Ahoj,
právě jsem dělal test na memtest86... po hodině žádná chyba (kdyžtak nechám přes noc)
Logfile of random's system information tool 1.09 (written by random/random)
Run by coolajda at 2011-11-29 18:59:09
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 38 GB (55%) free of 69 GB
Total RAM: 4095 MB (62% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:59:16, on 29.11.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Windows Live\Family Safety\fsui.exe
C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
C:\Users\coolajda\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\coolajda.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [KiesHelper] C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe /s
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\coolajda\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKCU\..\Run: [FileHippo.com] "C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2916034874-4277430221-806491849-1004\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2916034874-4277430221-806491849-1004\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Startup: Dropbox.lnk = coolajda\AppData\Roaming\Dropbox\bin\Dropbox.exe
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload2.macromedia.com/get/s ... wflash.cab
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 8461 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 1100
"C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"taskhost.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\Dwm.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\Explorer.EXE
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files (x86)\Windows Live\Family Safety\fsui.exe" -autorun
"C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe"
"C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe" /background
"C:\Users\coolajda\AppData\Roaming\Dropbox\bin\Dropbox.exe"
"C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=4008.00699DC0.1282958876 --ignored=" --type=renderer " /prefetch:3
"C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=4008.00699C60.1114450882 --ignored=" --type=renderer " /prefetch:3
"C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=4008.00699B00.562784250 --ignored=" --type=renderer " /prefetch:3
"C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=4008.075D0580.2059375216 --ignored=" --type=renderer " /prefetch:3
"C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=4008.075D0420.930228950 --ignored=" --type=renderer " /prefetch:3
"C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=4008.075D02C0.1927261955 --ignored=" --type=renderer " /prefetch:3
"C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=4008.075D0160.555495280 --ignored=" --type=renderer " /prefetch:3
"C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=4008.075D0000.92771238 --ignored=" --type=renderer " /prefetch:3
"C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=4008.075D0DC0.1767354367 --ignored=" --type=renderer " /prefetch:3
"C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=4008.075D0C60.1050974113 --ignored=" --type=renderer " /prefetch:3
"C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=4008.075D0B00.1244162553 --ignored=" --type=renderer " /prefetch:3
"C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=4008.075D09A0.535234566 --ignored=" --type=renderer " /prefetch:3
"C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=4008.075D0840.1870887855 --ignored=" --type=renderer " /prefetch:3
"C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=4008.075D06E0.1166826745 --ignored=" --type=renderer " /prefetch:3
"C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=4008.075D9840.212474492 --ignored=" --type=renderer " /prefetch:3
