A---- C:\Windows\SYSWOW64\DxpTaskSync.dll
2011-03-18 17:03:50 ----A---- C:\Windows\system32\rasppp.dll
2011-03-18 17:03:49 ----A---- C:\Windows\SYSWOW64\taskmgr.exe
2011-03-18 17:03:49 ----A---- C:\Windows\SYSWOW64\Display.dll
2011-03-18 17:03:49 ----A---- C:\Windows\system32\SndVolSSO.dll
2011-03-18 17:03:49 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2011-03-18 17:03:49 ----A---- C:\Windows\system32\dot3cfg.dll
2011-03-18 17:03:48 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2011-03-18 17:03:48 ----A---- C:\Windows\system32\dxdiagn.dll
2011-03-18 17:03:47 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2011-03-18 17:03:47 ----A---- C:\Windows\SYSWOW64\userinit.exe
2011-03-18 17:03:47 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2011-03-18 17:03:47 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2011-03-18 17:03:47 ----A---- C:\Windows\system32\shdocvw.dll
2011-03-18 17:03:47 ----A---- C:\Windows\system32\hbaapi.dll
2011-03-18 17:03:46 ----A---- C:\Windows\SYSWOW64\termmgr.dll
2011-03-18 17:03:46 ----A---- C:\Windows\system32\taskmgr.exe
2011-03-18 17:03:46 ----A---- C:\Windows\system32\prnfldr.dll
2011-03-18 17:03:45 ----A---- C:\Windows\SYSWOW64\eudcedit.exe
2011-03-18 17:03:45 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2011-03-18 17:03:45 ----A---- C:\Windows\system32\proquota.exe
2011-03-18 17:03:45 ----A---- C:\Windows\system32\pdh.dll
2011-03-18 17:03:45 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2011-03-18 17:03:44 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2011-03-18 17:03:44 ----A---- C:\Windows\system32\drivers\ataport.sys
2011-03-18 17:03:43 ----A---- C:\Windows\system32\untfs.dll
2011-03-18 17:03:41 ----A---- C:\Windows\SYSWOW64\wiadefui.dll
2011-03-18 17:03:41 ----A---- C:\Windows\SYSWOW64\sppcomapi.dll
2011-03-18 17:03:41 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2011-03-18 17:03:41 ----A---- C:\Windows\SYSWOW64\rasppp.dll
2011-03-18 17:03:41 ----A---- C:\Windows\SYSWOW64\logoncli.dll
2011-03-18 17:03:41 ----A---- C:\Windows\SYSWOW64\cabview.dll
2011-03-18 17:03:40 ----A---- C:\Windows\system32\userinit.exe
2011-03-18 17:03:40 ----A---- C:\Windows\system32\rdpcorekmts.dll
2011-03-18 17:03:39 ----A---- C:\Windows\SYSWOW64\FirewallControlPanel.dll
2011-03-18 17:03:39 ----A---- C:\Windows\system32\accessibilitycpl.dll
2011-03-18 17:03:38 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll
2011-03-18 17:03:37 ----A---- C:\Windows\SYSWOW64\themecpl.dll
2011-03-18 17:03:37 ----A---- C:\Windows\system32\webcheck.dll
2011-03-18 17:03:37 ----A---- C:\Windows\system32\slui.exe
2011-03-18 17:03:36 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2011-03-18 17:03:36 ----A---- C:\Windows\SYSWOW64\dnscmmc.dll
2011-03-18 17:03:36 ----A---- C:\Windows\system32\zipfldr.dll
2011-03-18 17:03:35 ----A---- C:\Windows\SYSWOW64\hgcpl.dll
2011-03-18 17:03:35 ----A---- C:\Windows\system32\msieftp.dll
2011-03-18 17:03:35 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2011-03-18 17:03:33 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2011-03-18 17:03:33 ----A---- C:\Windows\SYSWOW64\scecli.dll
2011-03-18 17:03:33 ----A---- C:\Windows\SYSWOW64\fontext.dll
2011-03-18 17:03:33 ----A---- C:\Windows\system32\sud.dll
2011-03-18 17:03:33 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2011-03-18 17:03:32 ----A---- C:\Windows\SYSWOW64\mscories.dll
2011-03-18 17:03:32 ----A---- C:\Windows\SYSWOW64\mscms.dll
2011-03-18 17:03:32 ----A---- C:\Windows\SYSWOW64\mprddm.dll
2011-03-18 17:03:32 ----A---- C:\Windows\SYSWOW64\localsec.dll
2011-03-18 17:03:32 ----A---- C:\Windows\system32\dot3svc.dll
2011-03-18 17:03:32 ----A---- C:\Windows\system32\DeviceCenter.dll
2011-03-18 17:03:31 ----A---- C:\Windows\SYSWOW64\iasacct.dll
2011-03-18 17:03:31 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2011-03-18 17:03:31 ----A---- C:\Windows\system32\networkmap.dll
2011-03-18 17:03:31 ----A---- C:\Windows\system32\cryptui.dll
2011-03-18 17:03:30 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll
2011-03-18 17:03:30 ----A---- C:\Windows\system32\taskbarcpl.dll
2011-03-18 17:03:30 ----A---- C:\Windows\system32\qdvd.dll
2011-03-18 17:03:29 ----A---- C:\Windows\system32\ActionCenter.dll
2011-03-18 17:03:28 ----A---- C:\Windows\system32\srcore.dll
2011-03-18 17:03:27 ----A---- C:\Windows\SYSWOW64\wlanui.dll
2011-03-18 17:03:27 ----A---- C:\Windows\SYSWOW64\VAN.dll
2011-03-18 17:03:27 ----A---- C:\Windows\SYSWOW64\usercpl.dll
2011-03-18 17:03:27 ----A---- C:\Windows\SYSWOW64\qedit.dll
2011-03-18 17:03:27 ----A---- C:\Windows\SYSWOW64\PerfCenterCPL.dll
2011-03-18 17:03:27 ----A---- C:\Windows\SYSWOW64\batmeter.dll
2011-03-18 17:03:27 ----A---- C:\Windows\system32\twext.dll
2011-03-18 17:03:26 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2011-03-18 17:03:26 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2011-03-18 17:03:26 ----A---- C:\Windows\SYSWOW64\prntvpt.dll
2011-03-18 17:03:26 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2011-03-18 17:03:26 ----A---- C:\Windows\system32\rdpwsx.dll
2011-03-18 17:03:26 ----A---- C:\Windows\system32\OobeFldr.dll
2011-03-18 17:03:26 ----A---- C:\Windows\system32\drivers\usbhub.sys
2011-03-18 17:03:26 ----A---- C:\Windows\system32\bcdedit.exe
2011-03-18 17:03:25 ----A---- C:\Windows\SYSWOW64\w32tm.exe
2011-03-18 17:03:25 ----A---- C:\Windows\system32\uxlib.dll
2011-03-18 17:03:25 ----A---- C:\Windows\system32\recovery.dll
2011-03-18 17:03:25 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2011-03-18 17:03:25 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2011-03-18 17:03:25 ----A---- C:\Windows\system32\azroleui.dll
2011-03-18 17:03:24 ----A---- C:\Windows\SYSWOW64\spwizeng.dll
2011-03-18 17:03:24 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2011-03-18 17:03:24 ----A---- C:\Windows\SYSWOW64\accessibilitycpl.dll
2011-03-18 17:03:24 ----A---- C:\Windows\system32\sisbkup.dll
2011-03-18 17:03:24 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2011-03-18 17:03:24 ----A---- C:\Windows\system32\isoburn.exe
2011-03-18 17:03:24 ----A---- C:\Windows\system32\dsuiext.dll
2011-03-18 17:03:24 ----A---- C:\Windows\system32\cca.dll
2011-03-18 17:03:24 ----A---- C:\Windows\system32\asycfilt.dll
2011-03-18 17:03:23 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2011-03-18 17:03:23 ----A---- C:\Windows\system32\tzutil.exe
2011-03-18 17:03:23 ----A---- C:\Windows\system32\efscore.dll
2011-03-18 17:03:22 ----A---- C:\Windows\SYSWOW64\MSAC3ENC.DLL
2011-03-18 17:03:22 ----A---- C:\Windows\SYSWOW64\fdeploy.dll
2011-03-18 17:03:22 ----A---- C:\Windows\system32\systemcpl.dll
2011-03-18 17:03:22 ----A---- C:\Windows\system32\syncui.dll
2011-03-18 17:03:22 ----A---- C:\Windows\system32\sdcpl.dll
2011-03-18 17:03:22 ----A---- C:\Windows\system32\recdisc.exe
2011-03-18 17:03:22 ----A---- C:\Windows\system32\netplwiz.dll
2011-03-18 17:03:22 ----A---- C:\Windows\system32\httpapi.dll
2011-03-18 17:03:21 ----A---- C:\Windows\SYSWOW64\netjoin.dll
2011-03-18 17:03:21 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2011-03-18 17:03:21 ----A---- C:\Windows\SYSWOW64\adsldp.dll
2011-03-18 17:03:21 ----A---- C:\Windows\system32\sspisrv.dll
2011-03-18 17:03:21 ----A---- C:\Windows\system32\shwebsvc.dll
2011-03-18 17:03:21 ----A---- C:\Windows\system32\drivers\mpio.sys
2011-03-18 17:03:21 ----A---- C:\Windows\system32\autoplay.dll
2011-03-18 17:03:20 ----A---- C:\Windows\SYSWOW64\networkmap.dll
2011-03-18 17:03:20 ----A---- C:\Windows\system32\wlanmsm.dll
2011-03-18 17:03:20 ----A---- C:\Windows\system32\sysclass.dll
2011-03-18 17:03:20 ----A---- C:\Windows\system32\sdrsvc.dll
2011-03-18 17:03:20 ----A---- C:\Windows\system32\ncryptui.dll
2011-03-18 17:03:20 ----A---- C:\Windows\system32\certcli.dll
2011-03-18 17:03:20 ----A---- C:\Windows\system32\appinfo.dll
2011-03-18 17:03:19 ----A---- C:\Windows\SYSWOW64\wusa.exe
2011-03-18 17:03:19 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2011-03-18 17:03:19 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2011-03-18 17:03:18 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2011-03-18 17:03:18 ----A---- C:\Windows\system32\msvidc32.dll
2011-03-18 17:03:18 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2011-03-18 17:03:17 ----A---- C:\Windows\SYSWOW64\prnfldr.dll
2011-03-18 17:03:17 ----A---- C:\Windows\SYSWOW64\OnLineIDCpl.dll
2011-03-18 17:03:17 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2011-03-18 17:03:17 ----A---- C:\Windows\system32\spwizeng.dll
2011-03-18 17:03:16 ----A---- C:\Windows\SYSWOW64\sud.dll
2011-03-18 17:03:16 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2011-03-18 17:03:16 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2011-03-18 17:03:16 ----A---- C:\Windows\system32\vdsutil.dll
2011-03-18 17:03:16 ----A---- C:\Windows\system32\MFPlay.dll
2011-03-18 17:03:15 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2011-03-18 17:03:15 ----A---- C:\Windows\SYSWOW64\MediaMetadataHandler.dll
2011-03-18 17:03:15 ----A---- C:\Windows\SYSWOW64\credssp.dll
2011-03-18 17:03:15 ----A---- C:\Windows\system32\termmgr.dll
2011-03-18 17:03:15 ----A---- C:\Windows\system32\mshtmled.dll
2011-03-18 17:03:15 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-03-18 17:03:14 ----A---- C:\Windows\SYSWOW64\iasrad.dll
2011-03-18 17:03:14 ----A---- C:\Windows\system32\sethc.exe
2011-03-18 17:03:14 ----A---- C:\Windows\system32\odbccp32.dll
2011-03-18 17:03:14 ----A---- C:\Windows\system32\msscp.dll
2011-03-18 17:03:13 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll
2011-03-18 17:03:13 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll
2011-03-18 17:03:13 ----A---- C:\Windows\system32\rstrui.exe
2011-03-18 17:03:13 ----A---- C:\Windows\system32\ReAgent.dll
2011-03-18 17:03:13 ----A---- C:\Windows\system32\ntlanman.dll
2011-03-18 17:03:12 ----A---- C:\Windows\SYSWOW64\ftp.exe
2011-03-18 17:03:12 ----A---- C:\Windows\SYSWOW64\dot3cfg.dll
2011-03-18 17:03:12 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2011-03-18 17:03:11 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2011-03-18 17:03:11 ----A---- C:\Windows\system32\tsgqec.dll
2011-03-18 17:03:10 ----A---- C:\Windows\SYSWOW64\sisbkup.dll
2011-03-18 17:03:10 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll
2011-03-18 17:03:10 ----A---- C:\Windows\SYSWOW64\ifsutil.dll
2011-03-18 17:03:10 ----A---- C:\Windows\system32\sqlcese30.dll
2011-03-18 17:03:10 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2011-03-18 17:03:09 ----A---- C:\Windows\SYSWOW64\efscore.dll
2011-03-18 17:03:09 ----A---- C:\Windows\system32\wwanprotdim.dll
2011-03-18 17:03:09 ----A---- C:\Windows\system32\rdpd3d.dll
2011-03-18 17:03:09 ----A---- C:\Windows\system32\iprtrmgr.dll
2011-03-18 17:03:08 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2011-03-18 17:03:08 ----A---- C:\Windows\system32\secur32.dll
2011-03-18 17:03:07 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2011-03-18 17:03:07 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2011-03-18 17:03:07 ----A---- C:\Windows\SYSWOW64\ActionCenterCPL.dll
2011-03-18 17:03:07 ----A---- C:\Windows\system32\odbctrac.dll
2011-03-18 17:03:07 ----A---- C:\Windows\system32\iTVData.dll
2011-03-18 17:03:06 ----A---- C:\Windows\SYSWOW64\syncui.dll
2011-03-18 17:03:06 ----A---- C:\Windows\SYSWOW64\autoplay.dll
2011-03-18 17:03:06 ----A---- C:\Windows\system32\iyuv_32.dll
2011-03-18 17:03:03 ----A---- C:\Windows\system32\slwga.dll
2011-03-18 17:03:02 ----A---- C:\Windows\system32\wmdrmsdk.dll
2011-03-18 17:03:02 ----A---- C:\Windows\system32\drmmgrtn.dll
2011-03-18 17:03:01 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2011-03-18 17:03:01 ----A---- C:\Windows\SYSWOW64\ntlanman.dll
2011-03-18 17:03:01 ----A---- C:\Windows\SYSWOW64\dskquoui.dll
2011-03-18 17:03:01 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll
2011-03-18 17:03:01 ----A---- C:\Windows\system32\srvcli.dll
2011-03-18 17:03:00 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2011-03-18 17:03:00 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll
2011-03-18 17:03:00 ----A---- C:\Windows\system32\wavemsp.dll
2011-03-18 17:03:00 ----A---- C:\Windows\system32\nslookup.exe
2011-03-18 17:03:00 ----A---- C:\Windows\system32\msiexec.exe
2011-03-18 17:03:00 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2011-03-18 17:02:59 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2011-03-18 17:02:59 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2011-03-18 17:02:59 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2011-03-18 17:02:59 ----A---- C:\Windows\system32\ntprint.dll
2011-03-18 17:02:59 ----A---- C:\Windows\system32\NAPHLPR.DLL
2011-03-18 17:02:59 ----A---- C:\Windows\system32\acppage.dll
2011-03-18 17:02:58 ----A---- C:\Windows\SYSWOW64\sethc.exe
2011-03-18 17:02:58 ----A---- C:\Windows\SYSWOW64\riched20.dll
2011-03-18 17:02:58 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2011-03-18 17:02:58 ----A---- C:\Windows\system32\srrstr.dll
2011-03-18 17:02:58 ----A---- C:\Windows\system32\bcdboot.exe
2011-03-18 17:02:57 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL
2011-03-18 17:02:57 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2011-03-18 17:02:57 ----A---- C:\Windows\system32\sppnp.dll
2011-03-18 17:02:56 ----A---- C:\Windows\SYSWOW64\wmpsrcwp.dll
2011-03-18 17:02:56 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2011-03-18 17:02:56 ----A---- C:\Windows\SYSWOW64\migisol.dll
2011-03-18 17:02:56 ----A---- C:\Windows\SYSWOW64\fms.dll
2011-03-18 17:02:56 ----A---- C:\Windows\SYSWOW64\activeds.dll
2011-03-18 17:02:56 ----A---- C:\Windows\system32\TSpkg.dll
2011-03-18 17:02:56 ----A---- C:\Windows\system32\fsquirt.exe
2011-03-18 17:02:56 ----A---- C:\Windows\system32\certprop.dll
2011-03-18 17:02:55 ----A---- C:\Windows\system32\networkexplorer.dll
2011-03-18 17:02:55 ----A---- C:\Windows\system32\cabinet.dll
2011-03-18 17:02:54 ----A---- C:\Windows\SYSWOW64\nshipsec.dll
2011-03-18 17:02:54 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2011-03-18 17:02:54 ----A---- C:\Windows\SYSWOW64\httpapi.dll
2011-03-18 17:02:54 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2011-03-18 17:02:54 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2011-03-18 17:02:54 ----A---- C:\Windows\system32\wkscli.dll
2011-03-18 17:02:54 ----A---- C:\Windows\system32\remotepg.dll
2011-03-18 17:02:53 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2011-03-18 17:02:53 ----A---- C:\Windows\SYSWOW64\isoburn.exe
2011-03-18 17:02:53 ----A---- C:\Windows\system32\dfrgui.exe
2011-03-18 17:02:53 ----A---- C:\Windows\system32\cdosys.dll
2011-03-18 17:02:52 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2011-03-18 17:02:52 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2011-03-18 17:02:52 ----A---- C:\Windows\SYSWOW64\wavemsp.dll
2011-03-18 17:02:52 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2011-03-18 17:02:52 ----A---- C:\Windows\system32\WinSCard.dll
2011-03-18 17:02:52 ----A---- C:\Windows\system32\ftp.exe
2011-03-18 17:02:51 ----A---- C:\Windows\SYSWOW64\provsvc.dll
2011-03-18 17:02:51 ----A---- C:\Windows\SYSWOW64\dot3ui.dll
2011-03-18 17:02:51 ----A---- C:\Windows\system32\wsnmp32.dll
2011-03-18 17:02:51 ----A---- C:\Windows\system32\wmpdxm.dll
2011-03-18 17:02:51 ----A---- C:\Windows\system32\net1.exe
2011-03-18 17:02:49 ----A---- C:\Windows\SYSWOW64\tzutil.exe
2011-03-18 17:02:49 ----A---- C:\Windows\SYSWOW64\dsuiext.dll
2011-03-18 17:02:49 ----A---- C:\Windows\SYSWOW64\dfrgui.exe
