VIRY.CZ

Dobrý den,

mám problém s ntb, při normální práci, z reproduktoru vycházejí občas bzučivé zvuky, i když není spuštěný přehrávač, nebo něco, co by zvuky spouštělo.

druhý problém je s aktualizacemi, při vypínání pc se aktualizace nainstalují, ale při zapínání když probíhá konfigurace, tak se vždycky nezdaří.

děkuji za pomoc, přikládám log z HijackThis



Logfile of random's system information tool 1.08 (written by random/random)
Run by Tadeáš at 2011-04-30 12:44:08
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 104 GB (22%) free of 463 GB
Total RAM: 4014 MB (39% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:44:21, on 30.4.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
c:\PROGRA~2\mcafee.com\agent\mcagent.exe
C:\Program Files\Sony\VAIO Care\listener.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe
C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files (x86)\SONY\ISB Utility\ISBMgr.exe
C:\Program Files (x86)\SONY\PMB\PMBVolumeWatcher.exe
C:\Program Files (x86)\SONY\Marketing Tools\MarketingTools.exe
C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files (x86)\DivX\DivX Plus Web Player\DDMService.exe
C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.3\facemoodssrv.exe
C:\Program Files (x86)\Philips\Philips Songbird Resources\Autolauncher\PhilipsDeviceListener.exe
C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\ICQ7.2\ICQ.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Tadeáš.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.facemoods.com/?a=vsl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=vsl&s={searchTerms}&f=4
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\4.3\pdfforgeToolbarIE.dll
R3 - URLSearchHook: BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: QuickStores-Toolbar - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - mscoree.dll (file missing)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~2\mcafee\msk\mskapbho.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: facemoods Helper - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.3\bh\facemoods.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\McAfee\VirusScan\scriptsn.dll
O2 - BHO: BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\4.3\pdfforgeToolbarIE.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Inbox Toolbar - {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - C:\PROGRA~2\INBOXT~1\Inbox.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: QuickStores-Toolbar - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - mscoree.dll (file missing)
O3 - Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - (no file)
O3 - Toolbar: &Inbox Toolbar - {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - C:\PROGRA~2\INBOXT~1\Inbox.dll
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O3 - Toolbar: BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: facemoods Toolbar - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.3\facemoodsTlbr.dll
O3 - Toolbar: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\4.3\pdfforgeToolbarIE.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"
O4 - HKLM\..\Run: [McENUI] C:\PROGRA~2\McAfee\MHN\McENUI.exe /hide
O4 - HKLM\..\Run: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
O4 - HKLM\..\Run: [MarketingTools] C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [DivX Download Manager] "C:\Program Files (x86)\DivX\DivX Plus Web Player\DDmService.exe" start
O4 - HKLM\..\Run: [facemoods] "C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.3\facemoodssrv.exe" /md I
O4 - HKLM\..\Run: [Philips Device Listener] "C:\Program Files (x86)\Philips\Philips Songbird Resources\Autolauncher\PhilipsDeviceListener.exe"
O4 - HKLM\..\Run: [SearchSettings] "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - .DEFAULT User Startup: IconPackager.lnk = C:\Program Files (x86)\Stardock\MyColors\IconPackager.exe (User 'Default user')
O4 - .DEFAULT User Startup: Think Green Weather.lnk = C:\Program Files (x86)\Stardock\DesktopGadgets\Think Green Weather\Think Green Weather.exe (User 'Default user')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: Nikon Monitor.lnk = C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - C:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll
O9 - Extra 'Tools' menuitem: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - C:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: inbox - {37540F19-DD4C-478B-B2DF-C19281BCAF27} - C:\PROGRA~2\INBOXT~1\Inbox.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
O23 - Service: ArcGIS License Manager - Acresso Software Inc. - C:\PROGRA~2\ESRI\License\arcgis9x\lmgrd.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~2\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~2\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~2\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~2\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files (x86)\McAfee\MPF\MPFSrv.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files (x86)\McAfee\MSK\MskSrver.exe
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PMBDeviceInfoProvider - Sony Corporation - C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Roxio UPnP Renderer 10 - Sonic Solutions - C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe
O23 - Service: Roxio Upnp Server 10 - Sonic Solutions - C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: VAIO Care Performance Service (SampleCollector) - Sony Corporation - C:\Program Files\Sony\VAIO Care\VCPerfService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: VAIO Media plus Content Importer (SOHCImp) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe
O23 - Service: VAIO Media plus Database Manager (SOHDBSvr) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe
O23 - Service: VAIO Media plus Digital Media Server (SOHDms) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe
O23 - Service: VAIO Media plus Device Searcher (SOHDs) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe
O23 - Service: VAIO Media plus Playlist Manager (SOHPlMgr) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: CamMonitor (uCamMonitor) - ArcSoft, Inc. - C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files (x86)\SONY\VAIO Event Service\VESMgr.exe
O23 - Service: VAIO Power Management - Sony Corporation - C:\Program Files\Sony\VAIO Power Management\SPMService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: VAIO Content Folder Watcher (VCFw) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
O23 - Service: VAIO Content Metadata Intelligent Analyzing Manager (VcmIAlzMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
O23 - Service: VAIO Content Metadata Intelligent Network Service Manager (VcmINSMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe
O23 - Service: VAIO Content Metadata XML Interface (VcmXmlIfHelper) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe
O23 - Service: VCService - Sony Corporation - C:\Program Files\Sony\VAIO Care\VCService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VSNService - Sony Corporation - C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: VUAgent - Sony Corporation - C:\Program Files\Sony\VAIO Update 5\VUAgent.exe
O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WD SmartWare Drive Manager Service (WDDMService) - WDC - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
O23 - Service: WD SmartWare Background Service (WDSmartWareBackgroundService) - Memeo - C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
O23 - Service: Stardock WindowBlinds (WindowBlinds) - Stardock Corporation - C:\Program Files (x86)\Stardock\MyColors\VistaSrv.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 24595 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files (x86)\Stardock\MyColors\VistaSrv.exe"
"C:\Program Files (x86)\Stardock\MyColors\WBVista.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 21123520
\??\C:\Windows\system32\conhost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe"
C:\PROGRA~2\ESRI\License\arcgis9x\lmgrd.exe
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
\??\C:\Windows\system32\conhost.exe
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\PROGRA~2\ESRI\License\arcgis9x\lmgrd.exe" -c "C:\PROGRA~2\ESRI\License\arcgis9x\license.lic" -l "C:\Program Files (x86)\ESRI\License\arcgis9x\ARCGIS_LM.LOG" -z
ARCGIS.exe -T Tadeas-VAIO 11.6 -1 -c "C:\PROGRA~2\ESRI\License\arcgis9x\license.lic" --lmgrd_start 4dbbe4ec -l "C:\Program Files (x86)\ESRI\License\arcgis9x\ARCGIS_LM.LOG"
"C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe"
c:\PROGRA~2\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
"C:\Program Files (x86)\McAfee\MPF\MPFSrv.exe"
"C:\Program Files (x86)\McAfee\MSK\MskSrver.exe"
"C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe"
"C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
"C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe"
"C:\Program Files (x86)\SONY\VAIO Event Service\VESMgr.exe"
"C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe"
"C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe"
C:\Windows\SysWOW64\DllHost.exe /Processid:{78FD0120-D39C-45D8-A9BE-2B802B3C23E5}
"C:\Program Files\Sony\VAIO Smart Network\VSNService.exe"
"C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe"
"C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe"
"C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe"
WLIDSvcM.exe 2944
C:\PROGRA~2\McAfee\MSC\mcmscsvc.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-43419e75-2bc6-4ecc-b4fd-93ed10808b96 -SystemEventPortName:HostProcess-04d41a70-1d76-4f91-b8e6-29d1606f8793 -IoCancelEventPortName:HostProcess-637547d0-0820-4291-a8ae-597cf1cdb2d2 -NonStateChangingEventPortName:HostProcess-515858ac-dbea-4fa0-96a6-f5845ec0b805 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:76bdaa14-2684-4b5d-8c0f-21c9c6d36734
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
C:\PROGRA~2\McAfee\VIRUSS~1\mcsysmon.exe
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files (x86)\SONY\VAIO Event Service\VESMgrSub.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"c:\PROGRA~2\COMMON~1\mcafee\mna\mcnasvc.exe"
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
"C:\Program Files\Sony\VAIO Care\VCPerfService.exe" "/service" "/sstates" "/sampleinterval=5000" "/procinterval=5" "/dllinterval=120" "/counter=\Processor(_Total)\% Processor Time:1/counter=\PhysicalDisk(_Total)\Disk Bytes/sec:1" "/counter=\Network Interface(*)\Bytes Total/sec:1" "/expandcounter=\Processor Information(*)\Processor Frequency:1" "/expandcounter=\Processor(*)\% Idle Time:1" "/expandcounter=\Processor(*)\% C1 Time:1" "/expandcounter=\Processor(*)\% C2 Time:1" "/expandcounter=\Processor(*)\% C3 Time:1" "/expandcounter=\Processor(*)\% Processor Time:1" "/directory=C:\ProgramData\Sony Corporation\VAIO Care\inteldata"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
c:\PROGRA~2\mcafee.com\agent\mcagent.exe -Embedding
"taskhost.exe"
taskeng.exe {455D0BC2-3EFA-4307-8240-18A4D33CABB3}
"C:\Windows\system32\Dwm.exe"
/Device:000000a1
"C:\Program Files\Sony\VAIO Power Management\SPMgr.exe" /Start
C:\Windows\Explorer.EXE
taskeng.exe {D8CE2F4E-EB5C-4477-8246-B171668463A1}
"C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe" /Stationary
"C:\Program Files\Sony\VAIO Power Management\SPMService.exe"
C:\Program Files\Sony\VAIO Care/listener.exe /silent /slot=0
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe"
"C:\Program Files\Apoint\Apoint.exe"
"C:\Program Files\Java\jre6\bin\jusched.exe"
"C:\Program Files\Apoint\ApMsgFwd.exe" -s{05FA8492-C047-4207-BE65-780D8591C113}
"C:\Program Files\Apoint\Apvfb.exe"
"Apntex.exe"
\??\C:\Windows\system32\conhost.exe
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe"
"C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE" /tsr
"C:\Program Files (x86)\SONY\ISB Utility\ISBMgr.exe"
"C:\Program Files (x86)\SONY\PMB\PMBVolumeWatcher.exe"
"C:\Program Files (x86)\SONY\Marketing Tools\MarketingTools.exe"
"C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe" -osboot
"C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
"C:\Program Files (x86)\DivX\DivX Plus Web Player\DDMService.exe" start
"C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.3\facemoodssrv.exe" /md I
"C:\Program Files (x86)\Philips\Philips Songbird Resources\Autolauncher\PhilipsDeviceListener.exe"
"C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Windows\system32\wuauclt.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\ICQ7.2\ICQ.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.00FA3C00.1993216058 /prefetch:3 --ignored=" --type=renderer "
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.00FA3A80.1648835521 /prefetch:3 --ignored=" --type=renderer "
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.04B04C00.2108245491 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.046EBA80.1877913849 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.046EB900.752526669 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.046EB600.1596612261 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.046EB480.793914486 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.046EB300.500635302 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.046EB180.292515490 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.046EB000.489264999 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.03B59C00.1738400972 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.03B59A80.1430115510 /prefetch:3
C:\Windows\system32\rundll32.exe "C:\PROGRA~2\Google\Chrome\APPLIC~1\100648~1.205\gcswf32.dll",BrokerMain browser=chrome
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Program Files (x86)\Google\Chrome\Application\10.0.648.205\gcswf32.dll" --lang=cs --plugin-data-dir="C:\Users\Tadeáš\AppData\Local\Google\Chrome\User Data\Default" --channel=6500.04B55000.1629469826 /prefetch:4 --flash-broker=5356
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.03B59900.1343526397 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.03B59D80.1354735402 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.03B59780.199064469 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.03B59600.601135412 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.03B59480.484539128 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.03B59180.1133500274 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.04A70D80.98394814 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.04A70C00.475462091 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.04A70A80.585120658 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.04A70900.1517551832 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.04A70780.309847270 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.03B59300.404788922 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.04A70600.782216231 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.04A70480.327615130 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.04A70180.621764450 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.04A70000.1517776038 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.04B04D80.949498502 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.04B04A80.664125611 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.04B04900.1945643478 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.04B04780.1617245272 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.04B04600.838932830 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.04B04480.1259208648 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.04B04300.76647368 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.04B04180.1865417962 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.04B04000.1477178290 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.05A71D80.1545078126 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.05A71C00.441429756 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.05A71A80.42414396 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.05A71900.1573383170 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_7/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_http/ --channel=6500.05A71780.1977856847 /prefetch:3
C:\Windows\system32\DllHost.exe /Processid:{76D0CB12-7604-4048-B83C-1005C7DDC503}
"C:\Program Files\Sony\VAIO Care\VCsystray.exe"
"C:\Program Files\Sony\VAIO Care\VCService.exe"
"C:\Program Files\Sony\VAIO Care\VCAgent.exe"
C:\Windows\System32\vds.exe
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Users\Tadeáš\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Defraggler Volume C Task.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\McDefragTask.job
C:\Windows\tasks\Norton Security Scan for Tadeáš.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27B4851A-3207-45A2-B947-BE8AFE6163AB}]
McAfee Phishing Filter - c:\PROGRA~2\mcafee\msk\MSKAPB~1.DLL [2009-10-02 337424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7DB2D5A0-7241-4E79-B68D-6309F01C5231}]
scriptproxy - C:\Program Files\McAfee\VirusScan\scriptsn.dll [2010-02-17 60224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-12-16 43520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10EDB994-47F8-43F7-AE96-F2EA63E9F90F}]
QuickStores-Toolbar - C:\Windows\system32\mscoree.dll [2010-11-05 444752]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
C:\PROGRA~2\Crawler\Toolbar\ctbr.dll [2010-10-13 1235408]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27B4851A-3207-45A2-B947-BE8AFE6163AB}]
McAfee Phishing Filter - c:\PROGRA~2\mcafee\msk\mskapbho.dll [2009-10-02 246800]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-10-03 341600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll [2010-10-18 3908192]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2010-12-08 3123072]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2010-12-08 3123072]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64182481-4F71-486b-A045-B233BD0DA8FC}]
CescrtHlpr Object - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.3\bh\facemoods.dll [2010-10-26 262144]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7DB2D5A0-7241-4E79-B68D-6309F01C5231}]
scriptproxy - C:\Program Files (x86)\McAfee\VirusScan\scriptsn.dll [2010-02-17 62784]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
BitTorrentBar Toolbar - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll [2010-10-18 3908192]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-11-10 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-11-22 1242504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}]
pdfforge Toolbar - C:\Program Files (x86)\pdfforge Toolbar\IE\4.3\pdfforgeToolbarIE.dll [2011-01-28 726016]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-02-28 1089288]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}]
Inbox Toolbar - C:\PROGRA~2\INBOXT~1\Inbox.dll [2010-09-29 807928]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-04-04 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - QuickStores-Toolbar - C:\Windows\system32\mscoree.dll [2010-11-05 444752]
{32099AAC-C132-4136-9E9A-4E364A424E17}
{D7E97865-918F-41E4-9CD0-25AB1C574CE8} - &Inbox Toolbar - C:\PROGRA~2\INBOXT~1\Inbox.dll [2010-09-29 807928]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler lišta - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll [2010-10-13 1235408]
{88c7f2aa-f93f-432c-8f0e-b7d85967a527} - BitTorrentBar Toolbar - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll [2010-10-18 3908192]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll [2010-10-18 3908192]
{DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - facemoods Toolbar - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.3\facemoodsTlbr.dll [2010-10-26 217088]
{B922D405-6D13-4A2B-AE89-08A030DA4402} - pdfforge Toolbar - C:\Program Files (x86)\pdfforge Toolbar\IE\4.3\pdfforgeToolbarIE.dll [2011-01-28 726016]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-02-28 1089288]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"=C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-10-13 186904]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-02-09 10060320]
"Apoint"=C:\Program Files\Apoint\Apoint.exe [2009-11-04 208384]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-12-16 171520]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2010-01-11 16397416]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WDDMStatus.lnk]
C:\PROGRA~1\WESTER~1\WDSMAR~1\WDDRIV~1\WDDMST~1.EXE [2009-10-14 2111296]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WDSmartWare.lnk]
C:\PROGRA~2\WESTER~1\WDSMAR~1\FRONTP~1\WDSMAR~1.EXE [2009-10-14 9085760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Tadeáš^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Think Green Weather.lnk]
C:\PROGRA~2\Stardock\DESKTO~1\THINKG~1\THINKG~1.EXE [2008-05-09 728576]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ISBMgr.exe"=C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [2009-08-26 320880]
"McENUI"=C:\PROGRA~2\McAfee\MHN\McENUI.exe [2009-07-07 1176808]
"PMBVolumeWatcher"=C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [2009-10-24 597792]
"MarketingTools"=C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe [2009-12-16 26624]
"mcagent_exe"=C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe [2010-06-10 1218008]
"AdobeCS4ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"TkBellExe"=C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe [2010-10-03 202256]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"DivXUpdate"=C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2010-12-09 1226608]
"DivX Download Manager"=C:\Program Files (x86)\DivX\DivX Plus Web Player\DDmService.exe [2010-12-08 63360]
"facemoods"=C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.3\facemoodssrv.exe [2010-10-26 323584]
"Philips Device Listener"=C:\Program Files (x86)\Philips\Philips Songbird Resources\Autolauncher\PhilipsDeviceListener.exe [2010-05-27 375296]
""= []
"SearchSettings"=C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe [2011-01-28 526336]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
Nikon Monitor.lnk - C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe

C:\Users\Tadeáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-04-30 11:55:43 ----D---- C:\Windows\system32\SPReview
2011-04-30 11:55:31 ----D---- C:\Windows\system32\EventProviders
2011-04-30 11:48:15 ----A---- C:\Windows\system32\netfxperf.dll
2011-04-30 11:48:15 ----A---- C:\Windows\system32\dfshim.dll
2011-04-30 11:48:08 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2011-04-30 11:48:05 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-04-30 11:48:04 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2011-04-30 11:48:04 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2011-04-30 11:48:03 ----A---- C:\Windows\system32\mstscax.dll
2011-04-30 11:48:03 ----A---- C:\Windows\system32\d3d10warp.dll
2011-04-30 11:48:01 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2011-04-30 11:47:58 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2011-04-30 11:47:58 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2011-04-30 11:47:57 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2011-04-30 11:47:57 ----A---- C:\Windows\system32\sysmain.dll
2011-04-30 11:47:57 ----A---- C:\Windows\system32\shell32.dll
2011-04-30 11:47:57 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-04-30 11:47:54 ----A---- C:\Windows\system32\MSVidCtl.dll
2011-04-30 11:47:53 ----A---- C:\Windows\system32\wmp.dll
2011-04-30 11:47:53 ----A---- C:\Windows\system32\tquery.dll
2011-04-30 11:47:52 ----A---- C:\Windows\system32\mssrch.dll
2011-04-30 11:47:51 ----A---- C:\Windows\system32\ntdll.dll
2011-04-30 11:47:51 ----A---- C:\Windows\system32\mscoree.dll
2011-04-30 11:47:51 ----A---- C:\Windows\system32\mmcndmgr.dll
2011-04-30 11:47:49 ----A---- C:\Windows\SYSWOW64\shell32.dll
2011-04-30 11:47:49 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2011-04-30 11:47:49 ----A---- C:\Windows\system32\xpsservices.dll
2011-04-30 11:47:49 ----A---- C:\Windows\system32\secproc_isv.dll
2011-04-30 11:47:49 ----A---- C:\Windows\system32\secproc.dll
2011-04-30 11:47:49 ----A---- C:\Windows\system32\RMActivate_isv.exe
2011-04-30 11:47:49 ----A---- C:\Windows\system32\RMActivate.exe
2011-04-30 11:47:49 ----A---- C:\Windows\system32\mf.dll
2011-04-30 11:47:47 ----A---- C:\Windows\SYSWOW64\secproc.dll
2011-04-30 11:47:47 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2011-04-30 11:47:47 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2011-04-30 11:47:47 ----A---- C:\Windows\system32\schedsvc.dll
2011-04-30 11:47:47 ----A---- C:\Windows\system32\rpcrt4.dll
2011-04-30 11:47:46 ----A---- C:\Windows\system32\ole32.dll
2011-04-30 11:47:45 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2011-04-30 11:47:45 ----A---- C:\Windows\system32\taskschd.dll
2011-04-30 11:47:45 ----A---- C:\Windows\system32\spwizui.dll
2011-04-30 11:47:45 ----A---- C:\Windows\system32\RacEngn.dll
2011-04-30 11:47:45 ----A---- C:\Windows\system32\iertutil.dll
2011-04-30 11:47:44 ----A---- C:\Windows\SYSWOW64\mf.dll
2011-04-30 11:47:44 ----A---- C:\Windows\system32\wevtsvc.dll
2011-04-30 11:47:44 ----A---- C:\Windows\system32\ExplorerFrame.dll
2011-04-30 11:47:44 ----A---- C:\Windows\system32\diagperf.dll
2011-04-30 11:47:43 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-04-30 11:47:43 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2011-04-30 11:47:43 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-04-30 11:47:43 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2011-04-30 11:47:43 ----A---- C:\Windows\system32\vssapi.dll
2011-04-30 11:47:43 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2011-04-30 11:47:43 ----A---- C:\Windows\system32\msxml3.dll
2011-04-30 11:47:43 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2011-04-30 11:47:42 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2011-04-30 11:47:41 ----A---- C:\Windows\system32\UIRibbon.dll
2011-04-30 11:47:39 ----A---- C:\Windows\SYSWOW64\wmp.dll
2011-04-30 11:47:38 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2011-04-30 11:47:38 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2011-04-30 11:47:38 ----A---- C:\Windows\system32\WsmSvc.dll
2011-04-30 11:47:38 ----A---- C:\Windows\system32\WMVCORE.DLL
2011-04-30 11:47:37 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-04-30 11:47:37 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2011-04-30 11:47:37 ----A---- C:\Windows\system32\PresentationHost.exe
2011-04-30 11:47:36 ----A---- C:\Windows\system32\rdpdd.dll
2011-04-30 11:47:35 ----A---- C:\Windows\system32\WinSAT.exe
2011-04-30 11:47:35 ----A---- C:\Windows\system32\spreview.exe
2011-04-30 11:47:35 ----A---- C:\Windows\system32\spinstall.exe
2011-04-30 11:47:35 ----A---- C:\Windows\system32\MPSSVC.dll
2011-04-30 11:47:35 ----A---- C:\Windows\system32\CertEnroll.dll
2011-04-30 11:47:33 ----A---- C:\Windows\SYSWOW64\tquery.dll
2011-04-30 11:47:33 ----A---- C:\Windows\system32\WMVDECOD.DLL
2011-04-30 11:47:32 ----A---- C:\Windows\system32\msxml6.dll
2011-04-30 11:47:32 ----A---- C:\Windows\system32\d3d9.dll
2011-04-30 11:47:31 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2011-04-30 11:47:31 ----A---- C:\Windows\system32\SearchFolder.dll
2011-04-30 11:47:31 ----A---- C:\Windows\system32\IKEEXT.DLL
2011-04-30 11:47:29 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2011-04-30 11:47:29 ----A---- C:\Windows\system32\kernel32.dll
2011-04-30 11:47:29 ----A---- C:\Windows\system32\gpsvc.dll
2011-04-30 11:47:29 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2011-04-30 11:47:28 ----A---- C:\Windows\system32\VSSVC.exe
2011-04-30 11:47:27 ----A---- C:\Windows\system32\mstime.dll
2011-04-30 11:47:27 ----A---- C:\Windows\system32\dwmcore.dll
2011-04-30 11:47:27 ----A---- C:\Windows\system32\drivers\http.sys
2011-04-30 11:47:27 ----A---- C:\Windows\system32\dbgeng.dll
2011-04-30 11:47:25 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2011-04-30 11:47:25 ----A---- C:\Windows\system32\drivers\ndis.sys
2011-04-30 11:47:25 ----A---- C:\Windows\system32\crypt32.dll
2011-04-30 11:47:24 ----A---- C:\Windows\SYSWOW64\ole32.dll
2011-04-30 11:47:24 ----A---- C:\Windows\system32\TSWorkspace.dll
2011-04-30 11:47:24 ----A---- C:\Windows\system32\schannel.dll
2011-04-30 11:47:24 ----A---- C:\Windows\system32\drivers\afd.sys
2011-04-30 11:47:24 ----A---- C:\Windows\system32\actxprxy.dll
2011-04-30 11:47:23 ----A---- C:\Windows\system32\termsrv.dll
2011-04-30 11:47:23 ----A---- C:\Windows\system32\sqmapi.dll
2011-04-30 11:47:23 ----A---- C:\Windows\system32\qmgr.dll
2011-04-30 11:47:23 ----A---- C:\Windows\system32\mstsc.exe
2011-04-30 11:47:23 ----A---- C:\Windows\system32\lsasrv.dll
2011-04-30 11:47:23 ----A---- C:\Windows\system32\KernelBase.dll
2011-04-30 11:47:23 ----A---- C:\Windows\system32\audiosrv.dll
2011-04-30 11:47:21 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2011-04-30 11:47:21 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2011-04-30 11:47:21 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2011-04-30 11:47:21 ----A---- C:\Windows\system32\winhttp.dll
2011-04-30 11:47:21 ----A---- C:\Windows\system32\setupapi.dll
2011-04-30 11:47:21 ----A---- C:\Windows\system32\rpcss.dll
2011-04-30 11:47:21 ----A---- C:\Windows\system32\QAGENTRT.DLL
2011-04-30 11:47:21 ----A---- C:\Windows\system32\propsys.dll
2011-04-30 11:47:21 ----A---- C:\Windows\system32\netlogon.dll
2011-04-30 11:47:21 ----A---- C:\Windows\system32\msv1_0.dll
2011-04-30 11:47:21 ----A---- C:\Windows\system32\imapi2fs.dll
2011-04-30 11:47:21 ----A---- C:\Windows\system32\d3d11.dll
2011-04-30 11:47:20 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2011-04-30 11:47:20 ----A---- C:\Windows\system32\wbengine.exe
2011-04-30 11:47:20 ----A---- C:\Windows\system32\authui.dll
2011-04-30 11:47:19 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2011-04-30 11:47:19 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2011-04-30 11:47:19 ----A---- C:\Windows\system32\WSDApi.dll
2011-04-30 11:47:19 ----A---- C:\Windows\system32\werconcpl.dll
2011-04-30 11:47:19 ----A---- C:\Windows\system32\user32.dll
2011-04-30 11:47:19 ----A---- C:\Windows\system32\taskeng.exe
2011-04-30 11:47:19 ----A---- C:\Windows\system32\oleaut32.dll
2011-04-30 11:47:19 ----A---- C:\Windows\system32\odbc32.dll
2011-04-30 11:47:19 ----A---- C:\Windows\system32\msfeeds.dll
2011-04-30 11:47:19 ----A---- C:\Windows\system32\drivers\netio.sys
2011-04-30 11:47:18 ----A---- C:\Windows\system32\drivers\tdx.sys

