VIRY.CZ

Dobrý den mám v PC vir (možná víc) ani naformátovaní hdd a znovu instal. windows nepomohl.
ESET mi ve stavu nouze vyplivne tohle:

ECLS skenovací modul z příkazového řádku, verze 5.2.7.0, (C) 1992-2008 ESET, spo
l. s r.o.
Modul loader, verze 1040 (20120313), build 1048
Modul perseus, verze 1363 (20120702), build 1484
Modul scanner, verze 7316 (20120720), build 11722
Modul archiver, verze 1147 (20120620), build 1111
Modul advheur, verze 1121 (20111208), build 1081
Modul cleaner, verze 1057 (20120626), build 1065

Příkazový řádek: /auto

Začátek skenování 07/20/12 21:48:55
název="C:\pagefile.sys", virus="", akce="", info="chyba při otevírání"
název="C:\Boot\BCD", virus="", akce="", info="chyba při otevírání"
název="C:\Boot\BCD.LOG", virus="", akce="", info="chyba při otevírání"
název="C:\Users\Fanda\NTUSER.DAT", virus="", akce="", info="chyba při otevírání"

název="C:\Users\Fanda\ntuser.dat.LOG1", virus="", akce="", info="chyba při oteví
rání"
název="C:\Users\Fanda\ntuser.dat.LOG2", virus="", akce="", info="chyba při oteví
rání"
název="C:\Users\Fanda\AppData\Local\Microsoft\Windows\UsrClass.dat", virus="", a
kce="", info="chyba při otevírání"
název="C:\Users\Fanda\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1", virus=
"", akce="", info="chyba při otevírání"
název="C:\Users\Fanda\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2", virus=
"", akce="", info="chyba při otevírání"
název="C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT", virus="", akce="", i
nfo="chyba při otevírání"
název="C:\Windows\ServiceProfiles\LocalService\ntuser.dat.LOG1", virus="", akce=
"", info="chyba při otevírání"
název="C:\Windows\ServiceProfiles\LocalService\ntuser.dat.LOG2", virus="", akce=
"", info="chyba při otevírání"
název="C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat", vi
rus="", akce="", info="chyba při otevírání"
název="C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat", vi
rus="", akce="", info="chyba při otevírání"
název="C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT", virus="", akce="",
info="chyba při otevírání"
název="C:\Windows\ServiceProfiles\NetworkService\ntuser.dat.LOG1", virus="", akc
e="", info="chyba při otevírání"
název="C:\Windows\ServiceProfiles\NetworkService\ntuser.dat.LOG2", virus="", akc
e="", info="chyba při otevírání"

Předem děkuji.

Zdravím!
Dejte log RSIT: http://forum.viry.cz/viewtopic.php?f=13&t=105895 .

Omlouvám se na to sem zapomněl tady je:


Logfile of random's system information tool 1.09 (written by random/random)
Run by Fanda at 2012-07-20 22:49:09
Microsoft® Windows Vista™ Home Premium Service Pack 1
System drive C: has 445 GB (93%) free of 477 GB
Total RAM: 4093 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:49:14, on 20.7.2012
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18639)
Boot mode: Normal

Running processes:
C:\Users\Fanda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Fanda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Fanda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\Fanda\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Fanda.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 4251 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\atiesrxx.exe
winlogon.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
atieclxx
"C:\Windows\system32\Dwm.exe"
taskeng.exe {5A00F59D-3816-4D62-A0FE-D6DB8CA6C969}
C:\Windows\Explorer.EXE
"C:\Program Files\Windows Defender\MSASCui.exe" -hide
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
taskeng.exe {E2FB6D4F-1B80-47B8-8AA5-8E0113C616AD}
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-a70eaa96-3cb3-42f2-94d6-1ba97b6739dc -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-7050d9cd-7424-41b7-93ab-205e3af1881b -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-15f43c6f-f5a3-4ef1-8075-ffcf8f11c5b0 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:7ab81d38-a513-4227-9f9e-74684d69892c
"C:\Users\Fanda\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Fanda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/CONTROL/OmniboxPrerenderHitWeightingTrial/OmniboxPrerenderWeight8.0/OmniboxSearchSuggest/9/Prerender/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd16/SpdyImpact/npn_with_spdy/UMA-Uniformity-Trial-1-Percent/group_63/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/WebStoreLinkExperiment/FooterLink/ --renderer-print-preview --channel="3068.1.1349253718\1757827682" /prefetch:3
"C:\Users\Fanda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3068.6.1402812433\1158274910" --reduce-gpu-sandbox --disable-image-transport-surface --ignored=" --type=renderer " /prefetch:12
C:\Windows\system32\rundll32.exe "C:\Users\Fanda\AppData\Local\Google\Chrome\APPLIC~1\200113~1.57\gcswf32.dll",BrokerMain browser=chrome
"C:\Users\Fanda\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\Fanda\AppData\Local\Google\Chrome\Application\20.0.1132.57\gcswf32.dll" --lang=cs --channel="3068.9.1953427479\1089337185" --flash-broker=4084 /prefetch:4
"C:\Users\Fanda\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2676823301-572779166-1924829417-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2676823301-572779166-1924829417-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1584184]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2012-03-07 4081008]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-06-11 12503184]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-05-24 641704]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======List of files/folders created in the last 1 month======