2011-03-18 17:02:49 ----A---- C:\Windows\system32\wvc.dll
2011-03-18 17:02:49 ----A---- C:\Windows\system32\wuwebv.dll
2011-03-18 17:02:49 ----A---- C:\Windows\system32\wsqmcons.exe
2011-03-18 17:02:49 ----A---- C:\Windows\system32\blackbox.dll
2011-03-18 17:02:48 ----A---- C:\Windows\SYSWOW64\ocsetup.exe
2011-03-18 17:02:48 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2011-03-18 17:02:48 ----A---- C:\Windows\system32\wmdrmdev.dll
2011-03-18 17:02:48 ----A---- C:\Windows\system32\WerFaultSecure.exe
2011-03-18 17:02:47 ----A---- C:\Windows\SYSWOW64\wvc.dll
2011-03-18 17:02:47 ----A---- C:\Windows\SYSWOW64\wtsapi32.dll
2011-03-18 17:02:47 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2011-03-18 17:02:47 ----A---- C:\Windows\system32\msyuv.dll
2011-03-18 17:02:47 ----A---- C:\Windows\system32\mfps.dll
2011-03-18 17:02:46 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2011-03-18 17:02:46 ----A---- C:\Windows\SYSWOW64\twext.dll
2011-03-18 17:02:46 ----A---- C:\Windows\SYSWOW64\mstask.dll
2011-03-18 17:02:46 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2011-03-18 17:02:45 ----A---- C:\Windows\twain_32.dll
2011-03-18 17:02:45 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2011-03-18 17:02:45 ----A---- C:\Windows\SYSWOW64\qcap.dll
2011-03-18 17:02:45 ----A---- C:\Windows\system32\WUDFPlatform.dll
2011-03-18 17:02:45 ----A---- C:\Windows\system32\unimdmat.dll
2011-03-18 17:02:45 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2011-03-18 17:02:45 ----A---- C:\Windows\system32\OpcServices.dll
2011-03-18 17:02:45 ----A---- C:\Windows\system32\mapistub.dll
2011-03-18 17:02:45 ----A---- C:\Windows\system32\mapi32.dll
2011-03-18 17:02:44 ----A---- C:\Windows\SYSWOW64\setupugc.exe
2011-03-18 17:02:44 ----A---- C:\Windows\SYSWOW64\qasf.dll
2011-03-18 17:02:44 ----A---- C:\Windows\SYSWOW64\occache.dll
2011-03-18 17:02:44 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-03-18 17:02:44 ----A---- C:\Windows\system32\msrle32.dll
2011-03-18 17:02:44 ----A---- C:\Windows\system32\iscsium.dll
2011-03-18 17:02:43 ----A---- C:\Windows\SYSWOW64\uxlib.dll
2011-03-18 17:02:43 ----A---- C:\Windows\SYSWOW64\msrating.dll
2011-03-18 17:02:43 ----A---- C:\Windows\system32\seclogon.dll
2011-03-18 17:02:43 ----A---- C:\Windows\system32\ifsutil.dll
2011-03-18 17:02:43 ----A---- C:\Windows\system32\diskraid.exe
2011-03-18 17:02:42 ----A---- C:\Windows\SYSWOW64\slwga.dll
2011-03-18 17:02:42 ----A---- C:\Windows\system32\tsbyuv.dll
2011-03-18 17:02:41 ----A---- C:\Windows\SYSWOW64\msvfw32.dll
2011-03-18 17:02:41 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2011-03-18 17:02:41 ----A---- C:\Windows\system32\drivers\umbus.sys
2011-03-18 17:02:40 ----A---- C:\Windows\SYSWOW64\nslookup.exe
2011-03-18 17:02:40 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2011-03-18 17:02:40 ----A---- C:\Windows\SYSWOW64\audiodev.dll
2011-03-18 17:02:40 ----A---- C:\Windows\system32\muifontsetup.dll
2011-03-18 17:02:39 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2011-03-18 17:02:39 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2011-03-18 17:02:39 ----A---- C:\Windows\system32\wmpshell.dll
2011-03-18 17:02:39 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2011-03-18 17:02:39 ----A---- C:\Windows\system32\rdpencom.dll
2011-03-18 17:02:39 ----A---- C:\Windows\system32\perfmon.exe
2011-03-18 17:02:39 ----A---- C:\Windows\system32\d3d10level9.dll
2011-03-18 17:02:38 ----A---- C:\Windows\SYSWOW64\WPDShServiceObj.dll
2011-03-18 17:02:38 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2011-03-18 17:02:38 ----A---- C:\Windows\SYSWOW64\DevicePairingFolder.dll
2011-03-18 17:02:37 ----A---- C:\Windows\SYSWOW64\msscp.dll
2011-03-18 17:02:37 ----A---- C:\Windows\SYSWOW64\diskraid.exe
2011-03-18 17:02:37 ----A---- C:\Windows\system32\netutils.dll
2011-03-18 17:02:37 ----A---- C:\Windows\system32\AzSqlExt.dll
2011-03-18 17:02:36 ----A---- C:\Windows\SYSWOW64\wimserv.exe
2011-03-18 17:02:35 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2011-03-18 17:02:35 ----A---- C:\Windows\SYSWOW64\rdpencom.dll
2011-03-18 17:02:35 ----A---- C:\Windows\SYSWOW64\acppage.dll
2011-03-18 17:02:35 ----A---- C:\Windows\system32\umb.dll
2011-03-18 17:02:35 ----A---- C:\Windows\system32\tlscsp.dll
2011-03-18 17:02:35 ----A---- C:\Windows\system32\qasf.dll
2011-03-18 17:02:35 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2011-03-18 17:02:35 ----A---- C:\Windows\system32\inseng.dll
2011-03-18 17:02:35 ----A---- C:\Windows\system32\dbghelp.dll
2011-03-18 17:02:34 ----A---- C:\Windows\SYSWOW64\perfmon.exe
2011-03-18 17:02:34 ----A---- C:\Windows\system32\runonce.exe
2011-03-18 17:02:34 ----A---- C:\Windows\system32\FXSAPI.dll
2011-03-18 17:02:34 ----A---- C:\Windows\system32\browser.dll
2011-03-18 17:02:34 ----A---- C:\Windows\system32\ActionQueue.dll
2011-03-18 17:02:33 ----A---- C:\Windows\SYSWOW64\remotepg.dll
2011-03-18 17:02:33 ----A---- C:\Windows\SYSWOW64\raschap.dll
2011-03-18 17:02:33 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2011-03-18 17:02:33 ----A---- C:\Windows\system32\raschap.dll
2011-03-18 17:02:33 ----A---- C:\Windows\bfsvc.exe
2011-03-18 17:02:32 ----A---- C:\Windows\SYSWOW64\QUTIL.DLL
2011-03-18 17:02:32 ----A---- C:\Windows\SYSWOW64\input.dll
2011-03-18 17:02:32 ----A---- C:\Windows\system32\wiavideo.dll
2011-03-18 17:02:31 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2011-03-18 17:02:31 ----A---- C:\Windows\SYSWOW64\ocsetapi.dll
2011-03-18 17:02:31 ----A---- C:\Windows\SYSWOW64\networkexplorer.dll
2011-03-18 17:02:31 ----A---- C:\Windows\SYSWOW64\NAPCRYPT.DLL
2011-03-18 17:02:31 ----A---- C:\Windows\system32\wpdwcn.dll
2011-03-18 17:02:31 ----A---- C:\Windows\system32\WMADMOD.DLL
2011-03-18 17:02:31 ----A---- C:\Windows\system32\syssetup.dll
2011-03-18 17:02:30 ----A---- C:\Windows\SYSWOW64\vpnikeapi.dll
2011-03-18 17:02:30 ----A---- C:\Windows\SYSWOW64\UserAccountControlSettings.dll
2011-03-18 17:02:30 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2011-03-18 17:02:30 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2011-03-18 17:02:30 ----A---- C:\Windows\system32\MdSched.exe
2011-03-18 17:02:29 ----A---- C:\Windows\SYSWOW64\wmpdxm.dll
2011-03-18 17:02:29 ----A---- C:\Windows\SYSWOW64\onexui.dll
2011-03-18 17:02:29 ----A---- C:\Windows\SYSWOW64\iTVData.dll
2011-03-18 17:02:29 ----A---- C:\Windows\system32\WMVSDECD.DLL
2011-03-18 17:02:29 ----A---- C:\Windows\system32\vdsbas.dll
2011-03-18 17:02:29 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2011-03-18 17:02:28 ----A---- C:\Windows\SYSWOW64\wpdwcn.dll
2011-03-18 17:02:28 ----A---- C:\Windows\SYSWOW64\vdsbas.dll
2011-03-18 17:02:28 ----A---- C:\Windows\SYSWOW64\runonce.exe
2011-03-18 17:02:28 ----A---- C:\Windows\system32\Mcx2Svc.dll
2011-03-18 17:02:27 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2011-03-18 17:02:27 ----A---- C:\Windows\SYSWOW64\logagent.exe
2011-03-18 17:02:27 ----A---- C:\Windows\SYSWOW64\inseng.dll
2011-03-18 17:02:27 ----A---- C:\Windows\SYSWOW64\dxdiagn.dll
2011-03-18 17:02:27 ----A---- C:\Windows\system32\nltest.exe
2011-03-18 17:02:27 ----A---- C:\Windows\system32\mstask.dll
2011-03-18 17:02:27 ----A---- C:\Windows\system32\drivers\rmcast.sys
2011-03-18 17:02:27 ----A---- C:\Windows\system32\bitsadmin.exe
2011-03-18 17:02:26 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2011-03-18 17:02:26 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2011-03-18 17:02:26 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2011-03-18 17:02:25 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2011-03-18 17:02:25 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2011-03-18 17:02:25 ----A---- C:\Windows\system32\vss_ps.dll
2011-03-18 17:02:25 ----A---- C:\Windows\system32\tabcal.exe
2011-03-18 17:02:25 ----A---- C:\Windows\system32\shacct.dll
2011-03-18 17:02:25 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2011-03-18 17:02:25 ----A---- C:\Windows\system32\cscapi.dll
2011-03-18 17:02:24 ----A---- C:\Windows\SYSWOW64\wmdrmdev.dll
2011-03-18 17:02:24 ----A---- C:\Windows\SYSWOW64\shacct.dll
2011-03-18 17:02:23 ----A---- C:\Windows\SYSWOW64\wmpshell.dll
2011-03-18 17:02:23 ----A---- C:\Windows\SYSWOW64\lsmproxy.dll
2011-03-18 17:02:23 ----A---- C:\Windows\SYSWOW64\bitsadmin.exe
2011-03-18 17:02:23 ----A---- C:\Windows\system32\WPDSp.dll
2011-03-18 17:02:23 ----A---- C:\Windows\system32\wmdrmnet.dll
2011-03-18 17:02:23 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2011-03-18 17:02:23 ----A---- C:\Windows\system32\qcap.dll
2011-03-18 17:02:23 ----A---- C:\Windows\system32\mssphtb.dll
2011-03-18 17:02:23 ----A---- C:\Windows\system32\logman.exe
2011-03-18 17:02:22 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2011-03-18 17:02:22 ----A---- C:\Windows\SYSWOW64\unimdmat.dll
2011-03-18 17:02:22 ----A---- C:\Windows\SYSWOW64\sqlcese30.dll
2011-03-18 17:02:22 ----A---- C:\Windows\SYSWOW64\rdpd3d.dll
2011-03-18 17:02:22 ----A---- C:\Windows\SYSWOW64\iscsium.dll
2011-03-18 17:02:22 ----A---- C:\Windows\system32\wudriver.dll
2011-03-18 17:02:22 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2011-03-18 17:02:22 ----A---- C:\Windows\system32\msnetobj.dll
2011-03-18 17:02:21 ----A---- C:\Windows\SYSWOW64\mprapi.dll
2011-03-18 17:02:21 ----A---- C:\Windows\system32\secproc_ssp.dll
2011-03-18 17:02:21 ----A---- C:\Windows\system32\qdv.dll
2011-03-18 17:02:21 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2011-03-18 17:02:20 ----A---- C:\Windows\SYSWOW64\PortableDeviceSyncProvider.dll
2011-03-18 17:02:20 ----A---- C:\Windows\SYSWOW64\pdh.dll
2011-03-18 17:02:20 ----A---- C:\Windows\SYSWOW64\OpcServices.dll
2011-03-18 17:02:20 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2011-03-18 17:02:20 ----A---- C:\Windows\system32\spbcd.dll
2011-03-18 17:02:20 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-03-18 17:02:19 ----A---- C:\Windows\SYSWOW64\WPDSp.dll
2011-03-18 17:02:19 ----A---- C:\Windows\SYSWOW64\srvcli.dll
2011-03-18 17:02:19 ----A---- C:\Windows\SYSWOW64\PortableDeviceStatus.dll
2011-03-18 17:02:19 ----A---- C:\Windows\SYSWOW64\olethk32.dll
2011-03-18 17:02:19 ----A---- C:\Windows\SYSWOW64\ncryptui.dll
2011-03-18 17:02:19 ----A---- C:\Windows\SYSWOW64\logman.exe
2011-03-18 17:02:19 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2011-03-18 17:02:19 ----A---- C:\Windows\system32\fphc.dll
2011-03-18 17:02:19 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2011-03-18 17:02:19 ----A---- C:\Windows\system32\dot3ui.dll
2011-03-18 17:02:18 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2011-03-18 17:02:18 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL
2011-03-18 17:02:18 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2011-03-18 17:02:18 ----A---- C:\Windows\system32\takeown.exe
2011-03-18 17:02:18 ----A---- C:\Windows\system32\PnPUnattend.exe
2011-03-18 17:02:17 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2011-03-18 17:02:17 ----A---- C:\Windows\SYSWOW64\utildll.dll
2011-03-18 17:02:17 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-03-18 17:02:17 ----A---- C:\Windows\SYSWOW64\mapistub.dll
2011-03-18 17:02:17 ----A---- C:\Windows\SYSWOW64\mapi32.dll
2011-03-18 17:02:17 ----A---- C:\Windows\system32\WMPhoto.dll
2011-03-18 17:02:17 ----A---- C:\Windows\system32\setbcdlocale.dll
2011-03-18 17:02:17 ----A---- C:\Windows\system32\amstream.dll
2011-03-18 17:02:16 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2011-03-18 17:02:16 ----A---- C:\Windows\SYSWOW64\fphc.dll
2011-03-18 17:02:16 ----A---- C:\Windows\SYSWOW64\dot3msm.dll
2011-03-18 17:02:16 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2011-03-18 17:02:15 ----A---- C:\Windows\SYSWOW64\wiavideo.dll
2011-03-18 17:02:15 ----A---- C:\Windows\SYSWOW64\takeown.exe
2011-03-18 17:02:15 ----A---- C:\Windows\system32\vfwwdm32.dll
2011-03-18 17:02:15 ----A---- C:\Windows\system32\EhStorAPI.dll
2011-03-18 17:02:14 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2011-03-18 17:02:14 ----A---- C:\Windows\SYSWOW64\wmdrmnet.dll
2011-03-18 17:02:14 ----A---- C:\Windows\SYSWOW64\sqmapi.dll
2011-03-18 17:02:14 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2011-03-18 17:02:14 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2011-03-18 17:02:14 ----A---- C:\Windows\system32\netapi32.dll
2011-03-18 17:02:14 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2011-03-18 17:02:13 ----A---- C:\Windows\SYSWOW64\qdv.dll
2011-03-18 17:02:13 ----A---- C:\Windows\SYSWOW64\EhStorAPI.dll
2011-03-18 17:02:13 ----A---- C:\Windows\system32\shimgvw.dll
2011-03-18 17:02:13 ----A---- C:\Windows\system32\QCLIPROV.DLL
2011-03-18 17:02:13 ----A---- C:\Windows\system32\nrpsrv.dll
2011-03-18 17:02:13 ----A---- C:\Windows\system32\djoin.exe
2011-03-18 17:02:13 ----A---- C:\Windows\system32\cmstp.exe
2011-03-18 17:02:13 ----A---- C:\Windows\system32\CertPolEng.dll
2011-03-18 17:02:12 ----A---- C:\Windows\system32\WUDFHost.exe
2011-03-18 17:02:12 ----A---- C:\Windows\system32\iasrecst.dll
2011-03-18 17:02:11 ----A---- C:\Windows\SYSWOW64\sppinst.dll
2011-03-18 17:02:11 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2011-03-18 17:02:11 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2011-03-18 17:02:11 ----A---- C:\Windows\system32\WUDFx.dll
2011-03-18 17:02:11 ----A---- C:\Windows\system32\WavDest.dll
2011-03-18 17:02:10 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2011-03-18 17:02:10 ----A---- C:\Windows\SYSWOW64\QCLIPROV.DLL
2011-03-18 17:02:10 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2011-03-18 17:02:10 ----A---- C:\Windows\SYSWOW64\cmstp.exe
2011-03-18 17:02:10 ----A---- C:\Windows\SYSWOW64\cca.dll
2011-03-18 17:02:10 ----A---- C:\Windows\system32\drivers\usbser.sys
2011-03-18 17:02:09 ----A---- C:\Windows\SYSWOW64\wsnmp32.dll
2011-03-18 17:02:09 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2011-03-18 17:02:09 ----A---- C:\Windows\SYSWOW64\vfwwdm32.dll
2011-03-18 17:02:09 ----A---- C:\Windows\SYSWOW64\pdhui.dll
2011-03-18 17:02:09 ----A---- C:\Windows\SYSWOW64\MuiUnattend.exe
2011-03-18 17:02:09 ----A---- C:\Windows\system32\MultiDigiMon.exe
2011-03-18 17:02:09 ----A---- C:\Windows\system32\KMSVC.DLL
2011-03-18 17:02:09 ----A---- C:\Windows\system32\fdProxy.dll
2011-03-18 17:02:09 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2011-03-18 17:02:09 ----A---- C:\Windows\system32\drivers\pacer.sys
2011-03-18 17:02:08 ----A---- C:\Windows\SYSWOW64\setupcln.dll
2011-03-18 17:02:08 ----A---- C:\Windows\system32\wuauclt.exe
2011-03-18 17:02:08 ----A---- C:\Windows\system32\relog.exe
2011-03-18 17:02:08 ----A---- C:\Windows\system32\mydocs.dll
2011-03-18 17:02:07 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2011-03-18 17:02:07 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2011-03-18 17:02:07 ----A---- C:\Windows\SYSWOW64\iasrecst.dll
2011-03-18 17:02:07 ----A---- C:\Windows\SYSWOW64\AzSqlExt.dll
2011-03-18 17:02:07 ----A---- C:\Windows\system32\sscore.dll
2011-03-18 17:02:07 ----A---- C:\Windows\system32\iscsicli.exe
2011-03-18 17:02:07 ----A---- C:\Windows\system32\diskpart.exe
2011-03-18 17:02:06 ----A---- C:\Windows\SYSWOW64\relog.exe
2011-03-18 17:02:06 ----A---- C:\Windows\SYSWOW64\netiougc.exe
2011-03-18 17:02:06 ----A---- C:\Windows\system32\mobsync.exe
2011-03-18 17:02:06 ----A---- C:\Windows\system32\BWUnpairElevated.dll
2011-03-18 17:02:05 ----A---- C:\Windows\SYSWOW64\wkscli.dll
2011-03-18 17:02:05 ----A---- C:\Windows\SYSWOW64\spbcd.dll
2011-03-18 17:02:05 ----A---- C:\Windows\SYSWOW64\mydocs.dll