2011-04-30 11:47:18 ----A---- C:\Windows\system32\dhcpcore.dll
2011-04-30 11:47:18 ----A---- C:\Windows\system32\certmgr.dll
2011-04-30 11:47:17 ----A---- C:\Windows\SYSWOW64\wer.dll
2011-04-30 11:47:17 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2011-04-30 11:47:17 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2011-04-30 11:47:17 ----A---- C:\Windows\SYSWOW64\certcli.dll
2011-04-30 11:47:17 ----A---- C:\Windows\system32\webio.dll
2011-04-30 11:47:17 ----A---- C:\Windows\system32\tsmf.dll
2011-04-30 11:47:17 ----A---- C:\Windows\system32\scavengeui.dll
2011-04-30 11:47:17 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2011-04-30 11:47:17 ----A---- C:\Windows\system32\ncsi.dll
2011-04-30 11:47:17 ----A---- C:\Windows\system32\msdrm.dll
2011-04-30 11:47:17 ----A---- C:\Windows\system32\localspl.dll
2011-04-30 11:47:17 ----A---- C:\Windows\system32\drivers\netbt.sys
2011-04-30 11:47:16 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2011-04-30 11:47:16 ----A---- C:\Windows\system32\shlwapi.dll
2011-04-30 11:47:16 ----A---- C:\Windows\system32\msdtctm.dll
2011-04-30 11:47:16 ----A---- C:\Windows\system32\framedynos.dll
2011-04-30 11:47:15 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2011-04-30 11:47:15 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2011-04-30 11:47:15 ----A---- C:\Windows\SYSWOW64\mstime.dll
2011-04-30 11:47:15 ----A---- C:\Windows\system32\ws2_32.dll
2011-04-30 11:47:15 ----A---- C:\Windows\system32\winlogon.exe
2011-04-30 11:47:15 ----A---- C:\Windows\system32\usp10.dll
2011-04-30 11:47:15 ----A---- C:\Windows\system32\umpnpmgr.dll
2011-04-30 11:47:15 ----A---- C:\Windows\system32\quartz.dll
2011-04-30 11:47:15 ----A---- C:\Windows\system32\nlasvc.dll
2011-04-30 11:47:15 ----A---- C:\Windows\system32\netshell.dll
2011-04-30 11:47:15 ----A---- C:\Windows\system32\netcfgx.dll
2011-04-30 11:47:15 ----A---- C:\Windows\system32\lsm.exe
2011-04-30 11:47:15 ----A---- C:\Windows\system32\dxgi.dll
2011-04-30 11:47:15 ----A---- C:\Windows\system32\drivers\cng.sys
2011-04-30 11:47:15 ----A---- C:\Windows\system32\comdlg32.dll
2011-04-30 11:47:14 ----A---- C:\Windows\SYSWOW64\quartz.dll
2011-04-30 11:47:14 ----A---- C:\Windows\system32\wmpps.dll
2011-04-30 11:47:14 ----A---- C:\Windows\system32\d3d10_1core.dll
2011-04-30 11:47:14 ----A---- C:\Windows\system32\apphelp.dll
2011-04-30 11:47:13 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2011-04-30 11:47:13 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2011-04-30 11:47:13 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2011-04-30 11:47:13 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2011-04-30 11:47:13 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-04-30 11:47:13 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-04-30 11:47:13 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2011-04-30 11:47:13 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2011-04-30 11:47:13 ----A---- C:\Windows\system32\wpdshext.dll
2011-04-30 11:47:13 ----A---- C:\Windows\system32\Query.dll
2011-04-30 11:47:13 ----A---- C:\Windows\system32\QAGENT.DLL
2011-04-30 11:47:13 ----A---- C:\Windows\system32\mswsock.dll
2011-04-30 11:47:13 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2011-04-30 11:47:13 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2011-04-30 11:47:13 ----A---- C:\Windows\system32\BFE.DLL
2011-04-30 11:47:13 ----A---- C:\Windows\system32\azroles.dll
2011-04-30 11:47:12 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2011-04-30 11:47:12 ----A---- C:\Windows\system32\Vault.dll
2011-04-30 11:47:12 ----A---- C:\Windows\system32\samsrv.dll
2011-04-30 11:47:12 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2011-04-30 11:47:12 ----A---- C:\Windows\system32\cmd.exe
2011-04-30 11:47:11 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2011-04-30 11:47:11 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2011-04-30 11:47:11 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2011-04-30 11:47:11 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2011-04-30 11:47:11 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2011-04-30 11:47:11 ----A---- C:\Windows\system32\win32spl.dll
2011-04-30 11:47:11 ----A---- C:\Windows\system32\mssvp.dll
2011-04-30 11:47:11 ----A---- C:\Windows\system32\lpksetup.exe
2011-04-30 11:47:10 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2011-04-30 11:47:10 ----A---- C:\Windows\system32\WindowsCodecs.dll
2011-04-30 11:47:10 ----A---- C:\Windows\system32\WebClnt.dll
2011-04-30 11:47:09 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2011-04-30 11:47:09 ----A---- C:\Windows\SYSWOW64\webio.dll
2011-04-30 11:47:09 ----A---- C:\Windows\SYSWOW64\upnp.dll
2011-04-30 11:47:09 ----A---- C:\Windows\SYSWOW64\Query.dll
2011-04-30 11:47:09 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2011-04-30 11:47:09 ----A---- C:\Windows\system32\Wldap32.dll
2011-04-30 11:47:09 ----A---- C:\Windows\system32\taskcomp.dll
2011-04-30 11:47:09 ----A---- C:\Windows\system32\sxs.dll
2011-04-30 11:47:09 ----A---- C:\Windows\system32\pnidui.dll
2011-04-30 11:47:09 ----A---- C:\Windows\system32\mfds.dll
2011-04-30 11:47:09 ----A---- C:\Windows\system32\mcbuilder.exe
2011-04-30 11:47:09 ----A---- C:\Windows\system32\ipsmsnap.dll
2011-04-30 11:47:09 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2011-04-30 11:47:08 ----A---- C:\Windows\SYSWOW64\schannel.dll
2011-04-30 11:47:08 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2011-04-30 11:47:08 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2011-04-30 11:47:08 ----A---- C:\Windows\system32\wuaueng.dll
2011-04-30 11:47:08 ----A---- C:\Windows\system32\hgprint.dll
2011-04-30 11:47:07 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2011-04-30 11:47:07 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2011-04-30 11:47:07 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2011-04-30 11:47:07 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2011-04-30 11:47:07 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2011-04-30 11:47:07 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2011-04-30 11:47:07 ----A---- C:\Windows\SYSWOW64\authui.dll
2011-04-30 11:47:07 ----A---- C:\Windows\system32\winsta.dll
2011-04-30 11:47:07 ----A---- C:\Windows\system32\webservices.dll
2011-04-30 11:47:07 ----A---- C:\Windows\system32\sqlsrv32.dll
2011-04-30 11:47:07 ----A---- C:\Windows\system32\spoolsv.exe
2011-04-30 11:47:07 ----A---- C:\Windows\system32\SessEnv.dll
2011-04-30 11:47:07 ----A---- C:\Windows\system32\iepeers.dll
2011-04-30 11:47:07 ----A---- C:\Windows\system32\fveapi.dll
2011-04-30 11:47:07 ----A---- C:\Windows\system32\dot3api.dll
2011-04-30 11:47:06 ----A---- C:\Windows\SYSWOW64\usp10.dll
2011-04-30 11:47:06 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2011-04-30 11:47:06 ----A---- C:\Windows\system32\drivers\msrpc.sys
2011-04-30 11:47:05 ----A---- C:\Windows\SYSWOW64\userenv.dll
2011-04-30 11:47:05 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe
2011-04-30 11:47:05 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2011-04-30 11:47:05 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2011-04-30 11:47:05 ----A---- C:\Windows\system32\wuapi.dll
2011-04-30 11:47:05 ----A---- C:\Windows\system32\WMNetMgr.dll
2011-04-30 11:47:05 ----A---- C:\Windows\system32\wlanpref.dll
2011-04-30 11:47:05 ----A---- C:\Windows\system32\vpnike.dll
2011-04-30 11:47:05 ----A---- C:\Windows\system32\schtasks.exe
2011-04-30 11:47:05 ----A---- C:\Windows\system32\prncache.dll
2011-04-30 11:47:05 ----A---- C:\Windows\system32\mcmde.dll
2011-04-30 11:47:05 ----A---- C:\Windows\system32\gdi32.dll
2011-04-30 11:47:05 ----A---- C:\Windows\system32\drivers\volsnap.sys
2011-04-30 11:47:04 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2011-04-30 11:47:04 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2011-04-30 11:47:04 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2011-04-30 11:47:04 ----A---- C:\Windows\system32\wintrust.dll
2011-04-30 11:47:04 ----A---- C:\Windows\system32\userenv.dll
2011-04-30 11:47:04 ----A---- C:\Windows\system32\photowiz.dll
2011-04-30 11:47:04 ----A---- C:\Windows\system32\evr.dll
2011-04-30 11:47:04 ----A---- C:\Windows\system32\drivers\rdbss.sys
2011-04-30 11:47:04 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2011-04-30 11:47:03 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2011-04-30 11:47:03 ----A---- C:\Windows\SYSWOW64\cmd.exe
2011-04-30 11:47:03 ----A---- C:\Windows\system32\wmpmde.dll
2011-04-30 11:47:03 ----A---- C:\Windows\system32\WMPEncEn.dll
2011-04-30 11:47:03 ----A---- C:\Windows\system32\wmpeffects.dll
2011-04-30 11:47:03 ----A---- C:\Windows\system32\SyncCenter.dll
2011-04-30 11:47:03 ----A---- C:\Windows\system32\sppobjs.dll
2011-04-30 11:47:03 ----A---- C:\Windows\system32\IPSECSVC.DLL
2011-04-30 11:47:03 ----A---- C:\Windows\system32\FXSSVC.exe
2011-04-30 11:47:03 ----A---- C:\Windows\system32\framedyn.dll
2011-04-30 11:47:03 ----A---- C:\Windows\system32\AudioSes.dll
2011-04-30 11:47:03 ----A---- C:\Windows\system32\aepdu.dll
2011-04-30 11:47:02 ----A---- C:\Windows\system32\srvsvc.dll
2011-04-30 11:47:02 ----A---- C:\Windows\system32\shsvcs.dll
2011-04-30 11:47:02 ----A---- C:\Windows\system32\mfreadwrite.dll
2011-04-30 11:47:02 ----A---- C:\Windows\system32\aeinv.dll
2011-04-30 11:47:01 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2011-04-30 11:47:01 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2011-04-30 11:47:01 ----A---- C:\Windows\SYSWOW64\propsys.dll
2011-04-30 11:47:01 ----A---- C:\Windows\SYSWOW64\mfds.dll
2011-04-30 11:47:01 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2011-04-30 11:47:01 ----A---- C:\Windows\system32\WinSATAPI.dll
2011-04-30 11:47:01 ----A---- C:\Windows\system32\stobject.dll
2011-04-30 11:47:01 ----A---- C:\Windows\system32\netdiagfx.dll
2011-04-30 11:47:01 ----A---- C:\Windows\system32\localsec.dll
2011-04-30 11:47:01 ----A---- C:\Windows\system32\imapi2.dll
2011-04-30 11:47:01 ----A---- C:\Windows\system32\fde.dll
2011-04-30 11:47:01 ----A---- C:\Windows\system32\credui.dll
2011-04-30 11:47:01 ----A---- C:\Windows\system32\bcryptprimitives.dll
2011-04-30 11:47:00 ----A---- C:\Windows\SYSWOW64\user32.dll
2011-04-30 11:47:00 ----A---- C:\Windows\system32\iphlpsvc.dll
2011-04-30 11:47:00 ----A---- C:\Windows\system32\inetpp.dll
2011-04-30 11:47:00 ----A---- C:\Windows\system32\drivers\udfs.sys
2011-04-30 11:47:00 ----A---- C:\Windows\system32\cdd.dll
2011-04-30 11:46:59 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2011-04-30 11:46:59 ----A---- C:\Windows\SYSWOW64\azroles.dll
2011-04-30 11:46:59 ----A---- C:\Windows\system32\tcpipcfg.dll
2011-04-30 11:46:59 ----A---- C:\Windows\system32\spp.dll
2011-04-30 11:46:59 ----A---- C:\Windows\system32\QSHVHOST.DLL
2011-04-30 11:46:59 ----A---- C:\Windows\system32\netid.dll
2011-04-30 11:46:59 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2011-04-30 11:46:59 ----A---- C:\Windows\system32\davclnt.dll
2011-04-30 11:46:59 ----A---- C:\Windows\system32\biocpl.dll
2011-04-30 11:46:58 ----A---- C:\Windows\system32\profsvc.dll
2011-04-30 11:46:58 ----A---- C:\Windows\system32\printui.dll
2011-04-30 11:46:58 ----A---- C:\Windows\system32\msinfo32.exe
2011-04-30 11:46:58 ----A---- C:\Windows\system32\gameux.dll
2011-04-30 11:46:57 ----A---- C:\Windows\SYSWOW64\themeui.dll
2011-04-30 11:46:57 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2011-04-30 11:46:57 ----A---- C:\Windows\SYSWOW64\spp.dll
2011-04-30 11:46:57 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2011-04-30 11:46:57 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2011-04-30 11:46:57 ----A---- C:\Windows\SYSWOW64\credui.dll
2011-04-30 11:46:57 ----A---- C:\Windows\system32\wusa.exe
2011-04-30 11:46:57 ----A---- C:\Windows\system32\wiaservc.dll
2011-04-30 11:46:57 ----A---- C:\Windows\system32\vds.exe
2011-04-30 11:46:57 ----A---- C:\Windows\system32\scansetting.dll
2011-04-30 11:46:57 ----A---- C:\Windows\system32\pla.dll
2011-04-30 11:46:57 ----A---- C:\Windows\system32\mspbda.dll
2011-04-30 11:46:57 ----A---- C:\Windows\system32\msdri.dll
2011-04-30 11:46:57 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2011-04-30 11:46:57 ----A---- C:\Windows\system32\conhost.exe
2011-04-30 11:46:57 ----A---- C:\Windows\system32\aitagent.exe
2011-04-30 11:46:57 ----A---- C:\Windows\splwow64.exe
2011-04-30 11:46:56 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2011-04-30 11:46:56 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2011-04-30 11:46:56 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2011-04-30 11:46:56 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2011-04-30 11:46:56 ----A---- C:\Windows\system32\rpchttp.dll
2011-04-30 11:46:56 ----A---- C:\Windows\system32\mscms.dll
2011-04-30 11:46:56 ----A---- C:\Windows\system32\drivers\pci.sys
2011-04-30 11:46:56 ----A---- C:\Windows\system32\cryptsvc.dll
2011-04-30 11:46:55 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2011-04-30 11:46:55 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2011-04-30 11:46:55 ----A---- C:\Windows\SYSWOW64\evr.dll
2011-04-30 11:46:55 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2011-04-30 11:46:55 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2011-04-30 11:46:55 ----A---- C:\Windows\system32\XpsRasterService.dll
2011-04-30 11:46:55 ----A---- C:\Windows\system32\wisptis.exe
2011-04-30 11:46:55 ----A---- C:\Windows\system32\sppwinob.dll
2011-04-30 11:46:55 ----A---- C:\Windows\system32\ocsetup.exe
2011-04-30 11:46:55 ----A---- C:\Windows\system32\msi.dll
2011-04-30 11:46:55 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2011-04-30 11:46:55 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2011-04-30 11:46:55 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2011-04-30 11:46:54 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2011-04-30 11:46:54 ----A---- C:\Windows\SYSWOW64\calc.exe
2011-04-30 11:46:54 ----A---- C:\Windows\system32\rdpcore.dll
2011-04-30 11:46:54 ----A---- C:\Windows\system32\ocsetapi.dll
2011-04-30 11:46:54 ----A---- C:\Windows\system32\DXP.dll
2011-04-30 11:46:54 ----A---- C:\Windows\system32\drivers\volmgr.sys
2011-04-30 11:46:54 ----A---- C:\Windows\system32\cfgmgr32.dll
2011-04-30 11:46:53 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2011-04-30 11:46:53 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2011-04-30 11:46:53 ----A---- C:\Windows\system32\wpdbusenum.dll
2011-04-30 11:46:53 ----A---- C:\Windows\system32\wcncsvc.dll
2011-04-30 11:46:53 ----A---- C:\Windows\system32\upnp.dll
2011-04-30 11:46:53 ----A---- C:\Windows\system32\Robocopy.exe
2011-04-30 11:46:53 ----A---- C:\Windows\system32\ntshrui.dll
2011-04-30 11:46:53 ----A---- C:\Windows\system32\mprapi.dll
2011-04-30 11:46:53 ----A---- C:\Windows\system32\eapphost.dll
2011-04-30 11:46:53 ----A---- C:\Windows\system32\eapp3hst.dll
2011-04-30 11:46:53 ----A---- C:\Windows\system32\drivers\msdsm.sys
2011-04-30 11:46:53 ----A---- C:\Windows\system32\ci.dll
2011-04-30 11:46:52 ----A---- C:\Windows\SYSWOW64\sxs.dll
2011-04-30 11:46:52 ----A---- C:\Windows\SYSWOW64\netshell.dll
2011-04-30 11:46:52 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2011-04-30 11:46:52 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2011-04-30 11:46:52 ----A---- C:\Windows\system32\thumbcache.dll
2011-04-30 11:46:52 ----A---- C:\Windows\system32\t2embed.dll
2011-04-30 11:46:52 ----A---- C:\Windows\system32\hal.dll
2011-04-30 11:46:52 ----A---- C:\Windows\system32\drivers\HpSAMD.sys
2011-04-30 11:46:51 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2011-04-30 11:46:51 ----A---- C:\Windows\SYSWOW64\stobject.dll
2011-04-30 11:46:51 ----A---- C:\Windows\SYSWOW64\prncache.dll
2011-04-30 11:46:51 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2011-04-30 11:46:51 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2011-04-30 11:46:51 ----A---- C:\Windows\system32\themeui.dll
2011-04-30 11:46:51 ----A---- C:\Windows\system32\sspicli.dll
2011-04-30 11:46:51 ----A---- C:\Windows\system32\scecli.dll
2011-04-30 11:46:51 ----A---- C:\Windows\system32\puiobj.dll
2011-04-30 11:46:51 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2011-04-30 11:46:51 ----A---- C:\Windows\system32\nlaapi.dll
2011-04-30 11:46:51 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2011-04-30 11:46:51 ----A---- C:\Windows\system32\msasn1.dll
2011-04-30 11:46:51 ----A---- C:\Windows\system32\iasrad.dll
2011-04-30 11:46:51 ----A---- C:\Windows\system32\DxpTaskSync.dll
2011-04-30 11:46:51 ----A---- C:\Windows\system32\dwmredir.dll
2011-04-30 11:46:51 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2011-04-30 11:46:51 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys
2011-04-30 11:46:51 ----A---- C:\Windows\system32\drivers\fvevol.sys
2011-04-30 11:46:51 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2011-04-30 11:46:50 ----A---- C:\Windows\SYSWOW64\printui.dll
2011-04-30 11:46:50 ----A---- C:\Windows\SYSWOW64\msi.dll
2011-04-30 11:46:50 ----A---- C:\Windows\system32\onex.dll
2011-04-30 11:46:50 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2011-04-30 11:46:49 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2011-04-30 11:46:49 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2011-04-30 11:46:49 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2011-04-30 11:46:49 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2011-04-30 11:46:49 ----A---- C:\Windows\SYSWOW64\net1.exe
2011-04-30 11:46:49 ----A---- C:\Windows\system32\wow64.dll
2011-04-30 11:46:49 ----A---- C:\Windows\system32\wdc.dll
2011-04-30 11:46:49 ----A---- C:\Windows\system32\scesrv.dll
2011-04-30 11:46:49 ----A---- C:\Windows\system32\iedkcs32.dll
2011-04-30 11:46:49 ----A---- C:\Windows\system32\drivers\usbport.sys
2011-04-30 11:46:49 ----A---- C:\Windows\system32\aaclient.dll
2011-04-30 11:46:48 ----A---- C:\Windows\system32\wlangpui.dll
2011-04-30 11:46:48 ----A---- C:\Windows\system32\sdengin2.dll
2011-04-30 11:46:48 ----A---- C:\Windows\system32\rasmans.dll
2011-04-30 11:46:48 ----A---- C:\Windows\system32\msftedit.dll
2011-04-30 11:46:47 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2011-04-30 11:46:47 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2011-04-30 11:46:47 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2011-04-30 11:46:47 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2011-04-30 11:46:47 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2011-04-30 11:46:47 ----A---- C:\Windows\system32\wucltux.dll
2011-04-30 11:46:47 ----A---- C:\Windows\system32\wscapi.dll
2011-04-30 11:46:47 ----A---- C:\Windows\system32\wiadefui.dll
2011-04-30 11:46:47 ----A---- C:\Windows\system32\VAN.dll
2011-04-30 11:46:47 ----A---- C:\Windows\system32\StructuredQuery.dll
2011-04-30 11:46:47 ----A---- C:\Windows\system32\SndVol.exe
2011-04-30 11:46:47 ----A---- C:\Windows\system32\samcli.dll
2011-04-30 11:46:47 ----A---- C:\Windows\system32\regapi.dll
2011-04-30 11:46:47 ----A---- C:\Windows\system32\netcenter.dll
2011-04-30 11:46:47 ----A---- C:\Windows\system32\iasacct.dll
2011-04-30 11:46:47 ----A---- C:\Windows\system32\dskquoui.dll
2011-04-30 11:46:47 ----A---- C:\Windows\system32\drivers\termdd.sys
2011-04-30 11:46:47 ----A---- C:\Windows\system32\drivers\partmgr.sys
2011-04-30 11:46:47 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2011-04-30 11:46:46 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2011-04-30 11:46:46 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2011-04-30 11:46:46 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2011-04-30 11:46:46 ----A---- C:\Windows\SYSWOW64\pnidui.dll
2011-04-30 11:46:46 ----A---- C:\Windows\system32\TabSvc.dll
2011-04-30 11:46:46 ----A---- C:\Windows\system32\srchadmin.dll
2011-04-30 11:46:46 ----A---- C:\Windows\system32\QUTIL.DLL
2011-04-30 11:46:46 ----A---- C:\Windows\system32\consent.exe
2011-04-30 11:46:45 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2011-04-30 11:46:45 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2011-04-30 11:46:45 ----A---- C:\Windows\SYSWOW64\webservices.dll
2011-04-30 11:46:45 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll
2011-04-30 11:46:45 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2011-04-30 11:46:45 ----A---- C:\Windows\SYSWOW64\fde.dll
2011-04-30 11:46:45 ----A---- C:\Windows\system32\WUDFSvc.dll
2011-04-30 11:46:45 ----A---- C:\Windows\system32\wksprt.exe
2011-04-30 11:46:45 ----A---- C:\Windows\system32\taskhost.exe
2011-04-30 11:46:45 ----A---- C:\Windows\system32\setupcl.exe
2011-04-30 11:46:45 ----A---- C:\Windows\system32\rastls.dll
2011-04-30 11:46:45 ----A---- C:\Windows\system32\drivers\msahci.sys
2011-04-30 11:46:45 ----A---- C:\Windows\system32\drivers\acpi.sys
2011-04-30 11:46:43 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2011-04-30 11:46:43 ----A---- C:\Windows\SYSWOW64\pla.dll
2011-04-30 11:46:43 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2011-04-30 11:46:43 ----A---- C:\Windows\system32\tapisrv.dll
2011-04-30 11:46:43 ----A---- C:\Windows\system32\netiohlp.dll
2011-04-30 11:46:43 ----A---- C:\Windows\system32\msconfig.exe
2011-04-30 11:46:43 ----A---- C:\Windows\system32\mimefilt.dll
2011-04-30 11:46:43 ----A---- C:\Windows\system32\lsmproxy.dll
2011-04-30 11:46:43 ----A---- C:\Windows\system32\ListSvc.dll
2011-04-30 11:46:43 ----A---- C:\Windows\system32\hgcpl.dll
2011-04-30 11:46:43 ----A---- C:\Windows\system32\fdeploy.dll
2011-04-30 11:46:43 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2011-04-30 11:46:43 ----A---- C:\Windows\system32\drivers\raspptp.sys
2011-04-30 11:46:43 ----A---- C:\Windows\system32\drivers\ks.sys
2011-04-30 11:46:43 ----A---- C:\Windows\system32\clusapi.dll
2011-04-30 11:46:43 ----A---- C:\Windows\system32\basecsp.dll
2011-04-30 11:46:42 ----A---- C:\Windows\SYSWOW64\winsta.dll
2011-04-30 11:46:42 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2011-04-30 11:46:42 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2011-04-30 11:46:42 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2011-04-30 11:46:41 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2011-04-30 11:46:41 ----A---- C:\Windows\SYSWOW64\imapi2.dll
2011-04-30 11:46:41 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-04-30 11:46:41 ----A---- C:\Windows\SYSWOW64\gameux.dll
2011-04-30 11:46:41 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll
2011-04-30 11:46:41 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2011-04-30 11:46:41 ----A---- C:\Windows\system32\riched20.dll
2011-04-30 11:46:41 ----A---- C:\Windows\system32\mtxclu.dll
2011-04-30 11:46:41 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2011-04-30 11:46:41 ----A---- C:\Windows\system32\dnscmmc.dll
2011-04-30 11:46:40 ----A---- C:\Windows\SYSWOW64\onex.dll
2011-04-30 11:46:40 ----A---- C:\Windows\system32\RpcRtRemote.dll
2011-04-30 11:46:40 ----A---- C:\Windows\system32\powercpl.dll
2011-04-30 11:46:40 ----A---- C:\Windows\system32\logoncli.dll
2011-04-30 11:46:40 ----A---- C:\Windows\system32\drivers\usbehci.sys
2011-04-30 11:46:40 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2011-04-30 11:46:39 ----A---- C:\Windows\SYSWOW64\WMPEncEn.dll
2011-04-30 11:46:39 ----A---- C:\Windows\SYSWOW64\winmm.dll
2011-04-30 11:46:39 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2011-04-30 11:46:39 ----A---- C:\Windows\SYSWOW64\samcli.dll
2011-04-30 11:46:39 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2011-04-30 11:46:39 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2011-04-30 11:46:39 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2011-04-30 11:46:39 ----A---- C:\Windows\SYSWOW64\autochk.exe
2011-04-30 11:46:39 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2011-04-30 11:46:39 ----A---- C:\Windows\system32\wkssvc.dll
2011-04-30 11:46:39 ----A---- C:\Windows\system32\vpnikeapi.dll
2011-04-30 11:46:39 ----A---- C:\Windows\system32\themecpl.dll
2011-04-30 11:46:39 ----A---- C:\Windows\system32\sharemediacpl.dll
2011-04-30 11:46:39 ----A---- C:\Windows\system32\SensorsCpl.dll
2011-04-30 11:46:39 ----A---- C:\Windows\system32\netjoin.dll
2011-04-30 11:46:39 ----A---- C:\Windows\system32\nci.dll
2011-04-30 11:46:39 ----A---- C:\Windows\system32\Narrator.exe
2011-04-30 11:46:39 ----A---- C:\Windows\system32\licmgr10.dll
2011-04-30 11:46:39 ----A---- C:\Windows\system32\Faultrep.dll
2011-04-30 11:46:39 ----A---- C:\Windows\system32\eudcedit.exe
2011-04-30 11:46:38 ----A---- C:\Windows\SYSWOW64\proquota.exe
2011-04-30 11:46:38 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2011-04-30 11:46:38 ----A---- C:\Windows\system32\sppcomapi.dll
2011-04-30 11:46:38 ----A---- C:\Windows\system32\comctl32.dll
2011-04-30 11:46:38 ----A---- C:\Windows\system32\cabview.dll
2011-04-30 11:46:37 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2011-04-30 11:46:37 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2011-04-30 11:46:37 ----A---- C:\Windows\SYSWOW64\srchadmin.dll
2011-04-30 11:46:37 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2011-04-30 11:46:37 ----A---- C:\Windows\SYSWOW64\regapi.dll
2011-04-30 11:46:37 ----A---- C:\Windows\SYSWOW64\powercpl.dll
2011-04-30 11:46:37 ----A---- C:\Windows\SYSWOW64\msutb.dll
2011-04-30 11:46:37 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2011-04-30 11:46:37 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2011-04-30 11:46:37 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2011-04-30 11:46:37 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2011-04-30 11:46:37 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2011-04-30 11:46:37 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2011-04-30 11:46:37 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2011-04-30 11:46:37 ----A---- C:\Windows\system32\wpd_ci.dll
2011-04-30 11:46:37 ----A---- C:\Windows\system32\shsetup.dll
2011-04-30 11:46:37 ----A---- C:\Windows\system32\sdclt.exe
2011-04-30 11:46:37 ----A---- C:\Windows\system32\nshipsec.dll
2011-04-30 11:46:37 ----A---- C:\Windows\system32\fms.dll
2011-04-30 11:46:37 ----A---- C:\Windows\system32\bcdsrv.dll
2011-04-30 11:46:37 ----A---- C:\Windows\system32\autochk.exe
2011-04-30 11:46:37 ----A---- C:\Windows\system32\autofmt.exe
2011-04-30 11:46:37 ----A---- C:\Windows\system32\autoconv.exe
2011-04-30 11:46:37 ----A---- C:\Windows\system32\audiodg.exe
2011-04-30 11:46:36 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2011-04-30 11:46:36 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2011-04-30 11:46:36 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2011-04-30 11:46:36 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2011-04-30 11:46:36 ----A---- C:\Windows\system32\wwanconn.dll
2011-04-30 11:46:36 ----A---- C:\Windows\system32\wlanui.dll
2011-04-30 11:46:36 ----A---- C:\Windows\system32\prntvpt.dll
2011-04-30 11:46:36 ----A---- C:\Windows\system32\mscorier.dll
2011-04-30 11:46:36 ----A---- C:\Windows\system32\drivers\winusb.sys
2011-04-30 11:46:36 ----A---- C:\Windows\system32\drivers\wanarp.sys
2011-04-30 11:46:36 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2011-04-30 11:46:36 ----A---- C:\Windows\system32\drivers\scsiport.sys
2011-04-30 11:46:36 ----A---- C:\Windows\system32\drivers\bthport.sys
2011-04-30 11:46:35 ----A---- C:\Windows\SYSWOW64\wdc.dll
2011-04-30 11:46:35 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2011-04-30 11:46:35 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL
2011-04-30 11:46:35 ----A---- C:\Windows\SYSWOW64\netid.dll
2011-04-30 11:46:35 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2011-04-30 11:46:35 ----A---- C:\Windows\system32\qedit.dll
2011-04-30 11:46:35 ----A---- C:\Windows\system32\mprddm.dll
2011-04-30 11:46:35 ----A---- C:\Windows\system32\mblctr.exe
2011-04-30 11:46:35 ----A---- C:\Windows\system32\fontext.dll
2011-04-30 11:46:35 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2011-04-30 11:46:35 ----A---- C:\Windows\system32\drivers\hidclass.sys
2011-04-30 11:46:35 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2011-04-30 11:46:35 ----A---- C:\Windows\system32\dps.dll
2011-04-30 11:46:35 ----A---- C:\Windows\system32\Display.dll
2011-04-30 11:46:35 ----A---- C:\Windows\system32\credssp.dll
2011-04-30 11:46:35 ----A---- C:\Windows\system32\batmeter.dll
2011-04-30 11:46:35 ----A---- C:\Windows\system32\AxInstSv.dll
2011-04-30 11:46:34 ----A---- C:\Windows\SYSWOW64\untfs.dll
2011-04-30 11:46:34 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2011-04-30 11:46:34 ----A---- C:\Windows\system32\wmpsrcwp.dll
2011-04-30 11:46:33 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2011-04-30 11:46:33 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2011-04-30 11:46:33 ----A---- C:\Windows\SYSWOW64\Vault.dll
2011-04-30 11:46:33 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll
2011-04-30 11:46:33 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2011-04-30 11:46:33 ----A---- C:\Windows\SYSWOW64\rastls.dll
2011-04-30 11:46:33 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2011-04-30 11:46:33 ----A---- C:\Windows\SYSWOW64\nci.dll
2011-04-30 11:46:33 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-04-30 11:46:33 ----A---- C:\Windows\system32\wpccpl.dll
2011-04-30 11:46:33 ----A---- C:\Windows\system32\usercpl.dll
2011-04-30 11:46:33 ----A---- C:\Windows\system32\rtutils.dll
2011-04-30 11:46:33 ----A---- C:\Windows\system32\provsvc.dll
2011-04-30 11:46:33 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2011-04-30 11:46:33 ----A---- C:\Windows\system32\DiagCpl.dll
2011-04-30 11:46:33 ----A---- C:\Windows\system32\bootres.dll
2011-04-30 11:46:32 ----A---- C:\Windows\SYSWOW64\taskmgr.exe
2011-04-30 11:46:32 ----A---- C:\Windows\SYSWOW64\DxpTaskSync.dll
2011-04-30 11:46:32 ----A---- C:\Windows\system32\sppsvc.exe
2011-04-30 11:46:32 ----A---- C:\Windows\system32\SndVolSSO.dll
2011-04-30 11:46:32 ----A---- C:\Windows\system32\rasppp.dll
2011-04-30 11:46:32 ----A---- C:\Windows\system32\dot3cfg.dll
2011-04-30 11:46:31 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2011-04-30 11:46:31 ----A---- C:\Windows\SYSWOW64\userinit.exe
2011-04-30 11:46:31 ----A---- C:\Windows\SYSWOW64\termmgr.dll
2011-04-30 11:46:31 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2011-04-30 11:46:31 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2011-04-30 11:46:31 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2011-04-30 11:46:31 ----A---- C:\Windows\SYSWOW64\eudcedit.exe
2011-04-30 11:46:31 ----A---- C:\Windows\SYSWOW64\Display.dll
2011-04-30 11:46:31 ----A---- C:\Windows\system32\taskmgr.exe
2011-04-30 11:46:31 ----A---- C:\Windows\system32\shdocvw.dll
2011-04-30 11:46:31 ----A---- C:\Windows\system32\proquota.exe
2011-04-30 11:46:31 ----A---- C:\Windows\system32\prnfldr.dll
2011-04-30 11:46:31 ----A---- C:\Windows\system32\pdh.dll
2011-04-30 11:46:31 ----A---- C:\Windows\system32\hbaapi.dll
2011-04-30 11:46:31 ----A---- C:\Windows\system32\dxdiagn.dll
2011-04-30 11:46:31 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2011-04-30 11:46:31 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2011-04-30 11:46:30 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2011-04-30 11:46:30 ----A---- C:\Windows\system32\drivers\ataport.sys
2011-04-30 11:46:29 ----A---- C:\Windows\system32\untfs.dll
2011-04-30 11:46:29 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2011-04-30 11:46:28 ----A---- C:\Windows\SYSWOW64\wiadefui.dll
2011-04-30 11:46:28 ----A---- C:\Windows\SYSWOW64\sppcomapi.dll
2011-04-30 11:46:28 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2011-04-30 11:46:28 ----A---- C:\Windows\SYSWOW64\rasppp.dll
2011-04-30 11:46:28 ----A---- C:\Windows\SYSWOW64\logoncli.dll
2011-04-30 11:46:28 ----A---- C:\Windows\SYSWOW64\cabview.dll
2011-04-30 11:46:27 ----A---- C:\Windows\SYSWOW64\themecpl.dll
2011-04-30 11:46:27 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll
2011-04-30 11:46:27 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2011-04-30 11:46:27 ----A---- C:\Windows\SYSWOW64\FirewallControlPanel.dll
2011-04-30 11:46:27 ----A---- C:\Windows\SYSWOW64\dnscmmc.dll
2011-04-30 11:46:27 ----A---- C:\Windows\system32\webcheck.dll
2011-04-30 11:46:27 ----A---- C:\Windows\system32\userinit.exe
2011-04-30 11:46:27 ----A---- C:\Windows\system32\slui.exe
2011-04-30 11:46:27 ----A---- C:\Windows\system32\rdpcorekmts.dll
2011-04-30 11:46:27 ----A---- C:\Windows\system32\accessibilitycpl.dll
2011-04-30 11:46:26 ----A---- C:\Windows\SYSWOW64\hgcpl.dll
2011-04-30 11:46:26 ----A---- C:\Windows\system32\zipfldr.dll
2011-04-30 11:46:26 ----A---- C:\Windows\system32\msieftp.dll
2011-04-30 11:46:26 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2011-04-30 11:46:25 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2011-04-30 11:46:25 ----A---- C:\Windows\SYSWOW64\scecli.dll
2011-04-30 11:46:25 ----A---- C:\Windows\SYSWOW64\mscories.dll
2011-04-30 11:46:25 ----A---- C:\Windows\SYSWOW64\mscms.dll
2011-04-30 11:46:25 ----A---- C:\Windows\SYSWOW64\mprddm.dll
2011-04-30 11:46:25 ----A---- C:\Windows\SYSWOW64\localsec.dll
2011-04-30 11:46:25 ----A---- C:\Windows\SYSWOW64\fontext.dll
2011-04-30 11:46:25 ----A---- C:\Windows\system32\sud.dll
2011-04-30 11:46:25 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2011-04-30 11:46:25 ----A---- C:\Windows\system32\dot3svc.dll
2011-04-30 11:46:25 ----A---- C:\Windows\system32\DeviceCenter.dll
2011-04-30 11:46:24 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll
2011-04-30 11:46:24 ----A---- C:\Windows\SYSWOW64\iasacct.dll
2011-04-30 11:46:24 ----A---- C:\Windows\system32\taskbarcpl.dll
2011-04-30 11:46:24 ----A---- C:\Windows\system32\qdvd.dll
2011-04-30 11:46:24 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2011-04-30 11:46:24 ----A---- C:\Windows\system32\networkmap.dll
2011-04-30 11:46:24 ----A---- C:\Windows\system32\cryptui.dll
2011-04-30 11:46:24 ----A---- C:\Windows\system32\ActionCenter.dll
2011-04-30 11:46:23 ----A---- C:\Windows\SYSWOW64\wlanui.dll
2011-04-30 11:46:23 ----A---- C:\Windows\SYSWOW64\w32tm.exe
2011-04-30 11:46:23 ----A---- C:\Windows\SYSWOW64\VAN.dll
2011-04-30 11:46:23 ----A---- C:\Windows\SYSWOW64\usercpl.dll
2011-04-30 11:46:23 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2011-04-30 11:46:23 ----A---- C:\Windows\SYSWOW64\qedit.dll
2011-04-30 11:46:23 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2011-04-30 11:46:23 ----A---- C:\Windows\SYSWOW64\prntvpt.dll
2011-04-30 11:46:23 ----A---- C:\Windows\SYSWOW64\PerfCenterCPL.dll
2011-04-30 11:46:23 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2011-04-30 11:46:23 ----A---- C:\Windows\SYSWOW64\batmeter.dll
2011-04-30 11:46:23 ----A---- C:\Windows\system32\uxlib.dll
2011-04-30 11:46:23 ----A---- C:\Windows\system32\twext.dll
2011-04-30 11:46:23 ----A---- C:\Windows\system32\srcore.dll
2011-04-30 11:46:23 ----A---- C:\Windows\system32\sisbkup.dll
2011-04-30 11:46:23 ----A---- C:\Windows\system32\recovery.dll
2011-04-30 11:46:23 ----A---- C:\Windows\system32\rdpwsx.dll
2011-04-30 11:46:23 ----A---- C:\Windows\system32\OobeFldr.dll
2011-04-30 11:46:23 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2011-04-30 11:46:23 ----A---- C:\Windows\system32\isoburn.exe
2011-04-30 11:46:23 ----A---- C:\Windows\system32\dsuiext.dll
2011-04-30 11:46:23 ----A---- C:\Windows\system32\drivers\usbhub.sys
2011-04-30 11:46:23 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2011-04-30 11:46:23 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2011-04-30 11:46:23 ----A---- C:\Windows\system32\cca.dll
2011-04-30 11:46:23 ----A---- C:\Windows\system32\bcdedit.exe
2011-04-30 11:46:23 ----A---- C:\Windows\system32\azroleui.dll
2011-04-30 11:46:23 ----A---- C:\Windows\system32\asycfilt.dll
2011-04-30 11:46:22 ----A---- C:\Windows\SYSWOW64\spwizeng.dll
2011-04-30 11:46:22 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2011-04-30 11:46:22 ----A---- C:\Windows\SYSWOW64\accessibilitycpl.dll
2011-04-30 11:46:22 ----A---- C:\Windows\system32\tzutil.exe
2011-04-30 11:46:22 ----A---- C:\Windows\system32\efscore.dll
2011-04-30 11:46:21 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2011-04-30 11:46:21 ----A---- C:\Windows\SYSWOW64\networkmap.dll
2011-04-30 11:46:21 ----A---- C:\Windows\SYSWOW64\netjoin.dll
2011-04-30 11:46:21 ----A---- C:\Windows\SYSWOW64\MSAC3ENC.DLL
2011-04-30 11:46:21 ----A---- C:\Windows\SYSWOW64\fdeploy.dll
2011-04-30 11:46:21 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2011-04-30 11:46:21 ----A---- C:\Windows\SYSWOW64\adsldp.dll
2011-04-30 11:46:21 ----A---- C:\Windows\system32\systemcpl.dll
2011-04-30 11:46:21 ----A---- C:\Windows\system32\sysclass.dll
2011-04-30 11:46:21 ----A---- C:\Windows\system32\syncui.dll
2011-04-30 11:46:21 ----A---- C:\Windows\system32\sspisrv.dll
2011-04-30 11:46:21 ----A---- C:\Windows\system32\shwebsvc.dll
2011-04-30 11:46:21 ----A---- C:\Windows\system32\sdcpl.dll
2011-04-30 11:46:21 ----A---- C:\Windows\system32\recdisc.exe
2011-04-30 11:46:21 ----A---- C:\Windows\system32\netplwiz.dll
2011-04-30 11:46:21 ----A---- C:\Windows\system32\ncryptui.dll
2011-04-30 11:46:21 ----A---- C:\Windows\system32\httpapi.dll
2011-04-30 11:46:21 ----A---- C:\Windows\system32\drivers\sdbus.sys
2011-04-30 11:46:21 ----A---- C:\Windows\system32\drivers\mpio.sys
2011-04-30 11:46:21 ----A---- C:\Windows\system32\certcli.dll
2011-04-30 11:46:21 ----A---- C:\Windows\system32\autoplay.dll
2011-04-30 11:46:21 ----A---- C:\Windows\system32\appinfo.dll
2011-04-30 11:46:20 ----A---- C:\Windows\SYSWOW64\wusa.exe
