Zpomaleni prochazeni webu, reinstal systemu nepomohl.
Napsal: 08 dub 2013 19:46
Zdravim.
mam neuveritelny problem
Cerstve nainstalovany pocitac se zakladnimi programy, win 7, aktualizovany, zapojeny do domaci site kde mam cca 6kompů.
Vsechny kompy jedou ´fpohode´, turbo nacitani stranek.Pouze u me je problem, pri nastartovani kompu otevru chrome a zacnu browzdat, po chvili mi prestanou davat weby odezvu a uz se ani nenactou, nekdy pouze hola stranka s reklamou, ktera se nenaharala a vyprsel ji casovy limit, od te doby do dalsiho restartu se nepodivam nikam jinam nez na seznam.cz, ktery nabiha vcelku radne.
Podotykam cerstve nainstalovany system, antivir avast premier.
Pingy od serveru jsou v normalu, do 30ti od libovolneho, pokud zacnu neco stahovat, vpohode se stahuje plnou rychlosti, az 10 000kbps (cisty mego)
prikladam log, uz si newim rady, zkousim pratele ale nikdo to nechape.
Dekuji pripadne za odezvu.
Logfile of random's system information tool 1.09 (written by random/random)
Run by Románek at 2013-04-08 20:34:57
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 239 GB (86%) free of 277 GB
Total RAM: 8191 MB (72% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:35:07, on 8.4.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16470)
Boot mode: Normal
Running processes:
E:\Záloha\QIP - Romanek\qip.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Google\Google Talk\googletalk.exe
C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe
C:\Users\Románek\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Románek.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [googletalk] C:\Program Files (x86)\Google\Google Talk\googletalk.exe /autostart
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [BtTray] "C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [KeePass 2 PreLoad] "C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe" --preload
O4 - HKCU\..\Run: [Google Update] "C:\Users\Románek\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [QIP2005] E:\Záloha\QIP - Romanek\qip.exe
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{C7F99E2C-5FEB-4508-BE60-3301FEA9D5E5}: NameServer = 172.16.254.254,8.8.8.8
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BlueSoleilCS - IVT Corporation - C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
O23 - Service: BsHelpCS - IVT Corporation - C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Freemake Improver - Freemake - C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 9244 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe"
taskeng.exe {5EE4715A-6D34-4B08-BBE3-7C968CB6D956}
"C:\Program Files (x86)\Google\Update\1.3.21.135\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.21.135\GoogleCrashHandler64.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"E:\Záloha\QIP - Romanek\qip.exe"
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe"
"C:\Windows\System32\StikyNot.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\Google\Google Talk\googletalk.exe" /autostart
"C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe"
"C:\Users\Románek\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-fd2adec9-8a2f-48fc-8ce0-aece166839dc -SystemEventPortName:HostProcess-f25b04af-5dd7-456f-a31e-e8f68049a652 -IoCancelEventPortName:HostProcess-608342e7-fc91-4534-a66d-85ba2def9e3d -NonStateChangingEventPortName:HostProcess-bbf704fc-7fb4-42a1-8e5f-c8bed9248d6c -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:6674d18d-eb56-4e28-af17-84c86359197a -DeviceGroupId:WpdFsGroup
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe"
"C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version8\TeamViewer8_Logfile.log
"C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version8\TeamViewer8_Logfile.log
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3164.0.331805913\123261451" --supports-dual-gpus=false --gpu-vendor-id=0x1002 --gpu-device-id=0x68b8 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=9.12.0.0 --ignored=" --type=renderer " /prefetch:12
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/BookmarkPrompt/Disabled/ForceCompositingMode/thread/InfiniteCache/No/OmniboxSearchSuggestTrialStarted2013Q1/13/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_99/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/group_01/ --extension-process --renderer-print-preview --enable-threaded-compositing --channel="3164.1.863412482\2026021247" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/BookmarkPrompt/Disabled/ForceCompositingMode/thread/InfiniteCache/No/OmniboxSearchSuggestTrialStarted2013Q1/13/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_99/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/group_01/ --extension-process --renderer-print-preview --enable-threaded-compositing --channel="3164.2.850700284\1842299136" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/BookmarkPrompt/Disabled/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/Standard/OmniboxSearchSuggestTrialStarted2013Q1/13/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_99/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --instant-process --enable-threaded-compositing --channel="3164.4.483979553\137098825" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/BookmarkPrompt/Disabled/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/Standard/OmniboxSearchSuggestTrialStarted2013Q1/13/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_99/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="3164.5.1132086086\1434755434" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/BookmarkPrompt/Disabled/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/NewTabButton/default/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/Standard/OmniboxSearchSuggestTrialStarted2013Q1/13/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_99/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="3164.7.832567496\1271630602" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/BookmarkPrompt/Disabled/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/NewTabButton/default/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/Standard/OmniboxSearchSuggestTrialStarted2013Q1/13/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_99/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="3164.8.1854694455\4934881" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/BookmarkPrompt/Disabled/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/NewTabButton/default/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/Standard/OmniboxSearchSuggestTrialStarted2013Q1/13/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwndMin10/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_99/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="3164.9.645760145\1953034823" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/BookmarkPrompt/Disabled/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/NewTabButton/default/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/Standard/OmniboxSearchSuggestTrialStarted2013Q1/13/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwndMin10/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_99/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="3164.10.1067399870\799413099" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="3164.11.831992284\1274273778" --lang=cs --ignored=" --type=renderer " /prefetch:13
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/BookmarkPrompt/Disabled/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/NewTabButton/default/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/Standard/OmniboxSearchSuggestTrialStarted2013Q1/13/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwndMin10/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_99/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="3164.12.1228682491\831474462" /prefetch:3
C:\Windows\servicing\TrustedInstaller.exe
"C:\Windows\system32\SearchFilterHost.exe" 0 540 544 552 65536 548
"C:\Windows\system32\wuauclt.exe"
"C:\Users\Románek\Downloads\RSITx64.exe"
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2339007899-624079778-3773007337-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2339007899-624079778-3773007337-1000UA.job
=========Mozilla firefox=========
ProfilePath - C:\Users\Románek\AppData\Roaming\Mozilla\Firefox\Profiles\y9tthqtm.default
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.17.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
C:\Program Files (x86)\Mozilla Firefox\searchplugins\
amazondotcom.xml
bing.xml
eBay.xml
google.xml
twitter.xml
wikipedia.xml
yahoo.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-04-04 461216]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-04-04 170912]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Románek\AppData\Local\Google\Update\GoogleUpdate.exe [2013-04-04 116648]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"QIP2005"=E:\Záloha\QIP - Romanek\qip.exe [2009-08-13 3276288]
"RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2009-07-14 427520]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2013-03-07 4767304]
"googletalk"=C:\Program Files (x86)\Google\Google Talk\googletalk.exe [2007-01-01 3739648]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-12-19 642808]
"BtTray"=C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe [2009-09-02 315478]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-11-17 113288]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-18 946352]
"KeePass 2 PreLoad"=C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2013-04-05 1960448]
C:\Users\Románek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Románek\AppData\Roaming\Dropbox\bin\Dropbox.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-04-08 20:34:57 ----D---- C:\rsit
2013-04-08 20:34:57 ----D---- C:\Program Files\trend micro
2013-04-08 20:05:52 ----D---- C:\Users\Románek\AppData\Roaming\GHISLER
2013-04-08 20:05:03 ----D---- C:\totalcmd
2013-04-08 20:02:20 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2013-04-08 19:38:47 ----D---- C:\ProgramData\Mozilla
2013-04-08 19:38:47 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-04-08 19:38:44 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-04-07 23:26:22 ----D---- C:\ProgramData\Kaspersky Lab
2013-04-07 23:20:14 ----D---- C:\Program Files\CCleaner
2013-04-07 22:03:48 ----D---- C:\Program Files (x86)\KeePass Password Safe 2
2013-04-07 21:24:03 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2013-04-07 21:24:02 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2013-04-07 21:23:19 ----D---- C:\Program Files (x86)\Winamp Detect
2013-04-07 21:23:05 ----D---- C:\Users\Románek\AppData\Roaming\Winamp
2013-04-07 21:23:05 ----D---- C:\Program Files (x86)\Winamp
2013-04-07 18:21:44 ----D---- C:\Windows\system32\SPReview
2013-04-07 18:20:31 ----D---- C:\Windows\system32\EventProviders
2013-04-07 18:17:23 ----A---- C:\Windows\system32\netfxperf.dll
2013-04-07 18:17:23 ----A---- C:\Windows\system32\dfshim.dll
2013-04-07 18:17:15 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2013-04-07 18:17:11 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-04-07 18:17:11 ----A---- C:\Windows\system32\mstscax.dll
2013-04-07 18:17:11 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-04-07 18:17:10 ----A---- C:\Windows\system32\d3d10warp.dll
2013-04-07 18:17:07 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-04-07 18:17:02 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2013-04-07 18:17:02 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2013-04-07 18:17:02 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-04-07 18:17:02 ----A---- C:\Windows\system32\tssrvlic.dll
2013-04-07 18:17:02 ----A---- C:\Windows\system32\sysmain.dll
2013-04-07 18:17:02 ----A---- C:\Windows\system32\RDVGHelper.exe
2013-04-07 18:17:00 ----A---- C:\Windows\SYSWOW64\pmcsnap.dll
2013-04-07 18:16:59 ----A---- C:\Windows\system32\MSVidCtl.dll
2013-04-07 18:16:57 ----A---- C:\Windows\system32\wmp.dll
2013-04-07 18:16:56 ----A---- C:\Windows\system32\mscoree.dll
2013-04-07 18:16:55 ----A---- C:\Windows\system32\mmcndmgr.dll
2013-04-07 18:16:54 ----A---- C:\Windows\system32\secproc_isv.dll
2013-04-07 18:16:53 ----A---- C:\Windows\system32\RMActivate_isv.exe
2013-04-07 18:16:53 ----A---- C:\Windows\system32\mf.dll
2013-04-07 18:16:52 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2013-04-07 18:16:52 ----A---- C:\Windows\system32\secproc.dll
2013-04-07 18:16:52 ----A---- C:\Windows\system32\RMActivate.exe
2013-04-07 18:16:51 ----A---- C:\Windows\system32\xpsservices.dll
2013-04-07 18:16:48 ----A---- C:\Windows\SYSWOW64\secproc.dll
2013-04-07 18:16:48 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2013-04-07 18:16:47 ----A---- C:\Windows\system32\rpcrt4.dll
2013-04-07 18:16:46 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2013-04-07 18:16:45 ----A---- C:\Windows\SYSWOW64\PushPrinterConnections.exe
2013-04-07 18:16:45 ----A---- C:\Windows\SYSWOW64\ppcsnap.dll
2013-04-07 18:16:45 ----A---- C:\Windows\system32\schedsvc.dll
2013-04-07 18:16:45 ----A---- C:\Windows\system32\ole32.dll
2013-04-07 18:16:43 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2013-04-07 18:16:43 ----A---- C:\Windows\system32\spwizui.dll
2013-04-07 18:16:42 ----A---- C:\Windows\system32\taskschd.dll
2013-04-07 18:16:42 ----A---- C:\Windows\system32\RacEngn.dll
2013-04-07 18:16:41 ----A---- C:\Windows\SYSWOW64\mf.dll
2013-04-07 18:16:41 ----A---- C:\Windows\system32\wevtsvc.dll
2013-04-07 18:16:41 ----A---- C:\Windows\system32\diagperf.dll
2013-04-07 18:16:40 ----A---- C:\Windows\system32\vssapi.dll
2013-04-07 18:16:40 ----A---- C:\Windows\system32\ExplorerFrame.dll
2013-04-07 18:16:40 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2013-04-07 18:16:39 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2013-04-07 18:16:39 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2013-04-07 18:16:38 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2013-04-07 18:16:37 ----A---- C:\Windows\system32\UIRibbon.dll
2013-04-07 18:16:35 ----A---- C:\Windows\SYSWOW64\wmp.dll
2013-04-07 18:16:34 ----A---- C:\Windows\system32\WsmSvc.dll
2013-04-07 18:16:33 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2013-04-07 18:16:33 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2013-04-07 18:16:33 ----A---- C:\Windows\system32\WMVCORE.DLL
2013-04-07 18:16:32 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2013-04-07 18:16:32 ----A---- C:\Windows\system32\PresentationHost.exe