2011-03-18 17:02:05 ----A---- C:\Windows\SYSWOW64\iscsicli.exe
2011-03-18 17:02:05 ----A---- C:\Windows\SYSWOW64\amstream.dll
2011-03-18 17:02:05 ----A---- C:\Windows\system32\msdmo.dll
2011-03-18 17:02:05 ----A---- C:\Windows\system32\itircl.dll
2011-03-18 17:02:05 ----A---- C:\Windows\system32\dot3msm.dll
2011-03-18 17:02:04 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2011-03-18 17:02:04 ----A---- C:\Windows\SYSWOW64\resutils.dll
2011-03-18 17:02:04 ----A---- C:\Windows\SYSWOW64\rastapi.dll
2011-03-18 17:02:04 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2011-03-18 17:02:04 ----A---- C:\Windows\SYSWOW64\itircl.dll
2011-03-18 17:02:04 ----A---- C:\Windows\SYSWOW64\diskpart.exe
2011-03-18 17:02:04 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2011-03-18 17:02:04 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2011-03-18 17:02:04 ----A---- C:\Windows\system32\browcli.dll
2011-03-18 17:02:03 ----A---- C:\Windows\SYSWOW64\syssetup.dll
2011-03-18 17:02:03 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2011-03-18 17:02:03 ----A---- C:\Windows\SYSWOW64\CertPolEng.dll
2011-03-18 17:02:03 ----A---- C:\Windows\system32\wuapp.exe
2011-03-18 17:02:03 ----A---- C:\Windows\system32\FXSTIFF.dll
2011-03-18 17:02:02 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2011-03-18 17:02:02 ----A---- C:\Windows\SYSWOW64\wmpps.dll
2011-03-18 17:02:02 ----A---- C:\Windows\SYSWOW64\secur32.dll
2011-03-18 17:02:02 ----A---- C:\Windows\system32\prevhost.exe
2011-03-18 17:02:02 ----A---- C:\Windows\system32\mciqtz32.dll
2011-03-18 17:02:02 ----A---- C:\Windows\system32\choice.exe
2011-03-18 17:02:02 ----A---- C:\Windows\system32\findstr.exe
2011-03-18 17:02:02 ----A---- C:\Windows\system32\eappgnui.dll
2011-03-18 17:02:01 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2011-03-18 17:02:01 ----A---- C:\Windows\SYSWOW64\tlscsp.dll
2011-03-18 17:02:01 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2011-03-18 17:02:01 ----A---- C:\Windows\SYSWOW64\ReAgentc.exe
2011-03-18 17:02:01 ----A---- C:\Windows\SYSWOW64\findstr.exe
2011-03-18 17:02:01 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2011-03-18 17:02:01 ----A---- C:\Windows\system32\imagehlp.dll
2011-03-18 17:02:01 ----A---- C:\Windows\system32\drivers\tunnel.sys
2011-03-18 17:02:00 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2011-03-18 17:02:00 ----A---- C:\Windows\SYSWOW64\netutils.dll
2011-03-18 17:02:00 ----A---- C:\Windows\system32\sppc.dll
2011-03-18 17:02:00 ----A---- C:\Windows\system32\onexui.dll
2011-03-18 17:02:00 ----A---- C:\Windows\system32\luainstall.dll
2011-03-18 17:01:59 ----A---- C:\Windows\SYSWOW64\mciqtz32.dll
2011-03-18 17:01:58 ----A---- C:\Windows\SYSWOW64\mobsync.exe
2011-03-18 17:01:58 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2011-03-18 17:01:57 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2011-03-18 17:01:57 ----A---- C:\Windows\system32\schedcli.dll
2011-03-18 17:01:57 ----A---- C:\Windows\system32\drivers\dfsc.sys
2011-03-18 17:01:56 ----A---- C:\Windows\SYSWOW64\muifontsetup.dll
2011-03-18 17:01:56 ----A---- C:\Windows\SYSWOW64\cabinet.dll
2011-03-18 17:01:56 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2011-03-18 17:01:56 ----A---- C:\Windows\system32\repair-bde.exe
2011-03-18 17:01:56 ----A---- C:\Windows\system32\manage-bde.exe
2011-03-18 17:01:56 ----A---- C:\Windows\system32\inetmib1.dll
2011-03-18 17:01:55 ----A---- C:\Windows\SYSWOW64\sppc.dll
2011-03-18 17:01:55 ----A---- C:\Windows\SYSWOW64\spopk.dll
2011-03-18 17:01:55 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2011-03-18 17:01:55 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2011-03-18 17:01:55 ----A---- C:\Windows\system32\spopk.dll
2011-03-18 17:01:54 ----A---- C:\Windows\SYSWOW64\unlodctr.exe
2011-03-18 17:01:54 ----A---- C:\Windows\SYSWOW64\shimgvw.dll
2011-03-18 17:01:54 ----A---- C:\Windows\SYSWOW64\msdmo.dll
2011-03-18 17:01:54 ----A---- C:\Windows\SYSWOW64\luainstall.dll
2011-03-18 17:01:54 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2011-03-18 17:01:54 ----A---- C:\Windows\system32\RDPENCDD.dll
2011-03-18 17:01:54 ----A---- C:\Windows\system32\profprov.dll
2011-03-18 17:01:53 ----A---- C:\Windows\SYSWOW64\rdprefdrvapi.dll
2011-03-18 17:01:53 ----A---- C:\Windows\SYSWOW64\inetmib1.dll
2011-03-18 17:01:53 ----A---- C:\Windows\system32\odbcconf.dll
2011-03-18 17:01:53 ----A---- C:\Windows\system32\fixmapi.exe
2011-03-18 17:01:52 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2011-03-18 17:01:52 ----A---- C:\Windows\SYSWOW64\odbcconf.dll
2011-03-18 17:01:52 ----A---- C:\Windows\SYSWOW64\browcli.dll
2011-03-18 17:01:52 ----A---- C:\Windows\system32\UIRibbonRes.dll
2011-03-18 17:01:52 ----A---- C:\Windows\system32\FXSMON.dll
2011-03-18 17:01:52 ----A---- C:\Windows\system32\elsTrans.dll
2011-03-18 17:01:51 ----A---- C:\Windows\SYSWOW64\wups.dll
2011-03-18 17:01:51 ----A---- C:\Windows\SYSWOW64\perfts.dll
2011-03-18 17:01:51 ----A---- C:\Windows\system32\wshbth.dll
2011-03-18 17:01:51 ----A---- C:\Windows\system32\TRAPI.dll
2011-03-18 17:01:51 ----A---- C:\Windows\system32\msfeedssync.exe
2011-03-18 17:01:51 ----A---- C:\Windows\system32\drivers\tdi.sys
2011-03-18 17:01:50 ----A---- C:\Windows\SYSWOW64\imm32.dll
2011-03-18 17:01:50 ----A---- C:\Windows\system32\napdsnap.dll
2011-03-18 17:01:50 ----A---- C:\Windows\system32\LogonUI.exe
2011-03-18 17:01:50 ----A---- C:\Windows\system32\dsauth.dll
2011-03-18 17:01:49 ----A---- C:\Windows\SYSWOW64\TRAPI.dll
2011-03-18 17:01:49 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-03-18 17:01:49 ----A---- C:\Windows\SYSWOW64\elsTrans.dll
2011-03-18 17:01:49 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2011-03-18 17:01:49 ----A---- C:\Windows\system32\FXSUNATD.exe
2011-03-18 17:01:49 ----A---- C:\Windows\system32\cscdll.dll
2011-03-18 17:01:49 ----A---- C:\Windows\system32\bitsperf.dll
2011-03-18 17:01:48 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2011-03-18 17:01:48 ----A---- C:\Windows\SYSWOW64\schedcli.dll
2011-03-18 17:01:48 ----A---- C:\Windows\SYSWOW64\napdsnap.dll
2011-03-18 17:01:48 ----A---- C:\Windows\SYSWOW64\dsauth.dll
2011-03-18 17:01:48 ----A---- C:\Windows\SYSWOW64\bitsperf.dll
2011-03-18 17:01:48 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2011-03-18 17:01:47 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2011-03-18 17:01:47 ----A---- C:\Windows\system32\wups2.dll
2011-03-18 17:01:47 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2011-03-18 17:01:46 ----A---- C:\Windows\system32\wsdchngr.dll
2011-03-18 17:01:45 ----A---- C:\Windows\SYSWOW64\sscore.dll
2011-03-18 17:01:45 ----A---- C:\Windows\system32\wups.dll
2011-03-18 17:01:45 ----A---- C:\Windows\system32\shgina.dll
2011-03-18 17:01:44 ----A---- C:\Windows\SYSWOW64\wsdchngr.dll
2011-03-18 17:01:44 ----A---- C:\Windows\SYSWOW64\shgina.dll
2011-03-18 17:01:44 ----A---- C:\Windows\SYSWOW64\riched32.dll
2011-03-18 17:01:43 ----A---- C:\Windows\system32\wow64win.dll
2011-03-18 17:01:43 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2011-03-18 17:01:42 ----A---- C:\Windows\system32\wshirda.dll
2011-03-18 17:01:42 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2011-03-18 17:01:41 ----A---- C:\Windows\system32\wow64cpu.dll
2011-03-18 17:01:40 ----A---- C:\Windows\system32\drivers\hidusb.sys
2011-03-18 17:01:40 ----A---- C:\Windows\system32\drivers\appid.sys
2011-03-18 17:01:39 ----A---- C:\Windows\SYSWOW64\wshirda.dll
2011-03-18 17:01:39 ----A---- C:\Windows\system32\rdpcfgex.dll
2011-03-18 17:01:38 ----A---- C:\Windows\system32\riched32.dll
2011-03-18 17:01:38 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2011-03-18 17:01:36 ----A---- C:\Windows\system32\spwmp.dll
2011-03-18 17:01:36 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2011-03-18 17:01:36 ----A---- C:\Windows\system32\browseui.dll
2011-03-18 17:01:33 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2011-03-18 17:01:33 ----A---- C:\Windows\SYSWOW64\C_ISCII.DLL
2011-03-18 17:01:33 ----A---- C:\Windows\SYSWOW64\browseui.dll
2011-03-18 17:01:33 ----A---- C:\Windows\system32\dxmasf.dll
2011-03-18 17:01:33 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2011-03-18 17:01:33 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2011-03-18 17:01:33 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2011-03-18 17:01:33 ----A---- C:\Windows\system32\drivers\cdrom.sys
2011-03-18 17:01:33 ----A---- C:\Windows\system32\C_ISCII.DLL
2011-03-18 17:01:32 ----AH---- C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
2011-03-18 17:01:32 ----A---- C:\Windows\SYSWOW64\shunimpl.dll
2011-03-18 17:01:32 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2011-03-18 17:01:32 ----A---- C:\Windows\system32\shunimpl.dll
2011-03-18 17:01:32 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2011-03-18 17:01:32 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2011-03-18 17:01:32 ----A---- C:\Windows\system32\drivers\scfilter.sys
2011-03-18 17:01:31 ----A---- C:\Windows\SYSWOW64\KBDTUQ.DLL
2011-03-18 17:01:31 ----A---- C:\Windows\SYSWOW64\KBDTUF.DLL
2011-03-18 17:01:31 ----A---- C:\Windows\SYSWOW64\KBDSG.DLL
2011-03-18 17:01:31 ----A---- C:\Windows\SYSWOW64\kbdlk41a.dll
2011-03-18 17:01:31 ----A---- C:\Windows\SYSWOW64\KBDGR1.DLL
2011-03-18 17:01:31 ----A---- C:\Windows\system32\KBDTUQ.DLL
2011-03-18 17:01:31 ----A---- C:\Windows\system32\KBDTUF.DLL
2011-03-18 17:01:31 ----A---- C:\Windows\system32\KBDSG.DLL
2011-03-18 17:01:31 ----A---- C:\Windows\system32\KBDSF.DLL
2011-03-18 17:01:31 ----A---- C:\Windows\system32\KBDPO.DLL
2011-03-18 17:01:31 ----A---- C:\Windows\system32\KBDNEPR.DLL
2011-03-18 17:01:31 ----A---- C:\Windows\system32\kbdlk41a.dll
2011-03-18 17:01:31 ----A---- C:\Windows\system32\KBDINTAM.DLL
2011-03-18 17:01:31 ----A---- C:\Windows\system32\KBDINBEN.DLL
2011-03-18 17:01:30 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2011-03-18 17:01:30 ----A---- C:\Windows\SYSWOW64\KBDGKL.DLL
2011-03-18 17:01:30 ----A---- C:\Windows\system32\KBDGR1.DLL
2011-03-18 17:01:30 ----A---- C:\Windows\system32\KBDGKL.DLL
2011-03-18 17:01:29 ----A---- C:\Windows\system32\wmploc.DLL
2011-03-18 17:01:28 ----A---- C:\Windows\SYSWOW64\KBDUS.DLL
2011-03-18 17:01:28 ----A---- C:\Windows\SYSWOW64\KBDUGHR1.DLL
2011-03-18 17:01:28 ----A---- C:\Windows\SYSWOW64\KBDTURME.DLL
2011-03-18 17:01:28 ----A---- C:\Windows\SYSWOW64\KBDTAJIK.DLL
2011-03-18 17:01:28 ----A---- C:\Windows\SYSWOW64\KBDMON.DLL
2011-03-18 17:01:28 ----A---- C:\Windows\SYSWOW64\KBDMAORI.DLL
2011-03-18 17:01:28 ----A---- C:\Windows\SYSWOW64\KBDINTEL.DLL
2011-03-18 17:01:28 ----A---- C:\Windows\SYSWOW64\KBDINHIN.DLL
2011-03-18 17:01:28 ----A---- C:\Windows\SYSWOW64\KBDGEO.DLL
2011-03-18 17:01:28 ----A---- C:\Windows\SYSWOW64\KBDCZ1.DLL
2011-03-18 17:01:28 ----A---- C:\Windows\SYSWOW64\KBDBLR.DLL
2011-03-18 17:01:28 ----A---- C:\Windows\system32\KBDUS.DLL
2011-03-18 17:01:28 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2011-03-18 17:01:28 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2011-03-18 17:01:28 ----A---- C:\Windows\system32\KBDMON.DLL
2011-03-18 17:01:28 ----A---- C:\Windows\system32\KBDGEO.DLL
2011-03-18 17:01:28 ----A---- C:\Windows\system32\KBDCZ1.DLL
2011-03-18 17:01:27 ----A---- C:\Windows\SYSWOW64\tzres.dll
2011-03-18 17:01:27 ----A---- C:\Windows\SYSWOW64\KBDSF.DLL
2011-03-18 17:01:27 ----A---- C:\Windows\SYSWOW64\KBDPO.DLL
2011-03-18 17:01:27 ----A---- C:\Windows\SYSWOW64\KBDNEPR.DLL
2011-03-18 17:01:27 ----A---- C:\Windows\SYSWOW64\KBDLT1.DLL
2011-03-18 17:01:27 ----A---- C:\Windows\SYSWOW64\KBDINTAM.DLL
2011-03-18 17:01:27 ----A---- C:\Windows\SYSWOW64\KBDINORI.DLL
2011-03-18 17:01:27 ----A---- C:\Windows\SYSWOW64\KBDINMAR.DLL
2011-03-18 17:01:27 ----A---- C:\Windows\SYSWOW64\KBDINKAN.DLL
2011-03-18 17:01:27 ----A---- C:\Windows\SYSWOW64\KBDINBEN.DLL
2011-03-18 17:01:27 ----A---- C:\Windows\SYSWOW64\KBDBULG.DLL
2011-03-18 17:01:27 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2011-03-18 17:01:27 ----A---- C:\Windows\SYSWOW64\dpnaddr.dll
2011-03-18 17:01:27 ----A---- C:\Windows\system32\tzres.dll
2011-03-18 17:01:27 ----A---- C:\Windows\system32\nlsbres.dll
2011-03-18 17:01:27 ----A---- C:\Windows\system32\KBDTURME.DLL
2011-03-18 17:01:27 ----A---- C:\Windows\system32\KBDMAORI.DLL
2011-03-18 17:01:27 ----A---- C:\Windows\system32\KBDLT1.DLL
2011-03-18 17:01:27 ----A---- C:\Windows\system32\KBDINTEL.DLL
2011-03-18 17:01:27 ----A---- C:\Windows\system32\KBDINORI.DLL
2011-03-18 17:01:27 ----A---- C:\Windows\system32\KBDINMAR.DLL
2011-03-18 17:01:27 ----A---- C:\Windows\system32\KBDINKAN.DLL
2011-03-18 17:01:27 ----A---- C:\Windows\system32\KBDINHIN.DLL
2011-03-18 17:01:27 ----A---- C:\Windows\system32\KBDBULG.DLL
2011-03-18 17:01:27 ----A---- C:\Windows\system32\KBDBLR.DLL
2011-03-18 17:01:27 ----A---- C:\Windows\system32\KBDBASH.DLL
2011-03-18 17:01:27 ----A---- C:\Windows\system32\dpnaddr.dll
2011-03-18 17:01:26 ----A---- C:\Windows\SYSWOW64\spwizres.dll
2011-03-18 17:01:26 ----A---- C:\Windows\SYSWOW64\pifmgr.dll
2011-03-18 17:01:26 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2011-03-18 17:01:26 ----A---- C:\Windows\system32\spwizres.dll
2011-03-18 17:01:26 ----A---- C:\Windows\system32\pifmgr.dll
2011-03-18 17:01:26 ----A---- C:\Windows\system32\BlbEvents.dll
2011-03-18 17:00:27 ----A---- C:\Windows\SYSWOW64\wdscore.dll
2011-03-18 17:00:27 ----A---- C:\Windows\SYSWOW64\PkgMgr.exe
2011-03-18 17:00:00 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2011-03-18 17:00:00 ----A---- C:\Windows\SYSWOW64\dpx.dll
2011-03-18 16:59:52 ----A---- C:\Windows\SYSWOW64\wbemcomn.dll
2011-03-18 16:56:19 ----A---- C:\Windows\system32\wmicmiplugin.dll
2011-03-18 16:56:19 ----A---- C:\Windows\system32\wbemcomn.dll
2011-03-18 16:55:42 ----A---- C:\Windows\system32\SmiEngine.dll
2011-03-18 16:55:34 ----A---- C:\Windows\system32\PkgMgr.exe
2011-03-18 16:55:00 ----A---- C:\Windows\system32\drvstore.dll
2011-03-18 16:55:00 ----A---- C:\Windows\system32\dpx.dll
2011-03-18 15:43:11 ----D---- C:\Windows\system32\EventProviders
2011-03-18 00:52:15 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2011-03-18 00:52:14 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2011-03-18 00:52:12 ----D---- C:\Users\SEVEN\AppData\Roaming\PunkBuster
2011-03-09 15:50:07 ----D---- C:\Windows\8AAB4176A747493AA42CB63CFADFD8E3.TMP
2011-03-09 11:06:45 ----A---- C:\Windows\system32\FntCache.dll
2011-03-09 11:06:44 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2011-03-09 11:06:44 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2011-03-09 11:06:44 ----A---- C:\Windows\system32\DWrite.dll
2011-03-09 11:06:44 ----A---- C:\Windows\system32\d2d1.dll
2011-03-09 11:06:42 ----A---- C:\Windows\system32\EncDec.dll
2011-03-09 11:06:41 ----A---- C:\Windows\SYSWOW64\sbe.dll
2011-03-09 11:06:41 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2011-03-09 11:06:41 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2011-03-09 11:06:41 ----A---- C:\Windows\system32\sbe.dll
2011-03-09 11:06:41 ----A---- C:\Windows\system32\CPFilters.dll
2011-03-06 21:58:10 ----A---- C:\Windows\SYSWOW64\CmdLineExt_x64.dll
2011-03-06 21:57:36 ----D---- C:\Windows\95FC26FB19FD4A96BBB1B1062E8648F5.TMP
2011-03-06 21:57:02 ----D---- C:\ProgramData\THQ
2011-03-06 14:14:11 ----D---- C:\Windows\8A809006C25A4A3A9DAB94659BCDB107.TMP
2011-03-05 23:01:16 ----A---- C:\Windows\treeskp.sys
2011-03-05 21:14:05 ----D---- C:\Users\SEVEN\AppData\Roaming\Ahead
2011-03-05 21:09:51 ----D---- C:\ProgramData\Nero
2011-03-05 21:09:51 ----D---- C:\Program Files (x86)\Nero