2012-07-20 22:49:10 ----D---- C:\Program Files\trend micro
2012-07-20 22:49:09 ----D---- C:\rsit
2012-07-20 21:47:33 ----D---- C:\Windows\Minidump
2012-07-20 21:22:16 ----A---- C:\Windows\ntbtlog.txt
2012-07-20 21:11:41 ----D---- C:\Users\Fanda\AppData\Roaming\ATI
2012-07-20 21:11:41 ----D---- C:\ProgramData\ATI
2012-07-20 20:57:36 ----D---- C:\Windows\SYSWOW64\RTCOM
2012-07-20 20:57:36 ----D---- C:\Program Files\Realtek
2012-07-20 20:56:44 ----A---- C:\Windows\system32\WavesGUILib.dll
2012-07-20 20:56:43 ----A---- C:\Windows\system32\SRSWOW64.dll
2012-07-20 20:56:43 ----A---- C:\Windows\system32\SRSTSX64.dll
2012-07-20 20:56:42 ----A---- C:\Windows\system32\SRSTSH64.dll
2012-07-20 20:56:42 ----A---- C:\Windows\system32\SRSHP64.dll
2012-07-20 20:56:38 ----A---- C:\Windows\system32\RtPgEx64.dll
2012-07-20 20:56:38 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2012-07-20 20:56:37 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2012-07-20 20:56:36 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2012-07-20 20:56:36 ----A---- C:\Windows\system32\RtkCfg64.dll
2012-07-20 20:56:35 ----A---- C:\Windows\system32\RtkAPO64.dll
2012-07-20 20:56:35 ----A---- C:\Windows\system32\RtkApi64.dll
2012-07-20 20:56:35 ----A---- C:\Windows\system32\RTEEP64A.dll
2012-07-20 20:56:35 ----A---- C:\Windows\system32\RTEEL64A.dll
2012-07-20 20:56:35 ----A---- C:\Windows\system32\RTEEG64A.dll
2012-07-20 20:56:35 ----A---- C:\Windows\system32\RTEED64A.dll
2012-07-20 20:56:35 ----A---- C:\Windows\system32\RTCOM64.dll
2012-07-20 20:56:34 ----A---- C:\Windows\system32\RP3DHT64.dll
2012-07-20 20:56:34 ----A---- C:\Windows\system32\RP3DAA64.dll
2012-07-20 20:56:34 ----A---- C:\Windows\system32\RCoInstII64.dll
2012-07-20 20:56:34 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2012-07-20 20:56:31 ----A---- C:\Windows\SYSWOW64\MBAPO32.dll
2012-07-20 20:56:31 ----A---- C:\Windows\system32\MBWrp64.dll
2012-07-20 20:56:31 ----A---- C:\Windows\system32\MBppld64.dll
2012-07-20 20:56:31 ----A---- C:\Windows\system32\MBPPCn64.dll
2012-07-20 20:56:31 ----A---- C:\Windows\system32\MBAPO64.dll
2012-07-20 20:56:31 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2012-07-20 20:56:30 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2012-07-20 20:56:30 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2012-07-20 20:56:24 ----A---- C:\Windows\system32\FMAPO64.dll
2012-07-20 20:56:20 ----A---- C:\Windows\system32\AERTAR64.dll
2012-07-20 20:56:20 ----A---- C:\Windows\system32\AERTAC64.dll
2012-07-20 20:50:07 ----HD---- C:\Program Files (x86)\Temp
2012-07-20 20:41:19 ----D---- C:\Windows\SYSWOW64\WindowsPowerShell
2012-07-20 20:41:17 ----D---- C:\Windows\system32\WindowsPowerShell
2012-07-20 20:34:05 ----D---- C:\Program Files (x86)\AMD APP
2012-07-20 20:32:47 ----D---- C:\ProgramData\AMD
2012-07-20 20:32:44 ----A---- C:\Windows\system32\drivers\amdiox64.sys
2012-07-20 20:30:40 ----D---- C:\Program Files (x86)\ATI Technologies
2012-07-20 20:30:26 ----D---- C:\Program Files\ATI Technologies
2012-07-20 20:30:24 ----D---- C:\Program Files\ATI
2012-07-20 20:13:27 ----D---- C:\AMD
2012-07-20 19:41:29 ----A---- C:\Windows\system32\wsepno.dll
2012-07-20 19:41:28 ----A---- C:\Windows\system32\msshooks.dll
2012-07-20 19:41:27 ----A---- C:\Windows\SYSWOW64\msshooks.dll
2012-07-20 19:41:27 ----A---- C:\Windows\SYSWOW64\msscb.dll
2012-07-20 19:41:27 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2012-07-20 19:41:27 ----A---- C:\Windows\system32\xmlfilter.dll
2012-07-20 19:41:27 ----A---- C:\Windows\system32\rtffilt.dll
2012-07-20 19:41:27 ----A---- C:\Windows\system32\propdefs.dll
2012-07-20 19:41:27 ----A---- C:\Windows\system32\msscb.dll
2012-07-20 19:41:27 ----A---- C:\Windows\system32\mimefilt.dll
2012-07-20 19:41:25 ----A---- C:\Windows\SYSWOW64\thawbrkr.dll
2012-07-20 19:41:25 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2012-07-20 19:41:25 ----A---- C:\Windows\SYSWOW64\propsys.dll
2012-07-20 19:41:25 ----A---- C:\Windows\SYSWOW64\propdefs.dll
2012-07-20 19:41:25 ----A---- C:\Windows\SYSWOW64\offfilt.dll
2012-07-20 19:41:25 ----A---- C:\Windows\SYSWOW64\msstrc.dll
2012-07-20 19:41:25 ----A---- C:\Windows\SYSWOW64\mssprxy.dll
2012-07-20 19:41:25 ----A---- C:\Windows\SYSWOW64\mssitlb.dll
2012-07-20 19:41:25 ----A---- C:\Windows\SYSWOW64\msshsq.dll
2012-07-20 19:41:25 ----A---- C:\Windows\SYSWOW64\korwbrkr.dll
2012-07-20 19:41:25 ----A---- C:\Windows\SYSWOW64\chsbrkr.dll
2012-07-20 19:41:25 ----A---- C:\Windows\system32\thawbrkr.dll
2012-07-20 19:41:25 ----A---- C:\Windows\system32\srchadmin.dll
2012-07-20 19:41:25 ----A---- C:\Windows\system32\propsys.dll
2012-07-20 19:41:25 ----A---- C:\Windows\system32\offfilt.dll
2012-07-20 19:41:25 ----A---- C:\Windows\system32\nlhtml.dll
2012-07-20 19:41:25 ----A---- C:\Windows\system32\mssprxy.dll
2012-07-20 19:41:25 ----A---- C:\Windows\system32\mssitlb.dll
2012-07-20 19:41:25 ----A---- C:\Windows\system32\msshsq.dll
2012-07-20 19:41:25 ----A---- C:\Windows\system32\korwbrkr.dll
2012-07-20 19:41:25 ----A---- C:\Windows\system32\chsbrkr.dll
2012-07-20 19:41:24 ----A---- C:\Windows\SYSWOW64\xmlfilter.dll
2012-07-20 19:41:24 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2012-07-20 19:41:24 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2012-07-20 19:41:24 ----A---- C:\Windows\SYSWOW64\rtffilt.dll
2012-07-20 19:41:24 ----A---- C:\Windows\SYSWOW64\nlhtml.dll
2012-07-20 19:41:24 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2012-07-20 19:41:24 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2012-07-20 19:41:24 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2012-07-20 19:41:24 ----A---- C:\Windows\SYSWOW64\mssph.dll
2012-07-20 19:41:24 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2012-07-20 19:41:24 ----A---- C:\Windows\SYSWOW64\chtbrkr.dll
2012-07-20 19:41:24 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2012-07-20 19:41:24 ----A---- C:\Windows\system32\SearchFilterHost.exe
2012-07-20 19:41:24 ----A---- C:\Windows\system32\msstrc.dll
2012-07-20 19:41:24 ----A---- C:\Windows\system32\mssphtb.dll
2012-07-20 19:41:24 ----A---- C:\Windows\system32\msscntrs.dll
