VIRY.CZ

Logfile of random's system information tool 1.08 (written by random/random)
Run by Adam at 2013-06-14 21:58:39
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 390 GB (56%) free of 699 GB
Total RAM: 3948 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:58:43, on 14.6.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16476)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Ask.com\Updater\Updater.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
C:\Program Files\trend micro\Adam.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: KMPlayer Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [Printsrv] c:\Windows\System32\Printing_Admin_Scripts\en-US\pubpr.vbs
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"
O4 - HKCU\..\Run: [EPSON SX210 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.EXE /FU "C:\Windows\TEMP\E_SD577.tmp" /EF "HKCU"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~3\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: @C:\Windows\system32\CxAudMsg64.exe,-100 (CxAudMsg) - Unknown owner - C:\Windows\system32\CxAudMsg64.exe (file missing)
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: Intel(R) Turbo Boost Technology Monitor 2.0 (TurboBoost) - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11210 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
C:\Windows\system32\CxAudMsg64.exe
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files (x86)\Launch Manager\LMutilps32.exe" --system-level-mutex="Local\{B904A927-FE6B-48fd-8C83-6B807BED1F9C}"
"C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE"
"C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE"
"C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"
"C:\Windows\System32\spool\drivers\x64\3\E_IATIFDE.EXE" /FU "C:\Windows\TEMP\E_SD577.tmp" /EF "HKCU"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe" PanProcess
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe"
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
taskeng.exe {8D414284-746B-4504-B48B-B7F24D93B04A}
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=4464.29e2e700.249937847 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 4464 "\\.\pipe\gecko-crash-server-pipe.4464" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe" --proxy-stub-channel=Flash3400.6B59BDE0.7603 --host-broker-channel=Flash3400.6B59BDE0.18765 --host-pid=3400 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe" --channel=3076.0016F6B0.1237308565 --proxy-stub-channel=Flash3400.6B59BDE0.7603 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll" --host-npapi-version=27 --type=renderer
"C:\Users\Adam\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\AutoKMS.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2011-06-12 6721936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2010-02-28 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [2011-06-12 4221328]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-09-16 51872]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
KMPlayer Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2013-04-01 1527432]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440} - KMPlayer Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2013-04-01 1527432]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2011-09-16 976032]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2011-09-16 799904]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2012-07-27 2864016]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-02-08 167960]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-02-08 391704]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-02-08 418328]
"Power Management"=C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [2011-02-18 499304]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 1832760]
"Printsrv"=c:\Windows\System32\Printing_Admin_Scripts\en-US\pubpr.vbs []
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 112512]
"IntelTBRunOnce"=wscript.exe //b //nologo C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-02-29 17148552]
"TomTomHOME.exe"=C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [2013-03-22 248208]
"EPSON SX210 Series"=C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.EXE [2008-11-05 223232]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2011-01-12 283160]
"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-04-27 113288]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2013-04-16 1081424]
""= []
"ApnUpdater"=C:\Program Files (x86)\Ask.com\Updater\Updater.exe [2013-04-01 1719944]
"Printsrv"=c:\Windows\System32\Printing_Admin_Scripts\en-US\pubpr.vbs []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-01-21 384000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2011-06-12 6721936]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [2011-06-12 4221328]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2013-06-14 21:58:39 ----D---- C:\rsit
2013-06-14 21:58:39 ----D---- C:\Program Files\trend micro
2013-06-14 09:02:56 ----SHD---- C:\Config.Msi
2013-06-14 01:03:00 ----D---- C:\Users\Adam\AppData\Roaming\uTorrent
2013-06-13 23:09:49 ----D---- C:\Program Files\CPUID
2013-06-13 22:06:03 ----D---- C:\Users\Adam\AppData\Roaming\EPSON
2013-06-13 17:45:04 ----A---- C:\Windows\AutoKMS.ini
2013-06-13 17:45:04 ----A---- C:\Windows\AutoKMS.exe
2013-06-13 17:28:52 ----D---- C:\Program Files\Common Files\DESIGNER
2013-06-13 17:28:23 ----D---- C:\Program Files\Microsoft Synchronization Services
2013-06-13 17:28:02 ----D---- C:\Windows\PCHEALTH
2013-06-13 17:28:02 ----D---- C:\Program Files\Microsoft Sync Framework
2013-06-13 17:28:02 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2013-06-13 17:26:40 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2013-06-13 17:25:42 ----D---- C:\Program Files\Microsoft Analysis Services
2013-06-13 17:25:42 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2013-06-13 17:25:27 ----D---- C:\Program Files (x86)\Microsoft Office
2013-06-13 17:25:22 ----D---- C:\Program Files\Microsoft Office
2013-06-13 17:24:50 ----RHD---- C:\MSOCache
2013-06-13 16:13:17 ----D---- C:\Users\Adam\AppData\Roaming\NVIDIA
2013-06-13 14:16:37 ----D---- C:\Program Files (x86)\Company
2013-06-12 17:41:45 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-06-12 17:41:44 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-06-12 17:41:44 ----A---- C:\Windows\system32\win32spl.dll
2013-06-12 17:41:41 ----A---- C:\Windows\SYSWOW64\cryptdlg.dll
2013-06-12 17:41:41 ----A---- C:\Windows\system32\cryptdlg.dll
2013-06-12 17:41:36 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2013-06-12 17:41:36 ----A---- C:\Windows\SYSWOW64\certutil.exe
2013-06-12 17:41:36 ----A---- C:\Windows\system32\cryptsvc.dll
2013-06-12 17:41:36 ----A---- C:\Windows\system32\cryptnet.dll
2013-06-12 17:41:36 ----A---- C:\Windows\system32\crypt32.dll
2013-06-12 17:41:36 ----A---- C:\Windows\system32\certutil.exe
2013-06-12 17:41:35 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2013-06-12 17:41:35 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2013-06-12 17:41:35 ----A---- C:\Windows\SYSWOW64\certenc.dll
2013-06-12 17:41:35 ----A---- C:\Windows\system32\certenc.dll
2013-06-10 22:14:29 ----D---- C:\Users\Adam\AppData\Roaming\Zoner
2013-06-10 22:12:54 ----D---- C:\Program Files\Zoner
2013-06-10 22:12:23 ----D---- C:\Zoner Photo Studio 13 Pro + Crack
2013-06-09 20:40:36 ----D---- C:\Program Files (x86)\PANDORA.TV
2013-06-05 21:02:17 ----D---- C:\Program Files (x86)\epson
2013-06-05 21:02:17 ----A---- C:\Windows\system32\esxwiaud.dll
2013-06-05 21:02:17 ----A---- C:\Windows\system32\esxcdev.dll
2013-06-05 21:02:17 ----A---- C:\Windows\system32\esdevapp.exe
2013-06-01 17:13:32 ----A---- C:\Windows\system32\E_ILMFDE.DLL
2013-06-01 17:13:32 ----A---- C:\Windows\system32\E_IBCBFDE.DLL
2013-06-01 17:13:32 ----A---- C:\Windows\system32\E_GCINST.DLL
2013-06-01 17:13:19 ----D---- C:\ProgramData\EPSON
2013-05-22 23:10:01 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-05-18 22:34:10 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-05-18 22:34:10 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-05-18 22:34:10 ----A---- C:\Windows\system32\cdd.dll
2013-05-18 22:34:01 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2013-05-18 22:34:01 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2013-05-18 22:34:01 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2013-05-18 22:34:01 ----A---- C:\Windows\system32\dhcpcore6.dll
2013-05-18 22:33:56 ----A---- C:\Windows\system32\shell32.dll
2013-05-18 22:33:55 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-05-18 22:33:55 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-05-18 22:33:55 ----A---- C:\Windows\system32\shdocvw.dll
2013-05-18 22:33:55 ----A---- C:\Windows\system32\consent.exe
2013-05-18 22:33:55 ----A---- C:\Windows\system32\authui.dll
2013-05-18 22:33:54 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2013-05-18 22:33:54 ----A---- C:\Windows\system32\appinfo.dll
2013-05-18 22:33:46 ----A---- C:\Windows\system32\wwansvc.dll
2013-05-18 22:33:46 ----A---- C:\Windows\system32\wwanprotdim.dll
2013-05-18 22:33:45 ----A---- C:\Windows\system32\win32k.sys
2013-05-18 22:33:45 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2013-05-18 22:33:45 ----A---- C:\Windows\system32\drivers\ndis.sys
2013-05-18 22:33:43 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2013-05-18 22:33:43 ----A---- C:\Windows\SYSWOW64\netevent.dll
2013-05-18 22:33:43 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2013-05-18 22:33:43 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2013-05-18 22:33:43 ----A---- C:\Windows\system32\nlasvc.dll
2013-05-18 22:33:43 ----A---- C:\Windows\system32\nlaapi.dll
2013-05-18 22:33:43 ----A---- C:\Windows\system32\netevent.dll
2013-05-18 22:33:43 ----A---- C:\Windows\system32\netcorehc.dll
2013-05-18 22:33:43 ----A---- C:\Windows\system32\ncsi.dll
2013-05-18 22:33:43 ----A---- C:\Windows\system32\iphlpsvc.dll
2013-05-18 22:33:43 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2013-05-18 22:33:38 ----A---- C:\Windows\system32\OxpsConverter.exe
2013-05-18 22:33:08 ----A---- C:\Windows\system32\taskhost.exe
2013-05-18 09:19:27 ----D---- C:\Windows\system32\SPReview
2013-05-18 09:18:36 ----D---- C:\Windows\system32\EventProviders
2013-05-18 01:54:57 ----A---- C:\Windows\system32\netfxperf.dll
2013-05-18 01:54:57 ----A---- C:\Windows\system32\dfshim.dll
2013-05-18 01:54:52 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2013-05-18 01:54:49 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-05-18 01:54:49 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-05-18 01:54:49 ----A---- C:\Windows\system32\d3d10warp.dll
2013-05-18 01:54:45 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2013-05-18 01:54:45 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2013-05-18 01:54:45 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-05-18 01:54:44 ----A---- C:\Windows\system32\sysmain.dll
2013-05-18 01:54:43 ----A---- C:\Windows\system32\MSVidCtl.dll
2013-05-18 01:54:42 ----A---- C:\Windows\system32\wmp.dll
2013-05-18 01:54:41 ----A---- C:\Windows\system32\mscoree.dll
2013-05-18 01:54:40 ----A---- C:\Windows\system32\secproc_isv.dll
2013-05-18 01:54:40 ----A---- C:\Windows\system32\mmcndmgr.dll
2013-05-18 01:54:40 ----A---- C:\Windows\system32\mf.dll
2013-05-18 01:54:39 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2013-05-18 01:54:39 ----A---- C:\Windows\system32\xpsservices.dll
2013-05-18 01:54:39 ----A---- C:\Windows\system32\secproc.dll