"C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=4008.075D96E0.1565278758 --ignored=" --type=renderer " /prefetch:3
"C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=4008.075D9580.1321248583 --ignored=" --type=renderer " /prefetch:3
"C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=4008.075D9420.881157611 --ignored=" --type=renderer " /prefetch:3
"C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path=default_plugin --lang=cs --channel=4008.071F3000.174920676 /prefetch:4
C:\Windows\system32\rundll32.exe "C:\Users\coolajda\AppData\Local\Google\Chrome\APPLIC~1\150874~1.121\gcswf32.dll",BrokerMain browser=chrome
"C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\coolajda\AppData\Local\Google\Chrome\Application\15.0.874.121\gcswf32.dll" --lang=cs --channel=4008.0B8EF700.302811409 --flash-broker=4700 /prefetch:4
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=4008.07713B00.1555929239 /prefetch:3
"C:\Users\coolajda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=4008.0A43D9A0.1634643511 /prefetch:3
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\coolajda\Desktop\RSITx64.exe"
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2916034874-4277430221-806491849-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2916034874-4277430221-806491849-1001UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2011-11-23 75656]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-11-23 42272]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2011-06-15 1436736]
"fssui"=C:\Program Files (x86)\Windows Live\Family Safety\fsui.exe [2011-05-13 884584]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\coolajda\AppData\Local\Google\Update\GoogleUpdate.exe [2011-11-23 136176]
"KiesPDLR"=C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2011-11-02 21392]
"FileHippo.com"=C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [2010-08-09 248832]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"KiesHelper"=C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe [2011-11-02 928656]
"KiesTrayAgent"=C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2011-11-02 3508624]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
C:\Users\coolajda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\coolajda\AppData\Roaming\Dropbox\bin\Dropbox.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"LogonHoursAction"=2
"DontDisplayLogonHoursWarnings"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2011-11-29 18:59:09 ----D---- C:\rsit
2011-11-29 18:59:09 ----D---- C:\Program Files\trend micro
2011-11-29 11:36:17 ----D---- C:\Users\coolajda\AppData\Roaming\Canneverbe Limited
2011-11-29 11:36:17 ----D---- C:\ProgramData\Canneverbe Limited
2011-11-29 11:36:11 ----D---- C:\Program Files (x86)\CDBurnerXP
2011-11-29 11:03:57 ----D---- C:\Letopisy.Narnie.2010.DVD5.CZ
2011-11-29 10:50:14 ----D---- C:\Program Files (x86)\CrystalDiskInfo
2011-11-28 17:33:20 ----D---- C:\Users\coolajda\AppData\Roaming\NVIDIA
2011-11-28 17:33:10 ----D---- C:\Program Files (x86)\DVDFab 8 Qt
2011-11-28 09:01:06 ----D---- C:\Users\coolajda\AppData\Roaming\GHISLER
2011-11-25 16:23:46 ----D---- C:\Windows\SYSWOW64\Macromed
2011-11-25 16:23:39 ----D---- C:\Windows\system32\Macromed
2011-11-25 16:16:29 ----D---- C:\Program Files\CCleaner
2011-11-25 16:09:37 ----D---- C:\Users\coolajda\AppData\Roaming\Ashampoo
2011-11-25 16:09:24 ----D---- C:\ProgramData\ashampoo
2011-11-25 16:09:03 ----D---- C:\Program Files (x86)\Ashampoo
2011-11-25 16:03:35 ----D---- C:\Program Files (x86)\Your Uninstaller! 7
2011-11-25 15:57:00 ----D---- C:\Windows\Profiles
2011-11-25 15:54:57 ----D---- C:\Users\coolajda\AppData\Roaming\URSoft
2011-11-25 15:54:56 ----AD---- C:\ProgramData\TEMP