2011-04-30 11:46:20 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2011-04-30 11:46:20 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2011-04-30 11:46:20 ----A---- C:\Windows\system32\wlanmsm.dll
2011-04-30 11:46:20 ----A---- C:\Windows\system32\sdrsvc.dll
2011-04-30 11:46:20 ----A---- C:\Windows\system32\msvidc32.dll
2011-04-30 11:46:20 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2011-04-30 11:46:20 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2011-04-30 11:46:19 ----A---- C:\Windows\SYSWOW64\sud.dll
2011-04-30 11:46:19 ----A---- C:\Windows\SYSWOW64\prnfldr.dll
2011-04-30 11:46:19 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2011-04-30 11:46:19 ----A---- C:\Windows\SYSWOW64\OnLineIDCpl.dll
2011-04-30 11:46:19 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2011-04-30 11:46:19 ----A---- C:\Windows\SYSWOW64\MediaMetadataHandler.dll
2011-04-30 11:46:19 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll
2011-04-30 11:46:19 ----A---- C:\Windows\SYSWOW64\iasrad.dll
2011-04-30 11:46:19 ----A---- C:\Windows\SYSWOW64\credssp.dll
2011-04-30 11:46:19 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2011-04-30 11:46:19 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2011-04-30 11:46:19 ----A---- C:\Windows\system32\vdsutil.dll
2011-04-30 11:46:19 ----A---- C:\Windows\system32\termmgr.dll
2011-04-30 11:46:19 ----A---- C:\Windows\system32\spwizeng.dll
2011-04-30 11:46:19 ----A---- C:\Windows\system32\sethc.exe
2011-04-30 11:46:19 ----A---- C:\Windows\system32\odbccp32.dll
2011-04-30 11:46:19 ----A---- C:\Windows\system32\msscp.dll
2011-04-30 11:46:19 ----A---- C:\Windows\system32\mshtmled.dll
2011-04-30 11:46:19 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-04-30 11:46:19 ----A---- C:\Windows\system32\MFPlay.dll
2011-04-30 11:46:18 ----A---- C:\Windows\SYSWOW64\sisbkup.dll
2011-04-30 11:46:18 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2011-04-30 11:46:18 ----A---- C:\Windows\SYSWOW64\ftp.exe
2011-04-30 11:46:18 ----A---- C:\Windows\SYSWOW64\dot3cfg.dll
2011-04-30 11:46:18 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll
2011-04-30 11:46:18 ----A---- C:\Windows\system32\tsgqec.dll
2011-04-30 11:46:18 ----A---- C:\Windows\system32\sqlcese30.dll
2011-04-30 11:46:18 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2011-04-30 11:46:18 ----A---- C:\Windows\system32\rstrui.exe
2011-04-30 11:46:18 ----A---- C:\Windows\system32\ReAgent.dll
2011-04-30 11:46:18 ----A---- C:\Windows\system32\ntlanman.dll
2011-04-30 11:46:17 ----A---- C:\Windows\SYSWOW64\syncui.dll
2011-04-30 11:46:17 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll
2011-04-30 11:46:17 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2011-04-30 11:46:17 ----A---- C:\Windows\SYSWOW64\ifsutil.dll
2011-04-30 11:46:17 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2011-04-30 11:46:17 ----A---- C:\Windows\SYSWOW64\efscore.dll
2011-04-30 11:46:17 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll
2011-04-30 11:46:17 ----A---- C:\Windows\SYSWOW64\autoplay.dll
2011-04-30 11:46:17 ----A---- C:\Windows\SYSWOW64\ActionCenterCPL.dll
2011-04-30 11:46:17 ----A---- C:\Windows\system32\wwanprotdim.dll
2011-04-30 11:46:17 ----A---- C:\Windows\system32\wmdrmsdk.dll
2011-04-30 11:46:17 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2011-04-30 11:46:17 ----A---- C:\Windows\system32\srvcli.dll
2011-04-30 11:46:17 ----A---- C:\Windows\system32\slwga.dll
2011-04-30 11:46:17 ----A---- C:\Windows\system32\secur32.dll
2011-04-30 11:46:17 ----A---- C:\Windows\system32\rdpd3d.dll
2011-04-30 11:46:17 ----A---- C:\Windows\system32\odbctrac.dll
2011-04-30 11:46:17 ----A---- C:\Windows\system32\iyuv_32.dll
2011-04-30 11:46:17 ----A---- C:\Windows\system32\iTVData.dll
2011-04-30 11:46:17 ----A---- C:\Windows\system32\iprtrmgr.dll
2011-04-30 11:46:17 ----A---- C:\Windows\system32\drmmgrtn.dll
2011-04-30 11:46:17 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2011-04-30 11:46:16 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2011-04-30 11:46:16 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2011-04-30 11:46:16 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll
2011-04-30 11:46:16 ----A---- C:\Windows\SYSWOW64\ntlanman.dll
2011-04-30 11:46:16 ----A---- C:\Windows\SYSWOW64\dskquoui.dll
2011-04-30 11:46:16 ----A---- C:\Windows\system32\wavemsp.dll
2011-04-30 11:46:16 ----A---- C:\Windows\system32\ntprint.dll
2011-04-30 11:46:16 ----A---- C:\Windows\system32\nslookup.exe
2011-04-30 11:46:16 ----A---- C:\Windows\system32\NAPHLPR.DLL
2011-04-30 11:46:16 ----A---- C:\Windows\system32\msiexec.exe
2011-04-30 11:46:16 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2011-04-30 11:46:15 ----A---- C:\Windows\SYSWOW64\wmpsrcwp.dll
2011-04-30 11:46:15 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2011-04-30 11:46:15 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2011-04-30 11:46:15 ----A---- C:\Windows\SYSWOW64\sethc.exe
2011-04-30 11:46:15 ----A---- C:\Windows\SYSWOW64\riched20.dll
2011-04-30 11:46:15 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2011-04-30 11:46:15 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2011-04-30 11:46:15 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2011-04-30 11:46:15 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL
2011-04-30 11:46:15 ----A---- C:\Windows\SYSWOW64\migisol.dll
2011-04-30 11:46:15 ----A---- C:\Windows\SYSWOW64\fms.dll
2011-04-30 11:46:15 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2011-04-30 11:46:15 ----A---- C:\Windows\SYSWOW64\activeds.dll
2011-04-30 11:46:15 ----A---- C:\Windows\system32\TSpkg.dll
2011-04-30 11:46:15 ----A---- C:\Windows\system32\srrstr.dll
2011-04-30 11:46:15 ----A---- C:\Windows\system32\sppnp.dll
2011-04-30 11:46:15 ----A---- C:\Windows\system32\networkexplorer.dll
2011-04-30 11:46:15 ----A---- C:\Windows\system32\fsquirt.exe
2011-04-30 11:46:15 ----A---- C:\Windows\system32\certprop.dll
2011-04-30 11:46:15 ----A---- C:\Windows\system32\bcdboot.exe
2011-04-30 11:46:15 ----A---- C:\Windows\system32\acppage.dll
2011-04-30 11:46:14 ----A---- C:\Windows\SYSWOW64\nshipsec.dll
2011-04-30 11:46:14 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2011-04-30 11:46:14 ----A---- C:\Windows\SYSWOW64\httpapi.dll
2011-04-30 11:46:14 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2011-04-30 11:46:14 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2011-04-30 11:46:14 ----A---- C:\Windows\system32\wkscli.dll
2011-04-30 11:46:14 ----A---- C:\Windows\system32\remotepg.dll
2011-04-30 11:46:14 ----A---- C:\Windows\system32\dfrgui.exe
2011-04-30 11:46:14 ----A---- C:\Windows\system32\cdosys.dll
2011-04-30 11:46:14 ----A---- C:\Windows\system32\cabinet.dll
2011-04-30 11:46:13 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2011-04-30 11:46:13 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2011-04-30 11:46:13 ----A---- C:\Windows\SYSWOW64\wavemsp.dll
2011-04-30 11:46:13 ----A---- C:\Windows\SYSWOW64\tzutil.exe
2011-04-30 11:46:13 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2011-04-30 11:46:13 ----A---- C:\Windows\SYSWOW64\provsvc.dll
2011-04-30 11:46:13 ----A---- C:\Windows\SYSWOW64\ocsetup.exe
2011-04-30 11:46:13 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2011-04-30 11:46:13 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2011-04-30 11:46:13 ----A---- C:\Windows\SYSWOW64\isoburn.exe
2011-04-30 11:46:13 ----A---- C:\Windows\SYSWOW64\dsuiext.dll
2011-04-30 11:46:13 ----A---- C:\Windows\SYSWOW64\dot3ui.dll
2011-04-30 11:46:13 ----A---- C:\Windows\SYSWOW64\dfrgui.exe
2011-04-30 11:46:13 ----A---- C:\Windows\system32\wvc.dll
2011-04-30 11:46:13 ----A---- C:\Windows\system32\wuwebv.dll
2011-04-30 11:46:13 ----A---- C:\Windows\system32\wsqmcons.exe
2011-04-30 11:46:13 ----A---- C:\Windows\system32\wsnmp32.dll
2011-04-30 11:46:13 ----A---- C:\Windows\system32\wmpdxm.dll
2011-04-30 11:46:13 ----A---- C:\Windows\system32\wmdrmdev.dll
2011-04-30 11:46:13 ----A---- C:\Windows\system32\WinSCard.dll
2011-04-30 11:46:13 ----A---- C:\Windows\system32\WerFaultSecure.exe
2011-04-30 11:46:13 ----A---- C:\Windows\system32\net1.exe
2011-04-30 11:46:13 ----A---- C:\Windows\system32\ftp.exe
2011-04-30 11:46:13 ----A---- C:\Windows\system32\blackbox.dll
2011-04-30 11:46:12 ----A---- C:\Windows\SYSWOW64\wvc.dll
2011-04-30 11:46:12 ----A---- C:\Windows\SYSWOW64\wtsapi32.dll
2011-04-30 11:46:12 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2011-04-30 11:46:12 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2011-04-30 11:46:12 ----A---- C:\Windows\SYSWOW64\twext.dll
2011-04-30 11:46:12 ----A---- C:\Windows\SYSWOW64\mstask.dll
2011-04-30 11:46:12 ----A---- C:\Windows\system32\msyuv.dll
2011-04-30 11:46:12 ----A---- C:\Windows\system32\mfps.dll
2011-04-30 11:46:12 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2011-04-30 11:46:11 ----A---- C:\Windows\twain_32.dll
2011-04-30 11:46:11 ----A---- C:\Windows\SYSWOW64\uxlib.dll
2011-04-30 11:46:11 ----A---- C:\Windows\SYSWOW64\slwga.dll
2011-04-30 11:46:11 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2011-04-30 11:46:11 ----A---- C:\Windows\SYSWOW64\setupugc.exe
2011-04-30 11:46:11 ----A---- C:\Windows\SYSWOW64\qcap.dll
2011-04-30 11:46:11 ----A---- C:\Windows\SYSWOW64\qasf.dll
2011-04-30 11:46:11 ----A---- C:\Windows\SYSWOW64\occache.dll
2011-04-30 11:46:11 ----A---- C:\Windows\SYSWOW64\msrating.dll
2011-04-30 11:46:11 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-04-30 11:46:11 ----A---- C:\Windows\system32\WUDFPlatform.dll
2011-04-30 11:46:11 ----A---- C:\Windows\system32\unimdmat.dll
2011-04-30 11:46:11 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2011-04-30 11:46:11 ----A---- C:\Windows\system32\tsbyuv.dll
2011-04-30 11:46:11 ----A---- C:\Windows\system32\seclogon.dll
2011-04-30 11:46:11 ----A---- C:\Windows\system32\OpcServices.dll
2011-04-30 11:46:11 ----A---- C:\Windows\system32\msrle32.dll
2011-04-30 11:46:11 ----A---- C:\Windows\system32\mapistub.dll
2011-04-30 11:46:11 ----A---- C:\Windows\system32\mapi32.dll
2011-04-30 11:46:11 ----A---- C:\Windows\system32\iscsium.dll
2011-04-30 11:46:11 ----A---- C:\Windows\system32\ifsutil.dll
2011-04-30 11:46:11 ----A---- C:\Windows\system32\diskraid.exe
2011-04-30 11:46:10 ----A---- C:\Windows\SYSWOW64\msvfw32.dll
2011-04-30 11:46:10 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2011-04-30 11:46:10 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2011-04-30 11:46:10 ----A---- C:\Windows\system32\drivers\umbus.sys
2011-04-30 11:46:09 ----A---- C:\Windows\SYSWOW64\WPDShServiceObj.dll
2011-04-30 11:46:09 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2011-04-30 11:46:09 ----A---- C:\Windows\SYSWOW64\wimserv.exe
2011-04-30 11:46:09 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2011-04-30 11:46:09 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2011-04-30 11:46:09 ----A---- C:\Windows\SYSWOW64\rdpencom.dll
2011-04-30 11:46:09 ----A---- C:\Windows\SYSWOW64\nslookup.exe
2011-04-30 11:46:09 ----A---- C:\Windows\SYSWOW64\msscp.dll
2011-04-30 11:46:09 ----A---- C:\Windows\SYSWOW64\diskraid.exe
2011-04-30 11:46:09 ----A---- C:\Windows\SYSWOW64\DevicePairingFolder.dll
2011-04-30 11:46:09 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2011-04-30 11:46:09 ----A---- C:\Windows\SYSWOW64\audiodev.dll
2011-04-30 11:46:09 ----A---- C:\Windows\SYSWOW64\acppage.dll
2011-04-30 11:46:09 ----A---- C:\Windows\system32\wmpshell.dll
2011-04-30 11:46:09 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2011-04-30 11:46:09 ----A---- C:\Windows\system32\umb.dll
2011-04-30 11:46:09 ----A---- C:\Windows\system32\tlscsp.dll
2011-04-30 11:46:09 ----A---- C:\Windows\system32\rdpencom.dll
2011-04-30 11:46:09 ----A---- C:\Windows\system32\qasf.dll
2011-04-30 11:46:09 ----A---- C:\Windows\system32\perfmon.exe
2011-04-30 11:46:09 ----A---- C:\Windows\system32\netutils.dll
2011-04-30 11:46:09 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2011-04-30 11:46:09 ----A---- C:\Windows\system32\muifontsetup.dll
2011-04-30 11:46:09 ----A---- C:\Windows\system32\inseng.dll
2011-04-30 11:46:09 ----A---- C:\Windows\system32\d3d10level9.dll
2011-04-30 11:46:09 ----A---- C:\Windows\system32\AzSqlExt.dll
2011-04-30 11:46:08 ----A---- C:\Windows\SYSWOW64\remotepg.dll
2011-04-30 11:46:08 ----A---- C:\Windows\SYSWOW64\perfmon.exe
2011-04-30 11:46:08 ----A---- C:\Windows\system32\runonce.exe
2011-04-30 11:46:08 ----A---- C:\Windows\system32\FXSAPI.dll
2011-04-30 11:46:08 ----A---- C:\Windows\system32\dbghelp.dll
2011-04-30 11:46:08 ----A---- C:\Windows\system32\browser.dll
2011-04-30 11:46:08 ----A---- C:\Windows\system32\ActionQueue.dll
2011-04-30 11:46:07 ----A---- C:\Windows\SYSWOW64\wmpdxm.dll
2011-04-30 11:46:07 ----A---- C:\Windows\SYSWOW64\vpnikeapi.dll
2011-04-30 11:46:07 ----A---- C:\Windows\SYSWOW64\vdsbas.dll
2011-04-30 11:46:07 ----A---- C:\Windows\SYSWOW64\UserAccountControlSettings.dll
2011-04-30 11:46:07 ----A---- C:\Windows\SYSWOW64\raschap.dll
2011-04-30 11:46:07 ----A---- C:\Windows\SYSWOW64\QUTIL.DLL
2011-04-30 11:46:07 ----A---- C:\Windows\SYSWOW64\onexui.dll
2011-04-30 11:46:07 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2011-04-30 11:46:07 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2011-04-30 11:46:07 ----A---- C:\Windows\SYSWOW64\ocsetapi.dll
2011-04-30 11:46:07 ----A---- C:\Windows\SYSWOW64\networkexplorer.dll
2011-04-30 11:46:07 ----A---- C:\Windows\SYSWOW64\NAPCRYPT.DLL
2011-04-30 11:46:07 ----A---- C:\Windows\SYSWOW64\iTVData.dll
2011-04-30 11:46:07 ----A---- C:\Windows\SYSWOW64\input.dll
2011-04-30 11:46:07 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2011-04-30 11:46:07 ----A---- C:\Windows\system32\wpdwcn.dll
2011-04-30 11:46:07 ----A---- C:\Windows\system32\WMVSDECD.DLL
2011-04-30 11:46:07 ----A---- C:\Windows\system32\WMADMOD.DLL
2011-04-30 11:46:07 ----A---- C:\Windows\system32\wiavideo.dll
2011-04-30 11:46:07 ----A---- C:\Windows\system32\vdsbas.dll
2011-04-30 11:46:07 ----A---- C:\Windows\system32\syssetup.dll
2011-04-30 11:46:07 ----A---- C:\Windows\system32\raschap.dll
2011-04-30 11:46:07 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2011-04-30 11:46:07 ----A---- C:\Windows\system32\MdSched.exe
2011-04-30 11:46:07 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2011-04-30 11:46:07 ----A---- C:\Windows\bfsvc.exe
2011-04-30 11:46:06 ----A---- C:\Windows\SYSWOW64\wpdwcn.dll
2011-04-30 11:46:06 ----A---- C:\Windows\SYSWOW64\runonce.exe
2011-04-30 11:46:06 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2011-04-30 11:46:06 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2011-04-30 11:46:06 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2011-04-30 11:46:06 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2011-04-30 11:46:06 ----A---- C:\Windows\SYSWOW64\logagent.exe
2011-04-30 11:46:06 ----A---- C:\Windows\SYSWOW64\inseng.dll
2011-04-30 11:46:06 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2011-04-30 11:46:06 ----A---- C:\Windows\SYSWOW64\dxdiagn.dll
2011-04-30 11:46:06 ----A---- C:\Windows\system32\shacct.dll
2011-04-30 11:46:06 ----A---- C:\Windows\system32\nltest.exe
2011-04-30 11:46:06 ----A---- C:\Windows\system32\mstask.dll
2011-04-30 11:46:06 ----A---- C:\Windows\system32\Mcx2Svc.dll
2011-04-30 11:46:06 ----A---- C:\Windows\system32\drivers\rmcast.sys
2011-04-30 11:46:06 ----A---- C:\Windows\system32\cscapi.dll
2011-04-30 11:46:06 ----A---- C:\Windows\system32\bitsadmin.exe
2011-04-30 11:46:05 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2011-04-30 11:46:05 ----A---- C:\Windows\SYSWOW64\wmpshell.dll
2011-04-30 11:46:05 ----A---- C:\Windows\SYSWOW64\wmdrmdev.dll
2011-04-30 11:46:05 ----A---- C:\Windows\SYSWOW64\unimdmat.dll
2011-04-30 11:46:05 ----A---- C:\Windows\SYSWOW64\sqlcese30.dll
2011-04-30 11:46:05 ----A---- C:\Windows\SYSWOW64\shacct.dll
2011-04-30 11:46:05 ----A---- C:\Windows\SYSWOW64\rdpd3d.dll
2011-04-30 11:46:05 ----A---- C:\Windows\SYSWOW64\lsmproxy.dll
2011-04-30 11:46:05 ----A---- C:\Windows\SYSWOW64\iscsium.dll
2011-04-30 11:46:05 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2011-04-30 11:46:05 ----A---- C:\Windows\SYSWOW64\bitsadmin.exe
2011-04-30 11:46:05 ----A---- C:\Windows\system32\wudriver.dll
2011-04-30 11:46:05 ----A---- C:\Windows\system32\WPDSp.dll
2011-04-30 11:46:05 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2011-04-30 11:46:05 ----A---- C:\Windows\system32\wmdrmnet.dll
2011-04-30 11:46:05 ----A---- C:\Windows\system32\vss_ps.dll
2011-04-30 11:46:05 ----A---- C:\Windows\system32\tabcal.exe
2011-04-30 11:46:05 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2011-04-30 11:46:05 ----A---- C:\Windows\system32\secproc_ssp.dll
2011-04-30 11:46:05 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2011-04-30 11:46:05 ----A---- C:\Windows\system32\qcap.dll
2011-04-30 11:46:05 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2011-04-30 11:46:05 ----A---- C:\Windows\system32\mssphtb.dll
2011-04-30 11:46:05 ----A---- C:\Windows\system32\msnetobj.dll
2011-04-30 11:46:05 ----A---- C:\Windows\system32\logman.exe
2011-04-30 11:46:04 ----A---- C:\Windows\SYSWOW64\WPDSp.dll
2011-04-30 11:46:04 ----A---- C:\Windows\SYSWOW64\srvcli.dll
2011-04-30 11:46:04 ----A---- C:\Windows\SYSWOW64\PortableDeviceSyncProvider.dll
2011-04-30 11:46:04 ----A---- C:\Windows\SYSWOW64\PortableDeviceStatus.dll
2011-04-30 11:46:04 ----A---- C:\Windows\SYSWOW64\pdh.dll
2011-04-30 11:46:04 ----A---- C:\Windows\SYSWOW64\OpcServices.dll
2011-04-30 11:46:04 ----A---- C:\Windows\SYSWOW64\olethk32.dll
2011-04-30 11:46:04 ----A---- C:\Windows\SYSWOW64\ncryptui.dll
2011-04-30 11:46:04 ----A---- C:\Windows\SYSWOW64\mprapi.dll
2011-04-30 11:46:04 ----A---- C:\Windows\SYSWOW64\logman.exe
2011-04-30 11:46:04 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2011-04-30 11:46:04 ----A---- C:\Windows\system32\spbcd.dll
2011-04-30 11:46:04 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-04-30 11:46:04 ----A---- C:\Windows\system32\qdv.dll
2011-04-30 11:46:04 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2011-04-30 11:46:04 ----A---- C:\Windows\system32\fphc.dll
2011-04-30 11:46:04 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2011-04-30 11:46:04 ----A---- C:\Windows\system32\dot3ui.dll
2011-04-30 11:46:03 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2011-04-30 11:46:03 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2011-04-30 11:46:03 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2011-04-30 11:46:03 ----A---- C:\Windows\SYSWOW64\wiavideo.dll
2011-04-30 11:46:03 ----A---- C:\Windows\SYSWOW64\utildll.dll
2011-04-30 11:46:03 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2011-04-30 11:46:03 ----A---- C:\Windows\SYSWOW64\takeown.exe
2011-04-30 11:46:03 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL
2011-04-30 11:46:03 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2011-04-30 11:46:03 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-04-30 11:46:03 ----A---- C:\Windows\SYSWOW64\mapistub.dll
2011-04-30 11:46:03 ----A---- C:\Windows\SYSWOW64\mapi32.dll
2011-04-30 11:46:03 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2011-04-30 11:46:03 ----A---- C:\Windows\SYSWOW64\fphc.dll
2011-04-30 11:46:03 ----A---- C:\Windows\SYSWOW64\dot3msm.dll
2011-04-30 11:46:03 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2011-04-30 11:46:03 ----A---- C:\Windows\system32\WMPhoto.dll
2011-04-30 11:46:03 ----A---- C:\Windows\system32\vfwwdm32.dll
2011-04-30 11:46:03 ----A---- C:\Windows\system32\takeown.exe
2011-04-30 11:46:03 ----A---- C:\Windows\system32\PnPUnattend.exe
2011-04-30 11:46:03 ----A---- C:\Windows\system32\EhStorAPI.dll
2011-04-30 11:46:03 ----A---- C:\Windows\system32\amstream.dll
2011-04-30 11:46:02 ----A---- C:\Windows\SYSWOW64\wmdrmnet.dll
2011-04-30 11:46:02 ----A---- C:\Windows\SYSWOW64\sqmapi.dll
2011-04-30 11:46:02 ----A---- C:\Windows\SYSWOW64\qdv.dll
2011-04-30 11:46:02 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2011-04-30 11:46:02 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2011-04-30 11:46:02 ----A---- C:\Windows\SYSWOW64\EhStorAPI.dll
2011-04-30 11:46:02 ----A---- C:\Windows\system32\WUDFHost.exe
2011-04-30 11:46:02 ----A---- C:\Windows\system32\shimgvw.dll
2011-04-30 11:46:02 ----A---- C:\Windows\system32\QCLIPROV.DLL
2011-04-30 11:46:02 ----A---- C:\Windows\system32\nrpsrv.dll
2011-04-30 11:46:02 ----A---- C:\Windows\system32\netapi32.dll
2011-04-30 11:46:02 ----A---- C:\Windows\system32\iasrecst.dll
2011-04-30 11:46:02 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2011-04-30 11:46:02 ----A---- C:\Windows\system32\djoin.exe
2011-04-30 11:46:02 ----A---- C:\Windows\system32\cmstp.exe
2011-04-30 11:46:02 ----A---- C:\Windows\system32\CertPolEng.dll
2011-04-30 11:46:01 ----A---- C:\Windows\SYSWOW64\wsnmp32.dll
2011-04-30 11:46:01 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2011-04-30 11:46:01 ----A---- C:\Windows\SYSWOW64\vfwwdm32.dll
2011-04-30 11:46:01 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2011-04-30 11:46:01 ----A---- C:\Windows\SYSWOW64\sppinst.dll
2011-04-30 11:46:01 ----A---- C:\Windows\SYSWOW64\setupcln.dll
2011-04-30 11:46:01 ----A---- C:\Windows\SYSWOW64\QCLIPROV.DLL
2011-04-30 11:46:01 ----A---- C:\Windows\SYSWOW64\pdhui.dll
2011-04-30 11:46:01 ----A---- C:\Windows\SYSWOW64\MuiUnattend.exe
2011-04-30 11:46:01 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2011-04-30 11:46:01 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2011-04-30 11:46:01 ----A---- C:\Windows\SYSWOW64\cmstp.exe
2011-04-30 11:46:01 ----A---- C:\Windows\SYSWOW64\cca.dll
2011-04-30 11:46:01 ----A---- C:\Windows\SYSWOW64\AzSqlExt.dll
2011-04-30 11:46:01 ----A---- C:\Windows\system32\WUDFx.dll
2011-04-30 11:46:01 ----A---- C:\Windows\system32\wuauclt.exe
2011-04-30 11:46:01 ----A---- C:\Windows\system32\WavDest.dll
2011-04-30 11:46:01 ----A---- C:\Windows\system32\sscore.dll
2011-04-30 11:46:01 ----A---- C:\Windows\system32\relog.exe
2011-04-30 11:46:01 ----A---- C:\Windows\system32\mydocs.dll
2011-04-30 11:46:01 ----A---- C:\Windows\system32\MultiDigiMon.exe
2011-04-30 11:46:01 ----A---- C:\Windows\system32\KMSVC.DLL
2011-04-30 11:46:01 ----A---- C:\Windows\system32\iscsicli.exe
2011-04-30 11:46:01 ----A---- C:\Windows\system32\fdProxy.dll
2011-04-30 11:46:01 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2011-04-30 11:46:01 ----A---- C:\Windows\system32\drivers\pacer.sys
2011-04-30 11:46:01 ----A---- C:\Windows\system32\diskpart.exe
2011-04-30 11:46:00 ----A---- C:\Windows\SYSWOW64\wkscli.dll
2011-04-30 11:46:00 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2011-04-30 11:46:00 ----A---- C:\Windows\SYSWOW64\spbcd.dll
2011-04-30 11:46:00 ----A---- C:\Windows\SYSWOW64\relog.exe
2011-04-30 11:46:00 ----A---- C:\Windows\SYSWOW64\netiougc.exe
2011-04-30 11:46:00 ----A---- C:\Windows\SYSWOW64\mydocs.dll
2011-04-30 11:46:00 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2011-04-30 11:46:00 ----A---- C:\Windows\SYSWOW64\iscsicli.exe
2011-04-30 11:46:00 ----A---- C:\Windows\SYSWOW64\iasrecst.dll
2011-04-30 11:46:00 ----A---- C:\Windows\SYSWOW64\amstream.dll
2011-04-30 11:46:00 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2011-04-30 11:46:00 ----A---- C:\Windows\system32\msdmo.dll
2011-04-30 11:46:00 ----A---- C:\Windows\system32\mobsync.exe
2011-04-30 11:46:00 ----A---- C:\Windows\system32\itircl.dll
2011-04-30 11:46:00 ----A---- C:\Windows\system32\dot3msm.dll
2011-04-30 11:46:00 ----A---- C:\Windows\system32\BWUnpairElevated.dll
2011-04-30 11:45:59 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2011-04-30 11:45:59 ----A---- C:\Windows\SYSWOW64\wmpps.dll
2011-04-30 11:45:59 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2011-04-30 11:45:59 ----A---- C:\Windows\SYSWOW64\syssetup.dll
2011-04-30 11:45:59 ----A---- C:\Windows\SYSWOW64\secur32.dll
2011-04-30 11:45:59 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2011-04-30 11:45:59 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2011-04-30 11:45:59 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2011-04-30 11:45:59 ----A---- C:\Windows\SYSWOW64\resutils.dll
2011-04-30 11:45:59 ----A---- C:\Windows\SYSWOW64\ReAgentc.exe
2011-04-30 11:45:59 ----A---- C:\Windows\SYSWOW64\rastapi.dll
2011-04-30 11:45:59 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2011-04-30 11:45:59 ----A---- C:\Windows\SYSWOW64\itircl.dll
2011-04-30 11:45:59 ----A---- C:\Windows\SYSWOW64\diskpart.exe
2011-04-30 11:45:59 ----A---- C:\Windows\SYSWOW64\CertPolEng.dll
2011-04-30 11:45:59 ----A---- C:\Windows\system32\wuapp.exe
2011-04-30 11:45:59 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2011-04-30 11:45:59 ----A---- C:\Windows\system32\mciqtz32.dll
2011-04-30 11:45:59 ----A---- C:\Windows\system32\imagehlp.dll
2011-04-30 11:45:59 ----A---- C:\Windows\system32\choice.exe
2011-04-30 11:45:59 ----A---- C:\Windows\system32\FXSTIFF.dll
2011-04-30 11:45:59 ----A---- C:\Windows\system32\findstr.exe
2011-04-30 11:45:59 ----A---- C:\Windows\system32\eappgnui.dll
2011-04-30 11:45:59 ----A---- C:\Windows\system32\browcli.dll
2011-04-30 11:45:58 ----A---- C:\Windows\SYSWOW64\tlscsp.dll
2011-04-30 11:45:58 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2011-04-30 11:45:58 ----A---- C:\Windows\SYSWOW64\netutils.dll
2011-04-30 11:45:58 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2011-04-30 11:45:58 ----A---- C:\Windows\SYSWOW64\muifontsetup.dll
2011-04-30 11:45:58 ----A---- C:\Windows\SYSWOW64\mobsync.exe
2011-04-30 11:45:58 ----A---- C:\Windows\SYSWOW64\mciqtz32.dll
2011-04-30 11:45:58 ----A---- C:\Windows\SYSWOW64\findstr.exe
2011-04-30 11:45:58 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2011-04-30 11:45:58 ----A---- C:\Windows\SYSWOW64\cabinet.dll
2011-04-30 11:45:58 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2011-04-30 11:45:58 ----A---- C:\Windows\system32\sppc.dll
2011-04-30 11:45:58 ----A---- C:\Windows\system32\schedcli.dll
2011-04-30 11:45:58 ----A---- C:\Windows\system32\onexui.dll
2011-04-30 11:45:58 ----A---- C:\Windows\system32\manage-bde.exe
2011-04-30 11:45:58 ----A---- C:\Windows\system32\luainstall.dll
2011-04-30 11:45:58 ----A---- C:\Windows\system32\inetmib1.dll
2011-04-30 11:45:58 ----A---- C:\Windows\system32\drivers\tunnel.sys
2011-04-30 11:45:58 ----A---- C:\Windows\system32\drivers\dfsc.sys
2011-04-30 11:45:57 ----A---- C:\Windows\SYSWOW64\unlodctr.exe
2011-04-30 11:45:57 ----A---- C:\Windows\SYSWOW64\sppc.dll
2011-04-30 11:45:57 ----A---- C:\Windows\SYSWOW64\spopk.dll
2011-04-30 11:45:57 ----A---- C:\Windows\SYSWOW64\shimgvw.dll
2011-04-30 11:45:57 ----A---- C:\Windows\SYSWOW64\rdprefdrvapi.dll
2011-04-30 11:45:57 ----A---- C:\Windows\SYSWOW64\msdmo.dll
2011-04-30 11:45:57 ----A---- C:\Windows\SYSWOW64\luainstall.dll
2011-04-30 11:45:57 ----A---- C:\Windows\SYSWOW64\inetmib1.dll
2011-04-30 11:45:57 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2011-04-30 11:45:57 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2011-04-30 11:45:57 ----A---- C:\Windows\system32\spopk.dll
2011-04-30 11:45:57 ----A---- C:\Windows\system32\repair-bde.exe
2011-04-30 11:45:57 ----A---- C:\Windows\system32\RDPENCDD.dll
2011-04-30 11:45:57 ----A---- C:\Windows\system32\profprov.dll
2011-04-30 11:45:57 ----A---- C:\Windows\system32\odbcconf.dll
2011-04-30 11:45:57 ----A---- C:\Windows\system32\fixmapi.exe
2011-04-30 11:45:56 ----A---- C:\Windows\SYSWOW64\wups.dll
2011-04-30 11:45:56 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2011-04-30 11:45:56 ----A---- C:\Windows\SYSWOW64\odbcconf.dll
2011-04-30 11:45:56 ----A---- C:\Windows\SYSWOW64\browcli.dll
2011-04-30 11:45:56 ----A---- C:\Windows\system32\UIRibbonRes.dll
2011-04-30 11:45:56 ----A---- C:\Windows\system32\TRAPI.dll
2011-04-30 11:45:56 ----A---- C:\Windows\system32\msfeedssync.exe
2011-04-30 11:45:56 ----A---- C:\Windows\system32\FXSMON.dll
2011-04-30 11:45:56 ----A---- C:\Windows\system32\elsTrans.dll
2011-04-30 11:45:56 ----A---- C:\Windows\system32\drivers\tdi.sys
2011-04-30 11:45:55 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2011-04-30 11:45:55 ----A---- C:\Windows\SYSWOW64\TRAPI.dll
2011-04-30 11:45:55 ----A---- C:\Windows\SYSWOW64\schedcli.dll
2011-04-30 11:45:55 ----A---- C:\Windows\SYSWOW64\perfts.dll
2011-04-30 11:45:55 ----A---- C:\Windows\SYSWOW64\napdsnap.dll
2011-04-30 11:45:55 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-04-30 11:45:55 ----A---- C:\Windows\SYSWOW64\imm32.dll
2011-04-30 11:45:55 ----A---- C:\Windows\SYSWOW64\elsTrans.dll
2011-04-30 11:45:55 ----A---- C:\Windows\SYSWOW64\dsauth.dll
2011-04-30 11:45:55 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2011-04-30 11:45:55 ----A---- C:\Windows\SYSWOW64\bitsperf.dll
2011-04-30 11:45:55 ----A---- C:\Windows\system32\wshbth.dll
2011-04-30 11:45:55 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2011-04-30 11:45:55 ----A---- C:\Windows\system32\napdsnap.dll
2011-04-30 11:45:55 ----A---- C:\Windows\system32\LogonUI.exe
2011-04-30 11:45:55 ----A---- C:\Windows\system32\FXSUNATD.exe
2011-04-30 11:45:55 ----A---- C:\Windows\system32\dsauth.dll
2011-04-30 11:45:55 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2011-04-30 11:45:55 ----A---- C:\Windows\system32\cscdll.dll
2011-04-30 11:45:55 ----A---- C:\Windows\system32\bitsperf.dll
2011-04-30 11:45:54 ----A---- C:\Windows\system32\wups2.dll
2011-04-30 11:45:54 ----A---- C:\Windows\system32\wsdchngr.dll
2011-04-30 11:45:54 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2011-04-30 11:45:53 ----A---- C:\Windows\SYSWOW64\wsdchngr.dll
2011-04-30 11:45:53 ----A---- C:\Windows\SYSWOW64\sscore.dll
2011-04-30 11:45:53 ----A---- C:\Windows\SYSWOW64\shgina.dll
2011-04-30 11:45:53 ----A---- C:\Windows\SYSWOW64\riched32.dll
2011-04-30 11:45:53 ----A---- C:\Windows\system32\wups.dll
2011-04-30 11:45:53 ----A---- C:\Windows\system32\wshirda.dll
2011-04-30 11:45:53 ----A---- C:\Windows\system32\wow64win.dll
2011-04-30 11:45:53 ----A---- C:\Windows\system32\wow64cpu.dll
2011-04-30 11:45:53 ----A---- C:\Windows\system32\shgina.dll
2011-04-30 11:45:53 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2011-04-30 11:45:53 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2011-04-30 11:45:52 ----A---- C:\Windows\SYSWOW64\wshirda.dll
2011-04-30 11:45:52 ----A---- C:\Windows\system32\riched32.dll
2011-04-30 11:45:52 ----A---- C:\Windows\system32\rdpcfgex.dll
2011-04-30 11:45:52 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2011-04-30 11:45:52 ----A---- C:\Windows\system32\drivers\hidusb.sys
2011-04-30 11:45:52 ----A---- C:\Windows\system32\drivers\appid.sys
2011-04-30 11:45:51 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2011-04-30 11:45:51 ----A---- C:\Windows\SYSWOW64\C_ISCII.DLL
2011-04-30 11:45:51 ----A---- C:\Windows\SYSWOW64\browseui.dll
2011-04-30 11:45:51 ----A---- C:\Windows\system32\spwmp.dll
2011-04-30 11:45:51 ----A---- C:\Windows\system32\dxmasf.dll
2011-04-30 11:45:51 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2011-04-30 11:45:51 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2011-04-30 11:45:51 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2011-04-30 11:45:51 ----A---- C:\Windows\system32\drivers\scfilter.sys
2011-04-30 11:45:51 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2011-04-30 11:45:51 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2011-04-30 11:45:51 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2011-04-30 11:45:51 ----A---- C:\Windows\system32\drivers\cdrom.sys
2011-04-30 11:45:51 ----A---- C:\Windows\system32\C_ISCII.DLL
2011-04-30 11:45:51 ----A---- C:\Windows\system32\browseui.dll
2011-04-30 11:45:50 ----AH---- C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
2011-04-30 11:45:50 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2011-04-30 11:45:50 ----A---- C:\Windows\SYSWOW64\shunimpl.dll
2011-04-30 11:45:50 ----A---- C:\Windows\SYSWOW64\KBDTUQ.DLL
2011-04-30 11:45:50 ----A---- C:\Windows\SYSWOW64\KBDTUF.DLL
2011-04-30 11:45:50 ----A---- C:\Windows\SYSWOW64\KBDSG.DLL
2011-04-30 11:45:50 ----A---- C:\Windows\SYSWOW64\kbdlk41a.dll
2011-04-30 11:45:50 ----A---- C:\Windows\SYSWOW64\KBDGR1.DLL
2011-04-30 11:45:50 ----A---- C:\Windows\SYSWOW64\KBDGKL.DLL
2011-04-30 11:45:50 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2011-04-30 11:45:50 ----A---- C:\Windows\system32\shunimpl.dll
2011-04-30 11:45:50 ----A---- C:\Windows\system32\KBDTUQ.DLL
2011-04-30 11:45:50 ----A---- C:\Windows\system32\KBDTUF.DLL
2011-04-30 11:45:50 ----A---- C:\Windows\system32\KBDSG.DLL
2011-04-30 11:45:50 ----A---- C:\Windows\system32\KBDSF.DLL
2011-04-30 11:45:50 ----A---- C:\Windows\system32\KBDPO.DLL
2011-04-30 11:45:50 ----A---- C:\Windows\system32\KBDNEPR.DLL
2011-04-30 11:45:50 ----A---- C:\Windows\system32\kbdlk41a.dll
2011-04-30 11:45:50 ----A---- C:\Windows\system32\KBDINTAM.DLL
2011-04-30 11:45:50 ----A---- C:\Windows\system32\KBDINBEN.DLL
2011-04-30 11:45:50 ----A---- C:\Windows\system32\KBDGR1.DLL
2011-04-30 11:45:50 ----A---- C:\Windows\system32\KBDGKL.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\tzres.dll
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\spwizres.dll
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\pifmgr.dll
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\KBDUS.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\KBDUGHR1.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\KBDTURME.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\KBDTAJIK.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\KBDSF.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\KBDPO.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\KBDNEPR.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\KBDMON.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\KBDMAORI.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\KBDLT1.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\KBDINTEL.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\KBDINTAM.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\KBDINORI.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\KBDINMAR.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\KBDINKAN.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\KBDINHIN.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\KBDINBEN.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\KBDGEO.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\KBDCZ1.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\KBDBULG.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\KBDBLR.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\SYSWOW64\dpnaddr.dll
2011-04-30 11:45:49 ----A---- C:\Windows\system32\wmploc.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\system32\tzres.dll
2011-04-30 11:45:49 ----A---- C:\Windows\system32\spwizres.dll
2011-04-30 11:45:49 ----A---- C:\Windows\system32\pifmgr.dll
2011-04-30 11:45:49 ----A---- C:\Windows\system32\nlsbres.dll
2011-04-30 11:45:49 ----A---- C:\Windows\system32\KBDUS.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\system32\KBDTURME.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\system32\KBDMON.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\system32\KBDMAORI.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\system32\KBDLT1.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\system32\KBDINTEL.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\system32\KBDINORI.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\system32\KBDINMAR.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\system32\KBDINKAN.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\system32\KBDINHIN.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\system32\KBDGEO.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\system32\KBDCZ1.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\system32\KBDBULG.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\system32\KBDBLR.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\system32\KBDBASH.DLL
2011-04-30 11:45:49 ----A---- C:\Windows\system32\dpnaddr.dll
2011-04-30 11:45:49 ----A---- C:\Windows\system32\BlbEvents.dll
2011-04-30 11:45:26 ----A---- C:\Windows\SYSWOW64\wdscore.dll
2011-04-30 11:45:26 ----A---- C:\Windows\SYSWOW64\PkgMgr.exe
2011-04-30 11:45:07 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2011-04-30 11:45:07 ----A---- C:\Windows\SYSWOW64\dpx.dll
2011-04-30 11:45:00 ----A---- C:\Windows\SYSWOW64\wbemcomn.dll
2011-04-30 11:42:35 ----A---- C:\Windows\system32\wmicmiplugin.dll
2011-04-30 11:42:35 ----A---- C:\Windows\system32\wbemcomn.dll
2011-04-30 11:42:20 ----A---- C:\Windows\system32\SmiEngine.dll
2011-04-30 11:42:13 ----A---- C:\Windows\system32\PkgMgr.exe
2011-04-30 11:41:05 ----A---- C:\Windows\system32\drvstore.dll
2011-04-30 11:41:04 ----A---- C:\Windows\system32\dpx.dll
2011-04-27 11:02:00 ----A---- C:\Windows\SYSWOW64\explorer.exe
2011-04-27 11:02:00 ----A---- C:\Windows\explorer.exe
2011-04-27 11:01:58 ----A---- C:\Windows\system32\XpsPrint.dll
2011-04-27 11:01:57 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2011-04-27 11:01:34 ----A---- C:\Windows\SYSWOW64\esent.dll
2011-04-27 11:01:34 ----A---- C:\Windows\system32\esent.dll
2011-04-27 11:01:34 ----A---- C:\Windows\system32\drivers\ntfs.sys
2011-04-27 11:01:33 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2011-04-27 11:01:33 ----A---- C:\Windows\system32\fsutil.exe
2011-04-27 11:01:33 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2011-04-27 11:01:33 ----A---- C:\Windows\system32\drivers\storport.sys
2011-04-27 11:01:33 ----A---- C:\Windows\system32\drivers\nvstor.sys
2011-04-27 11:01:33 ----A---- C:\Windows\system32\drivers\nvraid.sys
2011-04-27 11:01:33 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2011-04-27 11:01:33 ----A---- C:\Windows\system32\drivers\amdxata.sys

