VIRY.CZ

dobry den, chcel by som poprosit o kontrolu logu.
na pc boli nejake problemy s reg cleaner pro, nedokazem posudit ci to bolo na pc normalne nainstalovane alebo to bol len virus...
pc vlastni clovek co nainstaluje alebo otvori kazdu prilohu alebo reklamu ktoru moze a potom ma zasvineny pc jak keby tam 10 rokov nepoutival antivirus.
dalej tu bol problem s deltasearch nastrojom, nainstaloval sa aj do chrome aj do ie a celkom to prekazalo

Logfile of random's system information tool 1.09 (written by random/random)
Run by Milan at 2013-03-31 20:41:47
Microsoft Windows 7 Ultimate
System drive C: has 67 GB (65%) free of 102 GB
Total RAM: 8109 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:41:49, on 31. 3. 2013
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16930)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Milan.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {7a5f72d2-9bbf-443f-9d35-26fc7e858e77} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide
O4 - HKLM\..\Run: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
O4 - HKLM\..\Run: [IJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
O4 - HKCU\..\Run: [KrosMeninyS] True
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: UMVPFSrv - Logitech Inc. - C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7659 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe"
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
taskeng.exe {1E6EACB4-39C1-4AC8-8A0F-BF9BA3A57A93}
"taskhost.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe" -hide
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE" /logon
"C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe" /FORCE
"C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe" /hide
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\splwow64.exe 2
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe" -Embedding
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2884.0.1983788478\671948681" --supports-dual-gpus=false --gpu-vendor-id=0x8086 --gpu-device-id=0x0102 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2653 --ignored=" --type=renderer " /prefetch:12
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/Default/NewTabButton/default/OmniboxHQPNewScoringMax1400/Standard/OmniboxHQPOnlyCountMatchesAtWordBoundaries/Standard/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/HQPUseCursorPosition/OmniboxSearchSuggestTrialStarted2013Q1/3/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwnd16/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-1-Percent/group_74/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="2884.4.316961385\705103473" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="2884.5.31017642\900840687" --lang=sk --ignored=" --type=renderer " /prefetch:13
"C:\Users\Milan\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-03-07 1497560]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18 66280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2010-11-08 202144]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-03-07 1224568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-03-07 1497560]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-03-07 1224568]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2010-11-08 1619352]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-01-04 11772520]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-02-14 170264]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-02-14 398616]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-02-14 440600]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2011-03-14 2779024]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"KrosMeninyS"=True []
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-01-08 18705664]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2013-03-07 4767304]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]
"LWS"=C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [2011-11-11 205336]
"CanonSolutionMenuEx"=C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [2011-08-04 1612920]
"IJNetworkScannerSelectorEX"=C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [2011-01-15 452016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-02-14 430080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"VIDC.I420"=lvcod64.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo"=vfwwdm32.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-03-31 20:33:36 ----D---- C:\rsit
2013-03-31 20:33:36 ----D---- C:\Program Files\trend micro
2013-03-31 19:58:11 ----D---- C:\Users\Milan\AppData\Roaming\SUPERAntiSpyware.com
2013-03-31 19:57:50 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2013-03-31 19:57:50 ----D---- C:\Program Files\SUPERAntiSpyware
2013-03-31 12:29:07 ----A---- C:\Windows\SYSWOW64\tmp.txt
2013-03-31 12:29:02 ----A---- C:\rapport.txt
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\WS2Fix.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\VCCLSID.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\VACFix.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\swxcacls.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\swsc.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\swreg.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\SrchSTS.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\Process.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\o4Patch.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\IEDFix.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\IEDFix.C.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\dumphive.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\Agent.OMZ.Fix.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\404Fix.exe
2013-03-26 22:03:47 ----D---- C:\Windows\SYSWOW64\searchplugins
2013-03-26 22:03:47 ----D---- C:\Windows\SYSWOW64\Extensions
2013-03-26 22:03:45 ----D---- C:\Users\Milan\AppData\Roaming\Systweak
2013-03-26 22:03:44 ----A---- C:\Windows\system32\roboot64.exe
2013-03-26 22:03:40 ----D---- C:\Users\Milan\AppData\Roaming\BabSolution
2013-03-26 22:03:36 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-03-26 22:03:29 ----D---- C:\Users\Milan\AppData\Roaming\Babylon
2013-03-26 22:03:29 ----D---- C:\ProgramData\Babylon
2013-03-15 13:03:32 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2013-03-15 13:03:31 ----A---- C:\Windows\system32\drivers\aswRvrt.sys

======List of files/folders modified in the last 1 month======

2013-03-31 20:41:46 ----D---- C:\Windows\Temp
2013-03-31 20:39:48 ----D---- C:\Windows\System32
2013-03-31 20:39:48 ----D---- C:\Windows\inf
2013-03-31 20:39:48 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-03-31 20:36:00 ----D---- C:\Users\Milan\AppData\Roaming\Skype
2013-03-31 20:35:32 ----D---- C:\Windows\system32\config
2013-03-31 20:33:36 ----RD---- C:\Program Files
2013-03-31 20:33:36 ----D---- C:\Windows\Prefetch
2013-03-31 19:58:11 ----HD---- C:\ProgramData
2013-03-31 12:37:53 ----D---- C:\Windows
2013-03-31 12:35:31 ----D---- C:\Windows\Tasks
2013-03-31 12:35:31 ----D---- C:\Windows\system32\Tasks
2013-03-31 12:35:30 ----RD---- C:\Program Files (x86)
2013-03-31 12:29:07 ----D---- C:\Windows\SysWOW64
2013-03-29 23:28:09 ----SHD---- C:\System Volume Information
2013-03-29 10:00:21 ----D---- C:\Windows\system32\catroot2
2013-03-26 22:01:21 ----D---- C:\Program Files (x86)\The KMPlayer
2013-03-26 18:34:02 ----D---- C:\ProgramData\Adobe
2013-03-26 18:33:58 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-03-26 16:24:13 ----SHD---- C:\Windows\Installer
2013-03-25 22:51:11 ----D---- C:\Windows\system32\drivers
2013-03-25 22:51:04 ----D---- C:\Windows\system32\DriverStore
2013-03-25 22:51:04 ----D---- C:\Windows\system32\catroot
2013-03-25 17:47:43 ----D---- C:\Windows\system32\NDF
2013-03-07 01:32:22 ----A---- C:\Windows\system32\aswBoot.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [2013-03-07 65336]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2013-03-07 70992]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2013-03-07 1025808]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2013-03-07 377920]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2013-03-07 68920]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2013-03-07 33400]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2013-03-07 80816]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-02-14 14692224]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-01-04 2697448]
R3 LVRS64;Logitech RightSound Filter Driver; C:\Windows\system32\DRIVERS\lvrs64.sys [2012-01-18 351136]
R3 LVUSBS64;Logitech USB Monitor Filter; C:\Windows\system32\drivers\LVUSBS64.sys [2007-03-06 58400]
R3 LVUVC64;Logitech Webcam Pro 9000(UVC); C:\Windows\system32\DRIVERS\lvuvc64.sys [2012-01-18 4865568]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-12-24 412264]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2011-05-13 36328]
S3 aswVmm;aswVmm; C:\Windows\system32\drivers\aswVmm.sys [2013-03-07 178624]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2011-08-17 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2011-08-17 27136]
S3 PID_0928;Logitech QuickCam Express(PID_0928); C:\Windows\system32\DRIVERS\LV561V64.SYS [2007-03-06 468000]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2011-05-13 157672]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2011-05-13 16872]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2011-05-13 177640]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2011-08-17 9216]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-07-14 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2011-08-17 9216]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2012-07-11 140672]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-03-07 45248]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 UMVPFSrv;UMVPFSrv; C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [2012-01-18 450848]
R3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-09 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-26 253656]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-02-14 276248]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-09 136176]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]

-----------------EOF-----------------

Zdravím!
Spusťte nejprve tuto utilitu:

Stáhněte AdwCleaner http://www.stahuj.centrum.cz/utility_a_ ... cleaner/?g
Uložte na plochu
Ukončete všechny programy
Klikněte na Search
Proběhne skenováni a pak se objeví log, který sem vložte.

Reg Clean je ok, je to čistič registry. To druhé bude nějaký doplněk prohlížeče, nejspíš šmejd.

pekny den, ospravedlnujem sa ze to zasielam az teraz,

# AdwCleaner v2.109 - Logfile created 04/05/2013 at 13:12:03
# Updated 26/01/2013 by Xplode
# Operating system : Windows 7 Ultimate (64 bits)
# User : Milan - MILAN-PC
# Boot Mode : Normal
# Running from : C:\Users\Milan\Desktop\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

Folder Found : C:\Program Files (x86)\Conduit
Folder Found : C:\ProgramData\Ask
Folder Found : C:\ProgramData\Babylon
Folder Found : C:\ProgramData\Trymedia
Folder Found : C:\Users\Milan\AppData\Local\Conduit
Folder Found : C:\Users\Milan\AppData\LocalLow\Conduit
Folder Found : C:\Users\Milan\AppData\Roaming\BabSolution
Folder Found : C:\Users\Milan\AppData\Roaming\Babylon

***** [Registry] *****

Key Found : HKCU\Software\APN PIP
Key Found : HKCU\Software\AppDataLow\Software\Conduit
Key Found : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Found : HKCU\Software\AppDataLow\Software\SmartBar
Key Found : HKCU\Software\BabylonToolbar
Key Found : HKCU\Software\DataMngr
Key Found : HKCU\Software\PIP
Key Found : HKCU\Software\Softonic
Key Found : HKCU\Software\5953d8d0b469ed15
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKLM\Software\Babylon
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2697549
Key Found : HKLM\Software\Conduit
Key Found : HKLM\Software\DataMngr
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Found : HKLM\Software\PIP
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKU\S-1-5-21-1578385370-2816491472-2937313792-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : HKU\S-1-5-21-1578385370-2816491472-2937313792-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16470

[OK] Registry is clean.

-\\ Google Chrome v26.0.1410.43

File : C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [2527 octets] - [05/04/2013 13:12:03]

########## EOF - C:\AdwCleaner[R1].txt - [2587 octets] ##########

Spusťte znovu ADWCleaner a klikněte na >Delete<. Vložte nový log.

# AdwCleaner v2.109 - Logfile created 04/05/2013 at 19:58:33
# Updated 26/01/2013 by Xplode
# Operating system : Windows 7 Ultimate (64 bits)
# User : Milan - MILAN-PC
# Boot Mode : Normal
# Running from : C:\Users\Milan\Desktop\adwcleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\Trymedia
Folder Deleted : C:\Users\Milan\AppData\Local\Conduit
Folder Deleted : C:\Users\Milan\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Milan\AppData\Roaming\BabSolution
Folder Deleted : C:\Users\Milan\AppData\Roaming\Babylon

***** [Registry] *****

Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\BabylonToolbar
Key Deleted : HKCU\Software\DataMngr
Key Deleted : HKCU\Software\PIP
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\5953d8d0b469ed15
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2697549
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16470

[OK] Registry is clean.

-\\ Google Chrome v26.0.1410.43

File : C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [2650 octets] - [05/04/2013 13:12:03]
AdwCleaner[S1].txt - [2339 octets] - [05/04/2013 19:58:33]

########## EOF - C:\AdwCleaner[S1].txt - [2399 octets] ##########

Dejte nový log RSIT.