2011-11-25 15:54:42 ----D---- C:\Users\coolajda\AppData\Roaming\Babylon
2011-11-25 15:54:42 ----D---- C:\ProgramData\Babylon
2011-11-25 15:40:19 ----D---- C:\Users\coolajda\AppData\Roaming\InfraRecorder
2011-11-25 15:27:35 ----D---- C:\Users\coolajda\AppData\Roaming\Zoner
2011-11-25 15:27:35 ----D---- C:\ProgramData\Zoner
2011-11-25 15:26:51 ----D---- C:\Program Files\Zoner
2011-11-25 15:07:35 ----D---- C:\Program Files (x86)\Translate Client
2011-11-25 14:56:03 ----HD---- C:\ProgramData\CanonBJ
2011-11-25 14:26:51 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2011-11-25 14:26:51 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2011-11-25 14:26:51 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2011-11-25 14:26:51 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2011-11-25 14:26:51 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2011-11-25 14:26:51 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2011-11-25 14:26:51 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2011-11-25 14:26:51 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2011-11-25 14:26:51 ----A---- C:\Windows\system32\OpenCL.dll
2011-11-25 14:26:51 ----A---- C:\Windows\system32\nvoglv64.dll
2011-11-25 14:26:51 ----A---- C:\Windows\system32\nvgenco64.dll
2011-11-25 14:26:51 ----A---- C:\Windows\system32\nvdispco64.dll
2011-11-25 14:26:51 ----A---- C:\Windows\system32\nvd3dumx.dll
2011-11-25 14:26:51 ----A---- C:\Windows\system32\nvcuvid.dll
2011-11-25 14:26:51 ----A---- C:\Windows\system32\nvcuvenc.dll
2011-11-25 14:26:51 ----A---- C:\Windows\system32\nvcuda.dll
2011-11-25 14:26:51 ----A---- C:\Windows\system32\nvcompiler.dll
2011-11-25 14:26:51 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2011-11-25 14:24:54 ----D---- C:\NVIDIA
2011-11-25 14:19:54 ----A---- C:\Windows\system32\drivers\ipfnd51.sys
2011-11-24 16:30:41 ----D---- C:\Program Files (x86)\Intel
2011-11-24 16:30:26 ----D---- C:\Intel
2011-11-24 15:36:36 ----D---- C:\Windows\pss
2011-11-23 22:36:37 ----D---- C:\Users\coolajda\AppData\Roaming\Media Player Classic
2011-11-23 20:30:17 ----D---- C:\Users\coolajda\AppData\Roaming\Dropbox
2011-11-23 20:23:59 ----A---- C:\Windows\system32\javaws.exe
2011-11-23 20:23:59 ----A---- C:\Windows\system32\javaw.exe
2011-11-23 20:23:59 ----A---- C:\Windows\system32\java.exe
2011-11-23 20:23:59 ----A---- C:\Windows\system32\deployJava1.dll
2011-11-23 20:23:48 ----D---- C:\Program Files\Java
2011-11-23 20:10:10 ----D---- C:\Program Files (x86)\FileHippo.com
2011-11-23 19:44:50 ----D---- C:\Program Files\7-Zip
2011-11-23 19:38:11 ----D---- C:\Users\coolajda\AppData\Roaming\WinRAR
2011-11-23 19:07:16 ----D---- C:\Windows\system32\SPReview
2011-11-23 19:06:58 ----D---- C:\Windows\system32\EventProviders
2011-11-23 19:00:11 ----D---- C:\Users\coolajda\AppData\Roaming\SPlayer
2011-11-23 18:59:49 ----D---- C:\Program Files (x86)\SPlayer
2011-11-23 18:56:21 ----A---- C:\Windows\system32\netfxperf.dll
2011-11-23 18:56:21 ----A---- C:\Windows\system32\dfshim.dll
2011-11-23 18:56:15 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2011-11-23 18:56:12 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2011-11-23 18:56:12 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2011-11-23 18:56:11 ----A---- C:\Windows\system32\mstscax.dll
2011-11-23 18:56:11 ----A---- C:\Windows\system32\d3d10warp.dll
2011-11-23 18:56:09 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2011-11-23 18:56:07 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2011-11-23 18:56:07 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2011-11-23 18:56:07 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2011-11-23 18:56:07 ----A---- C:\Windows\system32\tssrvlic.dll