2013-05-18 01:54:39 ----A---- C:\Windows\system32\RMActivate_isv.exe
2013-05-18 01:54:39 ----A---- C:\Windows\system32\RMActivate.exe
2013-05-18 01:54:38 ----A---- C:\Windows\SYSWOW64\secproc.dll
2013-05-18 01:54:38 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2013-05-18 01:54:38 ----A---- C:\Windows\system32\rpcrt4.dll
2013-05-18 01:54:37 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2013-05-18 01:54:37 ----A---- C:\Windows\system32\schedsvc.dll
2013-05-18 01:54:37 ----A---- C:\Windows\system32\ole32.dll
2013-05-18 01:54:36 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2013-05-18 01:54:36 ----A---- C:\Windows\system32\spwizui.dll
2013-05-18 01:54:35 ----A---- C:\Windows\SYSWOW64\mf.dll
2013-05-18 01:54:35 ----A---- C:\Windows\system32\wevtsvc.dll
2013-05-18 01:54:35 ----A---- C:\Windows\system32\vssapi.dll
2013-05-18 01:54:35 ----A---- C:\Windows\system32\taskschd.dll
2013-05-18 01:54:35 ----A---- C:\Windows\system32\RacEngn.dll
2013-05-18 01:54:35 ----A---- C:\Windows\system32\ExplorerFrame.dll
2013-05-18 01:54:35 ----A---- C:\Windows\system32\diagperf.dll
2013-05-18 01:54:34 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2013-05-18 01:54:34 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2013-05-18 01:54:34 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2013-05-18 01:54:33 ----A---- C:\Windows\SYSWOW64\wmp.dll
2013-05-18 01:54:33 ----A---- C:\Windows\system32\UIRibbon.dll
2013-05-18 01:54:33 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2013-05-18 01:54:32 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2013-05-18 01:54:32 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2013-05-18 01:54:32 ----A---- C:\Windows\system32\WsmSvc.dll
2013-05-18 01:54:32 ----A---- C:\Windows\system32\WMVCORE.DLL
2013-05-18 01:54:31 ----A---- C:\Windows\system32\WinSAT.exe
2013-05-18 01:54:31 ----A---- C:\Windows\system32\spreview.exe
2013-05-18 01:54:31 ----A---- C:\Windows\system32\spinstall.exe
2013-05-18 01:54:31 ----A---- C:\Windows\system32\rdpdd.dll
2013-05-18 01:54:31 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2013-05-18 01:54:31 ----A---- C:\Windows\system32\PresentationHost.exe
2013-05-18 01:54:31 ----A---- C:\Windows\system32\MPSSVC.dll
2013-05-18 01:54:31 ----A---- C:\Windows\system32\CertEnroll.dll
2013-05-18 01:54:30 ----A---- C:\Windows\system32\WMVDECOD.DLL
2013-05-18 01:54:30 ----A---- C:\Windows\system32\d3d9.dll
2013-05-18 01:54:29 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2013-05-18 01:54:29 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2013-05-18 01:54:29 ----A---- C:\Windows\system32\SearchFolder.dll
2013-05-18 01:54:29 ----A---- C:\Windows\system32\IKEEXT.DLL
2013-05-18 01:54:29 ----A---- C:\Windows\system32\gpsvc.dll
2013-05-18 01:54:29 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2013-05-18 01:54:28 ----A---- C:\Windows\system32\VSSVC.exe
2013-05-18 01:54:28 ----A---- C:\Windows\system32\mstime.dll
2013-05-18 01:54:28 ----A---- C:\Windows\system32\dwmcore.dll
2013-05-18 01:54:28 ----A---- C:\Windows\system32\drivers\http.sys
2013-05-18 01:54:28 ----A---- C:\Windows\system32\dbgeng.dll
2013-05-18 01:54:27 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2013-05-18 01:54:26 ----A---- C:\Windows\SYSWOW64\ole32.dll
2013-05-18 01:54:26 ----A---- C:\Windows\system32\TSWorkspace.dll
2013-05-18 01:54:26 ----A---- C:\Windows\system32\qmgr.dll
2013-05-18 01:54:26 ----A---- C:\Windows\system32\audiosrv.dll
2013-05-18 01:54:26 ----A---- C:\Windows\system32\actxprxy.dll
2013-05-18 01:54:25 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2013-05-18 01:54:25 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2013-05-18 01:54:25 ----A---- C:\Windows\system32\winhttp.dll
2013-05-18 01:54:25 ----A---- C:\Windows\system32\termsrv.dll
2013-05-18 01:54:25 ----A---- C:\Windows\system32\netlogon.dll
2013-05-18 01:54:25 ----A---- C:\Windows\system32\mstsc.exe
2013-05-18 01:54:25 ----A---- C:\Windows\system32\imapi2fs.dll
2013-05-18 01:54:25 ----A---- C:\Windows\system32\d3d11.dll
2013-05-18 01:54:24 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2013-05-18 01:54:24 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2013-05-18 01:54:24 ----A---- C:\Windows\system32\wbengine.exe
2013-05-18 01:54:24 ----A---- C:\Windows\system32\setupapi.dll
2013-05-18 01:54:24 ----A---- C:\Windows\system32\rpcss.dll
2013-05-18 01:54:24 ----A---- C:\Windows\system32\QAGENTRT.DLL
2013-05-18 01:54:24 ----A---- C:\Windows\system32\propsys.dll
2013-05-18 01:54:24 ----A---- C:\Windows\system32\msv1_0.dll
2013-05-18 01:54:23 ----A---- C:\Windows\system32\werconcpl.dll
2013-05-18 01:54:23 ----A---- C:\Windows\system32\taskeng.exe
2013-05-18 01:54:23 ----A---- C:\Windows\system32\odbc32.dll
2013-05-18 01:54:22 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2013-05-18 01:54:22 ----A---- C:\Windows\system32\WSDApi.dll
2013-05-18 01:54:22 ----A---- C:\Windows\system32\user32.dll
2013-05-18 01:54:22 ----A---- C:\Windows\system32\drivers\tdx.sys
2013-05-18 01:54:22 ----A---- C:\Windows\system32\dhcpcore.dll
2013-05-18 01:54:22 ----A---- C:\Windows\system32\certmgr.dll
2013-05-18 01:54:21 ----A---- C:\Windows\SYSWOW64\wer.dll
2013-05-18 01:54:21 ----A---- C:\Windows\SYSWOW64\certcli.dll
2013-05-18 01:54:21 ----A---- C:\Windows\system32\tsmf.dll
2013-05-18 01:54:21 ----A---- C:\Windows\system32\scavengeui.dll
2013-05-18 01:54:21 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2013-05-18 01:54:21 ----A---- C:\Windows\system32\msdrm.dll
2013-05-18 01:54:21 ----A---- C:\Windows\system32\drivers\netbt.sys
2013-05-18 01:54:20 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2013-05-18 01:54:20 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2013-05-18 01:54:20 ----A---- C:\Windows\system32\shlwapi.dll
2013-05-18 01:54:20 ----A---- C:\Windows\system32\netshell.dll
2013-05-18 01:54:20 ----A---- C:\Windows\system32\msdtctm.dll
2013-05-18 01:54:20 ----A---- C:\Windows\system32\framedynos.dll
2013-05-18 01:54:19 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2013-05-18 01:54:19 ----A---- C:\Windows\SYSWOW64\mstime.dll
2013-05-18 01:54:19 ----A---- C:\Windows\system32\ws2_32.dll
2013-05-18 01:54:19 ----A---- C:\Windows\system32\wmpps.dll
2013-05-18 01:54:19 ----A---- C:\Windows\system32\wmicmiplugin.dll
2013-05-18 01:54:19 ----A---- C:\Windows\system32\winlogon.exe
2013-05-18 01:54:19 ----A---- C:\Windows\system32\netcfgx.dll
2013-05-18 01:54:19 ----A---- C:\Windows\system32\lsm.exe
2013-05-18 01:54:19 ----A---- C:\Windows\system32\dxgi.dll
2013-05-18 01:54:19 ----A---- C:\Windows\system32\comdlg32.dll
2013-05-18 01:54:19 ----A---- C:\Windows\system32\apphelp.dll
2013-05-18 01:54:18 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2013-05-18 01:54:18 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2013-05-18 01:54:18 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2013-05-18 01:54:18 ----A---- C:\Windows\system32\wpdshext.dll
2013-05-18 01:54:18 ----A---- C:\Windows\system32\Query.dll
2013-05-18 01:54:18 ----A---- C:\Windows\system32\mswsock.dll
2013-05-18 01:54:18 ----A---- C:\Windows\system32\drvstore.dll
2013-05-18 01:54:18 ----A---- C:\Windows\system32\azroles.dll
2013-05-18 01:54:17 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2013-05-18 01:54:17 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2013-05-18 01:54:17 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2013-05-18 01:54:17 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2013-05-18 01:54:17 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2013-05-18 01:54:17 ----A---- C:\Windows\system32\Vault.dll
2013-05-18 01:54:17 ----A---- C:\Windows\system32\samsrv.dll
2013-05-18 01:54:17 ----A---- C:\Windows\system32\QAGENT.DLL
2013-05-18 01:54:17 ----A---- C:\Windows\system32\lpksetup.exe
2013-05-18 01:54:17 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2013-05-18 01:54:17 ----A---- C:\Windows\system32\cmd.exe
2013-05-18 01:54:17 ----A---- C:\Windows\system32\BFE.DLL
2013-05-18 01:54:16 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-05-18 01:54:16 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2013-05-18 01:54:16 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2013-05-18 01:54:16 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-05-18 01:54:16 ----A---- C:\Windows\system32\WebClnt.dll
2013-05-18 01:54:15 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2013-05-18 01:54:15 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-05-18 01:54:13 ----A---- C:\Windows\system32\sxs.dll
2013-05-18 01:54:13 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2013-05-18 01:54:12 ----A---- C:\Windows\SYSWOW64\Query.dll
2013-05-18 01:54:11 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2013-05-18 01:54:11 ----A---- C:\Windows\system32\Wldap32.dll
2013-05-18 01:54:11 ----A---- C:\Windows\system32\taskcomp.dll
2013-05-18 01:54:11 ----A---- C:\Windows\system32\mcbuilder.exe
2013-05-18 01:54:10 ----A---- C:\Windows\SYSWOW64\upnp.dll
2013-05-18 01:54:10 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2013-05-18 01:54:10 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2013-05-18 01:54:10 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2013-05-18 01:54:10 ----A---- C:\Windows\system32\pnidui.dll
2013-05-18 01:54:10 ----A---- C:\Windows\system32\mfds.dll
2013-05-18 01:54:10 ----A---- C:\Windows\system32\ipsmsnap.dll
2013-05-18 01:54:10 ----A---- C:\Windows\system32\hgprint.dll
2013-05-18 01:54:09 ----A---- C:\Windows\system32\webservices.dll
2013-05-18 01:54:08 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2013-05-18 01:54:08 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2013-05-18 01:54:08 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2013-05-18 01:54:08 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2013-05-18 01:54:08 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2013-05-18 01:54:08 ----A---- C:\Windows\system32\winsta.dll
2013-05-18 01:54:08 ----A---- C:\Windows\system32\sqlsrv32.dll
2013-05-18 01:54:08 ----A---- C:\Windows\system32\SessEnv.dll
2013-05-18 01:54:08 ----A---- C:\Windows\system32\fveapi.dll
2013-05-18 01:54:07 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2013-05-18 01:54:07 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2013-05-18 01:54:07 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe
2013-05-18 01:54:07 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2013-05-18 01:54:07 ----A---- C:\Windows\system32\WMNetMgr.dll
2013-05-18 01:54:07 ----A---- C:\Windows\system32\wlanpref.dll
2013-05-18 01:54:07 ----A---- C:\Windows\system32\schtasks.exe
2013-05-18 01:54:07 ----A---- C:\Windows\system32\prncache.dll
2013-05-18 01:54:07 ----A---- C:\Windows\system32\mcmde.dll
2013-05-18 01:54:07 ----A---- C:\Windows\system32\gdi32.dll
2013-05-18 01:54:07 ----A---- C:\Windows\system32\drivers\volsnap.sys
2013-05-18 01:54:07 ----A---- C:\Windows\system32\drivers\msrpc.sys
2013-05-18 01:54:07 ----A---- C:\Windows\system32\dot3api.dll
2013-05-18 01:54:06 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2013-05-18 01:54:06 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2013-05-18 01:54:06 ----A---- C:\Windows\SYSWOW64\userenv.dll
2013-05-18 01:54:06 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2013-05-18 01:54:06 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2013-05-18 01:54:06 ----A---- C:\Windows\system32\vpnike.dll
2013-05-18 01:54:06 ----A---- C:\Windows\system32\userenv.dll
2013-05-18 01:54:06 ----A---- C:\Windows\system32\photowiz.dll
2013-05-18 01:54:06 ----A---- C:\Windows\system32\evr.dll