2013-04-07 18:16:31 ----A---- C:\Windows\system32\spreview.exe
2013-04-07 18:16:31 ----A---- C:\Windows\system32\spinstall.exe
2013-04-07 18:16:31 ----A---- C:\Windows\system32\rdpdd.dll
2013-04-07 18:16:31 ----A---- C:\Windows\system32\MPSSVC.dll
2013-04-07 18:16:31 ----A---- C:\Windows\system32\CertEnroll.dll
2013-04-07 18:16:30 ----A---- C:\Windows\system32\WinSAT.exe
2013-04-07 18:16:29 ----A---- C:\Windows\system32\WMVDECOD.DLL
2013-04-07 18:16:29 ----A---- C:\Windows\system32\d3d9.dll
2013-04-07 18:16:28 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2013-04-07 18:16:28 ----A---- C:\Windows\system32\IKEEXT.DLL
2013-04-07 18:16:27 ----A---- C:\Windows\system32\SearchFolder.dll
2013-04-07 18:16:26 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2013-04-07 18:16:26 ----A---- C:\Windows\system32\gpsvc.dll
2013-04-07 18:16:26 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2013-04-07 18:16:25 ----A---- C:\Windows\system32\VSSVC.exe
2013-04-07 18:16:25 ----A---- C:\Windows\system32\dwmcore.dll
2013-04-07 18:16:25 ----A---- C:\Windows\system32\dbgeng.dll
2013-04-07 18:16:24 ----A---- C:\Windows\SYSWOW64\rdvgumd32.dll
2013-04-07 18:16:24 ----A---- C:\Windows\system32\drivers\http.sys
2013-04-07 18:16:23 ----A---- C:\Windows\system32\drivers\ndis.sys
2013-04-07 18:16:22 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2013-04-07 18:16:22 ----A---- C:\Windows\system32\actxprxy.dll
2013-04-07 18:16:21 ----A---- C:\Windows\SYSWOW64\ole32.dll
2013-04-07 18:16:21 ----A---- C:\Windows\system32\TSWorkspace.dll
2013-04-07 18:16:21 ----A---- C:\Windows\system32\qmgr.dll
2013-04-07 18:16:21 ----A---- C:\Windows\system32\audiosrv.dll
2013-04-07 18:16:20 ----A---- C:\Windows\system32\termsrv.dll
2013-04-07 18:16:20 ----A---- C:\Windows\system32\gpprefcl.dll
2013-04-07 18:16:19 ----A---- C:\Windows\system32\sqmapi.dll
2013-04-07 18:16:19 ----A---- C:\Windows\system32\mstsc.exe
2013-04-07 18:16:17 ----A---- C:\Windows\system32\netlogon.dll
2013-04-07 18:16:17 ----A---- C:\Windows\system32\imapi2fs.dll
2013-04-07 18:16:16 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2013-04-07 18:16:16 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2013-04-07 18:16:16 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2013-04-07 18:16:16 ----A---- C:\Windows\system32\winhttp.dll
2013-04-07 18:16:16 ----A---- C:\Windows\system32\QAGENTRT.DLL
2013-04-07 18:16:16 ----A---- C:\Windows\system32\msv1_0.dll
2013-04-07 18:16:16 ----A---- C:\Windows\system32\d3d11.dll
2013-04-07 18:16:15 ----A---- C:\Windows\system32\setupapi.dll
2013-04-07 18:16:15 ----A---- C:\Windows\system32\propsys.dll
2013-04-07 18:16:14 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2013-04-07 18:16:14 ----A---- C:\Windows\system32\wbengine.exe
2013-04-07 18:16:14 ----A---- C:\Windows\system32\rpcss.dll
2013-04-07 18:16:14 ----A---- C:\Windows\system32\PushPrinterConnections.exe
2013-04-07 18:16:13 ----A---- C:\Windows\system32\werconcpl.dll
2013-04-07 18:16:13 ----A---- C:\Windows\system32\taskeng.exe
2013-04-07 18:16:13 ----A---- C:\Windows\system32\authui.dll
2013-04-07 18:16:12 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2013-04-07 18:16:12 ----A---- C:\Windows\system32\user32.dll
2013-04-07 18:16:12 ----A---- C:\Windows\system32\odbc32.dll
2013-04-07 18:16:11 ----A---- C:\Windows\system32\WSDApi.dll
2013-04-07 18:16:11 ----A---- C:\Windows\system32\umrdp.dll
2013-04-07 18:16:11 ----A---- C:\Windows\system32\LSCSHostPolicy.dll
2013-04-07 18:16:11 ----A---- C:\Windows\system32\drivers\tdx.sys
2013-04-07 18:16:11 ----A---- C:\Windows\system32\dhcpcore.dll
2013-04-07 18:16:11 ----A---- C:\Windows\system32\certmgr.dll
2013-04-07 18:16:10 ----A---- C:\Windows\SYSWOW64\wer.dll
2013-04-07 18:16:10 ----A---- C:\Windows\SYSWOW64\certcli.dll
2013-04-07 18:16:10 ----A---- C:\Windows\system32\scavengeui.dll
2013-04-07 18:16:10 ----A---- C:\Windows\system32\drivers\netbt.sys
2013-04-07 18:16:09 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2013-04-07 18:16:08 ----A---- C:\Windows\system32\tsmf.dll
2013-04-07 18:16:08 ----A---- C:\Windows\system32\ncsi.dll
2013-04-07 18:16:08 ----A---- C:\Windows\system32\msdrm.dll
2013-04-07 18:16:07 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2013-04-07 18:16:07 ----A---- C:\Windows\system32\shlwapi.dll
2013-04-07 18:16:07 ----A---- C:\Windows\system32\netshell.dll
2013-04-07 18:16:07 ----A---- C:\Windows\system32\msdtctm.dll
2013-04-07 18:16:07 ----A---- C:\Windows\system32\framedynos.dll
2013-04-07 18:16:06 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2013-04-07 18:16:06 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2013-04-07 18:16:06 ----A---- C:\Windows\system32\wmicmiplugin.dll
2013-04-07 18:16:06 ----A---- C:\Windows\system32\rdpshell.exe
2013-04-07 18:16:05 ----A---- C:\Windows\system32\ws2_32.dll
2013-04-07 18:16:05 ----A---- C:\Windows\system32\winlogon.exe
2013-04-07 18:16:05 ----A---- C:\Windows\system32\nlasvc.dll
2013-04-07 18:16:05 ----A---- C:\Windows\system32\netcfgx.dll
2013-04-07 18:16:05 ----A---- C:\Windows\system32\appmgr.dll
2013-04-07 18:16:04 ----A---- C:\Windows\system32\lsm.exe
2013-04-07 18:16:03 ----A---- C:\Windows\system32\wmpps.dll
2013-04-07 18:16:03 ----A---- C:\Windows\system32\dxgi.dll
2013-04-07 18:16:03 ----A---- C:\Windows\system32\drivers\csc.sys
2013-04-07 18:16:03 ----A---- C:\Windows\system32\comdlg32.dll
2013-04-07 18:16:03 ----A---- C:\Windows\system32\apphelp.dll
2013-04-07 18:16:02 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2013-04-07 18:16:02 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2013-04-07 18:16:02 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2013-04-07 18:16:02 ----A---- C:\Windows\system32\wpdshext.dll
2013-04-07 18:16:02 ----A---- C:\Windows\system32\Query.dll
2013-04-07 18:16:02 ----A---- C:\Windows\system32\mswsock.dll
2013-04-07 18:16:02 ----A---- C:\Windows\system32\drvstore.dll
2013-04-07 18:16:02 ----A---- C:\Windows\system32\azroles.dll
2013-04-07 18:16:01 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2013-04-07 18:16:01 ----A---- C:\Windows\system32\QAGENT.DLL
2013-04-07 18:16:00 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2013-04-07 18:16:00 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-04-07 18:16:00 ----A---- C:\Windows\system32\BFE.DLL
2013-04-07 18:15:59 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2013-04-07 18:15:59 ----A---- C:\Windows\system32\Vault.dll
2013-04-07 18:15:59 ----A---- C:\Windows\system32\samsrv.dll
2013-04-07 18:15:59 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2013-04-07 18:15:59 ----A---- C:\Windows\system32\cmd.exe
2013-04-07 18:15:58 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2013-04-07 18:15:58 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2013-04-07 18:15:58 ----A---- C:\Windows\system32\lpksetup.exe
2013-04-07 18:15:57 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-04-07 18:15:57 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2013-04-07 18:15:57 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-04-07 18:15:57 ----A---- C:\Windows\system32\rdpclip.exe
2013-04-07 18:15:57 ----A---- C:\Windows\system32\cscsvc.dll
2013-04-07 18:15:56 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2013-04-07 18:15:56 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2013-04-07 18:15:56 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-04-07 18:15:56 ----A---- C:\Windows\system32\WebClnt.dll
2013-04-07 18:15:56 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2013-04-07 18:15:55 ----A---- C:\Windows\SYSWOW64\Query.dll
2013-04-07 18:15:55 ----A---- C:\Windows\SYSWOW64\gpprefcl.dll
2013-04-07 18:15:55 ----A---- C:\Windows\system32\sxs.dll
2013-04-07 18:15:55 ----A---- C:\Windows\system32\cscobj.dll
2013-04-07 18:15:54 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2013-04-07 18:15:54 ----A---- C:\Windows\SYSWOW64\upnp.dll
2013-04-07 18:15:54 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2013-04-07 18:15:54 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2013-04-07 18:15:54 ----A---- C:\Windows\system32\Wldap32.dll
2013-04-07 18:15:54 ----A---- C:\Windows\system32\taskcomp.dll
2013-04-07 18:15:54 ----A---- C:\Windows\system32\pnidui.dll
2013-04-07 18:15:54 ----A---- C:\Windows\system32\mfds.dll
2013-04-07 18:15:54 ----A---- C:\Windows\system32\mcbuilder.exe
2013-04-07 18:15:54 ----A---- C:\Windows\system32\ipsmsnap.dll
2013-04-07 18:15:53 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2013-04-07 18:15:53 ----A---- C:\Windows\system32\hgprint.dll
2013-04-07 18:15:52 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2013-04-07 18:15:52 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2013-04-07 18:15:52 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2013-04-07 18:15:52 ----A---- C:\Windows\system32\webservices.dll
2013-04-07 18:15:52 ----A---- C:\Windows\system32\SessEnv.dll
2013-04-07 18:15:52 ----A---- C:\Windows\system32\rdpendp.dll
2013-04-07 18:15:51 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2013-04-07 18:15:51 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-04-07 18:15:51 ----A---- C:\Windows\system32\winsta.dll
2013-04-07 18:15:50 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2013-04-07 18:15:50 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2013-04-07 18:15:50 ----A---- C:\Windows\system32\sqlsrv32.dll
2013-04-07 18:15:50 ----A---- C:\Windows\system32\fveapi.dll
2013-04-07 18:15:50 ----A---- C:\Windows\system32\dot3api.dll
2013-04-07 18:15:49 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2013-04-07 18:15:49 ----A---- C:\Windows\system32\gdi32.dll
2013-04-07 18:15:49 ----A---- C:\Windows\system32\drivers\msrpc.sys
2013-04-07 18:15:48 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe
2013-04-07 18:15:48 ----A---- C:\Windows\system32\WMNetMgr.dll
2013-04-07 18:15:48 ----A---- C:\Windows\system32\schtasks.exe
2013-04-07 18:15:48 ----A---- C:\Windows\system32\prncache.dll
2013-04-07 18:15:48 ----A---- C:\Windows\system32\mcmde.dll
2013-04-07 18:15:48 ----A---- C:\Windows\system32\drivers\volsnap.sys
2013-04-07 18:15:47 ----A---- C:\Windows\SYSWOW64\userenv.dll
2013-04-07 18:15:47 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2013-04-07 18:15:47 ----A---- C:\Windows\system32\wlanpref.dll
2013-04-07 18:15:47 ----A---- C:\Windows\system32\vpnike.dll
2013-04-07 18:15:46 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2013-04-07 18:15:46 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2013-04-07 18:15:46 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2013-04-07 18:15:46 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2013-04-07 18:15:46 ----A---- C:\Windows\system32\userenv.dll
2013-04-07 18:15:46 ----A---- C:\Windows\system32\tspubwmi.dll
2013-04-07 18:15:46 ----A---- C:\Windows\system32\photowiz.dll
2013-04-07 18:15:46 ----A---- C:\Windows\system32\evr.dll
2013-04-07 18:15:46 ----A---- C:\Windows\system32\drivers\rdbss.sys
2013-04-07 18:15:46 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2013-04-07 18:15:45 ----A---- C:\Windows\system32\IPSECSVC.DLL
2013-04-07 18:15:45 ----A---- C:\Windows\system32\framedyn.dll
2013-04-07 18:15:44 ----A---- C:\Windows\SYSWOW64\cmd.exe
2013-04-07 18:15:44 ----A---- C:\Windows\system32\wmpmde.dll
2013-04-07 18:15:44 ----A---- C:\Windows\system32\WMPEncEn.dll
2013-04-07 18:15:44 ----A---- C:\Windows\system32\wmpeffects.dll
2013-04-07 18:15:44 ----A---- C:\Windows\system32\SyncCenter.dll
2013-04-07 18:15:44 ----A---- C:\Windows\system32\sppobjs.dll
2013-04-07 18:15:44 ----A---- C:\Windows\system32\mfreadwrite.dll
2013-04-07 18:15:44 ----A---- C:\Windows\system32\FXSSVC.exe
2013-04-07 18:15:44 ----A---- C:\Windows\system32\AudioSes.dll
2013-04-07 18:15:44 ----A---- C:\Windows\system32\aepdu.dll
2013-04-07 18:15:43 ----A---- C:\Windows\system32\tscfgwmi.dll
2013-04-07 18:15:43 ----A---- C:\Windows\system32\srvsvc.dll
2013-04-07 18:15:43 ----A---- C:\Windows\system32\shsvcs.dll
2013-04-07 18:15:43 ----A---- C:\Windows\system32\rdpinit.exe
2013-04-07 18:15:43 ----A---- C:\Windows\system32\aeinv.dll
2013-04-07 18:15:42 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2013-04-07 18:15:42 ----A---- C:\Windows\SYSWOW64\propsys.dll
2013-04-07 18:15:42 ----A---- C:\Windows\SYSWOW64\mfds.dll
2013-04-07 18:15:42 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2013-04-07 18:15:42 ----A---- C:\Windows\system32\WinSATAPI.dll
2013-04-07 18:15:42 ----A---- C:\Windows\system32\vmicsvc.exe
2013-04-07 18:15:42 ----A---- C:\Windows\system32\fde.dll
2013-04-07 18:15:41 ----A---- C:\Windows\SYSWOW64\rdpendp.dll
2013-04-07 18:15:41 ----A---- C:\Windows\system32\stobject.dll
2013-04-07 18:15:41 ----A---- C:\Windows\system32\netdiagfx.dll
2013-04-07 18:15:41 ----A---- C:\Windows\system32\localsec.dll
2013-04-07 18:15:41 ----A---- C:\Windows\system32\imapi2.dll
2013-04-07 18:15:41 ----A---- C:\Windows\system32\drivers\vmbus.sys
2013-04-07 18:15:41 ----A---- C:\Windows\system32\credui.dll
2013-04-07 18:15:41 ----A---- C:\Windows\system32\cdd.dll
2013-04-07 18:15:41 ----A---- C:\Windows\system32\bcryptprimitives.dll
2013-04-07 18:15:40 ----A---- C:\Windows\SYSWOW64\user32.dll
2013-04-07 18:15:40 ----A---- C:\Windows\system32\netid.dll
2013-04-07 18:15:40 ----A---- C:\Windows\system32\iphlpsvc.dll
2013-04-07 18:15:40 ----A---- C:\Windows\system32\inetpp.dll
2013-04-07 18:15:40 ----A---- C:\Windows\system32\drivers\udfs.sys
2013-04-07 18:15:40 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2013-04-07 18:15:39 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2013-04-07 18:15:39 ----A---- C:\Windows\SYSWOW64\azroles.dll
2013-04-07 18:15:39 ----A---- C:\Windows\system32\tcpipcfg.dll
2013-04-07 18:15:39 ----A---- C:\Windows\system32\spp.dll
2013-04-07 18:15:39 ----A---- C:\Windows\system32\QSHVHOST.DLL
2013-04-07 18:15:39 ----A---- C:\Windows\system32\davclnt.dll
2013-04-07 18:15:39 ----A---- C:\Windows\system32\cscui.dll
2013-04-07 18:15:38 ----A---- C:\Windows\SYSWOW64\appmgr.dll
2013-04-07 18:15:38 ----A---- C:\Windows\system32\msinfo32.exe
2013-04-07 18:15:38 ----A---- C:\Windows\system32\biocpl.dll
2013-04-07 18:15:37 ----A---- C:\Windows\system32\scansetting.dll
2013-04-07 18:15:37 ----A---- C:\Windows\system32\printui.dll
2013-04-07 18:15:37 ----A---- C:\Windows\system32\mspbda.dll
2013-04-07 18:15:36 ----A---- C:\Windows\SYSWOW64\themeui.dll
2013-04-07 18:15:36 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2013-04-07 18:15:36 ----A---- C:\Windows\SYSWOW64\spp.dll