2011-11-23 18:56:07 ----A---- C:\Windows\system32\sysmain.dll
2011-11-23 18:56:07 ----A---- C:\Windows\system32\RDVGHelper.exe
2011-11-23 18:56:07 ----A---- C:\Windows\system32\rdpcorets.dll
2011-11-23 18:56:05 ----A---- C:\Windows\SYSWOW64\pmcsnap.dll
2011-11-23 18:56:05 ----A---- C:\Windows\system32\MSVidCtl.dll
2011-11-23 18:56:04 ----A---- C:\Windows\system32\wmp.dll
2011-11-23 18:56:03 ----A---- C:\Windows\system32\secproc_isv.dll
2011-11-23 18:56:03 ----A---- C:\Windows\system32\ntdll.dll
2011-11-23 18:56:03 ----A---- C:\Windows\system32\mscoree.dll
2011-11-23 18:56:03 ----A---- C:\Windows\system32\mmcndmgr.dll
2011-11-23 18:56:03 ----A---- C:\Windows\system32\mf.dll
2011-11-23 18:56:02 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2011-11-23 18:56:02 ----A---- C:\Windows\system32\xpsservices.dll
2011-11-23 18:56:02 ----A---- C:\Windows\system32\secproc.dll
2011-11-23 18:56:02 ----A---- C:\Windows\system32\RMActivate_isv.exe
2011-11-23 18:56:02 ----A---- C:\Windows\system32\RMActivate.exe
2011-11-23 18:56:01 ----A---- C:\Windows\SYSWOW64\secproc.dll
2011-11-23 18:56:01 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2011-11-23 18:56:01 ----A---- C:\Windows\system32\rpcrt4.dll
2011-11-23 18:56:00 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2011-11-23 18:56:00 ----A---- C:\Windows\SYSWOW64\PushPrinterConnections.exe
2011-11-23 18:56:00 ----A---- C:\Windows\SYSWOW64\ppcsnap.dll
2011-11-23 18:56:00 ----A---- C:\Windows\system32\schedsvc.dll
2011-11-23 18:56:00 ----A---- C:\Windows\system32\ole32.dll
2011-11-23 18:55:59 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2011-11-23 18:55:59 ----A---- C:\Windows\system32\spwizui.dll
2011-11-23 18:55:58 ----A---- C:\Windows\SYSWOW64\mf.dll
2011-11-23 18:55:58 ----A---- C:\Windows\system32\wevtsvc.dll
2011-11-23 18:55:58 ----A---- C:\Windows\system32\taskschd.dll
2011-11-23 18:55:58 ----A---- C:\Windows\system32\RacEngn.dll
2011-11-23 18:55:58 ----A---- C:\Windows\system32\diagperf.dll
2011-11-23 18:55:57 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2011-11-23 18:55:57 ----A---- C:\Windows\system32\vssapi.dll
2011-11-23 18:55:57 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2011-11-23 18:55:57 ----A---- C:\Windows\system32\msxml3.dll
2011-11-23 18:55:57 ----A---- C:\Windows\system32\ExplorerFrame.dll
2011-11-23 18:55:57 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2011-11-23 18:55:56 ----A---- C:\Windows\SYSWOW64\wmp.dll
2011-11-23 18:55:56 ----A---- C:\Windows\system32\UIRibbon.dll
2011-11-23 18:55:56 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2011-11-23 18:55:55 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2011-11-23 18:55:55 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2011-11-23 18:55:55 ----A---- C:\Windows\system32\WsmSvc.dll
2011-11-23 18:55:55 ----A---- C:\Windows\system32\WMVCORE.DLL
2011-11-23 18:55:54 ----A---- C:\Windows\system32\spreview.exe
2011-11-23 18:55:54 ----A---- C:\Windows\system32\spinstall.exe
2011-11-23 18:55:54 ----A---- C:\Windows\system32\rdpudd.dll
2011-11-23 18:55:54 ----A---- C:\Windows\system32\rdpdd.dll
2011-11-23 18:55:54 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2011-11-23 18:55:54 ----A---- C:\Windows\system32\PresentationHost.exe
2011-11-23 18:55:54 ----A---- C:\Windows\system32\MPSSVC.dll
2011-11-23 18:55:54 ----A---- C:\Windows\system32\CertEnroll.dll
2011-11-23 18:55:53 ----A---- C:\Windows\system32\WMVDECOD.DLL
2011-11-23 18:55:53 ----A---- C:\Windows\system32\WinSAT.exe
2011-11-23 18:55:53 ----A---- C:\Windows\system32\d3d9.dll
2011-11-23 18:55:52 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2011-11-23 18:55:52 ----A---- C:\Windows\system32\SearchFolder.dll