======List of files/folders modified in the last 1 months======

2011-04-02 23:54:09 ----RD---- C:\Program Files
2011-04-02 23:52:59 ----D---- C:\Users\SEVEN\AppData\Roaming\ICQ
2011-04-02 23:36:56 ----RD---- C:\Program Files (x86)
2011-04-02 23:34:48 ----SD---- C:\Users\SEVEN\AppData\Roaming\Microsoft
2011-04-02 23:32:01 ----SHD---- C:\System Volume Information
2011-04-02 23:25:26 ----D---- C:\Windows\System32
2011-04-02 23:25:26 ----D---- C:\Windows\inf
2011-04-02 23:25:26 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-04-02 23:22:56 ----D---- C:\Windows\Temp
2011-04-02 23:21:21 ----D---- C:\Windows\system32\Tasks
2011-04-02 23:21:19 ----D---- C:\Windows\Tasks
2011-04-02 23:19:54 ----D---- C:\Windows\system32\config
2011-04-02 23:19:24 ----D---- C:\Windows\SYSWOW64\drivers
2011-04-02 11:02:40 ----D---- C:\Windows\system32\catroot2
2011-04-02 11:02:23 ----D---- C:\Windows
2011-04-02 10:59:04 ----D---- C:\Program Files (x86)\Steam
2011-04-02 10:59:02 ----D---- C:\Users\SEVEN\AppData\Roaming\Skype
2011-04-01 21:21:40 ----D---- C:\Windows\SysWOW64
2011-04-01 21:19:38 ----D---- C:\Windows\system32\drivers
2011-04-01 21:18:09 ----D---- C:\Windows\system32\NDF
2011-04-01 16:49:20 ----D---- C:\Program Files\CCleaner
2011-03-31 20:26:57 ----SHD---- C:\Windows\Installer
2011-03-31 20:26:56 ----SHD---- C:\Config.Msi
2011-03-31 19:20:08 ----HD---- C:\ProgramData
2011-03-31 18:46:52 ----D---- C:\Program Files (x86)\DAEMON Tools Toolbar
2011-03-31 18:46:45 ----D---- C:\Windows\system32\DriverStore
2011-03-31 18:46:45 ----D---- C:\Windows\system32\catroot
2011-03-30 21:24:16 ----D---- C:\Windows\debug
2011-03-29 21:55:10 ----RSD---- C:\Windows\assembly
2011-03-29 17:43:07 ----D---- C:\Windows\Prefetch
2011-03-26 20:23:03 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-03-24 11:01:07 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-03-20 04:09:55 ----D---- C:\Windows\rescache
2011-03-20 02:14:38 ----D---- C:\Program Files (x86)\Common Files
2011-03-19 19:30:10 ----D---- C:\Windows\Microsoft.NET
2011-03-19 11:07:25 ----D---- C:\Windows\winsxs
2011-03-19 04:15:07 ----D---- C:\Program Files (x86)\Windows Sidebar
2011-03-19 04:15:07 ----D---- C:\Program Files (x86)\Windows Mail
2011-03-19 04:15:06 ----D---- C:\Program Files (x86)\Internet Explorer
2011-03-19 04:15:05 ----D---- C:\Program Files (x86)\Windows Portable Devices
2011-03-19 04:15:04 ----D---- C:\Program Files (x86)\Windows Media Player
2011-03-19 04:15:03 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2011-03-19 04:14:47 ----D---- C:\Program Files\Windows Sidebar
2011-03-19 04:14:47 ----D---- C:\Program Files\Windows Mail
2011-03-19 04:14:46 ----D---- C:\Program Files\DVD Maker
2011-03-19 04:14:45 ----D---- C:\Program Files\Internet Explorer
2011-03-19 04:14:43 ----D---- C:\Program Files\Windows Portable Devices
2011-03-19 04:14:43 ----D---- C:\Program Files\Windows Media Player
2011-03-19 04:14:41 ----D---- C:\Program Files\Windows Photo Viewer
2011-03-19 04:14:41 ----D---- C:\Program Files\Windows Journal
2011-03-19 04:14:25 ----D---- C:\Program Files\Windows Defender
2011-03-19 04:14:24 ----D---- C:\Windows\servicing
2011-03-19 04:14:22 ----D---- C:\Windows\ehome
2011-03-19 04:13:21 ----D---- C:\Windows\SYSWOW64\oobe
2011-03-19 04:13:21 ----D---- C:\Windows\SYSWOW64\da-DK
2011-03-19 04:13:19 ----D---- C:\Windows\SYSWOW64\migration
2011-03-19 04:13:17 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2011-03-19 04:13:16 ----D---- C:\Windows\SYSWOW64\Setup
2011-03-19 04:13:15 ----D---- C:\Windows\SYSWOW64\cs
2011-03-19 04:13:09 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-03-19 04:13:03 ----D---- C:\Windows\SYSWOW64\sppui
2011-03-19 04:13:03 ----D---- C:\Windows\SYSWOW64\manifeststore
2011-03-19 04:13:03 ----D---- C:\Windows\SYSWOW64\es-ES
2011-03-19 04:13:01 ----D---- C:\Windows\SYSWOW64\wbem
2011-03-19 04:12:57 ----D---- C:\Windows\SYSWOW64\migwiz
2011-03-19 04:12:55 ----D---- C:\Windows\SYSWOW64\Dism
2011-03-19 04:10:44 ----D---- C:\Windows\system32\da-DK
2011-03-19 04:10:44 ----D---- C:\Windows\PolicyDefinitions
2011-03-19 04:10:43 ----D---- C:\Windows\system32\oobe
2011-03-19 04:10:43 ----D---- C:\Windows\system32\en-US
2011-03-19 04:10:40 ----D---- C:\Windows\system32\migration
2011-03-19 04:10:37 ----D---- C:\Windows\system32\Setup
2011-03-19 04:10:37 ----D---- C:\Windows\system32\cs
2011-03-19 04:10:37 ----D---- C:\Windows\system32\AdvancedInstallers
2011-03-19 04:10:32 ----D---- C:\Windows\system32\cs-CZ
2011-03-19 04:10:25 ----D---- C:\Windows\system32\manifeststore
2011-03-19 04:10:25 ----D---- C:\Windows\system32\es-ES
2011-03-19 04:10:24 ----D---- C:\Windows\system32\sppui
2011-03-19 04:10:19 ----D---- C:\Windows\system32\drivers\cs-CZ
2011-03-19 04:10:16 ----D---- C:\Windows\system32\wbem
2011-03-19 04:10:11 ----D---- C:\Windows\system32\migwiz
2011-03-19 04:10:11 ----D---- C:\Windows\system32\Dism
2011-03-19 04:08:04 ----RSD---- C:\Windows\Fonts
2011-03-19 04:08:00 ----D---- C:\Windows\AppPatch
2011-03-19 04:07:17 ----D---- C:\Windows\system32\Boot
2011-03-18 17:32:47 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2011-03-18 17:32:46 ----A---- C:\Windows\system32\msclmd.dll
2011-03-18 15:44:24 ----SD---- C:\ProgramData\Microsoft
2011-03-18 15:43:51 ----D---- C:\Program Files (x86)\Microsoft
2011-03-18 00:54:46 ----D---- C:\ProgramData\Ubisoft
2011-03-18 00:52:13 ----D---- C:\Windows\system32\LogFiles
2011-03-10 14:22:38 ----D---- C:\Program Files (x86)\ICQ7.4
2011-03-10 10:14:55 ----D---- C:\ProgramData\Microsoft Help
2011-03-10 10:04:49 ----A---- C:\Windows\system32\MRT.exe
2011-03-05 21:22:01 ----D---- C:\Users\SEVEN\AppData\Roaming\DAEMON Tools Lite