nezmesti sa cely, rozdelene do viacerych sprav

Logfile of random's system information tool 1.09 (written by random/random)
Run by Milan at 2013-04-05 21:12:47
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 65 GB (64%) free of 102 GB
Total RAM: 8109 MB (83% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:12:49, on 5. 4. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16521)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\trend micro\Milan.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {7a5f72d2-9bbf-443f-9d35-26fc7e858e77} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide
O4 - HKLM\..\Run: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
O4 - HKLM\..\Run: [IJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
O4 - HKCU\..\Run: [KrosMeninyS] True
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: UMVPFSrv - Logitech Inc. - C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7444 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe"
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe /Embedding
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe" -hide
"C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE" /logon
"C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe" /FORCE
"C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe" /hide
"C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe" -Embedding
C:\Windows\splwow64.exe 12288
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
C:\Windows\System32\svchost.exe -k secsvcs
taskhost.exe $(Arg0)
"C:\Users\Milan\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-03-07 1497560]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18 66280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2010-11-08 202144]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-03-07 1224568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-03-07 1497560]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-03-07 1224568]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2010-11-08 1619352]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-01-04 11772520]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2011-03-14 2779024]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-12-14 172144]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-12-14 399984]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-12-14 441968]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"KrosMeninyS"=True []
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-01-08 18705664]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2013-03-07 4767304]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]
"LWS"=C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [2011-11-11 205336]
"CanonSolutionMenuEx"=C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [2011-08-04 1612920]
"IJNetworkScannerSelectorEX"=C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [2011-01-15 452016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-12-14 442880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"VIDC.I420"=lvcod64.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo"=vfwwdm32.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-04-05 21:00:30 ----A---- C:\Windows\system32\IEUDINIT.EXE
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\url.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-04-05 20:56:30 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\wininet.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\wextract.exe
2013-04-05 20:56:30 ----A---- C:\Windows\system32\webcheck.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\vbscript.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\urlmon.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\url.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-04-05 20:56:30 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-04-05 20:56:30 ----A---- C:\Windows\system32\pngfilt.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\occache.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-04-05 20:56:30 ----A---- C:\Windows\system32\msrating.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\msls31.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\mshtmler.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\mshtmled.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\mshtml.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\mshta.exe
2013-04-05 20:56:30 ----A---- C:\Windows\system32\msfeedssync.exe
2013-04-05 20:56:30 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\msfeeds.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\licmgr10.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\jsproxy.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\jscript9.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\jscript.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\inseng.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\imgutil.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\iexpress.exe
2013-04-05 20:56:30 ----A---- C:\Windows\system32\ieUnatt.exe
2013-04-05 20:56:30 ----A---- C:\Windows\system32\ieui.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\iesysprep.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\iesetup.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\iertutil.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\iernonce.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\iepeers.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\ieframe.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\iedkcs32.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\ieapfltr.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\ieapfltr.dat
2013-04-05 20:56:30 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\ie4uinit.exe
2013-04-05 20:56:30 ----A---- C:\Windows\system32\icardie.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\elshyph.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\dxtrans.dll
2013-04-05 20:56:30 ----A---- C:\Windows\system32\dxtmsft.dll
2013-04-05 20:56:03 ----A---- C:\Windows\system32\taskhost.exe
2013-04-05 20:55:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-04-05 20:55:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-04-05 20:55:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-04-05 20:55:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-04-05 20:55:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-04-05 20:55:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-04-05 20:55:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-04-05 20:55:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-04-05 20:55:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-04-05 20:55:44 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-04-05 20:55:44 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-04-05 20:55:44 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-04-05 20:55:44 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-04-05 20:55:44 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-04-05 20:55:44 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-04-05 20:55:44 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-04-05 20:55:44 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-04-05 20:55:44 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-04-05 20:55:44 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-04-05 20:55:44 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-04-05 20:55:44 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-04-05 20:55:44 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-04-05 20:55:44 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-04-05 20:55:44 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-04-05 20:55:44 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-04-05 20:55:44 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-04-05 20:55:44 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-04-05 20:55:44 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-04-05 20:55:44 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-04-05 20:55:44 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-04-05 20:55:44 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-04-05 20:55:44 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-04-05 20:55:44 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-04-05 20:55:44 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-04-05 20:55:44 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-04-05 20:55:44 ----A---- C:\Windows\system32\XpsPrint.dll
2013-04-05 20:55:44 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-04-05 20:55:44 ----A---- C:\Windows\system32\WMPhoto.dll
2013-04-05 20:55:44 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-04-05 20:55:44 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-04-05 20:55:44 ----A---- C:\Windows\system32\UIAnimation.dll
2013-04-05 20:55:44 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-04-05 20:55:44 ----A---- C:\Windows\system32\FntCache.dll
2013-04-05 20:55:44 ----A---- C:\Windows\system32\dxgi.dll
2013-04-05 20:55:44 ----A---- C:\Windows\system32\DWrite.dll
2013-04-05 20:55:44 ----A---- C:\Windows\system32\d3d11.dll
2013-04-05 20:55:44 ----A---- C:\Windows\system32\d3d10warp.dll
2013-04-05 20:55:44 ----A---- C:\Windows\system32\d3d10level9.dll
2013-04-05 20:55:44 ----A---- C:\Windows\system32\d3d10core.dll
2013-04-05 20:55:44 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-04-05 20:55:44 ----A---- C:\Windows\system32\d3d10_1.dll
2013-04-05 20:55:44 ----A---- C:\Windows\system32\d3d10.dll
2013-04-05 20:55:44 ----A---- C:\Windows\system32\d2d1.dll
2013-04-05 20:29:19 ----D---- C:\Windows\system32\SPReview
2013-04-05 20:28:44 ----D---- C:\Windows\system32\EventProviders
2013-04-05 20:27:16 ----A---- C:\Windows\system32\netfxperf.dll
2013-04-05 20:27:16 ----A---- C:\Windows\system32\dfshim.dll
2013-04-05 20:27:12 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2013-04-05 20:27:10 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-04-05 20:27:10 ----A---- C:\Windows\system32\mstscax.dll
2013-04-05 20:27:10 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-04-05 20:27:08 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-04-05 20:27:07 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2013-04-05 20:27:07 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2013-04-05 20:27:06 ----A---- C:\Windows\system32\tssrvlic.dll
2013-04-05 20:27:06 ----A---- C:\Windows\system32\sysmain.dll
2013-04-05 20:27:06 ----A---- C:\Windows\system32\RDVGHelper.exe
2013-04-05 20:27:05 ----A---- C:\Windows\SYSWOW64\pmcsnap.dll
2013-04-05 20:27:05 ----A---- C:\Windows\system32\MSVidCtl.dll
2013-04-05 20:27:04 ----A---- C:\Windows\system32\wmp.dll
2013-04-05 20:27:04 ----A---- C:\Windows\system32\mscoree.dll
2013-04-05 20:27:04 ----A---- C:\Windows\system32\mmcndmgr.dll
2013-04-05 20:27:03 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2013-04-05 20:27:03 ----A---- C:\Windows\system32\secproc_isv.dll
2013-04-05 20:27:03 ----A---- C:\Windows\system32\secproc.dll
2013-04-05 20:27:03 ----A---- C:\Windows\system32\RMActivate_isv.exe
2013-04-05 20:27:03 ----A---- C:\Windows\system32\RMActivate.exe
2013-04-05 20:27:03 ----A---- C:\Windows\system32\mf.dll
2013-04-05 20:27:01 ----A---- C:\Windows\SYSWOW64\secproc.dll
2013-04-05 20:27:01 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2013-04-05 20:27:01 ----A---- C:\Windows\system32\xpsservices.dll
2013-04-05 20:27:01 ----A---- C:\Windows\system32\rpcrt4.dll
2013-04-05 20:27:00 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2013-04-05 20:27:00 ----A---- C:\Windows\SYSWOW64\PushPrinterConnections.exe
2013-04-05 20:27:00 ----A---- C:\Windows\SYSWOW64\ppcsnap.dll
2013-04-05 20:27:00 ----A---- C:\Windows\system32\schedsvc.dll
2013-04-05 20:27:00 ----A---- C:\Windows\system32\ole32.dll
2013-04-05 20:26:59 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2013-04-05 20:26:59 ----A---- C:\Windows\system32\spwizui.dll
2013-04-05 20:26:58 ----A---- C:\Windows\SYSWOW64\mf.dll
2013-04-05 20:26:58 ----A---- C:\Windows\system32\wevtsvc.dll
2013-04-05 20:26:58 ----A---- C:\Windows\system32\vssapi.dll
2013-04-05 20:26:58 ----A---- C:\Windows\system32\taskschd.dll
2013-04-05 20:26:58 ----A---- C:\Windows\system32\RacEngn.dll
2013-04-05 20:26:58 ----A---- C:\Windows\system32\ExplorerFrame.dll
2013-04-05 20:26:58 ----A---- C:\Windows\system32\diagperf.dll
2013-04-05 20:26:57 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2013-04-05 20:26:57 ----A---- C:\Windows\system32\UIRibbon.dll
2013-04-05 20:26:57 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2013-04-05 20:26:57 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2013-04-05 20:26:57 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2013-04-05 20:26:56 ----A---- C:\Windows\SYSWOW64\wmp.dll
2013-04-05 20:26:56 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2013-04-05 20:26:56 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2013-04-05 20:26:56 ----A---- C:\Windows\system32\WsmSvc.dll
2013-04-05 20:26:56 ----A---- C:\Windows\system32\WMVCORE.DLL
2013-04-05 20:26:55 ----A---- C:\Windows\system32\WinSAT.exe
2013-04-05 20:26:55 ----A---- C:\Windows\system32\spreview.exe
2013-04-05 20:26:55 ----A---- C:\Windows\system32\spinstall.exe
2013-04-05 20:26:55 ----A---- C:\Windows\system32\rdpdd.dll
2013-04-05 20:26:55 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2013-04-05 20:26:55 ----A---- C:\Windows\system32\PresentationHost.exe
2013-04-05 20:26:55 ----A---- C:\Windows\system32\MPSSVC.dll
2013-04-05 20:26:55 ----A---- C:\Windows\system32\CertEnroll.dll
2013-04-05 20:26:54 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2013-04-05 20:26:54 ----A---- C:\Windows\system32\WMVDECOD.DLL
2013-04-05 20:26:54 ----A---- C:\Windows\system32\SearchFolder.dll
2013-04-05 20:26:54 ----A---- C:\Windows\system32\IKEEXT.DLL
2013-04-05 20:26:54 ----A---- C:\Windows\system32\d3d9.dll
2013-04-05 20:26:53 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2013-04-05 20:26:53 ----A---- C:\Windows\system32\VSSVC.exe
2013-04-05 20:26:53 ----A---- C:\Windows\system32\gpsvc.dll
2013-04-05 20:26:53 ----A---- C:\Windows\system32\dwmcore.dll
2013-04-05 20:26:53 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2013-04-05 20:26:52 ----A---- C:\Windows\SYSWOW64\rdvgumd32.dll
2013-04-05 20:26:52 ----A---- C:\Windows\system32\drivers\ndis.sys
2013-04-05 20:26:52 ----A---- C:\Windows\system32\drivers\http.sys
2013-04-05 20:26:52 ----A---- C:\Windows\system32\dbgeng.dll
2013-04-05 20:26:51 ----A---- C:\Windows\SYSWOW64\ole32.dll
2013-04-05 20:26:51 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2013-04-05 20:26:51 ----A---- C:\Windows\system32\TSWorkspace.dll
2013-04-05 20:26:51 ----A---- C:\Windows\system32\termsrv.dll
2013-04-05 20:26:51 ----A---- C:\Windows\system32\qmgr.dll
2013-04-05 20:26:51 ----A---- C:\Windows\system32\gpprefcl.dll
2013-04-05 20:26:51 ----A---- C:\Windows\system32\audiosrv.dll
2013-04-05 20:26:51 ----A---- C:\Windows\system32\actxprxy.dll
2013-04-05 20:26:50 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2013-04-05 20:26:50 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2013-04-05 20:26:50 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2013-04-05 20:26:50 ----A---- C:\Windows\system32\winhttp.dll
2013-04-05 20:26:50 ----A---- C:\Windows\system32\netlogon.dll
2013-04-05 20:26:50 ----A---- C:\Windows\system32\msv1_0.dll
2013-04-05 20:26:50 ----A---- C:\Windows\system32\mstsc.exe
2013-04-05 20:26:50 ----A---- C:\Windows\system32\imapi2fs.dll
2013-04-05 20:26:49 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2013-04-05 20:26:49 ----A---- C:\Windows\system32\wbengine.exe
2013-04-05 20:26:49 ----A---- C:\Windows\system32\setupapi.dll
2013-04-05 20:26:49 ----A---- C:\Windows\system32\rpcss.dll
2013-04-05 20:26:49 ----A---- C:\Windows\system32\QAGENTRT.DLL
2013-04-05 20:26:49 ----A---- C:\Windows\system32\PushPrinterConnections.exe
2013-04-05 20:26:49 ----A---- C:\Windows\system32\propsys.dll
2013-04-05 20:26:49 ----A---- C:\Windows\system32\authui.dll
2013-04-05 20:26:48 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2013-04-05 20:26:48 ----A---- C:\Windows\system32\WSDApi.dll
2013-04-05 20:26:48 ----A---- C:\Windows\system32\werconcpl.dll
2013-04-05 20:26:48 ----A---- C:\Windows\system32\user32.dll
2013-04-05 20:26:48 ----A---- C:\Windows\system32\umrdp.dll
2013-04-05 20:26:48 ----A---- C:\Windows\system32\taskeng.exe
2013-04-05 20:26:48 ----A---- C:\Windows\system32\odbc32.dll
2013-04-05 20:26:48 ----A---- C:\Windows\system32\LSCSHostPolicy.dll
2013-04-05 20:26:48 ----A---- C:\Windows\system32\drivers\tdx.sys
2013-04-05 20:26:48 ----A---- C:\Windows\system32\dhcpcore.dll
2013-04-05 20:26:48 ----A---- C:\Windows\system32\certmgr.dll
2013-04-05 20:26:47 ----A---- C:\Windows\SYSWOW64\wer.dll
2013-04-05 20:26:47 ----A---- C:\Windows\SYSWOW64\certcli.dll
2013-04-05 20:26:47 ----A---- C:\Windows\system32\tsmf.dll
2013-04-05 20:26:47 ----A---- C:\Windows\system32\scavengeui.dll
2013-04-05 20:26:47 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2013-04-05 20:26:47 ----A---- C:\Windows\system32\ncsi.dll
2013-04-05 20:26:47 ----A---- C:\Windows\system32\drivers\netbt.sys
2013-04-05 20:26:46 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2013-04-05 20:26:46 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2013-04-05 20:26:46 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2013-04-05 20:26:46 ----A---- C:\Windows\system32\ws2_32.dll
2013-04-05 20:26:46 ----A---- C:\Windows\system32\wmicmiplugin.dll
2013-04-05 20:26:46 ----A---- C:\Windows\system32\winlogon.exe
2013-04-05 20:26:46 ----A---- C:\Windows\system32\shlwapi.dll
2013-04-05 20:26:46 ----A---- C:\Windows\system32\rdpshell.exe
2013-04-05 20:26:46 ----A---- C:\Windows\system32\netshell.dll
2013-04-05 20:26:46 ----A---- C:\Windows\system32\netcfgx.dll
2013-04-05 20:26:46 ----A---- C:\Windows\system32\msdtctm.dll
2013-04-05 20:26:46 ----A---- C:\Windows\system32\msdrm.dll
2013-04-05 20:26:46 ----A---- C:\Windows\system32\framedynos.dll
2013-04-05 20:26:46 ----A---- C:\Windows\system32\appmgr.dll
2013-04-05 20:26:45 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2013-04-05 20:26:45 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2013-04-05 20:26:45 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2013-04-05 20:26:45 ----A---- C:\Windows\system32\wpdshext.dll
2013-04-05 20:26:45 ----A---- C:\Windows\system32\wmpps.dll
2013-04-05 20:26:45 ----A---- C:\Windows\system32\Query.dll
2013-04-05 20:26:45 ----A---- C:\Windows\system32\nlasvc.dll
2013-04-05 20:26:45 ----A---- C:\Windows\system32\mswsock.dll
2013-04-05 20:26:45 ----A---- C:\Windows\system32\lsm.exe
2013-04-05 20:26:45 ----A---- C:\Windows\system32\drvstore.dll
2013-04-05 20:26:45 ----A---- C:\Windows\system32\drivers\csc.sys
2013-04-05 20:26:45 ----A---- C:\Windows\system32\comdlg32.dll
2013-04-05 20:26:45 ----A---- C:\Windows\system32\azroles.dll
2013-04-05 20:26:45 ----A---- C:\Windows\system32\apphelp.dll
2013-04-05 20:26:44 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2013-04-05 20:26:44 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2013-04-05 20:26:44 ----A---- C:\Windows\SYSWOW64\printmanagement.msc
2013-04-05 20:26:44 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2013-04-05 20:26:44 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2013-04-05 20:26:44 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2013-04-05 20:26:44 ----A---- C:\Windows\system32\Vault.dll
2013-04-05 20:26:44 ----A---- C:\Windows\system32\samsrv.dll
2013-04-05 20:26:44 ----A---- C:\Windows\system32\QAGENT.DLL
2013-04-05 20:26:44 ----A---- C:\Windows\system32\lpksetup.exe
2013-04-05 20:26:44 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2013-04-05 20:26:44 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-04-05 20:26:44 ----A---- C:\Windows\system32\cmd.exe
2013-04-05 20:26:44 ----A---- C:\Windows\system32\BFE.DLL
2013-04-05 20:26:43 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2013-04-05 20:26:43 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2013-04-05 20:26:43 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2013-04-05 20:26:43 ----A---- C:\Windows\system32\WebClnt.dll
2013-04-05 20:26:43 ----A---- C:\Windows\system32\rdpclip.exe
2013-04-05 20:26:43 ----A---- C:\Windows\system32\cscsvc.dll
2013-04-05 20:26:42 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2013-04-05 20:26:42 ----A---- C:\Windows\SYSWOW64\upnp.dll
2013-04-05 20:26:42 ----A---- C:\Windows\SYSWOW64\Query.dll
2013-04-05 20:26:42 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2013-04-05 20:26:42 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2013-04-05 20:26:42 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2013-04-05 20:26:42 ----A---- C:\Windows\SYSWOW64\gpprefcl.dll