2011-11-23 18:55:52 ----A---- C:\Windows\system32\msxml6.dll
2011-11-23 18:55:52 ----A---- C:\Windows\system32\IKEEXT.DLL
2011-11-23 18:55:51 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2011-11-23 18:55:51 ----A---- C:\Windows\system32\VSSVC.exe
2011-11-23 18:55:51 ----A---- C:\Windows\system32\gpsvc.dll
2011-11-23 18:55:51 ----A---- C:\Windows\system32\dwmcore.dll
2011-11-23 18:55:51 ----A---- C:\Windows\system32\drivers\http.sys
2011-11-23 18:55:51 ----A---- C:\Windows\system32\dbgeng.dll
2011-11-23 18:55:51 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2011-11-23 18:55:50 ----A---- C:\Windows\SYSWOW64\rdvgumd32.dll
2011-11-23 18:55:50 ----A---- C:\Windows\system32\drivers\ndis.sys
2011-11-23 18:55:50 ----A---- C:\Windows\system32\crypt32.dll
2011-11-23 18:55:49 ----A---- C:\Windows\SYSWOW64\ole32.dll
2011-11-23 18:55:49 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2011-11-23 18:55:49 ----A---- C:\Windows\system32\actxprxy.dll
2011-11-23 18:55:48 ----A---- C:\Windows\system32\TSWorkspace.dll
2011-11-23 18:55:48 ----A---- C:\Windows\system32\termsrv.dll
2011-11-23 18:55:48 ----A---- C:\Windows\system32\schannel.dll
2011-11-23 18:55:48 ----A---- C:\Windows\system32\qmgr.dll
2011-11-23 18:55:48 ----A---- C:\Windows\system32\lsasrv.dll
2011-11-23 18:55:48 ----A---- C:\Windows\system32\gpprefcl.dll
2011-11-23 18:55:48 ----A---- C:\Windows\system32\audiosrv.dll
2011-11-23 18:55:47 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2011-11-23 18:55:47 ----A---- C:\Windows\system32\netlogon.dll
2011-11-23 18:55:47 ----A---- C:\Windows\system32\mstsc.exe
2011-11-23 18:55:47 ----A---- C:\Windows\system32\imapi2fs.dll
2011-11-23 18:55:47 ----A---- C:\Windows\system32\d3d11.dll
2011-11-23 18:55:46 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2011-11-23 18:55:46 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2011-11-23 18:55:46 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2011-11-23 18:55:46 ----A---- C:\Windows\system32\winhttp.dll
2011-11-23 18:55:46 ----A---- C:\Windows\system32\wbengine.exe
2011-11-23 18:55:46 ----A---- C:\Windows\system32\setupapi.dll
2011-11-23 18:55:46 ----A---- C:\Windows\system32\rpcss.dll
2011-11-23 18:55:46 ----A---- C:\Windows\system32\QAGENTRT.DLL
2011-11-23 18:55:46 ----A---- C:\Windows\system32\PushPrinterConnections.exe
2011-11-23 18:55:46 ----A---- C:\Windows\system32\propsys.dll
2011-11-23 18:55:46 ----A---- C:\Windows\system32\msv1_0.dll
2011-11-23 18:55:45 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2011-11-23 18:55:45 ----A---- C:\Windows\system32\werconcpl.dll
2011-11-23 18:55:45 ----A---- C:\Windows\system32\user32.dll
2011-11-23 18:55:45 ----A---- C:\Windows\system32\taskeng.exe
2011-11-23 18:55:45 ----A---- C:\Windows\system32\odbc32.dll
2011-11-23 18:55:45 ----A---- C:\Windows\system32\authui.dll
2011-11-23 18:55:44 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2011-11-23 18:55:44 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2011-11-23 18:55:44 ----A---- C:\Windows\system32\WSDApi.dll
2011-11-23 18:55:44 ----A---- C:\Windows\system32\umrdp.dll
2011-11-23 18:55:44 ----A---- C:\Windows\system32\LSCSHostPolicy.dll
2011-11-23 18:55:44 ----A---- C:\Windows\system32\drivers\tdx.sys
2011-11-23 18:55:44 ----A---- C:\Windows\system32\drivers\netio.sys
2011-11-23 18:55:44 ----A---- C:\Windows\system32\dhcpcore.dll
2011-11-23 18:55:44 ----A---- C:\Windows\system32\certmgr.dll
2011-11-23 18:55:43 ----A---- C:\Windows\SYSWOW64\wer.dll
2011-11-23 18:55:43 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2011-11-23 18:55:43 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2011-11-23 18:55:43 ----A---- C:\Windows\SYSWOW64\certcli.dll