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie64.sys [2010-06-17 16440]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-03-31 526392]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2010-12-13 116568]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2011-03-18 314016]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2010-12-13 83120]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2011-03-18 43680]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-10-28 7877120]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-10-28 285696]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-06-09 1605632]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2010-07-29 28832]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-07-06 2419176]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2010-05-15 384040]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2010-01-27 231328]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-12-10 301104]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2010-04-29 38528]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S0 gssqwgvt;gssqwgvt; C:\Windows\system32\drivers\ilra.sys []
S3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys [2009-12-21 280624]
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2010-07-29 36000]
S3 ATHDFU;Atheros Valkyrie USB BootROM; C:\Windows\System32\Drivers\AthDfu.sys [2010-07-29 51872]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2010-09-24 116752]
S3 axqakzmq;axqakzmq; C:\Windows\system32\drivers\axqakzmq.sys []
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2010-07-29 295072]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2010-07-29 201376]
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2010-07-29 51872]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2010-07-29 154272]
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2010-07-29 270496]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2010-11-20 552448]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2010-11-20 80384]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-23 48488]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2010-07-30 19456]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2010-07-30 26624]
S3 nmwcdnsucx64;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsucx64.sys [2010-07-26 12800]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2010-07-26 171008]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 pwdrvio;pwdrvio; \??\C:\Windows\syswow64\pwdrvio.sys []
S3 pwdspio;pwdspio; \??\C:\Windows\syswow64\pwdspio.sys []
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-06-17 246376]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2010-07-30 9216]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2010-07-30 9216]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-10-28 203264]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2011-03-17 269480]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2010-12-13 135336]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2010-07-29 52896]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-03-25 75136]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-02-25 249648]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [2006-12-23 262144]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-30 136176]
S3 BBSvc;Bing Bar Update Service; C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
S3 NBService;NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-01-05 774144]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2010-12-08 628736]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2009-07-16 316664]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-01-30 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------

jaaaj, cela zoo i s babkou pokladni Vy jste se dal na chov konicku trojskych

Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com

• Pokud ho havet blokuje, pouzijte jeden z nasledujicich

  motji píše: Rkill EXE:
  http://download.bleepingcomputer.com/grinler/rkill.exe
  
  Rkill SCR:
  http://download.bleepingcomputer.com/grinler/rkill.scr
  
  Rkill PIF:
  http://download.bleepingcomputer.com/grinler/rkill.pif

• Ulozte nejlepena plochu a ukoncete vsechny aplikace (jinak to udela RKill za Vas)
• Spustte tradicne dvojklikem - program probehne temer okamzite a ukonci i svou cinnost
• RKill ukonci vsechny ne-systemove procesy - tedy i procesy, pod kterymi bezi havet
• Ted nerestartujte PC - prisli byste o ucinek RKillu

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

• Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
• Pokud mate Win XP spustte pod uctem Spravce\Administratora
• Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
• Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
• Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
• Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
• Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
• Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
• Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