2012-07-20 19:41:24 ----A---- C:\Windows\system32\chtbrkr.dll
2012-07-20 19:41:23 ----A---- C:\Windows\SYSWOW64\tquery.dll
2012-07-20 19:41:23 ----A---- C:\Windows\system32\tquery.dll
2012-07-20 19:41:23 ----A---- C:\Windows\system32\SearchIndexer.exe
2012-07-20 19:41:23 ----A---- C:\Windows\system32\mssvp.dll
2012-07-20 19:41:23 ----A---- C:\Windows\system32\mssrch.dll
2012-07-20 19:41:23 ----A---- C:\Windows\system32\mssph.dll
2012-07-20 18:43:39 ----A---- C:\Windows\SYSWOW64\icardres.dll
2012-07-20 18:43:39 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2012-07-20 18:43:39 ----A---- C:\Windows\system32\icardres.dll
2012-07-20 18:43:38 ----A---- C:\Windows\SYSWOW64\PresentationNative_v0300.dll
2012-07-20 18:43:38 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2012-07-20 18:43:38 ----A---- C:\Windows\SYSWOW64\infocardapi.dll
2012-07-20 18:43:38 ----A---- C:\Windows\SYSWOW64\icardagt.exe
2012-07-20 18:43:38 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2012-07-20 18:43:38 ----A---- C:\Windows\system32\infocardapi.dll
2012-07-20 18:43:38 ----A---- C:\Windows\system32\icardagt.exe
2012-07-20 18:43:33 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2012-07-20 18:43:33 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2012-07-20 18:43:31 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2012-07-20 18:43:31 ----A---- C:\Windows\system32\PresentationHost.exe
2012-07-20 18:34:48 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2012-07-20 18:34:48 ----A---- C:\Windows\system32\netfxperf.dll
2012-07-20 18:34:42 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2012-07-20 18:34:42 ----A---- C:\Windows\system32\dfshim.dll
2012-07-20 18:34:37 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2012-07-20 18:34:36 ----A---- C:\Windows\system32\mscoree.dll
2012-07-20 18:34:32 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2012-07-20 18:34:32 ----A---- C:\Windows\system32\mscorier.dll
2012-07-20 18:34:30 ----A---- C:\Windows\system32\mscories.dll
2012-07-20 18:34:29 ----A---- C:\Windows\SYSWOW64\mscories.dll
2012-07-20 18:32:11 ----A---- C:\Windows\system32\browserchoice.exe
2012-07-20 18:28:23 ----A---- C:\Windows\system32\nshhttp.dll
2012-07-20 18:28:22 ----A---- C:\Windows\SYSWOW64\nshhttp.dll
2012-07-20 18:28:20 ----A---- C:\Windows\SYSWOW64\httpapi.dll
2012-07-20 18:28:20 ----A---- C:\Windows\system32\httpapi.dll
2012-07-20 18:28:20 ----A---- C:\Windows\system32\drivers\http.sys
2012-07-20 18:22:39 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2012-07-20 18:22:39 ----A---- C:\Windows\system32\psisdecd.dll
2012-07-20 18:20:30 ----A---- C:\Windows\SYSWOW64\winrsmgr.dll
2012-07-20 18:20:30 ----A---- C:\Windows\system32\wsmplpxy.dll
2012-07-20 18:20:30 ----A---- C:\Windows\system32\winrssrv.dll
2012-07-20 18:20:30 ----A---- C:\Windows\system32\winrsmgr.dll
2012-07-20 18:20:27 ----A---- C:\Windows\SYSWOW64\wsmplpxy.dll
2012-07-20 18:20:27 ----A---- C:\Windows\SYSWOW64\winrssrv.dll
2012-07-20 18:20:24 ----A---- C:\Windows\SYSWOW64\pwrshplugin.dll
2012-07-20 18:20:24 ----A---- C:\Windows\system32\pwrshplugin.dll
2012-07-20 18:20:23 ----A---- C:\Windows\system32\wsmprovhost.exe
2012-07-20 18:20:23 ----A---- C:\Windows\system32\winrshost.exe
2012-07-20 18:20:23 ----A---- C:\Windows\system32\winrs.exe
2012-07-20 18:20:21 ----A---- C:\Windows\SYSWOW64\WsmRes.dll
2012-07-20 18:20:21 ----A---- C:\Windows\system32\WsmRes.dll
2012-07-20 18:20:20 ----A---- C:\Windows\SYSWOW64\wsmprovhost.exe
2012-07-20 18:20:20 ----A---- C:\Windows\SYSWOW64\winrshost.exe
2012-07-20 18:20:20 ----A---- C:\Windows\SYSWOW64\winrs.exe
2012-07-20 18:20:20 ----A---- C:\Windows\SYSWOW64\wevtfwd.dll
2012-07-20 18:20:20 ----A---- C:\Windows\SYSWOW64\wecutil.exe
2012-07-20 18:20:20 ----A---- C:\Windows\SYSWOW64\wecapi.dll
2012-07-20 18:20:20 ----A---- C:\Windows\system32\wevtfwd.dll
2012-07-20 18:20:20 ----A---- C:\Windows\system32\wecutil.exe
2012-07-20 18:20:20 ----A---- C:\Windows\system32\wecsvc.dll
2012-07-20 18:20:20 ----A---- C:\Windows\system32\wecapi.dll
2012-07-20 18:20:17 ----A---- C:\Windows\SYSWOW64\winrm.vbs
2012-07-20 18:20:17 ----A---- C:\Windows\system32\winrm.vbs
2012-07-20 18:20:16 ----A---- C:\Windows\SYSWOW64\WsmWmiPl.dll
2012-07-20 18:20:16 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2012-07-20 18:20:16 ----A---- C:\Windows\SYSWOW64\WsmAuto.dll
2012-07-20 18:20:16 ----A---- C:\Windows\SYSWOW64\WSManMigrationPlugin.dll
2012-07-20 18:20:16 ----A---- C:\Windows\SYSWOW64\WSManHTTPConfig.exe
2012-07-20 18:20:16 ----A---- C:\Windows\SYSWOW64\winrscmd.dll
2012-07-20 18:20:16 ----A---- C:\Windows\system32\WsmWmiPl.dll
2012-07-20 18:20:16 ----A---- C:\Windows\system32\WsmSvc.dll
2012-07-20 18:20:16 ----A---- C:\Windows\system32\WsmAuto.dll
2012-07-20 18:20:16 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2012-07-20 18:20:16 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
2012-07-20 18:20:16 ----A---- C:\Windows\system32\winrscmd.dll
2012-07-20 18:18:34 ----N---- C:\Windows\system32\MpSigStub.exe
2012-07-20 18:04:57 ----A---- C:\Windows\system32\mshtml.dll
2012-07-20 18:04:55 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-07-20 18:04:54 ----A---- C:\Windows\system32\ieframe.dll
2012-07-20 18:04:52 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2012-07-20 18:04:52 ----A---- C:\Windows\system32\ieapfltr.dat
2012-07-20 18:04:50 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-07-20 18:04:50 ----A---- C:\Windows\system32\wininet.dll
2012-07-20 18:04:50 ----A---- C:\Windows\system32\urlmon.dll
2012-07-20 18:04:49 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-07-20 18:04:49 ----A---- C:\Windows\system32\mstime.dll
2012-07-20 18:04:48 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-07-20 18:04:47 ----A---- C:\Windows\SYSWOW64\mstime.dll
2012-07-20 18:04:47 ----A---- C:\Windows\system32\mshtmled.dll
2012-07-20 18:04:46 ----A---- C:\Windows\SYSWOW64\occache.dll
2012-07-20 18:04:46 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-07-20 18:04:46 ----A---- C:\Windows\system32\occache.dll