2011-04-27 11:01:33 ----A---- C:\Windows\system32\drivers\amdsata.sys
2011-04-27 11:01:04 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2011-04-27 11:01:04 ----A---- C:\Windows\system32\prevhost.exe
2011-04-19 09:19:39 ----D---- C:\Program Files (x86)\XTB-Trader Contest
2011-04-15 12:56:00 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2011-04-15 12:56:00 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-04-15 12:55:58 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-04-15 12:55:58 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-04-15 12:55:58 ----A---- C:\Windows\system32\vbscript.dll
2011-04-15 12:55:58 ----A---- C:\Windows\system32\jscript.dll
2011-04-15 12:55:56 ----A---- C:\Windows\system32\win32k.sys
2011-04-15 12:55:54 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2011-04-15 12:55:54 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2011-04-15 12:55:54 ----A---- C:\Windows\system32\mfc42u.dll
2011-04-15 12:55:54 ----A---- C:\Windows\system32\mfc42.dll
2011-04-15 12:55:52 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-04-15 12:55:52 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-04-15 12:55:52 ----A---- C:\Windows\system32\drivers\srv.sys
2011-04-15 12:55:50 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2011-04-15 12:55:50 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2011-04-15 12:55:50 ----A---- C:\Windows\system32\atmlib.dll
2011-04-15 12:55:50 ----A---- C:\Windows\system32\atmfd.dll
2011-04-15 12:55:42 ----A---- C:\Windows\system32\ieframe.dll
2011-04-15 12:55:41 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-04-15 12:55:39 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-04-15 12:55:38 ----A---- C:\Windows\system32\wininet.dll
2011-04-15 12:55:38 ----A---- C:\Windows\system32\mshtml.dll
2011-04-15 12:55:37 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-04-15 12:55:37 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-04-15 12:55:37 ----A---- C:\Windows\system32\urlmon.dll
2011-04-15 12:55:36 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-04-15 12:55:36 ----A---- C:\Windows\system32\ieui.dll
2011-04-15 12:55:35 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-04-15 12:55:35 ----A---- C:\Windows\system32\jsproxy.dll
2011-04-15 12:55:16 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2011-04-15 12:55:16 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-04-15 12:55:16 ----A---- C:\Windows\system32\dnsapi.dll
2011-04-15 12:55:15 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2011-04-15 12:55:15 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-04-15 12:55:14 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2011-04-15 12:55:14 ----A---- C:\Windows\system32\inetcomm.dll
2011-04-15 12:55:11 ----A---- C:\Windows\system32\winresume.exe
2011-04-15 12:55:11 ----A---- C:\Windows\system32\winload.exe
2011-04-15 12:55:10 ----A---- C:\Windows\system32\setbcdlocale.dll
2011-04-15 12:55:10 ----A---- C:\Windows\system32\kdusb.dll
2011-04-15 12:55:10 ----A---- C:\Windows\system32\kdcom.dll
2011-04-15 12:55:10 ----A---- C:\Windows\system32\kd1394.dll
2011-04-15 12:55:08 ----A---- C:\Windows\system32\WFS.exe
2011-04-15 12:55:08 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-04-15 12:55:07 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-04-15 12:55:07 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-04-15 12:55:07 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-04-15 12:55:06 ----A---- C:\Windows\system32\drivers\bowser.sys
2011-04-04 19:12:31 ----A---- C:\Windows\SYSWOW64\javaws.exe
2011-04-04 19:12:31 ----A---- C:\Windows\SYSWOW64\javaw.exe
2011-04-04 19:12:31 ----A---- C:\Windows\SYSWOW64\java.exe