2011-11-23 18:55:43 ----A---- C:\Windows\system32\webio.dll
2011-11-23 18:55:43 ----A---- C:\Windows\system32\tsmf.dll
2011-11-23 18:55:43 ----A---- C:\Windows\system32\scavengeui.dll
2011-11-23 18:55:43 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2011-11-23 18:55:43 ----A---- C:\Windows\system32\ncsi.dll
2011-11-23 18:55:43 ----A---- C:\Windows\system32\msdrm.dll
2011-11-23 18:55:43 ----A---- C:\Windows\system32\localspl.dll
2011-11-23 18:55:43 ----A---- C:\Windows\system32\drivers\netbt.sys
2011-11-23 18:55:42 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2011-11-23 18:55:42 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2011-11-23 18:55:42 ----A---- C:\Windows\system32\wmicmiplugin.dll
2011-11-23 18:55:42 ----A---- C:\Windows\system32\shlwapi.dll
2011-11-23 18:55:42 ----A---- C:\Windows\system32\rdpshell.exe
2011-11-23 18:55:42 ----A---- C:\Windows\system32\netshell.dll
2011-11-23 18:55:42 ----A---- C:\Windows\system32\msdtctm.dll
2011-11-23 18:55:42 ----A---- C:\Windows\system32\framedynos.dll
2011-11-23 18:55:42 ----A---- C:\Windows\system32\drivers\cng.sys
2011-11-23 18:55:41 ----A---- C:\Windows\SYSWOW64\quartz.dll
2011-11-23 18:55:41 ----A---- C:\Windows\system32\ws2_32.dll
2011-11-23 18:55:41 ----A---- C:\Windows\system32\wmpps.dll
2011-11-23 18:55:41 ----A---- C:\Windows\system32\winlogon.exe
2011-11-23 18:55:41 ----A---- C:\Windows\system32\usp10.dll
2011-11-23 18:55:41 ----A---- C:\Windows\system32\quartz.dll
2011-11-23 18:55:41 ----A---- C:\Windows\system32\nlasvc.dll
2011-11-23 18:55:41 ----A---- C:\Windows\system32\netcfgx.dll
2011-11-23 18:55:41 ----A---- C:\Windows\system32\lsm.exe
2011-11-23 18:55:41 ----A---- C:\Windows\system32\dxgi.dll
2011-11-23 18:55:41 ----A---- C:\Windows\system32\drivers\csc.sys
2011-11-23 18:55:41 ----A---- C:\Windows\system32\comdlg32.dll
2011-11-23 18:55:41 ----A---- C:\Windows\system32\appmgr.dll
2011-11-23 18:55:41 ----A---- C:\Windows\system32\apphelp.dll
2011-11-23 18:55:40 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2011-11-23 18:55:40 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2011-11-23 18:55:40 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2011-11-23 18:55:40 ----A---- C:\Windows\system32\wpdshext.dll
2011-11-23 18:55:40 ----A---- C:\Windows\system32\Query.dll
2011-11-23 18:55:40 ----A---- C:\Windows\system32\mswsock.dll
2011-11-23 18:55:40 ----A---- C:\Windows\system32\drvstore.dll
2011-11-23 18:55:40 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2011-11-23 18:55:40 ----A---- C:\Windows\system32\azroles.dll
2011-11-23 18:55:39 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2011-11-23 18:55:39 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2011-11-23 18:55:39 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2011-11-23 18:55:39 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2011-11-23 18:55:39 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2011-11-23 18:55:39 ----A---- C:\Windows\system32\win32spl.dll
2011-11-23 18:55:39 ----A---- C:\Windows\system32\Vault.dll
2011-11-23 18:55:39 ----A---- C:\Windows\system32\samsrv.dll
2011-11-23 18:55:39 ----A---- C:\Windows\system32\QAGENT.DLL
2011-11-23 18:55:39 ----A---- C:\Windows\system32\lpksetup.exe
2011-11-23 18:55:39 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2011-11-23 18:55:39 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2011-11-23 18:55:39 ----A---- C:\Windows\system32\cmd.exe
2011-11-23 18:55:39 ----A---- C:\Windows\system32\BFE.DLL
2011-11-23 18:55:38 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2011-11-23 18:55:38 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2011-11-23 18:55:38 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2011-11-23 18:55:38 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2011-11-23 18:55:38 ----A---- C:\Windows\system32\rdpclip.exe