2012-07-20 18:04:46 ----A---- C:\Windows\system32\msfeeds.dll
2012-07-20 18:04:45 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-07-20 18:04:45 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-07-20 18:04:45 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2012-07-20 18:04:45 ----A---- C:\Windows\system32\iertutil.dll
2012-07-20 18:04:45 ----A---- C:\Windows\system32\iedkcs32.dll
2012-07-20 18:04:44 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2012-07-20 18:04:44 ----A---- C:\Windows\system32\iepeers.dll
2012-07-20 18:04:44 ----A---- C:\Windows\system32\ieapfltr.dll
2012-07-20 18:04:44 ----A---- C:\Windows\system32\ieaksie.dll
2012-07-20 18:04:43 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-07-20 18:04:43 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2012-07-20 18:04:43 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2012-07-20 18:04:43 ----A---- C:\Windows\system32\ieUnatt.exe
2012-07-20 18:04:42 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-07-20 18:04:42 ----A---- C:\Windows\SYSWOW64\ieencode.dll
2012-07-20 18:04:42 ----A---- C:\Windows\system32\jsproxy.dll
2012-07-20 18:04:42 ----A---- C:\Windows\system32\ieencode.dll
2012-07-20 18:04:16 ----A---- C:\Windows\SYSWOW64\NlsLexicons0007.dll
2012-07-20 18:04:15 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2012-07-20 18:04:15 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2012-07-20 18:04:14 ----A---- C:\Windows\SYSWOW64\NlsLexicons0009.dll
2012-07-20 18:03:36 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2012-07-20 18:03:36 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2012-07-20 18:02:31 ----A---- C:\Windows\system32\WMVCORE.DLL
2012-07-20 18:02:30 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2012-07-20 18:02:30 ----A---- C:\Windows\system32\mf.dll
2012-07-20 18:02:28 ----A---- C:\Windows\SYSWOW64\mf.dll
2012-07-20 18:02:25 ----A---- C:\Windows\system32\IPSECSVC.DLL
2012-07-20 18:02:24 ----A---- C:\Windows\SYSWOW64\polstore.dll
2012-07-20 18:02:24 ----A---- C:\Windows\SYSWOW64\FwRemoteSvr.dll
2012-07-20 18:02:23 ----A---- C:\Windows\SYSWOW64\winipsec.dll
2012-07-20 18:02:21 ----A---- C:\Windows\system32\winresume.exe
2012-07-20 18:02:21 ----A---- C:\Windows\system32\winload.exe
2012-07-20 18:02:21 ----A---- C:\Windows\system32\setbcdlocale.dll
2012-07-20 18:02:21 ----A---- C:\Windows\system32\kdusb.dll
2012-07-20 18:02:21 ----A---- C:\Windows\system32\kdcom.dll
2012-07-20 18:02:21 ----A---- C:\Windows\system32\kd1394.dll
2012-07-20 18:02:19 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2012-07-20 18:02:19 ----A---- C:\Windows\system32\rtutils.dll
2012-07-20 18:01:22 ----A---- C:\Windows\SYSWOW64\unregmp2.exe
2012-07-20 18:01:22 ----A---- C:\Windows\system32\unregmp2.exe
2012-07-20 18:00:36 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2012-07-20 18:00:36 ----A---- C:\Windows\system32\netiohlp.dll
2012-07-20 18:00:35 ----A---- C:\Windows\SYSWOW64\TCPSVCS.EXE
2012-07-20 18:00:35 ----A---- C:\Windows\SYSWOW64\NETSTAT.EXE
2012-07-20 18:00:35 ----A---- C:\Windows\SYSWOW64\MRINFO.EXE
2012-07-20 18:00:35 ----A---- C:\Windows\SYSWOW64\HOSTNAME.EXE
2012-07-20 18:00:35 ----A---- C:\Windows\SYSWOW64\finger.exe
2012-07-20 18:00:35 ----A---- C:\Windows\SYSWOW64\ARP.EXE
2012-07-20 18:00:35 ----A---- C:\Windows\system32\TCPSVCS.EXE
2012-07-20 18:00:35 ----A---- C:\Windows\system32\NETSTAT.EXE
2012-07-20 18:00:35 ----A---- C:\Windows\system32\MRINFO.EXE
2012-07-20 18:00:35 ----A---- C:\Windows\system32\ARP.EXE
2012-07-20 18:00:34 ----A---- C:\Windows\SYSWOW64\ROUTE.EXE
2012-07-20 18:00:34 ----A---- C:\Windows\SYSWOW64\netevent.dll
2012-07-20 18:00:34 ----A---- C:\Windows\system32\ROUTE.EXE
2012-07-20 18:00:34 ----A---- C:\Windows\system32\netevent.dll
2012-07-20 18:00:34 ----A---- C:\Windows\system32\HOSTNAME.EXE
2012-07-20 18:00:34 ----A---- C:\Windows\system32\finger.exe
2012-07-20 18:00:00 ----A---- C:\Windows\system32\wmp.dll
2012-07-20 17:59:53 ----A---- C:\Windows\SYSWOW64\wmp.dll
2012-07-20 17:59:50 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2012-07-20 17:59:49 ----A---- C:\Windows\system32\wmploc.DLL
2012-07-20 17:59:29 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2012-07-20 17:59:28 ----A---- C:\Windows\system32\rpcss.dll
2012-07-20 17:59:27 ----A---- C:\Windows\SYSWOW64\sdohlp.dll
2012-07-20 17:59:27 ----A---- C:\Windows\SYSWOW64\iasrecst.dll
2012-07-20 17:59:27 ----A---- C:\Windows\SYSWOW64\iashost.exe
2012-07-20 17:59:27 ----A---- C:\Windows\SYSWOW64\iasdatastore.dll
2012-07-20 17:59:27 ----A---- C:\Windows\SYSWOW64\iasads.dll
2012-07-20 17:59:27 ----A---- C:\Windows\system32\sdohlp.dll
2012-07-20 17:59:27 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2012-07-20 17:59:27 ----A---- C:\Windows\system32\iasrecst.dll
2012-07-20 17:59:27 ----A---- C:\Windows\system32\iashost.exe
2012-07-20 17:59:27 ----A---- C:\Windows\system32\iasdatastore.dll
2012-07-20 17:59:27 ----A---- C:\Windows\system32\iasads.dll
2012-07-20 17:59:07 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2012-07-20 17:59:07 ----A---- C:\Windows\system32\shsvcs.dll
2012-07-20 17:58:54 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2012-07-20 17:58:54 ----A---- C:\Windows\system32\WMNetMgr.dll
2012-07-20 17:58:53 ----A---- C:\Windows\SYSWOW64\logagent.exe
2012-07-20 17:58:53 ----A---- C:\Windows\system32\logagent.exe
2012-07-20 17:58:30 ----A---- C:\Windows\system32\rpcrt4.dll
2012-07-20 17:58:29 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2012-07-20 17:58:23 ----A---- C:\Windows\system32\iphlpsvc.dll
2012-07-20 17:58:23 ----A---- C:\Windows\system32\drivers\tunnel.sys
2012-07-20 17:58:02 ----A---- C:\Windows\system32\wmpdxm.dll
2012-07-20 17:58:01 ----A---- C:\Windows\SYSWOW64\wmpdxm.dll
2012-07-20 17:58:00 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2012-07-20 17:58:00 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2012-07-20 17:58:00 ----A---- C:\Windows\system32\spwmp.dll
2012-07-20 17:58:00 ----A---- C:\Windows\system32\dxmasf.dll
2012-07-20 17:57:49 ----A---- C:\Windows\SYSWOW64\apilogen.dll
2012-07-20 17:57:49 ----A---- C:\Windows\SYSWOW64\amxread.dll