2013-04-07 18:15:36 ----A---- C:\Windows\SYSWOW64\credui.dll
2013-04-07 18:15:36 ----A---- C:\Windows\system32\pla.dll
2013-04-07 18:15:36 ----A---- C:\Windows\system32\PhotoScreensaver.scr
2013-04-07 18:15:35 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2013-04-07 18:15:35 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2013-04-07 18:15:35 ----A---- C:\Windows\system32\wusa.exe
2013-04-07 18:15:35 ----A---- C:\Windows\system32\msdri.dll
2013-04-07 18:15:34 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2013-04-07 18:15:34 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2013-04-07 18:15:34 ----A---- C:\Windows\system32\wiaservc.dll
2013-04-07 18:15:34 ----A---- C:\Windows\system32\vds.exe
2013-04-07 18:15:34 ----A---- C:\Windows\system32\rpchttp.dll
2013-04-07 18:15:34 ----A---- C:\Windows\system32\mscms.dll
2013-04-07 18:15:34 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2013-04-07 18:15:34 ----A---- C:\Windows\system32\drivers\pci.sys
2013-04-07 18:15:34 ----A---- C:\Windows\system32\aitagent.exe
2013-04-07 18:15:34 ----A---- C:\Windows\system32\AdmTmpl.dll
2013-04-07 18:15:33 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2013-04-07 18:15:33 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2013-04-07 18:15:33 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-04-07 18:15:33 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2013-04-07 18:15:33 ----A---- C:\Windows\system32\XpsRasterService.dll
2013-04-07 18:15:33 ----A---- C:\Windows\system32\wisptis.exe
2013-04-07 18:15:33 ----A---- C:\Windows\system32\PkgMgr.exe
2013-04-07 18:15:33 ----A---- C:\Windows\system32\ocsetup.exe
2013-04-07 18:15:33 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2013-04-07 18:15:33 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2013-04-07 18:15:32 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2013-04-07 18:15:32 ----A---- C:\Windows\SYSWOW64\evr.dll
2013-04-07 18:15:32 ----A---- C:\Windows\SYSWOW64\calc.exe
2013-04-07 18:15:32 ----A---- C:\Windows\system32\sppwinob.dll
2013-04-07 18:15:32 ----A---- C:\Windows\system32\ocsetapi.dll
2013-04-07 18:15:32 ----A---- C:\Windows\system32\DXP.dll
2013-04-07 18:15:32 ----A---- C:\Windows\system32\drivers\volmgr.sys
2013-04-07 18:15:32 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2013-04-07 18:15:31 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2013-04-07 18:15:31 ----A---- C:\Windows\system32\wpdbusenum.dll
2013-04-07 18:15:31 ----A---- C:\Windows\system32\wcncsvc.dll
2013-04-07 18:15:31 ----A---- C:\Windows\system32\upnp.dll
2013-04-07 18:15:31 ----A---- C:\Windows\system32\mprapi.dll
2013-04-07 18:15:31 ----A---- C:\Windows\system32\eapp3hst.dll
2013-04-07 18:15:31 ----A---- C:\Windows\system32\drivers\msdsm.sys
2013-04-07 18:15:31 ----A---- C:\Windows\system32\ci.dll
2013-04-07 18:15:30 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2013-04-07 18:15:30 ----A---- C:\Windows\system32\t2embed.dll
2013-04-07 18:15:30 ----A---- C:\Windows\system32\Robocopy.exe
2013-04-07 18:15:30 ----A---- C:\Windows\system32\eapphost.dll
2013-04-07 18:15:27 ----A---- C:\Windows\SYSWOW64\sxs.dll
2013-04-07 18:15:27 ----A---- C:\Windows\system32\drivers\HpSAMD.sys
2013-04-07 18:15:26 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2013-04-07 18:15:26 ----A---- C:\Windows\SYSWOW64\stobject.dll
2013-04-07 18:15:26 ----A---- C:\Windows\SYSWOW64\netshell.dll
2013-04-07 18:15:26 ----A---- C:\Windows\system32\thumbcache.dll
2013-04-07 18:15:26 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2013-04-07 18:15:26 ----A---- C:\Windows\system32\hal.dll
2013-04-07 18:15:26 ----A---- C:\Windows\system32\DxpTaskSync.dll
2013-04-07 18:15:26 ----A---- C:\Windows\system32\drivers\fvevol.sys
2013-04-07 18:15:25 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2013-04-07 18:15:25 ----A---- C:\Windows\system32\scecli.dll
2013-04-07 18:15:25 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2013-04-07 18:15:25 ----A---- C:\Windows\system32\dwmredir.dll
2013-04-07 18:15:24 ----A---- C:\Windows\SYSWOW64\prncache.dll
2013-04-07 18:15:24 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2013-04-07 18:15:24 ----A---- C:\Windows\system32\puiobj.dll
2013-04-07 18:15:24 ----A---- C:\Windows\system32\nlaapi.dll
2013-04-07 18:15:24 ----A---- C:\Windows\system32\msasn1.dll
2013-04-07 18:15:24 ----A---- C:\Windows\system32\iasrad.dll
2013-04-07 18:15:24 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys
2013-04-07 18:15:24 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2013-04-07 18:15:23 ----A---- C:\Windows\system32\themeui.dll
2013-04-07 18:15:23 ----A---- C:\Windows\system32\scrptadm.dll
2013-04-07 18:15:23 ----A---- C:\Windows\system32\onex.dll
2013-04-07 18:15:23 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2013-04-07 18:15:22 ----A---- C:\Windows\SYSWOW64\printui.dll
2013-04-07 18:15:21 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2013-04-07 18:15:21 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2013-04-07 18:15:21 ----A---- C:\Windows\SYSWOW64\net1.exe
2013-04-07 18:15:21 ----A---- C:\Windows\system32\aaclient.dll
2013-04-07 18:15:20 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2013-04-07 18:15:19 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2013-04-07 18:15:19 ----A---- C:\Windows\system32\wdc.dll
2013-04-07 18:15:18 ----A---- C:\Windows\system32\wlangpui.dll
2013-04-07 18:15:18 ----A---- C:\Windows\system32\wiadefui.dll
2013-04-07 18:15:18 ----A---- C:\Windows\system32\VAN.dll
2013-04-07 18:15:18 ----A---- C:\Windows\system32\StructuredQuery.dll
2013-04-07 18:15:18 ----A---- C:\Windows\system32\sdengin2.dll
2013-04-07 18:15:18 ----A---- C:\Windows\system32\scesrv.dll
2013-04-07 18:15:18 ----A---- C:\Windows\system32\rasmans.dll
2013-04-07 18:15:18 ----A---- C:\Windows\system32\msftedit.dll
2013-04-07 18:15:18 ----A---- C:\Windows\system32\dskquoui.dll
2013-04-07 18:15:17 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2013-04-07 18:15:17 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2013-04-07 18:15:17 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2013-04-07 18:15:17 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2013-04-07 18:15:17 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2013-04-07 18:15:17 ----A---- C:\Windows\system32\wscapi.dll
2013-04-07 18:15:17 ----A---- C:\Windows\system32\SndVol.exe
2013-04-07 18:15:17 ----A---- C:\Windows\system32\samcli.dll
2013-04-07 18:15:17 ----A---- C:\Windows\system32\regapi.dll
2013-04-07 18:15:17 ----A---- C:\Windows\system32\netcenter.dll
2013-04-07 18:15:17 ----A---- C:\Windows\system32\iasacct.dll
2013-04-07 18:15:17 ----A---- C:\Windows\system32\drivers\termdd.sys
2013-04-07 18:15:17 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2013-04-07 18:15:16 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2013-04-07 18:15:16 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2013-04-07 18:15:16 ----A---- C:\Windows\SYSWOW64\scrptadm.dll
2013-04-07 18:15:16 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2013-04-07 18:15:16 ----A---- C:\Windows\SYSWOW64\pnidui.dll
2013-04-07 18:15:16 ----A---- C:\Windows\system32\TabSvc.dll
2013-04-07 18:15:16 ----A---- C:\Windows\system32\srchadmin.dll
2013-04-07 18:15:16 ----A---- C:\Windows\system32\QUTIL.DLL
2013-04-07 18:15:16 ----A---- C:\Windows\system32\consent.exe
2013-04-07 18:15:15 ----A---- C:\Windows\SYSWOW64\webservices.dll
2013-04-07 18:15:15 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll
2013-04-07 18:15:15 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2013-04-07 18:15:15 ----A---- C:\Windows\SYSWOW64\fde.dll
2013-04-07 18:15:15 ----A---- C:\Windows\system32\wksprt.exe
2013-04-07 18:15:15 ----A---- C:\Windows\system32\taskhost.exe
2013-04-07 18:15:15 ----A---- C:\Windows\system32\setupcl.exe
2013-04-07 18:15:15 ----A---- C:\Windows\system32\rastls.dll
2013-04-07 18:15:15 ----A---- C:\Windows\system32\drivers\msahci.sys
2013-04-07 18:15:14 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2013-04-07 18:15:14 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2013-04-07 18:15:14 ----A---- C:\Windows\system32\drivers\acpi.sys
2013-04-07 18:15:13 ----A---- C:\Windows\system32\tapisrv.dll
2013-04-07 18:15:12 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2013-04-07 18:15:12 ----A---- C:\Windows\SYSWOW64\pla.dll
2013-04-07 18:15:12 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2013-04-07 18:15:12 ----A---- C:\Windows\SYSWOW64\cscobj.dll
2013-04-07 18:15:12 ----A---- C:\Windows\system32\netiohlp.dll
2013-04-07 18:15:12 ----A---- C:\Windows\system32\msconfig.exe
2013-04-07 18:15:12 ----A---- C:\Windows\system32\mimefilt.dll
2013-04-07 18:15:12 ----A---- C:\Windows\system32\ListSvc.dll
2013-04-07 18:15:12 ----A---- C:\Windows\system32\hgcpl.dll
2013-04-07 18:15:12 ----A---- C:\Windows\system32\drivers\raspptp.sys
2013-04-07 18:15:11 ----A---- C:\Windows\SYSWOW64\winsta.dll
2013-04-07 18:15:11 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2013-04-07 18:15:11 ----A---- C:\Windows\system32\lsmproxy.dll
2013-04-07 18:15:11 ----A---- C:\Windows\system32\fdeploy.dll
2013-04-07 18:15:11 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2013-04-07 18:15:11 ----A---- C:\Windows\system32\drivers\ks.sys
2013-04-07 18:15:11 ----A---- C:\Windows\system32\clusapi.dll
2013-04-07 18:15:11 ----A---- C:\Windows\system32\basecsp.dll
2013-04-07 18:15:11 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2013-04-07 18:15:10 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-04-07 18:15:10 ----A---- C:\Windows\system32\mtxclu.dll
2013-04-07 18:15:09 ----A---- C:\Windows\SYSWOW64\imapi2.dll
2013-04-07 18:15:09 ----A---- C:\Windows\system32\riched20.dll
2013-04-07 18:15:08 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll
2013-04-07 18:15:08 ----A---- C:\Windows\system32\dnscmmc.dll
2013-04-07 18:15:07 ----A---- C:\Windows\SYSWOW64\WMPEncEn.dll
2013-04-07 18:15:07 ----A---- C:\Windows\SYSWOW64\winmm.dll
2013-04-07 18:15:07 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2013-04-07 18:15:07 ----A---- C:\Windows\SYSWOW64\onex.dll
2013-04-07 18:15:07 ----A---- C:\Windows\system32\sharemediacpl.dll
2013-04-07 18:15:07 ----A---- C:\Windows\system32\RpcRtRemote.dll
2013-04-07 18:15:07 ----A---- C:\Windows\system32\powercpl.dll
2013-04-07 18:15:07 ----A---- C:\Windows\system32\nci.dll
2013-04-07 18:15:07 ----A---- C:\Windows\system32\logoncli.dll
2013-04-07 18:15:06 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2013-04-07 18:15:06 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2013-04-07 18:15:06 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2013-04-07 18:15:06 ----A---- C:\Windows\system32\themecpl.dll
2013-04-07 18:15:06 ----A---- C:\Windows\system32\SensorsCpl.dll
2013-04-07 18:15:06 ----A---- C:\Windows\system32\netjoin.dll
2013-04-07 18:15:06 ----A---- C:\Windows\system32\Narrator.exe
2013-04-07 18:15:06 ----A---- C:\Windows\system32\Faultrep.dll
2013-04-07 18:15:06 ----A---- C:\Windows\system32\eudcedit.exe
2013-04-07 18:15:05 ----A---- C:\Windows\SYSWOW64\samcli.dll
2013-04-07 18:15:05 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2013-04-07 18:15:05 ----A---- C:\Windows\SYSWOW64\autochk.exe
2013-04-07 18:15:05 ----A---- C:\Windows\system32\wkssvc.dll
2013-04-07 18:15:05 ----A---- C:\Windows\system32\vpnikeapi.dll
2013-04-07 18:15:04 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2013-04-07 18:15:04 ----A---- C:\Windows\SYSWOW64\regapi.dll
2013-04-07 18:15:04 ----A---- C:\Windows\SYSWOW64\proquota.exe
2013-04-07 18:15:04 ----A---- C:\Windows\SYSWOW64\msutb.dll
2013-04-07 18:15:04 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2013-04-07 18:15:04 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2013-04-07 18:15:04 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2013-04-07 18:15:04 ----A---- C:\Windows\system32\sppcomapi.dll
2013-04-07 18:15:04 ----A---- C:\Windows\system32\comctl32.dll
2013-04-07 18:15:04 ----A---- C:\Windows\system32\cabview.dll
2013-04-07 18:15:04 ----A---- C:\Windows\system32\autochk.exe
2013-04-07 18:15:04 ----A---- C:\Windows\system32\autofmt.exe
2013-04-07 18:15:03 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2013-04-07 18:15:03 ----A---- C:\Windows\SYSWOW64\srchadmin.dll
2013-04-07 18:15:03 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2013-04-07 18:15:03 ----A---- C:\Windows\SYSWOW64\powercpl.dll
2013-04-07 18:15:03 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2013-04-07 18:15:03 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2013-04-07 18:15:03 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2013-04-07 18:15:03 ----A---- C:\Windows\system32\wpd_ci.dll
2013-04-07 18:15:03 ----A---- C:\Windows\system32\shsetup.dll
2013-04-07 18:15:03 ----A---- C:\Windows\system32\nshipsec.dll
2013-04-07 18:15:03 ----A---- C:\Windows\system32\fms.dll
2013-04-07 18:15:03 ----A---- C:\Windows\system32\bcdsrv.dll
2013-04-07 18:15:03 ----A---- C:\Windows\system32\autoconv.exe
2013-04-07 18:15:03 ----A---- C:\Windows\system32\audiodg.exe
2013-04-07 18:15:02 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2013-04-07 18:15:02 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2013-04-07 18:15:02 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2013-04-07 18:15:02 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2013-04-07 18:15:02 ----A---- C:\Windows\system32\wwanconn.dll
2013-04-07 18:15:02 ----A---- C:\Windows\system32\wlanui.dll
2013-04-07 18:15:02 ----A---- C:\Windows\system32\sdclt.exe
2013-04-07 18:15:02 ----A---- C:\Windows\system32\prntvpt.dll
2013-04-07 18:15:02 ----A---- C:\Windows\system32\mscorier.dll
2013-04-07 18:15:02 ----A---- C:\Windows\system32\drivers\wanarp.sys
2013-04-07 18:15:02 ----A---- C:\Windows\system32\drivers\scsiport.sys
2013-04-07 18:15:01 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2013-04-07 18:15:01 ----A---- C:\Windows\system32\SmiEngine.dll
2013-04-07 18:15:01 ----A---- C:\Windows\system32\rdpsign.exe
2013-04-07 18:15:01 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2013-04-07 18:15:01 ----A---- C:\Windows\system32\dps.dll
2013-04-07 18:15:00 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL
2013-04-07 18:15:00 ----A---- C:\Windows\SYSWOW64\netid.dll
2013-04-07 18:15:00 ----A---- C:\Windows\system32\mprddm.dll
2013-04-07 18:15:00 ----A---- C:\Windows\system32\fontext.dll
2013-04-07 18:15:00 ----A---- C:\Windows\system32\AxInstSv.dll
2013-04-07 18:14:59 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2013-04-07 18:14:59 ----A---- C:\Windows\system32\qedit.dll