======List of files/folders modified in the last 1 months======

2011-04-30 12:44:14 ----D---- C:\Windows\Temp
2011-04-30 12:44:14 ----D---- C:\Program Files\trend micro
2011-04-30 12:43:41 ----RSD---- C:\Windows\assembly
2011-04-30 12:43:41 ----D---- C:\Windows\Microsoft.NET
2011-04-30 12:37:57 ----D---- C:\Windows\System32
2011-04-30 12:37:57 ----D---- C:\Windows\inf
2011-04-30 12:37:57 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-04-30 12:37:25 ----D---- C:\Users\Tadeáš\AppData\Roaming\ICQ
2011-04-30 12:33:17 ----D---- C:\Windows\winsxs
2011-04-30 12:32:38 ----D---- C:\Windows
2011-04-30 12:32:20 ----D---- C:\Windows\system32\DriverStore
2011-04-30 12:30:51 ----D---- C:\Windows\system32\config
2011-04-30 12:27:48 ----D---- C:\Program Files (x86)\Windows Sidebar
2011-04-30 12:27:48 ----D---- C:\Program Files (x86)\Windows Mail
2011-04-30 12:27:47 ----D---- C:\Program Files (x86)\Internet Explorer
2011-04-30 12:27:46 ----D---- C:\Program Files (x86)\Windows Portable Devices
2011-04-30 12:27:46 ----D---- C:\Program Files (x86)\Windows Media Player
2011-04-30 12:27:45 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2011-04-30 12:27:38 ----D---- C:\Program Files\Windows Sidebar
2011-04-30 12:27:38 ----D---- C:\Program Files\Windows Mail
2011-04-30 12:27:38 ----D---- C:\Program Files\DVD Maker
2011-04-30 12:27:36 ----D---- C:\Program Files\Internet Explorer
2011-04-30 12:27:35 ----D---- C:\Program Files\Windows Portable Devices
2011-04-30 12:27:35 ----D---- C:\Program Files\Windows Media Player
2011-04-30 12:27:34 ----D---- C:\Program Files\Windows Photo Viewer
2011-04-30 12:27:34 ----D---- C:\Program Files\Windows Journal
2011-04-30 12:27:26 ----D---- C:\Windows\servicing
2011-04-30 12:27:26 ----D---- C:\Program Files\Windows Defender
2011-04-30 12:27:24 ----D---- C:\Windows\ehome
2011-04-30 12:26:54 ----D---- C:\Windows\SYSWOW64\oobe
2011-04-30 12:26:54 ----D---- C:\Windows\SYSWOW64\migration
2011-04-30 12:26:54 ----D---- C:\Windows\SYSWOW64\da-DK
2011-04-30 12:26:53 ----D---- C:\Windows\SYSWOW64\Setup
2011-04-30 12:26:53 ----D---- C:\Windows\SYSWOW64\cs
2011-04-30 12:26:53 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2011-04-30 12:26:51 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-04-30 12:26:49 ----D---- C:\Windows\SYSWOW64\sppui
2011-04-30 12:26:49 ----D---- C:\Windows\SYSWOW64\manifeststore
2011-04-30 12:26:49 ----D---- C:\Windows\SYSWOW64\es-ES
2011-04-30 12:26:48 ----D---- C:\Windows\SYSWOW64\wbem
2011-04-30 12:26:46 ----D---- C:\Windows\SYSWOW64\migwiz
2011-04-30 12:26:46 ----D---- C:\Windows\SYSWOW64\Dism
2011-04-30 12:26:44 ----D---- C:\Windows\SysWOW64
2011-04-30 12:25:50 ----D---- C:\Windows\system32\oobe
2011-04-30 12:25:50 ----D---- C:\Windows\system32\en-US
2011-04-30 12:25:50 ----D---- C:\Windows\system32\da-DK
2011-04-30 12:25:50 ----D---- C:\Windows\PolicyDefinitions
2011-04-30 12:25:48 ----D---- C:\Windows\system32\migration
2011-04-30 12:25:46 ----D---- C:\Windows\system32\Setup
2011-04-30 12:25:46 ----D---- C:\Windows\system32\cs
2011-04-30 12:25:46 ----D---- C:\Windows\system32\AdvancedInstallers
2011-04-30 12:25:45 ----D---- C:\Windows\system32\cs-CZ
2011-04-30 12:25:42 ----D---- C:\Windows\system32\sppui
2011-04-30 12:25:42 ----D---- C:\Windows\system32\manifeststore
2011-04-30 12:25:42 ----D---- C:\Windows\system32\es-ES
2011-04-30 12:25:40 ----D---- C:\Windows\system32\drivers\cs-CZ
2011-04-30 12:25:40 ----D---- C:\Windows\system32\drivers
2011-04-30 12:25:38 ----D---- C:\Windows\system32\wbem
2011-04-30 12:25:36 ----D---- C:\Windows\system32\migwiz
2011-04-30 12:25:35 ----D---- C:\Windows\system32\Dism
2011-04-30 12:24:26 ----RSD---- C:\Windows\Fonts
2011-04-30 12:24:25 ----D---- C:\Windows\AppPatch
2011-04-30 12:24:08 ----D---- C:\Windows\system32\Boot
2011-04-30 12:20:58 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2011-04-30 12:20:57 ----A---- C:\Windows\system32\msclmd.dll
2011-04-30 12:02:51 ----SHD---- C:\Windows\Installer
2011-04-30 11:55:19 ----D---- C:\Windows\system32\catroot
2011-04-30 11:54:00 ----SHD---- C:\System Volume Information
2011-04-30 11:29:44 ----D---- C:\Windows\system32\catroot2
2011-04-30 11:06:33 ----D---- C:\Windows\Logs
2011-04-30 11:03:47 ----D---- C:\Windows\Prefetch
2011-04-30 00:20:49 ----D---- C:\Users\Tadeáš\AppData\Roaming\Skype
2011-04-30 00:07:21 ----D---- C:\Users\Tadeáš\AppData\Roaming\skypePM
2011-04-27 21:22:31 ----SD---- C:\Users\Tadeáš\AppData\Roaming\Microsoft
2011-04-27 18:28:15 ----D---- C:\Users\Tadeáš\AppData\Roaming\vlc
2011-04-27 18:28:13 ----D---- C:\Users\Tadeáš\AppData\Roaming\dvdcss
2011-04-27 14:34:26 ----D---- C:\Windows\debug
2011-04-23 00:20:51 ----D---- C:\Windows\Tasks
2011-04-23 00:20:51 ----D---- C:\Windows\system32\Tasks
2011-04-21 22:19:22 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2011-04-19 09:19:39 ----D---- C:\Program Files (x86)
2011-04-18 16:22:44 ----A---- C:\Windows\system32\MRT.exe
2011-04-15 18:34:25 ----D---- C:\ProgramData\Microsoft Help
2011-04-14 10:11:38 ----D---- C:\Update
2011-04-07 00:28:10 ----D---- C:\Users\Tadeáš\AppData\Roaming\Zoner
2011-04-04 19:12:14 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2011-04-04 19:05:19 ----D---- C:\Windows\system32\wdi
2011-04-02 23:15:53 ----D---- C:\Program Files (x86)\rajce
2011-04-01 16:37:19 ----D---- C:\Users\Tadeáš\AppData\Roaming\BitTorrent
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2009-10-13 409624]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2010-07-12 55856]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-06-30 834544]
R1 mfehidk;McAfee Inc. mfehidk; C:\Windows\system32\drivers\mfehidk.sys [2010-02-17 308296]
R1 MPFP;MPFP; C:\Windows\System32\Drivers\Mpfp.sys [2010-07-15 176144]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys [2008-06-27 88632]
R2 regi;regi; \??\C:\Windows\system32\drivers\regi.sys [2007-04-17 14112]
R2 rimspci;rimspci; C:\Windows\system32\drivers\rimssne64.sys [2009-11-06 93696]
R2 risdsnpe;risdsnpe; C:\Windows\system32\drivers\risdsne64.sys [2009-09-15 75776]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\drivers\Apfiltr.sys [2009-11-04 253488]
R3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect; C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys [2009-05-26 19968]
R3 Impcd;Impcd; C:\Windows\system32\drivers\Impcd.sys [2009-10-27 151040]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-02-09 2269600]
R3 mfeavfk;McAfee Inc. mfeavfk; C:\Windows\system32\drivers\mfeavfk.sys [2010-02-17 102472]
R3 mfesmfk;McAfee Inc. mfesmfk; C:\Windows\system32\drivers\mfesmfk.sys [2010-02-17 49480]
R3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETw5s64.sys [2009-09-15 6952960]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2009-11-06 84512]
R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
R3 SFEP;Sony Firmware Extension Parser; C:\Windows\system32\drivers\SFEP.sys [2009-08-19 11392]
S2 Sentinel64;Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [2009-09-17 145448]
S3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-11-05 1542656]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2010-11-20 552448]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2010-11-20 80384]
S3 btusbflt;Bluetooth USB Filter; C:\Windows\system32\drivers\btusbflt.sys [2009-11-18 52264]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2009-11-18 98344]
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\drivers\btwavdt.sys [2009-11-18 132648]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-11-18 35104]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2009-11-18 21160]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-23 48488]
S3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\System32\Drivers\GEARAspiWDM.sys []
S3 ivusb;Initio Driver for USB Default Controller; C:\Windows\system32\DRIVERS\ivusb.sys [2010-07-29 29720]
S3 mferkdk;McAfee Inc. mferkdk; C:\Windows\system32\drivers\mferkdk.sys [2010-02-17 40904]
S3 nmwcdcx64;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbox64.sys [2008-05-02 23552]
S3 nmwcdx64;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmbx64.sys [2008-05-02 18432]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 TVICHW64;TVICHW64; \??\C:\Windows\system32\DRIVERS\TVICHW64.SYS [2010-07-30 21200]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2009-02-13 14464]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Application Updater;Application Updater; C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe [2011-01-28 387072]
R2 ArcGIS License Manager;ArcGIS License Manager; C:\PROGRA~2\ESRI\License\arcgis9x\lmgrd.exe [2008-08-02 1431440]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-09-04 873248]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2009-09-21 1420560]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-10-13 354840]
R2 IviRegMgr;IviRegMgr; C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-04 112152]
R2 mcmscsvc;McAfee Services; C:\PROGRA~2\McAfee\MSC\mcmscsvc.exe [2010-06-10 865832]
R2 McNASvc;McAfee Network Agent; c:\PROGRA~2\COMMON~1\mcafee\mna\mcnasvc.exe [2009-07-07 2482848]
R2 McProxy;McAfee Proxy Service; c:\PROGRA~2\COMMON~1\mcafee\mcproxy\mcproxy.exe [2009-07-08 359952]
R2 McShield;McAfee Real-time Scanner; C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe [2010-02-17 155456]
R2 MpfService;McAfee Personal Firewall Service; C:\Program Files (x86)\McAfee\MPF\MPFSrv.exe [2009-10-27 895696]
R2 MSK80Service;McAfee Anti-Spam Service; C:\Program Files (x86)\McAfee\MSK\MskSrver.exe [2009-10-02 26640]
R2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2010-03-25 490280]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-01-11 392296]
R2 PMBDeviceInfoProvider;PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2009-10-24 360224]
R2 PSI_SVC_2;Protexis Licensing V2; C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [2007-07-24 185632]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2009-09-21 831760]
R2 SampleCollector;VAIO Care Performance Service; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [2011-01-29 259192]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-02-25 249648]
R2 uCamMonitor;CamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2008-09-18 104960]
R2 VAIO Event Service;VAIO Event Service; C:\Program Files (x86)\SONY\VAIO Event Service\VESMgr.exe [2010-05-28 205168]
R2 VCFw;VAIO Content Folder Watcher; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2009-09-14 642416]
R2 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager; C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2010-02-19 529776]
R2 VSNService;VSNService; C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [2009-11-25 821760]
R2 VzCdbSvc;VAIO Entertainment Database Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [2009-09-14 206336]
R2 WDDMService;WD SmartWare Drive Manager Service; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [2009-10-14 116224]
R2 WDSmartWareBackgroundService;WD SmartWare Background Service; C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [2009-06-16 20480]
R2 WindowBlinds;Stardock WindowBlinds; C:\Program Files (x86)\Stardock\MyColors\VistaSrv.exe [2009-06-09 337200]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 McSysmon;McAfee SystemGuards; C:\PROGRA~2\McAfee\VIRUSS~1\mcsysmon.exe [2010-02-17 606736]
R3 VAIO Power Management;VAIO Power Management; C:\Program Files\Sony\VAIO Power Management\SPMService.exe [2009-11-30 571248]
R3 VCService;VCService; C:\Program Files\Sony\VAIO Care\VCService.exe [2011-02-14 44736]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2009-12-16 133104]
S2 Roxio Upnp Server 10;Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [2009-08-31 362992]
S3 ACDaemon;ArcSoft Connect Daemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
S3 BBSvc;Bing Bar Update Service; C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2010-09-20 1038088]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-09-20 655624]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2009-12-16 133104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 McODS;McAfee Scanner; C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe [2010-02-24 696848]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Roxio UPnP Renderer 10;Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [2009-08-31 313840]
S3 SOHCImp;VAIO Media plus Content Importer; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2009-10-15 120104]
S3 SOHDBSvr;VAIO Media plus Database Manager; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [2009-10-15 70952]
S3 SOHDms;VAIO Media plus Digital Media Server; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2009-10-15 427304]
S3 SOHDs;VAIO Media plus Device Searcher; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2009-10-15 75048]
S3 SOHPlMgr;VAIO Media plus Playlist Manager; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [2009-10-15 91432]
S3 VAIO Entertainment TV Device Arbitration Service;VAIO Entertainment TV Device Arbitration Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [2009-09-14 69632]
S3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager; C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2009-09-01 361840]
S3 VcmXmlIfHelper;VAIO Content Metadata XML Interface; C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2010-02-19 115568]
S3 VUAgent;VUAgent; C:\Program Files\Sony\VAIO Update 5\VUAgent.exe [2010-04-09 1223024]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-29 1255736]
S4 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe []
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------

Hezký podvečer

Spusťte combofix podle tohoto návodu
http://www.bleepingcomputer.com/combofi ... t-combofix