2012-07-20 17:57:49 ----A---- C:\Windows\system32\apilogen.dll
2012-07-20 17:57:49 ----A---- C:\Windows\system32\amxread.dll
2012-07-20 17:57:42 ----A---- C:\Windows\SYSWOW64\tzres.dll
2012-07-20 17:57:42 ----A---- C:\Windows\system32\tzres.dll
2012-07-20 17:57:02 ----A---- C:\Windows\system32\msxml6.dll
2012-07-20 17:57:01 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2012-07-20 17:56:53 ----A---- C:\Windows\SYSWOW64\gameux.dll
2012-07-20 17:56:53 ----A---- C:\Windows\SYSWOW64\Apphlpdm.dll
2012-07-20 17:56:53 ----A---- C:\Windows\system32\gameux.dll
2012-07-20 17:56:53 ----A---- C:\Windows\system32\Apphlpdm.dll
2012-07-20 17:56:52 ----A---- C:\Windows\SYSWOW64\GameUXLegacyGDFs.dll
2012-07-20 17:56:52 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2012-07-20 17:56:46 ----A---- C:\Windows\system32\shell32.dll
2012-07-20 17:56:44 ----A---- C:\Windows\SYSWOW64\shell32.dll
2012-07-20 17:56:43 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2012-07-20 17:56:43 ----A---- C:\Windows\system32\shlwapi.dll
2012-07-20 17:56:40 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2012-07-20 17:56:40 ----A---- C:\Windows\system32\oleaut32.dll
2012-07-20 17:56:38 ----A---- C:\Windows\system32\drivers\srv.sys
2012-07-20 17:56:33 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2012-07-20 17:56:33 ----A---- C:\Windows\system32\kerberos.dll
2012-07-20 17:56:27 ----A---- C:\Windows\system32\wmicmiplugin.dll
2012-07-20 17:56:27 ----A---- C:\Windows\system32\taskschd.dll
2012-07-20 17:56:27 ----A---- C:\Windows\system32\schedsvc.dll
2012-07-20 17:56:26 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2012-07-20 17:56:26 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2012-07-20 17:56:26 ----A---- C:\Windows\system32\taskeng.exe
2012-07-20 17:56:26 ----A---- C:\Windows\system32\taskcomp.dll
2012-07-20 17:56:25 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2012-07-20 17:56:19 ----A---- C:\Windows\system32\RMActivate.exe
2012-07-20 17:56:18 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2012-07-20 17:56:18 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2012-07-20 17:56:18 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2012-07-20 17:56:18 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2012-07-20 17:56:18 ----A---- C:\Windows\system32\RMActivate_isv.exe
2012-07-20 17:56:17 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2012-07-20 17:56:17 ----A---- C:\Windows\SYSWOW64\secproc.dll
2012-07-20 17:56:17 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2012-07-20 17:56:17 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2012-07-20 17:56:17 ----A---- C:\Windows\system32\secproc_isv.dll
2012-07-20 17:56:17 ----A---- C:\Windows\system32\secproc.dll
2012-07-20 17:56:16 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2012-07-20 17:56:16 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2012-07-20 17:56:16 ----A---- C:\Windows\system32\secproc_ssp.dll
2012-07-20 17:56:15 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2012-07-20 17:56:15 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2012-07-20 17:56:15 ----A---- C:\Windows\system32\msdrm.dll
2012-07-20 17:56:13 ----A---- C:\Windows\system32\mfc42u.dll
2012-07-20 17:56:13 ----A---- C:\Windows\system32\mfc42.dll
2012-07-20 17:56:12 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2012-07-20 17:56:11 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2012-07-20 17:56:08 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2012-07-20 17:56:08 ----A---- C:\Windows\system32\odbc32.dll
2012-07-20 17:55:56 ----A---- C:\Windows\system32\ci.dll
2012-07-20 17:55:55 ----A---- C:\Windows\SYSWOW64\srclient.dll
2012-07-20 17:55:55 ----A---- C:\Windows\system32\srdelayed.exe
2012-07-20 17:55:55 ----A---- C:\Windows\system32\srcore.dll
2012-07-20 17:55:55 ----A---- C:\Windows\system32\srclient.dll
2012-07-20 17:55:55 ----A---- C:\Windows\system32\rstrui.exe
2012-07-20 17:55:54 ----A---- C:\Windows\SYSWOW64\kbd106n.dll
2012-07-20 17:55:54 ----A---- C:\Windows\system32\kbd106n.dll
2012-07-20 17:55:31 ----A---- C:\Windows\SYSWOW64\localspl.dll
2012-07-20 17:55:31 ----A---- C:\Windows\system32\localspl.dll
2012-07-20 17:55:28 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2012-07-20 17:55:28 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2012-07-20 17:55:23 ----A---- C:\Windows\system32\tsbyuv.dll
2012-07-20 17:55:23 ----A---- C:\Windows\system32\msyuv.dll
2012-07-20 17:55:23 ----A---- C:\Windows\system32\msvidc32.dll
2012-07-20 17:55:23 ----A---- C:\Windows\system32\msrle32.dll
2012-07-20 17:55:23 ----A---- C:\Windows\system32\mciavi32.dll
2012-07-20 17:55:23 ----A---- C:\Windows\system32\iyuv_32.dll
2012-07-20 17:55:23 ----A---- C:\Windows\system32\avicap32.dll
2012-07-20 17:55:22 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2012-07-20 17:55:22 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2012-07-20 17:55:22 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2012-07-20 17:55:22 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2012-07-20 17:55:22 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2012-07-20 17:55:22 ----A---- C:\Windows\system32\avifil32.dll
2012-07-20 17:55:21 ----A---- C:\Windows\SYSWOW64\msvfw32.dll
2012-07-20 17:55:21 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2012-07-20 17:55:21 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2012-07-20 17:55:21 ----A---- C:\Windows\SYSWOW64\avicap32.dll
2012-07-20 17:55:21 ----A---- C:\Windows\system32\msvfw32.dll
2012-07-20 17:55:17 ----A---- C:\Windows\SYSWOW64\wshqos.dll
2012-07-20 17:55:17 ----A---- C:\Windows\SYSWOW64\traffic.dll
2012-07-20 17:55:17 ----A---- C:\Windows\SYSWOW64\pacerprf.dll
2012-07-20 17:55:17 ----A---- C:\Windows\system32\wshqos.dll
2012-07-20 17:55:17 ----A---- C:\Windows\system32\traffic.dll
2012-07-20 17:55:17 ----A---- C:\Windows\system32\pacerprf.dll
2012-07-20 17:55:17 ----A---- C:\Windows\system32\drivers\pacer.sys
2012-07-20 17:55:13 ----A---- C:\Windows\system32\comctl32.dll