2013-04-07 18:14:59 ----A---- C:\Windows\system32\drivers\hidclass.sys
2013-04-07 18:14:59 ----A---- C:\Windows\system32\Display.dll
2013-04-07 18:14:59 ----A---- C:\Windows\system32\credssp.dll
2013-04-07 18:14:59 ----A---- C:\Windows\system32\batmeter.dll
2013-04-07 18:14:58 ----A---- C:\Windows\SYSWOW64\wdc.dll
2013-04-07 18:14:58 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2013-04-07 18:14:58 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2013-04-07 18:14:58 ----A---- C:\Windows\system32\wmpsrcwp.dll
2013-04-07 18:14:58 ----A---- C:\Windows\system32\mblctr.exe
2013-04-07 18:14:57 ----A---- C:\Windows\SYSWOW64\Vault.dll
2013-04-07 18:14:57 ----A---- C:\Windows\SYSWOW64\untfs.dll
2013-04-07 18:14:57 ----A---- C:\Windows\SYSWOW64\rastls.dll
2013-04-07 18:14:57 ----A---- C:\Windows\SYSWOW64\nci.dll
2013-04-07 18:14:56 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2013-04-07 18:14:56 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2013-04-07 18:14:56 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll
2013-04-07 18:14:56 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2013-04-07 18:14:56 ----A---- C:\Windows\system32\usercpl.dll
2013-04-07 18:14:56 ----A---- C:\Windows\system32\rtutils.dll
2013-04-07 18:14:56 ----A---- C:\Windows\system32\provsvc.dll
2013-04-07 18:14:56 ----A---- C:\Windows\system32\DiagCpl.dll
2013-04-07 18:14:56 ----A---- C:\Windows\system32\bootres.dll
2013-04-07 18:14:55 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2013-04-07 18:14:54 ----A---- C:\Windows\system32\wpccpl.dll
2013-04-07 18:14:54 ----A---- C:\Windows\system32\sppsvc.exe
2013-04-07 18:14:53 ----A---- C:\Windows\SYSWOW64\DxpTaskSync.dll
2013-04-07 18:14:53 ----A---- C:\Windows\system32\rasppp.dll
2013-04-07 18:14:52 ----A---- C:\Windows\SYSWOW64\taskmgr.exe
2013-04-07 18:14:52 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2013-04-07 18:14:52 ----A---- C:\Windows\SYSWOW64\Display.dll
2013-04-07 18:14:52 ----A---- C:\Windows\system32\SndVolSSO.dll
2013-04-07 18:14:52 ----A---- C:\Windows\system32\dxdiagn.dll
2013-04-07 18:14:52 ----A---- C:\Windows\system32\drivers\winhv.sys
2013-04-07 18:14:52 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2013-04-07 18:14:52 ----A---- C:\Windows\system32\dot3cfg.dll
2013-04-07 18:14:51 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2013-04-07 18:14:51 ----A---- C:\Windows\SYSWOW64\userinit.exe
2013-04-07 18:14:51 ----A---- C:\Windows\SYSWOW64\termmgr.dll
2013-04-07 18:14:51 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2013-04-07 18:14:51 ----A---- C:\Windows\SYSWOW64\eudcedit.exe
2013-04-07 18:14:51 ----A---- C:\Windows\system32\taskmgr.exe
2013-04-07 18:14:51 ----A---- C:\Windows\system32\shdocvw.dll
2013-04-07 18:14:51 ----A---- C:\Windows\system32\proquota.exe
2013-04-07 18:14:51 ----A---- C:\Windows\system32\prnfldr.dll
2013-04-07 18:14:51 ----A---- C:\Windows\system32\pdh.dll
2013-04-07 18:14:51 ----A---- C:\Windows\system32\hbaapi.dll
2013-04-07 18:14:51 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2013-04-07 18:14:50 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2013-04-07 18:14:50 ----A---- C:\Windows\system32\untfs.dll
2013-04-07 18:14:50 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2013-04-07 18:14:50 ----A---- C:\Windows\system32\drivers\ataport.sys
2013-04-07 18:14:49 ----A---- C:\Windows\SYSWOW64\wiadefui.dll
2013-04-07 18:14:49 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2013-04-07 18:14:49 ----A---- C:\Windows\SYSWOW64\rasppp.dll
2013-04-07 18:14:49 ----A---- C:\Windows\SYSWOW64\logoncli.dll
2013-04-07 18:14:48 ----A---- C:\Windows\SYSWOW64\sppcomapi.dll
2013-04-07 18:14:48 ----A---- C:\Windows\SYSWOW64\FirewallControlPanel.dll
2013-04-07 18:14:48 ----A---- C:\Windows\SYSWOW64\cabview.dll
2013-04-07 18:14:48 ----A---- C:\Windows\system32\userinit.exe
2013-04-07 18:14:48 ----A---- C:\Windows\system32\accessibilitycpl.dll
2013-04-07 18:14:47 ----A---- C:\Windows\SYSWOW64\themecpl.dll
2013-04-07 18:14:47 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll
2013-04-07 18:14:46 ----A---- C:\Windows\SYSWOW64\PhotoScreensaver.scr
2013-04-07 18:14:46 ----A---- C:\Windows\SYSWOW64\hgcpl.dll
2013-04-07 18:14:46 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2013-04-07 18:14:46 ----A---- C:\Windows\SYSWOW64\dnscmmc.dll
2013-04-07 18:14:46 ----A---- C:\Windows\system32\zipfldr.dll
2013-04-07 18:14:46 ----A---- C:\Windows\system32\slui.exe
2013-04-07 18:14:46 ----A---- C:\Windows\system32\msieftp.dll
2013-04-07 18:14:46 ----A---- C:\Windows\system32\drivers\storvsc.sys
2013-04-07 18:14:46 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2013-04-07 18:14:45 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2013-04-07 18:14:45 ----A---- C:\Windows\SYSWOW64\scecli.dll
2013-04-07 18:14:45 ----A---- C:\Windows\system32\sud.dll
2013-04-07 18:14:45 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2013-04-07 18:14:44 ----A---- C:\Windows\SYSWOW64\mscories.dll
2013-04-07 18:14:44 ----A---- C:\Windows\SYSWOW64\mscms.dll
2013-04-07 18:14:44 ----A---- C:\Windows\SYSWOW64\mprddm.dll
2013-04-07 18:14:44 ----A---- C:\Windows\SYSWOW64\localsec.dll
2013-04-07 18:14:44 ----A---- C:\Windows\SYSWOW64\iasacct.dll
2013-04-07 18:14:44 ----A---- C:\Windows\SYSWOW64\fontext.dll
2013-04-07 18:14:44 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2013-04-07 18:14:44 ----A---- C:\Windows\system32\networkmap.dll
2013-04-07 18:14:44 ----A---- C:\Windows\system32\dot3svc.dll
2013-04-07 18:14:44 ----A---- C:\Windows\system32\DeviceCenter.dll
2013-04-07 18:14:44 ----A---- C:\Windows\system32\cryptui.dll
2013-04-07 18:14:43 ----A---- C:\Windows\SYSWOW64\wlanui.dll
2013-04-07 18:14:43 ----A---- C:\Windows\SYSWOW64\VAN.dll
2013-04-07 18:14:43 ----A---- C:\Windows\SYSWOW64\usercpl.dll
2013-04-07 18:14:43 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll
2013-04-07 18:14:43 ----A---- C:\Windows\SYSWOW64\qedit.dll
2013-04-07 18:14:43 ----A---- C:\Windows\SYSWOW64\prntvpt.dll
2013-04-07 18:14:43 ----A---- C:\Windows\SYSWOW64\PerfCenterCPL.dll
2013-04-07 18:14:43 ----A---- C:\Windows\SYSWOW64\batmeter.dll
2013-04-07 18:14:43 ----A---- C:\Windows\system32\twext.dll
2013-04-07 18:14:43 ----A---- C:\Windows\system32\taskbarcpl.dll
2013-04-07 18:14:43 ----A---- C:\Windows\system32\ActionCenter.dll
2013-04-07 18:14:42 ----A---- C:\Windows\SYSWOW64\w32tm.exe
2013-04-07 18:14:42 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2013-04-07 18:14:42 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2013-04-07 18:14:42 ----A---- C:\Windows\system32\uxlib.dll
2013-04-07 18:14:42 ----A---- C:\Windows\system32\recovery.dll
2013-04-07 18:14:42 ----A---- C:\Windows\system32\OobeFldr.dll
2013-04-07 18:14:42 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2013-04-07 18:14:42 ----A---- C:\Windows\system32\bcdedit.exe
2013-04-07 18:14:42 ----A---- C:\Windows\system32\azroleui.dll
2013-04-07 18:14:41 ----A---- C:\Windows\system32\isoburn.exe
2013-04-07 18:14:41 ----A---- C:\Windows\system32\dsuiext.dll
2013-04-07 18:14:41 ----A---- C:\Windows\system32\cca.dll
2013-04-07 18:14:41 ----A---- C:\Windows\system32\asycfilt.dll
2013-04-07 18:14:40 ----A---- C:\Windows\SYSWOW64\spwizeng.dll
2013-04-07 18:14:40 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2013-04-07 18:14:40 ----A---- C:\Windows\SYSWOW64\accessibilitycpl.dll
2013-04-07 18:14:40 ----A---- C:\Windows\system32\tzutil.exe
2013-04-07 18:14:40 ----A---- C:\Windows\system32\sisbkup.dll
2013-04-07 18:14:40 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2013-04-07 18:14:40 ----A---- C:\Windows\system32\efscore.dll
2013-04-07 18:14:39 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2013-04-07 18:14:39 ----A---- C:\Windows\SYSWOW64\fdeploy.dll
2013-04-07 18:14:39 ----A---- C:\Windows\system32\syncui.dll
2013-04-07 18:14:39 ----A---- C:\Windows\system32\sdcpl.dll
2013-04-07 18:14:39 ----A---- C:\Windows\system32\recdisc.exe
2013-04-07 18:14:39 ----A---- C:\Windows\system32\httpapi.dll
2013-04-07 18:14:38 ----A---- C:\Windows\SYSWOW64\netjoin.dll
2013-04-07 18:14:38 ----A---- C:\Windows\SYSWOW64\MSAC3ENC.DLL
2013-04-07 18:14:38 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2013-04-07 18:14:38 ----A---- C:\Windows\SYSWOW64\adsldp.dll
2013-04-07 18:14:38 ----A---- C:\Windows\system32\systemcpl.dll
2013-04-07 18:14:38 ----A---- C:\Windows\system32\sysclass.dll
2013-04-07 18:14:38 ----A---- C:\Windows\system32\shwebsvc.dll
2013-04-07 18:14:38 ----A---- C:\Windows\system32\netplwiz.dll
2013-04-07 18:14:38 ----A---- C:\Windows\system32\fvecpl.dll
2013-04-07 18:14:38 ----A---- C:\Windows\system32\drivers\rdpdr.sys
2013-04-07 18:14:38 ----A---- C:\Windows\system32\drivers\mpio.sys
2013-04-07 18:14:38 ----A---- C:\Windows\system32\certcli.dll
2013-04-07 18:14:38 ----A---- C:\Windows\system32\autoplay.dll
2013-04-07 18:14:37 ----A---- C:\Windows\SYSWOW64\wusa.exe
2013-04-07 18:14:37 ----A---- C:\Windows\SYSWOW64\networkmap.dll
2013-04-07 18:14:37 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2013-04-07 18:14:37 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2013-04-07 18:14:37 ----A---- C:\Windows\system32\wlanmsm.dll
2013-04-07 18:14:37 ----A---- C:\Windows\system32\sdrsvc.dll
2013-04-07 18:14:37 ----A---- C:\Windows\system32\ncryptui.dll
2013-04-07 18:14:37 ----A---- C:\Windows\system32\msvidc32.dll
2013-04-07 18:14:37 ----A---- C:\Windows\system32\appinfo.dll
2013-04-07 18:14:37 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2013-04-07 18:14:36 ----A---- C:\Windows\SYSWOW64\sud.dll
2013-04-07 18:14:36 ----A---- C:\Windows\SYSWOW64\prnfldr.dll
2013-04-07 18:14:36 ----A---- C:\Windows\SYSWOW64\OnLineIDCpl.dll
2013-04-07 18:14:36 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2013-04-07 18:14:36 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2013-04-07 18:14:36 ----A---- C:\Windows\system32\vdsutil.dll
2013-04-07 18:14:36 ----A---- C:\Windows\system32\spwizeng.dll
2013-04-07 18:14:36 ----A---- C:\Windows\system32\MFPlay.dll
2013-04-07 18:14:36 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2013-04-07 18:14:35 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2013-04-07 18:14:35 ----A---- C:\Windows\SYSWOW64\MediaMetadataHandler.dll
2013-04-07 18:14:35 ----A---- C:\Windows\SYSWOW64\credssp.dll
2013-04-07 18:14:35 ----A---- C:\Windows\system32\termmgr.dll
2013-04-07 18:14:35 ----A---- C:\Windows\system32\msscp.dll
2013-04-07 18:14:34 ----A---- C:\Windows\SYSWOW64\sisbkup.dll
2013-04-07 18:14:34 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll
2013-04-07 18:14:34 ----A---- C:\Windows\SYSWOW64\iasrad.dll
2013-04-07 18:14:34 ----A---- C:\Windows\SYSWOW64\ftp.exe
2013-04-07 18:14:34 ----A---- C:\Windows\SYSWOW64\dot3cfg.dll
2013-04-07 18:14:34 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll
2013-04-07 18:14:34 ----A---- C:\Windows\system32\tsgqec.dll
2013-04-07 18:14:34 ----A---- C:\Windows\system32\sqlcese30.dll
2013-04-07 18:14:34 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2013-04-07 18:14:34 ----A---- C:\Windows\system32\sethc.exe
2013-04-07 18:14:34 ----A---- C:\Windows\system32\ReAgent.dll
2013-04-07 18:14:34 ----A---- C:\Windows\system32\ntlanman.dll
2013-04-07 18:14:33 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll
2013-04-07 18:14:33 ----A---- C:\Windows\SYSWOW64\ifsutil.dll
2013-04-07 18:14:33 ----A---- C:\Windows\SYSWOW64\efscore.dll
2013-04-07 18:14:33 ----A---- C:\Windows\SYSWOW64\ActionCenterCPL.dll
2013-04-07 18:14:33 ----A---- C:\Windows\system32\wwanprotdim.dll
2013-04-07 18:14:33 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2013-04-07 18:14:33 ----A---- C:\Windows\system32\ssText3d.scr
2013-04-07 18:14:33 ----A---- C:\Windows\system32\rdpd3d.dll
2013-04-07 18:14:33 ----A---- C:\Windows\system32\iyuv_32.dll
2013-04-07 18:14:33 ----A---- C:\Windows\system32\iTVData.dll
2013-04-07 18:14:33 ----A---- C:\Windows\system32\iprtrmgr.dll
2013-04-07 18:14:33 ----A---- C:\Windows\system32\drivers\vmstorfl.sys
2013-04-07 18:14:33 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2013-04-07 18:14:32 ----A---- C:\Windows\SYSWOW64\syncui.dll
2013-04-07 18:14:32 ----A---- C:\Windows\SYSWOW64\autoplay.dll
2013-04-07 18:14:32 ----A---- C:\Windows\system32\wmdrmsdk.dll
2013-04-07 18:14:32 ----A---- C:\Windows\system32\srvcli.dll
2013-04-07 18:14:32 ----A---- C:\Windows\system32\slwga.dll
2013-04-07 18:14:32 ----A---- C:\Windows\system32\drmmgrtn.dll
2013-04-07 18:14:31 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2013-04-07 18:14:31 ----A---- C:\Windows\SYSWOW64\ntlanman.dll
2013-04-07 18:14:31 ----A---- C:\Windows\SYSWOW64\dskquoui.dll
2013-04-07 18:14:31 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll
2013-04-07 18:14:31 ----A---- C:\Windows\system32\msiexec.exe
2013-04-07 18:14:30 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2013-04-07 18:14:30 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2013-04-07 18:14:30 ----A---- C:\Windows\SYSWOW64\sethc.exe
2013-04-07 18:14:30 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2013-04-07 18:14:30 ----A---- C:\Windows\SYSWOW64\riched20.dll
2013-04-07 18:14:30 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll
2013-04-07 18:14:30 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2013-04-07 18:14:30 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2013-04-07 18:14:30 ----A---- C:\Windows\system32\wavemsp.dll
2013-04-07 18:14:30 ----A---- C:\Windows\system32\srrstr.dll
2013-04-07 18:14:30 ----A---- C:\Windows\system32\ntprint.dll
2013-04-07 18:14:30 ----A---- C:\Windows\system32\nslookup.exe
2013-04-07 18:14:30 ----A---- C:\Windows\system32\NAPHLPR.DLL
2013-04-07 18:14:30 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2013-04-07 18:14:30 ----A---- C:\Windows\system32\bcdboot.exe
2013-04-07 18:14:30 ----A---- C:\Windows\system32\acppage.dll
2013-04-07 18:14:29 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2013-04-07 18:14:29 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL
2013-04-07 18:14:29 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2013-04-07 18:14:29 ----A---- C:\Windows\SYSWOW64\activeds.dll
2013-04-07 18:14:29 ----A---- C:\Windows\system32\TSpkg.dll
2013-04-07 18:14:29 ----A---- C:\Windows\system32\sppnp.dll
2013-04-07 18:14:29 ----A---- C:\Windows\system32\certprop.dll
mam neuveritelny problem
Cerstve nainstalovany pocitac se zakladnimi programy, win 7, aktualizovany, zapojeny do domaci site kde mam cca 6kompů.