2013-04-05 20:26:42 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2013-04-05 20:26:42 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2013-04-05 20:26:42 ----A---- C:\Windows\system32\Wldap32.dll
2013-04-05 20:26:42 ----A---- C:\Windows\system32\webservices.dll
2013-04-05 20:26:42 ----A---- C:\Windows\system32\taskcomp.dll
2013-04-05 20:26:42 ----A---- C:\Windows\system32\sxs.dll
2013-04-05 20:26:42 ----A---- C:\Windows\system32\rdpendp.dll
2013-04-05 20:26:42 ----A---- C:\Windows\system32\pnidui.dll
2013-04-05 20:26:42 ----A---- C:\Windows\system32\mfds.dll
2013-04-05 20:26:42 ----A---- C:\Windows\system32\mcbuilder.exe
2013-04-05 20:26:42 ----A---- C:\Windows\system32\ipsmsnap.dll
2013-04-05 20:26:42 ----A---- C:\Windows\system32\hgprint.dll
2013-04-05 20:26:42 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2013-04-05 20:26:42 ----A---- C:\Windows\system32\cscobj.dll
2013-04-05 20:26:41 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2013-04-05 20:26:41 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2013-04-05 20:26:41 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2013-04-05 20:26:41 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2013-04-05 20:26:41 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2013-04-05 20:26:41 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-04-05 20:26:41 ----A---- C:\Windows\system32\winsta.dll
2013-04-05 20:26:41 ----A---- C:\Windows\system32\sqlsrv32.dll
2013-04-05 20:26:41 ----A---- C:\Windows\system32\SessEnv.dll
2013-04-05 20:26:41 ----A---- C:\Windows\system32\fveapi.dll
2013-04-05 20:26:41 ----A---- C:\Windows\system32\drivers\msrpc.sys
2013-04-05 20:26:41 ----A---- C:\Windows\system32\dot3api.dll
2013-04-05 20:26:40 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2013-04-05 20:26:40 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2013-04-05 20:26:40 ----A---- C:\Windows\SYSWOW64\userenv.dll
2013-04-05 20:26:40 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe
2013-04-05 20:26:40 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2013-04-05 20:26:40 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2013-04-05 20:26:40 ----A---- C:\Windows\system32\WMNetMgr.dll
2013-04-05 20:26:40 ----A---- C:\Windows\system32\wlanpref.dll
2013-04-05 20:26:40 ----A---- C:\Windows\system32\vpnike.dll
2013-04-05 20:26:40 ----A---- C:\Windows\system32\userenv.dll
2013-04-05 20:26:40 ----A---- C:\Windows\system32\tspubwmi.dll
2013-04-05 20:26:40 ----A---- C:\Windows\system32\schtasks.exe
2013-04-05 20:26:40 ----A---- C:\Windows\system32\prncache.dll
2013-04-05 20:26:40 ----A---- C:\Windows\system32\photowiz.dll
2013-04-05 20:26:40 ----A---- C:\Windows\system32\mcmde.dll
2013-04-05 20:26:40 ----A---- C:\Windows\system32\gdi32.dll
2013-04-05 20:26:40 ----A---- C:\Windows\system32\evr.dll
2013-04-05 20:26:40 ----A---- C:\Windows\system32\drivers\volsnap.sys
2013-04-05 20:26:40 ----A---- C:\Windows\system32\drivers\rdbss.sys
2013-04-05 20:26:40 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2013-04-05 20:26:39 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2013-04-05 20:26:39 ----A---- C:\Windows\SYSWOW64\cmd.exe
2013-04-05 20:26:39 ----A---- C:\Windows\system32\wmpmde.dll
2013-04-05 20:26:39 ----A---- C:\Windows\system32\WMPEncEn.dll
2013-04-05 20:26:39 ----A---- C:\Windows\system32\wmpeffects.dll
2013-04-05 20:26:39 ----A---- C:\Windows\system32\SyncCenter.dll
2013-04-05 20:26:39 ----A---- C:\Windows\system32\sppobjs.dll
2013-04-05 20:26:39 ----A---- C:\Windows\system32\mfreadwrite.dll
2013-04-05 20:26:39 ----A---- C:\Windows\system32\IPSECSVC.DLL
2013-04-05 20:26:39 ----A---- C:\Windows\system32\FXSSVC.exe
2013-04-05 20:26:39 ----A---- C:\Windows\system32\framedyn.dll
2013-04-05 20:26:39 ----A---- C:\Windows\system32\AudioSes.dll
2013-04-05 20:26:39 ----A---- C:\Windows\system32\aepdu.dll
2013-04-05 20:26:38 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2013-04-05 20:26:38 ----A---- C:\Windows\SYSWOW64\rdpendp.dll
2013-04-05 20:26:38 ----A---- C:\Windows\SYSWOW64\propsys.dll
2013-04-05 20:26:38 ----A---- C:\Windows\SYSWOW64\mfds.dll
2013-04-05 20:26:38 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2013-04-05 20:26:38 ----A---- C:\Windows\system32\WinSATAPI.dll
2013-04-05 20:26:38 ----A---- C:\Windows\system32\vmicsvc.exe
2013-04-05 20:26:38 ----A---- C:\Windows\system32\tscfgwmi.dll
2013-04-05 20:26:38 ----A---- C:\Windows\system32\stobject.dll
2013-04-05 20:26:38 ----A---- C:\Windows\system32\srvsvc.dll
2013-04-05 20:26:38 ----A---- C:\Windows\system32\shsvcs.dll
2013-04-05 20:26:38 ----A---- C:\Windows\system32\rdpinit.exe
2013-04-05 20:26:38 ----A---- C:\Windows\system32\netdiagfx.dll
2013-04-05 20:26:38 ----A---- C:\Windows\system32\localsec.dll
2013-04-05 20:26:38 ----A---- C:\Windows\system32\imapi2.dll
2013-04-05 20:26:38 ----A---- C:\Windows\system32\fde.dll
2013-04-05 20:26:38 ----A---- C:\Windows\system32\drivers\vmbus.sys
2013-04-05 20:26:38 ----A---- C:\Windows\system32\drivers\udfs.sys
2013-04-05 20:26:38 ----A---- C:\Windows\system32\credui.dll
2013-04-05 20:26:38 ----A---- C:\Windows\system32\cdd.dll
2013-04-05 20:26:38 ----A---- C:\Windows\system32\bcryptprimitives.dll
2013-04-05 20:26:38 ----A---- C:\Windows\system32\aeinv.dll
2013-04-05 20:26:37 ----A---- C:\Windows\SYSWOW64\user32.dll
2013-04-05 20:26:37 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2013-04-05 20:26:37 ----A---- C:\Windows\SYSWOW64\azroles.dll
2013-04-05 20:26:37 ----A---- C:\Windows\SYSWOW64\appmgr.dll
2013-04-05 20:26:37 ----A---- C:\Windows\system32\tcpipcfg.dll
2013-04-05 20:26:37 ----A---- C:\Windows\system32\spp.dll
2013-04-05 20:26:37 ----A---- C:\Windows\system32\QSHVHOST.DLL
2013-04-05 20:26:37 ----A---- C:\Windows\system32\printui.dll
2013-04-05 20:26:37 ----A---- C:\Windows\system32\netid.dll
2013-04-05 20:26:37 ----A---- C:\Windows\system32\msinfo32.exe
2013-04-05 20:26:37 ----A---- C:\Windows\system32\iphlpsvc.dll
2013-04-05 20:26:37 ----A---- C:\Windows\system32\inetpp.dll
2013-04-05 20:26:37 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2013-04-05 20:26:37 ----A---- C:\Windows\system32\davclnt.dll
2013-04-05 20:26:37 ----A---- C:\Windows\system32\cscui.dll
2013-04-05 20:26:37 ----A---- C:\Windows\system32\biocpl.dll
2013-04-05 20:26:36 ----A---- C:\Windows\SYSWOW64\themeui.dll
2013-04-05 20:26:36 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2013-04-05 20:26:36 ----A---- C:\Windows\SYSWOW64\spp.dll
2013-04-05 20:26:36 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2013-04-05 20:26:36 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2013-04-05 20:26:36 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2013-04-05 20:26:36 ----A---- C:\Windows\SYSWOW64\credui.dll
2013-04-05 20:26:36 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2013-04-05 20:26:36 ----A---- C:\Windows\system32\wusa.exe
2013-04-05 20:26:36 ----A---- C:\Windows\system32\wiaservc.dll
2013-04-05 20:26:36 ----A---- C:\Windows\system32\vds.exe
2013-04-05 20:26:36 ----A---- C:\Windows\system32\scansetting.dll
2013-04-05 20:26:36 ----A---- C:\Windows\system32\rpchttp.dll
2013-04-05 20:26:36 ----A---- C:\Windows\system32\pla.dll
2013-04-05 20:26:36 ----A---- C:\Windows\system32\PhotoScreensaver.scr
2013-04-05 20:26:36 ----A---- C:\Windows\system32\mspbda.dll
2013-04-05 20:26:36 ----A---- C:\Windows\system32\msdri.dll
2013-04-05 20:26:36 ----A---- C:\Windows\system32\mscms.dll
2013-04-05 20:26:36 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2013-04-05 20:26:36 ----A---- C:\Windows\system32\drivers\pci.sys
2013-04-05 20:26:36 ----A---- C:\Windows\system32\aitagent.exe
2013-04-05 20:26:36 ----A---- C:\Windows\system32\AdmTmpl.dll
2013-04-05 20:26:35 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2013-04-05 20:26:35 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2013-04-05 20:26:35 ----A---- C:\Windows\SYSWOW64\evr.dll
2013-04-05 20:26:35 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2013-04-05 20:26:35 ----A---- C:\Windows\system32\XpsRasterService.dll
2013-04-05 20:26:35 ----A---- C:\Windows\system32\wisptis.exe
2013-04-05 20:26:35 ----A---- C:\Windows\system32\sppwinob.dll
2013-04-05 20:26:35 ----A---- C:\Windows\system32\PkgMgr.exe
2013-04-05 20:26:35 ----A---- C:\Windows\system32\ocsetup.exe
2013-04-05 20:26:35 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2013-04-05 20:26:35 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2013-04-05 20:26:35 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2013-04-05 20:26:34 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2013-04-05 20:26:34 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2013-04-05 20:26:34 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2013-04-05 20:26:34 ----A---- C:\Windows\SYSWOW64\calc.exe
2013-04-05 20:26:34 ----A---- C:\Windows\system32\wpdbusenum.dll
2013-04-05 20:26:34 ----A---- C:\Windows\system32\wcncsvc.dll
2013-04-05 20:26:34 ----A---- C:\Windows\system32\upnp.dll
2013-04-05 20:26:34 ----A---- C:\Windows\system32\t2embed.dll
2013-04-05 20:26:34 ----A---- C:\Windows\system32\Robocopy.exe
2013-04-05 20:26:34 ----A---- C:\Windows\system32\ocsetapi.dll
2013-04-05 20:26:34 ----A---- C:\Windows\system32\mprapi.dll
2013-04-05 20:26:34 ----A---- C:\Windows\system32\eapphost.dll
2013-04-05 20:26:34 ----A---- C:\Windows\system32\eapp3hst.dll
2013-04-05 20:26:34 ----A---- C:\Windows\system32\DXP.dll
2013-04-05 20:26:34 ----A---- C:\Windows\system32\drivers\volmgr.sys
2013-04-05 20:26:34 ----A---- C:\Windows\system32\drivers\msdsm.sys
2013-04-05 20:26:34 ----A---- C:\Windows\system32\drivers\HpSAMD.sys
2013-04-05 20:26:34 ----A---- C:\Windows\system32\ci.dll
2013-04-05 20:26:33 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2013-04-05 20:26:33 ----A---- C:\Windows\SYSWOW64\sxs.dll
2013-04-05 20:26:33 ----A---- C:\Windows\SYSWOW64\stobject.dll
2013-04-05 20:26:33 ----A---- C:\Windows\SYSWOW64\prncache.dll
2013-04-05 20:26:33 ----A---- C:\Windows\SYSWOW64\netshell.dll
2013-04-05 20:26:33 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2013-04-05 20:26:33 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2013-04-05 20:26:33 ----A---- C:\Windows\system32\thumbcache.dll
2013-04-05 20:26:33 ----A---- C:\Windows\system32\themeui.dll
2013-04-05 20:26:33 ----A---- C:\Windows\system32\scecli.dll
2013-04-05 20:26:33 ----A---- C:\Windows\system32\puiobj.dll
2013-04-05 20:26:33 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2013-04-05 20:26:33 ----A---- C:\Windows\system32\nlaapi.dll
2013-04-05 20:26:33 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2013-04-05 20:26:33 ----A---- C:\Windows\system32\msasn1.dll
2013-04-05 20:26:33 ----A---- C:\Windows\system32\iasrad.dll
2013-04-05 20:26:33 ----A---- C:\Windows\system32\hal.dll
2013-04-05 20:26:33 ----A---- C:\Windows\system32\DxpTaskSync.dll
2013-04-05 20:26:33 ----A---- C:\Windows\system32\dwmredir.dll
2013-04-05 20:26:33 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys
2013-04-05 20:26:33 ----A---- C:\Windows\system32\drivers\fvevol.sys
2013-04-05 20:26:33 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2013-04-05 20:26:32 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2013-04-05 20:26:32 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2013-04-05 20:26:32 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2013-04-05 20:26:32 ----A---- C:\Windows\SYSWOW64\printui.dll
2013-04-05 20:26:32 ----A---- C:\Windows\SYSWOW64\net1.exe
2013-04-05 20:26:32 ----A---- C:\Windows\system32\wdc.dll
2013-04-05 20:26:32 ----A---- C:\Windows\system32\scrptadm.dll
2013-04-05 20:26:32 ----A---- C:\Windows\system32\onex.dll
2013-04-05 20:26:32 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2013-04-05 20:26:32 ----A---- C:\Windows\system32\aaclient.dll
2013-04-05 20:26:31 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2013-04-05 20:26:31 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2013-04-05 20:26:31 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2013-04-05 20:26:31 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2013-04-05 20:26:31 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2013-04-05 20:26:31 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2013-04-05 20:26:31 ----A---- C:\Windows\system32\wscapi.dll
2013-04-05 20:26:31 ----A---- C:\Windows\system32\wlangpui.dll
2013-04-05 20:26:31 ----A---- C:\Windows\system32\wiadefui.dll
2013-04-05 20:26:31 ----A---- C:\Windows\system32\VAN.dll
2013-04-05 20:26:31 ----A---- C:\Windows\system32\StructuredQuery.dll
2013-04-05 20:26:31 ----A---- C:\Windows\system32\SndVol.exe
2013-04-05 20:26:31 ----A---- C:\Windows\system32\sdengin2.dll
2013-04-05 20:26:31 ----A---- C:\Windows\system32\scesrv.dll
2013-04-05 20:26:31 ----A---- C:\Windows\system32\samcli.dll
2013-04-05 20:26:31 ----A---- C:\Windows\system32\regapi.dll
2013-04-05 20:26:31 ----A---- C:\Windows\system32\rasmans.dll
2013-04-05 20:26:31 ----A---- C:\Windows\system32\netcenter.dll
2013-04-05 20:26:31 ----A---- C:\Windows\system32\msftedit.dll
2013-04-05 20:26:31 ----A---- C:\Windows\system32\iasacct.dll
2013-04-05 20:26:31 ----A---- C:\Windows\system32\dskquoui.dll
2013-04-05 20:26:31 ----A---- C:\Windows\system32\drivers\termdd.sys
2013-04-05 20:26:31 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2013-04-05 20:26:30 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2013-04-05 20:26:30 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2013-04-05 20:26:30 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2013-04-05 20:26:30 ----A---- C:\Windows\SYSWOW64\webservices.dll
2013-04-05 20:26:30 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2013-04-05 20:26:30 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll
2013-04-05 20:26:30 ----A---- C:\Windows\SYSWOW64\scrptadm.dll
2013-04-05 20:26:30 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2013-04-05 20:26:30 ----A---- C:\Windows\SYSWOW64\pnidui.dll
2013-04-05 20:26:30 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2013-04-05 20:26:30 ----A---- C:\Windows\SYSWOW64\fde.dll
2013-04-05 20:26:30 ----A---- C:\Windows\system32\wksprt.exe
2013-04-05 20:26:30 ----A---- C:\Windows\system32\TabSvc.dll
2013-04-05 20:26:30 ----A---- C:\Windows\system32\srchadmin.dll
2013-04-05 20:26:30 ----A---- C:\Windows\system32\setupcl.exe
2013-04-05 20:26:30 ----A---- C:\Windows\system32\rastls.dll
2013-04-05 20:26:30 ----A---- C:\Windows\system32\QUTIL.DLL
2013-04-05 20:26:30 ----A---- C:\Windows\system32\drivers\msahci.sys
2013-04-05 20:26:30 ----A---- C:\Windows\system32\drivers\acpi.sys
2013-04-05 20:26:30 ----A---- C:\Windows\system32\consent.exe
2013-04-05 20:26:29 ----A---- C:\Windows\SYSWOW64\winsta.dll
2013-04-05 20:26:29 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2013-04-05 20:26:29 ----A---- C:\Windows\SYSWOW64\pla.dll
2013-04-05 20:26:29 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2013-04-05 20:26:29 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2013-04-05 20:26:29 ----A---- C:\Windows\SYSWOW64\cscobj.dll
2013-04-05 20:26:29 ----A---- C:\Windows\system32\tapisrv.dll
2013-04-05 20:26:29 ----A---- C:\Windows\system32\netiohlp.dll
2013-04-05 20:26:29 ----A---- C:\Windows\system32\msconfig.exe
2013-04-05 20:26:29 ----A---- C:\Windows\system32\mimefilt.dll
2013-04-05 20:26:29 ----A---- C:\Windows\system32\lsmproxy.dll
2013-04-05 20:26:29 ----A---- C:\Windows\system32\ListSvc.dll
2013-04-05 20:26:29 ----A---- C:\Windows\system32\hgcpl.dll
2013-04-05 20:26:29 ----A---- C:\Windows\system32\fdeploy.dll
2013-04-05 20:26:29 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2013-04-05 20:26:29 ----A---- C:\Windows\system32\drivers\raspptp.sys
2013-04-05 20:26:29 ----A---- C:\Windows\system32\drivers\ks.sys
2013-04-05 20:26:29 ----A---- C:\Windows\system32\clusapi.dll
2013-04-05 20:26:29 ----A---- C:\Windows\system32\basecsp.dll
2013-04-05 20:26:29 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2013-04-05 20:26:28 ----A---- C:\Windows\SYSWOW64\WMPEncEn.dll
2013-04-05 20:26:28 ----A---- C:\Windows\SYSWOW64\onex.dll
2013-04-05 20:26:28 ----A---- C:\Windows\SYSWOW64\imapi2.dll
2013-04-05 20:26:28 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll
2013-04-05 20:26:28 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-04-05 20:26:28 ----A---- C:\Windows\system32\sharemediacpl.dll
2013-04-05 20:26:28 ----A---- C:\Windows\system32\RpcRtRemote.dll
2013-04-05 20:26:28 ----A---- C:\Windows\system32\riched20.dll
2013-04-05 20:26:28 ----A---- C:\Windows\system32\powercpl.dll
2013-04-05 20:26:28 ----A---- C:\Windows\system32\mtxclu.dll
2013-04-05 20:26:28 ----A---- C:\Windows\system32\logoncli.dll
2013-04-05 20:26:28 ----A---- C:\Windows\system32\dnscmmc.dll
2013-04-05 20:26:27 ----A---- C:\Windows\SYSWOW64\winmm.dll
2013-04-05 20:26:27 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2013-04-05 20:26:27 ----A---- C:\Windows\SYSWOW64\samcli.dll
2013-04-05 20:26:27 ----A---- C:\Windows\SYSWOW64\proquota.exe
2013-04-05 20:26:27 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2013-04-05 20:26:27 ----A---- C:\Windows\SYSWOW64\msutb.dll
2013-04-05 20:26:27 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2013-04-05 20:26:27 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2013-04-05 20:26:27 ----A---- C:\Windows\SYSWOW64\autochk.exe
2013-04-05 20:26:27 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2013-04-05 20:26:27 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2013-04-05 20:26:27 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2013-04-05 20:26:27 ----A---- C:\Windows\system32\wkssvc.dll
2013-04-05 20:26:27 ----A---- C:\Windows\system32\vpnikeapi.dll
2013-04-05 20:26:27 ----A---- C:\Windows\system32\themecpl.dll
2013-04-05 20:26:27 ----A---- C:\Windows\system32\sppcomapi.dll
2013-04-05 20:26:27 ----A---- C:\Windows\system32\SensorsCpl.dll
2013-04-05 20:26:27 ----A---- C:\Windows\system32\netjoin.dll
2013-04-05 20:26:27 ----A---- C:\Windows\system32\nci.dll
2013-04-05 20:26:27 ----A---- C:\Windows\system32\Narrator.exe
2013-04-05 20:26:27 ----A---- C:\Windows\system32\Faultrep.dll
2013-04-05 20:26:27 ----A---- C:\Windows\system32\eudcedit.exe
2013-04-05 20:26:27 ----A---- C:\Windows\system32\comctl32.dll
2013-04-05 20:26:27 ----A---- C:\Windows\system32\cabview.dll
2013-04-05 20:26:27 ----A---- C:\Windows\system32\autochk.exe
2013-04-05 20:26:27 ----A---- C:\Windows\system32\autofmt.exe
2013-04-05 20:26:26 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2013-04-05 20:26:26 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2013-04-05 20:26:26 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2013-04-05 20:26:26 ----A---- C:\Windows\SYSWOW64\srchadmin.dll
2013-04-05 20:26:26 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2013-04-05 20:26:26 ----A---- C:\Windows\SYSWOW64\regapi.dll
2013-04-05 20:26:26 ----A---- C:\Windows\SYSWOW64\powercpl.dll
2013-04-05 20:26:26 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2013-04-05 20:26:26 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2013-04-05 20:26:26 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2013-04-05 20:26:26 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2013-04-05 20:26:26 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2013-04-05 20:26:26 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2013-04-05 20:26:26 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2013-04-05 20:26:26 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2013-04-05 20:26:26 ----A---- C:\Windows\system32\wwanconn.dll
2013-04-05 20:26:26 ----A---- C:\Windows\system32\wpd_ci.dll
2013-04-05 20:26:26 ----A---- C:\Windows\system32\wlanui.dll
2013-04-05 20:26:26 ----A---- C:\Windows\system32\SmiEngine.dll
2013-04-05 20:26:26 ----A---- C:\Windows\system32\shsetup.dll
2013-04-05 20:26:26 ----A---- C:\Windows\system32\sdclt.exe
2013-04-05 20:26:26 ----A---- C:\Windows\system32\rdpsign.exe
2013-04-05 20:26:26 ----A---- C:\Windows\system32\prntvpt.dll
2013-04-05 20:26:26 ----A---- C:\Windows\system32\nshipsec.dll
2013-04-05 20:26:26 ----A---- C:\Windows\system32\mscorier.dll
2013-04-05 20:26:26 ----A---- C:\Windows\system32\fms.dll
2013-04-05 20:26:26 ----A---- C:\Windows\system32\drivers\winusb.sys
2013-04-05 20:26:26 ----A---- C:\Windows\system32\drivers\wanarp.sys
2013-04-05 20:26:26 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2013-04-05 20:26:26 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2013-04-05 20:26:26 ----A---- C:\Windows\system32\drivers\scsiport.sys
2013-04-05 20:26:26 ----A---- C:\Windows\system32\dps.dll
2013-04-05 20:26:26 ----A---- C:\Windows\system32\bcdsrv.dll
2013-04-05 20:26:26 ----A---- C:\Windows\system32\autoconv.exe
2013-04-05 20:26:26 ----A---- C:\Windows\system32\audiodg.exe
2013-04-05 20:26:25 ----A---- C:\Windows\SYSWOW64\wdc.dll
2013-04-05 20:26:25 ----A---- C:\Windows\SYSWOW64\Vault.dll
2013-04-05 20:26:25 ----A---- C:\Windows\SYSWOW64\untfs.dll