ComboFix 11-04-02.03 - SEVEN 03.04.2011 8:58.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4091.2936 [GMT 2:00]
Spuštěný z: c:\users\SEVEN\Desktop\ComboFix.exe
AV: AntiVir Desktop *Enabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Enabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\cleansweep.exe
c:\cleansweep.exe\cleansweep.exe
c:\cleansweep.exe\config.bin
c:\users\SEVEN\AppData\Roaming\bot.exe
c:\users\SEVEN\AppData\Roaming\BOTS.exe
c:\users\SEVEN\AppData\Roaming\ctfmon.exe
c:\users\SEVEN\AppData\Roaming\data.dat
c:\users\SEVEN\AppData\Roaming\dwm.exe
c:\users\SEVEN\AppData\Roaming\chrtmp
c:\users\SEVEN\AppData\Roaming\local.exe
c:\users\SEVEN\AppData\Roaming\Microsoft\conhost.exe
c:\users\SEVEN\AppData\Roaming\scvhost.exe
c:\users\SEVEN\AppData\Roaming\services.exe
c:\users\SEVEN\AppData\Roaming\svchost.exe
c:\users\SEVEN\AppData\Roaming\update.exe
c:\users\SEVEN\AppData\Roaming\waucltwi.exe
c:\users\SEVEN\AppData\Roaming\Windows
c:\users\SEVEN\AppData\Roaming\Windows\svchost.exe
c:\users\SEVEN\AppData\Roaming\winlogon.exe
c:\windows\SysWow64\Drivers\ilra.sys
c:\windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
c:\windows\Whyjea.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-03-03 do 2011-04-03 )))))))))))))))))))))))))))))))
.
.
2011-04-03 07:13 . 2011-04-03 07:13 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-04-02 22:42 . 2011-04-02 22:42 322560 ---ha-w- c:\users\SEVEN\AppData\Roaming\mdlwk.exe
2011-04-02 22:32 . 2011-04-02 22:32 322560 ---ha-w- c:\users\SEVEN\AppData\Roaming\uvebh.exe
2011-04-02 22:16 . 2011-04-02 22:16 322560 ---ha-w- c:\users\SEVEN\AppData\Roaming\lmxaa.exe
2011-04-02 22:15 . 2011-04-02 22:15 240640 ---ha-w- c:\users\SEVEN\AppData\Roaming\daway.exe
2011-04-02 21:59 . 2011-04-02 21:59 322560 ---ha-w- c:\users\SEVEN\AppData\Roaming\keplw.exe
2011-04-02 21:59 . 2011-04-02 21:59 322560 ----a-w- c:\users\SEVEN\AppData\Roaming\virtual.exe
2011-04-02 21:54 . 2011-04-02 22:12 -------- d-----w- c:\program files\trend micro
2011-04-02 21:54 . 2011-04-02 21:54 -------- d-----w- C:\rsit
2011-04-02 21:36 . 2011-04-02 21:37 -------- d-----w- c:\program files (x86)\Ultimate Process Manager
2011-04-02 21:34 . 2011-04-02 21:34 196608 ---h--w- c:\users\SEVEN\AppData\Roaming\Microsoft\System\Services\csrss.exe
2011-04-02 20:57 . 2011-04-02 20:57 163840 ----a-w- c:\users\SEVEN\AppData\Roaming\H1VZCRUQ5J.exe
2011-04-02 20:32 . 2011-04-02 20:33 -------- d-----w- c:\users\SEVEN\AppData\Roaming\install
2011-04-02 20:32 . 2011-04-02 20:32 606208 ----a-w- c:\users\SEVEN\AppData\Roaming\paid.exe
2011-04-02 20:09 . 2011-04-02 20:09 9 ----a-w- c:\users\SEVEN\AppData\Roaming\temp2F00_l4[k8]k-o.tmp
2011-04-02 20:09 . 2011-04-02 20:09 9 ----a-w- c:\users\SEVEN\AppData\Roaming\tempF00_l4[k8]k-o.tmp
2011-04-02 19:49 . 2011-04-02 19:49 -------- d-----w- c:\users\SEVEN\AppData\Roaming\Firewallacc
2011-04-02 19:22 . 2011-04-02 19:22 446464 ----a-w- c:\users\SEVEN\AppData\Roaming\WinUpdts.exe
2011-04-02 15:13 . 2011-04-02 15:13 -------- d-----w- c:\users\SEVEN\AppData\Roaming\Internet Explorer
2011-04-01 22:19 . 2011-04-01 22:19 196608 ---h--w- c:\users\SEVEN\AppData\Roaming\mWare.exe
2011-04-01 19:21 . 2011-04-01 19:21 90112 --sha-r- c:\windows\SysWow64\bidispl2.dll
2011-04-01 17:01 . 2011-04-02 20:48 -------- d-----w- c:\users\SEVEN\AppData\Roaming\updates
2011-04-01 12:13 . 2011-04-01 12:13 -------- d-----w- c:\program files (x86)\MegaDev
2011-04-01 08:34 . 2011-03-15 05:17 8424784 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{6ABB644E-BAE2-4505-84AD-58629138AC7B}\mpengine.dll
2011-03-31 16:47 . 2011-03-31 16:47 -------- d-----w- c:\program files (x86)\DAEMON Tools Pro
2011-03-31 16:47 . 2011-03-31 17:23 -------- d-----w- c:\users\SEVEN\AppData\Roaming\DAEMON Tools Pro
2011-03-31 16:47 . 2011-03-31 16:47 -------- d-----w- c:\programdata\DAEMON Tools Pro
2011-03-31 16:19 . 2011-04-01 14:45 369 ----a-w- c:\users\SEVEN\AppData\Local\waucltwid.exe
2011-03-30 13:09 . 2011-03-30 13:09 -------- d-----w- c:\users\SEVEN\AppData\Local\Chromium
2011-03-29 20:22 . 2011-03-29 20:22 -------- d-----w- c:\users\SEVEN\AppData\Roaming\The Creative Assembly
2011-03-26 18:52 . 2011-03-26 18:52 -------- d-----w- c:\users\SEVEN\AppData\Roaming\LolClient
2011-03-26 14:38 . 2011-03-31 17:18 -------- d-----w- c:\users\SEVEN\AppData\Local\PMB Files
2011-03-26 14:38 . 2011-03-26 14:39 -------- d-----w- c:\programdata\PMB Files
2011-03-26 14:37 . 2011-03-26 14:37 -------- d-----w- c:\program files (x86)\Pando Networks
2011-03-25 10:01 . 2011-03-30 14:31 270408 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2011-03-25 10:01 . 2011-03-25 10:01 -------- d-----w- c:\users\SEVEN\AppData\Local\PunkBuster
2011-03-25 10:01 . 2011-03-25 10:01 -------- d-----w- c:\users\SEVEN\AppData\Roaming\Ubisoft
2011-03-25 09:52 . 2011-03-25 09:56 -------- d-----w- c:\users\SEVEN\AppData\Local\Ubisoft Game Launcher
2011-03-20 03:09 . 2011-03-20 03:09 -------- d-----w- c:\programdata\Symantec
2011-03-20 03:09 . 2011-03-20 06:05 -------- d-----w- c:\programdata\Norton
2011-03-20 00:18 . 2011-03-20 00:18 -------- d-----w- c:\users\SEVEN\AppData\Local\DDMSettings
2011-03-20 00:14 . 2011-04-02 19:39 -------- d-----w- c:\users\SEVEN\AppData\Roaming\DivX
2011-03-20 00:14 . 2011-03-20 00:14 -------- d-----w- c:\program files (x86)\Common Files\PX Storage Engine
2011-03-20 00:14 . 2011-03-20 00:14 -------- d-----w- c:\program files\DivX
2011-03-20 00:07 . 2011-03-20 00:15 -------- d-----w- c:\programdata\DivX
2011-03-20 00:05 . 2011-03-20 00:15 -------- d-----w- c:\program files (x86)\DivX
2011-03-20 00:05 . 2011-03-20 00:14 -------- d-----w- c:\program files (x86)\Common Files\DivX Shared
2011-03-18 15:18 . 2011-03-18 15:18 -------- d-----w- c:\windows\system32\SPReview
2011-03-18 15:06 . 2010-11-20 13:27 1499136 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
2011-03-18 15:05 . 2010-11-20 13:27 297984 ----a-w- c:\windows\system32\ws2_32.dll
2011-03-18 15:04 . 2010-11-20 13:27 2080256 ----a-w- c:\program files\Windows Mail\msoe.dll
2011-03-18 15:03 . 2010-11-20 13:25 22016 ----a-w- c:\windows\system32\credssp.dll
2011-03-18 15:02 . 2010-11-20 13:44 133632 ----a-w- c:\windows\system32\NAPHLPR.DLL
2011-03-18 15:01 . 2010-11-20 12:19 36352 ----a-w- c:\windows\SysWow64\mciqtz32.dll
2011-03-18 15:00 . 2010-11-20 13:32 4608 ----a-w- c:\windows\system32\drivers\cs-CZ\kbdclass.sys.mui
2011-03-18 15:00 . 2010-11-20 13:31 3072 ----a-w- c:\windows\system32\drivers\cs-CZ\GAGP30KX.SYS.mui
2011-03-18 15:00 . 2010-11-20 12:21 189952 ----a-w- c:\windows\SysWow64\wdscore.dll
2011-03-18 15:00 . 2010-11-20 12:17 209920 ----a-w- c:\windows\SysWow64\PkgMgr.exe
2011-03-18 15:00 . 2010-11-20 12:18 323072 ----a-w- c:\windows\SysWow64\drvstore.dll
2011-03-18 15:00 . 2010-11-20 12:18 257024 ----a-w- c:\windows\SysWow64\dpx.dll
2011-03-18 14:59 . 2010-11-20 12:21 363008 ----a-w- c:\windows\SysWow64\wbemcomn.dll
2011-03-18 14:59 . 2010-11-20 12:19 606208 ----a-w- c:\windows\SysWow64\wbem\fastprox.dll
2011-03-18 14:56 . 2010-11-20 13:27 524288 ----a-w- c:\windows\system32\wmicmiplugin.dll
2011-03-18 14:56 . 2010-11-20 13:27 529408 ----a-w- c:\windows\system32\wbemcomn.dll
2011-03-18 14:56 . 2010-11-20 13:27 1225216 ----a-w- c:\windows\system32\wbem\wbemcore.dll
2011-03-18 14:55 . 2010-11-20 13:27 933376 ----a-w- c:\windows\system32\SmiEngine.dll
2011-03-18 14:55 . 2010-11-20 13:25 199168 ----a-w- c:\windows\system32\PkgMgr.exe
2011-03-18 14:55 . 2010-11-20 13:26 422912 ----a-w- c:\windows\system32\drvstore.dll
2011-03-18 14:55 . 2010-11-20 13:26 399872 ----a-w- c:\windows\system32\dpx.dll
2011-03-18 13:43 . 2011-03-18 13:43 -------- d-----w- c:\windows\system32\EventProviders
2011-03-17 22:52 . 2011-03-30 14:31 270408 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2011-03-17 22:52 . 2011-03-26 14:06 270408 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2011-03-17 22:52 . 2011-03-25 10:01 75136 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2011-03-17 22:52 . 2011-03-17 22:52 -------- d-----w- c:\users\SEVEN\AppData\Roaming\PunkBuster
2011-03-12 10:28 . 2011-03-12 10:28 103864 ----a-w- c:\program files (x86)\Mozilla Firefox\plugins\nppdf32.dll
2011-03-09 13:50 . 2011-03-09 13:50 -------- d-----w- c:\windows\8AAB4176A747493AA42CB63CFADFD8E3.TMP
2011-03-06 19:58 . 2011-03-06 19:58 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
2011-03-06 19:57 . 2011-03-06 19:57 -------- d-----w- c:\windows\95FC26FB19FD4A96BBB1B1062E8648F5.TMP
2011-03-06 19:57 . 2011-03-06 20:10 -------- d-----w- c:\programdata\THQ
2011-03-06 12:14 . 2011-03-06 12:14 -------- d-----w- c:\windows\8A809006C25A4A3A9DAB94659BCDB107.TMP
2011-03-05 21:01 . 2011-04-02 08:48 7 ----a-w- c:\windows\treeskp.sys
2011-03-05 21:01 . 2011-04-02 08:48 7 ----a-w- c:\windows\sbacknt.bin
2011-03-05 19:16 . 2011-03-05 19:18 -------- d-----w- c:\users\SEVEN\AppData\Local\Ahead
2011-03-05 19:14 . 2011-03-05 19:18 -------- d-----w- c:\users\SEVEN\AppData\Roaming\Ahead
2011-03-05 19:09 . 2011-03-05 19:16 -------- d-----w- c:\program files (x86)\Common Files\Ahead
2011-03-05 19:09 . 2011-03-05 19:09 -------- d-----w- c:\programdata\Nero
2011-03-05 19:09 . 2011-03-05 19:09 -------- d-----w- c:\program files (x86)\Nero
2011-03-05 14:39 . 2011-03-12 13:22 -------- d-----w- c:\program files (x86)\Common Files\BioWare
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-18 15:32 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-03-18 15:32 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-03-18 11:08 . 2011-03-03 15:49 43680 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2011-03-18 11:08 . 2011-03-03 15:49 314016 ----a-w- c:\windows\system32\drivers\atksgt.sys
2011-03-10 11:02 . 2010-06-24 10:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-02-20 19:09 . 2011-02-20 19:09 466456 ----a-w- c:\windows\system32\wrap_oal.dll
2011-02-20 19:09 . 2011-02-20 19:09 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2011-02-20 19:09 . 2011-02-20 19:09 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2011-02-20 19:09 . 2011-02-20 19:09 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2011-02-02 17:11 . 2011-01-30 00:04 270720 ------w- c:\windows\system32\MpSigStub.exe
2011-01-30 00:00 . 2011-01-30 00:01 737280 ----a-w- c:\windows\iun6002.exe
2011-01-29 23:58 . 2011-01-29 23:58 411368 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-01-29 23:27 . 2011-01-29 23:18 6656 ----a-w- c:\windows\system32\bcmwlrc.dll
2011-01-07 12:17 . 2011-02-23 16:12 1465344 ----a-w- c:\windows\system32\XpsPrint.dll
2011-01-07 12:17 . 2011-02-23 16:12 475648 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-01-07 12:14 . 2011-02-09 20:16 46080 ----a-w- c:\windows\system32\atmlib.dll
2011-01-07 09:51 . 2011-02-09 20:17 1638912 ----a-w- c:\windows\system32\mshtml.tlb
2011-01-07 09:20 . 2011-02-09 20:16 366592 ----a-w- c:\windows\system32\atmfd.dll
2011-01-07 07:46 . 2011-02-23 16:12 870912 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2011-01-07 07:46 . 2011-02-23 16:12 288256 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2011-01-07 07:45 . 2011-02-09 20:16 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2011-01-07 06:01 . 2011-02-09 20:17 1638912 ----a-w- c:\windows\SysWow64\mshtml.tlb
2011-01-07 05:43 . 2011-02-09 20:16 294400 ----a-w- c:\windows\SysWow64\atmfd.dll
2011-01-05 10:34 . 2011-02-09 20:16 612864 ----a-w- c:\windows\system32\vbscript.dll
2011-01-05 06:56 . 2011-02-09 20:17 3129344 ----a-w- c:\windows\system32\win32k.sys
2011-01-05 05:55 . 2011-02-09 20:16 428032 ----a-w- c:\windows\SysWow64\vbscript.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files (x86)\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
"ISUSPM"="c:\program files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2006-09-10 218032]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-12-23 143360]
"DAEMON Tools Pro Agent"="c:\program files (x86)\DAEMON Tools Pro\DTAgent.exe" [2011-03-17 842048]
"svchost connection"="c:\users\SEVEN\AppData\Roaming\Internet Explorer\svchost.exe" [2011-04-02 623104]
"Firewallacc"="c:\users\SEVEN\AppData\Roaming\Firewallacc\Firewall.exe" [2011-04-02 367104]
"rfjnfjfjfjwkmdfsokm494e0er-0"="c:\users\SEVEN\AppData\Roaming\install\winlogon.exe" [2011-04-02 606208]
"java"="c:\users\SEVEN\AppData\Roaming\paid.exe" [2011-04-02 606208]
"KKE2LOWHTU3XO"="c:\users\SEVEN\AppData\Roaming\H1VZCRUQ5J.exe" [2011-04-02 163840]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"NokiaMServer"="c:\program files (x86)\Common Files\Nokia\MPlatform\NokiaMServer" [X]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-10-28 98304]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2010-12-13 281768]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2011-02-15 1230704]
.
c:\users\SEVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
fliptoast.lnk - c:\program files (x86)\fliptoast\fliptoast.exe [N/A]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
R0 gssqwgvt;gssqwgvt;c:\windows\system32\drivers\ilra.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Služba Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-30 136176]
R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [x]
R3 ATHDFU;Atheros Valkyrie USB BootROM;c:\windows\system32\Drivers\AthDfu.sys [x]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [x]
R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [x]
R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [x]
R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [x]
R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [x]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
R3 nmwcdnsucx64;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsucx64.sys [x]
R3 nmwcdnsux64;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsux64.sys [x]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 pwdrvio;pwdrvio;c:\windows\system32\pwdrvio.sys [x]
R3 pwdspio;pwdspio;c:\windows\system32\pwdspio.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2010-12-13 135336]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe [2010-07-29 52896]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{A2EE6DEE-7BDD-ECAF-ECFA-385888B80BBC}]
2011-04-01 22:19 196608 ---h--w- c:\users\SEVEN\AppData\Roaming\mWare.exe
.
[HKEY_CURRENT_USER\software\microsoft\active setup\installed components\{5AFCB8BF-CCBD-CFBF-ADD9-E8B0DE3CEC28}]
2011-04-02 20:32 606208 ----a-w- c:\users\SEVEN\AppData\Roaming\paid.exe
.
[HKEY_CURRENT_USER\software\microsoft\active setup\installed components\{A2EE6DEE-7BDD-ECAF-ECFA-385888B80BBC}]
2011-04-01 22:19 196608 ---h--w- c:\users\SEVEN\AppData\Roaming\mWare.exe
.
[HKEY_CURRENT_USER\software\microsoft\active setup\installed components\{AFCCFC5A-BD4E-47DB-BF4B-71CFB3B6D757}]
2011-04-02 21:59 322560 ----a-w- c:\users\SEVEN\AppData\Roaming\virtual.exe
.
[HKEY_CURRENT_USER\software\microsoft\active setup\installed components\{F4381CAD-8FAB-F5B6-BDD7-9BDE0AD9D5AC}]
2011-04-02 19:22 446464 ----a-w- c:\users\SEVEN\AppData\Roaming\WinUpdts.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2011-04-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-30 14:22]
.
2011-04-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-30 14:22]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-07-06 11057768]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2010-07-29 594080]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2010-07-29 377504]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2009-12-24 329728]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Stáhnout pomocí &BitSpiritu - c:\program files (x86)\BitSpirit\bsurl.htm
IE: {{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - c:\program files (x86)\ICQ7.4\ICQ.exe
TCP: {C82983E5-0120-463B-BFF5-BF9C21634386} = 192.168.240.1,93.91.144.100
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL
FF - ProfilePath - c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.bing.com/search?FORM=WLETDF&PC=WLEM&q=
FF - prefs.js: browser.startup.homepage - google.com
FF - prefs.js: keyword.URL - hxxp://www.bing.com/search?FORM=WLETDF&PC=WLEM&q=
FF - prefs.js: network.proxy.http - 127.0.0.1
FF - prefs.js: network.proxy.http_port - 54222
FF - prefs.js: network.proxy.type - 1
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - Ext: YouTube mp3: info@youtube-mp3.org - %profile%\extensions\info@youtube-mp3.org
FF - Ext: Google Translator for Firefox: translator@zoli.bod - %profile%\extensions\translator@zoli.bod
FF - Ext: DAEMON Tools Toolbar: DTToolbar@toolbarnet.com - %profile%\extensions\DTToolbar@toolbarnet.com
FF - Ext: PC Sync 2 Synchronisation Extension: bkmrksync@nokia.com - c:\program files (x86)\Nokia\Nokia PC Suite 7\bkmrksync
FF - Ext: Firefox Synchronisation Extension: {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70} - c:\program files (x86)\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension
FF - Ext: DivX Plus Web Player HTML5 <video>: {23fcfd51-4958-4f00-80a3-ae97e717ed8b} - c:\program files (x86)\DivX\DivX Plus Web Player\firefox\html5video
FF - Ext: DivX HiQ: {6904342A-8307-11DF-A508-4AE2DFD72085} - c:\program files (x86)\DivX\DivX Plus Web Player\firefox\wpa
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKCU-Run-waucltwi - c:\users\SEVEN\AppData\Roaming\waucltwi.exe
Wow6432Node-HKCU-Run-WinUpdtr - c:\users\SEVEN\AppData\Roaming\BOTS.exe
Wow6432Node-HKCU-Run-conhost - c:\users\SEVEN\AppData\Roaming\Microsoft\conhost.exe
Wow6432Node-HKCU-Run-Critical Process - c:\users\SEVEN\AppData\Roaming\services.exe
Wow6432Node-HKCU-Run-scvhost - c:\users\SEVEN\AppData\Roaming\windows\svchost.exe
Wow6432Node-HKCU-Run-MSWUpdate - c:\users\SEVEN\AppData\Roaming\svchost.exe
Wow6432Node-HKCU-Run-OC5HMWR2QJ - c:\users\SEVEN\AppData\Roaming\local.exe
Wow6432Node-HKLM-Run-waucltwi - c:\users\SEVEN\AppData\Roaming\waucltwi.exe
Wow6432Node-HKLM-Run-WinUpdtr - c:\users\SEVEN\AppData\Roaming\BOTS.exe
Wow6432Node-HKLM-Run-conhost - c:\users\SEVEN\AppData\Roaming\Microsoft\conhost.exe
HKLM_Wow6432Node-ActiveSetup-{A8F6FE0C-8ADD-EFC6-DCD8-5A76846AFBCE} - c:\users\SEVEN\AppData\Roaming\BOTS.exe
HKLM_Wow6432Node-ActiveSetup-{CDACFFC2-BEA5-EFBC-48AE-0AD80EAFDA5B} - c:\users\SEVEN\AppData\Roaming\waucltwi.exe
HKCU_Wow6432Node-ActiveSetup-{A8F6FE0C-8ADD-EFC6-DCD8-5A76846AFBCE} - c:\users\SEVEN\AppData\Roaming\BOTS.exe
HKCU_Wow6432Node-ActiveSetup-{BAF57B7D-6ABF-EC3D-946F-6E82B4DE4CD0} - c:\users\SEVEN\AppData\Roaming\update.exe
HKCU_Wow6432Node-ActiveSetup-{CDACFFC2-BEA5-EFBC-48AE-0AD80EAFDA5B} - c:\users\SEVEN\AppData\Roaming\waucltwi.exe
HKCU_Wow6432Node-ActiveSetup-{FEA35EA1-BCF8-ED94-ABC4-FA397BFBC5DA} - c:\users\SEVEN\AppData\Roaming\local.exe
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKLM-Run-SynTPEnh - %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-1514913456-3520039598-2816499811-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-1514913456-3520039598-2816499811-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{6EF568F4-D437-4466-AA63-A3645136D93E}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}]
@Denied: (A 2) (Everyone)
@="IFlashBroker"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\TypeLib]
@="{6EF568F4-D437-4466-AA63-A3645136D93E}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}]
@Denied: (A 2) (Everyone)
@="IFlashBroker2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib]
@="{6EF568F4-D437-4466-AA63-A3645136D93E}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0\Solutions\http://schemas.microsoft.com/office/sma ... nts/2003\0]
"Key"="http://schemas.microsoft.com/office/smartdocuments/2003"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0\Solutions\http://schemas.microsoft.com/office/sma ... A18}\Alias]
"0"="Microsoft Actions Pane 3"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\SysWOW64\rundll32.exe
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE
.
**************************************************************************
.
Celkový čas: 2011-04-03 09:39:21 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-04-03 07:39
.
Před spuštěním: Volných bajtů: 38 564 970 496
Po spuštění: Volných bajtů: 38 463 045 632
.
- - End Of File - - 435A3F36F71E514B2CF8BD24FE7281AE

Pokud nemate, tak presunte Combofix na plochu

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  KillAll::
  
  File::
  c:\users\SEVEN\AppData\Roaming\mdlwk.exe
  c:\users\SEVEN\AppData\Roaming\uvebh.exe
  c:\users\SEVEN\AppData\Roaming\lmxaa.exe
  c:\users\SEVEN\AppData\Roaming\daway.exe
  c:\users\SEVEN\AppData\Roaming\keplw.exe
  c:\users\SEVEN\AppData\Roaming\virtual.exe
  c:\users\SEVEN\AppData\Roaming\Microsoft\System\Services\csrss.exe
  c:\users\SEVEN\AppData\Roaming\H1VZCRUQ5J.exe
  c:\users\SEVEN\AppData\Roaming\paid.exe
  c:\users\SEVEN\AppData\Roaming\temp2F00_l4[k8]k-o.tmp
  c:\users\SEVEN\AppData\Roaming\tempF00_l4[k8]k-o.tmp
  c:\users\SEVEN\AppData\Roaming\WinUpdts.exe
  c:\users\SEVEN\AppData\Roaming\mWare.exe
  c:\users\SEVEN\AppData\Local\waucltwid.exe
  c:\users\SEVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fliptoast.lnk
  c:\windows\system32\drivers\ilra.sys
  c:\windows\system32\pwdrvio.sys
  c:\windows\system32\pwdspio.sys
  c:\windows\system32\drivers\ilra.sys
  c:\windows\system32\pwdrvio.sys
  c:\windows\system32\pwdspio.sys
  c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
  c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
  
  Folder::
  c:\users\SEVEN\AppData\Roaming\install
  c:\users\SEVEN\AppData\Roaming\Firewallacc
  c:\users\SEVEN\AppData\Roaming\Internet Explorer
  c:\windows\8AAB4176A747493AA42CB63CFADFD8E3.TMP
  c:\windows\95FC26FB19FD4A96BBB1B1062E8648F5.TMP
  c:\windows\8A809006C25A4A3A9DAB94659BCDB107.TMP
  
  Registry::
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=-
  "DAEMON Tools Pro Agent"=-
  "svchost connection"=-
  "Firewallacc"="-
  "rfjnfjfjfjwkmdfsokm494e0er-0"=-
  "java"=-
  "KKE2LOWHTU3XO"=-[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
  "NokiaMServer"=-
  "SunJavaUpdateSched"=-
  "Adobe Reader Speed Launcher"=-
  "Adobe ARM"=-
  "DivXUpdate"=-
  [-HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{A2EE6DEE-7BDD-ECAF-ECFA-385888B80BBC}]
  [-HKEY_CURRENT_USER\software\microsoft\active setup\installed components\{5AFCB8BF-CCBD-CFBF-ADD9-E8B0DE3CEC28}]
  [-HKEY_CURRENT_USER\software\microsoft\active setup\installed components\{A2EE6DEE-7BDD-ECAF-ECFA-385888B80BBC}]
  [-HKEY_CURRENT_USER\software\microsoft\active setup\installed components\{AFCCFC5A-BD4E-47DB-BF4B-71CFB3B6D757}]
  [-HKEY_CURRENT_USER\software\microsoft\active setup\installed components\{F4381CAD-8FAB-F5B6-BDD7-9BDE0AD9D5AC}]
  
  Driver::
  gssqwgvt
  pwdrvio
  pwdspio
  gupdate
  gssqwgvt
  pwdrvio
  pwdspio
  
  Firefox::
  FF - ProfilePath - c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\
  FF - prefs.js: browser.search.defaulturl - hxxp://www.bing.com/search?FORM=WLETDF&PC=WLEM&q=
  FF - prefs.js: keyword.URL - hxxp://www.bing.com/search?FORM=WLETDF&PC=WLEM&q=
  FF - prefs.js: network.proxy.http - 127.0.0.1
  FF - prefs.js: network.proxy.http_port - 54222
  FF - Ext: DAEMON Tools Toolbar: DTToolbar@toolbarnet.com - %profile%\extensions\DTToolbar@toolbarnet.com
  
  RegLock::
  [HKEY_USERS\S-1-5-21-1514913456-3520039598-2816499811-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
  [HKEY_USERS\S-1-5-21-1514913456-3520039598-2816499811-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\ProxyStubClsid32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\TypeLib]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0\Solutions\http://schemas.microsoft.com/office/smartdocuments/2003\0]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0\Solutions\http://schemas.microsoft.com/office/smartdocuments/2003\0\{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}\Alias]
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
  
  Reboot::
  

• Ulozte vytvoreny TXT jako CFScript.txt
• Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
  
• Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

Nějak to se mnou nespolupracuje píše to: Pokus použít neplatnou operaci na klíč registru, který je označek pro odstranění

Skript jsem opravil - editnul, vytvorte jej znovu a postup opakujte

nefunguje, jenže mi nejde nic spustit... píše to: pokus neplatnou operaci na klíč registru, který je označen pro odstranění.. Nedělá to ten rkill?

Takze na to pujdeme trosku jinak

Stahnete OTM (viz muj podpis)

• Pokud pouzivate Win Vista ci W7, kliknete na OTM pravym a dejte Run As Administrator ci Spustit jako spravce
• Do leveho okna Paste Instructions for Items to be Moved (pod zlutou caru) vlozte obsah, ktery mate nize

• Kód: Vybrat vše

  :reg
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=-
  "DAEMON Tools Pro Agent"=-
  "svchost connection"=-
  "Firewallacc"="-
  "rfjnfjfjfjwkmdfsokm494e0er-0"=-
  "java"=-
  "KKE2LOWHTU3XO"=-
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
  "NokiaMServer"=-
  "SunJavaUpdateSched"=-
  "Adobe Reader Speed Launcher"=-
  "Adobe ARM"=-
  "DivXUpdate"=-
  [-HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{A2EE6DEE-7BDD-ECAF-ECFA-385888B80BBC}]
  [-HKEY_CURRENT_USER\software\microsoft\active setup\installed components\{5AFCB8BF-CCBD-CFBF-ADD9-E8B0DE3CEC28}]
  [-HKEY_CURRENT_USER\software\microsoft\active setup\installed components\{A2EE6DEE-7BDD-ECAF-ECFA-385888B80BBC}]
  [-HKEY_CURRENT_USER\software\microsoft\active setup\installed components\{AFCCFC5A-BD4E-47DB-BF4B-71CFB3B6D757}]
  [-HKEY_CURRENT_USER\software\microsoft\active setup\installed components\{F4381CAD-8FAB-F5B6-BDD7-9BDE0AD9D5AC}]
  
  :services
  gssqwgvt
  pwdrvio
  pwdspio
  gupdate
  gssqwgvt
  pwdrvio
  pwdspio
  
  :files
  c:\users\SEVEN\AppData\Roaming\mdlwk.exe
  c:\users\SEVEN\AppData\Roaming\uvebh.exe
  c:\users\SEVEN\AppData\Roaming\lmxaa.exe
  c:\users\SEVEN\AppData\Roaming\daway.exe
  c:\users\SEVEN\AppData\Roaming\keplw.exe
  c:\users\SEVEN\AppData\Roaming\virtual.exe
  c:\users\SEVEN\AppData\Roaming\Microsoft\System\Services\csrss.exe
  c:\users\SEVEN\AppData\Roaming\H1VZCRUQ5J.exe
  c:\users\SEVEN\AppData\Roaming\paid.exe
  c:\users\SEVEN\AppData\Roaming\temp2F00_l4[k8]k-o.tmp
  c:\users\SEVEN\AppData\Roaming\tempF00_l4[k8]k-o.tmp
  c:\users\SEVEN\AppData\Roaming\WinUpdts.exe
  c:\users\SEVEN\AppData\Roaming\mWare.exe
  c:\users\SEVEN\AppData\Local\waucltwid.exe
  c:\users\SEVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fliptoast.lnk
  c:\windows\system32\drivers\ilra.sys
  c:\windows\system32\pwdrvio.sys
  c:\windows\system32\pwdspio.sys
  c:\windows\system32\drivers\ilra.sys
  c:\windows\system32\pwdrvio.sys
  c:\windows\system32\pwdspio.sys
  c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
  c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
  c:\users\SEVEN\AppData\Roaming\install
  c:\users\SEVEN\AppData\Roaming\Firewallacc
  c:\users\SEVEN\AppData\Roaming\Internet Explorer
  c:\windows\8AAB4176A747493AA42CB63CFADFD8E3.TMP
  c:\windows\95FC26FB19FD4A96BBB1B1062E8648F5.TMP
  c:\windows\8A809006C25A4A3A9DAB94659BCDB107.TMP
  %windir%\system32\*.tmp.dll /s
  %windir%\system32\SET*.tmp /s
  %windir%\*.tmp /s
  
  :commands
  [RESETHOSTS]
  [EMPTYTEMP]
  [EMPTYFLASH]

• Kliknete na cervene tlacitko MoveIt!
• Budete vyzvani na restart, dejte Yes, log pote najdete C:\_OTM\MovedFiles, obsah sem vlozte

Nemůžu nic spustit. píše to chybu v registrech... po spuštění rkill se mi na ploše zobrazilo rk-proxy

Muzete mi sem prosim dat to hlaseni

povedlo se mi vložit scrip do combo fixu, zde je výsledek doufám že budou dobré zprávy Pomohl restart systému, pak šlo spustit cokoliv

ComboFix 11-04-02.03 - SEVEN 03.04.2011 12:05:15.2.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4091.3015 [GMT 2:00]
Spuštěný z: c:\users\SEVEN\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\SEVEN\Desktop\CFScript.txt
AV: AntiVir Desktop *Enabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Enabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
FILE ::
"c:\users\SEVEN\AppData\Local\waucltwid.exe"
"c:\users\SEVEN\AppData\Roaming\daway.exe"
"c:\users\SEVEN\AppData\Roaming\H1VZCRUQ5J.exe"
"c:\users\SEVEN\AppData\Roaming\keplw.exe"
"c:\users\SEVEN\AppData\Roaming\lmxaa.exe"
"c:\users\SEVEN\AppData\Roaming\mdlwk.exe"
"c:\users\SEVEN\AppData\Roaming\Microsoft\System\Services\csrss.exe"
"c:\users\SEVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fliptoast.lnk"
"c:\users\SEVEN\AppData\Roaming\mWare.exe"
"c:\users\SEVEN\AppData\Roaming\paid.exe"
"c:\users\SEVEN\AppData\Roaming\temp2F00_l4[k8]k-o.tmp"
"c:\users\SEVEN\AppData\Roaming\tempF00_l4[k8]k-o.tmp"
"c:\users\SEVEN\AppData\Roaming\uvebh.exe"
"c:\users\SEVEN\AppData\Roaming\virtual.exe"
"c:\users\SEVEN\AppData\Roaming\WinUpdts.exe"
"c:\windows\system32\drivers\ilra.sys"
"c:\windows\system32\pwdrvio.sys"
"c:\windows\system32\pwdspio.sys"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\SEVEN\AppData\Local\waucltwid.exe
c:\users\SEVEN\AppData\Roaming\data.dat
c:\users\SEVEN\AppData\Roaming\daway.exe
c:\users\SEVEN\AppData\Roaming\Firewallacc
c:\users\SEVEN\AppData\Roaming\Firewallacc\Firewall.exe
c:\users\SEVEN\AppData\Roaming\H1VZCRUQ5J.exe
c:\users\SEVEN\AppData\Roaming\install
c:\users\SEVEN\AppData\Roaming\install\instal.exe
c:\users\SEVEN\AppData\Roaming\install\winlogon.exe
c:\users\SEVEN\AppData\Roaming\Internet Explorer
c:\users\SEVEN\AppData\Roaming\Internet Explorer\svchost.exe
c:\users\SEVEN\AppData\Roaming\keplw.exe
c:\users\SEVEN\AppData\Roaming\lmxaa.exe
c:\users\SEVEN\AppData\Roaming\mdlwk.exe
c:\users\SEVEN\AppData\Roaming\Microsoft\System\Services\csrss.exe
c:\users\SEVEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fliptoast.lnk
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\DTToolbarFF.dll
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\DTToolbarFF.xpt
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\about.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\AboutWindow.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\accept.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\AddRadioStation.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\ARA.xml
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\as.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\as.png
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_audio.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_buy.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_download.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_feedback.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_forum.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_home.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_lite.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astroburn_site.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astroLite_16.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\az.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\AZE.xml
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\b1.png
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\burn_files.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\burn_image.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\burn_imgs.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\BurnImage.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\buy.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\cal.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Config.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\d.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\d2.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\daemon_search.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\daemon_search_site.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\DEU.xml
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dot_disabled.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dot_enabled.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dot_on_over.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\download.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\ds.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dsearch.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt-home.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_about.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_buy.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_download.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_faq.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_feedback.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_forum.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_line.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_lite.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_manual.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_pro.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\DTPro.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dtt16.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dtt32.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Dwnl.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\emulation.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\ENG.xml
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\faq.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\favicon.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\fb.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\features.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\feedback.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\forum.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\FRA.xml
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameCentrix.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameCentrixCristals.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameCentrixDownload.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameCentrixPlayOnline.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameCentrixTop.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameS.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\games_search.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\games_search_SA.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameSA.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\gct16.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\gd.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\genre.xml
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\globe.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GrabImage.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\hb.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\hb.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\help.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\hide.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\home.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\CHS.xml
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\CHT.xml
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\image_search.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\image_search_SA.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\ImageS.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\ImageSA.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\ip.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\ITA.xml
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\JPN.xml
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\KOR.xml
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\lang.xml
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\lingvo.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\m.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mail.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mail_disable.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mail_down.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mail_m.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mail_under.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mailc.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mailc_disable.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mailc_down.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mailc_m.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mailc_under.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\manual.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\map.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\MenuRadioConfig.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\MenuRadioStation.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\MenuRSCur.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\MenuTr.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mount.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mount_n_drive.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\next.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\next_down.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\next_m.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\next_under.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\none.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\none_m.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\op.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\play.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\play.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\play_down.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\play_m.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\play_under.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\pragma.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\prev.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\prev_down.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\prev_m.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\prev_under.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\prod.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Radio.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioBg.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioBg.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioBgMask.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDisp.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDisp_m.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDown.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDown.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDown_down.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDown_m.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDown_under.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioE.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioG.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioL.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioLDotMask.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioLeft.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioLeftMask.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioLM.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioM.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioN.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioR.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioR.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioRM.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioRU.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioVolume.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioVolume_down.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioVolume_m.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioVolume_under.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioW.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\rbcheck.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\rbtxt.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\refresh.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\refresh_down.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\refresh_m.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\refresh_under.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Rss.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Rss1.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RssA.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RssA1.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\rssClose.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\rssL.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\rssOpen.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RssRefresh.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RUS.xml
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\s2.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\show.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\size.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\size_lr.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\size_m.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\size_rl.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\skins.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\soft24.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\soft24_SA.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\spt.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\stop.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\stop.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\stop_down.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\stop_m.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\stop_under.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\style.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\SupportRequest.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\timer.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\TitleIcon.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\toolbar.xml
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\trans.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Trash.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Trash_disable.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Trash_down.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Trash_m.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Trash_under.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\u.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\UKR.xml
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\unmount-all.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_back.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_dott.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_dott_m.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_down.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_m.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_mute.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_mute_check.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_under.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtClose.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtClose_down.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtClose_m.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtClose_under.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtText.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtText_down.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtText_m.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtText_under.bmp
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\web_resources.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\web_search.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\web_search_SA.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\WebS.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\WebSa.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi0.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi1.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi10.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi11.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi12.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi13.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi14.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi2.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi3.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi4.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi5.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi6.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi7.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi8.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi9.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\chrome.manifest
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\chrome\content\AboutWindow.ico
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\chrome\content\base.js
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\chrome\content\contents.rdf
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\chrome\content\dttoolbar.js
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\chrome\content\dttoolbar.xul
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\chrome\content\gadget.xul
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\chrome\content\options.xul
c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\extensions\DTToolbar@toolbarnet.com\install.rdf
c:\users\SEVEN\AppData\Roaming\mWare.exe
c:\users\SEVEN\AppData\Roaming\paid.exe
c:\users\SEVEN\AppData\Roaming\scvhost.exe
c:\users\SEVEN\AppData\Roaming\temp2F00_l4[k8]k-o.tmp
c:\users\SEVEN\AppData\Roaming\tempF00_l4[k8]k-o.tmp
c:\users\SEVEN\AppData\Roaming\uvebh.exe
c:\users\SEVEN\AppData\Roaming\virtual.exe
c:\users\SEVEN\AppData\Roaming\WinUpdts.exe
c:\windows\8A809006C25A4A3A9DAB94659BCDB107.TMP
c:\windows\8A809006C25A4A3A9DAB94659BCDB107.TMP\WiseCustomCalla.dll
c:\windows\8AAB4176A747493AA42CB63CFADFD8E3.TMP
c:\windows\8AAB4176A747493AA42CB63CFADFD8E3.TMP\WiseCustomCalla.dll
c:\windows\95FC26FB19FD4A96BBB1B1062E8648F5.TMP
c:\windows\95FC26FB19FD4A96BBB1B1062E8648F5.TMP\WiseCustomCalla.dll
c:\windows\system32\pwdrvio.sys
c:\windows\system32\pwdspio.sys
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_PWDRVIO
-------\Legacy_PWDSPIO
-------\Service_gssqwgvt
-------\Service_gupdate
-------\Service_pwdrvio
-------\Service_pwdspio
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-03-03 do 2011-04-03 )))))))))))))))))))))))))))))))
.
.
2011-04-02 21:54 . 2011-04-02 22:12 -------- d-----w- c:\program files\trend micro
2011-04-02 21:54 . 2011-04-02 21:54 -------- d-----w- C:\rsit
2011-04-02 21:36 . 2011-04-02 21:37 -------- d-----w- c:\program files (x86)\Ultimate Process Manager
2011-04-01 19:21 . 2011-04-01 19:21 90112 --sha-r- c:\windows\SysWow64\bidispl2.dll
2011-04-01 17:01 . 2011-04-02 20:48 -------- d-----w- c:\users\SEVEN\AppData\Roaming\updates
2011-04-01 12:13 . 2011-04-01 12:13 -------- d-----w- c:\program files (x86)\MegaDev
2011-04-01 08:34 . 2011-03-15 05:17 8424784 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{6ABB644E-BAE2-4505-84AD-58629138AC7B}\mpengine.dll
2011-03-31 16:47 . 2011-03-31 16:47 -------- d-----w- c:\program files (x86)\DAEMON Tools Pro
2011-03-31 16:47 . 2011-03-31 17:23 -------- d-----w- c:\users\SEVEN\AppData\Roaming\DAEMON Tools Pro
2011-03-31 16:47 . 2011-03-31 16:47 -------- d-----w- c:\programdata\DAEMON Tools Pro
2011-03-30 13:09 . 2011-03-30 13:09 -------- d-----w- c:\users\SEVEN\AppData\Local\Chromium
2011-03-29 20:22 . 2011-03-29 20:22 -------- d-----w- c:\users\SEVEN\AppData\Roaming\The Creative Assembly
2011-03-26 18:52 . 2011-03-26 18:52 -------- d-----w- c:\users\SEVEN\AppData\Roaming\LolClient
2011-03-26 14:38 . 2011-03-31 17:18 -------- d-----w- c:\users\SEVEN\AppData\Local\PMB Files
2011-03-26 14:38 . 2011-03-26 14:39 -------- d-----w- c:\programdata\PMB Files
2011-03-26 14:37 . 2011-03-26 14:37 -------- d-----w- c:\program files (x86)\Pando Networks
2011-03-25 10:01 . 2011-03-30 14:31 270408 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2011-03-25 10:01 . 2011-03-25 10:01 -------- d-----w- c:\users\SEVEN\AppData\Local\PunkBuster
2011-03-25 10:01 . 2011-03-25 10:01 -------- d-----w- c:\users\SEVEN\AppData\Roaming\Ubisoft
2011-03-25 09:52 . 2011-03-25 09:56 -------- d-----w- c:\users\SEVEN\AppData\Local\Ubisoft Game Launcher
2011-03-20 03:09 . 2011-03-20 03:09 -------- d-----w- c:\programdata\Symantec
2011-03-20 03:09 . 2011-03-20 06:05 -------- d-----w- c:\programdata\Norton
2011-03-20 00:18 . 2011-03-20 00:18 -------- d-----w- c:\users\SEVEN\AppData\Local\DDMSettings
2011-03-20 00:14 . 2011-04-02 19:39 -------- d-----w- c:\users\SEVEN\AppData\Roaming\DivX
2011-03-20 00:14 . 2011-03-20 00:14 -------- d-----w- c:\program files (x86)\Common Files\PX Storage Engine
2011-03-20 00:14 . 2011-03-20 00:14 -------- d-----w- c:\program files\DivX
2011-03-20 00:07 . 2011-03-20 00:15 -------- d-----w- c:\programdata\DivX
2011-03-20 00:05 . 2011-03-20 00:15 -------- d-----w- c:\program files (x86)\DivX
2011-03-20 00:05 . 2011-03-20 00:14 -------- d-----w- c:\program files (x86)\Common Files\DivX Shared
2011-03-18 15:18 . 2011-03-18 15:18 -------- d-----w- c:\windows\system32\SPReview
2011-03-18 15:06 . 2010-11-20 13:27 1499136 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
2011-03-18 15:05 . 2010-11-20 13:27 297984 ----a-w- c:\windows\system32\ws2_32.dll
2011-03-18 15:04 . 2010-11-20 13:27 2080256 ----a-w- c:\program files\Windows Mail\msoe.dll
2011-03-18 15:03 . 2010-11-20 13:25 22016 ----a-w- c:\windows\system32\credssp.dll
2011-03-18 15:02 . 2010-11-20 13:44 133632 ----a-w- c:\windows\system32\NAPHLPR.DLL
2011-03-18 15:01 . 2010-11-20 12:19 36352 ----a-w- c:\windows\SysWow64\mciqtz32.dll
2011-03-18 15:00 . 2010-11-20 13:32 4608 ----a-w- c:\windows\system32\drivers\cs-CZ\kbdclass.sys.mui
2011-03-18 15:00 . 2010-11-20 13:31 3072 ----a-w- c:\windows\system32\drivers\cs-CZ\GAGP30KX.SYS.mui
2011-03-18 15:00 . 2010-11-20 12:21 189952 ----a-w- c:\windows\SysWow64\wdscore.dll
2011-03-18 15:00 . 2010-11-20 12:17 209920 ----a-w- c:\windows\SysWow64\PkgMgr.exe
2011-03-18 15:00 . 2010-11-20 12:18 323072 ----a-w- c:\windows\SysWow64\drvstore.dll
2011-03-18 15:00 . 2010-11-20 12:18 257024 ----a-w- c:\windows\SysWow64\dpx.dll
2011-03-18 14:59 . 2010-11-20 12:21 363008 ----a-w- c:\windows\SysWow64\wbemcomn.dll
2011-03-18 14:59 . 2010-11-20 12:19 606208 ----a-w- c:\windows\SysWow64\wbem\fastprox.dll
2011-03-18 14:56 . 2010-11-20 13:27 524288 ----a-w- c:\windows\system32\wmicmiplugin.dll
2011-03-18 14:56 . 2010-11-20 13:27 529408 ----a-w- c:\windows\system32\wbemcomn.dll
2011-03-18 14:56 . 2010-11-20 13:27 1225216 ----a-w- c:\windows\system32\wbem\wbemcore.dll
2011-03-18 14:55 . 2010-11-20 13:27 933376 ----a-w- c:\windows\system32\SmiEngine.dll
2011-03-18 14:55 . 2010-11-20 13:25 199168 ----a-w- c:\windows\system32\PkgMgr.exe
2011-03-18 14:55 . 2010-11-20 13:26 422912 ----a-w- c:\windows\system32\drvstore.dll
2011-03-18 14:55 . 2010-11-20 13:26 399872 ----a-w- c:\windows\system32\dpx.dll
2011-03-18 13:43 . 2011-03-18 13:43 -------- d-----w- c:\windows\system32\EventProviders
2011-03-17 22:52 . 2011-03-30 14:31 270408 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2011-03-17 22:52 . 2011-03-26 14:06 270408 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2011-03-17 22:52 . 2011-03-25 10:01 75136 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2011-03-17 22:52 . 2011-03-17 22:52 -------- d-----w- c:\users\SEVEN\AppData\Roaming\PunkBuster
2011-03-12 10:28 . 2011-03-12 10:28 103864 ----a-w- c:\program files (x86)\Mozilla Firefox\plugins\nppdf32.dll
2011-03-06 19:58 . 2011-03-06 19:58 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
2011-03-06 19:57 . 2011-03-06 20:10 -------- d-----w- c:\programdata\THQ
2011-03-05 21:01 . 2011-04-02 08:48 7 ----a-w- c:\windows\treeskp.sys
2011-03-05 21:01 . 2011-04-02 08:48 7 ----a-w- c:\windows\sbacknt.bin
2011-03-05 19:16 . 2011-03-05 19:18 -------- d-----w- c:\users\SEVEN\AppData\Local\Ahead
2011-03-05 19:14 . 2011-03-05 19:18 -------- d-----w- c:\users\SEVEN\AppData\Roaming\Ahead
2011-03-05 19:09 . 2011-03-05 19:16 -------- d-----w- c:\program files (x86)\Common Files\Ahead
2011-03-05 19:09 . 2011-03-05 19:09 -------- d-----w- c:\programdata\Nero
2011-03-05 19:09 . 2011-03-05 19:09 -------- d-----w- c:\program files (x86)\Nero
2011-03-05 14:39 . 2011-03-12 13:22 -------- d-----w- c:\program files (x86)\Common Files\BioWare
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-18 15:32 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-03-18 15:32 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-03-18 11:08 . 2011-03-03 15:49 43680 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2011-03-18 11:08 . 2011-03-03 15:49 314016 ----a-w- c:\windows\system32\drivers\atksgt.sys
2011-03-10 11:02 . 2010-06-24 10:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-02-20 19:09 . 2011-02-20 19:09 466456 ----a-w- c:\windows\system32\wrap_oal.dll
2011-02-20 19:09 . 2011-02-20 19:09 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2011-02-20 19:09 . 2011-02-20 19:09 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2011-02-20 19:09 . 2011-02-20 19:09 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2011-02-02 17:11 . 2011-01-30 00:04 270720 ------w- c:\windows\system32\MpSigStub.exe
2011-01-30 00:00 . 2011-01-30 00:01 737280 ----a-w- c:\windows\iun6002.exe
2011-01-29 23:58 . 2011-01-29 23:58 411368 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-01-29 23:27 . 2011-01-29 23:18 6656 ----a-w- c:\windows\system32\bcmwlrc.dll
2011-01-07 12:17 . 2011-02-23 16:12 1465344 ----a-w- c:\windows\system32\XpsPrint.dll
2011-01-07 12:17 . 2011-02-23 16:12 475648 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-01-07 12:14 . 2011-02-09 20:16 46080 ----a-w- c:\windows\system32\atmlib.dll
2011-01-07 09:51 . 2011-02-09 20:17 1638912 ----a-w- c:\windows\system32\mshtml.tlb
2011-01-07 09:20 . 2011-02-09 20:16 366592 ----a-w- c:\windows\system32\atmfd.dll
2011-01-07 07:46 . 2011-02-23 16:12 870912 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2011-01-07 07:46 . 2011-02-23 16:12 288256 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2011-01-07 07:45 . 2011-02-09 20:16 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2011-01-07 06:01 . 2011-02-09 20:17 1638912 ----a-w- c:\windows\SysWow64\mshtml.tlb
2011-01-07 05:43 . 2011-02-09 20:16 294400 ----a-w- c:\windows\SysWow64\atmfd.dll
2011-01-05 10:34 . 2011-02-09 20:16 612864 ----a-w- c:\windows\system32\vbscript.dll
2011-01-05 06:56 . 2011-02-09 20:17 3129344 ----a-w- c:\windows\system32\win32k.sys
2011-01-05 05:55 . 2011-02-09 20:16 428032 ----a-w- c:\windows\SysWow64\vbscript.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-04-03_07.23.13 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-01-29 23:07 . 2011-04-03 10:03 31770 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2011-04-03 10:03 36312 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2011-01-29 17:00 . 2011-04-03 10:06 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-01-29 17:00 . 2011-04-01 18:38 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-01-29 17:00 . 2011-04-01 18:38 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2011-01-29 17:00 . 2011-04-03 10:06 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2011-04-03 10:06 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2011-04-01 18:38 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2011-01-29 23:42 . 2011-04-03 07:17 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-01-29 23:42 . 2011-04-03 10:03 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-01-29 23:42 . 2011-04-03 10:03 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2011-01-29 23:42 . 2011-04-03 07:17 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2011-01-29 23:42 . 2011-04-03 10:03 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2011-01-29 23:42 . 2011-04-03 07:17 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-01-29 23:42 . 2011-04-03 10:07 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-01-29 23:42 . 2011-04-03 07:17 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-01-29 23:42 . 2011-04-03 10:07 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2011-01-29 23:42 . 2011-04-03 07:17 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-01-29 19:08 . 2011-04-03 10:03 8264 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1514913456-3520039598-2816499811-1000_UserData.bin
- 2011-04-03 07:15 . 2011-04-03 07:15 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2011-04-03 10:43 . 2011-04-03 10:43 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2011-04-03 10:43 . 2011-04-03 10:43 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2011-04-03 07:15 . 2011-04-03 07:15 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2009-07-14 02:36 . 2011-04-03 07:19 616008 c:\windows\system32\perfh009.dat
+ 2009-07-14 02:36 . 2011-04-03 10:07 616008 c:\windows\system32\perfh009.dat
- 2009-07-14 15:18 . 2011-04-03 07:19 631292 c:\windows\system32\perfh005.dat
+ 2009-07-14 15:18 . 2011-04-03 10:07 631292 c:\windows\system32\perfh005.dat
+ 2009-07-14 02:36 . 2011-04-03 10:07 106388 c:\windows\system32\perfc009.dat
- 2009-07-14 02:36 . 2011-04-03 07:19 106388 c:\windows\system32\perfc009.dat
- 2009-07-14 15:18 . 2011-04-03 07:19 121914 c:\windows\system32\perfc005.dat
+ 2009-07-14 15:18 . 2011-04-03 10:07 121914 c:\windows\system32\perfc005.dat
- 2009-07-14 05:01 . 2011-04-03 07:14 428648 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 05:01 . 2011-04-03 10:42 428648 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files (x86)\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
"ISUSPM"="c:\program files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2006-09-10 218032]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"NokiaMServer"="c:\program files (x86)\Common Files\Nokia\MPlatform\NokiaMServer" [X]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-10-28 98304]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2010-12-13 281768]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2011-02-15 1230704]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [x]
R3 ATHDFU;Atheros Valkyrie USB BootROM;c:\windows\system32\Drivers\AthDfu.sys [x]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [x]
R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [x]
R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [x]
R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [x]
R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [x]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
R3 nmwcdnsucx64;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsucx64.sys [x]
R3 nmwcdnsux64;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsux64.sys [x]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2010-12-13 135336]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe [2010-07-29 52896]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
.
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"combofix"="c:\combofix\CF23401.cfxxe" [X]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-07-06 11057768]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2010-07-29 594080]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2010-07-29 377504]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2009-12-24 329728]
"SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe" [BU]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Stáhnout pomocí &BitSpiritu - c:\program files (x86)\BitSpirit\bsurl.htm
IE: {{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - c:\program files (x86)\ICQ7.4\ICQ.exe
TCP: {C82983E5-0120-463B-BFF5-BF9C21634386} = 192.168.240.1,93.91.144.100
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL
FF - ProfilePath - c:\users\SEVEN\AppData\Roaming\Mozilla\Firefox\Profiles\jc2uhwnc.default\
FF - prefs.js: browser.startup.homepage - google.com
FF - prefs.js: network.proxy.type - 1
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - Ext: YouTube mp3: info@youtube-mp3.org - %profile%\extensions\info@youtube-mp3.org
FF - Ext: Google Translator for Firefox: translator@zoli.bod - %profile%\extensions\translator@zoli.bod
FF - Ext: PC Sync 2 Synchronisation Extension: bkmrksync@nokia.com - c:\program files (x86)\Nokia\Nokia PC Suite 7\bkmrksync
FF - Ext: Firefox Synchronisation Extension: {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70} - c:\program files (x86)\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension
FF - Ext: DivX Plus Web Player HTML5 <video>: {23fcfd51-4958-4f00-80a3-ae97e717ed8b} - c:\program files (x86)\DivX\DivX Plus Web Player\firefox\html5video
FF - Ext: DivX HiQ: {6904342A-8307-11DF-A508-4AE2DFD72085} - c:\program files (x86)\DivX\DivX Plus Web Player\firefox\wpa
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKCU-Run-Firewallacc - c:\users\SEVEN\AppData\Roaming\Firewallacc\Firewall.exe
Wow6432Node-HKCU-Run-KKE2LOWHTU3XO - c:\users\SEVEN\AppData\Roaming\H1VZCRUQ5J.exe
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE
c:\program files (x86)\Google\Update\GoogleUpdate.exe
.
**************************************************************************
.
Celkový čas: 2011-04-03 13:00:43 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-04-03 11:00
ComboFix2.txt 2011-04-03 07:39
.
Před spuštěním: Volných bajtů: 38 508 683 264
Po spuštění: Volných bajtů: 38 203 490 304
.
- - End Of File - - D87E580AA9354CE9E49E9D467679BA28

Jak se chova PC