2012-07-20 17:55:12 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2012-07-20 17:55:09 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2012-07-20 17:55:09 ----A---- C:\Windows\SYSWOW64\PhotoMetadataHandler.dll
2012-07-20 17:55:09 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2012-07-20 17:55:09 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2012-07-20 17:55:08 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2012-07-20 17:55:08 ----A---- C:\Windows\system32\WindowsCodecs.dll
2012-07-20 17:55:05 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2012-07-20 17:55:05 ----A---- C:\Windows\system32\fontsub.dll
2012-07-20 17:55:05 ----A---- C:\Windows\system32\atmfd.dll
2012-07-20 17:55:04 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2012-07-20 17:55:04 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2012-07-20 17:55:04 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2012-07-20 17:55:04 ----A---- C:\Windows\system32\atmlib.dll
2012-07-20 17:55:01 ----A---- C:\Windows\SYSWOW64\rastls.dll
2012-07-20 17:55:01 ----A---- C:\Windows\system32\rastls.dll
2012-07-20 17:55:01 ----A---- C:\Windows\system32\raschap.dll
2012-07-20 17:55:00 ----A---- C:\Windows\SYSWOW64\raschap.dll
2012-07-20 17:54:59 ----A---- C:\Windows\system32\wscript.exe
2012-07-20 17:54:59 ----A---- C:\Windows\system32\scrrun.dll
2012-07-20 17:54:59 ----A---- C:\Windows\system32\scrobj.dll
2012-07-20 17:54:58 ----A---- C:\Windows\SYSWOW64\wshext.dll
2012-07-20 17:54:58 ----A---- C:\Windows\SYSWOW64\wscript.exe
2012-07-20 17:54:58 ----A---- C:\Windows\SYSWOW64\scrobj.dll
2012-07-20 17:54:58 ----A---- C:\Windows\SYSWOW64\cscript.exe
2012-07-20 17:54:58 ----A---- C:\Windows\system32\wshext.dll
2012-07-20 17:54:58 ----A---- C:\Windows\system32\cscript.exe
2012-07-20 17:54:57 ----A---- C:\Windows\SYSWOW64\scrrun.dll
2012-07-20 17:54:43 ----A---- C:\Windows\SYSWOW64\explorer.exe
2012-07-20 17:54:43 ----A---- C:\Windows\explorer.exe
2012-07-20 17:54:41 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2012-07-20 17:54:41 ----A---- C:\Windows\system32\WSDApi.dll
2012-07-20 17:54:38 ----A---- C:\Windows\SYSWOW64\ole32.dll
2012-07-20 17:54:38 ----A---- C:\Windows\system32\ole32.dll
2012-07-20 17:54:36 ----A---- C:\Windows\system32\es.dll
2012-07-20 17:54:35 ----A---- C:\Windows\SYSWOW64\es.dll
2012-07-20 17:54:34 ----A---- C:\Windows\SYSWOW64\MP4SDECD.DLL
2012-07-20 17:54:34 ----A---- C:\Windows\system32\MP4SDECD.DLL
2012-07-20 17:54:26 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2012-07-20 17:54:26 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2012-07-20 17:54:24 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2012-07-20 17:54:24 ----A---- C:\Windows\system32\sbe.dll
2012-07-20 17:54:24 ----A---- C:\Windows\system32\EncDec.dll
2012-07-20 17:54:23 ----A---- C:\Windows\SYSWOW64\sbeio.dll
2012-07-20 17:54:23 ----A---- C:\Windows\SYSWOW64\sbe.dll
2012-07-20 17:54:23 ----A---- C:\Windows\system32\sbeio.dll
2012-07-20 17:54:21 ----A---- C:\Windows\SYSWOW64\connect.dll
2012-07-20 17:54:21 ----A---- C:\Windows\system32\connect.dll
2012-07-20 17:54:19 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2012-07-20 17:54:19 ----A---- C:\Windows\system32\winhttp.dll
2012-07-20 17:54:17 ----A---- C:\Windows\system32\gdi32.dll
2012-07-20 17:54:16 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2012-07-20 17:54:14 ----A---- C:\Windows\system32\winsrv.dll
2012-07-20 17:54:14 ----A---- C:\Windows\system32\csrsrv.dll
2012-07-20 17:54:12 ----A---- C:\Windows\system32\drivers\srvnet.sys
2012-07-20 17:54:12 ----A---- C:\Windows\system32\drivers\srv2.sys
2012-07-20 17:54:10 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2012-07-20 17:54:10 ----A---- C:\Windows\system32\t2embed.dll
2012-07-20 17:54:05 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2012-07-20 17:54:05 ----A---- C:\Windows\system32\msasn1.dll
2012-07-20 17:54:01 ----A---- C:\Windows\system32\Faultrep.dll
2012-07-20 17:54:00 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2012-07-20 17:54:00 ----A---- C:\Windows\system32\wersvc.dll
2012-07-20 17:53:58 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2012-07-20 17:53:58 ----A---- C:\Windows\system32\asycfilt.dll
2012-07-20 17:53:56 ----A---- C:\Windows\system32\consent.exe
2012-07-20 17:53:53 ----A---- C:\Windows\system32\usp10.dll
2012-07-20 17:53:52 ----A---- C:\Windows\SYSWOW64\usp10.dll
2012-07-20 17:53:51 ----A---- C:\Windows\system32\emdmgmt.dll
2012-07-20 17:53:51 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2012-07-20 17:53:50 ----A---- C:\Windows\SYSWOW64\dataclen.dll
2012-07-20 17:53:50 ----A---- C:\Windows\system32\drivers\nwifi.sys
2012-07-20 17:53:50 ----A---- C:\Windows\system32\dataclen.dll
2012-07-20 17:53:50 ----A---- C:\Windows\system32\cdd.dll
2012-07-20 17:52:26 ----A---- C:\Windows\system32\spoolsv.exe
2012-07-20 17:52:23 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2012-07-20 17:52:23 ----A---- C:\Windows\system32\wdigest.dll
2012-07-20 17:52:23 ----A---- C:\Windows\system32\msv1_0.dll
2012-07-20 17:52:23 ----A---- C:\Windows\system32\lsasrv.dll
2012-07-20 17:52:22 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2012-07-20 17:52:22 ----A---- C:\Windows\SYSWOW64\secur32.dll
2012-07-20 17:52:22 ----A---- C:\Windows\system32\secur32.dll
2012-07-20 17:52:22 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2012-07-20 17:52:21 ----A---- C:\Windows\system32\lsass.exe
2012-07-20 17:51:42 ----A---- C:\Windows\system32\wlanmsm.dll
2012-07-20 17:51:41 ----A---- C:\Windows\SYSWOW64\wlansec.dll
2012-07-20 17:51:41 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2012-07-20 17:51:41 ----A---- C:\Windows\SYSWOW64\L2SecHC.dll
2012-07-20 17:51:41 ----A---- C:\Windows\system32\wlansvc.dll
2012-07-20 17:51:41 ----A---- C:\Windows\system32\wlansec.dll
2012-07-20 17:51:41 ----A---- C:\Windows\system32\L2SecHC.dll
2012-07-20 17:51:40 ----A---- C:\Windows\system32\wlanhlp.dll
2012-07-20 17:51:40 ----A---- C:\Windows\system32\wlanapi.dll
2012-07-20 17:51:37 ----A---- C:\Windows\system32\win32k.sys
2012-07-20 17:51:35 ----A---- C:\Windows\SYSWOW64\msdtcprx.dll
2012-07-20 17:51:35 ----A---- C:\Windows\system32\msdtcprx.dll
2012-07-20 17:51:34 ----A---- C:\Windows\SYSWOW64\xolehlp.dll
2012-07-20 17:51:34 ----A---- C:\Windows\system32\xolehlp.dll
2012-07-20 17:51:33 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2012-07-20 17:51:33 ----A---- C:\Windows\system32\win32spl.dll
2012-07-20 17:51:31 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2012-07-20 17:51:30 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2012-07-20 17:51:17 ----A---- C:\Windows\system32\wintrust.dll
2012-07-20 17:51:16 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2012-07-20 17:51:14 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-07-20 17:51:13 ----A---- C:\Windows\system32\ntdll.dll
2012-07-20 17:51:12 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2012-07-20 17:51:07 ----A---- C:\Windows\system32\jscript.dll
2012-07-20 17:51:06 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2012-07-20 17:51:06 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-07-20 17:51:06 ----A---- C:\Windows\system32\vbscript.dll
2012-07-20 17:51:03 ----A---- C:\Windows\system32\drivers\tcpip.sys
2012-07-20 17:51:02 ----A---- C:\Windows\system32\schannel.dll
2012-07-20 17:51:01 ----A---- C:\Windows\SYSWOW64\schannel.dll
2012-07-20 17:51:00 ----A---- C:\Windows\system32\mstscax.dll
2012-07-20 17:50:58 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2012-07-20 17:50:58 ----A---- C:\Windows\system32\mstsc.exe
2012-07-20 17:50:57 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2012-07-20 17:50:55 ----A---- C:\Windows\system32\msxml3.dll
2012-07-20 17:50:54 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2012-07-20 17:50:53 ----A---- C:\Windows\system32\dnsapi.dll
2012-07-20 17:50:52 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2012-07-20 17:50:52 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2012-07-20 17:50:52 ----A---- C:\Windows\system32\dnsrslvr.dll
2012-07-20 17:50:52 ----A---- C:\Windows\system32\dnscacheugc.exe
2012-07-20 17:50:51 ----A---- C:\Windows\system32\drivers\afd.sys
2012-07-20 17:50:49 ----A---- C:\Windows\system32\drivers\dfsc.sys
2012-07-20 17:50:47 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2012-07-20 17:50:47 ----A---- C:\Windows\system32\wmpeffects.dll
2012-07-20 17:50:46 ----A---- C:\Windows\system32\sdclt.exe
2012-07-20 17:50:45 ----A---- C:\Windows\system32\inetcomm.dll
2012-07-20 17:50:44 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2012-07-20 17:50:40 ----A---- C:\Windows\system32\wmpmde.dll
2012-07-20 17:50:39 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2012-07-20 17:50:38 ----A---- C:\Windows\SYSWOW64\atl.dll
2012-07-20 17:50:38 ----A---- C:\Windows\system32\atl.dll
2012-07-20 17:50:35 ----A---- C:\Windows\system32\drivers\bowser.sys
2012-07-20 17:50:33 ----A---- C:\Windows\SYSWOW64\quartz.dll
2012-07-20 17:50:33 ----A---- C:\Windows\system32\quartz.dll
2012-07-20 17:50:30 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2012-07-20 17:50:30 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2012-07-20 17:50:30 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2012-07-20 17:50:28 ----A---- C:\Windows\system32\wkssvc.dll
2012-07-20 17:50:27 ----A---- C:\Windows\SYSWOW64\cabview.dll
2012-07-20 17:50:27 ----A---- C:\Windows\system32\cabview.dll
2012-07-20 17:50:26 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2012-07-20 17:39:26 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2012-07-20 17:39:26 ----A---- C:\Windows\system32\kernel32.dll
2012-07-20 17:38:32 ----D---- C:\Users\Fanda\AppData\Roaming\Macromedia
2012-07-20 17:38:31 ----D---- C:\Users\Fanda\AppData\Roaming\Adobe
2012-07-20 17:36:42 ----A---- C:\Windows\SYSWOW64\wshrm.dll
2012-07-20 17:36:42 ----A---- C:\Windows\system32\wshrm.dll
2012-07-20 17:36:42 ----A---- C:\Windows\system32\drivers\rmcast.sys
2012-07-20 17:35:23 ----A---- C:\Windows\system32\netapi32.dll
2012-07-20 17:35:22 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2012-07-20 17:25:10 ----D---- C:\Users\Fanda\AppData\Roaming\ESET
2012-07-20 17:20:34 ----D---- C:\ProgramData\ESET
2012-07-20 17:20:34 ----D---- C:\Program Files\ESET
2012-07-20 17:17:05 ----SHD---- C:\Windows\Installer
2012-07-20 17:12:52 ----D---- C:\Windows\Panther
2012-07-20 17:12:43 ----RAS---- C:\BOOTSECT.BAK
2012-07-20 17:12:41 ----SHD---- C:\Boot
2012-07-20 17:11:57 ----A---- C:\Windows\system32\drivers\Rtlh64.sys
2012-07-20 17:11:28 ----D---- C:\Users\Fanda\AppData\Roaming\InstallShield
2012-07-20 17:08:35 ----A---- C:\Windows\system32\RtkHDM64.dll
2012-07-20 17:08:35 ----A---- C:\Windows\system32\RHDMEx64.dll
2012-07-20 17:08:35 ----A---- C:\Windows\system32\RHCoInst64.dll
2012-07-20 17:08:35 ----A---- C:\Windows\system32\drivers\RtHDMIVX.sys
2012-07-20 17:08:35 ----A---- C:\Windows\RtkUpd64.exe
2012-07-20 17:08:35 ----A---- C:\Windows\DIFxAPI.dll
2012-07-20 17:08:29 ----D---- C:\Program Files (x86)\Realtek
2012-07-20 17:08:26 ----A---- C:\Windows\RtlExUpd.dll
2012-07-20 17:08:05 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-07-20 17:08:05 ----D---- C:\Program Files (x86)\Browser Configuration Utility
2012-07-20 17:08:05 ----A---- C:\Windows\SYSWOW64\dvmurl.dll
2012-07-20 17:07:30 ----A---- C:\Windows\GSetup.ini
2012-07-20 17:07:28 ----A---- C:\Windows\gdrv.sys
2012-07-20 16:28:03 ----D---- C:\Users\Fanda\AppData\Roaming\Identities
2012-07-20 16:27:53 ----SD---- C:\Users\Fanda\AppData\Roaming\Microsoft
2012-07-20 16:27:53 ----D---- C:\Users\Fanda\AppData\Roaming\Media Center Programs
2012-07-20 16:26:18 ----SHD---- C:\ProgramData\Šablony
2012-07-20 16:26:18 ----SHD---- C:\ProgramData\Plocha
2012-07-20 16:26:18 ----SHD---- C:\ProgramData\Oblíbené položky
2012-07-20 16:26:18 ----SHD---- C:\ProgramData\Nabídka Start
2012-07-20 16:26:18 ----SHD---- C:\ProgramData\Dokumenty
2012-07-20 16:26:18 ----SHD---- C:\ProgramData\Data aplikací
2012-07-20 16:25:54 ----D---- C:\Windows\Debug
2012-07-20 16:18:00 ----D---- C:\Windows\SoftwareDistribution
2012-07-20 16:13:43 ----D---- C:\Windows\Prefetch
2012-07-20 16:13:42 ----ASH---- C:\pagefile.sys
2012-07-20 16:13:41 ----SHD---- C:\System Volume Information

======List of files/folders modified in the last 1 month======

2012-07-20 22:49:10 ----RD---- C:\Program Files
2012-07-20 22:49:07 ----D---- C:\Windows\Temp
2012-07-20 22:36:44 ----RSD---- C:\Windows\assembly
2012-07-20 22:35:49 ----D---- C:\Windows\Microsoft.NET
2012-07-20 22:15:41 ----D---- C:\Windows\System32
2012-07-20 22:15:41 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-07-20 22:15:40 ----D---- C:\Windows\inf
2012-07-20 21:47:33 ----D---- C:\Windows
2012-07-20 21:11:41 ----HD---- C:\ProgramData
2012-07-20 21:01:47 ----D---- C:\Windows\winsxs
2012-07-20 20:57:38 ----D---- C:\Windows\SysWOW64
2012-07-20 20:57:36 ----D---- C:\Windows\system32\drivers
2012-07-20 20:57:32 ----D---- C:\Windows\system32\catroot
2012-07-20 20:51:00 ----D---- C:\Windows\system32\catroot2
2012-07-20 20:50:07 ----RD---- C:\Program Files (x86)
2012-07-20 20:41:54 ----D---- C:\Program Files\Windows Media Player
2012-07-20 20:41:54 ----D---- C:\Program Files (x86)\Windows Media Player
2012-07-20 20:41:52 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-07-20 20:41:52 ----D---- C:\Windows\system32\cs-CZ
2012-07-20 20:41:52 ----D---- C:\Windows\PolicyDefinitions
2012-07-20 20:41:50 ----D---- C:\Windows\SYSWOW64\migration
2012-07-20 20:41:50 ----D---- C:\Windows\system32\migration
2012-07-20 20:41:50 ----D---- C:\Program Files\Internet Explorer
2012-07-20 20:41:50 ----D---- C:\Program Files (x86)\Internet Explorer
2012-07-20 20:41:48 ----D---- C:\Windows\ehome
2012-07-20 20:41:47 ----D---- C:\Windows\SYSWOW64\manifeststore
2012-07-20 20:41:47 ----D---- C:\Windows\system32\manifeststore
2012-07-20 20:41:47 ----D---- C:\Windows\AppPatch
2012-07-20 20:41:43 ----D---- C:\Windows\SYSWOW64\XPSViewer
2012-07-20 20:41:43 ----D---- C:\Windows\SYSWOW64\wbem
2012-07-20 20:41:43 ----D---- C:\Windows\SYSWOW64\en-US
2012-07-20 20:41:43 ----D---- C:\Windows\system32\wbem
2012-07-20 20:41:43 ----D---- C:\Windows\system32\en-US
2012-07-20 20:41:26 ----D---- C:\Windows\system32\Boot
2012-07-20 20:41:24 ----RSD---- C:\Windows\Fonts
2012-07-20 20:41:16 ----D---- C:\Program Files\Windows Mail
2012-07-20 20:41:16 ----D---- C:\Program Files (x86)\Windows Mail
2012-07-20 20:41:15 ----D---- C:\Program Files\Movie Maker
2012-07-20 20:30:39 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-07-20 17:33:23 ----D---- C:\Windows\Logs
2012-07-20 17:28:29 ----D---- C:\Windows\Tasks
2012-07-20 17:28:29 ----D---- C:\Windows\system32\Tasks
2012-07-20 17:08:19 ----D---- C:\Program Files (x86)\Common Files
2012-07-20 17:07:22 ----D---- C:\Windows\system32\WDI
2012-07-20 16:55:46 ----D---- C:\Windows\system32\restore
2012-07-20 16:28:18 ----SHD---- C:\$Recycle.Bin
2012-07-20 16:27:53 ----RD---- C:\Users
2012-07-20 16:27:18 ----D---- C:\Windows\rescache
2012-07-20 16:26:18 ----D---- C:\Program Files\Windows NT
2012-07-20 16:18:54 ----SD---- C:\ProgramData\Microsoft
2012-07-20 16:18:51 ----D---- C:\Windows\system32\drivers\UMDF

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2012-03-14 62496]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2012-03-14 209768]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2012-03-14 148528]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2012-03-14 38288]
R2 AODDriver4.1;AODDriver4.1; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-03-05 53888]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2012-03-14 187632]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-05-24 11175424]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-05-24 343040]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-06-19 4065296]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2008-06-18 181024]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh64.sys [2008-05-02 166912]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 108544]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 6144]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2012-07-20 20544]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 273920]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 11008]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 7040]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 6656]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 7936]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 8704]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 438328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-05-24 236544]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-05-24 361984]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2012-03-07 913144]
S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\Windows\SysWow64\perfhost.exe [2008-01-21 19968]

-----------------EOF-----------------

Toto je čisté. Udělejte kompletní sken AVPTool: http://forum.viry.cz/viewtopic.php?f=29&t=58179 dejte log. Obávám se, že tam bude nějaký souborový šmejd.

Je jiný způsob jak sem dát log?
Kvůli počtu znaků mi to nedovolí sem nakopírovat.

Zdravim Omlouvam se kolegovi z avstup

Log rozdelte do vice prispevku. Pripadne ho uploadnete treba zde http://leteckaposta.cz/ a tady dejte odkaz na stazeni.

Preji uspesne doreseni

Omlouvám se že mi to trvalo tak dlouho, mám pomalý internet.

http://download.hellshare.cz/vrt2-txt/8237081/

Chce to po mne SMS, kterou nehodlám posílat. Uložte třeba na leteckaposta, nebo ulozto.

To toje log AVP, v němž je seznam toho, co kontroloval. Měl by tam být ještě druhý, ve kterém je to, co případně smazal.



Po dokončení prohledávání klikněte vpravo nahoře na ikonu bloku s poznámkami poté vlevo uprostřed na záložku Detected threats.