Vsechny kompy jedou ´fpohode´, turbo nacitani stranek.Pouze u me je problem, pri nastartovani kompu otevru chrome a zacnu browzdat, po chvili mi prestanou davat weby odezvu a uz se ani nenactou, nekdy pouze hola stranka s reklamou, ktera se nenaharala a vyprsel ji casovy limit, od te doby do dalsiho restartu se nepodivam nikam jinam nez na seznam.cz, ktery nabiha vcelku radne.
Podotykam cerstve nainstalovany system, antivir avast premier.
Pingy od serveru jsou v normalu, do 30ti od libovolneho, pokud zacnu neco stahovat, vpohode se stahuje plnou rychlosti, az 10 000kbps (cisty mego)
prikladam log, uz si newim rady, zkousim pratele ale nikdo to nechape.
Dekuji pripadne za odezvu.
Logfile of random's system information tool 1.09 (written by random/random)
Run by Románek at 2013-04-08 20:34:57
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 239 GB (86%) free of 277 GB
Total RAM: 8191 MB (72% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:35:07, on 8.4.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16470)
Boot mode: Normal
Running processes:
E:\Záloha\QIP - Romanek\qip.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Google\Google Talk\googletalk.exe
C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe
C:\Users\Románek\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Románek.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [googletalk] C:\Program Files (x86)\Google\Google Talk\googletalk.exe /autostart
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [BtTray] "C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [KeePass 2 PreLoad] "C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe" --preload
O4 - HKCU\..\Run: [Google Update] "C:\Users\Románek\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [QIP2005] E:\Záloha\QIP - Romanek\qip.exe
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{C7F99E2C-5FEB-4508-BE60-3301FEA9D5E5}: NameServer = 172.16.254.254,8.8.8.8
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BlueSoleilCS - IVT Corporation - C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
O23 - Service: BsHelpCS - IVT Corporation - C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Freemake Improver - Freemake - C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 9244 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe"
taskeng.exe {5EE4715A-6D34-4B08-BBE3-7C968CB6D956}
"C:\Program Files (x86)\Google\Update\1.3.21.135\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.21.135\GoogleCrashHandler64.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"E:\Záloha\QIP - Romanek\qip.exe"
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe"
"C:\Windows\System32\StikyNot.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\Google\Google Talk\googletalk.exe" /autostart
"C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe"
"C:\Users\Románek\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-fd2adec9-8a2f-48fc-8ce0-aece166839dc -SystemEventPortName:HostProcess-f25b04af-5dd7-456f-a31e-e8f68049a652 -IoCancelEventPortName:HostProcess-608342e7-fc91-4534-a66d-85ba2def9e3d -NonStateChangingEventPortName:HostProcess-bbf704fc-7fb4-42a1-8e5f-c8bed9248d6c -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:6674d18d-eb56-4e28-af17-84c86359197a -DeviceGroupId:WpdFsGroup
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe"
"C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version8\TeamViewer8_Logfile.log
"C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version8\TeamViewer8_Logfile.log
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3164.0.331805913\123261451" --supports-dual-gpus=false --gpu-vendor-id=0x1002 --gpu-device-id=0x68b8 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=9.12.0.0 --ignored=" --type=renderer " /prefetch:12
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/BookmarkPrompt/Disabled/ForceCompositingMode/thread/InfiniteCache/No/OmniboxSearchSuggestTrialStarted2013Q1/13/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_99/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/group_01/ --extension-process --renderer-print-preview --enable-threaded-compositing --channel="3164.1.863412482\2026021247" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/BookmarkPrompt/Disabled/ForceCompositingMode/thread/InfiniteCache/No/OmniboxSearchSuggestTrialStarted2013Q1/13/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_99/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/group_01/ --extension-process --renderer-print-preview --enable-threaded-compositing --channel="3164.2.850700284\1842299136" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/BookmarkPrompt/Disabled/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/Standard/OmniboxSearchSuggestTrialStarted2013Q1/13/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_99/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --instant-process --enable-threaded-compositing --channel="3164.4.483979553\137098825" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/BookmarkPrompt/Disabled/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/Standard/OmniboxSearchSuggestTrialStarted2013Q1/13/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_99/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="3164.5.1132086086\1434755434" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/BookmarkPrompt/Disabled/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/NewTabButton/default/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/Standard/OmniboxSearchSuggestTrialStarted2013Q1/13/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_99/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="3164.7.832567496\1271630602" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/BookmarkPrompt/Disabled/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/NewTabButton/default/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/Standard/OmniboxSearchSuggestTrialStarted2013Q1/13/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_99/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="3164.8.1854694455\4934881" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/BookmarkPrompt/Disabled/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/NewTabButton/default/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/Standard/OmniboxSearchSuggestTrialStarted2013Q1/13/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwndMin10/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_99/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="3164.9.645760145\1953034823" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/BookmarkPrompt/Disabled/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/NewTabButton/default/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/Standard/OmniboxSearchSuggestTrialStarted2013Q1/13/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwndMin10/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_99/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="3164.10.1067399870\799413099" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="3164.11.831992284\1274273778" --lang=cs --ignored=" --type=renderer " /prefetch:13
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/BookmarkPrompt/Disabled/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/NewTabButton/default/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/Standard/OmniboxSearchSuggestTrialStarted2013Q1/13/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwndMin10/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_99/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --channel="3164.12.1228682491\831474462" /prefetch:3
C:\Windows\servicing\TrustedInstaller.exe
"C:\Windows\system32\SearchFilterHost.exe" 0 540 544 552 65536 548
"C:\Windows\system32\wuauclt.exe"
"C:\Users\Románek\Downloads\RSITx64.exe"
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2339007899-624079778-3773007337-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2339007899-624079778-3773007337-1000UA.job
=========Mozilla firefox=========
ProfilePath - C:\Users\Románek\AppData\Roaming\Mozilla\Firefox\Profiles\y9tthqtm.default
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.17.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
C:\Program Files (x86)\Mozilla Firefox\searchplugins\
amazondotcom.xml
bing.xml
eBay.xml
google.xml
twitter.xml
wikipedia.xml
yahoo.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-04-04 461216]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-04-04 170912]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Románek\AppData\Local\Google\Update\GoogleUpdate.exe [2013-04-04 116648]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"QIP2005"=E:\Záloha\QIP - Romanek\qip.exe [2009-08-13 3276288]
"RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2009-07-14 427520]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2013-03-07 4767304]
"googletalk"=C:\Program Files (x86)\Google\Google Talk\googletalk.exe [2007-01-01 3739648]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-12-19 642808]
"BtTray"=C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe [2009-09-02 315478]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-11-17 113288]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-18 946352]
"KeePass 2 PreLoad"=C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2013-04-05 1960448]
C:\Users\Románek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Románek\AppData\Roaming\Dropbox\bin\Dropbox.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-04-08 20:34:57 ----D---- C:\rsit
2013-04-08 20:34:57 ----D---- C:\Program Files\trend micro
2013-04-08 20:05:52 ----D---- C:\Users\Románek\AppData\Roaming\GHISLER
2013-04-08 20:05:03 ----D---- C:\totalcmd
2013-04-08 20:02:20 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2013-04-08 19:38:47 ----D---- C:\ProgramData\Mozilla
2013-04-08 19:38:47 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-04-08 19:38:44 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-04-07 23:26:22 ----D---- C:\ProgramData\Kaspersky Lab
2013-04-07 23:20:14 ----D---- C:\Program Files\CCleaner
2013-04-07 22:03:48 ----D---- C:\Program Files (x86)\KeePass Password Safe 2
2013-04-07 21:24:03 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2013-04-07 21:24:02 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2013-04-07 21:23:19 ----D---- C:\Program Files (x86)\Winamp Detect
2013-04-07 21:23:05 ----D---- C:\Users\Románek\AppData\Roaming\Winamp
2013-04-07 21:23:05 ----D---- C:\Program Files (x86)\Winamp
2013-04-07 18:21:44 ----D---- C:\Windows\system32\SPReview
2013-04-07 18:20:31 ----D---- C:\Windows\system32\EventProviders
2013-04-07 18:17:23 ----A---- C:\Windows\system32\netfxperf.dll
2013-04-07 18:17:23 ----A---- C:\Windows\system32\dfshim.dll
2013-04-07 18:17:15 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2013-04-07 18:17:11 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-04-07 18:17:11 ----A---- C:\Windows\system32\mstscax.dll
2013-04-07 18:17:11 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-04-07 18:17:10 ----A---- C:\Windows\system32\d3d10warp.dll
2013-04-07 18:17:07 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-04-07 18:17:02 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2013-04-07 18:17:02 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2013-04-07 18:17:02 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-04-07 18:17:02 ----A---- C:\Windows\system32\tssrvlic.dll
2013-04-07 18:17:02 ----A---- C:\Windows\system32\sysmain.dll
2013-04-07 18:17:02 ----A---- C:\Windows\system32\RDVGHelper.exe
2013-04-07 18:17:00 ----A---- C:\Windows\SYSWOW64\pmcsnap.dll
2013-04-07 18:16:59 ----A---- C:\Windows\system32\MSVidCtl.dll
2013-04-07 18:16:57 ----A---- C:\Windows\system32\wmp.dll
2013-04-07 18:16:56 ----A---- C:\Windows\system32\mscoree.dll
2013-04-07 18:16:55 ----A---- C:\Windows\system32\mmcndmgr.dll
2013-04-07 18:16:54 ----A---- C:\Windows\system32\secproc_isv.dll
2013-04-07 18:16:53 ----A---- C:\Windows\system32\RMActivate_isv.exe
2013-04-07 18:16:53 ----A---- C:\Windows\system32\mf.dll
2013-04-07 18:16:52 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2013-04-07 18:16:52 ----A---- C:\Windows\system32\secproc.dll
2013-04-07 18:16:52 ----A---- C:\Windows\system32\RMActivate.exe
2013-04-07 18:16:51 ----A---- C:\Windows\system32\xpsservices.dll
2013-04-07 18:16:48 ----A---- C:\Windows\SYSWOW64\secproc.dll
2013-04-07 18:16:48 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2013-04-07 18:16:47 ----A---- C:\Windows\system32\rpcrt4.dll
2013-04-07 18:16:46 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2013-04-07 18:16:45 ----A---- C:\Windows\SYSWOW64\PushPrinterConnections.exe
2013-04-07 18:16:45 ----A---- C:\Windows\SYSWOW64\ppcsnap.dll
2013-04-07 18:16:45 ----A---- C:\Windows\system32\schedsvc.dll
2013-04-07 18:16:45 ----A---- C:\Windows\system32\ole32.dll
2013-04-07 18:16:43 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2013-04-07 18:16:43 ----A---- C:\Windows\system32\spwizui.dll
2013-04-07 18:16:42 ----A---- C:\Windows\system32\taskschd.dll
2013-04-07 18:16:42 ----A---- C:\Windows\system32\RacEngn.dll
2013-04-07 18:16:41 ----A---- C:\Windows\SYSWOW64\mf.dll
2013-04-07 18:16:41 ----A---- C:\Windows\system32\wevtsvc.dll
2013-04-07 18:16:41 ----A---- C:\Windows\system32\diagperf.dll
2013-04-07 18:16:40 ----A---- C:\Windows\system32\vssapi.dll
2013-04-07 18:16:40 ----A---- C:\Windows\system32\ExplorerFrame.dll
2013-04-07 18:16:40 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2013-04-07 18:16:39 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2013-04-07 18:16:39 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2013-04-07 18:16:38 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2013-04-07 18:16:37 ----A---- C:\Windows\system32\UIRibbon.dll
2013-04-07 18:16:35 ----A---- C:\Windows\SYSWOW64\wmp.dll
2013-04-07 18:16:34 ----A---- C:\Windows\system32\WsmSvc.dll
2013-04-07 18:16:33 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2013-04-07 18:16:33 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2013-04-07 18:16:33 ----A---- C:\Windows\system32\WMVCORE.DLL
2013-04-07 18:16:32 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2013-04-07 18:16:32 ----A---- C:\Windows\system32\PresentationHost.exe
2013-04-07 18:16:31 ----A---- C:\Windows\system32\spreview.exe
2013-04-07 18:16:31 ----A---- C:\Windows\system32\spinstall.exe
2013-04-07 18:16:31 ----A---- C:\Windows\system32\rdpdd.dll