I já přeji hezký podvečer a děkuji za projev pomoci. přikládám log z ComboFix



ComboFix 11-04-29.04 - Tadeáš 30.04.2011 19:43:29.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4014.968 [GMT 2:00]
Spuštěný z: c:\users\Tadeáš\Desktop\ComboFix.exe
AV: McAfee VirusScan *Disabled/Outdated* {86355677-4064-3EA7-ABB3-1B136EB04637}
FW: McAfee Personal Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
SP: McAfee VirusScan *Disabled/Outdated* {3D54B793-665E-3129-9103-206115370C8A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\facemoods.com
c:\program files (x86)\facemoods.com\facemoods\1.4.17.3\bh\facemoods.dll
c:\program files (x86)\facemoods.com\facemoods\1.4.17.3\facemoods.crx
c:\program files (x86)\facemoods.com\facemoods\1.4.17.3\facemoods.png
c:\program files (x86)\facemoods.com\facemoods\1.4.17.3\facemoodsApp.dll
c:\program files (x86)\facemoods.com\facemoods\1.4.17.3\facemoodsEng.dll
c:\program files (x86)\facemoods.com\facemoods\1.4.17.3\facemoodssrv.exe
c:\program files (x86)\facemoods.com\facemoods\1.4.17.3\facemoodsTlbr.dll
c:\program files (x86)\facemoods.com\facemoods\1.4.17.3\uninstall.exe
c:\program files (x86)\facemoods.com\sqlite3.dll
c:\program files (x86)\pdfforge Toolbar\IE\4.3\pdFForgetoolbarie.dll
c:\users\Tadeáš\AppData\Roaming\Local
c:\windows\SysWow64\regobj.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-03-28 do 2011-04-30 )))))))))))))))))))))))))))))))
.
.
2011-04-30 17:51 . 2011-04-30 17:51 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-04-30 09:55 . 2011-04-30 09:55 -------- d-----w- c:\windows\system32\SPReview
2011-04-30 09:55 . 2011-04-30 09:55 -------- d-----w- c:\windows\system32\EventProviders
2011-04-30 09:48 . 2010-11-05 01:57 48976 ----a-w- c:\windows\system32\netfxperf.dll
2011-04-30 09:48 . 2010-11-05 01:57 1942856 ----a-w- c:\windows\system32\dfshim.dll
2011-04-30 09:48 . 2010-11-05 01:58 1130824 ----a-w- c:\windows\SysWow64\dfshim.dll
2011-04-30 09:48 . 2010-11-20 13:33 5563776 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-04-30 09:48 . 2010-11-20 13:27 12288 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2011-04-30 09:48 . 2010-11-20 11:07 59392 ----a-w- c:\windows\system32\drivers\TsUsbFlt.sys
2011-04-30 09:48 . 2010-11-20 13:27 14967808 ----a-w- c:\program files\DVD Maker\OmdBase.dll
2011-04-30 09:48 . 2010-11-20 13:27 3715584 ----a-w- c:\windows\system32\mstscax.dll
2011-04-30 09:48 . 2010-11-20 13:26 1838080 ----a-w- c:\windows\system32\d3d10warp.dll
2011-04-30 09:48 . 2010-11-20 12:19 3215872 ----a-w- c:\windows\SysWow64\mstscax.dll
2011-04-30 09:46 . 2010-11-20 13:33 289664 ----a-w- c:\windows\system32\drivers\fltMgr.sys
2011-04-30 09:45 . 2010-11-20 13:27 249856 ----a-w- c:\program files\Common Files\System\msadc\msdarem.dll
2011-04-30 09:42 . 2010-11-20 13:27 524288 ----a-w- c:\windows\system32\wmicmiplugin.dll
2011-04-30 09:42 . 2010-11-20 13:27 529408 ----a-w- c:\windows\system32\wbemcomn.dll
2011-04-30 09:42 . 2010-11-20 13:27 1225216 ----a-w- c:\windows\system32\wbem\wbemcore.dll
2011-04-30 09:42 . 2010-11-20 13:27 933376 ----a-w- c:\windows\system32\SmiEngine.dll
2011-04-30 09:42 . 2010-11-20 13:25 199168 ----a-w- c:\windows\system32\PkgMgr.exe
2011-04-30 09:41 . 2010-11-20 13:26 422912 ----a-w- c:\windows\system32\drvstore.dll
2011-04-30 09:41 . 2010-11-20 13:26 399872 ----a-w- c:\windows\system32\dpx.dll
2011-04-27 09:02 . 2011-02-25 06:19 2871808 ----a-w- c:\windows\explorer.exe
2011-04-27 09:02 . 2011-02-25 05:30 2616320 ----a-w- c:\windows\SysWow64\explorer.exe
2011-04-19 07:19 . 2011-04-19 07:20 -------- d-----w- c:\program files (x86)\XTB-Trader Contest
2011-04-15 10:56 . 2011-02-24 06:15 476160 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-04-15 10:56 . 2011-02-24 05:38 288256 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-30 10:20 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-04-30 10:20 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-04-04 17:12 . 2011-03-28 15:10 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-03-14 12:03 . 2010-06-24 09:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-03-04 06:19 . 2011-04-27 09:01 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2011-03-04 06:19 . 2011-04-27 09:01 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2011-02-19 12:05 . 2011-03-09 14:17 1139200 ----a-w- c:\windows\system32\FntCache.dll
2011-02-19 12:04 . 2011-03-09 14:17 1544192 ----a-w- c:\windows\system32\DWrite.dll
2011-02-19 12:04 . 2011-03-09 14:17 902656 ----a-w- c:\windows\system32\d2d1.dll
2011-02-19 06:30 . 2011-03-09 14:17 1076736 ----a-w- c:\windows\SysWow64\DWrite.dll
2011-02-19 06:30 . 2011-03-09 14:17 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{88c7f2aa-f93f-432c-8f0e-b7d85967a527}"= "c:\program files (x86)\BitTorrentBar\tbBitT.dll" [2010-10-18 3908192]
.
[HKEY_CLASSES_ROOT\clsid\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-10-18 11:26 3908192 ----a-w- c:\program files (x86)\ConduitEngine\ConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
2010-10-18 11:26 3908192 ----a-w- c:\program files (x86)\BitTorrentBar\tbBitT.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{88c7f2aa-f93f-432c-8f0e-b7d85967a527}"= "c:\program files (x86)\BitTorrentBar\tbBitT.dll" [2010-10-18 3908192]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files (x86)\ConduitEngine\ConduitEngine.dll" [2010-10-18 3908192]
.
[HKEY_CLASSES_ROOT\clsid\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ISBMgr.exe"="c:\program files (x86)\Sony\ISB Utility\ISBMgr.exe" [2009-08-26 320880]
"McENUI"="c:\progra~2\McAfee\MHN\McENUI.exe" [2009-07-07 1176808]
"PMBVolumeWatcher"="c:\program files (x86)\Sony\PMB\PMBVolumeWatcher.exe" [2009-10-24 597792]
"MarketingTools"="c:\program files (x86)\Sony\Marketing Tools\MarketingTools.exe" [2009-12-16 26624]
"mcagent_exe"="c:\program files (x86)\McAfee.com\Agent\mcagent.exe" [2010-06-10 1218008]
"AdobeCS4ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"TkBellExe"="c:\program files (x86)\Common Files\Real\Update_OB\realsched.exe" [2010-10-03 202256]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2010-12-09 1226608]
"DivX Download Manager"="c:\program files (x86)\DivX\DivX Plus Web Player\DDmService.exe" [2010-12-08 63360]
"Philips Device Listener"="c:\program files (x86)\Philips\Philips Songbird Resources\Autolauncher\PhilipsDeviceListener.exe" [2010-05-27 375296]
"SearchSettings"="c:\program files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe" [2011-01-28 526336]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
.
c:\users\Tade ç\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-9-4 1081632]
Nikon Monitor.lnk - c:\program files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe [2008-6-5 479232]
.
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
IconPackager.lnk - c:\program files (x86)\Stardock\MyColors\IconPackager.exe [2009-10-14 1389944]
Think Green Weather.lnk - c:\program files (x86)\Stardock\DesktopGadgets\Think Green Weather\Think Green Weather.exe [2010-7-9 728576]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-12-16 133104]
R2 Roxio Upnp Server 10;Roxio Upnp Server 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [2009-08-31 362992]
R2 Sentinel64;Sentinel64;c:\windows\System32\Drivers\Sentinel64.sys [x]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2010-09-20 1038088]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-12-16 133104]
R3 ivusb;Initio Driver for USB Default Controller;c:\windows\system32\DRIVERS\ivusb.sys [x]
R3 nmwcdcx64;Nokia USB Generic;c:\windows\system32\drivers\ccdcmbox64.sys [x]
R3 nmwcdx64;Nokia USB Phone Parent;c:\windows\system32\drivers\ccdcmbx64.sys [x]
R3 Roxio UPnP Renderer 10;Roxio UPnP Renderer 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [2009-08-31 313840]
R3 SOHCImp;VAIO Media plus Content Importer;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2009-10-15 120104]
R3 SOHDBSvr;VAIO Media plus Database Manager;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [2009-10-15 70952]
R3 SOHDms;VAIO Media plus Digital Media Server;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2009-10-15 427304]
R3 SOHDs;VAIO Media plus Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2009-10-15 75048]
R3 SOHPlMgr;VAIO Media plus Playlist Manager;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [2009-10-15 91432]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TVICHW64;TVICHW64;c:\windows\system32\DRIVERS\TVICHW64.SYS [x]
R3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2009-09-01 361840]
R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2010-02-19 115568]
R3 VUAgent;VUAgent;c:\program files\Sony\VAIO Update 5\VUAgent.exe [2010-04-09 1223024]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 Application Updater;Application Updater;c:\program files (x86)\Application Updater\ApplicationUpdater.exe [2011-01-28 387072]
S2 ArcGIS License Manager;ArcGIS License Manager;c:\progra~2\ESRI\License\arcgis9x\lmgrd.exe [2008-08-02 1431440]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-03-25 490280]
S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2009-10-24 360224]
S2 regi;regi;c:\windows\system32\drivers\regi.sys [2007-04-17 14112]
S2 rimspci;rimspci;c:\windows\system32\drivers\rimssne64.sys [x]
S2 risdsnpe;risdsnpe;c:\windows\system32\drivers\risdsne64.sys [x]
S2 SampleCollector;VAIO Care Performance Service;c:\program files\Sony\VAIO Care\VCPerfService.exe [2011-01-29 259192]
S2 uCamMonitor;CamMonitor;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2008-09-18 104960]
S2 VCFw;VAIO Content Folder Watcher;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2009-09-14 642416]
S2 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2010-02-19 529776]
S2 VSNService;VSNService;c:\program files\Sony\VAIO Smart Network\VSNService.exe [2009-11-25 821760]
S2 WDDMService;WD SmartWare Drive Manager Service;c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [2009-10-14 116224]
S2 WDSmartWareBackgroundService;WD SmartWare Background Service;c:\program files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [2009-06-16 20480]
S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys [x]
S3 Impcd;Impcd;c:\windows\system32\drivers\Impcd.sys [x]
S3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETw5s64.sys [x]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\drivers\SFEP.sys [x]
S3 VAIO Power Management;VAIO Power Management;c:\program files\Sony\VAIO Power Management\SPMService.exe [2009-11-30 571248]
S3 VCService;VCService;c:\program files\Sony\VAIO Care\VCService.exe [2011-02-14 44736]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2011-04-30 c:\windows\Tasks\Defraggler Volume C Task.job
- c:\program files\Defraggler\df64.exe [2010-07-30 19:18]
.
2011-04-30 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-12-16 05:00]
.
2011-04-30 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-12-16 05:00]
.
2011-01-15 c:\windows\Tasks\McDefragTask.job
- c:\progra~2\mcafee\mqc\QcConsol.exe [2010-06-15 10:22]
.
2011-04-30 c:\windows\Tasks\Norton Security Scan for Tadeáš.job
- c:\program files (x86)\Norton Security Scan\Engine\2.7.3.34\Nss.exe [2011-01-07 08:48]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-10-13 186904]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-02-09 10060320]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-12-16 171520]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-01-11 16397416]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://start.facemoods.com/?a=vsl
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Crawler Search - tbr:iemenu
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - c:\progra~2\Crawler\Toolbar\ctbr.dll
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
BHO-{64182481-4F71-486b-A045-B233BD0DA8FC} - c:\program files (x86)\facemoods.com\facemoods\1.4.17.3\bh\facemoods.dll
BHO-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
Toolbar-{DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - c:\program files (x86)\facemoods.com\facemoods\1.4.17.3\facemoodsTlbr.dll
Wow6432Node-HKLM-Run-facemoods - c:\program files (x86)\facemoods.com\facemoods\1.4.17.3\facemoodssrv.exe
WebBrowser-{88C7F2AA-F93F-432C-8F0E-B7D85967A527} - (no file)
WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)
HKLM-Run-Apoint - %ProgramFiles%\Apoint\Apoint.exe
AddRemove-facemoods - c:\program files (x86)\facemoods.com\facemoods\1.4.17.3\uninstall.exe
AddRemove-Mafia Game - c:\windows\system32\MafiaSetup.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SampleCollector]
"ImagePath"="\"c:\program files\Sony\VAIO Care\VCPerfService.exe\" \"/service\" \"/sstates\" \"/sampleinterval=5000\" \"/procinterval=5\" \"/dllinterval=120\" \"/counter=\Processor(_Total)\% Processor Time:1/counter=\PhysicalDisk(_Total)\Disk Bytes/sec:1\" \"/counter=\Network Interface(*)\Bytes Total/sec:1\" \"/expandcounter=\Processor Information(*)\Processor Frequency:1\" \"/expandcounter=\Processor(*)\% Idle Time:1\" \"/expandcounter=\Processor(*)\% C1 Time:1\" \"/expandcounter=\Processor(*)\% C2 Time:1\" \"/expandcounter=\Processor(*)\% C3 Time:1\" \"/expandcounter=\Processor(*)\% Processor Time:1\" \"/directory=c:\programdata\Sony Corporation\VAIO Care\inteldata\""
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-1971295752-3624833708-3337141201-1000\Software\SecuROM\License information*]
"datasecu"=hex:26,07,c9,97,ec,0c,9d,8f,ec,e6,33,b1,bf,52,e4,f9,cc,1a,e3,6a,13,
aa,ca,62,82,46,48,b1,b7,81,8d,e5,85,83,4f,d9,9e,bf,9d,b2,50,db,ed,db,f7,3b,\
"rkeysecu"=hex:0e,bd,7e,7e,a1,03,ed,ae,dc,30,12,81,e0,ec,bf,10
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10c.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2011-04-30 19:54:26
ComboFix-quarantined-files.txt 2011-04-30 17:54
.
Před spuštěním: Volných bajtů: 114 652 053 504
Po spuštění: Volných bajtů: 114 559 553 536
.
- - End Of File - - E3E53900D7ED6932F2B2C57FB4060591

Co počítač?

zatím se jeví bez problémů, večer ho vypnu a ráno uvidím co ty aktualizace, kdyžtak bych se opět ozval. Děkuji =)

Dobře, pak se ozvěte

vše v pořádku, i po vypnutí a zapnutí ntb.

Děkuji, hezký večer.

Ještě něco domažeme

Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka
-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:




-po aplikaci na Vás vypadne další log,vložte ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci

zde výsledný log


ComboFix 11-04-29.04 - Tadeáš 30.04.2011 22:53:28.2.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4014.2859 [GMT 2:00]
Spuštěný z: c:\users\Tadeáš\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Tadeáš\Desktop\CFScript.txt
AV: McAfee VirusScan *Enabled/Outdated* {86355677-4064-3EA7-ABB3-1B136EB04637}
FW: McAfee Personal Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
SP: McAfee VirusScan *Disabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\BitTorrentBar\
c:\program files (x86)\BitTorrentBar\\BitTorrentBarToolbarHelper.exe
c:\program files (x86)\BitTorrentBar\\GottenAppsContextMenu.xml
c:\program files (x86)\BitTorrentBar\\INSTALL.LOG
c:\program files (x86)\BitTorrentBar\\OtherAppsContextMenu.xml
c:\program files (x86)\BitTorrentBar\\SharedAppsContextMenu.xml
c:\program files (x86)\BitTorrentBar\\tbBitT.dll
c:\program files (x86)\BitTorrentBar\\toolbar.cfg
c:\program files (x86)\BitTorrentBar\\ToolbarContextMenu.xml
c:\program files (x86)\BitTorrentBar\\UNWISE.EXE
c:\program files (x86)\Common Files\Spigot
c:\program files (x86)\Common Files\Spigot\Search Settings\config.ini
c:\program files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
c:\program files (x86)\Common Files\Spigot\Search Settings\yahoo_ff.xml
c:\program files (x86)\Common Files\Spigot\Search Settings\yahoo_ie.xml
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-03-28 do 2011-04-30 )))))))))))))))))))))))))))))))
.
.
2011-04-30 21:00 . 2011-04-30 21:00 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-04-30 09:55 . 2011-04-30 09:55 -------- d-----w- c:\windows\system32\SPReview
2011-04-30 09:55 . 2011-04-30 09:55 -------- d-----w- c:\windows\system32\EventProviders
2011-04-30 09:48 . 2010-11-05 01:57 48976 ----a-w- c:\windows\system32\netfxperf.dll
2011-04-30 09:48 . 2010-11-05 01:57 1942856 ----a-w- c:\windows\system32\dfshim.dll
2011-04-30 09:48 . 2010-11-05 01:58 1130824 ----a-w- c:\windows\SysWow64\dfshim.dll
2011-04-30 09:48 . 2010-11-20 13:33 5563776 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-04-30 09:48 . 2010-11-20 13:27 12288 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2011-04-30 09:48 . 2010-11-20 11:07 59392 ----a-w- c:\windows\system32\drivers\TsUsbFlt.sys
2011-04-30 09:48 . 2010-11-20 13:27 14967808 ----a-w- c:\program files\DVD Maker\OmdBase.dll
2011-04-30 09:48 . 2010-11-20 13:27 3715584 ----a-w- c:\windows\system32\mstscax.dll
2011-04-30 09:48 . 2010-11-20 13:26 1838080 ----a-w- c:\windows\system32\d3d10warp.dll
2011-04-30 09:48 . 2010-11-20 12:19 3215872 ----a-w- c:\windows\SysWow64\mstscax.dll
2011-04-30 09:46 . 2010-11-20 13:33 289664 ----a-w- c:\windows\system32\drivers\fltMgr.sys
2011-04-30 09:45 . 2010-11-20 13:27 249856 ----a-w- c:\program files\Common Files\System\msadc\msdarem.dll
2011-04-30 09:42 . 2010-11-20 13:27 524288 ----a-w- c:\windows\system32\wmicmiplugin.dll
2011-04-30 09:42 . 2010-11-20 13:27 529408 ----a-w- c:\windows\system32\wbemcomn.dll
2011-04-30 09:42 . 2010-11-20 13:27 1225216 ----a-w- c:\windows\system32\wbem\wbemcore.dll
2011-04-30 09:42 . 2010-11-20 13:27 933376 ----a-w- c:\windows\system32\SmiEngine.dll
2011-04-30 09:42 . 2010-11-20 13:25 199168 ----a-w- c:\windows\system32\PkgMgr.exe
2011-04-30 09:41 . 2010-11-20 13:26 422912 ----a-w- c:\windows\system32\drvstore.dll
2011-04-30 09:41 . 2010-11-20 13:26 399872 ----a-w- c:\windows\system32\dpx.dll
2011-04-27 09:02 . 2011-02-25 06:19 2871808 ----a-w- c:\windows\explorer.exe
2011-04-27 09:02 . 2011-02-25 05:30 2616320 ----a-w- c:\windows\SysWow64\explorer.exe
2011-04-19 07:19 . 2011-04-19 07:20 -------- d-----w- c:\program files (x86)\XTB-Trader Contest
2011-04-15 10:56 . 2011-02-24 06:15 476160 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-04-15 10:56 . 2011-02-24 05:38 288256 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-30 10:20 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-04-30 10:20 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-04-04 17:12 . 2011-03-28 15:10 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-03-14 12:03 . 2010-06-24 09:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-03-04 06:19 . 2011-04-27 09:01 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2011-03-04 06:19 . 2011-04-27 09:01 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2011-02-19 12:05 . 2011-03-09 14:17 1139200 ----a-w- c:\windows\system32\FntCache.dll
2011-02-19 12:04 . 2011-03-09 14:17 1544192 ----a-w- c:\windows\system32\DWrite.dll
2011-02-19 12:04 . 2011-03-09 14:17 902656 ----a-w- c:\windows\system32\d2d1.dll
2011-02-19 06:30 . 2011-03-09 14:17 1076736 ----a-w- c:\windows\SysWow64\DWrite.dll
2011-02-19 06:30 . 2011-03-09 14:17 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-04-30_17.52.07 )))))))))))))))))))))))))))))))))))))))))
.
- 2009-07-14 04:54 . 2011-04-30 13:58 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2011-04-30 19:43 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2011-04-30 19:43 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2011-04-30 13:58 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2011-04-30 19:43 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2011-04-30 13:58 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-11-26 20:18 . 2011-04-30 19:46 65914 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2011-04-30 19:46 41912 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
- 2009-07-14 05:10 . 2011-04-30 10:35 41912 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2010-06-15 18:22 . 2011-04-30 19:46 22258 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1971295752-3624833708-3337141201-1000_UserData.bin
+ 2009-12-16 05:03 . 2011-04-30 20:48 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-12-16 05:03 . 2011-04-30 17:52 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-07-14 04:54 . 2011-04-30 17:52 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2011-04-30 20:48 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-06-15 19:19 . 2011-04-30 19:45 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-06-15 19:19 . 2011-04-30 10:34 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:46 . 2011-04-30 19:47 91680 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
- 2010-06-15 19:19 . 2011-04-30 10:34 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2010-06-15 19:19 . 2011-04-30 19:45 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-06-15 19:19 . 2011-04-30 10:34 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-06-15 19:19 . 2011-04-30 19:45 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-06-15 19:19 . 2011-04-30 20:14 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-06-15 19:19 . 2011-04-30 17:09 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-06-15 19:19 . 2011-04-30 20:14 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2010-06-15 19:19 . 2011-04-30 17:09 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-04-30 19:27 . 2011-04-30 19:27 61440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\891f785e5137c08d54f5eb7ca4030e9d\WindowsLiveWriter.ni.exe
+ 2011-04-30 19:27 . 2011-04-30 19:27 81408 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\a5ee5448c2212b2fdeb54af14433fa7a\WindowsLive.Writer.Passport.ni.dll
+ 2011-04-30 19:29 . 2011-04-30 19:29 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\fee2bbfe0b8f5988a3ab7a9db85c7a30\System.Windows.Presentation.ni.dll
+ 2011-04-30 19:29 . 2011-04-30 19:29 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\19ec2acb1a563ecfce8396babd4a3b25\System.Web.DynamicData.Design.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\221fa10bd3cb407e43b7476af5039090\System.ComponentModel.DataAnnotations.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\b3ade8d5c0d4bb5d4940bcafd3453642\PresentationFontCache.ni.exe
+ 2011-04-30 19:27 . 2011-04-30 19:27 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\MusicDataAccessIF\d0c00d410ffc66661759e150346b97b4\MusicDataAccessIF.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\86550fdda6994a9c192d7a0b9b59ee5b\Microsoft.WSMan.Runtime.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 27136 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\ee8ed3c8e7f0281a9e29c7cdf050b69d\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 21504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\e7904d77bcee77868d534546ed2a61b6\Microsoft.Windows.Diagnosis.SDEngine.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 32256 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\de64901e4cd2074f5c70733ab5d7787a\Microsoft.Windows.Diagnosis.SDHost.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 25088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\b5e6aa065d13e30c27219186f8e02689\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 23040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\aa3fa7748881ce0969396eba0be3c6c3\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 86528 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\90cd177df2fc13d88c401b6b53a121b8\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\0a5d39e601d2512b483a56408c3cec05\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\84b83e7639310b35b5ce150df62a2843\Microsoft.Build.Framework.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\4c0fa9d495ac562afcb136f3e9a87cb9\Microsoft.Build.Framework.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\2c3e7fda8de40e45e7f5e004094dc7c9\dfsvc.ni.exe
- 2011-04-30 10:30 . 2011-04-30 10:30 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2011-04-30 19:43 . 2011-04-30 19:43 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2011-04-30 10:30 . 2011-04-30 10:30 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2011-04-30 19:43 . 2011-04-30 19:43 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2009-07-14 02:36 . 2011-04-30 19:48 616008 c:\windows\system32\perfh009.dat
- 2009-07-14 02:36 . 2011-04-30 10:37 616008 c:\windows\system32\perfh009.dat
+ 2009-11-26 20:34 . 2011-04-30 19:48 631292 c:\windows\system32\perfh005.dat
- 2009-11-26 20:34 . 2011-04-30 10:37 631292 c:\windows\system32\perfh005.dat
- 2009-07-14 02:36 . 2011-04-30 10:37 106388 c:\windows\system32\perfc009.dat
+ 2009-07-14 02:36 . 2011-04-30 19:48 106388 c:\windows\system32\perfc009.dat
+ 2009-11-26 20:34 . 2011-04-30 19:48 121914 c:\windows\system32\perfc005.dat
- 2009-11-26 20:34 . 2011-04-30 10:37 121914 c:\windows\system32\perfc005.dat
- 2009-12-16 05:03 . 2011-04-30 17:52 147456 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-12-16 05:03 . 2011-04-30 20:48 147456 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 05:01 . 2011-04-30 19:31 524876 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
- 2009-07-14 05:01 . 2011-04-30 10:29 524876 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-04-30 19:27 . 2011-04-30 19:27 634368 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\f7f147bb9617c86346dc7fad03858759\WindowsLiveLocal.WriterPlugin.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 101376 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\fbfde8133e7a853e6fa6980758617251\WindowsLive.Writer.Api.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 780800 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\f4aff2065ccb0935072dacc6a32d83a4\WindowsLive.Writer.Controls.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 326144 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\df8b81c0ebef85fb9b16ac0d153312e2\WindowsLive.Writer.SpellChecker.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 156672 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\cd6ecb6190e2653dea1d9ca36e1ae564\WindowsLive.Writer.HtmlParser.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 665600 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\b9ab95f3fa6403bd02e217bc401adc18\WindowsLive.Writer.Interop.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 871424 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\9da68e0412e75b2f599a0c1918e48962\WindowsLive.Writer.BlogClient.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\8e1cbd449761673fbc8c88fc7fe11dd9\WindowsLive.Writer.Mshtml.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 891392 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\869661a947a2b2d41f2d5dc9b13ced14\WindowsLive.Writer.HtmlEditor.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\73c1f13238dccacc560422933e6fd466\WindowsLive.Writer.FileDestinations.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 313856 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\6b87763370d46617ad42b7b14d9a48a5\WindowsLive.Writer.Interop.SHDocVw.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 374272 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\5c6cfb489687133d0a8fa43c0232f916\WindowsLive.Writer.Interop.Mshtml.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\53a6bfef11e6111742de4c37284e3a28\WindowsLive.Writer.BrowserControl.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 122368 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\5289043ea0fa1638c3d42c2ac0edf5b7\WindowsLive.Writer.Extensibility.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 146432 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\120dbdf4ddf7e5980897e42c44afc43c\WindowsLive.Writer.Instrumentation.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 223232 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\e793010f06b2383d3e99ece5012c5677\WindowsLive.Client.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\30b1d86571495ea86b9a19b13498aad3\WindowsFormsIntegration.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 452096 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\eca4310274a7a6ce651b33cd4278610c\UIAutomationClient.ni.dll
+ 2011-04-30 19:29 . 2011-04-30 19:29 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\165d0873203da280298bfcfa50567a0b\System.Web.Routing.ni.dll
+ 2011-04-30 19:29 . 2011-04-30 19:29 860160 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\0b5071ee1d40266575a7ac53b9b299d4\System.Web.Extensions.Design.ni.dll
+ 2011-04-30 19:29 . 2011-04-30 19:29 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\9a3ab1594cf5cd52f0794b0a93a14b57\System.Web.Entity.ni.dll
+ 2011-04-30 19:29 . 2011-04-30 19:29 301568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\a63e76cc86c8958f0f3e9741c0d89f14\System.Web.Entity.Design.ni.dll
+ 2011-04-30 19:29 . 2011-04-30 19:29 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\a16dd65d2bfab6a019ac8a05337a5c24\System.Web.DynamicData.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\3112fe15b1994ff59b169cf7ce997e71\System.Web.Abstractions.ni.dll
+ 2011-04-30 19:29 . 2011-04-30 19:29 624128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\964a515210f3bad01949e9ae4f83c7b2\System.Net.ni.dll
+ 2011-04-30 19:29 . 2011-04-30 19:29 330240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\17e443d6c643b83137beb310adee3c48\System.Management.Instrumentation.ni.dll
+ 2011-04-30 19:29 . 2011-04-30 19:29 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\19837bdc62b7667aba81364142e3565a\System.IO.Log.ni.dll
+ 2011-04-30 19:29 . 2011-04-30 19:29 888320 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\bcad898b90aee666da2f81b0a87a91ee\System.DirectoryServices.AccountManagement.ni.dll
+ 2011-04-30 19:29 . 2011-04-30 19:29 462336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\5d0f494f1be2367fb0a634956f719965\System.Data.Services.Design.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 763392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\32088676b4c08d192aae910cac1dade4\System.Data.Entity.Design.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\eae18653a1b39fe484b49963d43480ce\System.Data.DataSetExtensions.ni.dll
+ 2011-04-30 19:29 . 2011-04-30 19:29 232448 c:\windows\assembly\NativeImages_v2.0.50727_32\sysglobl\8abe9d895b3e9efe741b9162cb9206fc\sysglobl.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 654848 c:\windows\assembly\NativeImages_v2.0.50727_32\PreviewControls\cbecf83afea6f794f6beef1052ef0b8e\PreviewControls.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\PbServiceCore\0e0d5b4dd70c076ef2d2532716f2c50e\PbServiceCore.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 688640 c:\windows\assembly\NativeImages_v2.0.50727_32\PbResource\9db6bf2ebb1435bf5c22969ea995ce4b\PbResource.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 813568 c:\windows\assembly\NativeImages_v2.0.50727_32\PbAreas\5720a7751f31c5cb45425b6b3ed9daae\PbAreas.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 723456 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\f64692e58aa1a7116024bf3c3cbd1352\napsnap.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\6a657f2f518f97b282702fce20033459\napinit.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 105472 c:\windows\assembly\NativeImages_v2.0.50727_32\MusicDataSource\1b74296c1ac964c5495eb8a1f2d2c4c1\MusicDataSource.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 681984 c:\windows\assembly\NativeImages_v2.0.50727_32\MusicDataAccess\dff9e1271a90258493982e3616d4713c\MusicDataAccess.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\af28543d9b3e7d9f110448ecce53cd72\MSBuild.ni.exe
+ 2011-04-30 19:28 . 2011-04-30 19:28 531968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\ee28a075665b6bc23b6dae56903d431d\Microsoft.WSMan.Management.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 729088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\e998eeb1548ffd53b39dcde50d196ab7\Microsoft.PowerShell.GraphicalHost.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 515584 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\b1c511d8fad78ad3c5213b2b4fb02b8b\Microsoft.PowerShell.ConsoleHost.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 786432 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\8df695fb80187f65208d87229e81e8a2\Microsoft.PowerShell.Commands.Management.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 167424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\8ce205027e30804d1b2deaffa0582735\Microsoft.PowerShell.Security.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 291328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\4f68cd04686e5dc5a55070d112d44bdf\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\dfb5532e4cf07b7324280988a3e1cca4\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\30f8865f88bb953486fd20650b54177c\Microsoft.Build.Utilities.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\14afe54e24cf09fe6c371fc47cfabf0e\Microsoft.Build.Engine.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\942c10614a6f8c8a22d1f74e217a11d6\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 671232 c:\windows\assembly\NativeImages_v2.0.50727_32\FileSelect\791319ddc36fd143121e30a0cf9782a3\FileSelect.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 103936 c:\windows\assembly\NativeImages_v2.0.50727_32\EngineFacadeIF\f8515ddbb3d58e941b2dc2f6cb389e2d\EngineFacadeIF.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiExtens\7b6de29c99674df526ccf9d4937828fe\ehiExtens.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 254464 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\c899de3549784161aa66610d5735e4f0\ehExtHost32.ni.exe
+ 2011-04-30 19:27 . 2011-04-30 19:27 699392 c:\windows\assembly\NativeImages_v2.0.50727_32\DataSource\f807fa46a3a32e5200472352cda8c10a\DataSource.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\bf7e7494e75e32979c7824a07570a8a9\CustomMarshalers.ni.dll
- 2009-07-14 04:45 . 2011-04-30 10:32 7113171 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
+ 2009-07-14 04:45 . 2011-04-30 19:47 7113171 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
+ 2011-01-11 04:03 . 2011-01-11 04:03 2761728 c:\windows\Installer\89a60.msi
+ 2011-04-30 19:27 . 2011-04-30 19:27 7026176 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\cb64811fcbe857e8a1404e31d6a9d3a0\WindowsLive.Writer.PostEditor.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 1285632 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\bc807477855c7d43363bc71744243d78\WindowsLive.Writer.ApplicationFramework.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 2193408 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\b2e79705cd5b7c890e55c99ea975490b\WindowsLive.Writer.CoreServices.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 1346560 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\02ba0d9339e0899e1bc10dc539a7e62e\WindowsLive.Writer.Localization.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 2029568 c:\windows\assembly\NativeImages_v2.0.50727_32\VMStory\7852f66c2523fe5d74b38f3c3aef5405\VMStory.ni.exe
+ 2011-04-30 19:29 . 2011-04-30 19:29 2209792 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\9abec9ee3dab00d67b395d1994a60776\System.Web.Mobile.ni.dll
+ 2011-04-30 19:29 . 2011-04-30 19:29 2403328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\70823ac0d6e6631a11d443bf38987cc9\System.Web.Extensions.ni.dll
+ 2011-04-30 19:29 . 2011-04-30 19:29 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\6935e1dad6ec5de21658f8d38999099a\System.Speech.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 1707008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\4782a5d2bc7d86895faf404a3470aacb\System.ServiceModel.Web.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 8872960 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\4436815b432c313255af322f4ec3560d\System.Management.Automation.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 2029568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\c335a6ef5339fa917518475c286c8ca4\System.Data.Services.ni.dll
+ 2011-04-30 19:29 . 2011-04-30 19:29 1378816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\a933cd1241698e4d13d80c8cb31d7055\System.Data.Services.Client.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 9921536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\a5947a9c77b884b9e06c54f38ff3c4d7\System.Data.Entity.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 1451520 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\c0a8f3f379d7a62a032783cc4e04a4dd\PresentationBuildTasks.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 1477632 c:\windows\assembly\NativeImages_v2.0.50727_32\PbCore\d6952c62372c457e7bbe84662054b1e2\PbCore.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 1436672 c:\windows\assembly\NativeImages_v2.0.50727_32\PbControls\3e04c9c546907a88bb34ff2449a7b807\PbControls.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 2623488 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\0bae62c3fc6c327ed24989263988173d\Narrator.ni.exe
+ 2011-04-30 19:28 . 2011-04-30 19:28 1545216 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\6d4bacfd54e8f79763945bee5a50711d\MMCEx.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 1670144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 3724288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\6cc1334749f85cce651642f0a8260892\Microsoft.PowerShell.Editor.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 1681920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\3008a05e2928e2c1d856cc34e0422c17\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 1704960 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\2ba6bf6e9258afde91ab81fad2d37469\Microsoft.PowerShell.GPowerShell.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 1361408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\b0d0daea6a1d9a111a0f33a9a868bcf7\Microsoft.Ink.ni.dll
+ 2011-04-30 19:28 . 2011-04-30 19:28 1970176 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\d7245402b9853a8e390552ba45b3a6b4\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\880a680b2160130c8cf858a7d2a9067d\Microsoft.Build.Tasks.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\e4031bd0b7706fd0a686e9bb6353aa2a\Microsoft.Build.Engine.ni.dll
+ 2011-04-30 19:27 . 2011-04-30 19:27 2963456 c:\windows\assembly\NativeImages_v2.0.50727_32\EngineFacade\ae919b2ea5aee362cd2a7a03989b299a\EngineFacade.ni.dll
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{64182481-4F71-486b-A045-B233BD0DA8FC}]
c:\program files (x86)\facemoods.com\facemoods\1.4.17.3\bh\facemoods.dll [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{DB4E9724-F518-4dfd-9C7C-78B52103CAB9}"= "c:\program files (x86)\facemoods.com\facemoods\1.4.17.3\facemoodsTlbr.dll" [BU]
.
[HKEY_CLASSES_ROOT\clsid\{db4e9724-f518-4dfd-9c7c-78b52103cab9}]
[HKEY_CLASSES_ROOT\facemoods.dskBnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}]
[HKEY_CLASSES_ROOT\facemoods.dskBnd]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ISBMgr.exe"="c:\program files (x86)\Sony\ISB Utility\ISBMgr.exe" [2009-08-26 320880]
"McENUI"="c:\progra~2\McAfee\MHN\McENUI.exe" [2009-07-07 1176808]
"PMBVolumeWatcher"="c:\program files (x86)\Sony\PMB\PMBVolumeWatcher.exe" [2009-10-24 597792]
"MarketingTools"="c:\program files (x86)\Sony\Marketing Tools\MarketingTools.exe" [2009-12-16 26624]
"mcagent_exe"="c:\program files (x86)\McAfee.com\Agent\mcagent.exe" [2010-06-10 1218008]
"AdobeCS4ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"TkBellExe"="c:\program files (x86)\Common Files\Real\Update_OB\realsched.exe" [2010-10-03 202256]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2010-12-09 1226608]
"DivX Download Manager"="c:\program files (x86)\DivX\DivX Plus Web Player\DDmService.exe" [2010-12-08 63360]
"Philips Device Listener"="c:\program files (x86)\Philips\Philips Songbird Resources\Autolauncher\PhilipsDeviceListener.exe" [2010-05-27 375296]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
.
c:\users\Tade ç\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-9-4 1081632]
Nikon Monitor.lnk - c:\program files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe [2008-6-5 479232]
.
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
IconPackager.lnk - c:\program files (x86)\Stardock\MyColors\IconPackager.exe [2009-10-14 1389944]
Think Green Weather.lnk - c:\program files (x86)\Stardock\DesktopGadgets\Think Green Weather\Think Green Weather.exe [2010-7-9 728576]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-12-16 133104]
R2 Roxio Upnp Server 10;Roxio Upnp Server 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [2009-08-31 362992]
R2 Sentinel64;Sentinel64;c:\windows\System32\Drivers\Sentinel64.sys [x]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2010-09-20 1038088]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-12-16 133104]
R3 ivusb;Initio Driver for USB Default Controller;c:\windows\system32\DRIVERS\ivusb.sys [x]
R3 nmwcdcx64;Nokia USB Generic;c:\windows\system32\drivers\ccdcmbox64.sys [x]
R3 nmwcdx64;Nokia USB Phone Parent;c:\windows\system32\drivers\ccdcmbx64.sys [x]
R3 Roxio UPnP Renderer 10;Roxio UPnP Renderer 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [2009-08-31 313840]
R3 SOHCImp;VAIO Media plus Content Importer;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2009-10-15 120104]
R3 SOHDBSvr;VAIO Media plus Database Manager;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [2009-10-15 70952]
R3 SOHDms;VAIO Media plus Digital Media Server;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2009-10-15 427304]
R3 SOHDs;VAIO Media plus Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2009-10-15 75048]
R3 SOHPlMgr;VAIO Media plus Playlist Manager;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [2009-10-15 91432]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TVICHW64;TVICHW64;c:\windows\system32\DRIVERS\TVICHW64.SYS [x]
R3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2009-09-01 361840]
R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2010-02-19 115568]
R3 VUAgent;VUAgent;c:\program files\Sony\VAIO Update 5\VUAgent.exe [2010-04-09 1223024]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 Application Updater;Application Updater;c:\program files (x86)\Application Updater\ApplicationUpdater.exe [2011-01-28 387072]
S2 ArcGIS License Manager;ArcGIS License Manager;c:\progra~2\ESRI\License\arcgis9x\lmgrd.exe [2008-08-02 1431440]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-03-25 490280]
S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2009-10-24 360224]
S2 regi;regi;c:\windows\system32\drivers\regi.sys [2007-04-17 14112]
S2 rimspci;rimspci;c:\windows\system32\drivers\rimssne64.sys [x]
S2 risdsnpe;risdsnpe;c:\windows\system32\drivers\risdsne64.sys [x]
S2 SampleCollector;VAIO Care Performance Service;c:\program files\Sony\VAIO Care\VCPerfService.exe [2011-01-29 259192]
S2 uCamMonitor;CamMonitor;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2008-09-18 104960]
S2 VCFw;VAIO Content Folder Watcher;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2009-09-14 642416]
S2 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2010-02-19 529776]
S2 VSNService;VSNService;c:\program files\Sony\VAIO Smart Network\VSNService.exe [2009-11-25 821760]
S2 WDDMService;WD SmartWare Drive Manager Service;c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [2009-10-14 116224]
S2 WDSmartWareBackgroundService;WD SmartWare Background Service;c:\program files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [2009-06-16 20480]
S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys [x]
S3 Impcd;Impcd;c:\windows\system32\drivers\Impcd.sys [x]
S3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETw5s64.sys [x]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\drivers\SFEP.sys [x]
S3 VAIO Power Management;VAIO Power Management;c:\program files\Sony\VAIO Power Management\SPMService.exe [2009-11-30 571248]
S3 VCService;VCService;c:\program files\Sony\VAIO Care\VCService.exe [2011-02-14 44736]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2011-04-30 c:\windows\Tasks\Defraggler Volume C Task.job
- c:\program files\Defraggler\df64.exe [2010-07-30 19:18]
.
2011-04-30 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-12-16 05:00]
.
2011-04-30 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-12-16 05:00]
.
2011-01-15 c:\windows\Tasks\McDefragTask.job
- c:\progra~2\mcafee\mqc\QcConsol.exe [2010-06-15 10:22]
.
2011-04-30 c:\windows\Tasks\Norton Security Scan for Tadeáš.job
- c:\program files (x86)\Norton Security Scan\Engine\2.7.3.34\Nss.exe [2011-01-07 08:48]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-10-13 186904]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-02-09 10060320]
"Apoint"="%ProgramFiles%\Apoint\Apoint.exe" [BU]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-12-16 171520]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-01-11 16397416]
.
------- Doplňkový sken -------
.
uLocal Page = %SystemRoot%\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Crawler Search - tbr:iemenu
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - c:\progra~2\Crawler\Toolbar\ctbr.dll
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
BHO-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
Wow6432Node-HKLM-Run-SearchSettings - c:\program files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
AddRemove-BitTorrentBar Toolbar - c:\progra~2\BITTOR~2\UNWISE.EXE
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SampleCollector]
"ImagePath"="\"c:\program files\Sony\VAIO Care\VCPerfService.exe\" \"/service\" \"/sstates\" \"/sampleinterval=5000\" \"/procinterval=5\" \"/dllinterval=120\" \"/counter=\Processor(_Total)\% Processor Time:1/counter=\PhysicalDisk(_Total)\Disk Bytes/sec:1\" \"/counter=\Network Interface(*)\Bytes Total/sec:1\" \"/expandcounter=\Processor Information(*)\Processor Frequency:1\" \"/expandcounter=\Processor(*)\% Idle Time:1\" \"/expandcounter=\Processor(*)\% C1 Time:1\" \"/expandcounter=\Processor(*)\% C2 Time:1\" \"/expandcounter=\Processor(*)\% C3 Time:1\" \"/expandcounter=\Processor(*)\% Processor Time:1\" \"/directory=c:\programdata\Sony Corporation\VAIO Care\inteldata\""
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-1971295752-3624833708-3337141201-1000\Software\SecuROM\License information*]
"datasecu"=hex:26,07,c9,97,ec,0c,9d,8f,ec,e6,33,b1,bf,52,e4,f9,cc,1a,e3,6a,13,
aa,ca,62,82,46,48,b1,b7,81,8d,e5,85,83,4f,d9,9e,bf,9d,b2,50,db,ed,db,f7,3b,\
"rkeysecu"=hex:0e,bd,7e,7e,a1,03,ed,ae,dc,30,12,81,e0,ec,bf,10
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10c.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2011-04-30 23:02:51
ComboFix-quarantined-files.txt 2011-04-30 21:02
ComboFix2.txt 2011-04-30 17:54
.
Před spuštěním: Volných bajtů: 114 248 290 304
Po spuštění: Volných bajtů: 114 058 350 592
.
- - End Of File - - 9619C0A45BD7B68D17313D17293B23F9