2013-05-18 01:54:06 ----A---- C:\Windows\system32\drivers\rdbss.sys
2013-05-18 01:54:06 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2013-05-18 01:54:05 ----A---- C:\Windows\SYSWOW64\cmd.exe
2013-05-18 01:54:05 ----A---- C:\Windows\system32\wmpmde.dll
2013-05-18 01:54:05 ----A---- C:\Windows\system32\WMPEncEn.dll
2013-05-18 01:54:05 ----A---- C:\Windows\system32\wmpeffects.dll
2013-05-18 01:54:05 ----A---- C:\Windows\system32\SyncCenter.dll
2013-05-18 01:54:05 ----A---- C:\Windows\system32\srvsvc.dll
2013-05-18 01:54:05 ----A---- C:\Windows\system32\sppobjs.dll
2013-05-18 01:54:05 ----A---- C:\Windows\system32\mfreadwrite.dll
2013-05-18 01:54:05 ----A---- C:\Windows\system32\IPSECSVC.DLL
2013-05-18 01:54:05 ----A---- C:\Windows\system32\FXSSVC.exe
2013-05-18 01:54:05 ----A---- C:\Windows\system32\framedyn.dll
2013-05-18 01:54:05 ----A---- C:\Windows\system32\AudioSes.dll
2013-05-18 01:54:05 ----A---- C:\Windows\system32\aepdu.dll
2013-05-18 01:54:04 ----A---- C:\Windows\SYSWOW64\propsys.dll
2013-05-18 01:54:04 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2013-05-18 01:54:04 ----A---- C:\Windows\system32\shsvcs.dll
2013-05-18 01:54:04 ----A---- C:\Windows\system32\fde.dll
2013-05-18 01:54:04 ----A---- C:\Windows\system32\aeinv.dll
2013-05-18 01:54:03 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2013-05-18 01:54:03 ----A---- C:\Windows\SYSWOW64\user32.dll
2013-05-18 01:54:03 ----A---- C:\Windows\SYSWOW64\mfds.dll
2013-05-18 01:54:03 ----A---- C:\Windows\system32\WinSATAPI.dll
2013-05-18 01:54:03 ----A---- C:\Windows\system32\stobject.dll
2013-05-18 01:54:03 ----A---- C:\Windows\system32\netid.dll
2013-05-18 01:54:03 ----A---- C:\Windows\system32\netdiagfx.dll
2013-05-18 01:54:03 ----A---- C:\Windows\system32\localsec.dll
2013-05-18 01:54:03 ----A---- C:\Windows\system32\inetpp.dll
2013-05-18 01:54:03 ----A---- C:\Windows\system32\imapi2.dll
2013-05-18 01:54:03 ----A---- C:\Windows\system32\drivers\udfs.sys
2013-05-18 01:54:03 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2013-05-18 01:54:03 ----A---- C:\Windows\system32\credui.dll
2013-05-18 01:54:03 ----A---- C:\Windows\system32\bcryptprimitives.dll
2013-05-18 01:54:02 ----A---- C:\Windows\SYSWOW64\azroles.dll
2013-05-18 01:54:02 ----A---- C:\Windows\system32\tcpipcfg.dll
2013-05-18 01:54:02 ----A---- C:\Windows\system32\spp.dll
2013-05-18 01:54:02 ----A---- C:\Windows\system32\QSHVHOST.DLL
2013-05-18 01:54:02 ----A---- C:\Windows\system32\msinfo32.exe
2013-05-18 01:54:02 ----A---- C:\Windows\system32\davclnt.dll
2013-05-18 01:54:02 ----A---- C:\Windows\system32\biocpl.dll
2013-05-18 01:54:01 ----A---- C:\Windows\SYSWOW64\themeui.dll
2013-05-18 01:54:01 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2013-05-18 01:54:01 ----A---- C:\Windows\SYSWOW64\spp.dll
2013-05-18 01:54:01 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2013-05-18 01:54:01 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2013-05-18 01:54:01 ----A---- C:\Windows\SYSWOW64\credui.dll
2013-05-18 01:54:01 ----A---- C:\Windows\system32\scansetting.dll
2013-05-18 01:54:01 ----A---- C:\Windows\system32\printui.dll
2013-05-18 01:54:01 ----A---- C:\Windows\system32\pla.dll
2013-05-18 01:54:01 ----A---- C:\Windows\system32\mspbda.dll
2013-05-18 01:54:00 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2013-05-18 01:54:00 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2013-05-18 01:54:00 ----A---- C:\Windows\system32\wusa.exe
2013-05-18 01:54:00 ----A---- C:\Windows\system32\wiaservc.dll
2013-05-18 01:54:00 ----A---- C:\Windows\system32\vds.exe
2013-05-18 01:54:00 ----A---- C:\Windows\system32\rpchttp.dll
2013-05-18 01:54:00 ----A---- C:\Windows\system32\msdri.dll
2013-05-18 01:54:00 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2013-05-18 01:54:00 ----A---- C:\Windows\system32\drivers\pci.sys
2013-05-18 01:54:00 ----A---- C:\Windows\system32\aitagent.exe
2013-05-18 01:53:59 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2013-05-18 01:53:59 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2013-05-18 01:53:59 ----A---- C:\Windows\SYSWOW64\evr.dll
2013-05-18 01:53:59 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-05-18 01:53:59 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2013-05-18 01:53:59 ----A---- C:\Windows\system32\XpsRasterService.dll
2013-05-18 01:53:59 ----A---- C:\Windows\system32\wisptis.exe
2013-05-18 01:53:59 ----A---- C:\Windows\system32\PkgMgr.exe
2013-05-18 01:53:59 ----A---- C:\Windows\system32\ocsetup.exe
2013-05-18 01:53:59 ----A---- C:\Windows\system32\mscms.dll
2013-05-18 01:53:59 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2013-05-18 01:53:59 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2013-05-18 01:53:59 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2013-05-18 01:53:58 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2013-05-18 01:53:58 ----A---- C:\Windows\SYSWOW64\calc.exe
2013-05-18 01:53:58 ----A---- C:\Windows\system32\sppwinob.dll
2013-05-18 01:53:58 ----A---- C:\Windows\system32\ocsetapi.dll
2013-05-18 01:53:58 ----A---- C:\Windows\system32\DXP.dll
2013-05-18 01:53:58 ----A---- C:\Windows\system32\drivers\volmgr.sys
2013-05-18 01:53:57 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2013-05-18 01:53:57 ----A---- C:\Windows\SYSWOW64\sxs.dll
2013-05-18 01:53:57 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2013-05-18 01:53:57 ----A---- C:\Windows\system32\wpdbusenum.dll
2013-05-18 01:53:57 ----A---- C:\Windows\system32\wcncsvc.dll
2013-05-18 01:53:57 ----A---- C:\Windows\system32\upnp.dll
2013-05-18 01:53:57 ----A---- C:\Windows\system32\t2embed.dll
2013-05-18 01:53:57 ----A---- C:\Windows\system32\Robocopy.exe
2013-05-18 01:53:57 ----A---- C:\Windows\system32\mprapi.dll
2013-05-18 01:53:57 ----A---- C:\Windows\system32\eapphost.dll
2013-05-18 01:53:57 ----A---- C:\Windows\system32\eapp3hst.dll
2013-05-18 01:53:57 ----A---- C:\Windows\system32\drivers\msdsm.sys
2013-05-18 01:53:57 ----A---- C:\Windows\system32\drivers\HpSAMD.sys
2013-05-18 01:53:57 ----A---- C:\Windows\system32\ci.dll
2013-05-18 01:53:56 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2013-05-18 01:53:56 ----A---- C:\Windows\SYSWOW64\stobject.dll
2013-05-18 01:53:56 ----A---- C:\Windows\SYSWOW64\netshell.dll
2013-05-18 01:53:56 ----A---- C:\Windows\system32\thumbcache.dll
2013-05-18 01:53:56 ----A---- C:\Windows\system32\scecli.dll
2013-05-18 01:53:56 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2013-05-18 01:53:56 ----A---- C:\Windows\system32\hal.dll
2013-05-18 01:53:56 ----A---- C:\Windows\system32\DxpTaskSync.dll
2013-05-18 01:53:55 ----A---- C:\Windows\SYSWOW64\prncache.dll
2013-05-18 01:53:55 ----A---- C:\Windows\SYSWOW64\printui.dll
2013-05-18 01:53:55 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2013-05-18 01:53:55 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2013-05-18 01:53:55 ----A---- C:\Windows\system32\themeui.dll
2013-05-18 01:53:55 ----A---- C:\Windows\system32\puiobj.dll
2013-05-18 01:53:55 ----A---- C:\Windows\system32\onex.dll
2013-05-18 01:53:55 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2013-05-18 01:53:55 ----A---- C:\Windows\system32\msasn1.dll
2013-05-18 01:53:55 ----A---- C:\Windows\system32\iasrad.dll
2013-05-18 01:53:55 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2013-05-18 01:53:55 ----A---- C:\Windows\system32\dwmredir.dll
2013-05-18 01:53:55 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys
2013-05-18 01:53:55 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2013-05-18 01:53:54 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2013-05-18 01:53:54 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2013-05-18 01:53:54 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2013-05-18 01:53:54 ----A---- C:\Windows\SYSWOW64\net1.exe
2013-05-18 01:53:53 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2013-05-18 01:53:53 ----A---- C:\Windows\system32\wlangpui.dll
2013-05-18 01:53:53 ----A---- C:\Windows\system32\wiadefui.dll
2013-05-18 01:53:53 ----A---- C:\Windows\system32\wdc.dll
2013-05-18 01:53:53 ----A---- C:\Windows\system32\VAN.dll
2013-05-18 01:53:53 ----A---- C:\Windows\system32\StructuredQuery.dll
2013-05-18 01:53:53 ----A---- C:\Windows\system32\sdengin2.dll
2013-05-18 01:53:53 ----A---- C:\Windows\system32\scesrv.dll
2013-05-18 01:53:53 ----A---- C:\Windows\system32\rasmans.dll
2013-05-18 01:53:53 ----A---- C:\Windows\system32\msftedit.dll
2013-05-18 01:53:53 ----A---- C:\Windows\system32\dskquoui.dll
2013-05-18 01:53:52 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2013-05-18 01:53:52 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2013-05-18 01:53:52 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2013-05-18 01:53:52 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2013-05-18 01:53:52 ----A---- C:\Windows\system32\wscapi.dll
2013-05-18 01:53:52 ----A---- C:\Windows\system32\SndVol.exe
2013-05-18 01:53:52 ----A---- C:\Windows\system32\samcli.dll
2013-05-18 01:53:52 ----A---- C:\Windows\system32\regapi.dll
2013-05-18 01:53:52 ----A---- C:\Windows\system32\netcenter.dll
2013-05-18 01:53:52 ----A---- C:\Windows\system32\iasacct.dll
2013-05-18 01:53:52 ----A---- C:\Windows\system32\drivers\termdd.sys
2013-05-18 01:53:52 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2013-05-18 01:53:51 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2013-05-18 01:53:51 ----A---- C:\Windows\SYSWOW64\webservices.dll
2013-05-18 01:53:51 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2013-05-18 01:53:51 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2013-05-18 01:53:51 ----A---- C:\Windows\SYSWOW64\pnidui.dll
2013-05-18 01:53:51 ----A---- C:\Windows\SYSWOW64\fde.dll
2013-05-18 01:53:51 ----A---- C:\Windows\system32\wksprt.exe
2013-05-18 01:53:51 ----A---- C:\Windows\system32\TabSvc.dll
2013-05-18 01:53:51 ----A---- C:\Windows\system32\srchadmin.dll
2013-05-18 01:53:51 ----A---- C:\Windows\system32\setupcl.exe
2013-05-18 01:53:51 ----A---- C:\Windows\system32\QUTIL.DLL
2013-05-18 01:53:51 ----A---- C:\Windows\system32\drivers\msahci.sys
2013-05-18 01:53:50 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2013-05-18 01:53:50 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2013-05-18 01:53:50 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll
2013-05-18 01:53:50 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2013-05-18 01:53:50 ----A---- C:\Windows\system32\rastls.dll
2013-05-18 01:53:50 ----A---- C:\Windows\system32\drivers\acpi.sys
2013-05-18 01:53:49 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2013-05-18 01:53:49 ----A---- C:\Windows\SYSWOW64\pla.dll
2013-05-18 01:53:49 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2013-05-18 01:53:49 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2013-05-18 01:53:49 ----A---- C:\Windows\system32\tapisrv.dll
2013-05-18 01:53:49 ----A---- C:\Windows\system32\netiohlp.dll
2013-05-18 01:53:49 ----A---- C:\Windows\system32\msconfig.exe
2013-05-18 01:53:49 ----A---- C:\Windows\system32\mimefilt.dll
2013-05-18 01:53:49 ----A---- C:\Windows\system32\lsmproxy.dll
2013-05-18 01:53:49 ----A---- C:\Windows\system32\ListSvc.dll
2013-05-18 01:53:49 ----A---- C:\Windows\system32\hgcpl.dll
2013-05-18 01:53:49 ----A---- C:\Windows\system32\fdeploy.dll
2013-05-18 01:53:49 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2013-05-18 01:53:49 ----A---- C:\Windows\system32\drivers\raspptp.sys
2013-05-18 01:53:49 ----A---- C:\Windows\system32\drivers\ks.sys
2013-05-18 01:53:49 ----A---- C:\Windows\system32\clusapi.dll
2013-05-18 01:53:49 ----A---- C:\Windows\system32\basecsp.dll
2013-05-18 01:53:48 ----A---- C:\Windows\SYSWOW64\winsta.dll
2013-05-18 01:53:48 ----A---- C:\Windows\SYSWOW64\imapi2.dll
2013-05-18 01:53:48 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-05-18 01:53:48 ----A---- C:\Windows\system32\riched20.dll
2013-05-18 01:53:48 ----A---- C:\Windows\system32\mtxclu.dll
2013-05-18 01:53:48 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2013-05-18 01:53:47 ----A---- C:\Windows\SYSWOW64\onex.dll
2013-05-18 01:53:47 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll
2013-05-18 01:53:47 ----A---- C:\Windows\system32\RpcRtRemote.dll
2013-05-18 01:53:47 ----A---- C:\Windows\system32\powercpl.dll
2013-05-18 01:53:47 ----A---- C:\Windows\system32\logoncli.dll
2013-05-18 01:53:47 ----A---- C:\Windows\system32\dnscmmc.dll
2013-05-18 01:53:46 ----A---- C:\Windows\SYSWOW64\WMPEncEn.dll
2013-05-18 01:53:46 ----A---- C:\Windows\SYSWOW64\winmm.dll
2013-05-18 01:53:46 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2013-05-18 01:53:46 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2013-05-18 01:53:46 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2013-05-18 01:53:46 ----A---- C:\Windows\system32\themecpl.dll
2013-05-18 01:53:46 ----A---- C:\Windows\system32\sharemediacpl.dll
2013-05-18 01:53:46 ----A---- C:\Windows\system32\SensorsCpl.dll
2013-05-18 01:53:46 ----A---- C:\Windows\system32\nci.dll
2013-05-18 01:53:46 ----A---- C:\Windows\system32\eudcedit.exe
2013-05-18 01:53:45 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2013-05-18 01:53:45 ----A---- C:\Windows\SYSWOW64\samcli.dll
2013-05-18 01:53:45 ----A---- C:\Windows\SYSWOW64\regapi.dll
2013-05-18 01:53:45 ----A---- C:\Windows\SYSWOW64\proquota.exe
2013-05-18 01:53:45 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2013-05-18 01:53:45 ----A---- C:\Windows\SYSWOW64\msutb.dll
2013-05-18 01:53:45 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2013-05-18 01:53:45 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2013-05-18 01:53:45 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2013-05-18 01:53:45 ----A---- C:\Windows\SYSWOW64\autochk.exe
2013-05-18 01:53:45 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2013-05-18 01:53:45 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2013-05-18 01:53:45 ----A---- C:\Windows\system32\wkssvc.dll
2013-05-18 01:53:45 ----A---- C:\Windows\system32\vpnikeapi.dll
2013-05-18 01:53:45 ----A---- C:\Windows\system32\sppcomapi.dll
2013-05-18 01:53:45 ----A---- C:\Windows\system32\netjoin.dll
2013-05-18 01:53:45 ----A---- C:\Windows\system32\Narrator.exe
2013-05-18 01:53:45 ----A---- C:\Windows\system32\Faultrep.dll
2013-05-18 01:53:45 ----A---- C:\Windows\system32\comctl32.dll
2013-05-18 01:53:45 ----A---- C:\Windows\system32\cabview.dll
2013-05-18 01:53:45 ----A---- C:\Windows\system32\autochk.exe
2013-05-18 01:53:45 ----A---- C:\Windows\system32\autofmt.exe
2013-05-18 01:53:44 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2013-05-18 01:53:44 ----A---- C:\Windows\SYSWOW64\srchadmin.dll
2013-05-18 01:53:44 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2013-05-18 01:53:44 ----A---- C:\Windows\SYSWOW64\powercpl.dll
2013-05-18 01:53:44 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2013-05-18 01:53:44 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2013-05-18 01:53:44 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2013-05-18 01:53:44 ----A---- C:\Windows\system32\wpd_ci.dll
2013-05-18 01:53:44 ----A---- C:\Windows\system32\shsetup.dll
2013-05-18 01:53:44 ----A---- C:\Windows\system32\nshipsec.dll
2013-05-18 01:53:44 ----A---- C:\Windows\system32\fms.dll
2013-05-18 01:53:44 ----A---- C:\Windows\system32\bcdsrv.dll
2013-05-18 01:53:44 ----A---- C:\Windows\system32\autoconv.exe
2013-05-18 01:53:44 ----A---- C:\Windows\system32\audiodg.exe
2013-05-18 01:53:43 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2013-05-18 01:53:43 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL
2013-05-18 01:53:43 ----A---- C:\Windows\SYSWOW64\netid.dll
2013-05-18 01:53:43 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2013-05-18 01:53:43 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2013-05-18 01:53:43 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2013-05-18 01:53:43 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2013-05-18 01:53:43 ----A---- C:\Windows\system32\wwanconn.dll
2013-05-18 01:53:43 ----A---- C:\Windows\system32\wlanui.dll
2013-05-18 01:53:43 ----A---- C:\Windows\system32\SmiEngine.dll
2013-05-18 01:53:43 ----A---- C:\Windows\system32\sdclt.exe
2013-05-18 01:53:43 ----A---- C:\Windows\system32\qedit.dll
2013-05-18 01:53:43 ----A---- C:\Windows\system32\prntvpt.dll
2013-05-18 01:53:43 ----A---- C:\Windows\system32\mscorier.dll
2013-05-18 01:53:43 ----A---- C:\Windows\system32\mprddm.dll
2013-05-18 01:53:43 ----A---- C:\Windows\system32\fontext.dll
2013-05-18 01:53:43 ----A---- C:\Windows\system32\drivers\winusb.sys
2013-05-18 01:53:43 ----A---- C:\Windows\system32\drivers\wanarp.sys
2013-05-18 01:53:43 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2013-05-18 01:53:43 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2013-05-18 01:53:43 ----A---- C:\Windows\system32\drivers\scsiport.sys
2013-05-18 01:53:43 ----A---- C:\Windows\system32\drivers\hidclass.sys
2013-05-18 01:53:43 ----A---- C:\Windows\system32\dps.dll
2013-05-18 01:53:43 ----A---- C:\Windows\system32\Display.dll
2013-05-18 01:53:43 ----A---- C:\Windows\system32\credssp.dll
2013-05-18 01:53:43 ----A---- C:\Windows\system32\AxInstSv.dll
2013-05-18 01:53:42 ----A---- C:\Windows\SYSWOW64\wdc.dll
2013-05-18 01:53:42 ----A---- C:\Windows\SYSWOW64\Vault.dll
2013-05-18 01:53:42 ----A---- C:\Windows\SYSWOW64\untfs.dll
2013-05-18 01:53:42 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2013-05-18 01:53:42 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2013-05-18 01:53:42 ----A---- C:\Windows\SYSWOW64\rastls.dll
2013-05-18 01:53:42 ----A---- C:\Windows\SYSWOW64\nci.dll
2013-05-18 01:53:42 ----A---- C:\Windows\system32\wmpsrcwp.dll
2013-05-18 01:53:42 ----A---- C:\Windows\system32\mblctr.exe
2013-05-18 01:53:42 ----A---- C:\Windows\system32\batmeter.dll
2013-05-18 01:53:41 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2013-05-18 01:53:41 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2013-05-18 01:53:41 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll
2013-05-18 01:53:41 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2013-05-18 01:53:41 ----A---- C:\Windows\system32\wpccpl.dll
2013-05-18 01:53:41 ----A---- C:\Windows\system32\usercpl.dll
2013-05-18 01:53:41 ----A---- C:\Windows\system32\rtutils.dll
2013-05-18 01:53:41 ----A---- C:\Windows\system32\provsvc.dll
2013-05-18 01:53:41 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2013-05-18 01:53:41 ----A---- C:\Windows\system32\DiagCpl.dll
2013-05-18 01:53:41 ----A---- C:\Windows\system32\bootres.dll
2013-05-18 01:53:40 ----A---- C:\Windows\SYSWOW64\taskmgr.exe
2013-05-18 01:53:40 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2013-05-18 01:53:40 ----A---- C:\Windows\SYSWOW64\DxpTaskSync.dll
2013-05-18 01:53:40 ----A---- C:\Windows\SYSWOW64\Display.dll
2013-05-18 01:53:40 ----A---- C:\Windows\system32\sppsvc.exe
2013-05-18 01:53:40 ----A---- C:\Windows\system32\SndVolSSO.dll
2013-05-18 01:53:40 ----A---- C:\Windows\system32\rasppp.dll
2013-05-18 01:53:40 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2013-05-18 01:53:40 ----A---- C:\Windows\system32\dot3cfg.dll
2013-05-18 01:53:39 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2013-05-18 01:53:39 ----A---- C:\Windows\SYSWOW64\userinit.exe
2013-05-18 01:53:39 ----A---- C:\Windows\SYSWOW64\termmgr.dll
2013-05-18 01:53:39 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2013-05-18 01:53:39 ----A---- C:\Windows\SYSWOW64\eudcedit.exe
2013-05-18 01:53:39 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2013-05-18 01:53:39 ----A---- C:\Windows\system32\taskmgr.exe
2013-05-18 01:53:39 ----A---- C:\Windows\system32\proquota.exe
2013-05-18 01:53:39 ----A---- C:\Windows\system32\prnfldr.dll
2013-05-18 01:53:39 ----A---- C:\Windows\system32\pdh.dll
2013-05-18 01:53:39 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2013-05-18 01:53:39 ----A---- C:\Windows\system32\hbaapi.dll
2013-05-18 01:53:39 ----A---- C:\Windows\system32\dxdiagn.dll
2013-05-18 01:53:39 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2013-05-18 01:53:39 ----A---- C:\Windows\system32\drivers\ataport.sys
2013-05-18 01:53:38 ----A---- C:\Windows\SYSWOW64\wiadefui.dll
2013-05-18 01:53:38 ----A---- C:\Windows\SYSWOW64\sppcomapi.dll
2013-05-18 01:53:38 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2013-05-18 01:53:38 ----A---- C:\Windows\SYSWOW64\rasppp.dll
2013-05-18 01:53:38 ----A---- C:\Windows\SYSWOW64\logoncli.dll
2013-05-18 01:53:38 ----A---- C:\Windows\SYSWOW64\FirewallControlPanel.dll
2013-05-18 01:53:38 ----A---- C:\Windows\SYSWOW64\cabview.dll
2013-05-18 01:53:38 ----A---- C:\Windows\system32\userinit.exe
2013-05-18 01:53:38 ----A---- C:\Windows\system32\untfs.dll
2013-05-18 01:53:38 ----A---- C:\Windows\system32\accessibilitycpl.dll
2013-05-18 01:53:37 ----A---- C:\Windows\SYSWOW64\themecpl.dll
2013-05-18 01:53:37 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll
2013-05-18 01:53:37 ----A---- C:\Windows\SYSWOW64\hgcpl.dll
2013-05-18 01:53:37 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2013-05-18 01:53:37 ----A---- C:\Windows\SYSWOW64\dnscmmc.dll
2013-05-18 01:53:37 ----A---- C:\Windows\system32\zipfldr.dll
2013-05-18 01:53:37 ----A---- C:\Windows\system32\slui.exe
2013-05-18 01:53:37 ----A---- C:\Windows\system32\msieftp.dll
2013-05-18 01:53:37 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2013-05-18 01:53:36 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2013-05-18 01:53:36 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll
2013-05-18 01:53:36 ----A---- C:\Windows\SYSWOW64\scecli.dll
2013-05-18 01:53:36 ----A---- C:\Windows\SYSWOW64\mscories.dll
2013-05-18 01:53:36 ----A---- C:\Windows\SYSWOW64\mscms.dll
2013-05-18 01:53:36 ----A---- C:\Windows\SYSWOW64\mprddm.dll
2013-05-18 01:53:36 ----A---- C:\Windows\SYSWOW64\localsec.dll
2013-05-18 01:53:36 ----A---- C:\Windows\SYSWOW64\iasacct.dll
2013-05-18 01:53:36 ----A---- C:\Windows\SYSWOW64\fontext.dll
2013-05-18 01:53:36 ----A---- C:\Windows\system32\taskbarcpl.dll
2013-05-18 01:53:36 ----A---- C:\Windows\system32\sud.dll
2013-05-18 01:53:36 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2013-05-18 01:53:36 ----A---- C:\Windows\system32\networkmap.dll
2013-05-18 01:53:36 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2013-05-18 01:53:36 ----A---- C:\Windows\system32\dot3svc.dll
2013-05-18 01:53:36 ----A---- C:\Windows\system32\DeviceCenter.dll
2013-05-18 01:53:36 ----A---- C:\Windows\system32\cryptui.dll
2013-05-18 01:53:35 ----A---- C:\Windows\SYSWOW64\wlanui.dll
2013-05-18 01:53:35 ----A---- C:\Windows\SYSWOW64\w32tm.exe
2013-05-18 01:53:35 ----A---- C:\Windows\SYSWOW64\VAN.dll
2013-05-18 01:53:35 ----A---- C:\Windows\SYSWOW64\usercpl.dll
2013-05-18 01:53:35 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2013-05-18 01:53:35 ----A---- C:\Windows\SYSWOW64\qedit.dll
2013-05-18 01:53:35 ----A---- C:\Windows\SYSWOW64\prntvpt.dll
2013-05-18 01:53:35 ----A---- C:\Windows\SYSWOW64\PerfCenterCPL.dll
2013-05-18 01:53:35 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2013-05-18 01:53:35 ----A---- C:\Windows\SYSWOW64\batmeter.dll
2013-05-18 01:53:35 ----A---- C:\Windows\system32\uxlib.dll
2013-05-18 01:53:35 ----A---- C:\Windows\system32\twext.dll
2013-05-18 01:53:35 ----A---- C:\Windows\system32\recovery.dll
2013-05-18 01:53:35 ----A---- C:\Windows\system32\OobeFldr.dll
2013-05-18 01:53:35 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2013-05-18 01:53:35 ----A---- C:\Windows\system32\bcdedit.exe
2013-05-18 01:53:35 ----A---- C:\Windows\system32\azroleui.dll
2013-05-18 01:53:35 ----A---- C:\Windows\system32\ActionCenter.dll
2013-05-18 01:53:34 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2013-05-18 01:53:34 ----A---- C:\Windows\SYSWOW64\spwizeng.dll
2013-05-18 01:53:34 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2013-05-18 01:53:34 ----A---- C:\Windows\SYSWOW64\accessibilitycpl.dll
2013-05-18 01:53:34 ----A---- C:\Windows\system32\tzutil.exe
2013-05-18 01:53:34 ----A---- C:\Windows\system32\sisbkup.dll
2013-05-18 01:53:34 ----A---- C:\Windows\system32\sdcpl.dll
2013-05-18 01:53:34 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2013-05-18 01:53:34 ----A---- C:\Windows\system32\isoburn.exe
2013-05-18 01:53:34 ----A---- C:\Windows\system32\efscore.dll
2013-05-18 01:53:34 ----A---- C:\Windows\system32\dsuiext.dll
2013-05-18 01:53:34 ----A---- C:\Windows\system32\drivers\sdbus.sys
2013-05-18 01:53:34 ----A---- C:\Windows\system32\cca.dll
2013-05-18 01:53:34 ----A---- C:\Windows\system32\asycfilt.dll
2013-05-18 01:53:33 ----A---- C:\Windows\SYSWOW64\networkmap.dll
2013-05-18 01:53:33 ----A---- C:\Windows\SYSWOW64\netjoin.dll
2013-05-18 01:53:33 ----A---- C:\Windows\SYSWOW64\MSAC3ENC.DLL
2013-05-18 01:53:33 ----A---- C:\Windows\SYSWOW64\fdeploy.dll
2013-05-18 01:53:33 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2013-05-18 01:53:33 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2013-05-18 01:53:33 ----A---- C:\Windows\SYSWOW64\adsldp.dll
2013-05-18 01:53:33 ----A---- C:\Windows\system32\wlanmsm.dll
2013-05-18 01:53:33 ----A---- C:\Windows\system32\systemcpl.dll
2013-05-18 01:53:33 ----A---- C:\Windows\system32\sysclass.dll
2013-05-18 01:53:33 ----A---- C:\Windows\system32\syncui.dll
2013-05-18 01:53:33 ----A---- C:\Windows\system32\shwebsvc.dll
2013-05-18 01:53:33 ----A---- C:\Windows\system32\sdrsvc.dll
2013-05-18 01:53:33 ----A---- C:\Windows\system32\recdisc.exe
2013-05-18 01:53:33 ----A---- C:\Windows\system32\netplwiz.dll
2013-05-18 01:53:33 ----A---- C:\Windows\system32\ncryptui.dll
2013-05-18 01:53:33 ----A---- C:\Windows\system32\httpapi.dll
2013-05-18 01:53:33 ----A---- C:\Windows\system32\drivers\mpio.sys
2013-05-18 01:53:33 ----A---- C:\Windows\system32\certcli.dll
2013-05-18 01:53:33 ----A---- C:\Windows\system32\autoplay.dll
2013-05-18 01:53:33 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2013-05-18 01:53:32 ----A---- C:\Windows\SYSWOW64\wusa.exe
2013-05-18 01:53:32 ----A---- C:\Windows\SYSWOW64\prnfldr.dll
2013-05-18 01:53:32 ----A---- C:\Windows\SYSWOW64\OnLineIDCpl.dll
2013-05-18 01:53:32 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2013-05-18 01:53:32 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2013-05-18 01:53:32 ----A---- C:\Windows\system32\spwizeng.dll
2013-05-18 01:53:32 ----A---- C:\Windows\system32\msvidc32.dll
2013-05-18 01:53:32 ----A---- C:\Windows\system32\MFPlay.dll
2013-05-18 01:53:32 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2013-05-18 01:53:31 ----A---- C:\Windows\SYSWOW64\sud.dll
2013-05-18 01:53:31 ----A---- C:\Windows\SYSWOW64\sisbkup.dll
2013-05-18 01:53:31 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll
2013-05-18 01:53:31 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2013-05-18 01:53:31 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2013-05-18 01:53:31 ----A---- C:\Windows\SYSWOW64\MediaMetadataHandler.dll
2013-05-18 01:53:31 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll
2013-05-18 01:53:31 ----A---- C:\Windows\SYSWOW64\ifsutil.dll
2013-05-18 01:53:31 ----A---- C:\Windows\SYSWOW64\iasrad.dll
2013-05-18 01:53:31 ----A---- C:\Windows\SYSWOW64\ftp.exe
2013-05-18 01:53:31 ----A---- C:\Windows\SYSWOW64\efscore.dll
2013-05-18 01:53:31 ----A---- C:\Windows\SYSWOW64\dot3cfg.dll
2013-05-18 01:53:31 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll
2013-05-18 01:53:31 ----A---- C:\Windows\SYSWOW64\credssp.dll
2013-05-18 01:53:31 ----A---- C:\Windows\system32\vdsutil.dll
2013-05-18 01:53:31 ----A---- C:\Windows\system32\termmgr.dll
2013-05-18 01:53:31 ----A---- C:\Windows\system32\sqlcese30.dll
2013-05-18 01:53:31 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2013-05-18 01:53:31 ----A---- C:\Windows\system32\sethc.exe
2013-05-18 01:53:31 ----A---- C:\Windows\system32\ReAgent.dll
2013-05-18 01:53:31 ----A---- C:\Windows\system32\rdpd3d.dll
2013-05-18 01:53:31 ----A---- C:\Windows\system32\ntlanman.dll
2013-05-18 01:53:31 ----A---- C:\Windows\system32\msscp.dll
2013-05-18 01:53:31 ----A---- C:\Windows\system32\iprtrmgr.dll
2013-05-18 01:53:31 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2013-05-18 01:53:30 ----A---- C:\Windows\SYSWOW64\syncui.dll
2013-05-18 01:53:30 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll
2013-05-18 01:53:30 ----A---- C:\Windows\SYSWOW64\autoplay.dll
2013-05-18 01:53:30 ----A---- C:\Windows\SYSWOW64\ActionCenterCPL.dll
2013-05-18 01:53:30 ----A---- C:\Windows\system32\wmdrmsdk.dll
2013-05-18 01:53:30 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2013-05-18 01:53:30 ----A---- C:\Windows\system32\srvcli.dll
2013-05-18 01:53:30 ----A---- C:\Windows\system32\slwga.dll
2013-05-18 01:53:30 ----A---- C:\Windows\system32\iyuv_32.dll
2013-05-18 01:53:30 ----A---- C:\Windows\system32\iTVData.dll
2013-05-18 01:53:30 ----A---- C:\Windows\system32\drmmgrtn.dll
2013-05-18 01:53:29 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2013-05-18 01:53:29 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2013-05-18 01:53:29 ----A---- C:\Windows\SYSWOW64\ntlanman.dll
2013-05-18 01:53:29 ----A---- C:\Windows\SYSWOW64\dskquoui.dll
2013-05-18 01:53:29 ----A---- C:\Windows\system32\msiexec.exe
2013-05-18 01:53:28 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2013-05-18 01:53:28 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2013-05-18 01:53:28 ----A---- C:\Windows\SYSWOW64\sethc.exe
2013-05-18 01:53:28 ----A---- C:\Windows\SYSWOW64\riched20.dll
2013-05-18 01:53:28 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll
2013-05-18 01:53:28 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2013-05-18 01:53:28 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2013-05-18 01:53:28 ----A---- C:\Windows\system32\wavemsp.dll
2013-05-18 01:53:28 ----A---- C:\Windows\system32\srrstr.dll
2013-05-18 01:53:28 ----A---- C:\Windows\system32\ntprint.dll
2013-05-18 01:53:28 ----A---- C:\Windows\system32\nslookup.exe
2013-05-18 01:53:28 ----A---- C:\Windows\system32\NAPHLPR.DLL
2013-05-18 01:53:28 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2013-05-18 01:53:28 ----A---- C:\Windows\system32\bcdboot.exe
2013-05-18 01:53:28 ----A---- C:\Windows\system32\acppage.dll
2013-05-18 01:53:27 ----A---- C:\Windows\SYSWOW64\wmpsrcwp.dll
2013-05-18 01:53:27 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2013-05-18 01:53:27 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL
2013-05-18 01:53:27 ----A---- C:\Windows\SYSWOW64\migisol.dll
2013-05-18 01:53:27 ----A---- C:\Windows\SYSWOW64\fms.dll
2013-05-18 01:53:27 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2013-05-18 01:53:27 ----A---- C:\Windows\SYSWOW64\activeds.dll
2013-05-18 01:53:27 ----A---- C:\Windows\system32\TSpkg.dll
2013-05-18 01:53:27 ----A---- C:\Windows\system32\sppnp.dll
2013-05-18 01:53:27 ----A---- C:\Windows\system32\certprop.dll
2013-05-18 01:53:26 ----A---- C:\Windows\SYSWOW64\httpapi.dll
2013-05-18 01:53:26 ----A---- C:\Windows\SYSWOW64\dpx.dll
2013-05-18 01:53:26 ----A---- C:\Windows\system32\wkscli.dll
2013-05-18 01:53:26 ----A---- C:\Windows\system32\remotepg.dll
2013-05-18 01:53:26 ----A---- C:\Windows\system32\networkexplorer.dll
2013-05-18 01:53:26 ----A---- C:\Windows\system32\cabinet.dll
2013-05-18 01:53:25 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2013-05-18 01:53:25 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2013-05-18 01:53:25 ----A---- C:\Windows\SYSWOW64\wavemsp.dll
2013-05-18 01:53:25 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2013-05-18 01:53:25 ----A---- C:\Windows\SYSWOW64\provsvc.dll
2013-05-18 01:53:25 ----A---- C:\Windows\SYSWOW64\nshipsec.dll
2013-05-18 01:53:25 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2013-05-18 01:53:25 ----A---- C:\Windows\SYSWOW64\isoburn.exe
2013-05-18 01:53:25 ----A---- C:\Windows\SYSWOW64\dsuiext.dll
2013-05-18 01:53:25 ----A---- C:\Windows\SYSWOW64\dot3ui.dll
2013-05-18 01:53:25 ----A---- C:\Windows\SYSWOW64\dfrgui.exe
2013-05-18 01:53:25 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2013-05-18 01:53:25 ----A---- C:\Windows\system32\wsnmp32.dll
2013-05-18 01:53:25 ----A---- C:\Windows\system32\wmpdxm.dll
2013-05-18 01:53:25 ----A---- C:\Windows\system32\WinSCard.dll
2013-05-18 01:53:25 ----A---- C:\Windows\system32\net1.exe
2013-05-18 01:53:25 ----A---- C:\Windows\system32\ftp.exe
2013-05-18 01:53:25 ----A---- C:\Windows\system32\dfrgui.exe
2013-05-18 01:53:24 ----A---- C:\Windows\SYSWOW64\wvc.dll
2013-05-18 01:53:24 ----A---- C:\Windows\SYSWOW64\wtsapi32.dll
2013-05-18 01:53:24 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2013-05-18 01:53:24 ----A---- C:\Windows\SYSWOW64\tzutil.exe
2013-05-18 01:53:24 ----A---- C:\Windows\SYSWOW64\PkgMgr.exe
2013-05-18 01:53:24 ----A---- C:\Windows\SYSWOW64\ocsetup.exe
2013-05-18 01:53:24 ----A---- C:\Windows\SYSWOW64\mstask.dll
2013-05-18 01:53:24 ----A---- C:\Windows\system32\wvc.dll
2013-05-18 01:53:24 ----A---- C:\Windows\system32\wsqmcons.exe
2013-05-18 01:53:24 ----A---- C:\Windows\system32\wmdrmdev.dll
2013-05-18 01:53:24 ----A---- C:\Windows\system32\WerFaultSecure.exe
2013-05-18 01:53:24 ----A---- C:\Windows\system32\msyuv.dll
2013-05-18 01:53:24 ----A---- C:\Windows\system32\mfps.dll
2013-05-18 01:53:24 ----A---- C:\Windows\system32\blackbox.dll
2013-05-18 01:53:23 ----A---- C:\Windows\twain_32.dll
2013-05-18 01:53:23 ----A---- C:\Windows\SYSWOW64\twext.dll
2013-05-18 01:53:23 ----A---- C:\Windows\SYSWOW64\setupugc.exe
2013-05-18 01:53:23 ----A---- C:\Windows\SYSWOW64\qcap.dll
2013-05-18 01:53:23 ----A---- C:\Windows\SYSWOW64\qasf.dll
2013-05-18 01:53:23 ----A---- C:\Windows\system32\unimdmat.dll
2013-05-18 01:53:23 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-05-18 01:53:23 ----A---- C:\Windows\system32\OpcServices.dll
2013-05-18 01:53:23 ----A---- C:\Windows\system32\msrle32.dll
2013-05-18 01:53:23 ----A---- C:\Windows\system32\mapistub.dll
2013-05-18 01:53:23 ----A---- C:\Windows\system32\mapi32.dll
2013-05-18 01:53:23 ----A---- C:\Windows\system32\iscsium.dll
2013-05-18 01:53:23 ----A---- C:\Windows\system32\diskraid.exe
2013-05-18 01:53:22 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2013-05-18 01:53:22 ----A---- C:\Windows\SYSWOW64\uxlib.dll
2013-05-18 01:53:22 ----A---- C:\Windows\SYSWOW64\slwga.dll
2013-05-18 01:53:22 ----A---- C:\Windows\SYSWOW64\nslookup.exe
2013-05-18 01:53:22 ----A---- C:\Windows\SYSWOW64\msvfw32.dll
2013-05-18 01:53:22 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2013-05-18 01:53:22 ----A---- C:\Windows\SYSWOW64\audiodev.dll
2013-05-18 01:53:22 ----A---- C:\Windows\system32\tsbyuv.dll
2013-05-18 01:53:22 ----A---- C:\Windows\system32\seclogon.dll
2013-05-18 01:53:22 ----A---- C:\Windows\system32\muifontsetup.dll
2013-05-18 01:53:22 ----A---- C:\Windows\system32\ifsutil.dll
2013-05-18 01:53:22 ----A---- C:\Windows\system32\drivers\umbus.sys
2013-05-18 01:53:21 ----A---- C:\Windows\SYSWOW64\WPDShServiceObj.dll
2013-05-18 01:53:21 ----A---- C:\Windows\SYSWOW64\wimserv.exe
2013-05-18 01:53:21 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2013-05-18 01:53:21 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2013-05-18 01:53:21 ----A---- C:\Windows\SYSWOW64\rdpencom.dll
2013-05-18 01:53:21 ----A---- C:\Windows\SYSWOW64\msscp.dll
2013-05-18 01:53:21 ----A---- C:\Windows\SYSWOW64\diskraid.exe
2013-05-18 01:53:21 ----A---- C:\Windows\SYSWOW64\DevicePairingFolder.dll
2013-05-18 01:53:21 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2013-05-18 01:53:21 ----A---- C:\Windows\SYSWOW64\acppage.dll
2013-05-18 01:53:21 ----A---- C:\Windows\system32\wmpshell.dll
2013-05-18 01:53:21 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2013-05-18 01:53:21 ----A---- C:\Windows\system32\umb.dll
2013-05-18 01:53:21 ----A---- C:\Windows\system32\tlscsp.dll
2013-05-18 01:53:21 ----A---- C:\Windows\system32\rdpencom.dll
2013-05-18 01:53:21 ----A---- C:\Windows\system32\qasf.dll
2013-05-18 01:53:21 ----A---- C:\Windows\system32\perfmon.exe
2013-05-18 01:53:21 ----A---- C:\Windows\system32\netutils.dll
2013-05-18 01:53:21 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2013-05-18 01:53:21 ----A---- C:\Windows\system32\dbghelp.dll
2013-05-18 01:53:21 ----A---- C:\Windows\system32\AzSqlExt.dll
2013-05-18 01:53:19 ----A---- C:\Windows\SYSWOW64\remotepg.dll
2013-05-18 01:53:19 ----A---- C:\Windows\SYSWOW64\raschap.dll
2013-05-18 01:53:19 ----A---- C:\Windows\SYSWOW64\QUTIL.DLL
2013-05-18 01:53:19 ----A---- C:\Windows\SYSWOW64\perfmon.exe
2013-05-18 01:53:19 ----A---- C:\Windows\SYSWOW64\ocsetapi.dll
2013-05-18 01:53:19 ----A---- C:\Windows\SYSWOW64\networkexplorer.dll
2013-05-18 01:53:19 ----A---- C:\Windows\SYSWOW64\NAPCRYPT.DLL
2013-05-18 01:53:19 ----A---- C:\Windows\SYSWOW64\input.dll
2013-05-18 01:53:19 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2013-05-18 01:53:19 ----A---- C:\Windows\system32\wpdwcn.dll
2013-05-18 01:53:19 ----A---- C:\Windows\system32\WMADMOD.DLL
2013-05-18 01:53:19 ----A---- C:\Windows\system32\wiavideo.dll
2013-05-18 01:53:19 ----A---- C:\Windows\system32\syssetup.dll
2013-05-18 01:53:19 ----A---- C:\Windows\system32\runonce.exe
2013-05-18 01:53:19 ----A---- C:\Windows\system32\raschap.dll
2013-05-18 01:53:19 ----A---- C:\Windows\system32\FXSAPI.dll
2013-05-18 01:53:19 ----A---- C:\Windows\system32\ActionQueue.dll
2013-05-18 01:53:19 ----A---- C:\Windows\bfsvc.exe
2013-05-18 01:53:18 ----A---- C:\Windows\SYSWOW64\wpdwcn.dll
2013-05-18 01:53:18 ----A---- C:\Windows\SYSWOW64\wmpdxm.dll
2013-05-18 01:53:18 ----A---- C:\Windows\SYSWOW64\vpnikeapi.dll
2013-05-18 01:53:18 ----A---- C:\Windows\SYSWOW64\vdsbas.dll
2013-05-18 01:53:18 ----A---- C:\Windows\SYSWOW64\UserAccountControlSettings.dll
2013-05-18 01:53:18 ----A---- C:\Windows\SYSWOW64\runonce.exe
2013-05-18 01:53:18 ----A---- C:\Windows\SYSWOW64\onexui.dll
2013-05-18 01:53:18 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2013-05-18 01:53:18 ----A---- C:\Windows\SYSWOW64\iTVData.dll
2013-05-18 01:53:18 ----A---- C:\Windows\SYSWOW64\dxdiagn.dll
2013-05-18 01:53:18 ----A---- C:\Windows\system32\WMVSDECD.DLL
2013-05-18 01:53:18 ----A---- C:\Windows\system32\vdsbas.dll
2013-05-18 01:53:18 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2013-05-18 01:53:18 ----A---- C:\Windows\system32\mstask.dll
2013-05-18 01:53:18 ----A---- C:\Windows\system32\MdSched.exe
2013-05-18 01:53:18 ----A---- C:\Windows\system32\Mcx2Svc.dll
2013-05-18 01:53:17 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2013-05-18 01:53:17 ----A---- C:\Windows\SYSWOW64\wmpshell.dll
2013-05-18 01:53:17 ----A---- C:\Windows\SYSWOW64\wmdrmdev.dll
2013-05-18 01:53:17 ----A---- C:\Windows\SYSWOW64\unimdmat.dll
2013-05-18 01:53:17 ----A---- C:\Windows\SYSWOW64\shacct.dll
2013-05-18 01:53:17 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2013-05-18 01:53:17 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2013-05-18 01:53:17 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2013-05-18 01:53:17 ----A---- C:\Windows\SYSWOW64\lsmproxy.dll
2013-05-18 01:53:17 ----A---- C:\Windows\SYSWOW64\logagent.exe
2013-05-18 01:53:17 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2013-05-18 01:53:17 ----A---- C:\Windows\SYSWOW64\bitsadmin.exe
2013-05-18 01:53:17 ----A---- C:\Windows\system32\WPDSp.dll
2013-05-18 01:53:17 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2013-05-18 01:53:17 ----A---- C:\Windows\system32\wmdrmnet.dll
2013-05-18 01:53:17 ----A---- C:\Windows\system32\vss_ps.dll
2013-05-18 01:53:17 ----A---- C:\Windows\system32\tabcal.exe
2013-05-18 01:53:17 ----A---- C:\Windows\system32\shacct.dll
2013-05-18 01:53:17 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2013-05-18 01:53:17 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2013-05-18 01:53:17 ----A---- C:\Windows\system32\qcap.dll
2013-05-18 01:53:17 ----A---- C:\Windows\system32\nltest.exe
2013-05-18 01:53:17 ----A---- C:\Windows\system32\msnetobj.dll
2013-05-18 01:53:17 ----A---- C:\Windows\system32\logman.exe
2013-05-18 01:53:17 ----A---- C:\Windows\system32\drivers\rmcast.sys
2013-05-18 01:53:17 ----A---- C:\Windows\system32\cscapi.dll
2013-05-18 01:53:17 ----A---- C:\Windows\system32\bitsadmin.exe
2013-05-18 01:53:16 ----A---- C:\Windows\SYSWOW64\WPDSp.dll
2013-05-18 01:53:16 ----A---- C:\Windows\SYSWOW64\srvcli.dll
2013-05-18 01:53:16 ----A---- C:\Windows\SYSWOW64\sqlcese30.dll
2013-05-18 01:53:16 ----A---- C:\Windows\SYSWOW64\rdpd3d.dll
2013-05-18 01:53:16 ----A---- C:\Windows\SYSWOW64\PortableDeviceSyncProvider.dll
2013-05-18 01:53:16 ----A---- C:\Windows\SYSWOW64\pdh.dll
2013-05-18 01:53:16 ----A---- C:\Windows\SYSWOW64\OpcServices.dll
2013-05-18 01:53:16 ----A---- C:\Windows\SYSWOW64\ncryptui.dll
2013-05-18 01:53:16 ----A---- C:\Windows\SYSWOW64\mprapi.dll
2013-05-18 01:53:16 ----A---- C:\Windows\SYSWOW64\logman.exe
2013-05-18 01:53:16 ----A---- C:\Windows\SYSWOW64\iscsium.dll
2013-05-18 01:53:16 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2013-05-18 01:53:16 ----A---- C:\Windows\system32\spbcd.dll
2013-05-18 01:53:16 ----A---- C:\Windows\system32\secproc_ssp.dll
2013-05-18 01:53:16 ----A---- C:\Windows\system32\qdv.dll
2013-05-18 01:53:16 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2013-05-18 01:53:16 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2013-05-18 01:53:15 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2013-05-18 01:53:15 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-05-18 01:53:15 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2013-05-18 01:53:15 ----A---- C:\Windows\SYSWOW64\wiavideo.dll
2013-05-18 01:53:15 ----A---- C:\Windows\SYSWOW64\utildll.dll
2013-05-18 01:53:15 ----A---- C:\Windows\SYSWOW64\takeown.exe
2013-05-18 01:53:15 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL
2013-05-18 01:53:15 ----A---- C:\Windows\SYSWOW64\PortableDeviceStatus.dll
2013-05-18 01:53:15 ----A---- C:\Windows\SYSWOW64\olethk32.dll
2013-05-18 01:53:15 ----A---- C:\Windows\SYSWOW64\mapistub.dll
2013-05-18 01:53:15 ----A---- C:\Windows\SYSWOW64\mapi32.dll
2013-05-18 01:53:15 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2013-05-18 01:53:15 ----A---- C:\Windows\SYSWOW64\fphc.dll
2013-05-18 01:53:15 ----A---- C:\Windows\SYSWOW64\dot3msm.dll
2013-05-18 01:53:15 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2013-05-18 01:53:15 ----A---- C:\Windows\system32\WMPhoto.dll
2013-05-18 01:53:15 ----A---- C:\Windows\system32\vfwwdm32.dll
2013-05-18 01:53:15 ----A---- C:\Windows\system32\takeown.exe
2013-05-18 01:53:15 ----A---- C:\Windows\system32\PnPUnattend.exe
2013-05-18 01:53:15 ----A---- C:\Windows\system32\fphc.dll
2013-05-18 01:53:15 ----A---- C:\Windows\system32\EhStorAPI.dll
2013-05-18 01:53:15 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2013-05-18 01:53:15 ----A---- C:\Windows\system32\dot3ui.dll
2013-05-18 01:53:15 ----A---- C:\Windows\system32\amstream.dll
2013-05-18 01:53:14 ----A---- C:\Windows\SYSWOW64\wmdrmnet.dll
2013-05-18 01:53:14 ----A---- C:\Windows\SYSWOW64\sppinst.dll
2013-05-18 01:53:14 ----A---- C:\Windows\SYSWOW64\qdv.dll
2013-05-18 01:53:14 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2013-05-18 01:53:14 ----A---- C:\Windows\SYSWOW64\EhStorAPI.dll
2013-05-18 01:53:14 ----A---- C:\Windows\system32\shimgvw.dll
2013-05-18 01:53:14 ----A---- C:\Windows\system32\QCLIPROV.DLL
2013-05-18 01:53:14 ----A---- C:\Windows\system32\nrpsrv.dll
2013-05-18 01:53:14 ----A---- C:\Windows\system32\iasrecst.dll
2013-05-18 01:53:14 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2013-05-18 01:53:14 ----A---- C:\Windows\system32\djoin.exe
2013-05-18 01:53:14 ----A---- C:\Windows\system32\cmstp.exe
2013-05-18 01:53:14 ----A---- C:\Windows\system32\CertPolEng.dll
2013-05-18 01:53:13 ----A---- C:\Windows\SYSWOW64\wsnmp32.dll
2013-05-18 01:53:13 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2013-05-18 01:53:13 ----A---- C:\Windows\SYSWOW64\vfwwdm32.dll
2013-05-18 01:53:13 ----A---- C:\Windows\SYSWOW64\setupcln.dll
2013-05-18 01:53:13 ----A---- C:\Windows\SYSWOW64\QCLIPROV.DLL
2013-05-18 01:53:13 ----A---- C:\Windows\SYSWOW64\pdhui.dll
2013-05-18 01:53:13 ----A---- C:\Windows\SYSWOW64\MuiUnattend.exe
2013-05-18 01:53:13 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2013-05-18 01:53:13 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2013-05-18 01:53:13 ----A---- C:\Windows\SYSWOW64\cmstp.exe
2013-05-18 01:53:13 ----A---- C:\Windows\SYSWOW64\cca.dll
2013-05-18 01:53:13 ----A---- C:\Windows\system32\WavDest.dll
2013-05-18 01:53:13 ----A---- C:\Windows\system32\MultiDigiMon.exe
2013-05-18 01:53:13 ----A---- C:\Windows\system32\KMSVC.DLL
2013-05-18 01:53:13 ----A---- C:\Windows\system32\fdProxy.dll
2013-05-18 01:53:13 ----A---- C:\Windows\system32\drivers\pacer.sys
2013-05-18 01:53:12 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2013-05-18 01:53:12 ----A---- C:\Windows\SYSWOW64\relog.exe
2013-05-18 01:53:12 ----A---- C:\Windows\SYSWOW64\netiougc.exe
2013-05-18 01:53:12 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2013-05-18 01:53:12 ----A---- C:\Windows\SYSWOW64\iasrecst.dll
2013-05-18 01:53:12 ----A---- C:\Windows\SYSWOW64\AzSqlExt.dll
2013-05-18 01:53:12 ----A---- C:\Windows\system32\sscore.dll
2013-05-18 01:53:12 ----A---- C:\Windows\system32\relog.exe
2013-05-18 01:53:12 ----A---- C:\Windows\system32\mydocs.dll
2013-05-18 01:53:12 ----A---- C:\Windows\system32\mobsync.exe
2013-05-18 01:53:12 ----A---- C:\Windows\system32\iscsicli.exe
2013-05-18 01:53:12 ----A---- C:\Windows\system32\diskpart.exe
2013-05-18 01:53:12 ----A---- C:\Windows\system32\BWUnpairElevated.dll
2013-05-18 01:53:11 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2013-05-18 01:53:11 ----A---- C:\Windows\SYSWOW64\wmpps.dll
2013-05-18 01:53:11 ----A---- C:\Windows\SYSWOW64\wkscli.dll
2013-05-18 01:53:11 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2013-05-18 01:53:11 ----A---- C:\Windows\SYSWOW64\syssetup.dll
2013-05-18 01:53:11 ----A---- C:\Windows\SYSWOW64\spbcd.dll
2013-05-18 01:53:11 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2013-05-18 01:53:11 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2013-05-18 01:53:11 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2013-05-18 01:53:11 ----A---- C:\Windows\SYSWOW64\resutils.dll
2013-05-18 01:53:11 ----A---- C:\Windows\SYSWOW64\rastapi.dll
2013-05-18 01:53:11 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2013-05-18 01:53:11 ----A---- C:\Windows\SYSWOW64\mydocs.dll
2013-05-18 01:53:11 ----A---- C:\Windows\SYSWOW64\itircl.dll
2013-05-18 01:53:11 ----A---- C:\Windows\SYSWOW64\iscsicli.exe
2013-05-18 01:53:11 ----A---- C:\Windows\SYSWOW64\diskpart.exe
2013-05-18 01:53:11 ----A---- C:\Windows\SYSWOW64\CertPolEng.dll
2013-05-18 01:53:11 ----A---- C:\Windows\SYSWOW64\amstream.dll
2013-05-18 01:53:11 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2013-05-18 01:53:11 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2013-05-18 01:53:11 ----A---- C:\Windows\system32\msdmo.dll
2013-05-18 01:53:11 ----A---- C:\Windows\system32\mciqtz32.dll
2013-05-18 01:53:11 ----A---- C:\Windows\system32\itircl.dll
2013-05-18 01:53:11 ----A---- C:\Windows\system32\choice.exe
2013-05-18 01:53:11 ----A---- C:\Windows\system32\FXSTIFF.dll
2013-05-18 01:53:11 ----A---- C:\Windows\system32\findstr.exe
2013-05-18 01:53:11 ----A---- C:\Windows\system32\eappgnui.dll
2013-05-18 01:53:11 ----A---- C:\Windows\system32\dot3msm.dll
2013-05-18 01:53:10 ----A---- C:\Windows\SYSWOW64\tlscsp.dll
2013-05-18 01:53:10 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2013-05-18 01:53:10 ----A---- C:\Windows\SYSWOW64\ReAgentc.exe
2013-05-18 01:53:10 ----A---- C:\Windows\SYSWOW64\netutils.dll
2013-05-18 01:53:10 ----A---- C:\Windows\SYSWOW64\muifontsetup.dll
2013-05-18 01:53:10 ----A---- C:\Windows\SYSWOW64\mobsync.exe
2013-05-18 01:53:10 ----A---- C:\Windows\SYSWOW64\mciqtz32.dll
2013-05-18 01:53:10 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2013-05-18 01:53:10 ----A---- C:\Windows\SYSWOW64\findstr.exe
2013-05-18 01:53:10 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2013-05-18 01:53:10 ----A---- C:\Windows\SYSWOW64\cabinet.dll
2013-05-18 01:53:10 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2013-05-18 01:53:10 ----A---- C:\Windows\system32\sppc.dll
2013-05-18 01:53:10 ----A---- C:\Windows\system32\schedcli.dll
2013-05-18 01:53:10 ----A---- C:\Windows\system32\repair-bde.exe
2013-05-18 01:53:10 ----A---- C:\Windows\system32\onexui.dll
2013-05-18 01:53:10 ----A---- C:\Windows\system32\manage-bde.exe
2013-05-18 01:53:10 ----A---- C:\Windows\system32\luainstall.dll
2013-05-18 01:53:10 ----A---- C:\Windows\system32\inetmib1.dll
2013-05-18 01:53:10 ----A---- C:\Windows\system32\drivers\tunnel.sys
2013-05-18 01:53:10 ----A---- C:\Windows\system32\drivers\dfsc.sys
2013-05-18 01:53:09 ----A---- C:\Windows\SYSWOW64\unlodctr.exe
2013-05-18 01:53:09 ----A---- C:\Windows\SYSWOW64\sppc.dll
2013-05-18 01:53:09 ----A---- C:\Windows\SYSWOW64\spopk.dll
2013-05-18 01:53:09 ----A---- C:\Windows\SYSWOW64\shimgvw.dll
2013-05-18 01:53:09 ----A---- C:\Windows\SYSWOW64\rdprefdrvapi.dll
2013-05-18 01:53:09 ----A---- C:\Windows\SYSWOW64\odbcconf.dll
2013-05-18 01:53:09 ----A---- C:\Windows\SYSWOW64\msdmo.dll
2013-05-18 01:53:09 ----A---- C:\Windows\SYSWOW64\luainstall.dll
2013-05-18 01:53:09 ----A---- C:\Windows\SYSWOW64\inetmib1.dll
2013-05-18 01:53:09 ----A---- C:\Windows\system32\spopk.dll
2013-05-18 01:53:09 ----A---- C:\Windows\system32\RDPENCDD.dll
2013-05-18 01:53:09 ----A---- C:\Windows\system32\odbcconf.dll
2013-05-18 01:53:09 ----A---- C:\Windows\system32\FXSMON.dll
2013-05-18 01:53:09 ----A---- C:\Windows\system32\fixmapi.exe
2013-05-18 01:53:09 ----A---- C:\Windows\system32\elsTrans.dll
2013-05-18 01:53:08 ----A---- C:\Windows\SYSWOW64\wups.dll
2013-05-18 01:53:08 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2013-05-18 01:53:08 ----A---- C:\Windows\SYSWOW64\perfts.dll
2013-05-18 01:53:08 ----A---- C:\Windows\system32\wshbth.dll
2013-05-18 01:53:08 ----A---- C:\Windows\system32\UIRibbonRes.dll
2013-05-18 01:53:08 ----A---- C:\Windows\system32\TRAPI.dll
2013-05-18 01:53:08 ----A---- C:\Windows\system32\drivers\tdi.sys
2013-05-18 01:53:07 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2013-05-18 01:53:07 ----A---- C:\Windows\SYSWOW64\TRAPI.dll
2013-05-18 01:53:07 ----A---- C:\Windows\SYSWOW64\schedcli.dll
2013-05-18 01:53:07 ----A---- C:\Windows\SYSWOW64\napdsnap.dll
2013-05-18 01:53:07 ----A---- C:\Windows\SYSWOW64\imm32.dll
2013-05-18 01:53:07 ----A---- C:\Windows\SYSWOW64\elsTrans.dll
2013-05-18 01:53:07 ----A---- C:\Windows\SYSWOW64\dsauth.dll
2013-05-18 01:53:07 ----A---- C:\Windows\SYSWOW64\bitsperf.dll
2013-05-18 01:53:07 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2013-05-18 01:53:07 ----A---- C:\Windows\system32\napdsnap.dll
2013-05-18 01:53:07 ----A---- C:\Windows\system32\LogonUI.exe
2013-05-18 01:53:07 ----A---- C:\Windows\system32\FXSUNATD.exe
2013-05-18 01:53:07 ----A---- C:\Windows\system32\dsauth.dll
2013-05-18 01:53:07 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2013-05-18 01:53:07 ----A---- C:\Windows\system32\cscdll.dll
2013-05-18 01:53:07 ----A---- C:\Windows\system32\bitsperf.dll
2013-05-18 01:53:06 ----A---- C:\Windows\SYSWOW64\wsdchngr.dll
2013-05-18 01:53:06 ----A---- C:\Windows\SYSWOW64\sscore.dll
2013-05-18 01:53:06 ----A---- C:\Windows\SYSWOW64\shgina.dll
2013-05-18 01:53:06 ----A---- C:\Windows\SYSWOW64\riched32.dll
2013-05-18 01:53:06 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2013-05-18 01:53:06 ----A---- C:\Windows\system32\wsdchngr.dll
2013-05-18 01:53:06 ----A---- C:\Windows\system32\shgina.dll
2013-05-18 01:53:06 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2013-05-18 01:53:05 ----A---- C:\Windows\SYSWOW64\wshirda.dll
2013-05-18 01:53:05 ----A---- C:\Windows\system32\wshirda.dll
2013-05-18 01:53:05 ----A---- C:\Windows\system32\rdpcfgex.dll
2013-05-18 01:53:05 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2013-05-18 01:53:05 ----A---- C:\Windows\system32\drivers\hidusb.sys
2013-05-18 01:53:05 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2013-05-18 01:53:05 ----A---- C:\Windows\system32\drivers\appid.sys
2013-05-18 01:53:04 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2013-05-18 01:53:04 ----A---- C:\Windows\SYSWOW64\C_ISCII.DLL
2013-05-18 01:53:04 ----A---- C:\Windows\SYSWOW64\browseui.dll
2013-05-18 01:53:04 ----A---- C:\Windows\system32\spwmp.dll
2013-05-18 01:53:04 ----A---- C:\Windows\system32\riched32.dll
2013-05-18 01:53:04 ----A---- C:\Windows\system32\dxmasf.dll
2013-05-18 01:53:04 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2013-05-18 01:53:04 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2013-05-18 01:53:04 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2013-05-18 01:53:04 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2013-05-18 01:53:04 ----A---- C:\Windows\system32\drivers\cdrom.sys
2013-05-18 01:53:04 ----A---- C:\Windows\system32\C_ISCII.DLL
2013-05-18 01:53:04 ----A---- C:\Windows\system32\browseui.dll
2013-05-18 01:53:03 ----AH---- C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
2013-05-18 01:53:03 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\SYSWOW64\shunimpl.dll
2013-05-18 01:53:03 ----A---- C:\Windows\SYSWOW64\KBDUS.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\SYSWOW64\KBDUGHR1.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\SYSWOW64\KBDTURME.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\SYSWOW64\KBDTUQ.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\SYSWOW64\KBDTUF.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\SYSWOW64\KBDTAJIK.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\SYSWOW64\KBDSG.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\SYSWOW64\KBDMON.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\SYSWOW64\KBDMAORI.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\SYSWOW64\KBDLT1.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\SYSWOW64\kbdlk41a.dll
2013-05-18 01:53:03 ----A---- C:\Windows\SYSWOW64\KBDINTEL.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\SYSWOW64\KBDINTAM.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\SYSWOW64\KBDINHIN.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\SYSWOW64\KBDGR1.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\SYSWOW64\KBDGKL.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\SYSWOW64\KBDGEO.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\SYSWOW64\KBDCZ1.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\SYSWOW64\KBDBLR.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2013-05-18 01:53:03 ----A---- C:\Windows\system32\wmploc.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\system32\shunimpl.dll
2013-05-18 01:53:03 ----A---- C:\Windows\system32\KBDUS.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\system32\KBDTUQ.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\system32\KBDTUF.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\system32\KBDSG.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\system32\KBDSF.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\system32\KBDPO.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\system32\KBDNEPR.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\system32\KBDMON.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\system32\KBDLT1.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\system32\kbdlk41a.dll
2013-05-18 01:53:03 ----A---- C:\Windows\system32\KBDINTAM.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\system32\KBDINBEN.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\system32\KBDGR1.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\system32\KBDGKL.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\system32\KBDGEO.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\system32\KBDCZ1.DLL
2013-05-18 01:53:03 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2013-05-18 01:53:03 ----A---- C:\Windows\system32\drivers\scfilter.sys
2013-05-18 01:53:02 ----A---- C:\Windows\SYSWOW64\spwizres.dll
2013-05-18 01:53:02 ----A---- C:\Windows\SYSWOW64\pifmgr.dll
2013-05-18 01:53:02 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2013-05-18 01:53:02 ----A---- C:\Windows\SYSWOW64\KBDSF.DLL
2013-05-18 01:53:02 ----A---- C:\Windows\SYSWOW64\KBDPO.DLL
2013-05-18 01:53:02 ----A---- C:\Windows\SYSWOW64\KBDNEPR.DLL
2013-05-18 01:53:02 ----A---- C:\Windows\SYSWOW64\KBDINORI.DLL
2013-05-18 01:53:02 ----A---- C:\Windows\SYSWOW64\KBDINMAR.DLL
2013-05-18 01:53:02 ----A---- C:\Windows\SYSWOW64\KBDINKAN.DLL
2013-05-18 01:53:02 ----A---- C:\Windows\SYSWOW64\KBDINBEN.DLL
2013-05-18 01:53:02 ----A---- C:\Windows\SYSWOW64\KBDBULG.DLL
2013-05-18 01:53:02 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2013-05-18 01:53:02 ----A---- C:\Windows\system32\spwizres.dll
2013-05-18 01:53:02 ----A---- C:\Windows\system32\pifmgr.dll
2013-05-18 01:53:02 ----A---- C:\Windows\system32\nlsbres.dll
2013-05-18 01:53:02 ----A---- C:\Windows\system32\KBDTURME.DLL
2013-05-18 01:53:02 ----A---- C:\Windows\system32\KBDMAORI.DLL
2013-05-18 01:53:02 ----A---- C:\Windows\system32\KBDINTEL.DLL
2013-05-18 01:53:02 ----A---- C:\Windows\system32\KBDINORI.DLL
2013-05-18 01:53:02 ----A---- C:\Windows\system32\KBDINMAR.DLL
2013-05-18 01:53:02 ----A---- C:\Windows\system32\KBDINKAN.DLL
2013-05-18 01:53:02 ----A---- C:\Windows\system32\KBDINHIN.DLL
2013-05-18 01:53:02 ----A---- C:\Windows\system32\KBDBULG.DLL
2013-05-18 01:53:02 ----A---- C:\Windows\system32\KBDBLR.DLL
2013-05-18 01:53:02 ----A---- C:\Windows\system32\KBDBASH.DLL
2013-05-18 01:53:02 ----A---- C:\Windows\system32\BlbEvents.dll
2013-05-18 01:52:54 ----A---- C:\Windows\SYSWOW64\wdscore.dll
2013-05-18 01:52:54 ----A---- C:\Windows\system32\dpx.dll
2013-05-18 01:52:50 ----A---- C:\Windows\SYSWOW64\sqmapi.dll
2013-05-18 01:52:46 ----A---- C:\Windows\SYSWOW64\wbemcomn.dll
2013-05-18 01:51:49 ----A---- C:\Windows\system32\wbemcomn.dll
2013-05-18 01:51:45 ----A---- C:\Windows\system32\sqmapi.dll

======List of files/folders modified in the last 1 months======

2013-06-14 21:58:40 ----D---- C:\Windows\Temp
2013-06-14 21:58:39 ----RD---- C:\Program Files
2013-06-14 21:58:34 ----D---- C:\Users\Adam\AppData\Roaming\Skype
2013-06-14 21:26:50 ----D---- C:\Windows\system32\config
2013-06-14 21:25:29 ----A---- C:\Windows\SYSWOW64\log.txt
2013-06-14 21:23:59 ----D---- C:\Windows
2013-06-14 12:17:06 ----SHD---- C:\Windows\Installer
2013-06-14 12:17:01 ----D---- C:\ProgramData\Microsoft Help
2013-06-14 12:16:48 ----SHD---- C:\System Volume Information
2013-06-14 11:13:08 ----SD---- C:\Users\Adam\AppData\Roaming\Microsoft
2013-06-14 09:04:14 ----A---- C:\Windows\win.ini
2013-06-13 22:52:24 ----D---- C:\Windows\system32\catroot
2013-06-13 22:52:19 ----D---- C:\Windows\system32\drivers
2013-06-13 22:52:16 ----D---- C:\Program Files\Intel
2013-06-13 22:51:15 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-06-13 22:05:27 ----HD---- C:\ProgramData
2013-06-13 21:21:03 ----D---- C:\Windows\Prefetch
2013-06-13 19:59:58 ----RSD---- C:\Windows\assembly
2013-06-13 19:59:58 ----D---- C:\Windows\Microsoft.NET
2013-06-13 17:45:05 ----D---- C:\Windows\system32\Tasks
2013-06-13 17:45:04 ----D---- C:\Windows\Tasks
2013-06-13 17:30:02 ----D---- C:\Windows\winsxs
2013-06-13 17:28:54 ----RSD---- C:\Windows\Fonts
2013-06-13 17:28:52 ----D---- C:\Windows\ShellNew
2013-06-13 17:28:52 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-06-13 17:28:52 ----D---- C:\Program Files\Common Files
2013-06-13 17:28:26 ----D---- C:\Windows\System32
2013-06-13 17:28:16 ----D---- C:\Program Files (x86)\MSBuild
2013-06-13 17:28:02 ----SD---- C:\ProgramData\Microsoft
2013-06-13 17:28:02 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-06-13 17:26:40 ----RD---- C:\Program Files (x86)
2013-06-13 17:26:05 ----D---- C:\Program Files\Common Files\System
2013-06-13 17:24:49 ----D---- C:\Windows\system32\catroot2
2013-06-13 14:16:40 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2013-06-13 14:16:40 ----D---- C:\Windows\inf
2013-06-13 13:59:36 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-06-13 03:46:15 ----D---- C:\Windows\rescache
2013-06-13 03:18:24 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-06-13 03:18:24 ----D---- C:\Windows\SysWOW64
2013-06-13 03:18:24 ----D---- C:\Windows\system32\cs-CZ
2013-06-13 03:01:35 ----A---- C:\Windows\system32\MRT.exe
2013-06-12 19:15:12 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-06-12 17:38:03 ----D---- C:\ProgramData\Skype
2013-06-11 11:42:47 ----D---- C:\Windows\system32\FxsTmp
2013-06-09 20:40:32 ----D---- C:\Program Files (x86)\The KMPlayer
2013-06-09 19:52:55 ----D---- C:\Windows\system32\DriverStore
2013-06-05 21:02:17 ----D---- C:\Windows\twain_32
2013-05-24 19:27:45 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-05-22 19:00:10 ----D---- C:\Windows\Downloaded Program Files
2013-05-19 03:07:15 ----D---- C:\Windows\AppPatch
2013-05-19 03:07:14 ----D---- C:\Windows\SYSWOW64\migration
2013-05-19 03:07:14 ----D---- C:\Windows\system32\migration
2013-05-18 09:57:19 ----D---- C:\Program Files (x86)\Windows Sidebar
2013-05-18 09:57:19 ----D---- C:\Program Files (x86)\Windows Portable Devices
2013-05-18 09:57:19 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2013-05-18 09:57:19 ----D---- C:\Program Files (x86)\Windows Media Player
2013-05-18 09:57:19 ----D---- C:\Program Files (x86)\Windows Mail
2013-05-18 09:57:19 ----D---- C:\Program Files (x86)\Internet Explorer
2013-05-18 09:57:18 ----D---- C:\Program Files\Windows Sidebar
2013-05-18 09:57:18 ----D---- C:\Program Files\Windows Portable Devices
2013-05-18 09:57:18 ----D---- C:\Program Files\Windows Photo Viewer
2013-05-18 09:57:18 ----D---- C:\Program Files\Windows Media Player
2013-05-18 09:57:18 ----D---- C:\Program Files\Windows Mail
2013-05-18 09:57:18 ----D---- C:\Program Files\Windows Journal
2013-05-18 09:57:18 ----D---- C:\Program Files\Internet Explorer
2013-05-18 09:57:18 ----D---- C:\Program Files\DVD Maker
2013-05-18 09:57:14 ----D---- C:\Windows\servicing
2013-05-18 09:57:14 ----D---- C:\Windows\ehome
2013-05-18 09:57:14 ----D---- C:\Program Files\Windows Defender
2013-05-18 09:57:11 ----D---- C:\Windows\SYSWOW64\wbem
2013-05-18 09:57:11 ----D---- C:\Windows\SYSWOW64\sppui
2013-05-18 09:57:11 ----D---- C:\Windows\SYSWOW64\Setup
2013-05-18 09:57:11 ----D---- C:\Windows\SYSWOW64\oobe
2013-05-18 09:57:11 ----D---- C:\Windows\SYSWOW64\migwiz
2013-05-18 09:57:11 ----D---- C:\Windows\SYSWOW64\manifeststore
2013-05-18 09:57:11 ----D---- C:\Windows\SYSWOW64\es-ES
2013-05-18 09:57:11 ----D---- C:\Windows\SYSWOW64\Dism
2013-05-18 09:57:11 ----D---- C:\Windows\SYSWOW64\da-DK
2013-05-18 09:57:11 ----D---- C:\Windows\SYSWOW64\cs
2013-05-18 09:57:11 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2013-05-18 09:56:58 ----D---- C:\Windows\system32\Setup
2013-05-18 09:56:58 ----D---- C:\Windows\system32\oobe
2013-05-18 09:56:58 ----D---- C:\Windows\system32\en-US
2013-05-18 09:56:58 ----D---- C:\Windows\system32\da-DK
2013-05-18 09:56:58 ----D---- C:\Windows\system32\cs
2013-05-18 09:56:58 ----D---- C:\Windows\system32\AdvancedInstallers
2013-05-18 09:56:56 ----D---- C:\Windows\system32\wbem
2013-05-18 09:56:56 ----D---- C:\Windows\system32\sppui
2013-05-18 09:56:56 ----D---- C:\Windows\system32\manifeststore
2013-05-18 09:56:56 ----D---- C:\Windows\system32\es-ES
2013-05-18 09:56:56 ----D---- C:\Windows\system32\drivers\cs-CZ
2013-05-18 09:56:55 ----D---- C:\Windows\system32\migwiz
2013-05-18 09:56:55 ----D---- C:\Windows\system32\Dism
2013-05-18 09:56:31 ----D---- C:\Windows\system32\Boot
2013-05-18 09:28:03 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2013-05-18 09:28:03 ----A---- C:\Windows\system32\msclmd.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-01-12 439320]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2011-02-21 25960]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 TurboB;Turbo Boost UI Monitor driver; C:\Windows\system32\DRIVERS\TurboB.sys [2010-11-29 16120]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-05-11 2229608]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2011-09-16 30368]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT64.sys [2011-02-14 1581184]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2012-07-27 307568]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-01-21 12271136]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2010-11-08 76912]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2010-09-30 80384]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2010-09-30 180736]
R3 RSPCIESTOR;Realtek PCIE CardReader Driver; C:\Windows\system32\DRIVERS\RtsPStor.sys [2011-09-02 339048]
R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2011-09-16 36000]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2011-09-16 330912]
S3 btath_avdt;Atheros Bluetooth AVDT Service; C:\Windows\system32\drivers\btath_avdt.sys [2011-09-16 110240]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2011-09-16 167584]
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2011-09-16 68256]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2011-09-16 280992]
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2011-09-16 517280]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 MHIKEY10;MHIKEY10; C:\Windows\System32\Drivers\MHIKEY10x64.sys [2010-09-15 60288]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\Windows\system32\DRIVERS\ss_bus.sys [2009-09-21 127488]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\Windows\system32\DRIVERS\ss_mdfl.sys [2009-09-21 18944]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\Windows\system32\DRIVERS\ss_mdm.sys [2009-09-21 161280]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\drivers\usb8023x.sys [2013-02-12 19968]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2011-09-16 105120]
R2 CxAudMsg;@C:\Windows\system32\CxAudMsg64.exe,-100; C:\Windows\system32\CxAudMsg64.exe [2010-12-17 198784]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2013-04-16 352336]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [2011-02-18 799848]
R2 EPSON_EB_RPCV4_01;EPSON V5 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE [2007-12-17 163840]
R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE [2007-01-11 126464]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-01-12 13336]
R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2011-08-31 2425960]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-02-02 326168]
R2 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [2011-02-18 993896]
R2 PanService;PandoraService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [2012-09-28 625304]
R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2013-03-22 93072]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-02 2656280]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-02-29 158856]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12 256904]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 51740536]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-05-22 117144]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0; C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2010-11-29 149504]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-04-15 1255736]

-----------------EOF-----------------



Předem děkuji za pomoc.
S pozdravem.
Adam

Zdravim

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Prohledat
• Probehne skenovani a pak se objevi log, pripadne bude ulozen na systemovem disku jako AdwCleaner[R?].txt, ten sem vlozte

Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) http://forum.viry.cz/viewtopic.php?f=29&t=115222

• Provedte aktualizaci
• Provedte uplny sken - nic nemazte
• MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni

To je rychlost Ahoj


# AdwCleaner v2.303 - Log vytvooen 14/06/2013 v 22:45:27
# Aktualizováno 08/06/2013 Xplode
# Operaení systém : Windows 7 Home Premium Service Pack 1 (64 bits)
# Uživatel : Adam - ACER
# Spuštin systém : Normální
# Spuštino z : C:\Users\Adam\Desktop\adwcleaner.exe
# Volba [Prohledat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Nalezeno : C:\Program Files (x86)\Ask.com
Složka Nalezeno : C:\Users\Adam\AppData\Local\Temp\AskSearch
Složka Nalezeno : C:\Users\Adam\AppData\LocalLow\AskToolbar
Složka Nalezeno : C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\co1ukgod.default\extensions\toolbar@ask.com
Složka Nalezeno : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

***** [Registry] *****

Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]
Hodnota Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Klíe Nalezeno : HKCU\Software\APN
Klíe Nalezeno : HKCU\Software\APN PIP
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\AskToolbar
Klíe Nalezeno : HKCU\Software\Ask.com
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Klíe Nalezeno : HKCU\Software\Softonic
Klíe Nalezeno : HKLM\Software\APN
Klíe Nalezeno : HKLM\Software\AskToolbar
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Klíe Nalezeno : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Klíe Nalezeno : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Klíe Nalezeno : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Klíe Nalezeno : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Klíe Nalezeno : HKLM\Software\PIP
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v9.0.8112.16476

[OK] Registry jsou eisté.

-\\ Mozilla Firefox v21.0 (cs)

Soubor : C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\co1ukgod.default\prefs.js

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [4120 octets] - [14/06/2013 22:44:31]
AdwCleaner[R2].txt - [4061 octets] - [14/06/2013 22:45:27]

########## EOF - C:\AdwCleaner[R2].txt - [4121 octets] ##########

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verze: v2013.06.14.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Adam :: ACER [administrátor]

14.6.2013 22:49:59
MBAM-log-2013-06-14 (23-49-04).txt

Typ: Kompletní kontrola (C:\|D:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 482896
Uplynulý čas: 56 minut, 21 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 6
C:\disk C\Acer\Autodesk.AutoCAD.2009.zip (RiskWare.Tool.HCK) -> Nebyla provedena žádná instrukce.
C:\disk C\Acer\FOTO\Photoshop Lightroom 3.2\Adobe Products keygen\keygen.exe (Trojan.Agent.CK) -> Nebyla provedena žádná instrukce.
C:\Users\Adam\Downloads\Inventor 2011 CZ\Inventor 2011 crack\xf-a2011-32bits.exe (RiskWare.Tool.CK) -> Nebyla provedena žádná instrukce.
C:\Users\Adam\Downloads\Inventor 2011 CZ\Inventor 2011 crack\xf-a2011-64bits.exe (RiskWare.Tool.CK) -> Nebyla provedena žádná instrukce.
C:\Windows\AutoKMS.exe (Riskware.Keygen) -> Nebyla provedena žádná instrukce.
C:\Windows\inf\MSASGui.exe (PUP.BitCoinMiner) -> Nebyla provedena žádná instrukce.

(konec)

Dovolim si otazku, ma cenu lecit PC, ktere si uzivatel s prominutim zaliska hned vlastni blbosti zpatky diky crackum\keygenum a podobnym "dobrotami" Nehlede na porusovani autorskeho zakona

Ano mám MS office a Zoner photo studio 13 neoficiální cestou. Pokud je to v rozporu s tvou pomocí, pochopím to a můžeme toto vlákno uzavřít.

Rekl bych ze i Inventor a AutoCAD

MSOffice cele do pryc (toto tu netolerujeme)

Nalezy MBAMu smazte, objevi se log, ten rad uvidim

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verze: v2013.06.14.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Adam :: ACER [administrátor]

15.6.2013 10:59:39
mbam-log-2013-06-15 (10-59-39).txt

Typ: Kompletní kontrola (C:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 428260
Uplynulý čas: 44 minut, 49 sekund

Nalezené procesy v paměti: 1
C:\Windows\inf\MSASGui.exe (PUP.BitCoinMiner) -> 2948 -> Bude smazán při restartu.

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 4
C:\Windows\inf\MSASGui.exe (PUP.BitCoinMiner) -> Bude smazán při restartu.
C:\$Recycle.Bin\S-1-5-21-3079031849-3765377828-4206825777-1000\$ROLOQBJ\Inventor 2011 crack\xf-a2011-32bits.exe (RiskWare.Tool.CK) -> Přesun do karantény a smazání se zdařilo.
C:\$Recycle.Bin\S-1-5-21-3079031849-3765377828-4206825777-1000\$ROLOQBJ\Inventor 2011 crack\xf-a2011-64bits.exe (RiskWare.Tool.CK) -> Přesun do karantény a smazání se zdařilo.
C:\Windows\AutoKMS.exe (Riskware.Keygen) -> Přesun do karantény a smazání se zdařilo.

(konec)

Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com

• Pokud ho havet blokuje, pouzijte jeden z nasledujicich - i ty prejmenovane

  Rkill EXE:
  http://download.bleepingcomputer.com/grinler/rkill.exe
  
  Rkill iExplore.exe:
  http://download.bleepingcomputer.com/gr ... xplore.exe
  
  Rkill uSeRiNiT.exe:
  http://download.bleepingcomputer.com/gr ... eRiNiT.exe
  
  Rkill WiNlOgOn.exe:
  http://download.bleepingcomputer.com/gr ... NlOgOn.exe

• Ulozte nejlepena plochu a ukoncete vsechny aplikace (jinak to udela RKill za Vas)
• Spustte tradicne dvojklikem - program probehne do par sekund a ukonci i svou cinnost
• RKill ukonci vsechny ne-systemove procesy - tedy i procesy, pod kterymi bezi havet
• Na plose vznikne log Rkill.txt ten mi sem vlozte
• Ted nerestartujte PC - prisli byste o ucinek RKillu

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

• Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
• Pokud mate Win XP spustte pod uctem Spravce\Administratora
• Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
• Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
• Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
• Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
• Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
• Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
• Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

Rkill 2.5.3 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 06/15/2013 12:13:46 PM in x64 mode.
Windows Version: Windows 7 Home Premium Service Pack 1

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE (PID: 1776) [AU-HEUR]
* C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE (PID: 1800) [AU-HEUR]
* C:\Windows\System32\spool\drivers\x64\3\E_IATIFDE.EXE (PID: 3040) [WD-HEUR]

3 proccesses terminated!

Checking Registry for malware related settings:

* Explorer Policy Removed: NoActiveDesktopChanges [HKLM]

Backup Registry file created at:
C:\Users\Adam\Desktop\rkill\rkill-06-15-2013-12-13-52.reg

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* No issues found.

Checking Windows Service Integrity:

* No issues found.

Searching for Missing Digital Signatures:

* No issues found.

Checking HOSTS File:

* No issues found.

Program finished at: 06/15/2013 12:15:01 PM
Execution time: 0 hours(s), 1 minute(s), and 15 seconds(s)

Pro vyosek.
Prosím tě Combofix jsem spustil a stále psal, že chybí soubor ("NIKGRK" nevím přesně, jak se jmenoval) asi 50x jsem to musel odkliknout. Pak to napsalo v žádném případě nerestartujte pc sám.
Ve zbrklosti jsem modré okno zavřel. Teď čekám nic se neděje.

Ted uz tezko vypatrame co se CF nelibilo

Provedte restart PC

Pokud vyskoci hlaska "Pokus pouzit neplatnou operaci na klic registru, ktery je oznacen pro odstraneni", tak jen restartujte PC - registr se da do kupy - jedna se o vnitrni chybu, kterou zpusobuje CF a autor ji zatim neumi bohuzel opravit

Muze se stat, ze nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

Restarotoval jsem a naběhly tyto okna. Restartovat tedy znovu?