2011-11-23 18:55:38 ----A---- C:\Windows\system32\cscsvc.dll
2011-11-23 18:55:37 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2011-11-23 18:55:37 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2011-11-23 18:55:37 ----A---- C:\Windows\SYSWOW64\webio.dll
2011-11-23 18:55:37 ----A---- C:\Windows\SYSWOW64\Query.dll
2011-11-23 18:55:37 ----A---- C:\Windows\SYSWOW64\gpprefcl.dll
2011-11-23 18:55:37 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2011-11-23 18:55:37 ----A---- C:\Windows\system32\Wldap32.dll
2011-11-23 18:55:37 ----A---- C:\Windows\system32\WindowsCodecs.dll
2011-11-23 18:55:37 ----A---- C:\Windows\system32\WebClnt.dll
2011-11-23 18:55:37 ----A---- C:\Windows\system32\taskcomp.dll
2011-11-23 18:55:37 ----A---- C:\Windows\system32\sxs.dll
2011-11-23 18:55:37 ----A---- C:\Windows\system32\mfds.dll
2011-11-23 18:55:37 ----A---- C:\Windows\system32\mcbuilder.exe
2011-11-23 18:55:37 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2011-11-23 18:55:37 ----A---- C:\Windows\system32\cscobj.dll
2011-11-23 18:55:36 ----A---- C:\Windows\SYSWOW64\upnp.dll
2011-11-23 18:55:36 ----A---- C:\Windows\SYSWOW64\schannel.dll
2011-11-23 18:55:36 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2011-11-23 18:55:36 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2011-11-23 18:55:36 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2011-11-23 18:55:36 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2011-11-23 18:55:36 ----A---- C:\Windows\system32\wuaueng.dll
2011-11-23 18:55:36 ----A---- C:\Windows\system32\webservices.dll
2011-11-23 18:55:36 ----A---- C:\Windows\system32\SessEnv.dll
2011-11-23 18:55:36 ----A---- C:\Windows\system32\rdpendp.dll
2011-11-23 18:55:36 ----A---- C:\Windows\system32\pnidui.dll
2011-11-23 18:55:36 ----A---- C:\Windows\system32\ipsmsnap.dll
2011-11-23 18:55:36 ----A---- C:\Windows\system32\hgprint.dll
2011-11-23 18:55:35 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2011-11-23 18:55:35 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2011-11-23 18:55:35 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2011-11-23 18:55:35 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2011-11-23 18:55:35 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2011-11-23 18:55:35 ----A---- C:\Windows\SYSWOW64\authui.dll
2011-11-23 18:55:35 ----A---- C:\Windows\system32\winsta.dll
2011-11-23 18:55:35 ----A---- C:\Windows\system32\sqlsrv32.dll
2011-11-23 18:55:35 ----A---- C:\Windows\system32\spoolsv.exe
2011-11-23 18:55:35 ----A---- C:\Windows\system32\fveapi.dll
2011-11-23 18:55:35 ----A---- C:\Windows\system32\dot3api.dll
2011-11-23 18:55:34 ----A---- C:\Windows\SYSWOW64\usp10.dll
2011-11-23 18:55:34 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe
2011-11-23 18:55:34 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2011-11-23 18:55:34 ----A---- C:\Windows\system32\WMNetMgr.dll
2011-11-23 18:55:34 ----A---- C:\Windows\system32\wlanpref.dll
2011-11-23 18:55:34 ----A---- C:\Windows\system32\schtasks.exe
2011-11-23 18:55:34 ----A---- C:\Windows\system32\prncache.dll
2011-11-23 18:55:34 ----A---- C:\Windows\system32\mcmde.dll
2011-11-23 18:55:34 ----A---- C:\Windows\system32\gdi32.dll
2011-11-23 18:55:34 ----A---- C:\Windows\system32\drivers\volsnap.sys
2011-11-23 18:55:34 ----A---- C:\Windows\system32\drivers\msrpc.sys
2011-11-23 18:55:33 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2011-11-23 18:55:33 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2011-11-23 18:55:33 ----A---- C:\Windows\SYSWOW64\userenv.dll
2011-11-23 18:55:33 ----A---- C:\Windows\SYSWOW64\drvstore.dll