2013-04-07 18:16:31 ----A---- C:\Windows\system32\MPSSVC.dll
2013-04-07 18:16:31 ----A---- C:\Windows\system32\CertEnroll.dll
2013-04-07 18:16:30 ----A---- C:\Windows\system32\WinSAT.exe
2013-04-07 18:16:29 ----A---- C:\Windows\system32\WMVDECOD.DLL
2013-04-07 18:16:29 ----A---- C:\Windows\system32\d3d9.dll
2013-04-07 18:16:28 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2013-04-07 18:16:28 ----A---- C:\Windows\system32\IKEEXT.DLL
2013-04-07 18:16:27 ----A---- C:\Windows\system32\SearchFolder.dll
2013-04-07 18:16:26 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2013-04-07 18:16:26 ----A---- C:\Windows\system32\gpsvc.dll
2013-04-07 18:16:26 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2013-04-07 18:16:25 ----A---- C:\Windows\system32\VSSVC.exe
2013-04-07 18:16:25 ----A---- C:\Windows\system32\dwmcore.dll
2013-04-07 18:16:25 ----A---- C:\Windows\system32\dbgeng.dll
2013-04-07 18:16:24 ----A---- C:\Windows\SYSWOW64\rdvgumd32.dll
2013-04-07 18:16:24 ----A---- C:\Windows\system32\drivers\http.sys
2013-04-07 18:16:23 ----A---- C:\Windows\system32\drivers\ndis.sys
2013-04-07 18:16:22 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2013-04-07 18:16:22 ----A---- C:\Windows\system32\actxprxy.dll
2013-04-07 18:16:21 ----A---- C:\Windows\SYSWOW64\ole32.dll
2013-04-07 18:16:21 ----A---- C:\Windows\system32\TSWorkspace.dll
2013-04-07 18:16:21 ----A---- C:\Windows\system32\qmgr.dll
2013-04-07 18:16:21 ----A---- C:\Windows\system32\audiosrv.dll
2013-04-07 18:16:20 ----A---- C:\Windows\system32\termsrv.dll
2013-04-07 18:16:20 ----A---- C:\Windows\system32\gpprefcl.dll
2013-04-07 18:16:19 ----A---- C:\Windows\system32\sqmapi.dll
2013-04-07 18:16:19 ----A---- C:\Windows\system32\mstsc.exe
2013-04-07 18:16:17 ----A---- C:\Windows\system32\netlogon.dll
2013-04-07 18:16:17 ----A---- C:\Windows\system32\imapi2fs.dll
2013-04-07 18:16:16 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2013-04-07 18:16:16 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2013-04-07 18:16:16 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2013-04-07 18:16:16 ----A---- C:\Windows\system32\winhttp.dll
2013-04-07 18:16:16 ----A---- C:\Windows\system32\QAGENTRT.DLL
2013-04-07 18:16:16 ----A---- C:\Windows\system32\msv1_0.dll
2013-04-07 18:16:16 ----A---- C:\Windows\system32\d3d11.dll
2013-04-07 18:16:15 ----A---- C:\Windows\system32\setupapi.dll
2013-04-07 18:16:15 ----A---- C:\Windows\system32\propsys.dll
2013-04-07 18:16:14 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2013-04-07 18:16:14 ----A---- C:\Windows\system32\wbengine.exe
2013-04-07 18:16:14 ----A---- C:\Windows\system32\rpcss.dll
2013-04-07 18:16:14 ----A---- C:\Windows\system32\PushPrinterConnections.exe
2013-04-07 18:16:13 ----A---- C:\Windows\system32\werconcpl.dll
2013-04-07 18:16:13 ----A---- C:\Windows\system32\taskeng.exe
2013-04-07 18:16:13 ----A---- C:\Windows\system32\authui.dll
2013-04-07 18:16:12 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2013-04-07 18:16:12 ----A---- C:\Windows\system32\user32.dll
2013-04-07 18:16:12 ----A---- C:\Windows\system32\odbc32.dll
2013-04-07 18:16:11 ----A---- C:\Windows\system32\WSDApi.dll
2013-04-07 18:16:11 ----A---- C:\Windows\system32\umrdp.dll
2013-04-07 18:16:11 ----A---- C:\Windows\system32\LSCSHostPolicy.dll
2013-04-07 18:16:11 ----A---- C:\Windows\system32\drivers\tdx.sys
2013-04-07 18:16:11 ----A---- C:\Windows\system32\dhcpcore.dll
2013-04-07 18:16:11 ----A---- C:\Windows\system32\certmgr.dll
2013-04-07 18:16:10 ----A---- C:\Windows\SYSWOW64\wer.dll
2013-04-07 18:16:10 ----A---- C:\Windows\SYSWOW64\certcli.dll
2013-04-07 18:16:10 ----A---- C:\Windows\system32\scavengeui.dll
2013-04-07 18:16:10 ----A---- C:\Windows\system32\drivers\netbt.sys
2013-04-07 18:16:09 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2013-04-07 18:16:08 ----A---- C:\Windows\system32\tsmf.dll
2013-04-07 18:16:08 ----A---- C:\Windows\system32\ncsi.dll
2013-04-07 18:16:08 ----A---- C:\Windows\system32\msdrm.dll
2013-04-07 18:16:07 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2013-04-07 18:16:07 ----A---- C:\Windows\system32\shlwapi.dll
2013-04-07 18:16:07 ----A---- C:\Windows\system32\netshell.dll
2013-04-07 18:16:07 ----A---- C:\Windows\system32\msdtctm.dll
2013-04-07 18:16:07 ----A---- C:\Windows\system32\framedynos.dll
2013-04-07 18:16:06 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2013-04-07 18:16:06 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2013-04-07 18:16:06 ----A---- C:\Windows\system32\wmicmiplugin.dll
2013-04-07 18:16:06 ----A---- C:\Windows\system32\rdpshell.exe
2013-04-07 18:16:05 ----A---- C:\Windows\system32\ws2_32.dll
2013-04-07 18:16:05 ----A---- C:\Windows\system32\winlogon.exe
2013-04-07 18:16:05 ----A---- C:\Windows\system32\nlasvc.dll
2013-04-07 18:16:05 ----A---- C:\Windows\system32\netcfgx.dll
2013-04-07 18:16:05 ----A---- C:\Windows\system32\appmgr.dll
2013-04-07 18:16:04 ----A---- C:\Windows\system32\lsm.exe
2013-04-07 18:16:03 ----A---- C:\Windows\system32\wmpps.dll
2013-04-07 18:16:03 ----A---- C:\Windows\system32\dxgi.dll
2013-04-07 18:16:03 ----A---- C:\Windows\system32\drivers\csc.sys
2013-04-07 18:16:03 ----A---- C:\Windows\system32\comdlg32.dll
2013-04-07 18:16:03 ----A---- C:\Windows\system32\apphelp.dll
2013-04-07 18:16:02 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2013-04-07 18:16:02 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2013-04-07 18:16:02 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2013-04-07 18:16:02 ----A---- C:\Windows\system32\wpdshext.dll
2013-04-07 18:16:02 ----A---- C:\Windows\system32\Query.dll
2013-04-07 18:16:02 ----A---- C:\Windows\system32\mswsock.dll
2013-04-07 18:16:02 ----A---- C:\Windows\system32\drvstore.dll
2013-04-07 18:16:02 ----A---- C:\Windows\system32\azroles.dll
2013-04-07 18:16:01 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2013-04-07 18:16:01 ----A---- C:\Windows\system32\QAGENT.DLL
2013-04-07 18:16:00 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2013-04-07 18:16:00 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-04-07 18:16:00 ----A---- C:\Windows\system32\BFE.DLL
2013-04-07 18:15:59 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2013-04-07 18:15:59 ----A---- C:\Windows\system32\Vault.dll
2013-04-07 18:15:59 ----A---- C:\Windows\system32\samsrv.dll
2013-04-07 18:15:59 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2013-04-07 18:15:59 ----A---- C:\Windows\system32\cmd.exe
2013-04-07 18:15:58 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2013-04-07 18:15:58 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2013-04-07 18:15:58 ----A---- C:\Windows\system32\lpksetup.exe
2013-04-07 18:15:57 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-04-07 18:15:57 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2013-04-07 18:15:57 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-04-07 18:15:57 ----A---- C:\Windows\system32\rdpclip.exe
2013-04-07 18:15:57 ----A---- C:\Windows\system32\cscsvc.dll
2013-04-07 18:15:56 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2013-04-07 18:15:56 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2013-04-07 18:15:56 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-04-07 18:15:56 ----A---- C:\Windows\system32\WebClnt.dll
2013-04-07 18:15:56 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2013-04-07 18:15:55 ----A---- C:\Windows\SYSWOW64\Query.dll
2013-04-07 18:15:55 ----A---- C:\Windows\SYSWOW64\gpprefcl.dll
2013-04-07 18:15:55 ----A---- C:\Windows\system32\sxs.dll
2013-04-07 18:15:55 ----A---- C:\Windows\system32\cscobj.dll
2013-04-07 18:15:54 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2013-04-07 18:15:54 ----A---- C:\Windows\SYSWOW64\upnp.dll
2013-04-07 18:15:54 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2013-04-07 18:15:54 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2013-04-07 18:15:54 ----A---- C:\Windows\system32\Wldap32.dll
2013-04-07 18:15:54 ----A---- C:\Windows\system32\taskcomp.dll
2013-04-07 18:15:54 ----A---- C:\Windows\system32\pnidui.dll
2013-04-07 18:15:54 ----A---- C:\Windows\system32\mfds.dll
2013-04-07 18:15:54 ----A---- C:\Windows\system32\mcbuilder.exe
2013-04-07 18:15:54 ----A---- C:\Windows\system32\ipsmsnap.dll
2013-04-07 18:15:53 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2013-04-07 18:15:53 ----A---- C:\Windows\system32\hgprint.dll
2013-04-07 18:15:52 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2013-04-07 18:15:52 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2013-04-07 18:15:52 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2013-04-07 18:15:52 ----A---- C:\Windows\system32\webservices.dll
2013-04-07 18:15:52 ----A---- C:\Windows\system32\SessEnv.dll
2013-04-07 18:15:52 ----A---- C:\Windows\system32\rdpendp.dll
2013-04-07 18:15:51 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2013-04-07 18:15:51 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-04-07 18:15:51 ----A---- C:\Windows\system32\winsta.dll
2013-04-07 18:15:50 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2013-04-07 18:15:50 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2013-04-07 18:15:50 ----A---- C:\Windows\system32\sqlsrv32.dll
2013-04-07 18:15:50 ----A---- C:\Windows\system32\fveapi.dll
2013-04-07 18:15:50 ----A---- C:\Windows\system32\dot3api.dll
2013-04-07 18:15:49 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2013-04-07 18:15:49 ----A---- C:\Windows\system32\gdi32.dll
2013-04-07 18:15:49 ----A---- C:\Windows\system32\drivers\msrpc.sys
2013-04-07 18:15:48 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe
2013-04-07 18:15:48 ----A---- C:\Windows\system32\WMNetMgr.dll
2013-04-07 18:15:48 ----A---- C:\Windows\system32\schtasks.exe
2013-04-07 18:15:48 ----A---- C:\Windows\system32\prncache.dll
2013-04-07 18:15:48 ----A---- C:\Windows\system32\mcmde.dll
2013-04-07 18:15:48 ----A---- C:\Windows\system32\drivers\volsnap.sys
2013-04-07 18:15:47 ----A---- C:\Windows\SYSWOW64\userenv.dll
2013-04-07 18:15:47 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2013-04-07 18:15:47 ----A---- C:\Windows\system32\wlanpref.dll
2013-04-07 18:15:47 ----A---- C:\Windows\system32\vpnike.dll
2013-04-07 18:15:46 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2013-04-07 18:15:46 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2013-04-07 18:15:46 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2013-04-07 18:15:46 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2013-04-07 18:15:46 ----A---- C:\Windows\system32\userenv.dll
2013-04-07 18:15:46 ----A---- C:\Windows\system32\tspubwmi.dll
2013-04-07 18:15:46 ----A---- C:\Windows\system32\photowiz.dll
2013-04-07 18:15:46 ----A---- C:\Windows\system32\evr.dll
2013-04-07 18:15:46 ----A---- C:\Windows\system32\drivers\rdbss.sys
2013-04-07 18:15:46 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2013-04-07 18:15:45 ----A---- C:\Windows\system32\IPSECSVC.DLL
2013-04-07 18:15:45 ----A---- C:\Windows\system32\framedyn.dll
2013-04-07 18:15:44 ----A---- C:\Windows\SYSWOW64\cmd.exe
2013-04-07 18:15:44 ----A---- C:\Windows\system32\wmpmde.dll
2013-04-07 18:15:44 ----A---- C:\Windows\system32\WMPEncEn.dll
2013-04-07 18:15:44 ----A---- C:\Windows\system32\wmpeffects.dll
2013-04-07 18:15:44 ----A---- C:\Windows\system32\SyncCenter.dll
2013-04-07 18:15:44 ----A---- C:\Windows\system32\sppobjs.dll
2013-04-07 18:15:44 ----A---- C:\Windows\system32\mfreadwrite.dll
2013-04-07 18:15:44 ----A---- C:\Windows\system32\FXSSVC.exe
2013-04-07 18:15:44 ----A---- C:\Windows\system32\AudioSes.dll
2013-04-07 18:15:44 ----A---- C:\Windows\system32\aepdu.dll
2013-04-07 18:15:43 ----A---- C:\Windows\system32\tscfgwmi.dll
2013-04-07 18:15:43 ----A---- C:\Windows\system32\srvsvc.dll
2013-04-07 18:15:43 ----A---- C:\Windows\system32\shsvcs.dll
2013-04-07 18:15:43 ----A---- C:\Windows\system32\rdpinit.exe
2013-04-07 18:15:43 ----A---- C:\Windows\system32\aeinv.dll
2013-04-07 18:15:42 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2013-04-07 18:15:42 ----A---- C:\Windows\SYSWOW64\propsys.dll
2013-04-07 18:15:42 ----A---- C:\Windows\SYSWOW64\mfds.dll
2013-04-07 18:15:42 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2013-04-07 18:15:42 ----A---- C:\Windows\system32\WinSATAPI.dll
2013-04-07 18:15:42 ----A---- C:\Windows\system32\vmicsvc.exe
2013-04-07 18:15:42 ----A---- C:\Windows\system32\fde.dll
2013-04-07 18:15:41 ----A---- C:\Windows\SYSWOW64\rdpendp.dll
2013-04-07 18:15:41 ----A---- C:\Windows\system32\stobject.dll
2013-04-07 18:15:41 ----A---- C:\Windows\system32\netdiagfx.dll
2013-04-07 18:15:41 ----A---- C:\Windows\system32\localsec.dll
2013-04-07 18:15:41 ----A---- C:\Windows\system32\imapi2.dll
2013-04-07 18:15:41 ----A---- C:\Windows\system32\drivers\vmbus.sys
2013-04-07 18:15:41 ----A---- C:\Windows\system32\credui.dll
2013-04-07 18:15:41 ----A---- C:\Windows\system32\cdd.dll
2013-04-07 18:15:41 ----A---- C:\Windows\system32\bcryptprimitives.dll
2013-04-07 18:15:40 ----A---- C:\Windows\SYSWOW64\user32.dll
2013-04-07 18:15:40 ----A---- C:\Windows\system32\netid.dll
2013-04-07 18:15:40 ----A---- C:\Windows\system32\iphlpsvc.dll
2013-04-07 18:15:40 ----A---- C:\Windows\system32\inetpp.dll
2013-04-07 18:15:40 ----A---- C:\Windows\system32\drivers\udfs.sys
2013-04-07 18:15:40 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2013-04-07 18:15:39 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2013-04-07 18:15:39 ----A---- C:\Windows\SYSWOW64\azroles.dll
2013-04-07 18:15:39 ----A---- C:\Windows\system32\tcpipcfg.dll
2013-04-07 18:15:39 ----A---- C:\Windows\system32\spp.dll
2013-04-07 18:15:39 ----A---- C:\Windows\system32\QSHVHOST.DLL
2013-04-07 18:15:39 ----A---- C:\Windows\system32\davclnt.dll
2013-04-07 18:15:39 ----A---- C:\Windows\system32\cscui.dll
2013-04-07 18:15:38 ----A---- C:\Windows\SYSWOW64\appmgr.dll
2013-04-07 18:15:38 ----A---- C:\Windows\system32\msinfo32.exe
2013-04-07 18:15:38 ----A---- C:\Windows\system32\biocpl.dll
2013-04-07 18:15:37 ----A---- C:\Windows\system32\scansetting.dll
2013-04-07 18:15:37 ----A---- C:\Windows\system32\printui.dll
2013-04-07 18:15:37 ----A---- C:\Windows\system32\mspbda.dll
2013-04-07 18:15:36 ----A---- C:\Windows\SYSWOW64\themeui.dll
2013-04-07 18:15:36 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2013-04-07 18:15:36 ----A---- C:\Windows\SYSWOW64\spp.dll
2013-04-07 18:15:36 ----A---- C:\Windows\SYSWOW64\credui.dll
2013-04-07 18:15:36 ----A---- C:\Windows\system32\pla.dll
2013-04-07 18:15:36 ----A---- C:\Windows\system32\PhotoScreensaver.scr
2013-04-07 18:15:35 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2013-04-07 18:15:35 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2013-04-07 18:15:35 ----A---- C:\Windows\system32\wusa.exe
2013-04-07 18:15:35 ----A---- C:\Windows\system32\msdri.dll
2013-04-07 18:15:34 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2013-04-07 18:15:34 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2013-04-07 18:15:34 ----A---- C:\Windows\system32\wiaservc.dll
2013-04-07 18:15:34 ----A---- C:\Windows\system32\vds.exe
2013-04-07 18:15:34 ----A---- C:\Windows\system32\rpchttp.dll
2013-04-07 18:15:34 ----A---- C:\Windows\system32\mscms.dll
2013-04-07 18:15:34 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2013-04-07 18:15:34 ----A---- C:\Windows\system32\drivers\pci.sys
2013-04-07 18:15:34 ----A---- C:\Windows\system32\aitagent.exe
2013-04-07 18:15:34 ----A---- C:\Windows\system32\AdmTmpl.dll
2013-04-07 18:15:33 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2013-04-07 18:15:33 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2013-04-07 18:15:33 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-04-07 18:15:33 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2013-04-07 18:15:33 ----A---- C:\Windows\system32\XpsRasterService.dll
2013-04-07 18:15:33 ----A---- C:\Windows\system32\wisptis.exe
2013-04-07 18:15:33 ----A---- C:\Windows\system32\PkgMgr.exe
2013-04-07 18:15:33 ----A---- C:\Windows\system32\ocsetup.exe
2013-04-07 18:15:33 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2013-04-07 18:15:33 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2013-04-07 18:15:32 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2013-04-07 18:15:32 ----A---- C:\Windows\SYSWOW64\evr.dll
2013-04-07 18:15:32 ----A---- C:\Windows\SYSWOW64\calc.exe
2013-04-07 18:15:32 ----A---- C:\Windows\system32\sppwinob.dll
2013-04-07 18:15:32 ----A---- C:\Windows\system32\ocsetapi.dll
2013-04-07 18:15:32 ----A---- C:\Windows\system32\DXP.dll
2013-04-07 18:15:32 ----A---- C:\Windows\system32\drivers\volmgr.sys
2013-04-07 18:15:32 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2013-04-07 18:15:31 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2013-04-07 18:15:31 ----A---- C:\Windows\system32\wpdbusenum.dll
2013-04-07 18:15:31 ----A---- C:\Windows\system32\wcncsvc.dll
2013-04-07 18:15:31 ----A---- C:\Windows\system32\upnp.dll
2013-04-07 18:15:31 ----A---- C:\Windows\system32\mprapi.dll
2013-04-07 18:15:31 ----A---- C:\Windows\system32\eapp3hst.dll
2013-04-07 18:15:31 ----A---- C:\Windows\system32\drivers\msdsm.sys
2013-04-07 18:15:31 ----A---- C:\Windows\system32\ci.dll
2013-04-07 18:15:30 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2013-04-07 18:15:30 ----A---- C:\Windows\system32\t2embed.dll
2013-04-07 18:15:30 ----A---- C:\Windows\system32\Robocopy.exe
2013-04-07 18:15:30 ----A---- C:\Windows\system32\eapphost.dll
2013-04-07 18:15:27 ----A---- C:\Windows\SYSWOW64\sxs.dll
2013-04-07 18:15:27 ----A---- C:\Windows\system32\drivers\HpSAMD.sys
2013-04-07 18:15:26 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2013-04-07 18:15:26 ----A---- C:\Windows\SYSWOW64\stobject.dll
2013-04-07 18:15:26 ----A---- C:\Windows\SYSWOW64\netshell.dll
2013-04-07 18:15:26 ----A---- C:\Windows\system32\thumbcache.dll
2013-04-07 18:15:26 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2013-04-07 18:15:26 ----A---- C:\Windows\system32\hal.dll
2013-04-07 18:15:26 ----A---- C:\Windows\system32\DxpTaskSync.dll
2013-04-07 18:15:26 ----A---- C:\Windows\system32\drivers\fvevol.sys
2013-04-07 18:15:25 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2013-04-07 18:15:25 ----A---- C:\Windows\system32\scecli.dll
2013-04-07 18:15:25 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2013-04-07 18:15:25 ----A---- C:\Windows\system32\dwmredir.dll
2013-04-07 18:15:24 ----A---- C:\Windows\SYSWOW64\prncache.dll
2013-04-07 18:15:24 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2013-04-07 18:15:24 ----A---- C:\Windows\system32\puiobj.dll
2013-04-07 18:15:24 ----A---- C:\Windows\system32\nlaapi.dll
2013-04-07 18:15:24 ----A---- C:\Windows\system32\msasn1.dll
2013-04-07 18:15:24 ----A---- C:\Windows\system32\iasrad.dll
2013-04-07 18:15:24 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys
2013-04-07 18:15:24 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2013-04-07 18:15:23 ----A---- C:\Windows\system32\themeui.dll
2013-04-07 18:15:23 ----A---- C:\Windows\system32\scrptadm.dll
2013-04-07 18:15:23 ----A---- C:\Windows\system32\onex.dll
2013-04-07 18:15:23 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2013-04-07 18:15:22 ----A---- C:\Windows\SYSWOW64\printui.dll
2013-04-07 18:15:21 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2013-04-07 18:15:21 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2013-04-07 18:15:21 ----A---- C:\Windows\SYSWOW64\net1.exe
2013-04-07 18:15:21 ----A---- C:\Windows\system32\aaclient.dll
2013-04-07 18:15:20 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2013-04-07 18:15:19 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2013-04-07 18:15:19 ----A---- C:\Windows\system32\wdc.dll
2013-04-07 18:15:18 ----A---- C:\Windows\system32\wlangpui.dll
2013-04-07 18:15:18 ----A---- C:\Windows\system32\wiadefui.dll
2013-04-07 18:15:18 ----A---- C:\Windows\system32\VAN.dll
2013-04-07 18:15:18 ----A---- C:\Windows\system32\StructuredQuery.dll
2013-04-07 18:15:18 ----A---- C:\Windows\system32\sdengin2.dll
2013-04-07 18:15:18 ----A---- C:\Windows\system32\scesrv.dll
2013-04-07 18:15:18 ----A---- C:\Windows\system32\rasmans.dll
2013-04-07 18:15:18 ----A---- C:\Windows\system32\msftedit.dll
2013-04-07 18:15:18 ----A---- C:\Windows\system32\dskquoui.dll
2013-04-07 18:15:17 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2013-04-07 18:15:17 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2013-04-07 18:15:17 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2013-04-07 18:15:17 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2013-04-07 18:15:17 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2013-04-07 18:15:17 ----A---- C:\Windows\system32\wscapi.dll
2013-04-07 18:15:17 ----A---- C:\Windows\system32\SndVol.exe
2013-04-07 18:15:17 ----A---- C:\Windows\system32\samcli.dll
2013-04-07 18:15:17 ----A---- C:\Windows\system32\regapi.dll
2013-04-07 18:15:17 ----A---- C:\Windows\system32\netcenter.dll
2013-04-07 18:15:17 ----A---- C:\Windows\system32\iasacct.dll
2013-04-07 18:15:17 ----A---- C:\Windows\system32\drivers\termdd.sys
2013-04-07 18:15:17 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2013-04-07 18:15:16 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2013-04-07 18:15:16 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2013-04-07 18:15:16 ----A---- C:\Windows\SYSWOW64\scrptadm.dll
2013-04-07 18:15:16 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2013-04-07 18:15:16 ----A---- C:\Windows\SYSWOW64\pnidui.dll
2013-04-07 18:15:16 ----A---- C:\Windows\system32\TabSvc.dll
2013-04-07 18:15:16 ----A---- C:\Windows\system32\srchadmin.dll
2013-04-07 18:15:16 ----A---- C:\Windows\system32\QUTIL.DLL
2013-04-07 18:15:16 ----A---- C:\Windows\system32\consent.exe
2013-04-07 18:15:15 ----A---- C:\Windows\SYSWOW64\webservices.dll
2013-04-07 18:15:15 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll
2013-04-07 18:15:15 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2013-04-07 18:15:15 ----A---- C:\Windows\SYSWOW64\fde.dll
2013-04-07 18:15:15 ----A---- C:\Windows\system32\wksprt.exe
2013-04-07 18:15:15 ----A---- C:\Windows\system32\taskhost.exe
2013-04-07 18:15:15 ----A---- C:\Windows\system32\setupcl.exe
2013-04-07 18:15:15 ----A---- C:\Windows\system32\rastls.dll
2013-04-07 18:15:15 ----A---- C:\Windows\system32\drivers\msahci.sys
2013-04-07 18:15:14 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2013-04-07 18:15:14 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2013-04-07 18:15:14 ----A---- C:\Windows\system32\drivers\acpi.sys
2013-04-07 18:15:13 ----A---- C:\Windows\system32\tapisrv.dll
2013-04-07 18:15:12 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2013-04-07 18:15:12 ----A---- C:\Windows\SYSWOW64\pla.dll
2013-04-07 18:15:12 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2013-04-07 18:15:12 ----A---- C:\Windows\SYSWOW64\cscobj.dll
2013-04-07 18:15:12 ----A---- C:\Windows\system32\netiohlp.dll
2013-04-07 18:15:12 ----A---- C:\Windows\system32\msconfig.exe
2013-04-07 18:15:12 ----A---- C:\Windows\system32\mimefilt.dll
2013-04-07 18:15:12 ----A---- C:\Windows\system32\ListSvc.dll
2013-04-07 18:15:12 ----A---- C:\Windows\system32\hgcpl.dll
2013-04-07 18:15:12 ----A---- C:\Windows\system32\drivers\raspptp.sys
2013-04-07 18:15:11 ----A---- C:\Windows\SYSWOW64\winsta.dll
2013-04-07 18:15:11 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2013-04-07 18:15:11 ----A---- C:\Windows\system32\lsmproxy.dll
2013-04-07 18:15:11 ----A---- C:\Windows\system32\fdeploy.dll
2013-04-07 18:15:11 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2013-04-07 18:15:11 ----A---- C:\Windows\system32\drivers\ks.sys
2013-04-07 18:15:11 ----A---- C:\Windows\system32\clusapi.dll
2013-04-07 18:15:11 ----A---- C:\Windows\system32\basecsp.dll
2013-04-07 18:15:11 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2013-04-07 18:15:10 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-04-07 18:15:10 ----A---- C:\Windows\system32\mtxclu.dll
2013-04-07 18:15:09 ----A---- C:\Windows\SYSWOW64\imapi2.dll
2013-04-07 18:15:09 ----A---- C:\Windows\system32\riched20.dll
2013-04-07 18:15:08 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll
2013-04-07 18:15:08 ----A---- C:\Windows\system32\dnscmmc.dll
2013-04-07 18:15:07 ----A---- C:\Windows\SYSWOW64\WMPEncEn.dll
2013-04-07 18:15:07 ----A---- C:\Windows\SYSWOW64\winmm.dll
2013-04-07 18:15:07 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2013-04-07 18:15:07 ----A---- C:\Windows\SYSWOW64\onex.dll
2013-04-07 18:15:07 ----A---- C:\Windows\system32\sharemediacpl.dll
2013-04-07 18:15:07 ----A---- C:\Windows\system32\RpcRtRemote.dll
2013-04-07 18:15:07 ----A---- C:\Windows\system32\powercpl.dll
2013-04-07 18:15:07 ----A---- C:\Windows\system32\nci.dll
2013-04-07 18:15:07 ----A---- C:\Windows\system32\logoncli.dll
2013-04-07 18:15:06 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2013-04-07 18:15:06 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2013-04-07 18:15:06 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2013-04-07 18:15:06 ----A---- C:\Windows\system32\themecpl.dll
2013-04-07 18:15:06 ----A---- C:\Windows\system32\SensorsCpl.dll
2013-04-07 18:15:06 ----A---- C:\Windows\system32\netjoin.dll
2013-04-07 18:15:06 ----A---- C:\Windows\system32\Narrator.exe
2013-04-07 18:15:06 ----A---- C:\Windows\system32\Faultrep.dll
2013-04-07 18:15:06 ----A---- C:\Windows\system32\eudcedit.exe
2013-04-07 18:15:05 ----A---- C:\Windows\SYSWOW64\samcli.dll
2013-04-07 18:15:05 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2013-04-07 18:15:05 ----A---- C:\Windows\SYSWOW64\autochk.exe
2013-04-07 18:15:05 ----A---- C:\Windows\system32\wkssvc.dll
2013-04-07 18:15:05 ----A---- C:\Windows\system32\vpnikeapi.dll
2013-04-07 18:15:04 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2013-04-07 18:15:04 ----A---- C:\Windows\SYSWOW64\regapi.dll
2013-04-07 18:15:04 ----A---- C:\Windows\SYSWOW64\proquota.exe
2013-04-07 18:15:04 ----A---- C:\Windows\SYSWOW64\msutb.dll
2013-04-07 18:15:04 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2013-04-07 18:15:04 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2013-04-07 18:15:04 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2013-04-07 18:15:04 ----A---- C:\Windows\system32\sppcomapi.dll
2013-04-07 18:15:04 ----A---- C:\Windows\system32\comctl32.dll
2013-04-07 18:15:04 ----A---- C:\Windows\system32\cabview.dll
2013-04-07 18:15:04 ----A---- C:\Windows\system32\autochk.exe
2013-04-07 18:15:04 ----A---- C:\Windows\system32\autofmt.exe
2013-04-07 18:15:03 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2013-04-07 18:15:03 ----A---- C:\Windows\SYSWOW64\srchadmin.dll
2013-04-07 18:15:03 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2013-04-07 18:15:03 ----A---- C:\Windows\SYSWOW64\powercpl.dll
2013-04-07 18:15:03 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2013-04-07 18:15:03 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2013-04-07 18:15:03 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2013-04-07 18:15:03 ----A---- C:\Windows\system32\wpd_ci.dll
2013-04-07 18:15:03 ----A---- C:\Windows\system32\shsetup.dll
2013-04-07 18:15:03 ----A---- C:\Windows\system32\nshipsec.dll
2013-04-07 18:15:03 ----A---- C:\Windows\system32\fms.dll
2013-04-07 18:15:03 ----A---- C:\Windows\system32\bcdsrv.dll
2013-04-07 18:15:03 ----A---- C:\Windows\system32\autoconv.exe
2013-04-07 18:15:03 ----A---- C:\Windows\system32\audiodg.exe
2013-04-07 18:15:02 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2013-04-07 18:15:02 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2013-04-07 18:15:02 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2013-04-07 18:15:02 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2013-04-07 18:15:02 ----A---- C:\Windows\system32\wwanconn.dll
2013-04-07 18:15:02 ----A---- C:\Windows\system32\wlanui.dll
2013-04-07 18:15:02 ----A---- C:\Windows\system32\sdclt.exe
2013-04-07 18:15:02 ----A---- C:\Windows\system32\prntvpt.dll
2013-04-07 18:15:02 ----A---- C:\Windows\system32\mscorier.dll
2013-04-07 18:15:02 ----A---- C:\Windows\system32\drivers\wanarp.sys
2013-04-07 18:15:02 ----A---- C:\Windows\system32\drivers\scsiport.sys
2013-04-07 18:15:01 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2013-04-07 18:15:01 ----A---- C:\Windows\system32\SmiEngine.dll
2013-04-07 18:15:01 ----A---- C:\Windows\system32\rdpsign.exe
2013-04-07 18:15:01 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2013-04-07 18:15:01 ----A---- C:\Windows\system32\dps.dll
2013-04-07 18:15:00 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL
2013-04-07 18:15:00 ----A---- C:\Windows\SYSWOW64\netid.dll
2013-04-07 18:15:00 ----A---- C:\Windows\system32\mprddm.dll
2013-04-07 18:15:00 ----A---- C:\Windows\system32\fontext.dll
2013-04-07 18:15:00 ----A---- C:\Windows\system32\AxInstSv.dll
2013-04-07 18:14:59 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2013-04-07 18:14:59 ----A---- C:\Windows\system32\qedit.dll
2013-04-07 18:14:59 ----A---- C:\Windows\system32\drivers\hidclass.sys
2013-04-07 18:14:59 ----A---- C:\Windows\system32\Display.dll
2013-04-07 18:14:59 ----A---- C:\Windows\system32\credssp.dll
2013-04-07 18:14:59 ----A---- C:\Windows\system32\batmeter.dll
2013-04-07 18:14:58 ----A---- C:\Windows\SYSWOW64\wdc.dll
2013-04-07 18:14:58 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2013-04-07 18:14:58 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2013-04-07 18:14:58 ----A---- C:\Windows\system32\wmpsrcwp.dll
2013-04-07 18:14:58 ----A---- C:\Windows\system32\mblctr.exe
2013-04-07 18:14:57 ----A---- C:\Windows\SYSWOW64\Vault.dll
2013-04-07 18:14:57 ----A---- C:\Windows\SYSWOW64\untfs.dll
2013-04-07 18:14:57 ----A---- C:\Windows\SYSWOW64\rastls.dll
2013-04-07 18:14:57 ----A---- C:\Windows\SYSWOW64\nci.dll
2013-04-07 18:14:56 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2013-04-07 18:14:56 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2013-04-07 18:14:56 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll
2013-04-07 18:14:56 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2013-04-07 18:14:56 ----A---- C:\Windows\system32\usercpl.dll
2013-04-07 18:14:56 ----A---- C:\Windows\system32\rtutils.dll
2013-04-07 18:14:56 ----A---- C:\Windows\system32\provsvc.dll
2013-04-07 18:14:56 ----A---- C:\Windows\system32\DiagCpl.dll
2013-04-07 18:14:56 ----A---- C:\Windows\system32\bootres.dll
2013-04-07 18:14:55 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2013-04-07 18:14:54 ----A---- C:\Windows\system32\wpccpl.dll
2013-04-07 18:14:54 ----A---- C:\Windows\system32\sppsvc.exe
2013-04-07 18:14:53 ----A---- C:\Windows\SYSWOW64\DxpTaskSync.dll
2013-04-07 18:14:53 ----A---- C:\Windows\system32\rasppp.dll
2013-04-07 18:14:52 ----A---- C:\Windows\SYSWOW64\taskmgr.exe
2013-04-07 18:14:52 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2013-04-07 18:14:52 ----A---- C:\Windows\SYSWOW64\Display.dll
2013-04-07 18:14:52 ----A---- C:\Windows\system32\SndVolSSO.dll
2013-04-07 18:14:52 ----A---- C:\Windows\system32\dxdiagn.dll
2013-04-07 18:14:52 ----A---- C:\Windows\system32\drivers\winhv.sys
2013-04-07 18:14:52 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2013-04-07 18:14:52 ----A---- C:\Windows\system32\dot3cfg.dll
2013-04-07 18:14:51 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2013-04-07 18:14:51 ----A---- C:\Windows\SYSWOW64\userinit.exe
2013-04-07 18:14:51 ----A---- C:\Windows\SYSWOW64\termmgr.dll
2013-04-07 18:14:51 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2013-04-07 18:14:51 ----A---- C:\Windows\SYSWOW64\eudcedit.exe
2013-04-07 18:14:51 ----A---- C:\Windows\system32\taskmgr.exe
2013-04-07 18:14:51 ----A---- C:\Windows\system32\shdocvw.dll
2013-04-07 18:14:51 ----A---- C:\Windows\system32\proquota.exe
2013-04-07 18:14:51 ----A---- C:\Windows\system32\prnfldr.dll
2013-04-07 18:14:51 ----A---- C:\Windows\system32\pdh.dll
2013-04-07 18:14:51 ----A---- C:\Windows\system32\hbaapi.dll
2013-04-07 18:14:51 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2013-04-07 18:14:50 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2013-04-07 18:14:50 ----A---- C:\Windows\system32\untfs.dll
2013-04-07 18:14:50 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2013-04-07 18:14:50 ----A---- C:\Windows\system32\drivers\ataport.sys
2013-04-07 18:14:49 ----A---- C:\Windows\SYSWOW64\wiadefui.dll
2013-04-07 18:14:49 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2013-04-07 18:14:49 ----A---- C:\Windows\SYSWOW64\rasppp.dll
2013-04-07 18:14:49 ----A---- C:\Windows\SYSWOW64\logoncli.dll
2013-04-07 18:14:48 ----A---- C:\Windows\SYSWOW64\sppcomapi.dll
2013-04-07 18:14:48 ----A---- C:\Windows\SYSWOW64\FirewallControlPanel.dll
2013-04-07 18:14:48 ----A---- C:\Windows\SYSWOW64\cabview.dll
2013-04-07 18:14:48 ----A---- C:\Windows\system32\userinit.exe
2013-04-07 18:14:48 ----A---- C:\Windows\system32\accessibilitycpl.dll
2013-04-07 18:14:47 ----A---- C:\Windows\SYSWOW64\themecpl.dll
2013-04-07 18:14:47 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll
2013-04-07 18:14:46 ----A---- C:\Windows\SYSWOW64\PhotoScreensaver.scr
2013-04-07 18:14:46 ----A---- C:\Windows\SYSWOW64\hgcpl.dll
2013-04-07 18:14:46 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2013-04-07 18:14:46 ----A---- C:\Windows\SYSWOW64\dnscmmc.dll
2013-04-07 18:14:46 ----A---- C:\Windows\system32\zipfldr.dll
2013-04-07 18:14:46 ----A---- C:\Windows\system32\slui.exe
2013-04-07 18:14:46 ----A---- C:\Windows\system32\msieftp.dll
2013-04-07 18:14:46 ----A---- C:\Windows\system32\drivers\storvsc.sys
2013-04-07 18:14:46 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2013-04-07 18:14:45 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2013-04-07 18:14:45 ----A---- C:\Windows\SYSWOW64\scecli.dll
2013-04-07 18:14:45 ----A---- C:\Windows\system32\sud.dll
2013-04-07 18:14:45 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2013-04-07 18:14:44 ----A---- C:\Windows\SYSWOW64\mscories.dll
2013-04-07 18:14:44 ----A---- C:\Windows\SYSWOW64\mscms.dll
2013-04-07 18:14:44 ----A---- C:\Windows\SYSWOW64\mprddm.dll
2013-04-07 18:14:44 ----A---- C:\Windows\SYSWOW64\localsec.dll
2013-04-07 18:14:44 ----A---- C:\Windows\SYSWOW64\iasacct.dll
2013-04-07 18:14:44 ----A---- C:\Windows\SYSWOW64\fontext.dll
2013-04-07 18:14:44 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2013-04-07 18:14:44 ----A---- C:\Windows\system32\networkmap.dll
2013-04-07 18:14:44 ----A---- C:\Windows\system32\dot3svc.dll
2013-04-07 18:14:44 ----A---- C:\Windows\system32\DeviceCenter.dll
2013-04-07 18:14:44 ----A---- C:\Windows\system32\cryptui.dll
2013-04-07 18:14:43 ----A---- C:\Windows\SYSWOW64\wlanui.dll
2013-04-07 18:14:43 ----A---- C:\Windows\SYSWOW64\VAN.dll
2013-04-07 18:14:43 ----A---- C:\Windows\SYSWOW64\usercpl.dll
2013-04-07 18:14:43 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll
2013-04-07 18:14:43 ----A---- C:\Windows\SYSWOW64\qedit.dll
2013-04-07 18:14:43 ----A---- C:\Windows\SYSWOW64\prntvpt.dll
2013-04-07 18:14:43 ----A---- C:\Windows\SYSWOW64\PerfCenterCPL.dll
2013-04-07 18:14:43 ----A---- C:\Windows\SYSWOW64\batmeter.dll
2013-04-07 18:14:43 ----A---- C:\Windows\system32\twext.dll
2013-04-07 18:14:43 ----A---- C:\Windows\system32\taskbarcpl.dll
2013-04-07 18:14:43 ----A---- C:\Windows\system32\ActionCenter.dll
2013-04-07 18:14:42 ----A---- C:\Windows\SYSWOW64\w32tm.exe
2013-04-07 18:14:42 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2013-04-07 18:14:42 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2013-04-07 18:14:42 ----A---- C:\Windows\system32\uxlib.dll
2013-04-07 18:14:42 ----A---- C:\Windows\system32\recovery.dll
2013-04-07 18:14:42 ----A---- C:\Windows\system32\OobeFldr.dll
2013-04-07 18:14:42 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2013-04-07 18:14:42 ----A---- C:\Windows\system32\bcdedit.exe
2013-04-07 18:14:42 ----A---- C:\Windows\system32\azroleui.dll
2013-04-07 18:14:41 ----A---- C:\Windows\system32\isoburn.exe
2013-04-07 18:14:41 ----A---- C:\Windows\system32\dsuiext.dll
2013-04-07 18:14:41 ----A---- C:\Windows\system32\cca.dll
2013-04-07 18:14:41 ----A---- C:\Windows\system32\asycfilt.dll
2013-04-07 18:14:40 ----A---- C:\Windows\SYSWOW64\spwizeng.dll
2013-04-07 18:14:40 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2013-04-07 18:14:40 ----A---- C:\Windows\SYSWOW64\accessibilitycpl.dll
2013-04-07 18:14:40 ----A---- C:\Windows\system32\tzutil.exe
2013-04-07 18:14:40 ----A---- C:\Windows\system32\sisbkup.dll
2013-04-07 18:14:40 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2013-04-07 18:14:40 ----A---- C:\Windows\system32\efscore.dll
2013-04-07 18:14:39 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2013-04-07 18:14:39 ----A---- C:\Windows\SYSWOW64\fdeploy.dll
2013-04-07 18:14:39 ----A---- C:\Windows\system32\syncui.dll
2013-04-07 18:14:39 ----A---- C:\Windows\system32\sdcpl.dll
2013-04-07 18:14:39 ----A---- C:\Windows\system32\recdisc.exe
2013-04-07 18:14:39 ----A---- C:\Windows\system32\httpapi.dll
2013-04-07 18:14:38 ----A---- C:\Windows\SYSWOW64\netjoin.dll
2013-04-07 18:14:38 ----A---- C:\Windows\SYSWOW64\MSAC3ENC.DLL
2013-04-07 18:14:38 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2013-04-07 18:14:38 ----A---- C:\Windows\SYSWOW64\adsldp.dll
2013-04-07 18:14:38 ----A---- C:\Windows\system32\systemcpl.dll
2013-04-07 18:14:38 ----A---- C:\Windows\system32\sysclass.dll
2013-04-07 18:14:38 ----A---- C:\Windows\system32\shwebsvc.dll
2013-04-07 18:14:38 ----A---- C:\Windows\system32\netplwiz.dll
2013-04-07 18:14:38 ----A---- C:\Windows\system32\fvecpl.dll
2013-04-07 18:14:38 ----A---- C:\Windows\system32\drivers\rdpdr.sys
2013-04-07 18:14:38 ----A---- C:\Windows\system32\drivers\mpio.sys
2013-04-07 18:14:38 ----A---- C:\Windows\system32\certcli.dll
2013-04-07 18:14:38 ----A---- C:\Windows\system32\autoplay.dll
2013-04-07 18:14:37 ----A---- C:\Windows\SYSWOW64\wusa.exe
2013-04-07 18:14:37 ----A---- C:\Windows\SYSWOW64\networkmap.dll
2013-04-07 18:14:37 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2013-04-07 18:14:37 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2013-04-07 18:14:37 ----A---- C:\Windows\system32\wlanmsm.dll
2013-04-07 18:14:37 ----A---- C:\Windows\system32\sdrsvc.dll
2013-04-07 18:14:37 ----A---- C:\Windows\system32\ncryptui.dll
2013-04-07 18:14:37 ----A---- C:\Windows\system32\msvidc32.dll
2013-04-07 18:14:37 ----A---- C:\Windows\system32\appinfo.dll
2013-04-07 18:14:37 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2013-04-07 18:14:36 ----A---- C:\Windows\SYSWOW64\sud.dll
2013-04-07 18:14:36 ----A---- C:\Windows\SYSWOW64\prnfldr.dll
2013-04-07 18:14:36 ----A---- C:\Windows\SYSWOW64\OnLineIDCpl.dll
2013-04-07 18:14:36 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2013-04-07 18:14:36 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2013-04-07 18:14:36 ----A---- C:\Windows\system32\vdsutil.dll
2013-04-07 18:14:36 ----A---- C:\Windows\system32\spwizeng.dll
2013-04-07 18:14:36 ----A---- C:\Windows\system32\MFPlay.dll
2013-04-07 18:14:36 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2013-04-07 18:14:35 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2013-04-07 18:14:35 ----A---- C:\Windows\SYSWOW64\MediaMetadataHandler.dll
2013-04-07 18:14:35 ----A---- C:\Windows\SYSWOW64\credssp.dll
2013-04-07 18:14:35 ----A---- C:\Windows\system32\termmgr.dll
2013-04-07 18:14:35 ----A---- C:\Windows\system32\msscp.dll
2013-04-07 18:14:34 ----A---- C:\Windows\SYSWOW64\sisbkup.dll
2013-04-07 18:14:34 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll
2013-04-07 18:14:34 ----A---- C:\Windows\SYSWOW64\iasrad.dll
2013-04-07 18:14:34 ----A---- C:\Windows\SYSWOW64\ftp.exe
2013-04-07 18:14:34 ----A---- C:\Windows\SYSWOW64\dot3cfg.dll
2013-04-07 18:14:34 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll
2013-04-07 18:14:34 ----A---- C:\Windows\system32\tsgqec.dll
2013-04-07 18:14:34 ----A---- C:\Windows\system32\sqlcese30.dll
2013-04-07 18:14:34 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2013-04-07 18:14:34 ----A---- C:\Windows\system32\sethc.exe
2013-04-07 18:14:34 ----A---- C:\Windows\system32\ReAgent.dll
2013-04-07 18:14:34 ----A---- C:\Windows\system32\ntlanman.dll
2013-04-07 18:14:33 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll
2013-04-07 18:14:33 ----A---- C:\Windows\SYSWOW64\ifsutil.dll
2013-04-07 18:14:33 ----A---- C:\Windows\SYSWOW64\efscore.dll
2013-04-07 18:14:33 ----A---- C:\Windows\SYSWOW64\ActionCenterCPL.dll
2013-04-07 18:14:33 ----A---- C:\Windows\system32\wwanprotdim.dll
2013-04-07 18:14:33 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2013-04-07 18:14:33 ----A---- C:\Windows\system32\ssText3d.scr
2013-04-07 18:14:33 ----A---- C:\Windows\system32\rdpd3d.dll
2013-04-07 18:14:33 ----A---- C:\Windows\system32\iyuv_32.dll
2013-04-07 18:14:33 ----A---- C:\Windows\system32\iTVData.dll
2013-04-07 18:14:33 ----A---- C:\Windows\system32\iprtrmgr.dll
2013-04-07 18:14:33 ----A---- C:\Windows\system32\drivers\vmstorfl.sys
2013-04-07 18:14:33 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2013-04-07 18:14:32 ----A---- C:\Windows\SYSWOW64\syncui.dll
2013-04-07 18:14:32 ----A---- C:\Windows\SYSWOW64\autoplay.dll
2013-04-07 18:14:32 ----A---- C:\Windows\system32\wmdrmsdk.dll
2013-04-07 18:14:32 ----A---- C:\Windows\system32\srvcli.dll
2013-04-07 18:14:32 ----A---- C:\Windows\system32\slwga.dll
2013-04-07 18:14:32 ----A---- C:\Windows\system32\drmmgrtn.dll
2013-04-07 18:14:31 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2013-04-07 18:14:31 ----A---- C:\Windows\SYSWOW64\ntlanman.dll
2013-04-07 18:14:31 ----A---- C:\Windows\SYSWOW64\dskquoui.dll
2013-04-07 18:14:31 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll
2013-04-07 18:14:31 ----A---- C:\Windows\system32\msiexec.exe
2013-04-07 18:14:30 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2013-04-07 18:14:30 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2013-04-07 18:14:30 ----A---- C:\Windows\SYSWOW64\sethc.exe
2013-04-07 18:14:30 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2013-04-07 18:14:30 ----A---- C:\Windows\SYSWOW64\riched20.dll
2013-04-07 18:14:30 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll
2013-04-07 18:14:30 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2013-04-07 18:14:30 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2013-04-07 18:14:30 ----A---- C:\Windows\system32\wavemsp.dll
2013-04-07 18:14:30 ----A---- C:\Windows\system32\srrstr.dll
2013-04-07 18:14:30 ----A---- C:\Windows\system32\ntprint.dll
2013-04-07 18:14:30 ----A---- C:\Windows\system32\nslookup.exe
2013-04-07 18:14:30 ----A---- C:\Windows\system32\NAPHLPR.DLL
2013-04-07 18:14:30 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2013-04-07 18:14:30 ----A---- C:\Windows\system32\bcdboot.exe
2013-04-07 18:14:30 ----A---- C:\Windows\system32\acppage.dll
2013-04-07 18:14:29 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2013-04-07 18:14:29 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL
2013-04-07 18:14:29 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2013-04-07 18:14:29 ----A---- C:\Windows\SYSWOW64\activeds.dll
2013-04-07 18:14:29 ----A---- C:\Windows\system32\TSpkg.dll
2013-04-07 18:14:29 ----A---- C:\Windows\system32\sppnp.dll
2013-04-07 18:14:29 ----A---- C:\Windows\system32\certprop.dll
Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne
Stahnete OTL 