Tak ještě jeden skript, něco nám tam zůstalo po facemods

Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka
-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:




-po aplikaci na Vás vypadne další log,vložte ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci

log=)



ComboFix 11-04-29.04 - Tadeáš 30.04.2011 23:21:31.3.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4014.2829 [GMT 2:00]
Spuštěný z: c:\users\Tadeáš\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Tadeáš\Desktop\CFScript.txt
AV: McAfee VirusScan *Enabled/Outdated* {86355677-4064-3EA7-ABB3-1B136EB04637}
FW: McAfee Personal Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
SP: McAfee VirusScan *Disabled/Outdated* {3D54B793-665E-3129-9103-206115370C8A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-03-28 do 2011-04-30 )))))))))))))))))))))))))))))))
.
.
2011-04-30 21:27 . 2011-04-30 21:27 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-04-30 09:55 . 2011-04-30 09:55 -------- d-----w- c:\windows\system32\SPReview
2011-04-30 09:55 . 2011-04-30 09:55 -------- d-----w- c:\windows\system32\EventProviders
2011-04-30 09:48 . 2010-11-05 01:57 48976 ----a-w- c:\windows\system32\netfxperf.dll
2011-04-30 09:48 . 2010-11-05 01:57 1942856 ----a-w- c:\windows\system32\dfshim.dll
2011-04-30 09:48 . 2010-11-05 01:58 1130824 ----a-w- c:\windows\SysWow64\dfshim.dll
2011-04-30 09:48 . 2010-11-20 13:33 5563776 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-04-30 09:48 . 2010-11-20 13:27 12288 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2011-04-30 09:48 . 2010-11-20 11:07 59392 ----a-w- c:\windows\system32\drivers\TsUsbFlt.sys
2011-04-30 09:48 . 2010-11-20 13:27 14967808 ----a-w- c:\program files\DVD Maker\OmdBase.dll
2011-04-30 09:48 . 2010-11-20 13:27 3715584 ----a-w- c:\windows\system32\mstscax.dll
2011-04-30 09:48 . 2010-11-20 13:26 1838080 ----a-w- c:\windows\system32\d3d10warp.dll
2011-04-30 09:48 . 2010-11-20 12:19 3215872 ----a-w- c:\windows\SysWow64\mstscax.dll
2011-04-30 09:46 . 2010-11-20 13:33 289664 ----a-w- c:\windows\system32\drivers\fltMgr.sys
2011-04-30 09:45 . 2010-11-20 13:27 249856 ----a-w- c:\program files\Common Files\System\msadc\msdarem.dll
2011-04-30 09:42 . 2010-11-20 13:27 524288 ----a-w- c:\windows\system32\wmicmiplugin.dll
2011-04-30 09:42 . 2010-11-20 13:27 529408 ----a-w- c:\windows\system32\wbemcomn.dll
2011-04-30 09:42 . 2010-11-20 13:27 1225216 ----a-w- c:\windows\system32\wbem\wbemcore.dll
2011-04-30 09:42 . 2010-11-20 13:27 933376 ----a-w- c:\windows\system32\SmiEngine.dll
2011-04-30 09:42 . 2010-11-20 13:25 199168 ----a-w- c:\windows\system32\PkgMgr.exe
2011-04-30 09:41 . 2010-11-20 13:26 422912 ----a-w- c:\windows\system32\drvstore.dll
2011-04-30 09:41 . 2010-11-20 13:26 399872 ----a-w- c:\windows\system32\dpx.dll
2011-04-27 09:02 . 2011-02-25 06:19 2871808 ----a-w- c:\windows\explorer.exe
2011-04-27 09:02 . 2011-02-25 05:30 2616320 ----a-w- c:\windows\SysWow64\explorer.exe
2011-04-19 07:19 . 2011-04-19 07:20 -------- d-----w- c:\program files (x86)\XTB-Trader Contest
2011-04-15 10:56 . 2011-02-24 06:15 476160 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-04-15 10:56 . 2011-02-24 05:38 288256 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-30 10:20 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-04-30 10:20 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-04-04 17:12 . 2011-03-28 15:10 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-03-14 12:03 . 2010-06-24 09:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-03-04 06:19 . 2011-04-27 09:01 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2011-03-04 06:19 . 2011-04-27 09:01 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2011-02-19 12:05 . 2011-03-09 14:17 1139200 ----a-w- c:\windows\system32\FntCache.dll
2011-02-19 12:04 . 2011-03-09 14:17 1544192 ----a-w- c:\windows\system32\DWrite.dll
2011-02-19 12:04 . 2011-03-09 14:17 902656 ----a-w- c:\windows\system32\d2d1.dll
2011-02-19 06:30 . 2011-03-09 14:17 1076736 ----a-w- c:\windows\SysWow64\DWrite.dll
2011-02-19 06:30 . 2011-03-09 14:17 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
.
.
((((((((((((((((((((((((((((( SnapShot_2011-04-30_21.01.00 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-12-16 05:03 . 2011-04-30 21:19 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-12-16 05:03 . 2011-04-30 20:48 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-07-14 04:54 . 2011-04-30 20:48 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2011-04-30 21:19 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-06-15 19:19 . 2011-04-30 21:10 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-06-15 19:19 . 2011-04-30 20:14 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-06-15 19:19 . 2011-04-30 21:10 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2010-06-15 19:19 . 2011-04-30 20:14 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-12-16 05:03 . 2011-04-30 20:48 147456 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-12-16 05:03 . 2011-04-30 21:19 147456 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ISBMgr.exe"="c:\program files (x86)\Sony\ISB Utility\ISBMgr.exe" [2009-08-26 320880]
"McENUI"="c:\progra~2\McAfee\MHN\McENUI.exe" [2009-07-07 1176808]
"PMBVolumeWatcher"="c:\program files (x86)\Sony\PMB\PMBVolumeWatcher.exe" [2009-10-24 597792]
"MarketingTools"="c:\program files (x86)\Sony\Marketing Tools\MarketingTools.exe" [2009-12-16 26624]
"mcagent_exe"="c:\program files (x86)\McAfee.com\Agent\mcagent.exe" [2010-06-10 1218008]
"AdobeCS4ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"TkBellExe"="c:\program files (x86)\Common Files\Real\Update_OB\realsched.exe" [2010-10-03 202256]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2010-12-09 1226608]
"DivX Download Manager"="c:\program files (x86)\DivX\DivX Plus Web Player\DDmService.exe" [2010-12-08 63360]
"Philips Device Listener"="c:\program files (x86)\Philips\Philips Songbird Resources\Autolauncher\PhilipsDeviceListener.exe" [2010-05-27 375296]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
.
c:\users\Tade ç\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-9-4 1081632]
Nikon Monitor.lnk - c:\program files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe [2008-6-5 479232]
.
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
IconPackager.lnk - c:\program files (x86)\Stardock\MyColors\IconPackager.exe [2009-10-14 1389944]
Think Green Weather.lnk - c:\program files (x86)\Stardock\DesktopGadgets\Think Green Weather\Think Green Weather.exe [2010-7-9 728576]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-12-16 133104]
R2 Roxio Upnp Server 10;Roxio Upnp Server 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [2009-08-31 362992]
R2 Sentinel64;Sentinel64;c:\windows\System32\Drivers\Sentinel64.sys [x]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2010-09-20 1038088]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-12-16 133104]
R3 ivusb;Initio Driver for USB Default Controller;c:\windows\system32\DRIVERS\ivusb.sys [x]
R3 nmwcdcx64;Nokia USB Generic;c:\windows\system32\drivers\ccdcmbox64.sys [x]
R3 nmwcdx64;Nokia USB Phone Parent;c:\windows\system32\drivers\ccdcmbx64.sys [x]
R3 Roxio UPnP Renderer 10;Roxio UPnP Renderer 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [2009-08-31 313840]
R3 SOHCImp;VAIO Media plus Content Importer;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2009-10-15 120104]
R3 SOHDBSvr;VAIO Media plus Database Manager;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [2009-10-15 70952]
R3 SOHDms;VAIO Media plus Digital Media Server;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2009-10-15 427304]
R3 SOHDs;VAIO Media plus Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2009-10-15 75048]
R3 SOHPlMgr;VAIO Media plus Playlist Manager;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [2009-10-15 91432]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TVICHW64;TVICHW64;c:\windows\system32\DRIVERS\TVICHW64.SYS [x]
R3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2009-09-01 361840]
R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2010-02-19 115568]
R3 VUAgent;VUAgent;c:\program files\Sony\VAIO Update 5\VUAgent.exe [2010-04-09 1223024]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 Application Updater;Application Updater;c:\program files (x86)\Application Updater\ApplicationUpdater.exe [2011-01-28 387072]
S2 ArcGIS License Manager;ArcGIS License Manager;c:\progra~2\ESRI\License\arcgis9x\lmgrd.exe [2008-08-02 1431440]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-03-25 490280]
S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2009-10-24 360224]
S2 regi;regi;c:\windows\system32\drivers\regi.sys [2007-04-17 14112]
S2 rimspci;rimspci;c:\windows\system32\drivers\rimssne64.sys [x]
S2 risdsnpe;risdsnpe;c:\windows\system32\drivers\risdsne64.sys [x]
S2 SampleCollector;VAIO Care Performance Service;c:\program files\Sony\VAIO Care\VCPerfService.exe [2011-01-29 259192]
S2 uCamMonitor;CamMonitor;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2008-09-18 104960]
S2 VCFw;VAIO Content Folder Watcher;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2009-09-14 642416]
S2 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2010-02-19 529776]
S2 VSNService;VSNService;c:\program files\Sony\VAIO Smart Network\VSNService.exe [2009-11-25 821760]
S2 WDDMService;WD SmartWare Drive Manager Service;c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [2009-10-14 116224]
S2 WDSmartWareBackgroundService;WD SmartWare Background Service;c:\program files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [2009-06-16 20480]
S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys [x]
S3 Impcd;Impcd;c:\windows\system32\drivers\Impcd.sys [x]
S3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETw5s64.sys [x]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\drivers\SFEP.sys [x]
S3 VAIO Power Management;VAIO Power Management;c:\program files\Sony\VAIO Power Management\SPMService.exe [2009-11-30 571248]
S3 VCService;VCService;c:\program files\Sony\VAIO Care\VCService.exe [2011-02-14 44736]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2011-04-30 c:\windows\Tasks\Defraggler Volume C Task.job
- c:\program files\Defraggler\df64.exe [2010-07-30 19:18]
.
2011-04-30 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-12-16 05:00]
.
2011-04-30 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-12-16 05:00]
.
2011-01-15 c:\windows\Tasks\McDefragTask.job
- c:\progra~2\mcafee\mqc\QcConsol.exe [2010-06-15 10:22]
.
2011-04-30 c:\windows\Tasks\Norton Security Scan for Tadeáš.job
- c:\program files (x86)\Norton Security Scan\Engine\2.7.3.34\Nss.exe [2011-01-07 08:48]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-10-13 186904]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-02-09 10060320]
"Apoint"="%ProgramFiles%\Apoint\Apoint.exe" [BU]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-12-16 171520]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-01-11 16397416]
.
------- Doplňkový sken -------
.
uLocal Page = %SystemRoot%\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Crawler Search - tbr:iemenu
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - c:\progra~2\Crawler\Toolbar\ctbr.dll
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
BHO-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SampleCollector]
"ImagePath"="\"c:\program files\Sony\VAIO Care\VCPerfService.exe\" \"/service\" \"/sstates\" \"/sampleinterval=5000\" \"/procinterval=5\" \"/dllinterval=120\" \"/counter=\Processor(_Total)\% Processor Time:1/counter=\PhysicalDisk(_Total)\Disk Bytes/sec:1\" \"/counter=\Network Interface(*)\Bytes Total/sec:1\" \"/expandcounter=\Processor Information(*)\Processor Frequency:1\" \"/expandcounter=\Processor(*)\% Idle Time:1\" \"/expandcounter=\Processor(*)\% C1 Time:1\" \"/expandcounter=\Processor(*)\% C2 Time:1\" \"/expandcounter=\Processor(*)\% C3 Time:1\" \"/expandcounter=\Processor(*)\% Processor Time:1\" \"/directory=c:\programdata\Sony Corporation\VAIO Care\inteldata\""
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-1971295752-3624833708-3337141201-1000\Software\SecuROM\License information*]
"datasecu"=hex:26,07,c9,97,ec,0c,9d,8f,ec,e6,33,b1,bf,52,e4,f9,cc,1a,e3,6a,13,
aa,ca,62,82,46,48,b1,b7,81,8d,e5,85,83,4f,d9,9e,bf,9d,b2,50,db,ed,db,f7,3b,\
"rkeysecu"=hex:0e,bd,7e,7e,a1,03,ed,ae,dc,30,12,81,e0,ec,bf,10
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10c.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2011-04-30 23:29:21
ComboFix-quarantined-files.txt 2011-04-30 21:29
ComboFix2.txt 2011-04-30 21:02
ComboFix3.txt 2011-04-30 17:54
.
Před spuštěním: Volných bajtů: 113 883 185 152
Po spuštění: Volných bajtů: 113 818 419 200
.
- - End Of File - - C7892C82D79B9D1398FE1EDCD8844985

Odinstalujte combofix přes Start - Spustit
- zkopírujte do okénka:

ComboFix /Uninstall

-stiskněte Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.


***********


Stáhněte T-Cleaner
http://tharifas.sweb.cz/T-Cleaner.exe

-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir



***********


Z mého podpisu stahněte Ccleaner
- nainstalujte, při výběru, co se má nainstalovat, dejte pryč fajfku u instalace yahoo toolbaru

záložka čistič
- nechejte v levém sloupečku zatrhnuté vše jak je, klikněte na analyzovat
- po analýze klikněte na Spustit Ccleaner

záložka Registry
- klikněte na hledej problémy
- pak klikněte na opravit vybrané problémy -- udělat zálohu registrů - nemusíte
- kliknete opravit všechny problémy ok zavřít

Záložka Nástroje
- zde můžete odinstalovat programy. Je to důkladnější odinstalace než u přidat/odebrat programy ve Windows.