2013-04-05 20:26:25 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2013-04-05 20:26:25 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2013-04-05 20:26:25 ----A---- C:\Windows\SYSWOW64\rastls.dll
2013-04-05 20:26:25 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL
2013-04-05 20:26:25 ----A---- C:\Windows\SYSWOW64\netid.dll
2013-04-05 20:26:25 ----A---- C:\Windows\SYSWOW64\nci.dll
2013-04-05 20:26:25 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2013-04-05 20:26:25 ----A---- C:\Windows\system32\wmpsrcwp.dll
2013-04-05 20:26:25 ----A---- C:\Windows\system32\qedit.dll
2013-04-05 20:26:25 ----A---- C:\Windows\system32\mprddm.dll
2013-04-05 20:26:25 ----A---- C:\Windows\system32\mblctr.exe
2013-04-05 20:26:25 ----A---- C:\Windows\system32\fontext.dll
2013-04-05 20:26:25 ----A---- C:\Windows\system32\drivers\hidclass.sys
2013-04-05 20:26:25 ----A---- C:\Windows\system32\Display.dll
2013-04-05 20:26:25 ----A---- C:\Windows\system32\credssp.dll
2013-04-05 20:26:25 ----A---- C:\Windows\system32\batmeter.dll
2013-04-05 20:26:25 ----A---- C:\Windows\system32\AxInstSv.dll
2013-04-05 20:26:24 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2013-04-05 20:26:24 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2013-04-05 20:26:24 ----A---- C:\Windows\SYSWOW64\taskmgr.exe
2013-04-05 20:26:24 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll
2013-04-05 20:26:24 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2013-04-05 20:26:24 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2013-04-05 20:26:24 ----A---- C:\Windows\SYSWOW64\DxpTaskSync.dll
2013-04-05 20:26:24 ----A---- C:\Windows\SYSWOW64\Display.dll
2013-04-05 20:26:24 ----A---- C:\Windows\system32\wpccpl.dll
2013-04-05 20:26:24 ----A---- C:\Windows\system32\usercpl.dll
2013-04-05 20:26:24 ----A---- C:\Windows\system32\sppsvc.exe
2013-04-05 20:26:24 ----A---- C:\Windows\system32\SndVolSSO.dll
2013-04-05 20:26:24 ----A---- C:\Windows\system32\rtutils.dll
2013-04-05 20:26:24 ----A---- C:\Windows\system32\rasppp.dll
2013-04-05 20:26:24 ----A---- C:\Windows\system32\provsvc.dll
2013-04-05 20:26:24 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2013-04-05 20:26:24 ----A---- C:\Windows\system32\drivers\winhv.sys
2013-04-05 20:26:24 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2013-04-05 20:26:24 ----A---- C:\Windows\system32\dot3cfg.dll
2013-04-05 20:26:24 ----A---- C:\Windows\system32\DiagCpl.dll
2013-04-05 20:26:24 ----A---- C:\Windows\system32\bootres.dll
2013-04-05 20:26:23 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2013-04-05 20:26:23 ----A---- C:\Windows\SYSWOW64\userinit.exe
2013-04-05 20:26:23 ----A---- C:\Windows\SYSWOW64\termmgr.dll
2013-04-05 20:26:23 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2013-04-05 20:26:23 ----A---- C:\Windows\SYSWOW64\logoncli.dll
2013-04-05 20:26:23 ----A---- C:\Windows\SYSWOW64\eudcedit.exe
2013-04-05 20:26:23 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2013-04-05 20:26:23 ----A---- C:\Windows\system32\untfs.dll
2013-04-05 20:26:23 ----A---- C:\Windows\system32\taskmgr.exe
2013-04-05 20:26:23 ----A---- C:\Windows\system32\shdocvw.dll
2013-04-05 20:26:23 ----A---- C:\Windows\system32\proquota.exe
2013-04-05 20:26:23 ----A---- C:\Windows\system32\prnfldr.dll
2013-04-05 20:26:23 ----A---- C:\Windows\system32\pdh.dll
2013-04-05 20:26:23 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2013-04-05 20:26:23 ----A---- C:\Windows\system32\hbaapi.dll
2013-04-05 20:26:23 ----A---- C:\Windows\system32\dxdiagn.dll
2013-04-05 20:26:23 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2013-04-05 20:26:23 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2013-04-05 20:26:23 ----A---- C:\Windows\system32\drivers\ataport.sys
2013-04-05 20:26:22 ----A---- C:\Windows\SYSWOW64\wiadefui.dll
2013-04-05 20:26:22 ----A---- C:\Windows\SYSWOW64\themecpl.dll
2013-04-05 20:26:22 ----A---- C:\Windows\SYSWOW64\sppcomapi.dll
2013-04-05 20:26:22 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2013-04-05 20:26:22 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll
2013-04-05 20:26:22 ----A---- C:\Windows\SYSWOW64\rasppp.dll
2013-04-05 20:26:22 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2013-04-05 20:26:22 ----A---- C:\Windows\SYSWOW64\FirewallControlPanel.dll
2013-04-05 20:26:22 ----A---- C:\Windows\SYSWOW64\dnscmmc.dll
2013-04-05 20:26:22 ----A---- C:\Windows\SYSWOW64\cabview.dll
2013-04-05 20:26:22 ----A---- C:\Windows\system32\zipfldr.dll
2013-04-05 20:26:22 ----A---- C:\Windows\system32\userinit.exe
2013-04-05 20:26:22 ----A---- C:\Windows\system32\slui.exe
2013-04-05 20:26:22 ----A---- C:\Windows\system32\msieftp.dll
2013-04-05 20:26:22 ----A---- C:\Windows\system32\drivers\storvsc.sys
2013-04-05 20:26:22 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2013-04-05 20:26:22 ----A---- C:\Windows\system32\accessibilitycpl.dll
2013-04-05 20:26:20 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2013-04-05 20:26:20 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll
2013-04-05 20:26:20 ----A---- C:\Windows\SYSWOW64\scecli.dll
2013-04-05 20:26:20 ----A---- C:\Windows\SYSWOW64\PhotoScreensaver.scr
2013-04-05 20:26:20 ----A---- C:\Windows\SYSWOW64\mscories.dll
2013-04-05 20:26:20 ----A---- C:\Windows\SYSWOW64\mscms.dll
2013-04-05 20:26:20 ----A---- C:\Windows\SYSWOW64\mprddm.dll
2013-04-05 20:26:20 ----A---- C:\Windows\SYSWOW64\localsec.dll
2013-04-05 20:26:20 ----A---- C:\Windows\SYSWOW64\iasacct.dll
2013-04-05 20:26:20 ----A---- C:\Windows\SYSWOW64\hgcpl.dll
2013-04-05 20:26:20 ----A---- C:\Windows\SYSWOW64\fontext.dll
2013-04-05 20:26:20 ----A---- C:\Windows\system32\taskbarcpl.dll
2013-04-05 20:26:20 ----A---- C:\Windows\system32\sud.dll
2013-04-05 20:26:20 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2013-04-05 20:26:20 ----A---- C:\Windows\system32\networkmap.dll
2013-04-05 20:26:20 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2013-04-05 20:26:20 ----A---- C:\Windows\system32\dot3svc.dll
2013-04-05 20:26:20 ----A---- C:\Windows\system32\DeviceCenter.dll
2013-04-05 20:26:20 ----A---- C:\Windows\system32\cryptui.dll
2013-04-05 20:26:20 ----A---- C:\Windows\system32\ActionCenter.dll
2013-04-05 20:26:19 ----A---- C:\Windows\SYSWOW64\wlanui.dll
2013-04-05 20:26:19 ----A---- C:\Windows\SYSWOW64\w32tm.exe
2013-04-05 20:26:19 ----A---- C:\Windows\SYSWOW64\VAN.dll
2013-04-05 20:26:19 ----A---- C:\Windows\SYSWOW64\usercpl.dll
2013-04-05 20:26:19 ----A---- C:\Windows\SYSWOW64\spwizeng.dll
2013-04-05 20:26:19 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2013-04-05 20:26:19 ----A---- C:\Windows\SYSWOW64\qedit.dll
2013-04-05 20:26:19 ----A---- C:\Windows\SYSWOW64\prntvpt.dll
2013-04-05 20:26:19 ----A---- C:\Windows\SYSWOW64\PerfCenterCPL.dll
2013-04-05 20:26:19 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2013-04-05 20:26:19 ----A---- C:\Windows\SYSWOW64\batmeter.dll
2013-04-05 20:26:19 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2013-04-05 20:26:19 ----A---- C:\Windows\SYSWOW64\accessibilitycpl.dll
2013-04-05 20:26:19 ----A---- C:\Windows\system32\uxlib.dll
2013-04-05 20:26:19 ----A---- C:\Windows\system32\tzutil.exe
2013-04-05 20:26:19 ----A---- C:\Windows\system32\twext.dll
2013-04-05 20:26:19 ----A---- C:\Windows\system32\sisbkup.dll
2013-04-05 20:26:19 ----A---- C:\Windows\system32\recovery.dll
2013-04-05 20:26:19 ----A---- C:\Windows\system32\OobeFldr.dll
2013-04-05 20:26:19 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2013-04-05 20:26:19 ----A---- C:\Windows\system32\isoburn.exe
2013-04-05 20:26:19 ----A---- C:\Windows\system32\efscore.dll
2013-04-05 20:26:19 ----A---- C:\Windows\system32\dsuiext.dll
2013-04-05 20:26:19 ----A---- C:\Windows\system32\cca.dll
2013-04-05 20:26:19 ----A---- C:\Windows\system32\bcdedit.exe
2013-04-05 20:26:19 ----A---- C:\Windows\system32\azroleui.dll
2013-04-05 20:26:19 ----A---- C:\Windows\system32\asycfilt.dll
2013-04-05 20:26:18 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2013-04-05 20:26:18 ----A---- C:\Windows\SYSWOW64\wusa.exe
2013-04-05 20:26:18 ----A---- C:\Windows\SYSWOW64\prnfldr.dll
2013-04-05 20:26:18 ----A---- C:\Windows\SYSWOW64\networkmap.dll
2013-04-05 20:26:18 ----A---- C:\Windows\SYSWOW64\netjoin.dll
2013-04-05 20:26:18 ----A---- C:\Windows\SYSWOW64\MSAC3ENC.DLL
2013-04-05 20:26:18 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2013-04-05 20:26:18 ----A---- C:\Windows\SYSWOW64\fdeploy.dll
2013-04-05 20:26:18 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2013-04-05 20:26:18 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2013-04-05 20:26:18 ----A---- C:\Windows\SYSWOW64\adsldp.dll
2013-04-05 20:26:18 ----A---- C:\Windows\system32\wlanmsm.dll
2013-04-05 20:26:18 ----A---- C:\Windows\system32\systemcpl.dll
2013-04-05 20:26:18 ----A---- C:\Windows\system32\sysclass.dll
2013-04-05 20:26:18 ----A---- C:\Windows\system32\syncui.dll
2013-04-05 20:26:18 ----A---- C:\Windows\system32\spwizeng.dll
2013-04-05 20:26:18 ----A---- C:\Windows\system32\shwebsvc.dll
2013-04-05 20:26:18 ----A---- C:\Windows\system32\sdrsvc.dll
2013-04-05 20:26:18 ----A---- C:\Windows\system32\sdcpl.dll
2013-04-05 20:26:18 ----A---- C:\Windows\system32\recdisc.exe
2013-04-05 20:26:18 ----A---- C:\Windows\system32\netplwiz.dll
2013-04-05 20:26:18 ----A---- C:\Windows\system32\ncryptui.dll
2013-04-05 20:26:18 ----A---- C:\Windows\system32\msvidc32.dll
2013-04-05 20:26:18 ----A---- C:\Windows\system32\httpapi.dll
2013-04-05 20:26:18 ----A---- C:\Windows\system32\fvecpl.dll
2013-04-05 20:26:18 ----A---- C:\Windows\system32\drivers\rdpdr.sys
2013-04-05 20:26:18 ----A---- C:\Windows\system32\drivers\mpio.sys
2013-04-05 20:26:18 ----A---- C:\Windows\system32\certcli.dll
2013-04-05 20:26:18 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2013-04-05 20:26:18 ----A---- C:\Windows\system32\autoplay.dll
2013-04-05 20:26:18 ----A---- C:\Windows\system32\appinfo.dll
2013-04-05 20:26:18 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2013-04-05 20:26:17 ----A---- C:\Windows\SYSWOW64\sud.dll
2013-04-05 20:26:17 ----A---- C:\Windows\SYSWOW64\sisbkup.dll
2013-04-05 20:26:17 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll
2013-04-05 20:26:17 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2013-04-05 20:26:17 ----A---- C:\Windows\SYSWOW64\OnLineIDCpl.dll
2013-04-05 20:26:17 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2013-04-05 20:26:17 ----A---- C:\Windows\SYSWOW64\MediaMetadataHandler.dll
2013-04-05 20:26:17 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll
2013-04-05 20:26:17 ----A---- C:\Windows\SYSWOW64\ifsutil.dll
2013-04-05 20:26:17 ----A---- C:\Windows\SYSWOW64\iasrad.dll
2013-04-05 20:26:17 ----A---- C:\Windows\SYSWOW64\ftp.exe
2013-04-05 20:26:17 ----A---- C:\Windows\SYSWOW64\efscore.dll
2013-04-05 20:26:17 ----A---- C:\Windows\SYSWOW64\dot3cfg.dll
2013-04-05 20:26:17 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll
2013-04-05 20:26:17 ----A---- C:\Windows\SYSWOW64\credssp.dll
2013-04-05 20:26:17 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2013-04-05 20:26:17 ----A---- C:\Windows\system32\wwanprotdim.dll
2013-04-05 20:26:17 ----A---- C:\Windows\system32\vdsutil.dll
2013-04-05 20:26:17 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2013-04-05 20:26:17 ----A---- C:\Windows\system32\tsgqec.dll
2013-04-05 20:26:17 ----A---- C:\Windows\system32\termmgr.dll
2013-04-05 20:26:17 ----A---- C:\Windows\system32\sqlcese30.dll
2013-04-05 20:26:17 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2013-04-05 20:26:17 ----A---- C:\Windows\system32\sethc.exe
2013-04-05 20:26:17 ----A---- C:\Windows\system32\ReAgent.dll
2013-04-05 20:26:17 ----A---- C:\Windows\system32\rdpd3d.dll
2013-04-05 20:26:17 ----A---- C:\Windows\system32\ntlanman.dll
2013-04-05 20:26:17 ----A---- C:\Windows\system32\msscp.dll
2013-04-05 20:26:17 ----A---- C:\Windows\system32\MFPlay.dll
2013-04-05 20:26:17 ----A---- C:\Windows\system32\iprtrmgr.dll
2013-04-05 20:26:17 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2013-04-05 20:26:16 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2013-04-05 20:26:16 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2013-04-05 20:26:16 ----A---- C:\Windows\SYSWOW64\syncui.dll
2013-04-05 20:26:16 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2013-04-05 20:26:16 ----A---- C:\Windows\SYSWOW64\sethc.exe
2013-04-05 20:26:16 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2013-04-05 20:26:16 ----A---- C:\Windows\SYSWOW64\riched20.dll
2013-04-05 20:26:16 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll
2013-04-05 20:26:16 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2013-04-05 20:26:16 ----A---- C:\Windows\SYSWOW64\ntlanman.dll
2013-04-05 20:26:16 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2013-04-05 20:26:16 ----A---- C:\Windows\SYSWOW64\dskquoui.dll
2013-04-05 20:26:16 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll
2013-04-05 20:26:16 ----A---- C:\Windows\SYSWOW64\autoplay.dll
2013-04-05 20:26:16 ----A---- C:\Windows\SYSWOW64\ActionCenterCPL.dll
2013-04-05 20:26:16 ----A---- C:\Windows\system32\wmdrmsdk.dll
2013-04-05 20:26:16 ----A---- C:\Windows\system32\wavemsp.dll
2013-04-05 20:26:16 ----A---- C:\Windows\system32\ssText3d.scr
2013-04-05 20:26:16 ----A---- C:\Windows\system32\srvcli.dll
2013-04-05 20:26:16 ----A---- C:\Windows\system32\srrstr.dll
2013-04-05 20:26:16 ----A---- C:\Windows\system32\slwga.dll
2013-04-05 20:26:16 ----A---- C:\Windows\system32\ntprint.dll
2013-04-05 20:26:16 ----A---- C:\Windows\system32\nslookup.exe
2013-04-05 20:26:16 ----A---- C:\Windows\system32\NAPHLPR.DLL
2013-04-05 20:26:16 ----A---- C:\Windows\system32\msiexec.exe
2013-04-05 20:26:16 ----A---- C:\Windows\system32\iyuv_32.dll
2013-04-05 20:26:16 ----A---- C:\Windows\system32\iTVData.dll
2013-04-05 20:26:16 ----A---- C:\Windows\system32\drmmgrtn.dll
2013-04-05 20:26:16 ----A---- C:\Windows\system32\drivers\vmstorfl.sys
2013-04-05 20:26:16 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2013-04-05 20:26:16 ----A---- C:\Windows\system32\bcdboot.exe
2013-04-05 20:26:16 ----A---- C:\Windows\system32\acppage.dll
2013-04-05 20:26:15 ----A---- C:\Windows\SYSWOW64\wmpsrcwp.dll
2013-04-05 20:26:15 ----A---- C:\Windows\SYSWOW64\wavemsp.dll
2013-04-05 20:26:15 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2013-04-05 20:26:15 ----A---- C:\Windows\SYSWOW64\nshipsec.dll
2013-04-05 20:26:15 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2013-04-05 20:26:15 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2013-04-05 20:26:15 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL
2013-04-05 20:26:15 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2013-04-05 20:26:15 ----A---- C:\Windows\SYSWOW64\migisol.dll
2013-04-05 20:26:15 ----A---- C:\Windows\SYSWOW64\isoburn.exe
2013-04-05 20:26:15 ----A---- C:\Windows\SYSWOW64\httpapi.dll
2013-04-05 20:26:15 ----A---- C:\Windows\SYSWOW64\fms.dll
2013-04-05 20:26:15 ----A---- C:\Windows\SYSWOW64\dpx.dll
2013-04-05 20:26:15 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2013-04-05 20:26:15 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2013-04-05 20:26:15 ----A---- C:\Windows\SYSWOW64\activeds.dll
2013-04-05 20:26:15 ----A---- C:\Windows\system32\wkscli.dll
2013-04-05 20:26:15 ----A---- C:\Windows\system32\WinSCard.dll
2013-04-05 20:26:15 ----A---- C:\Windows\system32\TSpkg.dll
2013-04-05 20:26:15 ----A---- C:\Windows\system32\sppnp.dll
2013-04-05 20:26:15 ----A---- C:\Windows\system32\remotepg.dll
2013-04-05 20:26:15 ----A---- C:\Windows\system32\PresentationSettings.exe
2013-04-05 20:26:15 ----A---- C:\Windows\system32\networkexplorer.dll
2013-04-05 20:26:15 ----A---- C:\Windows\system32\ftp.exe
2013-04-05 20:26:15 ----A---- C:\Windows\system32\dfrgui.exe
2013-04-05 20:26:15 ----A---- C:\Windows\system32\certprop.dll
2013-04-05 20:26:15 ----A---- C:\Windows\system32\cabinet.dll
2013-04-05 20:26:14 ----A---- C:\Windows\SYSWOW64\wvc.dll
2013-04-05 20:26:14 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2013-04-05 20:26:14 ----A---- C:\Windows\SYSWOW64\wtsapi32.dll
2013-04-05 20:26:14 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2013-04-05 20:26:14 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2013-04-05 20:26:14 ----A---- C:\Windows\SYSWOW64\tzutil.exe
2013-04-05 20:26:14 ----A---- C:\Windows\SYSWOW64\twext.dll
2013-04-05 20:26:14 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2013-04-05 20:26:14 ----A---- C:\Windows\SYSWOW64\provsvc.dll
2013-04-05 20:26:14 ----A---- C:\Windows\SYSWOW64\PkgMgr.exe
2013-04-05 20:26:14 ----A---- C:\Windows\SYSWOW64\ocsetup.exe
2013-04-05 20:26:14 ----A---- C:\Windows\SYSWOW64\mstask.dll
2013-04-05 20:26:14 ----A---- C:\Windows\SYSWOW64\dsuiext.dll
2013-04-05 20:26:14 ----A---- C:\Windows\SYSWOW64\dot3ui.dll
2013-04-05 20:26:14 ----A---- C:\Windows\SYSWOW64\dfrgui.exe
2013-04-05 20:26:14 ----A---- C:\Windows\SYSWOW64\AdmTmpl.dll
2013-04-05 20:26:14 ----A---- C:\Windows\system32\wvc.dll
2013-04-05 20:26:14 ----A---- C:\Windows\system32\wsqmcons.exe
2013-04-05 20:26:14 ----A---- C:\Windows\system32\wsnmp32.dll
2013-04-05 20:26:14 ----A---- C:\Windows\system32\wmpdxm.dll
2013-04-05 20:26:14 ----A---- C:\Windows\system32\wmdrmdev.dll
2013-04-05 20:26:14 ----A---- C:\Windows\system32\WerFaultSecure.exe
2013-04-05 20:26:14 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-04-05 20:26:14 ----A---- C:\Windows\system32\OpcServices.dll
2013-04-05 20:26:14 ----A---- C:\Windows\system32\net1.exe
2013-04-05 20:26:14 ----A---- C:\Windows\system32\msyuv.dll
2013-04-05 20:26:14 ----A---- C:\Windows\system32\mfps.dll
2013-04-05 20:26:14 ----A---- C:\Windows\system32\mapistub.dll
2013-04-05 20:26:14 ----A---- C:\Windows\system32\mapi32.dll
2013-04-05 20:26:14 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-04-05 20:26:14 ----A---- C:\Windows\system32\Bubbles.scr
2013-04-05 20:26:14 ----A---- C:\Windows\system32\blackbox.dll
2013-04-05 20:26:13 ----A---- C:\Windows\twain_32.dll
2013-04-05 20:26:13 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2013-04-05 20:26:13 ----A---- C:\Windows\SYSWOW64\uxlib.dll
2013-04-05 20:26:13 ----A---- C:\Windows\SYSWOW64\ssText3d.scr
2013-04-05 20:26:13 ----A---- C:\Windows\SYSWOW64\slwga.dll
2013-04-05 20:26:13 ----A---- C:\Windows\SYSWOW64\setupugc.exe
2013-04-05 20:26:13 ----A---- C:\Windows\SYSWOW64\qcap.dll
2013-04-05 20:26:13 ----A---- C:\Windows\SYSWOW64\qasf.dll
2013-04-05 20:26:13 ----A---- C:\Windows\SYSWOW64\nslookup.exe
2013-04-05 20:26:13 ----A---- C:\Windows\SYSWOW64\msvfw32.dll
2013-04-05 20:26:13 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2013-04-05 20:26:13 ----A---- C:\Windows\SYSWOW64\audiodev.dll
2013-04-05 20:26:13 ----A---- C:\Windows\system32\unimdmat.dll
2013-04-05 20:26:13 ----A---- C:\Windows\system32\tsbyuv.dll
2013-04-05 20:26:13 ----A---- C:\Windows\system32\seclogon.dll
2013-04-05 20:26:13 ----A---- C:\Windows\system32\Ribbons.scr
2013-04-05 20:26:13 ----A---- C:\Windows\system32\Mystify.scr
2013-04-05 20:26:13 ----A---- C:\Windows\system32\muifontsetup.dll
2013-04-05 20:26:13 ----A---- C:\Windows\system32\msrle32.dll
2013-04-05 20:26:13 ----A---- C:\Windows\system32\iscsium.dll
2013-04-05 20:26:13 ----A---- C:\Windows\system32\ifsutil.dll
2013-04-05 20:26:13 ----A---- C:\Windows\system32\drivers\umbus.sys
2013-04-05 20:26:13 ----A---- C:\Windows\system32\diskraid.exe
2013-04-05 20:26:12 ----A---- C:\Windows\SYSWOW64\WPDShServiceObj.dll
2013-04-05 20:26:12 ----A---- C:\Windows\SYSWOW64\wimserv.exe
2013-04-05 20:26:12 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2013-04-05 20:26:12 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2013-04-05 20:26:12 ----A---- C:\Windows\SYSWOW64\remotepg.dll
2013-04-05 20:26:12 ----A---- C:\Windows\SYSWOW64\rdpencom.dll
2013-04-05 20:26:12 ----A---- C:\Windows\SYSWOW64\raschap.dll
2013-04-05 20:26:12 ----A---- C:\Windows\SYSWOW64\QUTIL.DLL
2013-04-05 20:26:12 ----A---- C:\Windows\SYSWOW64\perfmon.exe
2013-04-05 20:26:12 ----A---- C:\Windows\SYSWOW64\NAPCRYPT.DLL
2013-04-05 20:26:12 ----A---- C:\Windows\SYSWOW64\msscp.dll
2013-04-05 20:26:12 ----A---- C:\Windows\SYSWOW64\input.dll
2013-04-05 20:26:12 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2013-04-05 20:26:12 ----A---- C:\Windows\SYSWOW64\diskraid.exe
2013-04-05 20:26:12 ----A---- C:\Windows\SYSWOW64\DevicePairingFolder.dll
2013-04-05 20:26:12 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2013-04-05 20:26:12 ----A---- C:\Windows\SYSWOW64\acppage.dll
2013-04-05 20:26:12 ----A---- C:\Windows\system32\wpdwcn.dll
2013-04-05 20:26:12 ----A---- C:\Windows\system32\wmpshell.dll
2013-04-05 20:26:12 ----A---- C:\Windows\system32\WMADMOD.DLL
2013-04-05 20:26:12 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2013-04-05 20:26:12 ----A---- C:\Windows\system32\wiavideo.dll
2013-04-05 20:26:12 ----A---- C:\Windows\system32\umb.dll
2013-04-05 20:26:12 ----A---- C:\Windows\system32\tlscsp.dll
2013-04-05 20:26:12 ----A---- C:\Windows\system32\syssetup.dll
2013-04-05 20:26:12 ----A---- C:\Windows\system32\runonce.exe
2013-04-05 20:26:12 ----A---- C:\Windows\system32\rdpencom.dll
2013-04-05 20:26:12 ----A---- C:\Windows\system32\raschap.dll
2013-04-05 20:26:12 ----A---- C:\Windows\system32\qasf.dll
2013-04-05 20:26:12 ----A---- C:\Windows\system32\perfmon.exe
2013-04-05 20:26:12 ----A---- C:\Windows\system32\netutils.dll
2013-04-05 20:26:12 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2013-04-05 20:26:12 ----A---- C:\Windows\system32\FXSAPI.dll
2013-04-05 20:26:12 ----A---- C:\Windows\system32\dbghelp.dll
2013-04-05 20:26:12 ----A---- C:\Windows\system32\AzSqlExt.dll
2013-04-05 20:26:12 ----A---- C:\Windows\system32\ActionQueue.dll
2013-04-05 20:26:12 ----A---- C:\Windows\bfsvc.exe
2013-04-05 20:26:11 ----A---- C:\Windows\SYSWOW64\wpdwcn.dll
2013-04-05 20:26:11 ----A---- C:\Windows\SYSWOW64\wmpdxm.dll
2013-04-05 20:26:11 ----A---- C:\Windows\SYSWOW64\vpnikeapi.dll
2013-04-05 20:26:11 ----A---- C:\Windows\SYSWOW64\vdsbas.dll
2013-04-05 20:26:11 ----A---- C:\Windows\SYSWOW64\UserAccountControlSettings.dll
2013-04-05 20:26:11 ----A---- C:\Windows\SYSWOW64\runonce.exe
2013-04-05 20:26:11 ----A---- C:\Windows\SYSWOW64\onexui.dll
2013-04-05 20:26:11 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2013-04-05 20:26:11 ----A---- C:\Windows\SYSWOW64\ocsetapi.dll
2013-04-05 20:26:11 ----A---- C:\Windows\SYSWOW64\networkexplorer.dll
2013-04-05 20:26:11 ----A---- C:\Windows\SYSWOW64\logagent.exe
2013-04-05 20:26:11 ----A---- C:\Windows\SYSWOW64\iTVData.dll
2013-04-05 20:26:11 ----A---- C:\Windows\SYSWOW64\dxdiagn.dll
2013-04-05 20:26:11 ----A---- C:\Windows\system32\WMVSDECD.DLL
2013-04-05 20:26:11 ----A---- C:\Windows\system32\vdsbas.dll
2013-04-05 20:26:11 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2013-04-05 20:26:11 ----A---- C:\Windows\system32\nltest.exe
2013-04-05 20:26:11 ----A---- C:\Windows\system32\mstask.dll
2013-04-05 20:26:11 ----A---- C:\Windows\system32\MdSched.exe
2013-04-05 20:26:11 ----A---- C:\Windows\system32\Mcx2Svc.dll
2013-04-05 20:26:11 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2013-04-05 20:26:11 ----A---- C:\Windows\system32\drivers\rmcast.sys
2013-04-05 20:26:11 ----A---- C:\Windows\system32\bitsadmin.exe
2013-04-05 20:26:10 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2013-04-05 20:26:10 ----A---- C:\Windows\SYSWOW64\wmpshell.dll
2013-04-05 20:26:10 ----A---- C:\Windows\SYSWOW64\wmdrmdev.dll
2013-04-05 20:26:10 ----A---- C:\Windows\SYSWOW64\unimdmat.dll
2013-04-05 20:26:10 ----A---- C:\Windows\SYSWOW64\sqlcese30.dll
2013-04-05 20:26:10 ----A---- C:\Windows\SYSWOW64\shacct.dll
2013-04-05 20:26:10 ----A---- C:\Windows\SYSWOW64\rdpd3d.dll
2013-04-05 20:26:10 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2013-04-05 20:26:10 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2013-04-05 20:26:10 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2013-04-05 20:26:10 ----A---- C:\Windows\SYSWOW64\lsmproxy.dll
2013-04-05 20:26:10 ----A---- C:\Windows\SYSWOW64\iscsium.dll
2013-04-05 20:26:10 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2013-04-05 20:26:10 ----A---- C:\Windows\SYSWOW64\bitsadmin.exe
2013-04-05 20:26:10 ----A---- C:\Windows\system32\WPDSp.dll
2013-04-05 20:26:10 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2013-04-05 20:26:10 ----A---- C:\Windows\system32\wmdrmnet.dll
2013-04-05 20:26:10 ----A---- C:\Windows\system32\vss_ps.dll
2013-04-05 20:26:10 ----A---- C:\Windows\system32\tabcal.exe
2013-04-05 20:26:10 ----A---- C:\Windows\system32\shacct.dll
2013-04-05 20:26:10 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2013-04-05 20:26:10 ----A---- C:\Windows\system32\secproc_ssp.dll
2013-04-05 20:26:10 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2013-04-05 20:26:10 ----A---- C:\Windows\system32\qcap.dll
2013-04-05 20:26:10 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2013-04-05 20:26:10 ----A---- C:\Windows\system32\msnetobj.dll
2013-04-05 20:26:10 ----A---- C:\Windows\system32\logman.exe
2013-04-05 20:26:10 ----A---- C:\Windows\system32\drivers\USBAUDIO.sys
2013-04-05 20:26:10 ----A---- C:\Windows\system32\CscMig.dll
2013-04-05 20:26:10 ----A---- C:\Windows\system32\cscapi.dll
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\WPDSp.dll
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\wiavideo.dll
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\utildll.dll
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\takeown.exe
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\srvcli.dll
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\Ribbons.scr
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\PortableDeviceSyncProvider.dll
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\PortableDeviceStatus.dll
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\pdh.dll
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\OpcServices.dll
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\olethk32.dll
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\ncryptui.dll
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\Mystify.scr
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\mprapi.dll
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\mapistub.dll
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\mapi32.dll
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\logman.exe
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\fphc.dll
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\dot3msm.dll
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\Bubbles.scr
2013-04-05 20:26:09 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2013-04-05 20:26:09 ----A---- C:\Windows\system32\vmictimeprovider.dll
2013-04-05 20:26:09 ----A---- C:\Windows\system32\takeown.exe
2013-04-05 20:26:09 ----A---- C:\Windows\system32\spbcd.dll
2013-04-05 20:26:09 ----A---- C:\Windows\system32\qdv.dll
2013-04-05 20:26:09 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2013-04-05 20:26:09 ----A---- C:\Windows\system32\PnPUnattend.exe
2013-04-05 20:26:09 ----A---- C:\Windows\system32\fphc.dll
2013-04-05 20:26:09 ----A---- C:\Windows\system32\EhStorAPI.dll
2013-04-05 20:26:09 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2013-04-05 20:26:09 ----A---- C:\Windows\system32\dot3ui.dll
2013-04-05 20:26:09 ----A---- C:\Windows\system32\amstream.dll
2013-04-05 20:26:08 ----A---- C:\Windows\SYSWOW64\wsnmp32.dll
2013-04-05 20:26:08 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2013-04-05 20:26:08 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2013-04-05 20:26:08 ----A---- C:\Windows\SYSWOW64\wmdrmnet.dll
2013-04-05 20:26:08 ----A---- C:\Windows\SYSWOW64\vfwwdm32.dll
2013-04-05 20:26:08 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2013-04-05 20:26:08 ----A---- C:\Windows\SYSWOW64\sppinst.dll
2013-04-05 20:26:08 ----A---- C:\Windows\SYSWOW64\setupcln.dll
2013-04-05 20:26:08 ----A---- C:\Windows\SYSWOW64\qdv.dll
2013-04-05 20:26:08 ----A---- C:\Windows\SYSWOW64\QCLIPROV.DLL
2013-04-05 20:26:08 ----A---- C:\Windows\SYSWOW64\pdhui.dll
2013-04-05 20:26:08 ----A---- C:\Windows\SYSWOW64\MuiUnattend.exe
2013-04-05 20:26:08 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2013-04-05 20:26:08 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2013-04-05 20:26:08 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2013-04-05 20:26:08 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2013-04-05 20:26:08 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2013-04-05 20:26:08 ----A---- C:\Windows\SYSWOW64\iasrecst.dll
2013-04-05 20:26:08 ----A---- C:\Windows\SYSWOW64\EhStorAPI.dll
2013-04-05 20:26:08 ----A---- C:\Windows\SYSWOW64\cmstp.exe
2013-04-05 20:26:08 ----A---- C:\Windows\SYSWOW64\cca.dll
2013-04-05 20:26:08 ----A---- C:\Windows\SYSWOW64\AzSqlExt.dll
2013-04-05 20:26:08 ----A---- C:\Windows\system32\WavDest.dll
2013-04-05 20:26:08 ----A---- C:\Windows\system32\vfwwdm32.dll
2013-04-05 20:26:08 ----A---- C:\Windows\system32\sscore.dll
2013-04-05 20:26:08 ----A---- C:\Windows\system32\shimgvw.dll
2013-04-05 20:26:08 ----A---- C:\Windows\system32\relog.exe
2013-04-05 20:26:08 ----A---- C:\Windows\system32\QCLIPROV.DLL
2013-04-05 20:26:08 ----A---- C:\Windows\system32\nrpsrv.dll
2013-04-05 20:26:08 ----A---- C:\Windows\system32\mydocs.dll
2013-04-05 20:26:08 ----A---- C:\Windows\system32\MultiDigiMon.exe
2013-04-05 20:26:08 ----A---- C:\Windows\system32\KMSVC.DLL
2013-04-05 20:26:08 ----A---- C:\Windows\system32\iscsicli.exe
2013-04-05 20:26:08 ----A---- C:\Windows\system32\iasrecst.dll
2013-04-05 20:26:08 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2013-04-05 20:26:08 ----A---- C:\Windows\system32\fdProxy.dll
2013-04-05 20:26:08 ----A---- C:\Windows\system32\drivers\usbser.sys
2013-04-05 20:26:08 ----A---- C:\Windows\system32\drivers\pacer.sys
2013-04-05 20:26:08 ----A---- C:\Windows\system32\djoin.exe
2013-04-05 20:26:08 ----A---- C:\Windows\system32\diskpart.exe
2013-04-05 20:26:08 ----A---- C:\Windows\system32\cmstp.exe
2013-04-05 20:26:08 ----A---- C:\Windows\system32\CertPolEng.dll
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\wmpps.dll
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\wkscli.dll
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\tlscsp.dll
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\syssetup.dll
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\spbcd.dll
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\resutils.dll
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\relog.exe
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\ReAgentc.exe
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\rastapi.dll
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\netiougc.exe
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\mydocs.dll
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\itircl.dll
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\iscsicli.exe
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\findstr.exe
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\diskpart.exe
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\CertPolEng.dll
2013-04-05 20:26:07 ----A---- C:\Windows\SYSWOW64\amstream.dll
2013-04-05 20:26:07 ----A---- C:\Windows\system32\sppc.dll
2013-04-05 20:26:07 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2013-04-05 20:26:07 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2013-04-05 20:26:07 ----A---- C:\Windows\system32\qprocess.exe
2013-04-05 20:26:07 ----A---- C:\Windows\system32\msdmo.dll
2013-04-05 20:26:07 ----A---- C:\Windows\system32\mobsync.exe
2013-04-05 20:26:07 ----A---- C:\Windows\system32\mciqtz32.dll
2013-04-05 20:26:07 ----A---- C:\Windows\system32\luainstall.dll
2013-04-05 20:26:07 ----A---- C:\Windows\system32\itircl.dll
2013-04-05 20:26:07 ----A---- C:\Windows\system32\choice.exe
2013-04-05 20:26:07 ----A---- C:\Windows\system32\FXSTIFF.dll
2013-04-05 20:26:07 ----A---- C:\Windows\system32\findstr.exe
2013-04-05 20:26:07 ----A---- C:\Windows\system32\eappgnui.dll
2013-04-05 20:26:07 ----A---- C:\Windows\system32\drivers\tunnel.sys
2013-04-05 20:26:07 ----A---- C:\Windows\system32\dot3msm.dll
2013-04-05 20:26:07 ----A---- C:\Windows\system32\BWUnpairElevated.dll
2013-04-05 20:26:07 ----A---- C:\Windows\system32\BdeHdCfg.exe
2013-04-05 20:26:05 ----A---- C:\Windows\SYSWOW64\unlodctr.exe
2013-04-05 20:26:05 ----A---- C:\Windows\SYSWOW64\sppc.dll
2013-04-05 20:26:05 ----A---- C:\Windows\SYSWOW64\spopk.dll
2013-04-05 20:26:05 ----A---- C:\Windows\SYSWOW64\shimgvw.dll
2013-04-05 20:26:05 ----A---- C:\Windows\SYSWOW64\rdprefdrvapi.dll
2013-04-05 20:26:05 ----A---- C:\Windows\SYSWOW64\netutils.dll
2013-04-05 20:26:05 ----A---- C:\Windows\SYSWOW64\muifontsetup.dll
2013-04-05 20:26:05 ----A---- C:\Windows\SYSWOW64\msdmo.dll
2013-04-05 20:26:05 ----A---- C:\Windows\SYSWOW64\mobsync.exe
2013-04-05 20:26:05 ----A---- C:\Windows\SYSWOW64\mciqtz32.dll
2013-04-05 20:26:05 ----A---- C:\Windows\SYSWOW64\luainstall.dll
2013-04-05 20:26:05 ----A---- C:\Windows\SYSWOW64\inetmib1.dll
2013-04-05 20:26:05 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2013-04-05 20:26:05 ----A---- C:\Windows\SYSWOW64\cabinet.dll
2013-04-05 20:26:05 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2013-04-05 20:26:05 ----A---- C:\Windows\system32\vmstorfltres.dll
2013-04-05 20:26:05 ----A---- C:\Windows\system32\vmicres.dll
2013-04-05 20:26:05 ----A---- C:\Windows\system32\tskill.exe
2013-04-05 20:26:05 ----A---- C:\Windows\system32\tsdiscon.exe
2013-04-05 20:26:05 ----A---- C:\Windows\system32\tscon.exe
2013-04-05 20:26:05 ----A---- C:\Windows\system32\spopk.dll
2013-04-05 20:26:05 ----A---- C:\Windows\system32\schedcli.dll
2013-04-05 20:26:05 ----A---- C:\Windows\system32\rwinsta.exe
2013-04-05 20:26:05 ----A---- C:\Windows\system32\repair-bde.exe
2013-04-05 20:26:05 ----A---- C:\Windows\system32\RDPENCDD.dll
2013-04-05 20:26:05 ----A---- C:\Windows\system32\qappsrv.exe
2013-04-05 20:26:05 ----A---- C:\Windows\system32\onexui.dll
2013-04-05 20:26:05 ----A---- C:\Windows\system32\odbcconf.dll
2013-04-05 20:26:05 ----A---- C:\Windows\system32\manage-bde.exe
2013-04-05 20:26:05 ----A---- C:\Windows\system32\logoff.exe
2013-04-05 20:26:05 ----A---- C:\Windows\system32\inetmib1.dll
2013-04-05 20:26:05 ----A---- C:\Windows\system32\chgusr.exe
2013-04-05 20:26:05 ----A---- C:\Windows\system32\chgport.exe
2013-04-05 20:26:05 ----A---- C:\Windows\system32\chglogon.exe
2013-04-05 20:26:05 ----A---- C:\Windows\system32\fixmapi.exe
2013-04-05 20:26:05 ----A---- C:\Windows\system32\drivers\dfsc.sys
2013-04-05 20:26:04 ----A---- C:\Windows\SYSWOW64\wups.dll
2013-04-05 20:26:04 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2013-04-05 20:26:04 ----A---- C:\Windows\SYSWOW64\TRAPI.dll
2013-04-05 20:26:04 ----A---- C:\Windows\SYSWOW64\schedcli.dll
2013-04-05 20:26:04 ----A---- C:\Windows\SYSWOW64\perfts.dll
2013-04-05 20:26:04 ----A---- C:\Windows\SYSWOW64\odbcconf.dll
2013-04-05 20:26:04 ----A---- C:\Windows\SYSWOW64\imm32.dll
2013-04-05 20:26:04 ----A---- C:\Windows\SYSWOW64\elsTrans.dll
2013-04-05 20:26:04 ----A---- C:\Windows\SYSWOW64\bitsperf.dll
2013-04-05 20:26:04 ----A---- C:\Windows\system32\wshbth.dll
2013-04-05 20:26:04 ----A---- C:\Windows\system32\vmbusres.dll
2013-04-05 20:26:04 ----A---- C:\Windows\system32\UIRibbonRes.dll
2013-04-05 20:26:04 ----A---- C:\Windows\system32\TRAPI.dll
2013-04-05 20:26:04 ----A---- C:\Windows\system32\shadow.exe
2013-04-05 20:26:04 ----A---- C:\Windows\system32\reset.exe
2013-04-05 20:26:04 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2013-04-05 20:26:04 ----A---- C:\Windows\system32\query.exe
2013-04-05 20:26:04 ----A---- C:\Windows\system32\napdsnap.dll
2013-04-05 20:26:04 ----A---- C:\Windows\system32\LogonUI.exe
2013-04-05 20:26:04 ----A---- C:\Windows\system32\change.exe
2013-04-05 20:26:04 ----A---- C:\Windows\system32\FXSUNATD.exe
2013-04-05 20:26:04 ----A---- C:\Windows\system32\FXSMON.dll
2013-04-05 20:26:04 ----A---- C:\Windows\system32\elsTrans.dll
2013-04-05 20:26:04 ----A---- C:\Windows\system32\dsauth.dll
2013-04-05 20:26:04 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2013-04-05 20:26:04 ----A---- C:\Windows\system32\drivers\tdi.sys
2013-04-05 20:26:04 ----A---- C:\Windows\system32\cscdll.dll
2013-04-05 20:26:04 ----A---- C:\Windows\system32\bitsperf.dll
2013-04-05 20:26:03 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2013-04-05 20:26:03 ----A---- C:\Windows\SYSWOW64\wsdchngr.dll
2013-04-05 20:26:03 ----A---- C:\Windows\SYSWOW64\sscore.dll
2013-04-05 20:26:03 ----A---- C:\Windows\SYSWOW64\shgina.dll
2013-04-05 20:26:03 ----A---- C:\Windows\SYSWOW64\riched32.dll
2013-04-05 20:26:03 ----A---- C:\Windows\SYSWOW64\napdsnap.dll
2013-04-05 20:26:03 ----A---- C:\Windows\SYSWOW64\dsauth.dll
2013-04-05 20:26:03 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2013-04-05 20:26:03 ----A---- C:\Windows\system32\wshirda.dll
2013-04-05 20:26:03 ----A---- C:\Windows\system32\wsdchngr.dll
2013-04-05 20:26:03 ----A---- C:\Windows\system32\shgina.dll
2013-04-05 20:26:03 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2013-04-05 20:26:03 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2013-04-05 20:26:03 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2013-04-05 20:26:02 ----AH---- C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
2013-04-05 20:26:02 ----A---- C:\Windows\SYSWOW64\wshirda.dll
2013-04-05 20:26:02 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2013-04-05 20:26:02 ----A---- C:\Windows\SYSWOW64\C_ISCII.DLL
2013-04-05 20:26:02 ----A---- C:\Windows\SYSWOW64\browseui.dll
2013-04-05 20:26:02 ----A---- C:\Windows\system32\VmdCoinstall.dll
2013-04-05 20:26:02 ----A---- C:\Windows\system32\vmbuspipe.dll
2013-04-05 20:26:02 ----A---- C:\Windows\system32\VmbusCoinstaller.dll
2013-04-05 20:26:02 ----A---- C:\Windows\system32\spwmp.dll
2013-04-05 20:26:02 ----A---- C:\Windows\system32\shunimpl.dll
2013-04-05 20:26:02 ----A---- C:\Windows\system32\riched32.dll
2013-04-05 20:26:02 ----A---- C:\Windows\system32\rdpcfgex.dll
2013-04-05 20:26:02 ----A---- C:\Windows\system32\IcCoinstall.dll
2013-04-05 20:26:02 ----A---- C:\Windows\system32\dxmasf.dll
2013-04-05 20:26:02 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2013-04-05 20:26:02 ----A---- C:\Windows\system32\drivers\scfilter.sys
2013-04-05 20:26:02 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2013-04-05 20:26:02 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2013-04-05 20:26:02 ----A---- C:\Windows\system32\drivers\hidusb.sys
2013-04-05 20:26:02 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2013-04-05 20:26:02 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2013-04-05 20:26:02 ----A---- C:\Windows\system32\drivers\cdrom.sys
2013-04-05 20:26:02 ----A---- C:\Windows\system32\drivers\appid.sys
2013-04-05 20:26:02 ----A---- C:\Windows\system32\C_ISCII.DLL
2013-04-05 20:26:02 ----A---- C:\Windows\system32\browseui.dll
2013-04-05 20:26:01 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\SYSWOW64\shunimpl.dll
2013-04-05 20:26:01 ----A---- C:\Windows\SYSWOW64\KBDUS.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\SYSWOW64\KBDUGHR1.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\SYSWOW64\KBDTURME.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\SYSWOW64\KBDTUQ.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\SYSWOW64\KBDTUF.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\SYSWOW64\KBDTAJIK.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\SYSWOW64\KBDSG.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\SYSWOW64\KBDMON.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\SYSWOW64\kbdlk41a.dll
2013-04-05 20:26:01 ----A---- C:\Windows\SYSWOW64\KBDINTEL.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\SYSWOW64\KBDINHIN.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\SYSWOW64\KBDGR1.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\SYSWOW64\KBDGKL.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\SYSWOW64\KBDGEO.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\SYSWOW64\KBDCZ1.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\SYSWOW64\KBDBLR.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2013-04-05 20:26:01 ----A---- C:\Windows\system32\wmploc.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\system32\KBDUS.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\system32\KBDTUQ.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\system32\KBDTUF.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\system32\KBDSG.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\system32\KBDSF.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\system32\KBDPO.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\system32\KBDNEPR.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\system32\kbdlk41a.dll
2013-04-05 20:26:01 ----A---- C:\Windows\system32\KBDINTAM.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\system32\KBDINBEN.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\system32\KBDGR1.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\system32\KBDGKL.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\system32\KBDGEO.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\system32\KBDCZ1.DLL
2013-04-05 20:26:01 ----A---- C:\Windows\system32\drivers\vms3cap.sys
2013-04-05 20:26:00 ----A---- C:\Windows\SYSWOW64\spwizres.dll
2013-04-05 20:26:00 ----A---- C:\Windows\SYSWOW64\pifmgr.dll
2013-04-05 20:26:00 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2013-04-05 20:26:00 ----A---- C:\Windows\SYSWOW64\KBDSF.DLL
2013-04-05 20:26:00 ----A---- C:\Windows\SYSWOW64\KBDPO.DLL
2013-04-05 20:26:00 ----A---- C:\Windows\SYSWOW64\KBDNEPR.DLL
2013-04-05 20:26:00 ----A---- C:\Windows\SYSWOW64\KBDMAORI.DLL
2013-04-05 20:26:00 ----A---- C:\Windows\SYSWOW64\KBDLT1.DLL
2013-04-05 20:26:00 ----A---- C:\Windows\SYSWOW64\KBDINTAM.DLL
2013-04-05 20:26:00 ----A---- C:\Windows\SYSWOW64\KBDINORI.DLL
2013-04-05 20:26:00 ----A---- C:\Windows\SYSWOW64\KBDINMAR.DLL
2013-04-05 20:26:00 ----A---- C:\Windows\SYSWOW64\KBDINKAN.DLL
2013-04-05 20:26:00 ----A---- C:\Windows\SYSWOW64\KBDINBEN.DLL
2013-04-05 20:26:00 ----A---- C:\Windows\SYSWOW64\KBDBULG.DLL
2013-04-05 20:26:00 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2013-04-05 20:26:00 ----A---- C:\Windows\system32\spwizres.dll
2013-04-05 20:26:00 ----A---- C:\Windows\system32\pifmgr.dll
2013-04-05 20:26:00 ----A---- C:\Windows\system32\nlsbres.dll
2013-04-05 20:26:00 ----A---- C:\Windows\system32\KBDTURME.DLL
2013-04-05 20:26:00 ----A---- C:\Windows\system32\KBDMON.DLL
2013-04-05 20:26:00 ----A---- C:\Windows\system32\KBDMAORI.DLL
2013-04-05 20:26:00 ----A---- C:\Windows\system32\KBDLT1.DLL
2013-04-05 20:26:00 ----A---- C:\Windows\system32\KBDINTEL.DLL
2013-04-05 20:26:00 ----A---- C:\Windows\system32\KBDINORI.DLL
2013-04-05 20:26:00 ----A---- C:\Windows\system32\KBDINMAR.DLL
2013-04-05 20:26:00 ----A---- C:\Windows\system32\KBDINKAN.DLL
2013-04-05 20:26:00 ----A---- C:\Windows\system32\KBDINHIN.DLL
2013-04-05 20:26:00 ----A---- C:\Windows\system32\KBDBULG.DLL
2013-04-05 20:26:00 ----A---- C:\Windows\system32\KBDBLR.DLL
2013-04-05 20:26:00 ----A---- C:\Windows\system32\KBDBASH.DLL
2013-04-05 20:26:00 ----A---- C:\Windows\system32\drivers\VMBusHID.sys
2013-04-05 20:26:00 ----A---- C:\Windows\system32\BlbEvents.dll
2013-04-05 20:25:52 ----A---- C:\Windows\SYSWOW64\wdscore.dll
2013-04-05 20:25:52 ----A---- C:\Windows\system32\dpx.dll
2013-04-05 20:25:48 ----A---- C:\Windows\SYSWOW64\sqmapi.dll
2013-04-05 20:25:47 ----A---- C:\Windows\SYSWOW64\wbemcomn.dll
2013-04-05 20:25:37 ----A---- C:\Windows\system32\wbemcomn.dll
2013-04-05 20:25:36 ----A---- C:\Windows\system32\sqmapi.dll
2013-04-05 19:58:33 ----A---- C:\AdwCleaner[S1].txt
2013-04-05 13:12:03 ----A---- C:\AdwCleaner[R1].txt
2013-04-03 18:14:33 ----A---- C:\Windows\system32\Wdfres.dll
2013-04-03 18:14:33 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2013-04-03 18:14:33 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2013-04-03 18:11:25 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2013-04-03 18:11:25 ----A---- C:\Windows\system32\atmlib.dll
2013-04-03 18:11:25 ----A---- C:\Windows\system32\atmfd.dll
2013-04-03 18:11:24 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2013-04-03 18:10:35 ----A---- C:\Windows\system32\WUDFSvc.dll
2013-04-03 18:10:35 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2013-04-03 18:10:35 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2013-04-03 18:10:34 ----A---- C:\Windows\system32\WUDFx.dll
2013-04-03 18:10:34 ----A---- C:\Windows\system32\WUDFPlatform.dll
2013-04-03 18:10:34 ----A---- C:\Windows\system32\WUDFHost.exe
2013-04-03 18:10:34 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2013-04-03 18:09:11 ----A---- C:\Windows\SYSWOW64\wmi.dll
2013-04-03 18:09:11 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2013-04-03 18:09:11 ----A---- C:\Windows\system32\wmi.dll
2013-04-03 18:09:11 ----A---- C:\Windows\system32\imagehlp.dll
2013-04-03 18:09:11 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2013-04-03 18:05:28 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2013-04-03 18:05:28 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-04-03 18:05:28 ----A---- C:\Windows\system32\KernelBase.dll
2013-04-03 18:05:28 ----A---- C:\Windows\system32\kernel32.dll
2013-04-03 18:05:28 ----A---- C:\Windows\system32\conhost.exe
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-04-03 18:05:27 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-04-03 18:05:27 ----A---- C:\Windows\system32\wow64win.dll
2013-04-03 18:05:27 ----A---- C:\Windows\system32\wow64cpu.dll
2013-04-03 18:05:27 ----A---- C:\Windows\system32\wow64.dll
2013-04-03 18:05:27 ----A---- C:\Windows\system32\ntvdm64.dll
2013-04-03 18:04:57 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2013-04-03 18:04:57 ----A---- C:\Windows\SYSWOW64\gameux.dll
2013-04-03 18:04:57 ----A---- C:\Windows\system32\Wpc.dll
2013-04-03 18:04:57 ----A---- C:\Windows\system32\gameux.dll
2013-04-03 18:04:54 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2013-04-03 18:04:54 ----A---- C:\Windows\system32\ncrypt.dll
2013-04-03 18:04:53 ----A---- C:\Windows\SYSWOW64\msi.dll
2013-04-03 18:04:53 ----A---- C:\Windows\system32\msi.dll
2013-04-03 18:04:52 ----A---- C:\Windows\system32\profsvc.dll
2013-04-03 18:04:52 ----A---- C:\Windows\system32\profprov.dll
2013-04-03 18:04:48 ----A---- C:\Windows\SYSWOW64\esent.dll
2013-04-03 18:04:48 ----A---- C:\Windows\system32\esent.dll
2013-04-03 18:04:48 ----A---- C:\Windows\system32\drivers\nvstor.sys
2013-04-03 18:04:48 ----A---- C:\Windows\system32\drivers\nvraid.sys
2013-04-03 18:04:48 ----A---- C:\Windows\system32\drivers\amdsata.sys
2013-04-03 18:04:47 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2013-04-03 18:04:47 ----A---- C:\Windows\system32\fsutil.exe
2013-04-03 18:04:47 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2013-04-03 18:04:47 ----A---- C:\Windows\system32\drivers\storport.sys
2013-04-03 18:04:47 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2013-04-03 18:04:47 ----A---- C:\Windows\system32\drivers\amdxata.sys
2013-04-03 18:04:23 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-04-03 18:04:22 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-04-03 18:04:22 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-04-03 18:04:08 ----A---- C:\Windows\system32\shell32.dll
2013-04-03 18:04:05 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-04-03 18:03:12 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-04-03 18:03:12 ----A---- C:\Windows\SYSWOW64\user.exe
2013-04-03 18:03:12 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-04-03 18:03:12 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-04-03 18:03:12 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-04-03 18:03:12 ----A---- C:\Windows\system32\winsrv.dll
2013-04-03 18:03:11 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-04-03 18:03:10 ----A---- C:\Windows\system32\drivers\netio.sys
2013-04-03 18:03:10 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-04-03 18:03:08 ----A---- C:\Windows\system32\rdpudd.dll
2013-04-03 18:03:08 ----A---- C:\Windows\system32\rdpcorets.dll
2013-04-03 18:03:08 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2013-04-03 18:03:08 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2013-04-03 18:03:06 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-04-03 18:03:05 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2013-04-03 18:03:05 ----A---- C:\Windows\system32\wintrust.dll
2013-04-03 18:02:54 ----A---- C:\Windows\system32\drivers\cng.sys
2013-04-03 18:02:53 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2013-04-03 18:02:53 ----A---- C:\Windows\SYSWOW64\schannel.dll
2013-04-03 18:02:53 ----A---- C:\Windows\SYSWOW64\secur32.dll
2013-04-03 18:02:53 ----A---- C:\Windows\system32\schannel.dll
2013-04-03 18:02:53 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-04-03 18:02:53 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2013-04-03 18:02:52 ----A---- C:\Windows\system32\win32k.sys
2013-04-03 18:02:51 ----A---- C:\Windows\SYSWOW64\srclient.dll
2013-04-03 18:02:51 ----A---- C:\Windows\system32\srcore.dll
2013-04-03 18:02:51 ----A---- C:\Windows\system32\rstrui.exe
2013-04-03 18:02:51 ----A---- C:\Windows\system32\localspl.dll
2013-04-03 18:02:50 ----A---- C:\Windows\SYSWOW64\usp10.dll
2013-04-03 18:02:50 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2013-04-03 18:02:50 ----A---- C:\Windows\system32\usp10.dll
2013-04-03 18:02:50 ----A---- C:\Windows\system32\kerberos.dll
2013-04-03 18:02:49 ----A---- C:\Windows\SYSWOW64\synceng.dll
2013-04-03 18:02:49 ----A---- C:\Windows\system32\synceng.dll
2013-04-03 18:02:49 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2013-04-03 18:02:49 ----A---- C:\Windows\system32\drivers\usbport.sys
2013-04-03 18:02:49 ----A---- C:\Windows\system32\drivers\usbohci.sys
2013-04-03 18:02:49 ----A---- C:\Windows\system32\drivers\usbhub.sys
2013-04-03 18:02:49 ----A---- C:\Windows\system32\drivers\usbehci.sys
2013-04-03 18:02:49 ----A---- C:\Windows\system32\drivers\usbd.sys
2013-04-03 18:02:49 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2013-04-03 18:02:48 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2013-04-03 18:02:48 ----A---- C:\Windows\SYSWOW64\dpnaddr.dll
2013-04-03 18:02:48 ----A---- C:\Windows\system32\dpnet.dll
2013-04-03 18:02:48 ----A---- C:\Windows\system32\dpnaddr.dll
2013-04-03 18:02:47 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2013-04-03 18:02:47 ----A---- C:\Windows\SYSWOW64\browcli.dll
2013-04-03 18:02:47 ----A---- C:\Windows\system32\netapi32.dll
2013-04-03 18:02:47 ----A---- C:\Windows\system32\browser.dll
2013-04-03 18:02:47 ----A---- C:\Windows\system32\browcli.dll
2013-04-03 17:54:47 ----A---- C:\Windows\SYSWOW64\tzres.dll
2013-04-03 17:54:46 ----A---- C:\Windows\system32\tzres.dll
2013-04-03 17:54:40 ----A---- C:\Windows\system32\spoolsv.exe
2013-04-03 17:54:40 ----A---- C:\Windows\splwow64.exe
2013-04-03 17:54:39 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2013-04-03 17:54:39 ----A---- C:\Windows\system32\cdosys.dll
2013-04-03 17:28:15 ----A---- C:\Windows\system32\rdrmemptylst.exe
2013-04-03 17:28:15 ----A---- C:\Windows\system32\rdpwsx.dll
2013-04-03 17:28:15 ----A---- C:\Windows\system32\rdpcorekmts.dll
2013-04-03 17:28:14 ----A---- C:\Windows\system32\msxml3.dll
2013-04-03 17:28:13 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2013-04-03 17:28:13 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2013-04-03 17:28:13 ----A---- C:\Windows\system32\msxml6.dll
2013-04-03 17:28:12 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2013-04-03 17:28:12 ----A---- C:\Windows\system32\msxml3r.dll
2013-04-03 17:28:09 ----A---- C:\Windows\system32\drivers\partmgr.sys
2013-04-03 17:28:07 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-04-03 17:28:07 ----A---- C:\Windows\system32\win32spl.dll
2013-04-03 17:24:34 ----A---- C:\Windows\system32\crypt32.dll
2013-04-03 17:24:33 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2013-04-03 17:24:33 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2013-04-03 17:24:33 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2013-04-03 17:24:33 ----A---- C:\Windows\system32\cryptsvc.dll
2013-04-03 17:24:33 ----A---- C:\Windows\system32\cryptnet.dll
2013-04-03 17:24:19 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2013-04-03 17:24:19 ----A---- C:\Windows\system32\rdpcore.dll
2013-04-03 17:24:19 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2013-04-03 17:21:11 ----A---- C:\Windows\system32\wups2.dll
2013-04-03 17:21:11 ----A---- C:\Windows\system32\wucltux.dll
2013-04-03 17:21:11 ----A---- C:\Windows\system32\wuaueng.dll
2013-04-03 17:21:11 ----A---- C:\Windows\system32\wuauclt.exe
2013-04-03 17:21:06 ----A---- C:\Windows\system32\wups.dll
2013-04-03 17:21:05 ----A---- C:\Windows\system32\wudriver.dll
2013-04-03 17:21:05 ----A---- C:\Windows\system32\wuapi.dll
2013-04-03 17:21:00 ----A---- C:\Windows\system32\wuwebv.dll
2013-04-03 17:21:00 ----A---- C:\Windows\system32\wuapp.exe
2013-03-31 20:33:36 ----D---- C:\rsit
2013-03-31 20:33:36 ----D---- C:\Program Files\trend micro
2013-03-31 19:58:11 ----D---- C:\Users\Milan\AppData\Roaming\SUPERAntiSpyware.com
2013-03-31 19:57:50 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2013-03-31 19:57:50 ----D---- C:\Program Files\SUPERAntiSpyware
2013-03-31 12:29:07 ----A---- C:\Windows\SYSWOW64\tmp.txt
2013-03-31 12:29:02 ----A---- C:\rapport.txt
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\WS2Fix.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\VCCLSID.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\VACFix.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\swxcacls.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\swsc.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\swreg.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\SrchSTS.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\Process.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\o4Patch.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\IEDFix.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\IEDFix.C.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\dumphive.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\Agent.OMZ.Fix.exe
2013-03-31 12:28:48 ----A---- C:\Windows\SYSWOW64\404Fix.exe
2013-03-26 22:03:47 ----D---- C:\Windows\SYSWOW64\searchplugins
2013-03-26 22:03:47 ----D---- C:\Windows\SYSWOW64\Extensions
2013-03-26 22:03:45 ----D---- C:\Users\Milan\AppData\Roaming\Systweak
2013-03-26 22:03:44 ----A---- C:\Windows\system32\roboot64.exe
2013-03-26 22:03:36 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-03-15 13:03:32 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2013-03-15 13:03:31 ----A---- C:\Windows\system32\drivers\aswRvrt.sys

======List of files/folders modified in the last 1 month======

2013-04-05 21:12:48 ----D---- C:\Windows\Temp
2013-04-05 21:12:36 ----D---- C:\Users\Milan\AppData\Roaming\Skype
2013-04-05 21:09:14 ----D---- C:\Windows\Prefetch
2013-04-05 21:06:41 ----D---- C:\Windows\System32
2013-04-05 21:06:41 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-04-05 21:06:40 ----D---- C:\Windows\inf
2013-04-05 21:06:22 ----SD---- C:\Users\Milan\AppData\Roaming\Microsoft
2013-04-05 21:03:00 ----D---- C:\Windows\winsxs
2013-04-05 21:02:08 ----D---- C:\Windows\system32\config
2013-04-05 21:00:38 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-04-05 21:00:38 ----D---- C:\Windows\system32\cs-CZ
2013-04-05 21:00:38 ----D---- C:\Program Files\Internet Explorer
2013-04-05 21:00:38 ----D---- C:\Program Files (x86)\Internet Explorer
2013-04-05 21:00:37 ----D---- C:\Windows\SYSWOW64\sk-SK
2013-04-05 21:00:37 ----D---- C:\Windows\system32\sk-SK
2013-04-05 21:00:36 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-04-05 21:00:36 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-04-05 21:00:36 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-04-05 21:00:36 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-04-05 21:00:36 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-04-05 21:00:36 ----D---- C:\Windows\SYSWOW64\migration
2013-04-05 21:00:36 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-04-05 21:00:36 ----D---- C:\Windows\SYSWOW64\it-IT
2013-04-05 21:00:36 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-04-05 21:00:36 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-04-05 21:00:36 ----D---- C:\Windows\SYSWOW64\en-US
2013-04-05 21:00:36 ----D---- C:\Windows\SYSWOW64\el-GR
2013-04-05 21:00:36 ----D---- C:\Windows\SysWOW64
2013-04-05 21:00:36 ----D---- C:\Windows\system32\migration
2013-04-05 21:00:36 ----D---- C:\Windows\system32\en-US
2013-04-05 21:00:36 ----D---- C:\Windows\PolicyDefinitions
2013-04-05 21:00:35 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-04-05 21:00:35 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-04-05 21:00:35 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-04-05 21:00:35 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-04-05 21:00:35 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-04-05 21:00:35 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-04-05 21:00:35 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-04-05 21:00:35 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-04-05 21:00:35 ----D---- C:\Windows\SYSWOW64\es-ES
2013-04-05 21:00:35 ----D---- C:\Windows\SYSWOW64\de-DE
2013-04-05 21:00:35 ----D---- C:\Windows\SYSWOW64\da-DK
2013-04-05 21:00:35 ----D---- C:\Windows\system32\zh-TW
2013-04-05 21:00:35 ----D---- C:\Windows\system32\zh-HK
2013-04-05 21:00:35 ----D---- C:\Windows\system32\zh-CN
2013-04-05 21:00:35 ----D---- C:\Windows\system32\tr-TR
2013-04-05 21:00:35 ----D---- C:\Windows\system32\sv-SE
2013-04-05 21:00:35 ----D---- C:\Windows\system32\ru-RU
2013-04-05 21:00:35 ----D---- C:\Windows\system32\pt-PT
2013-04-05 21:00:35 ----D---- C:\Windows\system32\pt-BR
2013-04-05 21:00:35 ----D---- C:\Windows\system32\pl-PL
2013-04-05 21:00:35 ----D---- C:\Windows\system32\nl-NL
2013-04-05 21:00:35 ----D---- C:\Windows\system32\nb-NO
2013-04-05 21:00:35 ----D---- C:\Windows\system32\ko-KR
2013-04-05 21:00:35 ----D---- C:\Windows\system32\ja-JP
2013-04-05 21:00:35 ----D---- C:\Windows\system32\it-IT
2013-04-05 21:00:35 ----D---- C:\Windows\system32\hu-HU
2013-04-05 21:00:35 ----D---- C:\Windows\system32\fr-FR
2013-04-05 21:00:35 ----D---- C:\Windows\system32\fi-FI
2013-04-05 21:00:35 ----D---- C:\Windows\system32\es-ES
2013-04-05 21:00:35 ----D---- C:\Windows\system32\el-GR
2013-04-05 21:00:35 ----D---- C:\Windows\system32\de-DE
2013-04-05 21:00:35 ----D---- C:\Windows\system32\da-DK
2013-04-05 20:59:54 ----D---- C:\Windows\Logs
2013-04-05 20:59:30 ----D---- C:\Windows\system32\catroot
2013-04-05 20:58:33 ----D---- C:\Windows\system32\catroot2
2013-04-05 20:58:21 ----D---- C:\Program Files (x86)\The KMPlayer
2013-04-05 20:54:09 ----SHD---- C:\System Volume Information
2013-04-05 20:49:27 ----RSD---- C:\Windows\assembly
2013-04-05 20:49:27 ----D---- C:\Windows\Microsoft.NET
2013-04-05 20:38:59 ----D---- C:\Windows
2013-04-05 20:38:26 ----D---- C:\Windows\system32\DriverStore
2013-04-05 20:35:30 ----D---- C:\Program Files\Windows Sidebar
2013-04-05 20:35:30 ----D---- C:\Program Files\Windows Portable Devices
2013-04-05 20:35:30 ----D---- C:\Program Files\Windows Photo Viewer
2013-04-05 20:35:30 ----D---- C:\Program Files\Windows Media Player
2013-04-05 20:35:30 ----D---- C:\Program Files\Windows Mail
2013-04-05 20:35:30 ----D---- C:\Program Files\Windows Journal
2013-04-05 20:35:30 ----D---- C:\Program Files\DVD Maker
2013-04-05 20:35:30 ----D---- C:\Program Files\Common Files\System
2013-04-05 20:35:30 ----D---- C:\Program Files (x86)\Windows Sidebar
2013-04-05 20:35:30 ----D---- C:\Program Files (x86)\Windows Portable Devices
2013-04-05 20:35:30 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2013-04-05 20:35:30 ----D---- C:\Program Files (x86)\Windows Media Player
2013-04-05 20:35:30 ----D---- C:\Program Files (x86)\Windows Mail
2013-04-05 20:35:29 ----D---- C:\Windows\servicing
2013-04-05 20:35:29 ----D---- C:\Windows\ehome
2013-04-05 20:35:29 ----D---- C:\Program Files\Windows Defender
2013-04-05 20:35:28 ----SHD---- C:\Windows\BitLockerDiscoveryVolumeContents
2013-04-05 20:35:28 ----D---- C:\Windows\SYSWOW64\wbem
2013-04-05 20:35:28 ----D---- C:\Windows\SYSWOW64\sppui
2013-04-05 20:35:28 ----D---- C:\Windows\SYSWOW64\Setup
2013-04-05 20:35:28 ----D---- C:\Windows\SYSWOW64\oobe
2013-04-05 20:35:28 ----D---- C:\Windows\SYSWOW64\manifeststore
2013-04-05 20:35:28 ----D---- C:\Windows\SYSWOW64\en
2013-04-05 20:35:28 ----D---- C:\Windows\SYSWOW64\cs
2013-04-05 20:35:28 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2013-04-05 20:35:27 ----D---- C:\Windows\SYSWOW64\migwiz
2013-04-05 20:35:27 ----D---- C:\Windows\SYSWOW64\Dism
2013-04-05 20:35:18 ----D---- C:\Windows\system32\sppui
2013-04-05 20:35:18 ----D---- C:\Windows\system32\Setup
2013-04-05 20:35:18 ----D---- C:\Windows\system32\oobe
2013-04-05 20:35:18 ----D---- C:\Windows\system32\manifeststore
2013-04-05 20:35:18 ----D---- C:\Windows\system32\drivers\UMDF
2013-04-05 20:35:18 ----D---- C:\Windows\system32\drivers\en-US
2013-04-05 20:35:18 ----D---- C:\Windows\system32\drivers\cs-CZ
2013-04-05 20:35:18 ----D---- C:\Windows\system32\drivers
2013-04-05 20:35:18 ----D---- C:\Windows\system32\cs
2013-04-05 20:35:18 ----D---- C:\Windows\system32\AdvancedInstallers
2013-04-05 20:35:17 ----D---- C:\Windows\system32\wbem
2013-04-05 20:35:12 ----D---- C:\Windows\system32\migwiz
2013-04-05 20:35:12 ----D---- C:\Windows\system32\Dism
2013-04-05 20:35:07 ----RSD---- C:\Windows\Fonts
2013-04-05 20:35:07 ----D---- C:\Windows\AppPatch
2013-04-05 20:34:59 ----D---- C:\Windows\system32\Boot
2013-04-05 20:33:16 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2013-04-05 20:33:16 ----A---- C:\Windows\system32\msclmd.dll
2013-04-05 19:58:38 ----RD---- C:\Program Files (x86)
2013-04-05 19:58:38 ----HD---- C:\ProgramData
2013-04-05 17:57:54 ----D---- C:\Windows\rescache
2013-04-03 18:17:59 ----D---- C:\Windows\debug
2013-04-03 18:08:42 ----D---- C:\Program Files (x86)\Intel
2013-04-03 17:37:32 ----D---- C:\ProgramData\Adobe
2013-04-03 17:37:27 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-04-03 17:35:01 ----D---- C:\Windows\Panther
2013-03-31 20:33:36 ----RD---- C:\Program Files
2013-03-31 12:35:31 ----D---- C:\Windows\Tasks
2013-03-31 12:35:31 ----D---- C:\Windows\system32\Tasks
2013-03-26 16:24:13 ----SHD---- C:\Windows\Installer
2013-03-25 17:47:43 ----D---- C:\Windows\system32\NDF
2013-03-12 01:10:56 ----N---- C:\Windows\system32\MpSigStub.exe
2013-03-07 01:32:22 ----A---- C:\Windows\system32\aswBoot.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [2013-03-07 65336]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2013-03-07 70992]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2013-03-07 1025808]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2013-03-07 377920]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2013-03-07 68920]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2013-03-07 33400]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2013-03-07 80816]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-12-14 5353888]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-01-04 2697448]
R3 LVRS64;Logitech RightSound Filter Driver; C:\Windows\system32\DRIVERS\lvrs64.sys [2012-01-18 351136]
R3 LVUSBS64;Logitech USB Monitor Filter; C:\Windows\system32\drivers\LVUSBS64.sys [2007-03-06 58400]
R3 LVUVC64;Logitech Webcam Pro 9000(UVC); C:\Windows\system32\DRIVERS\lvuvc64.sys [2012-01-18 4865568]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-12-24 412264]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2011-05-13 36328]
S3 aswVmm;aswVmm; C:\Windows\system32\drivers\aswVmm.sys [2013-03-07 178624]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2011-08-17 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2011-08-17 27136]
S3 PID_0928;Logitech QuickCam Express(PID_0928); C:\Windows\system32\DRIVERS\LV561V64.SYS [2007-03-06 468000]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2011-05-13 157672]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2011-05-13 16872]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2011-05-13 177640]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2011-08-17 9216]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2011-08-17 9216]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2012-07-11 140672]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-03-07 45248]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 UMVPFSrv;UMVPFSrv; C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [2012-01-18 450848]
R3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-09 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-04-03 253656]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-12-14 277616]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-09 136176]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]

-----------------EOF-----------------

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

:commands
[Purity]
[Emptytemp]
[Emptyflash]

Klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dete nový log RSIT.