Ccleaner - čistič doporučuji používat, krásně pročistí pc od dočasných souborů.
Registry pročistí třeba po odinstalaci nějakého programu.


***********



Stahněte OTC a použijte
http://oldtimer.geekstogo.com/OTC.exe
-vyčistí tempy a po použitých programech



***********

Vložte nový log ze RSIT a řekněte co počítač, jak se chová, už je vše v pořádku?

Logfile of random's system information tool 1.08 (written by random/random)
Run by Tadeáš at 2011-04-30 23:45:41
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 141 GB (30%) free of 463 GB
Total RAM: 4014 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:46:05, on 30.4.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe
C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files (x86)\SONY\ISB Utility\ISBMgr.exe
C:\Program Files (x86)\SONY\PMB\PMBVolumeWatcher.exe
C:\Program Files (x86)\SONY\Marketing Tools\MarketingTools.exe
C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe
C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files (x86)\DivX\DivX Plus Web Player\DDMService.exe
C:\Program Files (x86)\Philips\Philips Songbird Resources\Autolauncher\PhilipsDeviceListener.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Real\RealPlayer\RealPlay.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Tadeáš.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: QuickStores-Toolbar - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - mscoree.dll (file missing)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~2\mcafee\msk\mskapbho.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Inbox Toolbar - {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - C:\PROGRA~2\INBOXT~1\Inbox.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: QuickStores-Toolbar - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - mscoree.dll (file missing)
O3 - Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - (no file)
O3 - Toolbar: &Inbox Toolbar - {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - C:\PROGRA~2\INBOXT~1\Inbox.dll
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"
O4 - HKLM\..\Run: [McENUI] C:\PROGRA~2\McAfee\MHN\McENUI.exe /hide
O4 - HKLM\..\Run: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
O4 - HKLM\..\Run: [MarketingTools] C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [DivX Download Manager] "C:\Program Files (x86)\DivX\DivX Plus Web Player\DDmService.exe" start
O4 - HKLM\..\Run: [Philips Device Listener] "C:\Program Files (x86)\Philips\Philips Songbird Resources\Autolauncher\PhilipsDeviceListener.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - .DEFAULT User Startup: IconPackager.lnk = C:\Program Files (x86)\Stardock\MyColors\IconPackager.exe (User 'Default user')
O4 - .DEFAULT User Startup: Think Green Weather.lnk = C:\Program Files (x86)\Stardock\DesktopGadgets\Think Green Weather\Think Green Weather.exe (User 'Default user')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: Nikon Monitor.lnk = C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - C:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll
O9 - Extra 'Tools' menuitem: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - C:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: inbox - {37540F19-DD4C-478B-B2DF-C19281BCAF27} - C:\PROGRA~2\INBOXT~1\Inbox.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
O23 - Service: ArcGIS License Manager - Acresso Software Inc. - C:\PROGRA~2\ESRI\License\arcgis9x\lmgrd.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~2\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~2\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~2\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files (x86)\McAfee\MPF\MPFSrv.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files (x86)\McAfee\MSK\MskSrver.exe
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PMBDeviceInfoProvider - Sony Corporation - C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Roxio UPnP Renderer 10 - Sonic Solutions - C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe
O23 - Service: Roxio Upnp Server 10 - Sonic Solutions - C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: VAIO Care Performance Service (SampleCollector) - Sony Corporation - C:\Program Files\Sony\VAIO Care\VCPerfService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: VAIO Media plus Content Importer (SOHCImp) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe
O23 - Service: VAIO Media plus Database Manager (SOHDBSvr) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe
O23 - Service: VAIO Media plus Digital Media Server (SOHDms) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe
O23 - Service: VAIO Media plus Device Searcher (SOHDs) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe
O23 - Service: VAIO Media plus Playlist Manager (SOHPlMgr) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: CamMonitor (uCamMonitor) - ArcSoft, Inc. - C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files (x86)\SONY\VAIO Event Service\VESMgr.exe
O23 - Service: VAIO Power Management - Sony Corporation - C:\Program Files\Sony\VAIO Power Management\SPMService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: VAIO Content Folder Watcher (VCFw) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
O23 - Service: VAIO Content Metadata Intelligent Analyzing Manager (VcmIAlzMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
O23 - Service: VAIO Content Metadata Intelligent Network Service Manager (VcmINSMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe
O23 - Service: VAIO Content Metadata XML Interface (VcmXmlIfHelper) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe
O23 - Service: VCService - Sony Corporation - C:\Program Files\Sony\VAIO Care\VCService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VSNService - Sony Corporation - C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: VUAgent - Sony Corporation - C:\Program Files\Sony\VAIO Update 5\VUAgent.exe
O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WD SmartWare Drive Manager Service (WDDMService) - WDC - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
O23 - Service: WD SmartWare Background Service (WDSmartWareBackgroundService) - Memeo - C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
O23 - Service: Stardock WindowBlinds (WindowBlinds) - Stardock Corporation - C:\Program Files (x86)\Stardock\MyColors\VistaSrv.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 21764 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files (x86)\Stardock\MyColors\VistaSrv.exe"
"C:\Program Files (x86)\Stardock\MyColors\WBVista.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 28597152
\??\C:\Windows\system32\conhost.exe
C:\Windows\System32\spoolsv.exe
taskeng.exe {77F10E77-0693-4ABF-83B9-5D92D15F874E}
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe"
C:\PROGRA~2\ESRI\License\arcgis9x\lmgrd.exe
\??\C:\Windows\system32\conhost.exe
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\PROGRA~2\ESRI\License\arcgis9x\lmgrd.exe" -c "C:\PROGRA~2\ESRI\License\arcgis9x\license.lic" -l "C:\Program Files (x86)\ESRI\License\arcgis9x\ARCGIS_LM.LOG" -z
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe"
ARCGIS.exe -T Tadeas-VAIO 11.6 -1 -c "C:\PROGRA~2\ESRI\License\arcgis9x\license.lic" --lmgrd_start 4dbc8271 -l "C:\Program Files (x86)\ESRI\License\arcgis9x\ARCGIS_LM.LOG"
c:\PROGRA~2\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
"C:\Program Files (x86)\McAfee\MPF\MPFSrv.exe"
"C:\Program Files (x86)\McAfee\MSK\MskSrver.exe"
"C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe"
"C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
"C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe"
"C:\Program Files (x86)\SONY\VAIO Event Service\VESMgr.exe"
"taskhost.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe"
"C:\Program Files\Sony\VAIO Smart Network\VSNService.exe"
"C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe"
"C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe"
/Device:000000a1
"C:\Windows\system32\Dwm.exe"
taskeng.exe {E303CF4F-85A4-4BBF-AD98-724218659CC8}
"C:\Program Files\Sony\VAIO Power Management\SPMgr.exe" /Start
C:\Windows\SysWOW64\DllHost.exe /Processid:{78FD0120-D39C-45D8-A9BE-2B802B3C23E5}
taskeng.exe {86474CE4-07B1-4624-A2B4-A91C1E232DE6}
"C:\Program Files (x86)\SONY\VAIO Event Service\VESMgrSub.exe"
"C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe" /Stationary
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe"
"C:\Program Files\Apoint\Apoint.exe"
"C:\Program Files\Java\jre6\bin\jusched.exe"
C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe"
"C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE" /tsr
"C:\Program Files (x86)\SONY\ISB Utility\ISBMgr.exe"
"C:\Program Files (x86)\SONY\PMB\PMBVolumeWatcher.exe"
"C:\Program Files (x86)\SONY\Marketing Tools\MarketingTools.exe"
"C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe" /runkey
"C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe" -osboot
"C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
"C:\Program Files (x86)\DivX\DivX Plus Web Player\DDMService.exe" start
"C:\Program Files (x86)\Philips\Philips Songbird Resources\Autolauncher\PhilipsDeviceListener.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe"
"C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe"
WLIDSvcM.exe 4188
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Sony\VAIO Power Management\SPMService.exe"
C:\PROGRA~2\McAfee\MSC\mcmscsvc.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-f56fe5a5-52ba-41e4-ace9-7607ea8b2ca2 -SystemEventPortName:HostProcess-26efcf7f-27f5-44cb-adb2-0d8a1cafffe0 -IoCancelEventPortName:HostProcess-32ae0144-b561-4085-bbe2-b169c1e29209 -NonStateChangingEventPortName:HostProcess-f200276c-539e-4380-9632-c3c9775a1d1e -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:f9653f49-a0a5-4151-8462-d40e7bea7514
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Apoint\ApMsgFwd.exe" -s{05FA8492-C047-4207-BE65-780D8591C113}
C:\Windows\servicing\TrustedInstaller.exe
"Apntex.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
\??\C:\Windows\system32\conhost.exe
"C:\Program Files\Apoint\Apvfb.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.00BB3D80.665571750 /prefetch:3 --ignored=" --type=renderer "
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.00BB3C00.1645828593 /prefetch:3 --ignored=" --type=renderer "
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.00C5CC00.1906517922 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.058BC300.1220686704 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.058BC180.1199037281 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.058BC000.1689083365 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.00C5CD80.1048760132 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.00C5C780.1012095227 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.038D8D80.1027230295 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.05459D80.1302364442 /prefetch:3
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.05459A80.1817035256 /prefetch:3
"C:\Program Files (x86)\Real\RealPlayer\RealPlay.exe" /runevent "C:\Program Files (x86)\Real\RealPlayer\rpwa3260.dll" WatchFolders_Timer
C:\Windows\system32\rundll32.exe "C:\PROGRA~2\Google\Chrome\APPLIC~1\100648~1.205\gcswf32.dll",BrokerMain browser=chrome
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Program Files (x86)\Google\Chrome\Application\10.0.648.205\gcswf32.dll" --lang=cs --plugin-data-dir="C:\Users\Tadeáš\AppData\Local\Google\Chrome\User Data\Default" --channel=5744.03941400.1211870357 /prefetch:4 --flash-broker=2852
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.05459900.38815550 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.05459780.155619358 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.05459C00.858107851 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.05459600.946665238 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.05459480.861428839 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.05459300.1820236845 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.05459000.1506871962 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.0538DD80.1777926838 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.0538DC00.1421640361 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.0538DA80.1750584144 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.0538D900.839840425 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.0538D780.71243733 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.05459180.1368016224 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.0538D600.15793586 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.0538D480.876079720 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.0538D180.238837782 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.0538D000.777531323 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.038D8C00.1465369515 /prefetch:3
"C:\Users\Tadeáš\Downloads\RSITx64.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.038D8A80.808259465 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.038D8900.1084532223 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.038D8780.895488671 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.038D8600.1098894383 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.038D8480.1767883788 /prefetch:3
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.038D8300.1414771291 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_20/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd32/SpdyImpact/npn_with_spdy/ --channel=5744.038D8180.1696014554 /prefetch:3

======Scheduled tasks folder======

C:\Windows\tasks\Defraggler Volume C Task.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\McDefragTask.job
C:\Windows\tasks\Norton Security Scan for Tadeáš.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27B4851A-3207-45A2-B947-BE8AFE6163AB}]
McAfee Phishing Filter - c:\PROGRA~2\mcafee\msk\MSKAPB~1.DLL [2009-10-02 337424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7DB2D5A0-7241-4E79-B68D-6309F01C5231}]
scriptproxy - C:\Program Files\McAfee\VirusScan\scriptsn.dll [2010-02-17 60224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-12-16 43520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10EDB994-47F8-43F7-AE96-F2EA63E9F90F}]
QuickStores-Toolbar - C:\Windows\system32\mscoree.dll [2010-11-05 444752]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
C:\PROGRA~2\Crawler\Toolbar\ctbr.dll [2010-10-13 1235408]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27B4851A-3207-45A2-B947-BE8AFE6163AB}]
McAfee Phishing Filter - c:\PROGRA~2\mcafee\msk\mskapbho.dll [2009-10-02 246800]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-10-03 341600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2010-12-08 3123072]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2010-12-08 3123072]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7DB2D5A0-7241-4E79-B68D-6309F01C5231}]
scriptproxy - C:\Program Files (x86)\McAfee\VirusScan\scriptsn.dll [2010-02-17 62784]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-11-10 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-11-22 1242504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-02-28 1089288]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}]
Inbox Toolbar - C:\PROGRA~2\INBOXT~1\Inbox.dll [2010-09-29 807928]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-04-04 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - QuickStores-Toolbar - C:\Windows\system32\mscoree.dll [2010-11-05 444752]
{32099AAC-C132-4136-9E9A-4E364A424E17}
{D7E97865-918F-41E4-9CD0-25AB1C574CE8} - &Inbox Toolbar - C:\PROGRA~2\INBOXT~1\Inbox.dll [2010-09-29 807928]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler lišta - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll [2010-10-13 1235408]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-02-28 1089288]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"=C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-10-13 186904]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-02-09 10060320]
"Apoint"=C:\Program Files\Apoint\Apoint.exe [2009-11-04 208384]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-12-16 171520]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2010-01-11 16397416]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WDDMStatus.lnk]
C:\PROGRA~1\WESTER~1\WDSMAR~1\WDDRIV~1\WDDMST~1.EXE [2009-10-14 2111296]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WDSmartWare.lnk]
C:\PROGRA~2\WESTER~1\WDSMAR~1\FRONTP~1\WDSMAR~1.EXE [2009-10-14 9085760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Tadeáš^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Think Green Weather.lnk]
C:\PROGRA~2\Stardock\DESKTO~1\THINKG~1\THINKG~1.EXE [2008-05-09 728576]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ISBMgr.exe"=C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [2009-08-26 320880]
"McENUI"=C:\PROGRA~2\McAfee\MHN\McENUI.exe [2009-07-07 1176808]
"PMBVolumeWatcher"=C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [2009-10-24 597792]
"MarketingTools"=C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe [2009-12-16 26624]
"mcagent_exe"=C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe [2010-06-10 1218008]
"AdobeCS4ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"TkBellExe"=C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe [2010-10-03 202256]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"DivXUpdate"=C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2010-12-09 1226608]
"DivX Download Manager"=C:\Program Files (x86)\DivX\DivX Plus Web Player\DDmService.exe [2010-12-08 63360]
"Philips Device Listener"=C:\Program Files (x86)\Philips\Philips Songbird Resources\Autolauncher\PhilipsDeviceListener.exe [2010-05-27 375296]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
Nikon Monitor.lnk - C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe

C:\Users\Tadeáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2011-04-30 23:45:41 ----D---- C:\rsit
2011-04-30 23:39:56 ----SHD---- C:\$RECYCLE.BIN
2011-04-30 19:39:25 ----D---- C:\Windows\ERDNT
2011-04-30 11:55:43 ----D---- C:\Windows\system32\SPReview
2011-04-30 11:55:31 ----D---- C:\Windows\system32\EventProviders
2011-04-30 11:48:15 ----A---- C:\Windows\system32\netfxperf.dll
2011-04-30 11:48:15 ----A---- C:\Windows\system32\dfshim.dll
2011-04-30 11:48:08 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2011-04-30 11:48:05 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-04-30 11:48:04 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2011-04-30 11:48:04 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2011-04-30 11:48:03 ----A---- C:\Windows\system32\mstscax.dll
2011-04-30 11:48:03 ----A---- C:\Windows\system32\d3d10warp.dll
2011-04-30 11:48:01 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2011-04-30 11:47:58 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2011-04-30 11:47:58 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2011-04-30 11:47:57 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2011-04-30 11:47:57 ----A---- C:\Windows\system32\sysmain.dll
2011-04-30 11:47:57 ----A---- C:\Windows\system32\shell32.dll
2011-04-30 11:47:57 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-04-30 11:47:54 ----A---- C:\Windows\system32\MSVidCtl.dll
2011-04-30 11:47:53 ----A---- C:\Windows\system32\wmp.dll
2011-04-30 11:47:53 ----A---- C:\Windows\system32\tquery.dll
2011-04-30 11:47:52 ----A---- C:\Windows\system32\mssrch.dll
2011-04-30 11:47:51 ----A---- C:\Windows\system32\ntdll.dll
2011-04-30 11:47:51 ----A---- C:\Windows\system32\mscoree.dll
2011-04-30 11:47:51 ----A---- C:\Windows\system32\mmcndmgr.dll
2011-04-30 11:47:49 ----A---- C:\Windows\SYSWOW64\shell32.dll
2011-04-30 11:47:49 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2011-04-30 11:47:49 ----A---- C:\Windows\system32\xpsservices.dll
2011-04-30 11:47:49 ----A---- C:\Windows\system32\secproc_isv.dll
2011-04-30 11:47:49 ----A---- C:\Windows\system32\secproc.dll
2011-04-30 11:47:49 ----A---- C:\Windows\system32\RMActivate_isv.exe
2011-04-30 11:47:49 ----A---- C:\Windows\system32\RMActivate.exe
2011-04-30 11:47:49 ----A---- C:\Windows\system32\mf.dll
2011-04-30 11:47:47 ----A---- C:\Windows\SYSWOW64\secproc.dll
2011-04-30 11:47:47 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2011-04-30 11:47:47 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2011-04-30 11:47:47 ----A---- C:\Windows\system32\schedsvc.dll
2011-04-30 11:47:47 ----A---- C:\Windows\system32\rpcrt4.dll
2011-04-30 11:47:46 ----A---- C:\Windows\system32\ole32.dll
2011-04-30 11:47:45 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2011-04-30 11:47:45 ----A---- C:\Windows\system32\taskschd.dll
2011-04-30 11:47:45 ----A---- C:\Windows\system32\spwizui.dll
2011-04-30 11:47:45 ----A---- C:\Windows\system32\RacEngn.dll
2011-04-30 11:47:45 ----A---- C:\Windows\system32\iertutil.dll
2011-04-30 11:47:44 ----A---- C:\Windows\SYSWOW64\mf.dll
2011-04-30 11:47:44 ----A---- C:\Windows\system32\wevtsvc.dll
2011-04-30 11:47:44 ----A---- C:\Windows\system32\ExplorerFrame.dll
2011-04-30 11:47:44 ----A---- C:\Windows\system32\diagperf.dll
2011-04-30 11:47:43 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-04-30 11:47:43 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2011-04-30 11:47:43 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-04-30 11:47:43 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2011-04-30 11:47:43 ----A---- C:\Windows\system32\vssapi.dll
2011-04-30 11:47:43 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2011-04-30 11:47:43 ----A---- C:\Windows\system32\msxml3.dll
2011-04-30 11:47:43 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2011-04-30 11:47:42 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2011-04-30 11:47:41 ----A---- C:\Windows\system32\UIRibbon.dll
2011-04-30 11:47:39 ----A---- C:\Windows\SYSWOW64\wmp.dll
2011-04-30 11:47:38 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2011-04-30 11:47:38 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2011-04-30 11:47:38 ----A---- C:\Windows\system32\WsmSvc.dll
2011-04-30 11:47:38 ----A---- C:\Windows\system32\WMVCORE.DLL
2011-04-30 11:47:37 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-04-30 11:47:37 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2011-04-30 11:47:37 ----A---- C:\Windows\system32\PresentationHost.exe
2011-04-30 11:47:36 ----A---- C:\Windows\system32\rdpdd.dll
2011-04-30 11:47:35 ----A---- C:\Windows\system32\WinSAT.exe
2011-04-30 11:47:35 ----A---- C:\Windows\system32\spreview.exe
2011-04-30 11:47:35 ----A---- C:\Windows\system32\spinstall.exe
2011-04-30 11:47:35 ----A---- C:\Windows\system32\MPSSVC.dll
2011-04-30 11:47:35 ----A---- C:\Windows\system32\CertEnroll.dll
2011-04-30 11:47:33 ----A---- C:\Windows\SYSWOW64\tquery.dll
2011-04-30 11:47:33 ----A---- C:\Windows\system32\WMVDECOD.DLL
2011-04-30 11:47:32 ----A---- C:\Windows\system32\msxml6.dll
2011-04-30 11:47:32 ----A---- C:\Windows\system32\d3d9.dll
2011-04-30 11:47:31 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2011-04-30 11:47:31 ----A---- C:\Windows\system32\SearchFolder.dll
2011-04-30 11:47:31 ----A---- C:\Windows\system32\IKEEXT.DLL
2011-04-30 11:47:29 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2011-04-30 11:47:29 ----A---- C:\Windows\system32\kernel32.dll
2011-04-30 11:47:29 ----A---- C:\Windows\system32\gpsvc.dll
2011-04-30 11:47:29 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2011-04-30 11:47:28 ----A---- C:\Windows\system32\VSSVC.exe
2011-04-30 11:47:27 ----A---- C:\Windows\system32\mstime.dll
2011-04-30 11:47:27 ----A---- C:\Windows\system32\dwmcore.dll
2011-04-30 11:47:27 ----A---- C:\Windows\system32\drivers\http.sys
2011-04-30 11:47:27 ----A---- C:\Windows\system32\dbgeng.dll
2011-04-30 11:47:25 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2011-04-30 11:47:25 ----A---- C:\Windows\system32\drivers\ndis.sys
2011-04-30 11:47:25 ----A---- C:\Windows\system32\crypt32.dll
2011-04-30 11:47:24 ----A---- C:\Windows\SYSWOW64\ole32.dll
2011-04-30 11:47:24 ----A---- C:\Windows\system32\TSWorkspace.dll
2011-04-30 11:47:24 ----A---- C:\Windows\system32\schannel.dll
2011-04-30 11:47:24 ----A---- C:\Windows\system32\drivers\afd.sys
2011-04-30 11:47:24 ----A---- C:\Windows\system32\actxprxy.dll
2011-04-30 11:47:23 ----A---- C:\Windows\system32\termsrv.dll
2011-04-30 11:47:23 ----A---- C:\Windows\system32\sqmapi.dll
2011-04-30 11:47:23 ----A---- C:\Windows\system32\qmgr.dll
2011-04-30 11:47:23 ----A---- C:\Windows\system32\mstsc.exe
2011-04-30 11:47:23 ----A---- C:\Windows\system32\lsasrv.dll
2011-04-30 11:47:23 ----A---- C:\Windows\system32\KernelBase.dll
2011-04-30 11:47:23 ----A---- C:\Windows\system32\audiosrv.dll
2011-04-30 11:47:21 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2011-04-30 11:47:21 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2011-04-30 11:47:21 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2011-04-30 11:47:21 ----A---- C:\Windows\system32\winhttp.dll
2011-04-30 11:47:21 ----A---- C:\Windows\system32\setupapi.dll
2011-04-30 11:47:21 ----A---- C:\Windows\system32\rpcss.dll
2011-04-30 11:47:21 ----A---- C:\Windows\system32\QAGENTRT.DLL
2011-04-30 11:47:21 ----A---- C:\Windows\system32\propsys.dll
2011-04-30 11:47:21 ----A---- C:\Windows\system32\netlogon.dll
2011-04-30 11:47:21 ----A---- C:\Windows\system32\msv1_0.dll
2011-04-30 11:47:21 ----A---- C:\Windows\system32\imapi2fs.dll
2011-04-30 11:47:21 ----A---- C:\Windows\system32\d3d11.dll
2011-04-30 11:47:20 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2011-04-30 11:47:20 ----A---- C:\Windows\system32\wbengine.exe
2011-04-30 11:47:20 ----A---- C:\Windows\system32\authui.dll
2011-04-30 11:47:19 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2011-04-30 11:47:19 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2011-04-30 11:47:19 ----A---- C:\Windows\system32\WSDApi.dll
2011-04-30 11:47:19 ----A---- C:\Windows\system32\werconcpl.dll
2011-04-30 11:47:19 ----A---- C:\Windows\system32\user32.dll
2011-04-30 11:47:19 ----A---- C:\Windows\system32\taskeng.exe
2011-04-30 11:47:19 ----A---- C:\Windows\system32\oleaut32.dll
2011-04-30 11:47:19 ----A---- C:\Windows\system32\odbc32.dll
2011-04-30 11:47:19 ----A---- C:\Windows\system32\msfeeds.dll
2011-04-30 11:47:19 ----A---- C:\Windows\system32\drivers\netio.sys
2011-04-30 11:47:18 ----A---- C:\Windows\system32\drivers\tdx.sys
2011-04-30 11:47:18 ----A---- C:\Windows\system32\dhcpcore.dll
2011-04-30 11:47:18 ----A---- C:\Windows\system32\certmgr.dll
2011-04-30 11:47:17 ----A---- C:\Windows\SYSWOW64\wer.dll
2011-04-30 11:47:17 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2011-04-30 11:47:17 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2011-04-30 11:47:17 ----A---- C:\Windows\SYSWOW64\certcli.dll
2011-04-30 11:47:17 ----A---- C:\Windows\system32\webio.dll
2011-04-30 11:47:17 ----A---- C:\Windows\system32\tsmf.dll
2011-04-30 11:47:17 ----A---- C:\Windows\system32\scavengeui.dll
2011-04-30 11:47:17 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2011-04-30 11:47:17 ----A---- C:\Windows\system32\ncsi.dll
2011-04-30 11:47:17 ----A---- C:\Windows\system32\msdrm.dll
2011-04-30 11:47:17 ----A---- C:\Windows\system32\localspl.dll
2011-04-30 11:47:17 ----A---- C:\Windows\system32\drivers\netbt.sys
2011-04-30 11:47:16 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2011-04-30 11:47:16 ----A---- C:\Windows\system32\shlwapi.dll
2011-04-30 11:47:16 ----A---- C:\Windows\system32\msdtctm.dll
2011-04-30 11:47:16 ----A---- C:\Windows\system32\framedynos.dll
2011-04-30 11:47:15 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2011-04-30 11:47:15 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2011-04-30 11:47:15 ----A---- C:\Windows\SYSWOW64\mstime.dll
2011-04-30 11:47:15 ----A---- C:\Windows\system32\ws2_32.dll
2011-04-30 11:47:15 ----A---- C:\Windows\system32\winlogon.exe
2011-04-30 11:47:15 ----A---- C:\Windows\system32\usp10.dll
2011-04-30 11:47:15 ----A---- C:\Windows\system32\umpnpmgr.dll
2011-04-30 11:47:15 ----A---- C:\Windows\system32\quartz.dll
2011-04-30 11:47:15 ----A---- C:\Windows\system32\nlasvc.dll
2011-04-30 11:47:15 ----A---- C:\Windows\system32\netshell.dll
2011-04-30 11:47:15 ----A---- C:\Windows\system32\netcfgx.dll
2011-04-30 11:47:15 ----A---- C:\Windows\system32\lsm.exe
2011-04-30 11:47:15 ----A---- C:\Windows\system32\dxgi.dll
2011-04-30 11:47:15 ----A---- C:\Windows\system32\drivers\cng.sys
2011-04-30 11:47:15 ----A---- C:\Windows\system32\comdlg32.dll
2011-04-30 11:47:14 ----A---- C:\Windows\SYSWOW64\quartz.dll
2011-04-30 11:47:14 ----A---- C:\Windows\system32\wmpps.dll
2011-04-30 11:47:14 ----A---- C:\Windows\system32\d3d10_1core.dll
2011-04-30 11:47:14 ----A---- C:\Windows\system32\apphelp.dll
2011-04-30 11:47:13 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2011-04-30 11:47:13 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll