bim

O&O Defrag 16 Professional Edition http://www.comss.info/page.php?al=OO_Defrag_16_Professional_Edition_free

Хората свършиха в тази държава, а вие още ревете за кучетата.

Спрях да внасям осигуровки когато "личната" ми зъболекарка измърмори "ми то за този месец нямам повече часове към касата" и прибра едни пари - тя вече не ми е зъболекар и малко по-нататък отидох при "личния" ми лекар за едно медицинско - "ми то тази услуга е платена" - ми и аз нямам нужда от теб.....нито пък ще плащам заради циганите и т. н.

Имам един Алкател, който изкара пълна програма в пералнята. Разглобих го доколкото успях, издухах го няколко пъти със сешоар, оставих го няколко дена разглобен, като периодично го продухвах и после го сглобих. Работи си вече три месеца без проблем.

Здравейте, папката 9ссс.... е вече 650МВ и свободното място на диска нарастна на 12Гб, папката на Уйндоус все си е около 17Гб - определено имаме напредък.

Здравейте, Изпълних скрипта, но винаги когато достигаше до третия ред OTL ставаше non risponding. Това е лога: All processes killed ========== OTL ========== 64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{AEB6717E-7E19-11d0-97EE-00C04FD91972} not found. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AEB6717E-7E19-11d0-97EE-00C04FD91972}\ not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{AEB6717E-7E19-11d0-97EE-00C04FD91972} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AEB6717E-7E19-11d0-97EE-00C04FD91972}\ not found. Folder move failed. C:\9ccc7d7c9d617c98d249790866\4ecf2ed1865f97a6a421b7f55f64a9\9e92181bd0353125c72e8c9417995f\x86_netfx35linq-system...s.accountmanagement_31bf3856ad364e35_6.1.7601.17514_none_80f592f5ee0b1bcc scheduled to be moved on reboot. Folder move failed. C:\9ccc7d7c9d617c98d249790866\4ecf2ed1865f97a6a421b7f55f64a9\9e92181bd0353125c72e8c9417995f\x86_netfx35linq-system...ent.instrumentation_31bf3856ad364e35_6.1.7601.17514_none_22886c1bf8b40f56 scheduled to be moved on reboot. Folder move failed. C:\9ccc7d7c9d617c98d249790866\4ecf2ed1865f97a6a421b7f55f64a9\9e92181bd0353125c72e8c9417995f\x86_netfx35linq-system...del.dataannotations_31bf3856ad364e35_6.1.7601.17514_none_14c03c6a5757b547 scheduled to be moved on reboot. Folder move failed. C:\9ccc7d7c9d617c98d249790866\4ecf2ed1865f97a6a421b7f55f64a9\9e92181bd0353125c72e8c9417995f\x86_microsoft.grouppolicy.targeting.interop_31bf3856ad364e35_6.1.7601.17514_none_77967f177364f6af scheduled to be moved on reboot. Folder move failed. C:\9ccc7d7c9d617c98d249790866\4ecf2ed1865f97a6a421b7f55f64a9\9e92181bd0353125c72e8c9417995f\x86_microsoft.grouppolicy.management.interop_31bf3856ad364e35_6.1.7601.17514_none_56efa7946e0131e3 scheduled to be moved on reboot. Folder move failed. C:\9ccc7d7c9d617c98d249790866\4ecf2ed1865f97a6a421b7f55f64a9\9e92181bd0353125c72e8c9417995f\x86_microsoft.grouppoli..t.interop.resources_31bf3856ad364e35_6.1.7601.17514_zh-tw_e9d1253a9112da7a scheduled to be moved on reboot. Folder move failed. C:\9ccc7d7c9d617c98d249790866\4ecf2ed1865f97a6a421b7f55f64a9\9e92181bd0353125c72e8c9417995f\x86_microsoft.grouppoli..t.interop.resources_31bf3856ad364e35_6.1.7601.17514_zh-cn_e5d4e7e493a1fe0a scheduled to be moved on reboot. Folder move failed. C:\9ccc7d7c9d617c98d249790866\4ecf2ed1865f97a6a421b7f55f64a9\9e92181bd0353125c72e8c9417995f\x86_microsoft.grouppoli..t.interop.resources_31bf3856ad364e35_6.1.7601.17514_ru-ru_cf6f952afd851f9f scheduled to be moved on reboot. Folder move failed. C:\9ccc7d7c9d617c98d249790866\4ecf2ed1865f97a6a421b7f55f64a9\9e92181bd0353125c72e8c9417995f\x86_microsoft.grouppoli..t.interop.resources_31bf3856ad364e35_6.1.7601.17514_pt-br_87eab3fb19342197 scheduled to be moved on reboot. Folder move failed. C:\9ccc7d7c9d617c98d249790866\4ecf2ed1865f97a6a421b7f55f64a9\9e92181bd0353125c72e8c9417995f\x86_microsoft.grouppoli..t.interop.resources_31bf3856ad364e35_6.1.7601.17514_nl-nl_3f5a6ed535881fff scheduled to be moved on reboot. Folder move failed. C:\9ccc7d7c9d617c98d249790866\4ecf2ed1865f97a6a421b7f55f64a9\9e92181bd0353125c72e8c9417995f\x86_microsoft.grouppoli..t.interop.resources_31bf3856ad364e35_6.1.7601.17514_ko-kr_5888a2625c36ea6e scheduled to be moved on reboot. Folder move failed. C:\9ccc7d7c9d617c98d249790866\4ecf2ed1865f97a6a421b7f55f64a9\9e92181bd0353125c72e8c9417995f\x86_microsoft.grouppoli..t.interop.resources_31bf3856ad364e35_6.1.7601.17514_ja-jp_b51ec5ad69c62358 scheduled to be moved on reboot. Folder move failed. C:\9ccc7d7c9d617c98d249790866\4ecf2ed1865f97a6a421b7f55f64a9\9e92181bd0353125c72e8c9417995f\x86_microsoft.grouppoli..t.interop.resources_31bf3856ad364e35_6.1.7601.17514_it-it_12f946a076ab117d scheduled to be moved on reboot. Folder move failed. C:\9ccc7d7c9d617c98d249790866\4ecf2ed1865f97a6a421b7f55f64a9\9e92181bd0353125c72e8c9417995f\x86_microsoft.grouppoli..t.interop.resources_31bf3856ad364e35_6.1.7601.17514_fr-fr_28d150599f792bff scheduled to be moved on reboot. Folder move failed. C:\9ccc7d7c9d617c98d249790866\4ecf2ed1865f97a6a421b7f55f64a9\9e92181bd0353125c72e8c9417995f\x86_microsoft.grouppoli..t.interop.resources_31bf3856ad364e35_6.1.7601.17514_es-es_8619da5aaca7159d scheduled to be moved on reboot. Folder move failed. C:\9ccc7d7c9d617c98d249790866\4ecf2ed1865f97a6a421b7f55f64a9\9e92181bd0353125c72e8c9417995f\x86_microsoft.grouppoli..t.interop.resources_31bf3856ad364e35_6.1.7601.17514_en-us_864e7d76ac8023f8 scheduled to be moved on reboot. Folder move failed. C:\9ccc7d7c9d617c98d249790866\4ecf2ed1865f97a6a421b7f55f64a9\9e92181bd0353125c72e8c9417995f\x86_microsoft.grouppoli..t.interop.resources_31bf3856ad364e35_6.1.7601.17514_de-de_dd5da77dbda21833 scheduled to be moved on reboot. Folder move failed. C:\9ccc7d7c9d617c98d249790866\4ecf2ed1865f97a6a421b7f55f64a9\9e92181bd0353125c72e8c9417995f\x86_microsoft.grouppoli..mpleditor.resources_31bf3856ad364e35_6.1.7601.17514_zh-cn_ee6132357b675318 scheduled to be moved on reboot. . . . . . . Folder move failed. C:\9ccc7d7c9d617c98d249790866\4ecf2ed1865f97a6a421b7f55f64a9\9e92181bd0353125c72e8c9417995f scheduled to be moved on reboot. Folder move failed. C:\9ccc7d7c9d617c98d249790866\4ecf2ed1865f97a6a421b7f55f64a9 scheduled to be moved on reboot. Folder move failed. C:\9ccc7d7c9d617c98d249790866 scheduled to be moved on reboot. File move failed. G:\AUTORUN.INF scheduled to be moved on reboot. File move failed. C:\Users\User\AppData\Local\Temp\FXSAPIDebugLogFile.txt scheduled to be moved on reboot. Registry entries deleted on Reboot... Форума не ми дава да публикувам всичко, защото е много дълго.

Посочените ексета Вирус тотал не ги вижда /не успявам да му ги изпратя/. След бързото сканиране с OTL излезе това: OTL logfile created on: 8.3.2011 г. 20:24:51 - Run 1 OTL by OldTimer - Version 3.2.22.3 Folder = d:\Users\User\Desktop 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 8.0.7601.17514) Locale: 00000402 | Country: България | Language: BGR | Date Format: d.M.yyyy 'г.' 4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 60,00% Memory free 8,00 Gb Paging File | 6,00 Gb Available in Paging File | 78,00% Paging File free Paging file location(s): d:\pagefile.sys 0 0 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 29,85 Gb Total Space | 6,46 Gb Free Space | 21,64% Space Free | Partition Type: NTFS Drive D: | 86,82 Gb Total Space | 71,65 Gb Free Space | 82,53% Space Free | Partition Type: NTFS Drive E: | 32,38 Gb Total Space | 14,48 Gb Free Space | 44,73% Space Free | Partition Type: NTFS Drive G: | 34,96 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: USER-PC-MYPC | User Name: User | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2011.03.08 20:22:45 | 000,580,608 | ---- | M] (OldTimer Tools) -- d:\Users\User\Desktop\OTL.exe PRC - [2011.02.03 18:26:53 | 000,943,472 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.exe PRC - [2010.08.19 09:52:14 | 000,241,664 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\ProgramData\DatacardService\DCSHelper.exe PRC - [2010.08.19 09:52:04 | 000,229,376 | ---- | M] () -- C:\ProgramData\DatacardService\DCService.exe PRC - [2010.05.31 18:51:34 | 000,536,576 | ---- | M] () -- C:\Program Files (x86)\Mobile Partner\Mobile Partner.exe PRC - [2009.09.29 12:03:46 | 000,735,960 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe PRC - [2009.07.14 11:28:00 | 000,239,648 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe ========== Modules (SafeList) ========== MOD - [2011.03.08 20:22:45 | 000,580,608 | ---- | M] (OldTimer Tools) -- d:\Users\User\Desktop\OTL.exe MOD - [2010.11.20 12:55:09 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll ========== Win32 Services (SafeList) ========== SRV:64bit: - [2009.12.24 08:55:30 | 002,430,304 | ---- | M] (Diskeeper Corporation) [Auto | Running] -- C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe -- (Diskeeper) SRV:64bit: - [2009.09.29 12:11:14 | 000,023,296 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv) SRV:64bit: - [2009.09.29 12:03:46 | 000,735,960 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe -- (ekrn) SRV:64bit: - [2009.07.14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:64bit: - [2009.07.14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2010.08.19 09:52:04 | 000,229,376 | ---- | M] () [Auto | Running] -- C:\ProgramData\DatacardService\DCService.exe -- (DCService.exe) SRV - [2009.07.14 11:28:00 | 000,239,648 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2007.05.31 17:11:54 | 000,443,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2007.05.31 17:11:46 | 000,225,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) ========== Driver Services (SafeList) ========== DRV:64bit: - [2010.11.20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2010.11.20 14:32:47 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2010.11.20 14:32:46 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2010.11.20 12:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:64bit: - [2010.11.20 12:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:64bit: - [2010.10.29 15:22:20 | 000,198,144 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ew_juwwanecm.sys -- (huawei_wwanecm) DRV:64bit: - [2010.09.03 17:35:34 | 000,030,208 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ew_juextctrl.sys -- (huawei_ext_ctrl) DRV:64bit: - [2010.08.24 22:53:26 | 000,091,648 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ew_jucdcacm.sys -- (huawei_cdcacm) DRV:64bit: - [2010.08.07 17:49:04 | 000,121,600 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbmdm.sys -- (hwdatacard) DRV:64bit: - [2010.07.27 15:26:34 | 000,086,016 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ew_jubusenum.sys -- (huawei_enumerator) DRV:64bit: - [2010.07.27 09:52:16 | 000,117,248 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_hwusbdev.sys -- (ew_hwusbdev) DRV:64bit: - [2009.12.22 12:42:54 | 000,860,656 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:64bit: - [2009.12.17 23:25:17 | 000,034,472 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO) DRV:64bit: - [2009.12.10 14:48:44 | 000,051,120 | ---- | M] (Diskeeper Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\DKRtWrt.sys -- (DKRtWrt) DRV:64bit: - [2009.09.29 12:06:16 | 000,123,200 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfwwfpr.sys -- (epfwwfpr) DRV:64bit: - [2009.09.29 12:03:00 | 000,136,584 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv) DRV:64bit: - [2009.09.29 11:56:36 | 000,144,824 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\eamon.sys -- (eamon) DRV:64bit: - [2009.09.17 13:38:22 | 000,025,600 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MCfilt64.sys -- (MCfilt) DRV:64bit: - [2009.08.09 22:25:45 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone) DRV:64bit: - [2009.07.30 16:12:56 | 000,339,744 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvmf6264.sys -- (NVNET) DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009.07.14 01:09:50 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx) DRV:64bit: - [2009.06.10 21:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs) DRV:64bit: - [2009.06.10 21:35:35 | 000,408,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvm62x64.sys -- (NVENETFD) DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2007.03.27 17:18:58 | 010,550,272 | ---- | M] (Sonix Co. Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\snpstd3.sys -- (SNPSTD3) USB PC Camera (SNPSTD3) DRV:64bit: - [2005.03.29 00:30:38 | 000,008,192 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor) DRV - [2010.11.12 04:12:02 | 000,067,656 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Stopped] -- C:\Program Files (x86)\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL) DRV - [2010.11.12 04:12:02 | 000,012,872 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Stopped] -- C:\Program Files (x86)\SUPERAntiSpyware\SASDIFSV.SYS -- (SASDIFSV) DRV - [2010.11.12 04:12:02 | 000,012,872 | ---- | M] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\SUPERAntiSpyware\SASENUM.SYS -- (SASENUM) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://terabyte.bg/ IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..extensions.enabledItems: [email protected]:1.3 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6906 FF - prefs.js..extensions.enabledItems: {fa46cb24-1d5b-4048-911a-2857a0944395}:1.0.16 FF - HKLM\software\mozilla\Firefox\Extensions\\{fa46cb24-1d5b-4048-911a-2857a0944395}: C:\Program Files (x86)\FVD Suite\addons\Firefox [2011.03.06 08:19:19 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.17\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.03.04 10:48:20 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.17\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.03.04 10:48:20 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2009.12.21 11:24:57 | 000,000,000 | ---D | M] [2009.12.22 19:40:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\User\AppData\Roaming\Mozilla\Extensions [2011.03.07 21:37:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rwjvfvra.default\extensions [2010.01.24 10:36:34 | 000,000,000 | ---D | M] (Download Master Toolbar) -- C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rwjvfvra.default\extensions\[email protected] [2010.01.24 10:36:34 | 000,000,000 | ---D | M] (Download Master Plugin) -- C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rwjvfvra.default\extensions\[email protected] [2010.01.24 10:36:34 | 000,000,000 | ---D | M] (Download Master Remote Download) -- C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rwjvfvra.default\extensions\[email protected] [2011.02.25 18:05:36 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions [2011.02.21 18:49:07 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2011.02.25 18:05:36 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011.03.06 08:19:19 | 000,000,000 | ---D | M] ("FVD Suite Toolbar") -- C:\PROGRAM FILES (X86)\FVD SUITE\ADDONS\FIREFOX [2011.02.02 21:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll [2011.03.04 10:48:17 | 000,001,083 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\911bg.xml [2011.03.04 10:48:17 | 000,002,442 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\diribg.xml [2011.03.04 10:48:17 | 000,001,515 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\pe-bg.xml [2011.03.04 10:48:17 | 000,001,857 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\portalbgdict.xml [2011.03.04 10:48:17 | 000,001,220 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\wikipedia-bg.xml O1 HOSTS File: ([2010.11.04 02:23:48 | 000,395,385 | R--- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 www.008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 www.00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 www.0scan.com O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 www.1000gratisproben.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 www.1001namen.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 www.100888290cs.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 www.100sexlinks.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 www.10sek.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 127.0.0.1 www.1-2005-search.com O1 - Hosts: 127.0.0.1 123fporn.info O1 - Hosts: 13651 more lines... O2 - BHO: (Open FVD Suite Toolbar) - {2B171655-A69C-5c18-B693-6CB5DC269D44} - C:\Program Files (x86)\FVD Suite\addons\IE\FVDToolbar.dll (paulov.ru) O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O3 - HKLM\..\Toolbar: (FVD Suite Toolbar) - {2B171655-A69C-5c18-B693-6CB5DC269D41} - C:\Program Files (x86)\FVD Suite\addons\IE\FVDToolbar.dll (paulov.ru) O4:64bit: - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - D:\Users\User\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O8:64bit: - Extra context menu item: FVDToolbar Add Page - C:\Program Files (x86)\FVD Suite\addons\IE\FVDToolbar.dll (paulov.ru) O8 - Extra context menu item: E&xport to Microsoft Excel - D:\Users\User\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: FVDToolbar Add Page - C:\Program Files (x86)\FVD Suite\addons\IE\FVDToolbar.dll (paulov.ru) O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Users\User\Program Files (x86)\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (systempropertiesperformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com) O28:64bit: - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files (x86)\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com) O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010.08.19 17:49:08 | 000,126,976 | R--- | M] () - G:\AutoRun.exe -- [ CDFS ] O32 - AutoRun File - [2008.09.20 10:12:34 | 000,000,045 | R--- | M] () - G:\AUTORUN.INF -- [ CDFS ] O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O35 - HKCU\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKCU\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2011.03.08 20:22:42 | 000,580,608 | ---- | C] (OldTimer Tools) -- d:\Users\User\Desktop\OTL.exe [2011.03.07 20:15:22 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro [2011.03.07 20:15:22 | 000,000,000 | ---D | C] -- C:\rsit [2011.03.06 08:19:29 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\FVD Suite [2011.03.06 08:19:21 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\FVDToolbar [2011.03.06 08:19:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FVD Suite [2011.03.06 08:19:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FVD Suite [2011.03.04 19:19:38 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\foobar2000 [2011.03.04 19:19:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\foobar2000 [2011.03.03 18:24:28 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\Diagnostics [2011.03.02 14:18:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TreeSize Free [2011.03.02 14:18:48 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\JAM Software [2011.03.02 14:18:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\JAM Software [2011.02.27 19:13:25 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat [2011.02.27 19:13:25 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat [2011.02.27 18:52:25 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\SPReview [2011.02.27 18:46:51 | 000,116,224 | ---- | C] (Windows ® Codename Longhorn DDK provider) -- C:\Windows\SysNative\fms.dll [2011.02.27 18:46:26 | 000,093,696 | ---- | C] (Windows ® Codename Longhorn DDK provider) -- C:\Windows\SysWow64\fms.dll [2011.02.27 17:37:35 | 000,000,000 | ---D | C] -- C:\9ccc7d7c9d617c98d249790866 [2011.02.27 17:26:15 | 000,000,000 | ---D | C] -- C:\f881bed5537ec58525 [2011.02.27 10:28:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\EASEUS [2011.02.27 08:59:32 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\EventProviders [2011.02.26 19:36:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Windows Genuine Advantage [2011.02.25 18:15:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe [2011.02.25 18:05:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2011.02.25 11:18:15 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN [2011.02.23 20:46:04 | 000,000,000 | ---D | C] -- C:\Windows\temp [2011.02.23 19:58:13 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\InstallShield [2011.02.22 09:49:01 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\Adobe [2011.02.21 18:49:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2011.02.21 18:49:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype [2011.02.21 17:44:29 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT [2007.03.12 10:41:52 | 000,061,440 | ---- | C] ( ) -- C:\Windows\SysWow64\vsnpstd3.dll ========== Files - Modified Within 30 Days ========== [2011.03.08 20:25:14 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011.03.08 20:25:14 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011.03.08 20:23:48 | 000,713,888 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011.03.08 20:23:48 | 000,606,992 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011.03.08 20:23:48 | 000,103,370 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2011.03.08 20:22:45 | 000,580,608 | ---- | M] (OldTimer Tools) -- d:\Users\User\Desktop\OTL.exe [2011.03.08 20:22:38 | 000,000,000 | -HS- | M] () -- C:\DkHyperbootSync [2011.03.08 20:17:41 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011.03.06 09:18:06 | 145,177,714 | ---- | M] () -- d:\Users\User\Documents\movie.1.flv.converted.avi [2011.03.06 09:14:08 | 052,489,301 | ---- | M] () -- d:\Users\User\Documents\movie.1.flv [2011.03.06 08:19:21 | 000,000,974 | ---- | M] () -- C:\Users\Public\Desktop\FVD Suite.lnk [2011.03.05 16:44:01 | 000,001,320 | -H-- | M] () -- C:\Windows\EPMBatch.ept [2011.03.04 19:19:34 | 000,000,991 | ---- | M] () -- C:\Users\Public\Desktop\foobar2000.lnk [2011.03.04 18:29:07 | 000,001,448 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk [2011.03.02 14:18:47 | 000,001,035 | ---- | M] () -- d:\Users\User\Desktop\TreeSize Free.lnk [2011.02.28 18:12:56 | 000,001,387 | ---- | M] () -- d:\Users\User\Desktop\procexp.exe - Shortcut.lnk [2011.02.27 19:09:55 | 002,948,912 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2011.02.21 18:49:01 | 000,002,515 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk [2011.02.20 13:39:49 | 000,010,096 | -HS- | M] () -- C:\Users\User\AppData\Local\gpcj53uwtvx1p2ijo8nyrob12033l58l4q6x5 [2011.02.20 13:39:49 | 000,010,096 | -HS- | M] () -- C:\ProgramData\gpcj53uwtvx1p2ijo8nyrob12033l58l4q6x5 [2011.02.19 14:55:21 | 000,001,054 | RHS- | M] () -- C:\ProgramData\ntuser.pol ========== Files Created - No Company Name ========== [2011.03.08 20:20:46 | 000,000,000 | -HS- | C] () -- C:\DkHyperbootSync [2011.03.06 09:14:08 | 145,177,714 | ---- | C] () -- d:\Users\User\Documents\movie.1.flv.converted.avi [2011.03.06 08:25:26 | 052,489,301 | ---- | C] () -- d:\Users\User\Documents\movie.1.flv [2011.03.06 08:19:21 | 000,000,974 | ---- | C] () -- C:\Users\Public\Desktop\FVD Suite.lnk [2011.03.05 10:47:55 | 000,006,136 | ---- | C] () -- C:\Windows\SysNative\drivers\nvphy.bin [2011.03.04 19:19:34 | 000,001,073 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\foobar2000.lnk [2011.03.04 19:19:34 | 000,000,991 | ---- | C] () -- C:\Users\Public\Desktop\foobar2000.lnk [2011.03.02 14:18:47 | 000,001,035 | ---- | C] () -- d:\Users\User\Desktop\TreeSize Free.lnk [2011.02.28 18:12:56 | 000,001,387 | ---- | C] () -- d:\Users\User\Desktop\procexp.exe - Shortcut.lnk [2011.02.27 18:48:20 | 000,095,744 | ---- | C] () -- C:\Windows\SysNative\RDVGHelper.exe [2011.02.27 18:48:01 | 000,347,904 | ---- | C] () -- C:\Windows\SysNative\systemsf.ebd [2011.02.27 18:47:34 | 000,146,389 | ---- | C] () -- C:\Windows\SysWow64\printmanagement.msc [2011.02.27 18:46:08 | 000,010,429 | ---- | C] () -- C:\Windows\SysNative\ScavengeSpace.xml [2011.02.27 18:45:53 | 000,105,559 | ---- | C] () -- C:\Windows\SysWow64\RacRules.xml [2011.02.27 18:45:53 | 000,105,559 | ---- | C] () -- C:\Windows\SysNative\RacRules.xml [2011.02.27 18:45:26 | 000,001,041 | ---- | C] () -- C:\Windows\SysWow64\tcpbidi.xml [2011.02.27 10:39:06 | 000,001,320 | -H-- | C] () -- C:\Windows\EPMBatch.ept [2011.02.25 18:16:18 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk [2011.02.25 18:16:18 | 000,001,448 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk [2011.02.21 18:49:01 | 000,002,515 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk [2011.02.20 13:08:20 | 000,010,096 | -HS- | C] () -- C:\Users\User\AppData\Local\gpcj53uwtvx1p2ijo8nyrob12033l58l4q6x5 [2011.02.20 13:08:20 | 000,010,096 | -HS- | C] () -- C:\ProgramData\gpcj53uwtvx1p2ijo8nyrob12033l58l4q6x5 [2011.02.19 14:54:45 | 000,001,054 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2010.01.19 19:35:33 | 000,000,032 | ---- | C] () -- C:\ProgramData\ezsid.dat [2010.01.12 13:12:56 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat [2010.01.09 17:05:36 | 000,010,240 | ---- | C] () -- C:\Windows\SysWow64\vidx16.dll [2009.12.22 19:40:34 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat [2009.12.21 10:03:17 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini [2009.12.21 09:58:31 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini [2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat [2006.09.19 08:07:28 | 000,827,392 | ---- | C] () -- C:\Windows\vsnpstd3.exe [2004.02.27 15:36:18 | 000,015,498 | ---- | C] () -- C:\Windows\snpstd3.ini ========== LOP Check ========== [2011.01.30 19:53:43 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\BitTorrent [2011.03.04 21:26:44 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\foobar2000 [2011.03.06 08:19:21 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\FVDToolbar [2011.03.02 14:18:48 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\JAM Software [2010.11.10 08:24:19 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\MumboJumbo [2010.11.21 12:39:18 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Opera [2009.12.22 11:52:41 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\uTorrent [2010.01.24 16:34:25 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\VSRevoGroup [2011.02.17 10:42:15 | 000,032,638 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== ========== Alternate Data Streams ========== @Alternate Data Stream - 100 bytes -> C:\ProgramData\Temp:ADF211B1 < End of report > и: Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 "FirewallDisableNotify" = 0 "AntiVirusDisableNotify" = 0 "UpdatesDisableNotify" = 0 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirewallDisableNotify" = 0 "AntiVirusDisableNotify" = 0 "UpdatesDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] ========== System Restore Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 ========== Firewall Settings ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 "DefaultOutboundAction" = 0 "DefaultInboundAction" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 "DisableUnicastResponsesToMulticastBroadcast" = 0 "DefaultOutboundAction" = 0 "DefaultInboundAction" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 "DefaultOutboundAction" = 0 "DefaultInboundAction" = 1 ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Users\User\AppData\Local\Temp\0.4392944715038456.exe" = C:\Users\User\AppData\Local\Temp\0.4392944715038456.exe:*:Enabled:ldrsoft "C:\Users\User\AppData\Local\Temp\0.4392944715038456.exe" = C:\Users\User\AppData\Local\Temp\0.4392944715038456.exe:*:Enabled:ldrsoft ========== HKEY_LOCAL_MACHINE Uninstall List ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{23170F69-40C1-2702-0465-000001000000}" = 7-Zip 4.65 (x64 edition) "{4183655A-5FC6-4A23-A804-7764145EC57C}" = ESET NOD32 Antivirus "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 "{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}" = Windows Mobile Device Center "{67D477F8-E9A9-40EE-8036-3C7B4AAEE664}" = Diskeeper 2010 Pro Premier "{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64) "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 "{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007 "{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007 "{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 "NVIDIA Drivers" = NVIDIA Drivers "Unlocker" = Unlocker 1.9.0-x64 "WinRAR archiver" = WinRAR archiver [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}" = Adobe AIR "{26A24AE4-039D-4CA4-87B4-2F83216018FF}" = Java 6 Update 24 "{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player "{4286E640-B5FB-11DF-AC4B-005056C00008}" = Google Земя "{46EA439E-2D16-49B6-AA80-00DE992FE7CE}" = Microsoft Windows Debugging Symbols "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053 "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{80E4B2D6-BFF2-402C-96C4-3942DF24CABB}_is1" = FVD Suite 2.5.1 "{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007 "{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2) "{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007 "{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2) "{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007 "{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2) "{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007 "{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2) "{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007 "{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2) "{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007 "{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = 2007 Microsoft Office Suite Service Pack 2 (SP2) "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007 "{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = 2007 Microsoft Office Suite Service Pack 2 (SP2) "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007 "{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = 2007 Microsoft Office Suite Service Pack 2 (SP2) "{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{E64BA721-2310-4B55-BE5A-2925F9706192}" = 2007 Microsoft Office Suite Service Pack 2 (SP2) "{90120000-002A-0409-1000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2) "{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007 "{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007 "{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2) "{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007 "{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2) "{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007 "{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2) "{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007 "{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2) "{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007 "{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2) "{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007 "{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2) "{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007 "{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2) "{90120000-0116-0409-1000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2) "{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007 "{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2) "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AC76BA86-7AD7-1033-7B44-AA0000000001}" = Adobe Reader X (10.0.1) "{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars "{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware Free Edition "{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.1 "{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729) "{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01 "Adobe AIR" = Adobe AIR "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "BitTorrent" = BitTorrent "CCleaner" = CCleaner (remove only) "com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player "DivX Setup.divx.com" = DivX Setup "ENTERPRISE" = Microsoft Office Enterprise 2007 "FastStone Image Viewer" = FastStone Image Viewer 4.0 "foobar2000" = foobar2000 v1.1.5 "GOM Player" = GOM Player "Host OpenAL (ADI)" = Host OpenAL (ADI) "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Mobile Partner" = Mobile Partner "Mozilla Firefox (3.5.17)" = Mozilla Firefox (3.5.17) "Nero8Lite_is1" = Nero 8 Lite "NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver "Opera 11.01.1190" = Opera 11.01 "Revo Uninstaller" = Revo Uninstaller 1.90 "Total Commander" = Total Commander 7.50 PowerPack "TreeSize Free_is1" = TreeSize Free V2.5 "VirtualCloneDrive" = VirtualCloneDrive "VLC media player" = VLC media player 1.0.3 "WinDjView" = WinDjView 1.0.3 "Zuma's Revenge!1.0" = Zuma's Revenge! ========== HKEY_CURRENT_USER Uninstall List ========== [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "N Timer" = N Timer ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 1.8.2010 г. 14:34:30 | Computer Name = User-PC-myPC | Source = SideBySide | ID = 16842815 Description = Activation context generation failed for "C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid. Error - 1.8.2010 г. 14:34:57 | Computer Name = User-PC-myPC | Source = SideBySide | ID = 16842832 Description = Activation context generation failed for "c:\program files (x86)\Nero\nero toolkit\nero discspeed\DiscSpeed.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc.manifest. Error - 1.8.2010 г. 14:35:31 | Computer Name = User-PC-myPC | Source = SideBySide | ID = 16842815 Description = Activation context generation failed for "c:\program files (x86)\spybot - search & destroy\DelZip179.dll".Error in manifest or policy file "c:\program files (x86)\spybot - search & destroy\DelZip179.dll" on line 8. The value "*" of attribute "language" in element "assemblyIdentity" is invalid. Error - 1.8.2010 г. 14:55:05 | Computer Name = User-PC-myPC | Source = Google Update | ID = 20 Description = Error - 2.8.2010 г. 09:32:17 | Computer Name = User-PC-myPC | Source = Customer Experience Improvement Program | ID = 1008 Description = Error - 2.8.2010 г. 09:52:50 | Computer Name = User-PC-myPC | Source = SideBySide | ID = 16842815 Description = Activation context generation failed for "C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid. Error - 2.8.2010 г. 09:53:14 | Computer Name = User-PC-myPC | Source = SideBySide | ID = 16842832 Description = Activation context generation failed for "c:\program files (x86)\Nero\nero toolkit\nero discspeed\DiscSpeed.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc.manifest. Error - 2.8.2010 г. 09:53:49 | Computer Name = User-PC-myPC | Source = SideBySide | ID = 16842815 Description = Activation context generation failed for "c:\program files (x86)\spybot - search & destroy\DelZip179.dll".Error in manifest or policy file "c:\program files (x86)\spybot - search & destroy\DelZip179.dll" on line 8. The value "*" of attribute "language" in element "assemblyIdentity" is invalid. Error - 2.8.2010 г. 09:55:05 | Computer Name = User-PC-myPC | Source = Google Update | ID = 20 Description = Error - 2.8.2010 г. 10:55:05 | Computer Name = User-PC-myPC | Source = Google Update | ID = 20 Description = [ Media Center Events ] Error - 23.11.2010 г. 10:02:34 | Computer Name = User-PC-myPC | Source = MCUpdate | ID = 0 Description = 15:02:34 ч. - Error connecting to the internet. 15:02:34 ч. - Unable to contact server.. Error - 23.11.2010 г. 10:02:40 | Computer Name = User-PC-myPC | Source = MCUpdate | ID = 0 Description = 15:02:39 ч. - Error connecting to the internet. 15:02:39 ч. - Unable to contact server.. Error - 15.1.2011 г. 09:11:41 | Computer Name = User-PC-myPC | Source = MCUpdate | ID = 0 Description = 14:11:41 ч. - Error connecting to the internet. 14:11:41 ч. - Unable to contact server.. Error - 15.1.2011 г. 09:11:50 | Computer Name = User-PC-myPC | Source = MCUpdate | ID = 0 Description = 14:11:46 ч. - Error connecting to the internet. 14:11:46 ч. - Unable to contact server.. Error - 15.1.2011 г. 10:11:57 | Computer Name = User-PC-myPC | Source = MCUpdate | ID = 0 Description = 15:11:57 ч. - Error connecting to the internet. 15:11:57 ч. - Unable to contact server.. Error - 15.1.2011 г. 10:12:03 | Computer Name = User-PC-myPC | Source = MCUpdate | ID = 0 Description = 15:12:02 ч. - Error connecting to the internet. 15:12:02 ч. - Unable to contact server.. Error - 15.1.2011 г. 11:15:37 | Computer Name = User-PC-myPC | Source = MCUpdate | ID = 0 Description = 16:15:37 ч. - Error connecting to the internet. 16:15:37 ч. - Unable to contact server.. Error - 15.1.2011 г. 11:15:43 | Computer Name = User-PC-myPC | Source = MCUpdate | ID = 0 Description = 16:15:42 ч. - Error connecting to the internet. 16:15:42 ч. - Unable to contact server.. Error - 15.1.2011 г. 12:15:50 | Computer Name = User-PC-myPC | Source = MCUpdate | ID = 0 Description = 17:15:50 ч. - Error connecting to the internet. 17:15:50 ч. - Unable to contact server.. Error - 15.1.2011 г. 12:15:56 | Computer Name = User-PC-myPC | Source = MCUpdate | ID = 0 Description = 17:15:55 ч. - Error connecting to the internet. 17:15:55 ч. - Unable to contact server.. [ System Events ] Error - 8.3.2011 г. 13:04:35 | Computer Name = User-PC-myPC | Source = Application Popup | ID = 1060 Description = \??\C:\Program Files (x86)\SUPERAntiSpyware\SASKUTIL.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver. Error - 8.3.2011 г. 13:04:35 | Computer Name = User-PC-myPC | Source = Application Popup | ID = 1060 Description = \??\C:\Program Files (x86)\SUPERAntiSpyware\SASDIFSV.SYS has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver. Error - 8.3.2011 г. 13:05:02 | Computer Name = User-PC-myPC | Source = RemoteAccess | ID = 20106 Description = Unable to add the interface {60BC8E53-5E8F-4C05-9206-F6F076B3E201} with the Router Manager for the IPV6 protocol. The following error occurred: Cannot complete this function. Error - 8.3.2011 г. 13:05:02 | Computer Name = User-PC-myPC | Source = Service Control Manager | ID = 7026 Description = The following boot-start or system-start driver(s) failed to load: SASDIFSV SASKUTIL sptd Error - 8.3.2011 г. 15:16:51 | Computer Name = User-PC-myPC | Source = Service Control Manager | ID = 7016 Description = The NVIDIA Display Driver Service service has reported an invalid current state 32. Error - 8.3.2011 г. 15:17:28 | Computer Name = User-PC-myPC | Source = sptd | ID = 262148 Description = Driver detected an internal error in its data structures for . Error - 8.3.2011 г. 15:17:34 | Computer Name = User-PC-myPC | Source = Application Popup | ID = 1060 Description = \??\C:\Program Files (x86)\SUPERAntiSpyware\SASKUTIL.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver. Error - 8.3.2011 г. 15:17:34 | Computer Name = User-PC-myPC | Source = Application Popup | ID = 1060 Description = \??\C:\Program Files (x86)\SUPERAntiSpyware\SASDIFSV.SYS has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver. Error - 8.3.2011 г. 15:17:58 | Computer Name = User-PC-myPC | Source = Service Control Manager | ID = 7026 Description = The following boot-start or system-start driver(s) failed to load: SASDIFSV SASKUTIL sptd Error - 8.3.2011 г. 15:18:00 | Computer Name = User-PC-myPC | Source = RemoteAccess | ID = 20106 Description = Unable to add the interface {60BC8E53-5E8F-4C05-9206-F6F076B3E201} with the Router Manager for the IPV6 protocol. The following error occurred: Cannot complete this function. < End of report >

Изпълнено: info.txt logfile of random's system information tool 1.08 2011-03-07 20:16:02 ======Uninstall list====== -->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{BA8A7C81-B0D0-422D-8FBD-BF2D25986667}\setup.exe" -l0x9 2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-0015-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} 2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-0016-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} 2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-0018-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} 2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-0019-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} 2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-001A-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} 2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-001B-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} 2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045} 2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787} 2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9} 2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-002A-0000-1000-0000000FF1CE} /uninstall {E64BA721-2310-4B55-BE5A-2925F9706192} 2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-002A-0409-1000-0000000FF1CE} /uninstall {DE5A002D-8122-4278-A7EE-3121E7EA254E} 2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B} 2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-0044-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} 2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-006E-0409-0000-0000000FF1CE} /uninstall {DE5A002D-8122-4278-A7EE-3121E7EA254E} 2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} 2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-00BA-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} 2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-0114-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} 2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-0115-0409-0000-0000000FF1CE} /uninstall {DE5A002D-8122-4278-A7EE-3121E7EA254E} 2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-0116-0409-1000-0000000FF1CE} /uninstall {DE5A002D-8122-4278-A7EE-3121E7EA254E} 2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-0117-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} 7-Zip 4.65 (x64 edition)-->MsiExec.exe /I{23170F69-40C1-2702-0465-000001000000} Adobe AIR-->C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall Adobe AIR-->MsiExec.exe /I{197A3012-8C85-4FD3-AB66-9EC7E13DB92E} Adobe Flash Player 10 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\uninstall_activeX.exe Adobe Flash Player 10 Plugin-->C:\Windows\SysWOW64\Macromed\Flash\uninstall_plugin.exe Adobe Media Player-->msiexec /qb /x {39F6E2B4-CFE8-C30A-66E8-489651F0F34C} Adobe Media Player-->MsiExec.exe /I{39F6E2B4-CFE8-C30A-66E8-489651F0F34C} Adobe Reader X (10.0.1)-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-AA0000000001} BitTorrent-->C:\Program Files (x86)\BitTorrent\uninst.exe CCleaner (remove only)-->"C:\Program Files (x86)\CCleaner\uninst.exe" Diskeeper 2010 Pro Premier-->MsiExec.exe /X{67D477F8-E9A9-40EE-8036-3C7B4AAEE664} DivX Setup-->C:\ProgramData\DivX\Setup\DivXSetup.exe /uninstall /bundleGroupId divx.com FastStone Image Viewer 4.0-->C:\Program Files (x86)\FastStone Image Viewer\uninst.exe foobar2000 v1.1.5-->"C:\Program Files (x86)\foobar2000\uninstall.exe" _?=C:\Program Files (x86)\foobar2000 FVD Suite 2.5.1-->"C:\Program Files (x86)\FVD Suite\unins000.exe" GOM Player-->"C:\Program Files (x86)\GRETECH\GomPlayer\Uninstall.exe" Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} Google Земя-->MsiExec.exe /X{4286E640-B5FB-11DF-AC4B-005056C00008} Host OpenAL (ADI)-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{BA8A7C81-B0D0-422D-8FBD-BF2D25986667}\setup.exe" -l0x9 /remove Java 6 Update 24-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216018FF} Malwarebytes' Anti-Malware-->"C:\Program Files (x86)\Malwarebytes' Anti-Malware\unins000.exe" Microsoft Office Access MUI (English) 2007-->MsiExec.exe /X{90120000-0015-0409-0000-0000000FF1CE} Microsoft Office Access Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0117-0409-0000-0000000FF1CE} Microsoft Office Enterprise 2007-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE} Microsoft Office Excel MUI (English) 2007-->MsiExec.exe /X{90120000-0016-0409-0000-0000000FF1CE} Microsoft Office Groove MUI (English) 2007-->MsiExec.exe /X{90120000-00BA-0409-0000-0000000FF1CE} Microsoft Office Groove Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0114-0409-0000-0000000FF1CE} Microsoft Office InfoPath MUI (English) 2007-->MsiExec.exe /X{90120000-0044-0409-0000-0000000FF1CE} Microsoft Office Office 64-bit Components 2007-->MsiExec.exe /X{90120000-002A-0000-1000-0000000FF1CE} Microsoft Office OneNote MUI (English) 2007-->MsiExec.exe /X{90120000-00A1-0409-0000-0000000FF1CE} Microsoft Office Outlook MUI (English) 2007-->MsiExec.exe /X{90120000-001A-0409-0000-0000000FF1CE} Microsoft Office PowerPoint MUI (English) 2007-->MsiExec.exe /X{90120000-0018-0409-0000-0000000FF1CE} Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE} Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE} Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE} Microsoft Office Proofing (English) 2007-->MsiExec.exe /X{90120000-002C-0409-0000-0000000FF1CE} Microsoft Office Publisher MUI (English) 2007-->MsiExec.exe /X{90120000-0019-0409-0000-0000000FF1CE} Microsoft Office Shared 64-bit MUI (English) 2007-->MsiExec.exe /X{90120000-002A-0409-1000-0000000FF1CE} Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0116-0409-1000-0000000FF1CE} Microsoft Office Shared MUI (English) 2007-->MsiExec.exe /X{90120000-006E-0409-0000-0000000FF1CE} Microsoft Office Shared Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0115-0409-0000-0000000FF1CE} Microsoft Office Word MUI (English) 2007-->MsiExec.exe /X{90120000-001B-0409-0000-0000000FF1CE} Microsoft Visual C++ 2005 Redistributable (x64)-->MsiExec.exe /X{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17-->MsiExec.exe /X{8220EEFE-38CD-377E-8595-13398D740ACE} Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148-->MsiExec.exe /X{4B6C7001-C7D6-3710-913E-5BC23FCE91E6} Microsoft Windows Debugging Symbols-->MsiExec.exe /I{46EA439E-2D16-49B6-AA80-00DE992FE7CE} Mobile Partner-->C:\Program Files (x86)\Mobile Partner\uninst.exe Mozilla Firefox (3.5.17)-->C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe Nero 8 Lite-->"C:\Program Files (x86)\Nero\unins000.exe" NVIDIA Drivers-->C:\Windows\system32\nvuninst.exe UninstallGUI NVIDIA Stereoscopic 3D Driver-->"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvStInst.exe" /uninstall /ask Opera 11.01-->"C:\Program Files (x86)\Opera\Opera.exe" /uninstall Revo Uninstaller 1.90-->C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\uninst.exe Skype Toolbars-->MsiExec.exe /I{CD95D125-2992-4858-B3EF-5F6FB52FBAD6} Skype™ 5.1-->MsiExec.exe /X{E633D396-5188-4E9D-8F6B-BFB8BF3467E8} SUPERAntiSpyware Free Edition-->MsiExec.exe /X{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA} Total Commander 7.50 PowerPack-->"C:\Program Files (x86)\Total Commander\uninstall.exe" TreeSize Free V2.5-->"C:\Program Files (x86)\JAM Software\TreeSize Free\unins000.exe" Unlocker 1.9.0-x64-->C:\Program Files\Unlocker\uninst.exe VC80CRTRedist - 8.0.50727.4053-->MsiExec.exe /I{5EE7D259-D137-4438-9A5F-42F432EC0421} VirtualCloneDrive-->"C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\vcd-uninst.exe" /D="C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive" Visual C++ 2008 x86 Runtime - (v9.0.30729)-->MsiExec.exe /X{F333A33D-125C-32A2-8DCE-5C5D14231E27} Visual C++ 2008 x86 Runtime - v9.0.30729.01-->C:\Windows\SysWOW64\msiexec.exe /x {F333A33D-125C-32A2-8DCE-5C5D14231E27} /qb+ REBOOTPROMPT="" VLC media player 1.0.3-->C:\Program Files (x86)\VideoLAN\VLC\uninstall.exe WinDjView 1.0.3-->C:\Program Files (x86)\WinDjView\uninstall.exe Windows Mobile Device Center-->MsiExec.exe /X{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B} WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe Zuma's Revenge!-->"C:\Windows\Zuma's Revenge!\uninstall.exe" "/U:C:\Program Files (x86)\Zuma's Revenge!\Uninstall\uninstall.xml" ======Hosts File====== 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com ======System event log====== Computer Name: User-PC-myPC Event Code: 7016 Message: The NVIDIA Display Driver Service service has reported an invalid current state 32. Record Number: 120193 Source Name: Service Control Manager Time Written: 20100920144111.226400-000 Event Type: Error User: Computer Name: User-PC-myPC Event Code: 7026 Message: The following boot-start or system-start driver(s) failed to load: SASDIFSV SASKUTIL sptd Record Number: 120138 Source Name: Service Control Manager Time Written: 20100920141622.119600-000 Event Type: Error User: Computer Name: User-PC-myPC Event Code: 1060 Message: \??\C:\Program Files (x86)\SUPERAntiSpyware\SASDIFSV.SYS has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver. Record Number: 120075 Source Name: Application Popup Time Written: 20100920141557.580800-000 Event Type: Error User: Computer Name: User-PC-myPC Event Code: 1060 Message: \??\C:\Program Files (x86)\SUPERAntiSpyware\SASKUTIL.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver. Record Number: 120073 Source Name: Application Popup Time Written: 20100920141557.580800-000 Event Type: Error User: Computer Name: User-PC-myPC Event Code: 4 Message: Driver detected an internal error in its data structures for . Record Number: 120070 Source Name: sptd Time Written: 20100920141550.623200-000 Event Type: Error User: =====Application event log===== Computer Name: User-PC-myPC Event Code: 1530 Message: Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 26 user registry handles leaked from \Registry\User\S-1-5-21-478959301-1715535215-1148857107-1000: Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000 Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000 Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000 Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000 Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000 Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\SystemCertificates\My Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\SystemCertificates\My Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\SystemCertificates\CA Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\Internet Explorer\IETld Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\SystemCertificates\SmartCardRoot Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\SystemCertificates\trust Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\SystemCertificates\TrustedPeople Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Policies\Microsoft\SystemCertificates Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Policies\Microsoft\SystemCertificates Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Policies\Microsoft\SystemCertificates Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Policies\Microsoft\SystemCertificates Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Policies Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\SystemCertificates\Disallowed Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\Windows NT\CurrentVersion\Network\Location Awareness Process 3764 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\SystemCertificates\Root Record Number: 21621 Source Name: Microsoft-Windows-User Profiles Service Time Written: 20100706234828.324800-000 Event Type: Warning User: NT AUTHORITY\SYSTEM Computer Name: User-PC-myPC Event Code: 33 Message: Activation context generation failed for "C:\Program Files (x86)\Lavasoft\Ad-Aware\ShellExt_64.dll". Dependent Assembly Microsoft.VC90.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.30729.4148" could not be found. Please use sxstrace.exe for detailed diagnosis. Record Number: 21584 Source Name: SideBySide Time Written: 20100706223747.000000-000 Event Type: Error User: Computer Name: User-PC-myPC Event Code: 1530 Message: Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 20 user registry handles leaked from \Registry\User\S-1-5-21-478959301-1715535215-1148857107-1000: Process 3816 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000 Process 3816 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000 Process 3816 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000 Process 3816 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\SystemCertificates\My Process 3816 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\SystemCertificates\My Process 3816 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\SystemCertificates\CA Process 3816 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software Process 3816 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\Internet Explorer\IETld Process 3816 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\SystemCertificates\SmartCardRoot Process 3816 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\SystemCertificates\trust Process 3816 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap Process 3816 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap Process 3816 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Process 3816 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Policies\Microsoft\SystemCertificates Process 3816 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Policies\Microsoft\SystemCertificates Process 3816 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Policies Process 3816 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings Process 3816 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings Process 3816 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\Windows NT\CurrentVersion\Network\Location Awareness Process 3816 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\SystemCertificates\Root Record Number: 21565 Source Name: Microsoft-Windows-User Profiles Service Time Written: 20100706193734.206350-000 Event Type: Warning User: NT AUTHORITY\SYSTEM Computer Name: User-PC-myPC Event Code: 33 Message: Activation context generation failed for "C:\Program Files (x86)\Lavasoft\Ad-Aware\ShellExt_64.dll". Dependent Assembly Microsoft.VC90.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.30729.4148" could not be found. Please use sxstrace.exe for detailed diagnosis. Record Number: 21547 Source Name: SideBySide Time Written: 20100706173635.000000-000 Event Type: Error User: Computer Name: User-PC-myPC Event Code: 1530 Message: Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 26 user registry handles leaked from \Registry\User\S-1-5-21-478959301-1715535215-1148857107-1000: Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000 Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000 Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000 Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000 Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000 Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\SystemCertificates\My Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\SystemCertificates\My Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\SystemCertificates\CA Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\Internet Explorer\IETld Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\SystemCertificates\SmartCardRoot Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\SystemCertificates\trust Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\SystemCertificates\TrustedPeople Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Policies\Microsoft\SystemCertificates Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Policies\Microsoft\SystemCertificates Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Policies\Microsoft\SystemCertificates Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Policies\Microsoft\SystemCertificates Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Policies Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\SystemCertificates\Disallowed Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\Windows NT\CurrentVersion\Network\Location Awareness Process 3256 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-478959301-1715535215-1148857107-1000\Software\Microsoft\SystemCertificates\Root Record Number: 21528 Source Name: Microsoft-Windows-User Profiles Service Time Written: 20100706154426.729650-000 Event Type: Warning User: NT AUTHORITY\SYSTEM =====Security event log===== Computer Name: User-PC-myPC Event Code: 4624 Message: An account was successfully logged on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 New Logon: Security ID: S-1-5-7 Account Name: ANONYMOUS LOGON Account Domain: NT AUTHORITY Logon ID: 0x7b37d9 Logon GUID: {00000000-0000-0000-0000-000000000000} Process Information: Process ID: 0x0 Process Name: - Network Information: Workstation Name: MICROSOF-CB131C Source Network Address: 109.87.71.215 Source Port: 3838 Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): NTLM V1 Key Length: 0 This event is generated when a logon session is created. It is generated on the computer that was accessed. The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe. The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network). The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on. The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases. The authentication information fields provide detailed information about this specific logon request. - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event. - Transited services indicate which intermediate services have participated in this logon request. - Package name indicates which sub-protocol was used among the NTLM protocols. - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. Record Number: 49236 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100905180221.328300-000 Event Type: Audit Success User: Computer Name: User-PC-myPC Event Code: 4634 Message: An account was logged off. Subject: Security ID: S-1-5-21-478959301-1715535215-1148857107-501 Account Name: Guest Account Domain: USER-PC-MYPC Logon ID: 0x7adfbb Logon Type: 3 This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. Record Number: 49235 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100905175908.628300-000 Event Type: Audit Success User: Computer Name: User-PC-myPC Event Code: 4634 Message: An account was logged off. Subject: Security ID: S-1-5-21-478959301-1715535215-1148857107-501 Account Name: Guest Account Domain: USER-PC-MYPC Logon ID: 0x7adf73 Logon Type: 3 This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. Record Number: 49234 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100905175907.358300-000 Event Type: Audit Success User: Computer Name: User-PC-myPC Event Code: 4634 Message: An account was logged off. Subject: Security ID: S-1-5-21-478959301-1715535215-1148857107-501 Account Name: Guest Account Domain: USER-PC-MYPC Logon ID: 0x77ebb7 Logon Type: 3 This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. Record Number: 49233 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100905175745.983800-000 Event Type: Audit Success User: Computer Name: User-PC-myPC Event Code: 4634 Message: An account was logged off. Subject: Security ID: S-1-5-7 Account Name: ANONYMOUS LOGON Account Domain: NT AUTHORITY Logon ID: 0x72a833 Logon Type: 3 This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. Record Number: 49232 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100905175344.561800-000 Event Type: Audit Success User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0;C:\PROGRA~1\DISKEE~1\DISKEE~1 "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC "PROCESSOR_ARCHITECTURE"=AMD64 "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "USERNAME"=SYSTEM "windir"=%SystemRoot% "PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\ "NUMBER_OF_PROCESSORS"=2 "PROCESSOR_LEVEL"=15 "PROCESSOR_IDENTIFIER"=AMD64 Family 15 Model 107 Stepping 2, AuthenticAMD "PROCESSOR_REVISION"=6b02 -----------------EOF----------------- и: Logfile of random's system information tool 1.08 (written by random/random) Run by User at 2011-03-07 20:15:22 Microsoft Windows 7 Ultimate Service Pack 1 System drive C: has 7 GB (22%) free of 31 GB Total RAM: 4063 MB (52% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 20:16:00 ч., on 7.3.2011 г. Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v8.00 (8.00.7601.17514) Boot mode: Normal Running processes: C:\ProgramData\DatacardService\DCSHelper.exe C:\Program Files (x86)\Mobile Partner\Mobile Partner.exe C:\Program Files (x86)\Skype\Phone\Skype.exe C:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe C:\Program Files (x86)\Opera\opera.exe C:\Program Files\trend micro\User.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://terabyte.bg/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Open FVD Suite Toolbar - {2B171655-A69C-5c18-B693-6CB5DC269D44} - C:\Program Files (x86)\FVD Suite\addons\IE\FVDToolbar.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: FVD Suite Toolbar - {2B171655-A69C-5c18-B693-6CB5DC269D41} - C:\Program Files (x86)\FVD Suite\addons\IE\FVDToolbar.dll O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe -p O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\Users\User\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: FVDToolbar Add Page - res://C:\Program Files (x86)\FVD Suite\addons\IE\FVDToolbar.dll/IECONTEXT.DLL.HTM O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra button: (no name) - {8DAE90AD-4583-4977-9DD4-4360F7A45C74} - (no file) O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Users\User\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL O9 - Extra button: Open FVD Suite Toolbar - {2B171655-A69C-5c18-B693-6CB5DC269D43} - C:\Program Files (x86)\FVD Suite\addons\IE\FVDToolbar.dll (HKCU) O9 - Extra 'Tools' menuitem: Open FVD Suite Toolbar - {2B171655-A69C-5c18-B693-6CB5DC269D43} - C:\Program Files (x86)\FVD Suite\addons\IE\FVDToolbar.dll (HKCU) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{60BC8E53-5E8F-4C05-9206-F6F076B3E201}: NameServer = 193.70.152.25 193.70.192.25 O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: !SASWinLogon - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: DCService.exe - Unknown owner - C:\ProgramData\DatacardService\DCService.exe O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Услуга Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 7608 bytes ======Listing Processes====== \SystemRoot\System32\smss.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe winlogon.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\nvvsvc.exe -session -first C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\System32\spoolsv.exe "taskhost.exe" "C:\Windows\system32\Dwm.exe" C:\Windows\Explorer.EXE C:\ProgramData\DatacardService\DCService.exe "C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe" "C:\ProgramData\DatacardService\DCSHelper.exe" "C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe" "C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe" C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\system32\DllHost.exe /Processid:{48DA6741-1BF0-4A44-8325-293086C79077} "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice C:\Windows\System32\alg.exe "C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-d3ab2954-9ab9-4420-ab3f-6b69aa26a71d -SystemEventPortName:HostProcess-fbe6c094-dada-4df8-a462-a2e9d88d5b07 -IoCancelEventPortName:HostProcess-a67b8fdd-902c-496b-bfec-0d08e4d52f18 -NonStateChangingEventPortName:HostProcess-4e9965dc-466a-4ab7-b968-bcb0cf8b1e9a -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:054bdca4-69ae-4746-86a0-9a90b5fa9f5e C:\Windows\System32\svchost.exe -k secsvcs C:\Windows\system32\SearchIndexer.exe /Embedding C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation "C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe" "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c C:\Windows\system32\svchost.exe -k WindowsMobile "C:\Program Files\Windows Media Player\wmpnetwk.exe" "C:\Windows\system32\wuauclt.exe" "C:\Program Files (x86)\Mobile Partner\Mobile Partner.exe" "C:\Program Files (x86)\Skype\Phone\Skype.exe" C:\Windows\System32\svchost.exe -k LocalServicePeerNet "C:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe" /SILENT "C:\Program Files (x86)\Opera\opera.exe" "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe8_ Global\UsGthrCtrlFltPipeMssGthrPipe8 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520 C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding "D:\Downloads\RSITx64.exe" "c:\program files\windows defender\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey 7C42F038-FEC2-3CC1-F632-2E1331E3FCF9 -Reinvoke C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\System32\svchost.exe -k WerSvcGroup ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2B171655-A69C-5c18-B693-6CB5DC269D44}] Open FVD Suite Toolbar - C:\Program Files (x86)\FVD Suite\addons\IE\FVDToolbar.dll [2010-08-19 1674240] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] Skype Plug-In - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-11-22 1242504] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-02-09 41760] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar] {2B171655-A69C-5c18-B693-6CB5DC269D41} - FVD Suite Toolbar - C:\Program Files (x86)\FVD Suite\addons\IE\FVDToolbar.dll [2010-08-19 1674240] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-09-29 2716216] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce] "FlashPlayerUpdate"=C:\Windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe -p [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\snpstd3] C:\Windows\vsnpstd3.exe [2006-09-19 827392] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= [] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files (x86)\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824] "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= [] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "PromptOnSecureDesktop"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDrives"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDrives"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "C:\Users\User\AppData\Local\Temp\0.4392944715038456.exe"="C:\Users\User\AppData\Local\Temp\0.4392944715038456.exe:*:Enabled:ldrsoft" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 ======List of files/folders created in the last 3 months====== 2011-03-07 20:15:22 ----D---- C:\rsit 2011-03-07 20:15:22 ----D---- C:\Program Files\trend micro 2011-03-06 08:19:21 ----D---- C:\Users\User\AppData\Roaming\FVDToolbar 2011-03-06 08:19:18 ----D---- C:\Program Files (x86)\FVD Suite 2011-03-05 10:47:55 ----A---- C:\Windows\system32\cohelper.dll 2011-03-04 19:19:38 ----D---- C:\Users\User\AppData\Roaming\foobar2000 2011-03-04 19:19:32 ----D---- C:\Program Files (x86)\foobar2000 2011-03-02 14:18:48 ----D---- C:\Users\User\AppData\Roaming\JAM Software 2011-03-02 14:18:44 ----D---- C:\Program Files (x86)\JAM Software 2011-02-27 19:13:25 ----D---- C:\Windows\SYSWOW64\Wat 2011-02-27 19:13:25 ----D---- C:\Windows\system32\Wat 2011-02-27 18:52:25 ----D---- C:\Windows\system32\SPReview 2011-02-27 18:48:46 ----A---- C:\Windows\system32\netfxperf.dll 2011-02-27 18:48:46 ----A---- C:\Windows\system32\dfshim.dll 2011-02-27 18:48:35 ----A---- C:\Windows\SYSWOW64\dfshim.dll 2011-02-27 18:48:30 ----A---- C:\Windows\system32\ntoskrnl.exe 2011-02-27 18:48:29 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2011-02-27 18:48:29 ----A---- C:\Windows\system32\mstscax.dll 2011-02-27 18:48:29 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys 2011-02-27 18:48:29 ----A---- C:\Windows\system32\d3d10warp.dll 2011-02-27 18:48:27 ----A---- C:\Windows\system32\ieframe.dll 2011-02-27 18:48:25 ----A---- C:\Windows\SYSWOW64\mstscax.dll 2011-02-27 18:48:21 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll 2011-02-27 18:48:20 ----A---- C:\Windows\SYSWOW64\mfc40u.dll 2011-02-27 18:48:20 ----A---- C:\Windows\SYSWOW64\mfc40.dll 2011-02-27 18:48:20 ----A---- C:\Windows\system32\tssrvlic.dll 2011-02-27 18:48:20 ----A---- C:\Windows\system32\sysmain.dll 2011-02-27 18:48:20 ----A---- C:\Windows\system32\shell32.dll 2011-02-27 18:48:20 ----A---- C:\Windows\system32\RDVGHelper.exe 2011-02-27 18:48:20 ----A---- C:\Windows\system32\rdpcorets.dll 2011-02-27 18:48:20 ----A---- C:\Windows\system32\drivers\tcpip.sys 2011-02-27 18:48:18 ----A---- C:\Windows\SYSWOW64\pmcsnap.dll 2011-02-27 18:48:18 ----A---- C:\Windows\system32\MSVidCtl.dll 2011-02-27 18:48:17 ----A---- C:\Windows\system32\wmp.dll 2011-02-27 18:48:17 ----A---- C:\Windows\system32\tquery.dll 2011-02-27 18:48:16 ----A---- C:\Windows\system32\mssrch.dll 2011-02-27 18:48:16 ----A---- C:\Windows\system32\d2d1.dll 2011-02-27 18:48:15 ----A---- C:\Windows\system32\ntdll.dll 2011-02-27 18:48:15 ----A---- C:\Windows\system32\mscoree.dll 2011-02-27 18:48:15 ----A---- C:\Windows\system32\mmcndmgr.dll 2011-02-27 18:48:14 ----A---- C:\Windows\SYSWOW64\d2d1.dll 2011-02-27 18:48:14 ----A---- C:\Windows\system32\secproc_isv.dll 2011-02-27 18:48:14 ----A---- C:\Windows\system32\RMActivate_isv.exe 2011-02-27 18:48:14 ----A---- C:\Windows\system32\mf.dll 2011-02-27 18:48:13 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll 2011-02-27 18:48:13 ----A---- C:\Windows\system32\xpsservices.dll 2011-02-27 18:48:13 ----A---- C:\Windows\system32\secproc.dll 2011-02-27 18:48:13 ----A---- C:\Windows\system32\RMActivate.exe 2011-02-27 18:48:12 ----A---- C:\Windows\SYSWOW64\shell32.dll 2011-02-27 18:48:12 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe 2011-02-27 18:48:11 ----A---- C:\Windows\SYSWOW64\secproc.dll 2011-02-27 18:48:11 ----A---- C:\Windows\system32\rpcrt4.dll 2011-02-27 18:48:10 ----A---- C:\Windows\SYSWOW64\RMActivate.exe 2011-02-27 18:48:10 ----A---- C:\Windows\SYSWOW64\PushPrinterConnections.exe 2011-02-27 18:48:10 ----A---- C:\Windows\SYSWOW64\ppcsnap.dll 2011-02-27 18:48:10 ----A---- C:\Windows\SYSWOW64\ieframe.dll 2011-02-27 18:48:10 ----A---- C:\Windows\system32\schedsvc.dll 2011-02-27 18:48:09 ----A---- C:\Windows\system32\ole32.dll 2011-02-27 18:48:08 ----A---- C:\Windows\system32\wininet.dll 2011-02-27 18:48:08 ----A---- C:\Windows\system32\spwizui.dll 2011-02-27 18:48:08 ----A---- C:\Windows\system32\iertutil.dll 2011-02-27 18:48:07 ----A---- C:\Windows\SYSWOW64\mscoree.dll 2011-02-27 18:48:07 ----A---- C:\Windows\system32\wevtsvc.dll 2011-02-27 18:48:07 ----A---- C:\Windows\system32\urlmon.dll 2011-02-27 18:48:07 ----A---- C:\Windows\system32\taskschd.dll 2011-02-27 18:48:07 ----A---- C:\Windows\system32\RacEngn.dll 2011-02-27 18:48:07 ----A---- C:\Windows\system32\esent.dll 2011-02-27 18:48:07 ----A---- C:\Windows\system32\drivers\ntfs.sys 2011-02-27 18:48:07 ----A---- C:\Windows\system32\diagperf.dll 2011-02-27 18:48:06 ----A---- C:\Windows\SYSWOW64\mf.dll 2011-02-27 18:48:06 ----A---- C:\Windows\system32\ExplorerFrame.dll 2011-02-27 18:48:05 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe 2011-02-27 18:48:05 ----A---- C:\Windows\system32\vssapi.dll 2011-02-27 18:48:05 ----A---- C:\Windows\system32\msxml3.dll 2011-02-27 18:48:04 ----A---- C:\Windows\SYSWOW64\iertutil.dll 2011-02-27 18:48:04 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll 2011-02-27 18:48:04 ----A---- C:\Windows\system32\NaturalLanguage6.dll 2011-02-27 18:48:04 ----A---- C:\Windows\system32\drivers\msiscsi.sys 2011-02-27 18:48:03 ----A---- C:\Windows\SYSWOW64\mssrch.dll 2011-02-27 18:48:03 ----A---- C:\Windows\system32\UIRibbon.dll 2011-02-27 18:48:03 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll 2011-02-27 18:48:03 ----A---- C:\Windows\explorer.exe 2011-02-27 18:48:02 ----A---- C:\Windows\SYSWOW64\wmp.dll 2011-02-27 18:48:01 ----A---- C:\Windows\SYSWOW64\esent.dll 2011-02-27 18:48:01 ----A---- C:\Windows\system32\WsmSvc.dll 2011-02-27 18:48:00 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll 2011-02-27 18:48:00 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe 2011-02-27 18:48:00 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe 2011-02-27 18:48:00 ----A---- C:\Windows\system32\WMVCORE.DLL 2011-02-27 18:48:00 ----A---- C:\Windows\system32\PresentationHostProxy.dll 2011-02-27 18:48:00 ----A---- C:\Windows\system32\PresentationHost.exe 2011-02-27 18:48:00 ----A---- C:\Windows\system32\DWrite.dll 2011-02-27 18:47:59 ----A---- C:\Windows\system32\spreview.exe 2011-02-27 18:47:59 ----A---- C:\Windows\system32\spinstall.exe 2011-02-27 18:47:59 ----A---- C:\Windows\system32\rdpudd.dll 2011-02-27 18:47:59 ----A---- C:\Windows\system32\rdpdd.dll 2011-02-27 18:47:59 ----A---- C:\Windows\system32\MPSSVC.dll 2011-02-27 18:47:59 ----A---- C:\Windows\system32\CertEnroll.dll 2011-02-27 18:47:58 ----A---- C:\Windows\SYSWOW64\tquery.dll 2011-02-27 18:47:58 ----A---- C:\Windows\system32\WMVDECOD.DLL 2011-02-27 18:47:58 ----A---- C:\Windows\system32\WinSAT.exe 2011-02-27 18:47:58 ----A---- C:\Windows\system32\CPFilters.dll 2011-02-27 18:47:57 ----A---- C:\Windows\system32\msxml6.dll 2011-02-27 18:47:57 ----A---- C:\Windows\system32\IKEEXT.DLL 2011-02-27 18:47:57 ----A---- C:\Windows\system32\d3d9.dll 2011-02-27 18:47:56 ----A---- C:\Windows\SYSWOW64\RacEngn.dll 2011-02-27 18:47:56 ----A---- C:\Windows\system32\SearchFolder.dll 2011-02-27 18:47:52 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll 2011-02-27 18:47:52 ----A---- C:\Windows\system32\AuthFWSnapin.dll 2011-02-27 18:47:51 ----A---- C:\Windows\system32\VSSVC.exe 2011-02-27 18:47:51 ----A---- C:\Windows\system32\mstime.dll 2011-02-27 18:47:51 ----A---- C:\Windows\system32\kernel32.dll 2011-02-27 18:47:51 ----A---- C:\Windows\system32\gpsvc.dll 2011-02-27 18:47:51 ----A---- C:\Windows\system32\FntCache.dll 2011-02-27 18:47:51 ----A---- C:\Windows\system32\dwmcore.dll 2011-02-27 18:47:51 ----A---- C:\Windows\system32\dbgeng.dll 2011-02-27 18:47:50 ----A---- C:\Windows\system32\drivers\http.sys 2011-02-27 18:47:49 ----A---- C:\Windows\SYSWOW64\rdvgumd32.dll 2011-02-27 18:47:49 ----A---- C:\Windows\system32\drivers\ndis.sys 2011-02-27 18:47:49 ----A---- C:\Windows\system32\crypt32.dll 2011-02-27 18:47:48 ----A---- C:\Windows\SYSWOW64\wininet.dll 2011-02-27 18:47:48 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll 2011-02-27 18:47:47 ----A---- C:\Windows\SYSWOW64\ole32.dll 2011-02-27 18:47:47 ----A---- C:\Windows\system32\TSWorkspace.dll 2011-02-27 18:47:47 ----A---- C:\Windows\system32\schannel.dll 2011-02-27 18:47:47 ----A---- C:\Windows\system32\drivers\afd.sys 2011-02-27 18:47:47 ----A---- C:\Windows\system32\audiosrv.dll 2011-02-27 18:47:47 ----A---- C:\Windows\system32\actxprxy.dll 2011-02-27 18:47:46 ----A---- C:\Windows\SYSWOW64\urlmon.dll 2011-02-27 18:47:46 ----A---- C:\Windows\system32\termsrv.dll 2011-02-27 18:47:46 ----A---- C:\Windows\system32\qmgr.dll 2011-02-27 18:47:46 ----A---- C:\Windows\system32\lsasrv.dll 2011-02-27 18:47:46 ----A---- C:\Windows\system32\KernelBase.dll 2011-02-27 18:47:46 ----A---- C:\Windows\system32\gpprefcl.dll 2011-02-27 18:47:46 ----A---- C:\Windows\system32\drivers\srv2.sys 2011-02-27 18:47:46 ----A---- C:\Windows\system32\drivers\srv.sys 2011-02-27 18:47:45 ----A---- C:\Windows\SYSWOW64\vssapi.dll 2011-02-27 18:47:45 ----A---- C:\Windows\SYSWOW64\CPFilters.dll 2011-02-27 18:47:45 ----A---- C:\Windows\system32\sqmapi.dll 2011-02-27 18:47:45 ----A---- C:\Windows\system32\netlogon.dll 2011-02-27 18:47:45 ----A---- C:\Windows\system32\mstsc.exe 2011-02-27 18:47:45 ----A---- C:\Windows\system32\imapi2fs.dll 2011-02-27 18:47:44 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll 2011-02-27 18:47:44 ----A---- C:\Windows\SYSWOW64\DWrite.dll 2011-02-27 18:47:44 ----A---- C:\Windows\SYSWOW64\d3d9.dll 2011-02-27 18:47:44 ----A---- C:\Windows\system32\winhttp.dll 2011-02-27 18:47:44 ----A---- C:\Windows\system32\QAGENTRT.DLL 2011-02-27 18:47:44 ----A---- C:\Windows\system32\propsys.dll 2011-02-27 18:47:44 ----A---- C:\Windows\system32\msv1_0.dll 2011-02-27 18:47:44 ----A---- C:\Windows\system32\d3d11.dll 2011-02-27 18:47:43 ----A---- C:\Windows\SYSWOW64\explorer.exe 2011-02-27 18:47:43 ----A---- C:\Windows\system32\setupapi.dll 2011-02-27 18:47:43 ----A---- C:\Windows\system32\rpcss.dll 2011-02-27 18:47:42 ----A---- C:\Windows\SYSWOW64\taskschd.dll 2011-02-27 18:47:42 ----A---- C:\Windows\system32\werconcpl.dll 2011-02-27 18:47:42 ----A---- C:\Windows\system32\wbengine.exe 2011-02-27 18:47:42 ----A---- C:\Windows\system32\PushPrinterConnections.exe 2011-02-27 18:47:42 ----A---- C:\Windows\system32\authui.dll 2011-02-27 18:47:41 ----A---- C:\Windows\SYSWOW64\crypt32.dll 2011-02-27 18:47:41 ----A---- C:\Windows\system32\taskeng.exe 2011-02-27 18:47:41 ----A---- C:\Windows\system32\oleaut32.dll 2011-02-27 18:47:41 ----A---- C:\Windows\system32\odbc32.dll 2011-02-27 18:47:41 ----A---- C:\Windows\system32\msfeeds.dll 2011-02-27 18:47:41 ----A---- C:\Windows\system32\dnsapi.dll 2011-02-27 18:47:40 ----A---- C:\Windows\SYSWOW64\mstsc.exe 2011-02-27 18:47:40 ----A---- C:\Windows\system32\WSDApi.dll 2011-02-27 18:47:40 ----A---- C:\Windows\system32\user32.dll 2011-02-27 18:47:40 ----A---- C:\Windows\system32\umrdp.dll 2011-02-27 18:47:40 ----A---- C:\Windows\system32\LSCSHostPolicy.dll 2011-02-27 18:47:40 ----A---- C:\Windows\system32\drivers\tdx.sys 2011-02-27 18:47:40 ----A---- C:\Windows\system32\drivers\nvstor.sys 2011-02-27 18:47:40 ----A---- C:\Windows\system32\drivers\netio.sys 2011-02-27 18:47:40 ----A---- C:\Windows\system32\dhcpcore.dll 2011-02-27 18:47:40 ----A---- C:\Windows\system32\certmgr.dll 2011-02-27 18:47:39 ----A---- C:\Windows\SYSWOW64\wer.dll 2011-02-27 18:47:39 ----A---- C:\Windows\SYSWOW64\ntdll.dll 2011-02-27 18:47:39 ----A---- C:\Windows\system32\webio.dll 2011-02-27 18:47:39 ----A---- C:\Windows\system32\scavengeui.dll 2011-02-27 18:47:39 ----A---- C:\Windows\system32\drivers\netbt.sys 2011-02-27 18:47:38 ----A---- C:\Windows\SYSWOW64\msxml6.dll 2011-02-27 18:47:38 ----A---- C:\Windows\SYSWOW64\certcli.dll 2011-02-27 18:47:38 ----A---- C:\Windows\system32\tsmf.dll 2011-02-27 18:47:38 ----A---- C:\Windows\system32\PortableDeviceApi.dll 2011-02-27 18:47:38 ----A---- C:\Windows\system32\ncsi.dll 2011-02-27 18:47:38 ----A---- C:\Windows\system32\msdrm.dll 2011-02-27 18:47:38 ----A---- C:\Windows\system32\localspl.dll 2011-02-27 18:47:38 ----A---- C:\Windows\system32\drivers\nvraid.sys 2011-02-27 18:47:37 ----A---- C:\Windows\SYSWOW64\dwmcore.dll 2011-02-27 18:47:37 ----A---- C:\Windows\system32\shlwapi.dll 2011-02-27 18:47:37 ----A---- C:\Windows\system32\rdpshell.exe 2011-02-27 18:47:37 ----A---- C:\Windows\system32\netshell.dll 2011-02-27 18:47:37 ----A---- C:\Windows\system32\msdtctm.dll 2011-02-27 18:47:37 ----A---- C:\Windows\system32\framedynos.dll 2011-02-27 18:47:36 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll 2011-02-27 18:47:36 ----A---- C:\Windows\SYSWOW64\odbc32.dll 2011-02-27 18:47:36 ----A---- C:\Windows\SYSWOW64\mstime.dll 2011-02-27 18:47:36 ----A---- C:\Windows\system32\ws2_32.dll 2011-02-27 18:47:36 ----A---- C:\Windows\system32\winlogon.exe 2011-02-27 18:47:36 ----A---- C:\Windows\system32\usp10.dll 2011-02-27 18:47:36 ----A---- C:\Windows\system32\umpnpmgr.dll 2011-02-27 18:47:36 ----A---- C:\Windows\system32\quartz.dll 2011-02-27 18:47:36 ----A---- C:\Windows\system32\nlasvc.dll 2011-02-27 18:47:36 ----A---- C:\Windows\system32\netcfgx.dll 2011-02-27 18:47:36 ----A---- C:\Windows\system32\lsm.exe 2011-02-27 18:47:36 ----A---- C:\Windows\system32\drivers\srvnet.sys 2011-02-27 18:47:36 ----A---- C:\Windows\system32\drivers\cng.sys 2011-02-27 18:47:36 ----A---- C:\Windows\system32\appmgr.dll 2011-02-27 18:47:35 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll 2011-02-27 18:47:35 ----A---- C:\Windows\SYSWOW64\quartz.dll 2011-02-27 18:47:35 ----A---- C:\Windows\system32\wmpps.dll 2011-02-27 18:47:35 ----A---- C:\Windows\system32\Query.dll 2011-02-27 18:47:35 ----A---- C:\Windows\system32\mswsock.dll 2011-02-27 18:47:35 ----A---- C:\Windows\system32\dxgi.dll 2011-02-27 18:47:35 ----A---- C:\Windows\system32\drivers\rdpwd.sys 2011-02-27 18:47:35 ----A---- C:\Windows\system32\drivers\csc.sys 2011-02-27 18:47:35 ----A---- C:\Windows\system32\drivers\amdsata.sys 2011-02-27 18:47:35 ----A---- C:\Windows\system32\d3d10_1core.dll 2011-02-27 18:47:35 ----A---- C:\Windows\system32\comdlg32.dll 2011-02-27 18:47:35 ----A---- C:\Windows\system32\apphelp.dll 2011-02-27 18:47:34 ----A---- C:\Windows\SYSWOW64\winhttp.dll 2011-02-27 18:47:34 ----A---- C:\Windows\SYSWOW64\tsmf.dll 2011-02-27 18:47:34 ----A---- C:\Windows\SYSWOW64\printmanagement.msc 2011-02-27 18:47:34 ----A---- C:\Windows\SYSWOW64\msfeeds.dll 2011-02-27 18:47:34 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll 2011-02-27 18:47:34 ----A---- C:\Windows\SYSWOW64\dot3api.dll 2011-02-27 18:47:34 ----A---- C:\Windows\system32\wpdshext.dll 2011-02-27 18:47:34 ----A---- C:\Windows\system32\QAGENT.DLL 2011-02-27 18:47:34 ----A---- C:\Windows\system32\BFE.DLL 2011-02-27 18:47:34 ----A---- C:\Windows\system32\azroles.dll 2011-02-27 18:47:33 ----A---- C:\Windows\SYSWOW64\setupapi.dll 2011-02-27 18:47:33 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll 2011-02-27 18:47:33 ----A---- C:\Windows\SYSWOW64\apphelp.dll 2011-02-27 18:47:33 ----A---- C:\Windows\system32\Vault.dll 2011-02-27 18:47:33 ----A---- C:\Windows\system32\samsrv.dll 2011-02-27 18:47:33 ----A---- C:\Windows\system32\lpksetup.exe 2011-02-27 18:47:33 ----A---- C:\Windows\system32\DShowRdpFilter.dll 2011-02-27 18:47:33 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys 2011-02-27 18:47:33 ----A---- C:\Windows\system32\cmd.exe 2011-02-27 18:47:32 ----A---- C:\Windows\SYSWOW64\netlogon.dll 2011-02-27 18:47:32 ----A---- C:\Windows\SYSWOW64\dbgeng.dll 2011-02-27 18:47:32 ----A---- C:\Windows\system32\winload.exe 2011-02-27 18:47:32 ----A---- C:\Windows\system32\win32spl.dll 2011-02-27 18:47:32 ----A---- C:\Windows\system32\mssvp.dll 2011-02-27 18:47:32 ----A---- C:\Windows\system32\EncDec.dll 2011-02-27 18:47:32 ----A---- C:\Windows\system32\dnsrslvr.dll 2011-02-27 18:47:32 ----A---- C:\Windows\system32\cscsvc.dll 2011-02-27 18:47:31 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL 2011-02-27 18:47:31 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll 2011-02-27 18:47:31 ----A---- C:\Windows\SYSWOW64\netcfgx.dll 2011-02-27 18:47:31 ----A---- C:\Windows\SYSWOW64\d3d11.dll 2011-02-27 18:47:31 ----A---- C:\Windows\system32\WebClnt.dll 2011-02-27 18:47:31 ----A---- C:\Windows\system32\sbe.dll 2011-02-27 18:47:31 ----A---- C:\Windows\system32\rdpclip.exe 2011-02-27 18:47:30 ----A---- C:\Windows\SYSWOW64\webio.dll 2011-02-27 18:47:30 ----A---- C:\Windows\SYSWOW64\Query.dll 2011-02-27 18:47:30 ----A---- C:\Windows\SYSWOW64\gpprefcl.dll 2011-02-27 18:47:30 ----A---- C:\Windows\system32\Wldap32.dll 2011-02-27 18:47:30 ----A---- C:\Windows\system32\WindowsCodecs.dll 2011-02-27 18:47:30 ----A---- C:\Windows\system32\sxs.dll 2011-02-27 18:47:30 ----A---- C:\Windows\system32\mcbuilder.exe 2011-02-27 18:47:30 ----A---- C:\Windows\system32\drivers\vhdmp.sys 2011-02-27 18:47:30 ----A---- C:\Windows\system32\cscobj.dll 2011-02-27 18:47:29 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll 2011-02-27 18:47:29 ----A---- C:\Windows\SYSWOW64\upnp.dll 2011-02-27 18:47:29 ----A---- C:\Windows\SYSWOW64\schannel.dll 2011-02-27 18:47:29 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll 2011-02-27 18:47:29 ----A---- C:\Windows\SYSWOW64\advapi32.dll 2011-02-27 18:47:29 ----A---- C:\Windows\system32\taskcomp.dll 2011-02-27 18:47:29 ----A---- C:\Windows\system32\pnidui.dll 2011-02-27 18:47:29 ----A---- C:\Windows\system32\mfds.dll 2011-02-27 18:47:29 ----A---- C:\Windows\system32\ipsmsnap.dll 2011-02-27 18:47:29 ----A---- C:\Windows\system32\drivers\storport.sys 2011-02-27 18:47:28 ----A---- C:\Windows\SYSWOW64\netfxperf.dll 2011-02-27 18:47:28 ----A---- C:\Windows\SYSWOW64\msv1_0.dll 2011-02-27 18:47:28 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll 2011-02-27 18:47:28 ----A---- C:\Windows\system32\wuaueng.dll 2011-02-27 18:47:28 ----A---- C:\Windows\system32\webservices.dll 2011-02-27 18:47:28 ----A---- C:\Windows\system32\SessEnv.dll 2011-02-27 18:47:28 ----A---- C:\Windows\system32\rdpendp.dll 2011-02-27 18:47:28 ----A---- C:\Windows\system32\hgprint.dll 2011-02-27 18:47:27 ----A---- C:\Windows\SYSWOW64\msdrm.dll 2011-02-27 18:47:27 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll 2011-02-27 18:47:27 ----A---- C:\Windows\SYSWOW64\authui.dll 2011-02-27 18:47:27 ----A---- C:\Windows\system32\winsta.dll 2011-02-27 18:47:27 ----A---- C:\Windows\system32\winresume.exe 2011-02-27 18:47:27 ----A---- C:\Windows\system32\spoolsv.exe 2011-02-27 18:47:26 ----A---- C:\Windows\SYSWOW64\usp10.dll 2011-02-27 18:47:26 ----A---- C:\Windows\SYSWOW64\shlwapi.dll 2011-02-27 18:47:26 ----A---- C:\Windows\SYSWOW64\SessEnv.dll 2011-02-27 18:47:26 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll 2011-02-27 18:47:26 ----A---- C:\Windows\system32\sqlsrv32.dll 2011-02-27 18:47:26 ----A---- C:\Windows\system32\iepeers.dll 2011-02-27 18:47:26 ----A---- C:\Windows\system32\fveapi.dll 2011-02-27 18:47:26 ----A---- C:\Windows\system32\drivers\msrpc.sys 2011-02-27 18:47:26 ----A---- C:\Windows\system32\dot3api.dll 2011-02-27 18:47:25 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe 2011-02-27 18:47:25 ----A---- C:\Windows\system32\prncache.dll 2011-02-27 18:47:25 ----A---- C:\Windows\system32\mcmde.dll 2011-02-27 18:47:25 ----A---- C:\Windows\system32\gdi32.dll 2011-02-27 18:47:25 ----A---- C:\Windows\system32\drivers\volsnap.sys 2011-02-27 18:47:24 ----A---- C:\Windows\SYSWOW64\userenv.dll 2011-02-27 18:47:24 ----A---- C:\Windows\SYSWOW64\kernel32.dll 2011-02-27 18:47:24 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll 2011-02-27 18:47:24 ----A---- C:\Windows\SYSWOW64\certmgr.dll 2011-02-27 18:47:24 ----A---- C:\Windows\system32\wuapi.dll 2011-02-27 18:47:24 ----A---- C:\Windows\system32\WMNetMgr.dll 2011-02-27 18:47:24 ----A---- C:\Windows\system32\wlanpref.dll 2011-02-27 18:47:24 ----A---- C:\Windows\system32\vpnike.dll 2011-02-27 18:47:24 ----A---- C:\Windows\system32\userenv.dll 2011-02-27 18:47:24 ----A---- C:\Windows\system32\schtasks.exe 2011-02-27 18:47:24 ----A---- C:\Windows\system32\drivers\rdbss.sys 2011-02-27 18:47:23 ----A---- C:\Windows\SYSWOW64\xpsservices.dll 2011-02-27 18:47:23 ----A---- C:\Windows\SYSWOW64\WebClnt.dll 2011-02-27 18:47:23 ----A---- C:\Windows\system32\wintrust.dll 2011-02-27 18:47:22 ----A---- C:\Windows\SYSWOW64\comdlg32.dll 2011-02-27 18:47:22 ----A---- C:\Windows\system32\tspubwmi.dll 2011-02-27 18:47:22 ----A---- C:\Windows\system32\photowiz.dll 2011-02-27 18:47:22 ----A---- C:\Windows\system32\IPSECSVC.DLL 2011-02-27 18:47:22 ----A---- C:\Windows\system32\framedyn.dll 2011-02-27 18:47:22 ----A---- C:\Windows\system32\evr.dll 2011-02-27 18:47:22 ----A---- C:\Windows\system32\drivers\1394ohci.sys 2011-02-27 18:47:22 ----A---- C:\Windows\system32\AudioSes.dll 2011-02-27 18:47:21 ----A---- C:\Windows\SYSWOW64\cmd.exe 2011-02-27 18:47:21 ----A---- C:\Windows\system32\wmpmde.dll 2011-02-27 18:47:21 ----A---- C:\Windows\system32\WMPEncEn.dll 2011-02-27 18:47:21 ----A---- C:\Windows\system32\wmpeffects.dll 2011-02-27 18:47:21 ----A---- C:\Windows\system32\tscfgwmi.dll 2011-02-27 18:47:21 ----A---- C:\Windows\system32\SyncCenter.dll 2011-02-27 18:47:21 ----A---- C:\Windows\system32\srvsvc.dll 2011-02-27 18:47:21 ----A---- C:\Windows\system32\sppobjs.dll 2011-02-27 18:47:21 ----A---- C:\Windows\system32\shsvcs.dll 2011-02-27 18:47:21 ----A---- C:\Windows\system32\rdpinit.exe 2011-02-27 18:47:21 ----A---- C:\Windows\system32\mfreadwrite.dll 2011-02-27 18:47:21 ----A---- C:\Windows\system32\FXSSVC.exe 2011-02-27 18:47:21 ----A---- C:\Windows\system32\aepdu.dll 2011-02-27 18:47:20 ----A---- C:\Windows\SYSWOW64\win32spl.dll 2011-02-27 18:47:20 ----A---- C:\Windows\SYSWOW64\framedynos.dll 2011-02-27 18:47:20 ----A---- C:\Windows\SYSWOW64\dnsapi.dll 2011-02-27 18:47:20 ----A---- C:\Windows\system32\vmicsvc.exe 2011-02-27 18:47:20 ----A---- C:\Windows\system32\fde.dll 2011-02-27 18:47:20 ----A---- C:\Windows\system32\aeinv.dll 2011-02-27 18:47:19 ----A---- C:\Windows\SYSWOW64\Wldap32.dll 2011-02-27 18:47:19 ----A---- C:\Windows\SYSWOW64\propsys.dll 2011-02-27 18:47:19 ----A---- C:\Windows\SYSWOW64\mfds.dll 2011-02-27 18:47:19 ----A---- C:\Windows\system32\WinSATAPI.dll 2011-02-27 18:47:19 ----A---- C:\Windows\system32\stobject.dll 2011-02-27 18:47:19 ----A---- C:\Windows\system32\netdiagfx.dll 2011-02-27 18:47:19 ----A---- C:\Windows\system32\localsec.dll 2011-02-27 18:47:19 ----A---- C:\Windows\system32\imapi2.dll 2011-02-27 18:47:19 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys 2011-02-27 18:47:19 ----A---- C:\Windows\system32\credui.dll 2011-02-27 18:47:19 ----A---- C:\Windows\system32\bcryptprimitives.dll 2011-02-27 18:47:18 ----A---- C:\Windows\SYSWOW64\user32.dll 2011-02-27 18:47:18 ----A---- C:\Windows\SYSWOW64\rdpendp.dll 2011-02-27 18:47:18 ----A---- C:\Windows\system32\tcpipcfg.dll 2011-02-27 18:47:18 ----A---- C:\Windows\system32\spp.dll 2011-02-27 18:47:18 ----A---- C:\Windows\system32\QSHVHOST.DLL 2011-02-27 18:47:18 ----A---- C:\Windows\system32\netid.dll 2011-02-27 18:47:18 ----A---- C:\Windows\system32\iphlpsvc.dll 2011-02-27 18:47:18 ----A---- C:\Windows\system32\inetpp.dll 2011-02-27 18:47:18 ----A---- C:\Windows\system32\drivers\vmbus.sys 2011-02-27 18:47:18 ----A---- C:\Windows\system32\drivers\udfs.sys 2011-02-27 18:47:18 ----A---- C:\Windows\system32\drivers\mrxsmb.sys 2011-02-27 18:47:18 ----A---- C:\Windows\system32\drivers\fltMgr.sys 2011-02-27 18:47:18 ----A---- C:\Windows\system32\davclnt.dll 2011-02-27 18:47:18 ----A---- C:\Windows\system32\cdd.dll 2011-02-27 18:47:17 ----A---- C:\Windows\SYSWOW64\ncsi.dll 2011-02-27 18:47:17 ----A---- C:\Windows\SYSWOW64\azroles.dll 2011-02-27 18:47:17 ----A---- C:\Windows\SYSWOW64\appmgr.dll 2011-02-27 18:47:17 ----A---- C:\Windows\system32\profsvc.dll 2011-02-27 18:47:17 ----A---- C:\Windows\system32\msinfo32.exe 2011-02-27 18:47:17 ----A---- C:\Windows\system32\gameux.dll 2011-02-27 18:47:17 ----A---- C:\Windows\system32\cscui.dll 2011-02-27 18:47:17 ----A---- C:\Windows\system32\biocpl.dll 2011-02-27 18:47:16 ----A---- C:\Windows\SYSWOW64\themeui.dll 2011-02-27 18:47:16 ----A---- C:\Windows\SYSWOW64\taskeng.exe 2011-02-27 18:47:16 ----A---- C:\Windows\SYSWOW64\credui.dll 2011-02-27 18:47:16 ----A---- C:\Windows\system32\scansetting.dll 2011-02-27 18:47:16 ----A---- C:\Windows\system32\printui.dll 2011-02-27 18:47:16 ----A---- C:\Windows\system32\pla.dll 2011-02-27 18:47:16 ----A---- C:\Windows\system32\mspbda.dll 2011-02-27 18:47:16 ----A---- C:\Windows\system32\conhost.exe 2011-02-27 18:47:16 ----A---- C:\Windows\splwow64.exe 2011-02-27 18:47:15 ----A---- C:\Windows\SYSWOW64\spp.dll 2011-02-27 18:47:15 ----A---- C:\Windows\SYSWOW64\mswsock.dll 2011-02-27 18:47:15 ----A---- C:\Windows\SYSWOW64\inetcomm.dll 2011-02-27 18:47:15 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll 2011-02-27 18:47:15 ----A---- C:\Windows\system32\wusa.exe 2011-02-27 18:47:15 ----A---- C:\Windows\system32\wiaservc.dll 2011-02-27 18:47:15 ----A---- C:\Windows\system32\vds.exe 2011-02-27 18:47:15 ----A---- C:\Windows\system32\msdri.dll 2011-02-27 18:47:15 ----A---- C:\Windows\system32\IPHLPAPI.DLL 2011-02-27 18:47:15 ----A---- C:\Windows\system32\inetcomm.dll 2011-02-27 18:47:15 ----A---- C:\Windows\system32\aitagent.exe 2011-02-27 18:47:14 ----A---- C:\Windows\SYSWOW64\wintrust.dll 2011-02-27 18:47:14 ----A---- C:\Windows\SYSWOW64\msxml3.dll 2011-02-27 18:47:14 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll 2011-02-27 18:47:14 ----A---- C:\Windows\SYSWOW64\dxgi.dll 2011-02-27 18:47:14 ----A---- C:\Windows\SYSWOW64\dbghelp.dll 2011-02-27 18:47:14 ----A---- C:\Windows\SYSWOW64\basecsp.dll 2011-02-27 18:47:14 ----A---- C:\Windows\system32\rpchttp.dll 2011-02-27 18:47:14 ----A---- C:\Windows\system32\mscms.dll 2011-02-27 18:47:14 ----A---- C:\Windows\system32\drivers\pci.sys 2011-02-27 18:47:14 ----A---- C:\Windows\system32\cryptsvc.dll 2011-02-27 18:47:14 ----A---- C:\Windows\system32\AdmTmpl.dll 2011-02-27 18:47:13 ----A---- C:\Windows\SYSWOW64\taskcomp.dll 2011-02-27 18:47:13 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll 2011-02-27 18:47:13 ----A---- C:\Windows\system32\XpsRasterService.dll 2011-02-27 18:47:13 ----A---- C:\Windows\system32\wisptis.exe 2011-02-27 18:47:13 ----A---- C:\Windows\system32\ocsetup.exe 2011-02-27 18:47:13 ----A---- C:\Windows\system32\msi.dll 2011-02-27 18:47:13 ----A---- C:\Windows\system32\FirewallControlPanel.dll 2011-02-27 18:47:13 ----A---- C:\Windows\system32\drivers\rasl2tp.sys 2011-02-27 18:47:12 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll 2011-02-27 18:47:12 ----A---- C:\Windows\SYSWOW64\evr.dll 2011-02-27 18:47:12 ----A---- C:\Windows\SYSWOW64\calc.exe 2011-02-27 18:47:12 ----A---- C:\Windows\system32\sppwinob.dll 2011-02-27 18:47:12 ----A---- C:\Windows\system32\ocsetapi.dll 2011-02-27 18:47:12 ----A---- C:\Windows\system32\drivers\mrxdav.sys 2011-02-27 18:47:11 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll 2011-02-27 18:47:11 ----A---- C:\Windows\SYSWOW64\EncDec.dll 2011-02-27 18:47:11 ----A---- C:\Windows\system32\wpdbusenum.dll 2011-02-27 18:47:11 ----A---- C:\Windows\system32\wcncsvc.dll 2011-02-27 18:47:11 ----A---- C:\Windows\system32\rdpcore.dll 2011-02-27 18:47:11 ----A---- C:\Windows\system32\ntshrui.dll 2011-02-27 18:47:11 ----A---- C:\Windows\system32\eapp3hst.dll 2011-02-27 18:47:11 ----A---- C:\Windows\system32\DXP.dll 2011-02-27 18:47:11 ----A---- C:\Windows\system32\drivers\volmgr.sys 2011-02-27 18:47:11 ----A---- C:\Windows\system32\drivers\msdsm.sys 2011-02-27 18:47:11 ----A---- C:\Windows\system32\ci.dll 2011-02-27 18:47:11 ----A---- C:\Windows\system32\cfgmgr32.dll 2011-02-27 18:47:10 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll 2011-02-27 18:47:10 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll 2011-02-27 18:47:10 ----A---- C:\Windows\system32\upnp.dll 2011-02-27 18:47:10 ----A---- C:\Windows\system32\t2embed.dll 2011-02-27 18:47:10 ----A---- C:\Windows\system32\Robocopy.exe 2011-02-27 18:47:10 ----A---- C:\Windows\system32\mprapi.dll 2011-02-27 18:47:10 ----A---- C:\Windows\system32\eapphost.dll 2011-02-27 18:47:10 ----A---- C:\Windows\system32\drivers\HpSAMD.sys 2011-02-27 18:47:09 ----A---- C:\Windows\SYSWOW64\ws2_32.dll 2011-02-27 18:47:09 ----A---- C:\Windows\SYSWOW64\sxs.dll 2011-02-27 18:47:09 ----A---- C:\Windows\SYSWOW64\stobject.dll 2011-02-27 18:47:09 ----A---- C:\Windows\SYSWOW64\netshell.dll 2011-02-27 18:47:09 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe 2011-02-27 18:47:09 ----A---- C:\Windows\system32\thumbcache.dll 2011-02-27 18:47:09 ----A---- C:\Windows\system32\hal.dll 2011-02-27 18:47:09 ----A---- C:\Windows\system32\drivers\ksecdd.sys 2011-02-27 18:47:08 ----A---- C:\Windows\SYSWOW64\gdi32.dll 2011-02-27 18:47:08 ----A---- C:\Windows\SYSWOW64\comctl32.dll 2011-02-27 18:47:08 ----A---- C:\Windows\system32\sspicli.dll 2011-02-27 18:47:08 ----A---- C:\Windows\system32\scecli.dll 2011-02-27 18:47:08 ----A---- C:\Windows\system32\puiobj.dll 2011-02-27 18:47:08 ----A---- C:\Windows\system32\PerfCenterCPL.dll 2011-02-27 18:47:08 ----A---- C:\Windows\system32\nlaapi.dll 2011-02-27 18:47:08 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL 2011-02-27 18:47:08 ----A---- C:\Windows\system32\msasn1.dll 2011-02-27 18:47:08 ----A---- C:\Windows\system32\iasrad.dll 2011-02-27 18:47:08 ----A---- C:\Windows\system32\DxpTaskSync.dll 2011-02-27 18:47:08 ----A---- C:\Windows\system32\dwmredir.dll 2011-02-27 18:47:08 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys 2011-02-27 18:47:08 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys 2011-02-27 18:47:08 ----A---- C:\Windows\system32\drivers\fvevol.sys 2011-02-27 18:47:08 ----A---- C:\Windows\system32\drivers\Classpnp.sys 2011-02-27 18:47:07 ----A---- C:\Windows\SYSWOW64\prncache.dll 2011-02-27 18:47:07 ----A---- C:\Windows\SYSWOW64\printui.dll 2011-02-27 18:47:07 ----A---- C:\Windows\SYSWOW64\msi.dll 2011-02-27 18:47:07 ----A---- C:\Windows\system32\themeui.dll 2011-02-27 18:47:07 ----A---- C:\Windows\system32\scrptadm.dll 2011-02-27 18:47:07 ----A---- C:\Windows\system32\onex.dll 2011-02-27 18:47:07 ----A---- C:\Windows\system32\DXPTaskRingtone.dll 2011-02-27 18:47:07 ----A---- C:\Windows\system32\drivers\amdxata.sys 2011-02-27 18:47:06 ----A---- C:\Windows\SYSWOW64\WSDApi.dll 2011-02-27 18:47:06 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll 2011-02-27 18:47:06 ----A---- C:\Windows\SYSWOW64\rpchttp.dll 2011-02-27 18:47:06 ----A---- C:\Windows\SYSWOW64\net1.exe 2011-02-27 18:47:06 ----A---- C:\Windows\system32\iedkcs32.dll 2011-02-27 18:47:06 ----A---- C:\Windows\system32\aaclient.dll 2011-02-27 18:47:05 ----A---- C:\Windows\SYSWOW64\scansetting.dll 2011-02-27 18:47:05 ----A---- C:\Windows\SYSWOW64\mfc42u.dll 2011-02-27 18:47:05 ----A---- C:\Windows\system32\wow64.dll 2011-02-27 18:47:05 ----A---- C:\Windows\system32\wdc.dll 2011-02-27 18:47:05 ----A---- C:\Windows\system32\scesrv.dll 2011-02-27 18:47:04 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll 2011-02-27 18:47:04 ----A---- C:\Windows\SYSWOW64\davclnt.dll 2011-02-27 18:47:04 ----A---- C:\Windows\system32\wscapi.dll 2011-02-27 18:47:04 ----A---- C:\Windows\system32\wlangpui.dll 2011-02-27 18:47:04 ----A---- C:\Windows\system32\wiadefui.dll 2011-02-27 18:47:04 ----A---- C:\Windows\system32\VAN.dll 2011-02-27 18:47:04 ----A---- C:\Windows\system32\StructuredQuery.dll 2011-02-27 18:47:04 ----A---- C:\Windows\system32\SndVol.exe 2011-02-27 18:47:04 ----A---- C:\Windows\system32\sdengin2.dll 2011-02-27 18:47:04 ----A---- C:\Windows\system32\samcli.dll 2011-02-27 18:47:04 ----A---- C:\Windows\system32\rasmans.dll 2011-02-27 18:47:04 ----A---- C:\Windows\system32\netcenter.dll 2011-02-27 18:47:04 ----A---- C:\Windows\system32\msftedit.dll 2011-02-27 18:47:04 ----A---- C:\Windows\system32\iasacct.dll 2011-02-27 18:47:04 ----A---- C:\Windows\system32\dskquoui.dll 2011-02-27 18:47:04 ----A---- C:\Windows\system32\drivers\partmgr.sys 2011-02-27 18:47:04 ----A---- C:\Windows\system32\drivers\ndiswan.sys 2011-02-27 18:47:03 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL 2011-02-27 18:47:03 ----A---- C:\Windows\SYSWOW64\wlangpui.dll 2011-02-27 18:47:03 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL 2011-02-27 18:47:03 ----A---- C:\Windows\SYSWOW64\aaclient.dll 2011-02-27 18:47:03 ----A---- C:\Windows\system32\wucltux.dll 2011-02-27 18:47:03 ----A---- C:\Windows\system32\regapi.dll 2011-02-27 18:47:03 ----A---- C:\Windows\system32\drivers\termdd.sys 2011-02-27 18:47:02 ----A---- C:\Windows\SYSWOW64\wpdshext.dll 2011-02-27 18:47:02 ----A---- C:\Windows\SYSWOW64\webservices.dll 2011-02-27 18:47:02 ----A---- C:\Windows\SYSWOW64\t2embed.dll 2011-02-27 18:47:02 ----A---- C:\Windows\SYSWOW64\scrptadm.dll 2011-02-27 18:47:02 ----A---- C:\Windows\SYSWOW64\pnidui.dll 2011-02-27 18:47:02 ----A---- C:\Windows\system32\TabSvc.dll 2011-02-27 18:47:02 ----A---- C:\Windows\system32\srchadmin.dll 2011-02-27 18:47:02 ----A---- C:\Windows\system32\QUTIL.DLL 2011-02-27 18:47:02 ----A---- C:\Windows\system32\consent.exe 2011-02-27 18:47:01 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll 2011-02-27 18:47:01 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll 2011-02-27 18:47:01 ----A---- C:\Windows\SYSWOW64\fde.dll 2011-02-27 18:47:01 ----A---- C:\Windows\system32\WUDFSvc.dll 2011-02-27 18:47:01 ----A---- C:\Windows\system32\wksprt.exe 2011-02-27 18:47:01 ----A---- C:\Windows\system32\taskhost.exe 2011-02-27 18:47:01 ----A---- C:\Windows\system32\setupcl.exe 2011-02-27 18:47:01 ----A---- C:\Windows\system32\rastls.dll 2011-02-27 18:47:01 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS 2011-02-27 18:47:01 ----A---- C:\Windows\system32\drivers\msahci.sys 2011-02-27 18:47:00 ----A---- C:\Windows\SYSWOW64\wuapi.dll 2011-02-27 18:47:00 ----A---- C:\Windows\SYSWOW64\wscapi.dll 2011-02-27 18:47:00 ----A---- C:\Windows\system32\drivers\acpi.sys 2011-02-27 18:46:59 ----A---- C:\Windows\SYSWOW64\cscobj.dll 2011-02-27 18:46:59 ----A---- C:\Windows\system32\tapisrv.dll 2011-02-27 18:46:59 ----A---- C:\Windows\system32\netiohlp.dll 2011-02-27 18:46:59 ----A---- C:\Windows\system32\msconfig.exe 2011-02-27 18:46:59 ----A---- C:\Windows\system32\mimefilt.dll 2011-02-27 18:46:59 ----A---- C:\Windows\system32\ListSvc.dll 2011-02-27 18:46:59 ----A---- C:\Windows\system32\drivers\raspptp.sys 2011-02-27 18:46:58 ----A---- C:\Windows\SYSWOW64\WinSCard.dll 2011-02-27 18:46:58 ----A---- C:\Windows\SYSWOW64\pla.dll 2011-02-27 18:46:58 ----A---- C:\Windows\SYSWOW64\msasn1.dll 2011-02-27 18:46:58 ----A---- C:\Windows\system32\lsmproxy.dll 2011-02-27 18:46:58 ----A---- C:\Windows\system32\hgcpl.dll 2011-02-27 18:46:58 ----A---- C:\Windows\system32\fdeploy.dll 2011-02-27 18:46:58 ----A---- C:\Windows\system32\drivers\sbp2port.sys 2011-02-27 18:46:58 ----A---- C:\Windows\system32\drivers\ks.sys 2011-02-27 18:46:58 ----A---- C:\Windows\system32\clusapi.dll 2011-02-27 18:46:58 ----A---- C:\Windows\system32\basecsp.dll 2011-02-27 18:46:57 ----A---- C:\Windows\SYSWOW64\winsta.dll 2011-02-27 18:46:57 ----A---- C:\Windows\SYSWOW64\rdpcore.dll 2011-02-27 18:46:57 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL 2011-02-27 18:46:57 ----A---- C:\Windows\SYSWOW64\iepeers.dll 2011-02-27 18:46:57 ----A---- C:\Windows\system32\WFS.exe 2011-02-27 18:46:57 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll 2011-02-27 18:46:57 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll 2011-02-27 18:46:56 ----A---- C:\Windows\SYSWOW64\ntshrui.dll 2011-02-27 18:46:56 ----A---- C:\Windows\SYSWOW64\imapi2.dll 2011-02-27 18:46:56 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll 2011-02-27 18:46:56 ----A---- C:\Windows\system32\riched20.dll 2011-02-27 18:46:56 ----A---- C:\Windows\system32\mtxclu.dll 2011-02-27 18:46:56 ----A---- C:\Windows\system32\drivers\iaStorV.sys 2011-02-27 18:46:56 ----A---- C:\Windows\system32\drivers\Diskdump.sys 2011-02-27 18:46:56 ----A---- C:\Windows\system32\dnscmmc.dll 2011-02-27 18:46:55 ----A---- C:\Windows\SYSWOW64\gameux.dll 2011-02-27 18:46:54 ----A---- C:\Windows\SYSWOW64\WMPEncEn.dll 2011-02-27 18:46:54 ----A---- C:\Windows\SYSWOW64\onex.dll 2011-02-27 18:46:54 ----A---- C:\Windows\SYSWOW64\mssvp.dll 2011-02-27 18:46:54 ----A---- C:\Windows\system32\sharemediacpl.dll 2011-02-27 18:46:54 ----A---- C:\Windows\system32\RpcRtRemote.dll 2011-02-27 18:46:54 ----A---- C:\Windows\system32\powercpl.dll 2011-02-27 18:46:54 ----A---- C:\Windows\system32\logoncli.dll 2011-02-27 18:46:54 ----A---- C:\Windows\system32\drivers\ksecpkg.sys 2011-02-27 18:46:53 ----A---- C:\Windows\SYSWOW64\winmm.dll 2011-02-27 18:46:53 ----A---- C:\Windows\SYSWOW64\shsvcs.dll 2011-02-27 18:46:53 ----A---- C:\Windows\SYSWOW64\netiohlp.dll 2011-02-27 18:46:53 ----A---- C:\Windows\SYSWOW64\hbaapi.dll 2011-02-27 18:46:53 ----A---- C:\Windows\SYSWOW64\autofmt.exe 2011-02-27 18:46:53 ----A---- C:\Windows\SYSWOW64\autochk.exe 2011-02-27 18:46:53 ----A---- C:\Windows\system32\themecpl.dll 2011-02-27 18:46:53 ----A---- C:\Windows\system32\SensorsCpl.dll 2011-02-27 18:46:53 ----A---- C:\Windows\system32\netjoin.dll 2011-02-27 18:46:53 ----A---- C:\Windows\system32\nci.dll 2011-02-27 18:46:53 ----A---- C:\Windows\system32\Narrator.exe 2011-02-27 18:46:53 ----A---- C:\Windows\system32\licmgr10.dll 2011-02-27 18:46:53 ----A---- C:\Windows\system32\Faultrep.dll 2011-02-27 18:46:53 ----A---- C:\Windows\system32\eudcedit.exe 2011-02-27 18:46:52 ----A---- C:\Windows\SYSWOW64\thumbcache.dll 2011-02-27 18:46:52 ----A---- C:\Windows\SYSWOW64\samcli.dll 2011-02-27 18:46:52 ----A---- C:\Windows\SYSWOW64\proquota.exe 2011-02-27 18:46:52 ----A---- C:\Windows\SYSWOW64\msutb.dll 2011-02-27 18:46:52 ----A---- C:\Windows\SYSWOW64\msinfo32.exe 2011-02-27 18:46:52 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL 2011-02-27 18:46:52 ----A---- C:\Windows\SYSWOW64\autoconv.exe 2011-02-27 18:46:52 ----A---- C:\Windows\SYSWOW64\AudioSes.dll 2011-02-27 18:46:52 ----A---- C:\Windows\system32\wkssvc.dll 2011-02-27 18:46:52 ----A---- C:\Windows\system32\vpnikeapi.dll 2011-02-27 18:46:52 ----A---- C:\Windows\system32\sppcomapi.dll 2011-02-27 18:46:52 ----A---- C:\Windows\system32\comctl32.dll 2011-02-27 18:46:52 ----A---- C:\Windows\system32\cabview.dll 2011-02-27 18:46:52 ----A---- C:\Windows\system32\autofmt.exe 2011-02-27 18:46:52 ----A---- C:\Windows\system32\autochk.exe 2011-02-27 18:46:51 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll 2011-02-27 18:46:51 ----A---- C:\Windows\SYSWOW64\srchadmin.dll 2011-02-27 18:46:51 ----A---- C:\Windows\SYSWOW64\schtasks.exe 2011-02-27 18:46:51 ----A---- C:\Windows\SYSWOW64\sbe.dll 2011-02-27 18:46:51 ----A---- C:\Windows\SYSWOW64\regapi.dll 2011-02-27 18:46:51 ----A---- C:\Windows\SYSWOW64\powercpl.dll 2011-02-27 18:46:51 ----A---- C:\Windows\SYSWOW64\mimefilt.dll 2011-02-27 18:46:51 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll 2011-02-27 18:46:51 ----A---- C:\Windows\system32\wpd_ci.dll 2011-02-27 18:46:51 ----A---- C:\Windows\system32\shsetup.dll 2011-02-27 18:46:51 ----A---- C:\Windows\system32\nshipsec.dll 2011-02-27 18:46:51 ----A---- C:\Windows\system32\fms.dll 2011-02-27 18:46:51 ----A---- C:\Windows\system32\autoconv.exe 2011-02-27 18:46:51 ----A---- C:\Windows\system32\audiodg.exe 2011-02-27 18:46:50 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll 2011-02-27 18:46:50 ----A---- C:\Windows\SYSWOW64\msihnd.dll 2011-02-27 18:46:50 ----A---- C:\Windows\SYSWOW64\mscorier.dll 2011-02-27 18:46:50 ----A---- C:\Windows\SYSWOW64\framedyn.dll 2011-02-27 18:46:50 ----A---- C:\Windows\SYSWOW64\eapphost.dll 2011-02-27 18:46:50 ----A---- C:\Windows\system32\wwanconn.dll 2011-02-27 18:46:50 ----A---- C:\Windows\system32\wlanui.dll 2011-02-27 18:46:50 ----A---- C:\Windows\system32\sdclt.exe 2011-02-27 18:46:50 ----A---- C:\Windows\system32\prntvpt.dll 2011-02-27 18:46:50 ----A---- C:\Windows\system32\mscorier.dll 2011-02-27 18:46:50 ----A---- C:\Windows\system32\drivers\wanarp.sys 2011-02-27 18:46:50 ----A---- C:\Windows\system32\drivers\scsiport.sys 2011-02-27 18:46:50 ----A---- C:\Windows\system32\bcdsrv.dll 2011-02-27 18:46:49 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL 2011-02-27 18:46:49 ----A---- C:\Windows\SYSWOW64\netid.dll 2011-02-27 18:46:49 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll 2011-02-27 18:46:49 ----A---- C:\Windows\system32\rdpsign.exe 2011-02-27 18:46:49 ----A---- C:\Windows\system32\mprddm.dll 2011-02-27 18:46:49 ----A---- C:\Windows\system32\fontext.dll 2011-02-27 18:46:49 ----A---- C:\Windows\system32\drivers\volmgrx.sys 2011-02-27 18:46:49 ----A---- C:\Windows\system32\dps.dll 2011-02-27 18:46:48 ----A---- C:\Windows\SYSWOW64\wdc.dll 2011-02-27 18:46:48 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll 2011-02-27 18:46:48 ----A---- C:\Windows\SYSWOW64\scesrv.dll 2011-02-27 18:46:48 ----A---- C:\Windows\SYSWOW64\actxprxy.dll 2011-02-27 18:46:48 ----A---- C:\Windows\system32\qedit.dll 2011-02-27 18:46:48 ----A---- C:\Windows\system32\mblctr.exe 2011-02-27 18:46:48 ----A---- C:\Windows\system32\FXSCOVER.exe 2011-02-27 18:46:48 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys 2011-02-27 18:46:48 ----A---- C:\Windows\system32\drivers\hidclass.sys 2011-02-27 18:46:48 ----A---- C:\Windows\system32\Display.dll 2011-02-27 18:46:48 ----A---- C:\Windows\system32\credssp.dll 2011-02-27 18:46:48 ----A---- C:\Windows\system32\batmeter.dll 2011-02-27 18:46:48 ----A---- C:\Windows\system32\AxInstSv.dll 2011-02-27 18:46:47 ----A---- C:\Windows\SYSWOW64\wlanpref.dll 2011-02-27 18:46:47 ----A---- C:\Windows\SYSWOW64\Vault.dll 2011-02-27 18:46:47 ----A---- C:\Windows\SYSWOW64\untfs.dll 2011-02-27 18:46:47 ----A---- C:\Windows\SYSWOW64\rastls.dll 2011-02-27 18:46:47 ----A---- C:\Windows\SYSWOW64\oleaut32.dll 2011-02-27 18:46:47 ----A---- C:\Windows\SYSWOW64\nci.dll 2011-02-27 18:46:47 ----A---- C:\Windows\system32\wmpsrcwp.dll 2011-02-27 18:46:47 ----A---- C:\Windows\system32\DiagCpl.dll 2011-02-27 18:46:46 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll 2011-02-27 18:46:46 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll 2011-02-27 18:46:46 ----A---- C:\Windows\SYSWOW64\Robocopy.exe 2011-02-27 18:46:46 ----A---- C:\Windows\SYSWOW64\licmgr10.dll 2011-02-27 18:46:46 ----A---- C:\Windows\system32\usercpl.dll 2011-02-27 18:46:46 ----A---- C:\Windows\system32\rtutils.dll 2011-02-27 18:46:46 ----A---- C:\Windows\system32\provsvc.dll 2011-02-27 18:46:46 ----A---- C:\Windows\system32\bootres.dll 2011-02-27 18:46:45 ----A---- C:\Windows\system32\wpccpl.dll 2011-02-27 18:46:45 ----A---- C:\Windows\system32\sppsvc.exe 2011-02-27 18:46:45 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll 2011-02-27 18:46:44 ----A---- C:\Windows\SYSWOW64\taskmgr.exe 2011-02-27 18:46:44 ----A---- C:\Windows\SYSWOW64\mtxclu.dll 2011-02-27 18:46:44 ----A---- C:\Windows\SYSWOW64\DxpTaskSync.dll 2011-02-27 18:46:44 ----A---- C:\Windows\SYSWOW64\Display.dll 2011-02-27 18:46:44 ----A---- C:\Windows\system32\SndVolSSO.dll 2011-02-27 18:46:44 ----A---- C:\Windows\system32\rasppp.dll 2011-02-27 18:46:44 ----A---- C:\Windows\system32\dxdiagn.dll 2011-02-27 18:46:44 ----A---- C:\Windows\system32\drivers\winhv.sys 2011-02-27 18:46:44 ----A---- C:\Windows\system32\drivers\rdyboost.sys 2011-02-27 18:46:44 ----A---- C:\Windows\system32\dot3cfg.dll 2011-02-27 18:46:43 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll 2011-02-27 18:46:43 ----A---- C:\Windows\SYSWOW64\userinit.exe 2011-02-27 18:46:43 ----A---- C:\Windows\SYSWOW64\termmgr.dll 2011-02-27 18:46:43 ----A---- C:\Windows\SYSWOW64\puiobj.dll 2011-02-27 18:46:43 ----A---- C:\Windows\SYSWOW64\mssphtb.dll 2011-02-27 18:46:43 ----A---- C:\Windows\SYSWOW64\eudcedit.exe 2011-02-27 18:46:43 ----A---- C:\Windows\system32\taskmgr.exe 2011-02-27 18:46:43 ----A---- C:\Windows\system32\shdocvw.dll 2011-02-27 18:46:43 ----A---- C:\Windows\system32\prnfldr.dll 2011-02-27 18:46:43 ----A---- C:\Windows\system32\pdh.dll 2011-02-27 18:46:43 ----A---- C:\Windows\system32\hbaapi.dll 2011-02-27 18:46:42 ----A---- C:\Windows\SYSWOW64\shsetup.dll 2011-02-27 18:46:42 ----A---- C:\Windows\SYSWOW64\rasppp.dll 2011-02-27 18:46:42 ----A---- C:\Windows\SYSWOW64\logoncli.dll 2011-02-27 18:46:42 ----A---- C:\Windows\system32\WPDShServiceObj.dll 2011-02-27 18:46:42 ----A---- C:\Windows\system32\untfs.dll 2011-02-27 18:46:42 ----A---- C:\Windows\system32\proquota.exe 2011-02-27 18:46:42 ----A---- C:\Windows\system32\MSAC3ENC.DLL 2011-02-27 18:46:42 ----A---- C:\Windows\system32\drivers\mountmgr.sys 2011-02-27 18:46:42 ----A---- C:\Windows\system32\drivers\ataport.sys 2011-02-27 18:46:41 ----A---- C:\Windows\SYSWOW64\wiadefui.dll 2011-02-27 18:46:41 ----A---- C:\Windows\SYSWOW64\sppcomapi.dll 2011-02-27 18:46:41 ----A---- C:\Windows\SYSWOW64\FirewallControlPanel.dll 2011-02-27 18:46:41 ----A---- C:\Windows\SYSWOW64\cabview.dll 2011-02-27 18:46:41 ----A---- C:\Windows\system32\userinit.exe 2011-02-27 18:46:41 ----A---- C:\Windows\system32\rdpcorekmts.dll 2011-02-27 18:46:41 ----A---- C:\Windows\system32\accessibilitycpl.dll 2011-02-27 18:46:40 ----A---- C:\Windows\SYSWOW64\themecpl.dll 2011-02-27 18:46:40 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll 2011-02-27 18:46:39 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL 2011-02-27 18:46:39 ----A---- C:\Windows\SYSWOW64\dnscmmc.dll 2011-02-27 18:46:39 ----A---- C:\Windows\system32\zipfldr.dll 2011-02-27 18:46:39 ----A---- C:\Windows\system32\webcheck.dll 2011-02-27 18:46:39 ----A---- C:\Windows\system32\slui.exe 2011-02-27 18:46:39 ----A---- C:\Windows\system32\msieftp.dll 2011-02-27 18:46:39 ----A---- C:\Windows\system32\drivers\storvsc.sys 2011-02-27 18:46:39 ----A---- C:\Windows\system32\defaultlocationcpl.dll 2011-02-27 18:46:38 ----A---- C:\Windows\SYSWOW64\tapisrv.dll 2011-02-27 18:46:38 ----A---- C:\Windows\SYSWOW64\scecli.dll 2011-02-27 18:46:38 ----A---- C:\Windows\SYSWOW64\hgcpl.dll 2011-02-27 18:46:38 ----A---- C:\Windows\system32\sud.dll 2011-02-27 18:46:38 ----A---- C:\Windows\system32\drivers\tssecsrv.sys 2011-02-27 18:46:37 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll 2011-02-27 18:46:37 ----A---- C:\Windows\SYSWOW64\mscories.dll 2011-02-27 18:46:37 ----A---- C:\Windows\SYSWOW64\mscms.dll 2011-02-27 18:46:37 ----A---- C:\Windows\SYSWOW64\mprddm.dll 2011-02-27 18:46:37 ----A---- C:\Windows\SYSWOW64\localsec.dll 2011-02-27 18:46:37 ----A---- C:\Windows\SYSWOW64\iasacct.dll 2011-02-27 18:46:37 ----A---- C:\Windows\SYSWOW64\fontext.dll 2011-02-27 18:46:37 ----A---- C:\Windows\system32\taskbarcpl.dll 2011-02-27 18:46:37 ----A---- C:\Windows\system32\qdvd.dll 2011-02-27 18:46:37 ----A---- C:\Windows\system32\OnLineIDCpl.dll 2011-02-27 18:46:37 ----A---- C:\Windows\system32\networkmap.dll 2011-02-27 18:46:37 ----A---- C:\Windows\system32\dot3svc.dll 2011-02-27 18:46:37 ----A---- C:\Windows\system32\DeviceCenter.dll 2011-02-27 18:46:37 ----A---- C:\Windows\system32\cryptui.dll 2011-02-27 18:46:37 ----A---- C:\Windows\system32\ActionCenter.dll 2011-02-27 18:46:36 ----A---- C:\Windows\SYSWOW64\wlanui.dll 2011-02-27 18:46:36 ----A---- C:\Windows\SYSWOW64\VAN.dll 2011-02-27 18:46:36 ----A---- C:\Windows\SYSWOW64\usercpl.dll 2011-02-27 18:46:36 ----A---- C:\Windows\SYSWOW64\qedit.dll 2011-02-27 18:46:36 ----A---- C:\Windows\SYSWOW64\prntvpt.dll 2011-02-27 18:46:36 ----A---- C:\Windows\SYSWOW64\PerfCenterCPL.dll 2011-02-27 18:46:36 ----A---- C:\Windows\SYSWOW64\batmeter.dll 2011-02-27 18:46:36 ----A---- C:\Windows\system32\twext.dll 2011-02-27 18:46:36 ----A---- C:\Windows\system32\srcore.dll 2011-02-27 18:46:36 ----A---- C:\Windows\system32\rdpwsx.dll 2011-02-27 18:46:35 ----A---- C:\Windows\SYSWOW64\w32tm.exe 2011-02-27 18:46:35 ----A---- C:\Windows\SYSWOW64\SndVol.exe 2011-02-27 18:46:35 ----A---- C:\Windows\SYSWOW64\qdvd.dll 2011-02-27 18:46:35 ----A---- C:\Windows\SYSWOW64\netcenter.dll 2011-02-27 18:46:35 ----A---- C:\Windows\system32\uxlib.dll 2011-02-27 18:46:35 ----A---- C:\Windows\system32\recovery.dll 2011-02-27 18:46:35 ----A---- C:\Windows\system32\OobeFldr.dll 2011-02-27 18:46:35 ----A---- C:\Windows\system32\drivers\usbhub.sys 2011-02-27 18:46:35 ----A---- C:\Windows\system32\drivers\hwpolicy.sys 2011-02-27 18:46:35 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS 2011-02-27 18:46:35 ----A---- C:\Windows\system32\bcdedit.exe 2011-02-27 18:46:35 ----A---- C:\Windows\system32\azroleui.dll 2011-02-27 18:46:34 ----A---- C:\Windows\SYSWOW64\zipfldr.dll 2011-02-27 18:46:34 ----A---- C:\Windows\SYSWOW64\spwizeng.dll 2011-02-27 18:46:34 ----A---- C:\Windows\SYSWOW64\azroleui.dll 2011-02-27 18:46:34 ----A---- C:\Windows\SYSWOW64\accessibilitycpl.dll 2011-02-27 18:46:34 ----A---- C:\Windows\system32\tzutil.exe 2011-02-27 18:46:34 ----A---- C:\Windows\system32\sisbkup.dll 2011-02-27 18:46:34 ----A---- C:\Windows\system32\MediaMetadataHandler.dll 2011-02-27 18:46:34 ----A---- C:\Windows\system32\isoburn.exe 2011-02-27 18:46:34 ----A---- C:\Windows\system32\efscore.dll 2011-02-27 18:46:34 ----A---- C:\Windows\system32\dsuiext.dll 2011-02-27 18:46:34 ----A---- C:\Windows\system32\cca.dll 2011-02-27 18:46:34 ----A---- C:\Windows\system32\asycfilt.dll 2011-02-27 18:46:33 ----A---- C:\Windows\SYSWOW64\MSAC3ENC.DLL 2011-02-27 18:46:33 ----A---- C:\Windows\SYSWOW64\fdeploy.dll 2011-02-27 18:46:33 ----A---- C:\Windows\SYSWOW64\cryptui.dll 2011-02-27 18:46:33 ----A---- C:\Windows\system32\systemcpl.dll 2011-02-27 18:46:33 ----A---- C:\Windows\system32\syncui.dll 2011-02-27 18:46:33 ----A---- C:\Windows\system32\shwebsvc.dll 2011-02-27 18:46:33 ----A---- C:\Windows\system32\sdcpl.dll 2011-02-27 18:46:33 ----A---- C:\Windows\system32\recdisc.exe 2011-02-27 18:46:33 ----A---- C:\Windows\system32\netplwiz.dll 2011-02-27 18:46:33 ----A---- C:\Windows\system32\httpapi.dll 2011-02-27 18:46:33 ----A---- C:\Windows\system32\fvecpl.dll 2011-02-27 18:46:33 ----A---- C:\Windows\system32\drivers\mpio.sys 2011-02-27 18:46:33 ----A---- C:\Windows\system32\autoplay.dll 2011-02-27 18:46:32 ----A---- C:\Windows\SYSWOW64\wusa.exe 2011-02-27 18:46:32 ----A---- C:\Windows\SYSWOW64\networkmap.dll 2011-02-27 18:46:32 ----A---- C:\Windows\SYSWOW64\netjoin.dll 2011-02-27 18:46:32 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll 2011-02-27 18:46:32 ----A---- C:\Windows\SYSWOW64\Faultrep.dll 2011-02-27 18:46:32 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll 2011-02-27 18:46:32 ----A---- C:\Windows\SYSWOW64\adsldp.dll 2011-02-27 18:46:32 ----A---- C:\Windows\system32\wlanmsm.dll 2011-02-27 18:46:32 ----A---- C:\Windows\system32\sysclass.dll 2011-02-27 18:46:32 ----A---- C:\Windows\system32\sspisrv.dll 2011-02-27 18:46:32 ----A---- C:\Windows\system32\sdrsvc.dll 2011-02-27 18:46:32 ----A---- C:\Windows\system32\ncryptui.dll 2011-02-27 18:46:32 ----A---- C:\Windows\system32\msvidc32.dll 2011-02-27 18:46:32 ----A---- C:\Windows\system32\drivers\rdpdr.sys 2011-02-27 18:46:32 ----A---- C:\Windows\system32\certcli.dll 2011-02-27 18:46:32 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll 2011-02-27 18:46:32 ----A---- C:\Windows\system32\appinfo.dll 2011-02-27 18:46:32 ----A---- C:\Windows\system32\ActionCenterCPL.dll 2011-02-27 18:46:31 ----A---- C:\Windows\SYSWOW64\prnfldr.dll 2011-02-27 18:46:31 ----A---- C:\Windows\SYSWOW64\OnLineIDCpl.dll 2011-02-27 18:46:31 ----A---- C:\Windows\system32\spwizeng.dll 2011-02-27 18:46:31 ----A---- C:\Windows\system32\MFPlay.dll 2011-02-27 18:46:30 ----A---- C:\Windows\SYSWOW64\sud.dll 2011-02-27 18:46:30 ----A---- C:\Windows\SYSWOW64\photowiz.dll 2011-02-27 18:46:30 ----A---- C:\Windows\SYSWOW64\msieftp.dll 2011-02-27 18:46:30 ----A---- C:\Windows\SYSWOW64\MediaMetadataHandler.dll 2011-02-27 18:46:30 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll 2011-02-27 18:46:30 ----A---- C:\Windows\SYSWOW64\iasrad.dll 2011-02-27 18:46:30 ----A---- C:\Windows\SYSWOW64\ftp.exe 2011-02-27 18:46:30 ----A---- C:\Windows\SYSWOW64\dot3cfg.dll 2011-02-27 18:46:30 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll 2011-02-27 18:46:30 ----A---- C:\Windows\SYSWOW64\credssp.dll 2011-02-27 18:46:30 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll 2011-02-27 18:46:30 ----A---- C:\Windows\system32\vdsutil.dll 2011-02-27 18:46:30 ----A---- C:\Windows\system32\termmgr.dll 2011-02-27 18:46:30 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll 2011-02-27 18:46:30 ----A---- C:\Windows\system32\sethc.exe 2011-02-27 18:46:30 ----A---- C:\Windows\system32\rstrui.exe 2011-02-27 18:46:30 ----A---- C:\Windows\system32\ReAgent.dll 2011-02-27 18:46:30 ----A---- C:\Windows\system32\odbccp32.dll 2011-02-27 18:46:30 ----A---- C:\Windows\system32\ntlanman.dll 2011-02-27 18:46:30 ----A---- C:\Windows\system32\msscp.dll 2011-02-27 18:46:30 ----A---- C:\Windows\system32\mshtmled.dll 2011-02-27 18:46:30 ----A---- C:\Windows\system32\msfeedsbs.dll 2011-02-27 18:46:29 ----A---- C:\Windows\SYSWOW64\sisbkup.dll 2011-02-27 18:46:29 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll 2011-02-27 18:46:29 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll 2011-02-27 18:46:29 ----A---- C:\Windows\SYSWOW64\ifsutil.dll 2011-02-27 18:46:29 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe 2011-02-27 18:46:29 ----A---- C:\Windows\SYSWOW64\iesysprep.dll 2011-02-27 18:46:29 ----A---- C:\Windows\SYSWOW64\efscore.dll 2011-02-27 18:46:29 ----A---- C:\Windows\SYSWOW64\ActionCenterCPL.dll 2011-02-27 18:46:29 ----A---- C:\Windows\system32\wwanprotdim.dll 2011-02-27 18:46:29 ----A---- C:\Windows\system32\UserAccountControlSettings.dll 2011-02-27 18:46:29 ----A---- C:\Windows\system32\tsgqec.dll 2011-02-27 18:46:29 ----A---- C:\Windows\system32\sqlcese30.dll 2011-02-27 18:46:29 ----A---- C:\Windows\system32\secur32.dll 2011-02-27 18:46:29 ----A---- C:\Windows\system32\rdpd3d.dll 2011-02-27 18:46:29 ----A---- C:\Windows\system32\odbctrac.dll 2011-02-27 18:46:29 ----A---- C:\Windows\system32\iTVData.dll 2011-02-27 18:46:29 ----A---- C:\Windows\system32\iprtrmgr.dll 2011-02-27 18:46:29 ----A---- C:\Windows\system32\drivers\vmstorfl.sys 2011-02-27 18:46:29 ----A---- C:\Windows\system32\drivers\ndproxy.sys 2011-02-27 18:46:28 ----A---- C:\Windows\SYSWOW64\wmpmde.dll 2011-02-27 18:46:28 ----A---- C:\Windows\SYSWOW64\syncui.dll 2011-02-27 18:46:28 ----A---- C:\Windows\SYSWOW64\rtutils.dll 2011-02-27 18:46:28 ----A---- C:\Windows\SYSWOW64\ntlanman.dll 2011-02-27 18:46:28 ----A---- C:\Windows\SYSWOW64\dskquoui.dll 2011-02-27 18:46:28 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll 2011-02-27 18:46:28 ----A---- C:\Windows\SYSWOW64\autoplay.dll 2011-02-27 18:46:28 ----A---- C:\Windows\system32\wmdrmsdk.dll 2011-02-27 18:46:28 ----A---- C:\Windows\system32\srvcli.dll 2011-02-27 18:46:28 ----A---- C:\Windows\system32\slwga.dll 2011-02-27 18:46:28 ----A---- C:\Windows\system32\nslookup.exe продължение: 2011-02-27 18:46:28 ----A---- C:\Windows\system32\msiexec.exe 2011-02-27 18:46:28 ----A---- C:\Windows\system32\iyuv_32.dll 2011-02-27 18:46:28 ----A---- C:\Windows\system32\drmmgrtn.dll 2011-02-27 18:46:27 ----A---- C:\Windows\SYSWOW64\systemcpl.dll 2011-02-27 18:46:27 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll 2011-02-27 18:46:27 ----A---- C:\Windows\SYSWOW64\sethc.exe 2011-02-27 18:46:27 ----A---- C:\Windows\SYSWOW64\riched20.dll 2011-02-27 18:46:27 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll 2011-02-27 18:46:27 ----A---- C:\Windows\SYSWOW64\ntprint.dll 2011-02-27 18:46:27 ----A---- C:\Windows\SYSWOW64\nshwfp.dll 2011-02-27 18:46:27 ----A---- C:\Windows\SYSWOW64\blackbox.dll 2011-02-27 18:46:27 ----A---- C:\Windows\system32\wavemsp.dll 2011-02-27 18:46:27 ----A---- C:\Windows\system32\srrstr.dll 2011-02-27 18:46:27 ----A---- C:\Windows\system32\ntprint.dll 2011-02-27 18:46:27 ----A---- C:\Windows\system32\NAPHLPR.DLL 2011-02-27 18:46:27 ----A---- C:\Windows\system32\DevicePairingFolder.dll 2011-02-27 18:46:27 ----A---- C:\Windows\system32\bcdboot.exe 2011-02-27 18:46:27 ----A---- C:\Windows\system32\acppage.dll 2011-02-27 18:46:26 ----A---- C:\Windows\SYSWOW64\wmpsrcwp.dll 2011-02-27 18:46:26 ----A---- C:\Windows\SYSWOW64\netplwiz.dll 2011-02-27 18:46:26 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL 2011-02-27 18:46:26 ----A---- C:\Windows\SYSWOW64\migisol.dll 2011-02-27 18:46:26 ----A---- C:\Windows\SYSWOW64\httpapi.dll 2011-02-27 18:46:26 ----A---- C:\Windows\SYSWOW64\fms.dll 2011-02-27 18:46:26 ----A---- C:\Windows\SYSWOW64\cdosys.dll 2011-02-27 18:46:26 ----A---- C:\Windows\SYSWOW64\activeds.dll 2011-02-27 18:46:26 ----A---- C:\Windows\system32\wkscli.dll 2011-02-27 18:46:26 ----A---- C:\Windows\system32\TSpkg.dll 2011-02-27 18:46:26 ----A---- C:\Windows\system32\sppnp.dll 2011-02-27 18:46:26 ----A---- C:\Windows\system32\remotepg.dll 2011-02-27 18:46:26 ----A---- C:\Windows\system32\networkexplorer.dll 2011-02-27 18:46:26 ----A---- C:\Windows\system32\certprop.dll 2011-02-27 18:46:26 ----A---- C:\Windows\system32\cabinet.dll 2011-02-27 18:46:25 ----A---- C:\Windows\SYSWOW64\wuwebv.dll 2011-02-27 18:46:25 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll 2011-02-27 18:46:25 ----A---- C:\Windows\SYSWOW64\wavemsp.dll 2011-02-27 18:46:25 ----A---- C:\Windows\SYSWOW64\ReAgent.dll 2011-02-27 18:46:25 ----A---- C:\Windows\SYSWOW64\provsvc.dll 2011-02-27 18:46:25 ----A---- C:\Windows\SYSWOW64\nshipsec.dll 2011-02-27 18:46:25 ----A---- C:\Windows\SYSWOW64\nlaapi.dll 2011-02-27 18:46:25 ----A---- C:\Windows\SYSWOW64\msftedit.dll 2011-02-27 18:46:25 ----A---- C:\Windows\SYSWOW64\isoburn.exe 2011-02-27 18:46:25 ----A---- C:\Windows\SYSWOW64\asycfilt.dll 2011-02-27 18:46:25 ----A---- C:\Windows\system32\wsnmp32.dll 2011-02-27 18:46:25 ----A---- C:\Windows\system32\wmpdxm.dll 2011-02-27 18:46:25 ----A---- C:\Windows\system32\WinSCard.dll 2011-02-27 18:46:25 ----A---- C:\Windows\system32\PresentationSettings.exe 2011-02-27 18:46:25 ----A---- C:\Windows\system32\ftp.exe 2011-02-27 18:46:25 ----A---- C:\Windows\system32\dfrgui.exe 2011-02-27 18:46:25 ----A---- C:\Windows\system32\cdosys.dll 2011-02-27 18:46:24 ----A---- C:\Windows\SYSWOW64\wvc.dll 2011-02-27 18:46:24 ----A---- C:\Windows\SYSWOW64\wtsapi32.dll 2011-02-27 18:46:24 ----A---- C:\Windows\SYSWOW64\wimgapi.dll 2011-02-27 18:46:24 ----A---- C:\Windows\SYSWOW64\tzutil.exe 2011-02-27 18:46:24 ----A---- C:\Windows\SYSWOW64\ocsetup.exe 2011-02-27 18:46:24 ----A---- C:\Windows\SYSWOW64\KernelBase.dll 2011-02-27 18:46:24 ----A---- C:\Windows\SYSWOW64\dsuiext.dll 2011-02-27 18:46:24 ----A---- C:\Windows\SYSWOW64\dot3ui.dll 2011-02-27 18:46:24 ----A---- C:\Windows\SYSWOW64\dfrgui.exe 2011-02-27 18:46:24 ----A---- C:\Windows\system32\wvc.dll 2011-02-27 18:46:24 ----A---- C:\Windows\system32\wuwebv.dll 2011-02-27 18:46:24 ----A---- C:\Windows\system32\wsqmcons.exe 2011-02-27 18:46:24 ----A---- C:\Windows\system32\wmdrmdev.dll 2011-02-27 18:46:24 ----A---- C:\Windows\system32\WerFaultSecure.exe 2011-02-27 18:46:24 ----A---- C:\Windows\system32\net1.exe 2011-02-27 18:46:24 ----A---- C:\Windows\system32\mfps.dll 2011-02-27 18:46:24 ----A---- C:\Windows\system32\blackbox.dll 2011-02-27 18:46:23 ----A---- C:\Windows\twain_32.dll 2011-02-27 18:46:23 ----A---- C:\Windows\SYSWOW64\webcheck.dll 2011-02-27 18:46:23 ----A---- C:\Windows\SYSWOW64\twext.dll 2011-02-27 18:46:23 ----A---- C:\Windows\SYSWOW64\shdocvw.dll 2011-02-27 18:46:23 ----A---- C:\Windows\SYSWOW64\mstask.dll 2011-02-27 18:46:23 ----A---- C:\Windows\SYSWOW64\AdmTmpl.dll 2011-02-27 18:46:23 ----A---- C:\Windows\system32\WUDFPlatform.dll 2011-02-27 18:46:23 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2011-02-27 18:46:23 ----A---- C:\Windows\system32\OpcServices.dll 2011-02-27 18:46:23 ----A---- C:\Windows\system32\msyuv.dll 2011-02-27 18:46:23 ----A---- C:\Windows\system32\mapistub.dll 2011-02-27 18:46:23 ----A---- C:\Windows\system32\mapi32.dll 2011-02-27 18:46:23 ----A---- C:\Windows\system32\drivers\dxgmms1.sys 2011-02-27 18:46:22 ----A---- C:\Windows\SYSWOW64\uxlib.dll 2011-02-27 18:46:22 ----A---- C:\Windows\SYSWOW64\slwga.dll 2011-02-27 18:46:22 ----A---- C:\Windows\SYSWOW64\setupugc.exe 2011-02-27 18:46:22 ----A---- C:\Windows\SYSWOW64\qcap.dll 2011-02-27 18:46:22 ----A---- C:\Windows\SYSWOW64\qasf.dll 2011-02-27 18:46:22 ----A---- C:\Windows\SYSWOW64\occache.dll 2011-02-27 18:46:22 ----A---- C:\Windows\SYSWOW64\msrating.dll 2011-02-27 18:46:22 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll 2011-02-27 18:46:22 ----A---- C:\Windows\system32\unimdmat.dll 2011-02-27 18:46:22 ----A---- C:\Windows\system32\tsbyuv.dll 2011-02-27 18:46:22 ----A---- C:\Windows\system32\seclogon.dll 2011-02-27 18:46:22 ----A---- C:\Windows\system32\msrle32.dll 2011-02-27 18:46:22 ----A---- C:\Windows\system32\iscsium.dll 2011-02-27 18:46:22 ----A---- C:\Windows\system32\ifsutil.dll 2011-02-27 18:46:22 ----A---- C:\Windows\system32\diskraid.exe 2011-02-27 18:46:21 ----A---- C:\Windows\SYSWOW64\WPDShServiceObj.dll 2011-02-27 18:46:21 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll 2011-02-27 18:46:21 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll 2011-02-27 18:46:21 ----A---- C:\Windows\SYSWOW64\nslookup.exe 2011-02-27 18:46:21 ----A---- C:\Windows\SYSWOW64\msvfw32.dll 2011-02-27 18:46:21 ----A---- C:\Windows\SYSWOW64\mciavi32.dll 2011-02-27 18:46:21 ----A---- C:\Windows\SYSWOW64\imgutil.dll 2011-02-27 18:46:21 ----A---- C:\Windows\SYSWOW64\DevicePairingFolder.dll 2011-02-27 18:46:21 ----A---- C:\Windows\SYSWOW64\clusapi.dll 2011-02-27 18:46:21 ----A---- C:\Windows\SYSWOW64\audiodev.dll 2011-02-27 18:46:21 ----A---- C:\Windows\system32\wmpshell.dll 2011-02-27 18:46:21 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe 2011-02-27 18:46:21 ----A---- C:\Windows\system32\rdpencom.dll 2011-02-27 18:46:21 ----A---- C:\Windows\system32\perfmon.exe 2011-02-27 18:46:21 ----A---- C:\Windows\system32\muifontsetup.dll 2011-02-27 18:46:21 ----A---- C:\Windows\system32\drivers\umbus.sys 2011-02-27 18:46:21 ----A---- C:\Windows\system32\d3d10level9.dll 2011-02-27 18:46:20 ----A---- C:\Windows\SYSWOW64\wimserv.exe 2011-02-27 18:46:20 ----A---- C:\Windows\SYSWOW64\TSpkg.dll 2011-02-27 18:46:20 ----A---- C:\Windows\SYSWOW64\remotepg.dll 2011-02-27 18:46:20 ----A---- C:\Windows\SYSWOW64\rdpencom.dll 2011-02-27 18:46:20 ----A---- C:\Windows\SYSWOW64\raschap.dll 2011-02-27 18:46:20 ----A---- C:\Windows\SYSWOW64\perfmon.exe 2011-02-27 18:46:20 ----A---- C:\Windows\SYSWOW64\msscp.dll 2011-02-27 18:46:20 ----A---- C:\Windows\SYSWOW64\diskraid.exe 2011-02-27 18:46:20 ----A---- C:\Windows\SYSWOW64\acppage.dll 2011-02-27 18:46:20 ----A---- C:\Windows\system32\umb.dll 2011-02-27 18:46:20 ----A---- C:\Windows\system32\tlscsp.dll 2011-02-27 18:46:20 ----A---- C:\Windows\system32\runonce.exe 2011-02-27 18:46:20 ----A---- C:\Windows\system32\qasf.dll 2011-02-27 18:46:20 ----A---- C:\Windows\system32\netutils.dll 2011-02-27 18:46:20 ----A---- C:\Windows\system32\NAPCRYPT.DLL 2011-02-27 18:46:20 ----A---- C:\Windows\system32\inseng.dll 2011-02-27 18:46:20 ----A---- C:\Windows\system32\FXSAPI.dll 2011-02-27 18:46:20 ----A---- C:\Windows\system32\dbghelp.dll 2011-02-27 18:46:20 ----A---- C:\Windows\system32\browser.dll 2011-02-27 18:46:20 ----A---- C:\Windows\system32\AzSqlExt.dll 2011-02-27 18:46:20 ----A---- C:\Windows\system32\ActionQueue.dll 2011-02-27 18:46:20 ----A---- C:\Windows\bfsvc.exe 2011-02-27 18:46:19 ----A---- C:\Windows\SYSWOW64\QUTIL.DLL 2011-02-27 18:46:19 ----A---- C:\Windows\SYSWOW64\odbccp32.dll 2011-02-27 18:46:19 ----A---- C:\Windows\SYSWOW64\NAPCRYPT.DLL 2011-02-27 18:46:19 ----A---- C:\Windows\SYSWOW64\input.dll 2011-02-27 18:46:19 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll 2011-02-27 18:46:19 ----A---- C:\Windows\system32\wpdwcn.dll 2011-02-27 18:46:19 ----A---- C:\Windows\system32\WMADMOD.DLL 2011-02-27 18:46:19 ----A---- C:\Windows\system32\wiavideo.dll 2011-02-27 18:46:19 ----A---- C:\Windows\system32\syssetup.dll 2011-02-27 18:46:19 ----A---- C:\Windows\system32\raschap.dll 2011-02-27 18:46:18 ----A---- C:\Windows\SYSWOW64\ocsetapi.dll 2011-02-27 18:46:18 ----A---- C:\Windows\SYSWOW64\networkexplorer.dll 2011-02-27 18:46:18 ----A---- C:\Windows\system32\MdSched.exe 2011-02-27 18:46:17 ----A---- C:\Windows\SYSWOW64\wmpdxm.dll 2011-02-27 18:46:17 ----A---- C:\Windows\SYSWOW64\vpnikeapi.dll 2011-02-27 18:46:17 ----A---- C:\Windows\SYSWOW64\UserAccountControlSettings.dll 2011-02-27 18:46:17 ----A---- C:\Windows\SYSWOW64\olepro32.dll 2011-02-27 18:46:17 ----A---- C:\Windows\system32\WMVSDECD.DLL 2011-02-27 18:46:17 ----A---- C:\Windows\system32\vdsbas.dll 2011-02-27 18:46:17 ----A---- C:\Windows\system32\PrintIsolationProxy.dll 2011-02-27 18:46:16 ----A---- C:\Windows\SYSWOW64\wpdwcn.dll 2011-02-27 18:46:16 ----A---- C:\Windows\SYSWOW64\vdsbas.dll 2011-02-27 18:46:16 ----A---- C:\Windows\SYSWOW64\runonce.exe 2011-02-27 18:46:16 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe 2011-02-27 18:46:16 ----A---- C:\Windows\SYSWOW64\onexui.dll 2011-02-27 18:46:16 ----A---- C:\Windows\SYSWOW64\msvidc32.dll 2011-02-27 18:46:16 ----A---- C:\Windows\SYSWOW64\MFPlay.dll 2011-02-27 18:46:16 ----A---- C:\Windows\SYSWOW64\logagent.exe 2011-02-27 18:46:16 ----A---- C:\Windows\SYSWOW64\iTVData.dll 2011-02-27 18:46:16 ----A---- C:\Windows\SYSWOW64\inseng.dll 2011-02-27 18:46:16 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll 2011-02-27 18:46:16 ----A---- C:\Windows\SYSWOW64\dxdiagn.dll 2011-02-27 18:46:16 ----A---- C:\Windows\system32\nltest.exe 2011-02-27 18:46:16 ----A---- C:\Windows\system32\mstask.dll 2011-02-27 18:46:16 ----A---- C:\Windows\system32\Mcx2Svc.dll 2011-02-27 18:46:16 ----A---- C:\Windows\system32\drivers\tcpipreg.sys 2011-02-27 18:46:16 ----A---- C:\Windows\system32\drivers\rmcast.sys 2011-02-27 18:46:16 ----A---- C:\Windows\system32\bitsadmin.exe 2011-02-27 18:46:15 ----A---- C:\Windows\SYSWOW64\wudriver.dll 2011-02-27 18:46:15 ----A---- C:\Windows\SYSWOW64\wmpshell.dll 2011-02-27 18:46:15 ----A---- C:\Windows\SYSWOW64\wmdrmdev.dll 2011-02-27 18:46:15 ----A---- C:\Windows\SYSWOW64\unimdmat.dll 2011-02-27 18:46:15 ----A---- C:\Windows\SYSWOW64\sqlcese30.dll 2011-02-27 18:46:15 ----A---- C:\Windows\SYSWOW64\shacct.dll 2011-02-27 18:46:15 ----A---- C:\Windows\SYSWOW64\msiexec.exe 2011-02-27 18:46:15 ----A---- C:\Windows\SYSWOW64\lsmproxy.dll 2011-02-27 18:46:15 ----A---- C:\Windows\SYSWOW64\iscsium.dll 2011-02-27 18:46:15 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll 2011-02-27 18:46:15 ----A---- C:\Windows\SYSWOW64\bitsadmin.exe 2011-02-27 18:46:15 ----A---- C:\Windows\system32\wudriver.dll 2011-02-27 18:46:15 ----A---- C:\Windows\system32\WPDSp.dll 2011-02-27 18:46:15 ----A---- C:\Windows\system32\WMSPDMOD.DLL 2011-02-27 18:46:15 ----A---- C:\Windows\system32\wmdrmnet.dll 2011-02-27 18:46:15 ----A---- C:\Windows\system32\vss_ps.dll 2011-02-27 18:46:15 ----A---- C:\Windows\system32\tabcal.exe 2011-02-27 18:46:15 ----A---- C:\Windows\system32\shacct.dll 2011-02-27 18:46:15 ----A---- C:\Windows\system32\secproc_ssp_isv.dll 2011-02-27 18:46:15 ----A---- C:\Windows\system32\QSVRMGMT.DLL 2011-02-27 18:46:15 ----A---- C:\Windows\system32\qcap.dll 2011-02-27 18:46:15 ----A---- C:\Windows\system32\mssphtb.dll 2011-02-27 18:46:15 ----A---- C:\Windows\system32\msnetobj.dll 2011-02-27 18:46:15 ----A---- C:\Windows\system32\logman.exe 2011-02-27 18:46:15 ----A---- C:\Windows\system32\CscMig.dll 2011-02-27 18:46:15 ----A---- C:\Windows\system32\cscapi.dll 2011-02-27 18:46:14 ----A---- C:\Windows\SYSWOW64\WPDSp.dll 2011-02-27 18:46:14 ----A---- C:\Windows\SYSWOW64\srvcli.dll 2011-02-27 18:46:14 ----A---- C:\Windows\SYSWOW64\rdpd3d.dll 2011-02-27 18:46:14 ----A---- C:\Windows\SYSWOW64\PortableDeviceSyncProvider.dll 2011-02-27 18:46:14 ----A---- C:\Windows\SYSWOW64\PortableDeviceStatus.dll 2011-02-27 18:46:14 ----A---- C:\Windows\SYSWOW64\pdh.dll 2011-02-27 18:46:14 ----A---- C:\Windows\SYSWOW64\OpcServices.dll 2011-02-27 18:46:14 ----A---- C:\Windows\SYSWOW64\olethk32.dll 2011-02-27 18:46:14 ----A---- C:\Windows\SYSWOW64\odbctrac.dll 2011-02-27 18:46:14 ----A---- C:\Windows\SYSWOW64\ncryptui.dll 2011-02-27 18:46:14 ----A---- C:\Windows\SYSWOW64\mprapi.dll 2011-02-27 18:46:14 ----A---- C:\Windows\SYSWOW64\logman.exe 2011-02-27 18:46:14 ----A---- C:\Windows\SYSWOW64\cscapi.dll 2011-02-27 18:46:14 ----A---- C:\Windows\system32\vmictimeprovider.dll 2011-02-27 18:46:14 ----A---- C:\Windows\system32\spbcd.dll 2011-02-27 18:46:14 ----A---- C:\Windows\system32\secproc_ssp.dll 2011-02-27 18:46:14 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe 2011-02-27 18:46:14 ----A---- C:\Windows\system32\qdv.dll 2011-02-27 18:46:14 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll 2011-02-27 18:46:14 ----A---- C:\Windows\system32\PortableDeviceStatus.dll 2011-02-27 18:46:14 ----A---- C:\Windows\system32\fphc.dll 2011-02-27 18:46:14 ----A---- C:\Windows\system32\drivers\ndisuio.sys 2011-02-27 18:46:14 ----A---- C:\Windows\system32\dot3ui.dll 2011-02-27 18:46:13 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll 2011-02-27 18:46:13 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL 2011-02-27 18:46:13 ----A---- C:\Windows\SYSWOW64\wiavideo.dll 2011-02-27 18:46:13 ----A---- C:\Windows\SYSWOW64\utildll.dll 2011-02-27 18:46:13 ----A---- C:\Windows\SYSWOW64\tsgqec.dll 2011-02-27 18:46:13 ----A---- C:\Windows\SYSWOW64\takeown.exe 2011-02-27 18:46:13 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL 2011-02-27 18:46:13 ----A---- C:\Windows\SYSWOW64\mshtmled.dll 2011-02-27 18:46:13 ----A---- C:\Windows\SYSWOW64\mapistub.dll 2011-02-27 18:46:13 ----A---- C:\Windows\SYSWOW64\mapi32.dll 2011-02-27 18:46:13 ----A---- C:\Windows\SYSWOW64\fphc.dll 2011-02-27 18:46:13 ----A---- C:\Windows\SYSWOW64\dot3msm.dll 2011-02-27 18:46:13 ----A---- C:\Windows\SYSWOW64\avifil32.dll 2011-02-27 18:46:13 ----A---- C:\Windows\system32\WMPhoto.dll 2011-02-27 18:46:13 ----A---- C:\Windows\system32\takeown.exe 2011-02-27 18:46:13 ----A---- C:\Windows\system32\setbcdlocale.dll 2011-02-27 18:46:13 ----A---- C:\Windows\system32\PnPUnattend.exe 2011-02-27 18:46:13 ----A---- C:\Windows\system32\EhStorAPI.dll 2011-02-27 18:46:13 ----A---- C:\Windows\system32\amstream.dll 2011-02-27 18:46:12 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL 2011-02-27 18:46:12 ----A---- C:\Windows\SYSWOW64\wmdrmnet.dll 2011-02-27 18:46:12 ----A---- C:\Windows\SYSWOW64\sqmapi.dll 2011-02-27 18:46:12 ----A---- C:\Windows\SYSWOW64\sppinst.dll 2011-02-27 18:46:12 ----A---- C:\Windows\SYSWOW64\qdv.dll 2011-02-27 18:46:12 ----A---- C:\Windows\SYSWOW64\msnetobj.dll 2011-02-27 18:46:12 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll 2011-02-27 18:46:12 ----A---- C:\Windows\SYSWOW64\imagehlp.dll 2011-02-27 18:46:12 ----A---- C:\Windows\SYSWOW64\EhStorAPI.dll 2011-02-27 18:46:12 ----A---- C:\Windows\system32\WUDFx.dll 2011-02-27 18:46:12 ----A---- C:\Windows\system32\WUDFHost.exe 2011-02-27 18:46:12 ----A---- C:\Windows\system32\vfwwdm32.dll 2011-02-27 18:46:12 ----A---- C:\Windows\system32\shimgvw.dll 2011-02-27 18:46:12 ----A---- C:\Windows\system32\QCLIPROV.DLL 2011-02-27 18:46:12 ----A---- C:\Windows\system32\nrpsrv.dll 2011-02-27 18:46:12 ----A---- C:\Windows\system32\netapi32.dll 2011-02-27 18:46:12 ----A---- C:\Windows\system32\iasrecst.dll 2011-02-27 18:46:12 ----A---- C:\Windows\system32\HotStartUserAgent.dll 2011-02-27 18:46:12 ----A---- C:\Windows\system32\djoin.exe 2011-02-27 18:46:12 ----A---- C:\Windows\system32\cmstp.exe 2011-02-27 18:46:12 ----A---- C:\Windows\system32\CertPolEng.dll 2011-02-27 18:46:11 ----A---- C:\Windows\SYSWOW64\wsnmp32.dll 2011-02-27 18:46:11 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL 2011-02-27 18:46:11 ----A---- C:\Windows\SYSWOW64\vfwwdm32.dll 2011-02-27 18:46:11 ----A---- C:\Windows\SYSWOW64\sspicli.dll 2011-02-27 18:46:11 ----A---- C:\Windows\SYSWOW64\setupcln.dll 2011-02-27 18:46:11 ----A---- C:\Windows\SYSWOW64\QCLIPROV.DLL 2011-02-27 18:46:11 ----A---- C:\Windows\SYSWOW64\pdhui.dll 2011-02-27 18:46:11 ----A---- C:\Windows\SYSWOW64\MuiUnattend.exe 2011-02-27 18:46:11 ----A---- C:\Windows\SYSWOW64\msyuv.dll 2011-02-27 18:46:11 ----A---- C:\Windows\SYSWOW64\msrle32.dll 2011-02-27 18:46:11 ----A---- C:\Windows\SYSWOW64\cmstp.exe 2011-02-27 18:46:11 ----A---- C:\Windows\SYSWOW64\cca.dll 2011-02-27 18:46:11 ----A---- C:\Windows\system32\wuauclt.exe 2011-02-27 18:46:11 ----A---- C:\Windows\system32\WavDest.dll 2011-02-27 18:46:11 ----A---- C:\Windows\system32\relog.exe 2011-02-27 18:46:11 ----A---- C:\Windows\system32\mydocs.dll 2011-02-27 18:46:11 ----A---- C:\Windows\system32\MultiDigiMon.exe 2011-02-27 18:46:11 ----A---- C:\Windows\system32\KMSVC.DLL 2011-02-27 18:46:11 ----A---- C:\Windows\system32\fdProxy.dll 2011-02-27 18:46:11 ----A---- C:\Windows\system32\drivers\usbccgp.sys 2011-02-27 18:46:11 ----A---- C:\Windows\system32\drivers\pacer.sys 2011-02-27 18:46:10 ----A---- C:\Windows\SYSWOW64\wkscli.dll 2011-02-27 18:46:10 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll 2011-02-27 18:46:10 ----A---- C:\Windows\SYSWOW64\spbcd.dll 2011-02-27 18:46:10 ----A---- C:\Windows\SYSWOW64\relog.exe 2011-02-27 18:46:10 ----A---- C:\Windows\SYSWOW64\rastapi.dll 2011-02-27 18:46:10 ----A---- C:\Windows\SYSWOW64\netiougc.exe 2011-02-27 18:46:10 ----A---- C:\Windows\SYSWOW64\netbtugc.exe 2011-02-27 18:46:10 ----A---- C:\Windows\SYSWOW64\mydocs.dll 2011-02-27 18:46:10 ----A---- C:\Windows\SYSWOW64\msorcl32.dll 2011-02-27 18:46:10 ----A---- C:\Windows\SYSWOW64\iscsicli.exe 2011-02-27 18:46:10 ----A---- C:\Windows\SYSWOW64\iasrecst.dll 2011-02-27 18:46:10 ----A---- C:\Windows\SYSWOW64\diskpart.exe 2011-02-27 18:46:10 ----A---- C:\Windows\SYSWOW64\AzSqlExt.dll 2011-02-27 18:46:10 ----A---- C:\Windows\SYSWOW64\amstream.dll 2011-02-27 18:46:10 ----A---- C:\Windows\system32\sscore.dll 2011-02-27 18:46:10 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe 2011-02-27 18:46:10 ----A---- C:\Windows\system32\RMActivate_ssp.exe 2011-02-27 18:46:10 ----A---- C:\Windows\system32\msdmo.dll 2011-02-27 18:46:10 ----A---- C:\Windows\system32\mobsync.exe 2011-02-27 18:46:10 ----A---- C:\Windows\system32\itircl.dll 2011-02-27 18:46:10 ----A---- C:\Windows\system32\iscsicli.exe 2011-02-27 18:46:10 ----A---- C:\Windows\system32\dot3msm.dll 2011-02-27 18:46:10 ----A---- C:\Windows\system32\diskpart.exe 2011-02-27 18:46:10 ----A---- C:\Windows\system32\BWUnpairElevated.dll 2011-02-27 18:46:10 ----A---- C:\Windows\system32\browcli.dll 2011-02-27 18:46:10 ----A---- C:\Windows\system32\BdeHdCfg.exe 2011-02-27 18:46:09 ----A---- C:\Windows\SYSWOW64\wuapp.exe 2011-02-27 18:46:09 ----A---- C:\Windows\SYSWOW64\wmpps.dll 2011-02-27 18:46:09 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe 2011-02-27 18:46:09 ----A---- C:\Windows\SYSWOW64\syssetup.dll 2011-02-27 18:46:09 ----A---- C:\Windows\SYSWOW64\secur32.dll 2011-02-27 18:46:09 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll 2011-02-27 18:46:09 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll 2011-02-27 18:46:09 ----A---- C:\Windows\SYSWOW64\resutils.dll 2011-02-27 18:46:09 ----A---- C:\Windows\SYSWOW64\itircl.dll 2011-02-27 18:46:09 ----A---- C:\Windows\SYSWOW64\CertPolEng.dll 2011-02-27 18:46:09 ----A---- C:\Windows\system32\wuapp.exe 2011-02-27 18:46:09 ----A---- C:\Windows\system32\qprocess.exe 2011-02-27 18:46:09 ----A---- C:\Windows\system32\prevhost.exe 2011-02-27 18:46:09 ----A---- C:\Windows\system32\mciqtz32.dll 2011-02-27 18:46:09 ----A---- C:\Windows\system32\FXSTIFF.dll 2011-02-27 18:46:09 ----A---- C:\Windows\system32\findstr.exe 2011-02-27 18:46:09 ----A---- C:\Windows\system32\eappgnui.dll 2011-02-27 18:46:09 ----A---- C:\Windows\system32\choice.exe 2011-02-27 18:46:08 ----A---- C:\Windows\SYSWOW64\tlscsp.dll 2011-02-27 18:46:08 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe 2011-02-27 18:46:08 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe 2011-02-27 18:46:08 ----A---- C:\Windows\SYSWOW64\ReAgentc.exe 2011-02-27 18:46:08 ----A---- C:\Windows\SYSWOW64\netutils.dll 2011-02-27 18:46:08 ----A---- C:\Windows\SYSWOW64\netapi32.dll 2011-02-27 18:46:08 ----A---- C:\Windows\SYSWOW64\mobsync.exe 2011-02-27 18:46:08 ----A---- C:\Windows\SYSWOW64\mciqtz32.dll 2011-02-27 18:46:08 ----A---- C:\Windows\SYSWOW64\findstr.exe 2011-02-27 18:46:08 ----A---- C:\Windows\SYSWOW64\eappgnui.dll 2011-02-27 18:46:08 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe 2011-02-27 18:46:08 ----A---- C:\Windows\system32\sppc.dll 2011-02-27 18:46:08 ----A---- C:\Windows\system32\schedcli.dll 2011-02-27 18:46:08 ----A---- C:\Windows\system32\onexui.dll 2011-02-27 18:46:08 ----A---- C:\Windows\system32\luainstall.dll 2011-02-27 18:46:08 ----A---- C:\Windows\system32\imagehlp.dll 2011-02-27 18:46:08 ----A---- C:\Windows\system32\drivers\tunnel.sys 2011-02-27 18:46:08 ----A---- C:\Windows\system32\drivers\dfsc.sys 2011-02-27 18:46:08 ----A---- C:\Windows\system32\chglogon.exe 2011-02-27 18:46:07 ----A---- C:\Windows\SYSWOW64\unlodctr.exe 2011-02-27 18:46:07 ----A---- C:\Windows\SYSWOW64\sppc.dll 2011-02-27 18:46:07 ----A---- C:\Windows\SYSWOW64\spopk.dll 2011-02-27 18:46:07 ----A---- C:\Windows\SYSWOW64\shimgvw.dll 2011-02-27 18:46:07 ----A---- C:\Windows\SYSWOW64\rdprefdrvapi.dll 2011-02-27 18:46:07 ----A---- C:\Windows\SYSWOW64\prevhost.exe 2011-02-27 18:46:07 ----A---- C:\Windows\SYSWOW64\muifontsetup.dll 2011-02-27 18:46:07 ----A---- C:\Windows\SYSWOW64\msdmo.dll 2011-02-27 18:46:07 ----A---- C:\Windows\SYSWOW64\luainstall.dll 2011-02-27 18:46:07 ----A---- C:\Windows\SYSWOW64\iccvid.dll 2011-02-27 18:46:07 ----A---- C:\Windows\SYSWOW64\cabinet.dll 2011-02-27 18:46:07 ----A---- C:\Windows\system32\WUDFCoinstaller.dll 2011-02-27 18:46:07 ----A---- C:\Windows\system32\wdiasqmmodule.dll 2011-02-27 18:46:07 ----A---- C:\Windows\system32\vmicres.dll 2011-02-27 18:46:07 ----A---- C:\Windows\system32\tscon.exe 2011-02-27 18:46:07 ----A---- C:\Windows\system32\spopk.dll 2011-02-27 18:46:07 ----A---- C:\Windows\system32\repair-bde.exe 2011-02-27 18:46:07 ----A---- C:\Windows\system32\RDPENCDD.dll 2011-02-27 18:46:07 ----A---- C:\Windows\system32\qappsrv.exe 2011-02-27 18:46:07 ----A---- C:\Windows\system32\profprov.dll 2011-02-27 18:46:07 ----A---- C:\Windows\system32\odbcconf.dll 2011-02-27 18:46:07 ----A---- C:\Windows\system32\manage-bde.exe 2011-02-27 18:46:07 ----A---- C:\Windows\system32\inetmib1.dll 2011-02-27 18:46:07 ----A---- C:\Windows\system32\fixmapi.exe 2011-02-27 18:46:07 ----A---- C:\Windows\system32\chgport.exe 2011-02-27 18:46:06 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll 2011-02-27 18:46:06 ----A---- C:\Windows\SYSWOW64\odbcconf.dll 2011-02-27 18:46:06 ----A---- C:\Windows\SYSWOW64\inetmib1.dll 2011-02-27 18:46:06 ----A---- C:\Windows\SYSWOW64\browcli.dll 2011-02-27 18:46:06 ----A---- C:\Windows\system32\vmstorfltres.dll 2011-02-27 18:46:06 ----A---- C:\Windows\system32\vmbusres.dll 2011-02-27 18:46:06 ----A---- C:\Windows\system32\UIRibbonRes.dll 2011-02-27 18:46:06 ----A---- C:\Windows\system32\tskill.exe 2011-02-27 18:46:06 ----A---- C:\Windows\system32\tsdiscon.exe 2011-02-27 18:46:06 ----A---- C:\Windows\system32\shadow.exe 2011-02-27 18:46:06 ----A---- C:\Windows\system32\rwinsta.exe 2011-02-27 18:46:06 ----A---- C:\Windows\system32\logoff.exe 2011-02-27 18:46:06 ----A---- C:\Windows\system32\FXSMON.dll 2011-02-27 18:46:06 ----A---- C:\Windows\system32\elsTrans.dll 2011-02-27 18:46:06 ----A---- C:\Windows\system32\chgusr.exe 2011-02-27 18:46:05 ----A---- C:\Windows\SYSWOW64\wups.dll 2011-02-27 18:46:05 ----A---- C:\Windows\SYSWOW64\perfts.dll 2011-02-27 18:46:05 ----A---- C:\Windows\SYSWOW64\imm32.dll 2011-02-27 18:46:05 ----A---- C:\Windows\system32\wshbth.dll 2011-02-27 18:46:05 ----A---- C:\Windows\system32\TRAPI.dll 2011-02-27 18:46:05 ----A---- C:\Windows\system32\reset.exe 2011-02-27 18:46:05 ----A---- C:\Windows\system32\query.exe 2011-02-27 18:46:05 ----A---- C:\Windows\system32\napdsnap.dll 2011-02-27 18:46:05 ----A---- C:\Windows\system32\msfeedssync.exe 2011-02-27 18:46:05 ----A---- C:\Windows\system32\LogonUI.exe 2011-02-27 18:46:05 ----A---- C:\Windows\system32\dsauth.dll 2011-02-27 18:46:05 ----A---- C:\Windows\system32\drivers\tdi.sys 2011-02-27 18:46:05 ----A---- C:\Windows\system32\change.exe 2011-02-27 18:46:04 ----A---- C:\Windows\SYSWOW64\wshbth.dll 2011-02-27 18:46:04 ----A---- C:\Windows\SYSWOW64\TRAPI.dll 2011-02-27 18:46:04 ----A---- C:\Windows\SYSWOW64\schedcli.dll 2011-02-27 18:46:04 ----A---- C:\Windows\SYSWOW64\napdsnap.dll 2011-02-27 18:46:04 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe 2011-02-27 18:46:04 ----A---- C:\Windows\SYSWOW64\elsTrans.dll 2011-02-27 18:46:04 ----A---- C:\Windows\SYSWOW64\bitsperf.dll 2011-02-27 18:46:04 ----A---- C:\Windows\system32\rdprefdrvapi.dll 2011-02-27 18:46:04 ----A---- C:\Windows\system32\FXSUNATD.exe 2011-02-27 18:46:04 ----A---- C:\Windows\system32\drivers\usbrpm.sys 2011-02-27 18:46:04 ----A---- C:\Windows\system32\cscdll.dll 2011-02-27 18:46:04 ----A---- C:\Windows\system32\bitsperf.dll 2011-02-27 18:46:03 ----A---- C:\Windows\SYSWOW64\dsauth.dll 2011-02-27 18:46:03 ----A---- C:\Windows\SYSWOW64\cscdll.dll 2011-02-27 18:46:03 ----A---- C:\Windows\system32\wups2.dll 2011-02-27 18:46:03 ----A---- C:\Windows\system32\wsdchngr.dll 2011-02-27 18:46:03 ----A---- C:\Windows\system32\drivers\acpipmi.sys 2011-02-27 18:46:02 ----A---- C:\Windows\SYSWOW64\wsdchngr.dll 2011-02-27 18:46:02 ----A---- C:\Windows\SYSWOW64\sscore.dll 2011-02-27 18:46:02 ----A---- C:\Windows\SYSWOW64\shgina.dll 2011-02-27 18:46:02 ----A---- C:\Windows\SYSWOW64\riched32.dll 2011-02-27 18:46:02 ----A---- C:\Windows\system32\wups.dll 2011-02-27 18:46:02 ----A---- C:\Windows\system32\shgina.dll 2011-02-27 18:46:01 ----A---- C:\Windows\system32\wshirda.dll 2011-02-27 18:46:01 ----A---- C:\Windows\system32\wow64win.dll 2011-02-27 18:46:01 ----A---- C:\Windows\system32\wow64cpu.dll 2011-02-27 18:46:01 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys 2011-02-27 18:46:01 ----A---- C:\Windows\system32\drivers\CompositeBus.sys 2011-02-27 18:46:00 ----A---- C:\Windows\SYSWOW64\wshirda.dll 2011-02-27 18:46:00 ----A---- C:\Windows\system32\rdpcfgex.dll 2011-02-27 18:46:00 ----A---- C:\Windows\system32\drivers\hidusb.sys 2011-02-27 18:46:00 ----A---- C:\Windows\system32\drivers\appid.sys 2011-02-27 18:45:59 ----A---- C:\Windows\system32\vmbuspipe.dll 2011-02-27 18:45:59 ----A---- C:\Windows\system32\spwmp.dll 2011-02-27 18:45:59 ----A---- C:\Windows\system32\riched32.dll 2011-02-27 18:45:59 ----A---- C:\Windows\system32\drivers\kbdhid.sys 2011-02-27 18:45:59 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys 2011-02-27 18:45:59 ----A---- C:\Windows\system32\browseui.dll 2011-02-27 18:45:58 ----A---- C:\Windows\SYSWOW64\spwmp.dll 2011-02-27 18:45:58 ----A---- C:\Windows\SYSWOW64\C_ISCII.DLL 2011-02-27 18:45:58 ----A---- C:\Windows\SYSWOW64\browseui.dll 2011-02-27 18:45:58 ----A---- C:\Windows\system32\VmdCoinstall.dll 2011-02-27 18:45:58 ----A---- C:\Windows\system32\VmbusCoinstaller.dll 2011-02-27 18:45:58 ----A---- C:\Windows\system32\IcCoinstall.dll 2011-02-27 18:45:58 ----A---- C:\Windows\system32\dxmasf.dll 2011-02-27 18:45:58 ----A---- C:\Windows\system32\drivers\WUDFRd.sys 2011-02-27 18:45:58 ----A---- C:\Windows\system32\drivers\HdAudio.sys 2011-02-27 18:45:58 ----A---- C:\Windows\system32\drivers\hdaudbus.sys 2011-02-27 18:45:58 ----A---- C:\Windows\system32\drivers\cdrom.sys 2011-02-27 18:45:58 ----A---- C:\Windows\system32\C_ISCII.DLL 2011-02-27 18:45:57 ----AH---- C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll 2011-02-27 18:45:57 ----A---- C:\Windows\SYSWOW64\shunimpl.dll 2011-02-27 18:45:57 ----A---- C:\Windows\SYSWOW64\dxmasf.dll 2011-02-27 18:45:57 ----A---- C:\Windows\system32\shunimpl.dll 2011-02-27 18:45:57 ----A---- C:\Windows\system32\drivers\WUDFPf.sys 2011-02-27 18:45:57 ----A---- C:\Windows\system32\drivers\sffp_sd.sys 2011-02-27 18:45:57 ----A---- C:\Windows\system32\drivers\scfilter.sys 2011-02-27 18:45:56 ----A---- C:\Windows\SYSWOW64\wmploc.DLL 2011-02-27 18:45:56 ----A---- C:\Windows\SYSWOW64\KBDTUQ.DLL 2011-02-27 18:45:56 ----A---- C:\Windows\SYSWOW64\KBDTUF.DLL 2011-02-27 18:45:56 ----A---- C:\Windows\SYSWOW64\KBDSG.DLL 2011-02-27 18:45:56 ----A---- C:\Windows\SYSWOW64\kbdlk41a.dll 2011-02-27 18:45:56 ----A---- C:\Windows\SYSWOW64\KBDGR1.DLL 2011-02-27 18:45:56 ----A---- C:\Windows\SYSWOW64\KBDGKL.DLL 2011-02-27 18:45:56 ----A---- C:\Windows\system32\wmploc.DLL 2011-02-27 18:45:56 ----A---- C:\Windows\system32\KBDTUQ.DLL 2011-02-27 18:45:56 ----A---- C:\Windows\system32\KBDTUF.DLL 2011-02-27 18:45:56 ----A---- C:\Windows\system32\KBDSG.DLL 2011-02-27 18:45:56 ----A---- C:\Windows\system32\KBDSF.DLL 2011-02-27 18:45:56 ----A---- C:\Windows\system32\KBDPO.DLL 2011-02-27 18:45:56 ----A---- C:\Windows\system32\KBDNEPR.DLL 2011-02-27 18:45:56 ----A---- C:\Windows\system32\kbdlk41a.dll 2011-02-27 18:45:56 ----A---- C:\Windows\system32\KBDINTAM.DLL 2011-02-27 18:45:56 ----A---- C:\Windows\system32\KBDINBEN.DLL 2011-02-27 18:45:56 ----A---- C:\Windows\system32\KBDGR1.DLL 2011-02-27 18:45:56 ----A---- C:\Windows\system32\KBDGKL.DLL 2011-02-27 18:45:55 ----A---- C:\Windows\SYSWOW64\KBDUS.DLL 2011-02-27 18:45:55 ----A---- C:\Windows\SYSWOW64\KBDUGHR1.DLL 2011-02-27 18:45:55 ----A---- C:\Windows\SYSWOW64\KBDTURME.DLL 2011-02-27 18:45:55 ----A---- C:\Windows\SYSWOW64\KBDTAJIK.DLL 2011-02-27 18:45:55 ----A---- C:\Windows\SYSWOW64\KBDMON.DLL 2011-02-27 18:45:55 ----A---- C:\Windows\SYSWOW64\KBDMAORI.DLL 2011-02-27 18:45:55 ----A---- C:\Windows\SYSWOW64\KBDLT1.DLL 2011-02-27 18:45:55 ----A---- C:\Windows\SYSWOW64\KBDINTEL.DLL 2011-02-27 18:45:55 ----A---- C:\Windows\SYSWOW64\KBDINHIN.DLL 2011-02-27 18:45:55 ----A---- C:\Windows\SYSWOW64\KBDGEO.DLL 2011-02-27 18:45:55 ----A---- C:\Windows\SYSWOW64\KBDCZ1.DLL 2011-02-27 18:45:55 ----A---- C:\Windows\SYSWOW64\KBDBLR.DLL 2011-02-27 18:45:55 ----A---- C:\Windows\system32\KBDUS.DLL 2011-02-27 18:45:55 ----A---- C:\Windows\system32\KBDUGHR1.DLL 2011-02-27 18:45:55 ----A---- C:\Windows\system32\KBDTAJIK.DLL 2011-02-27 18:45:55 ----A---- C:\Windows\system32\KBDMON.DLL 2011-02-27 18:45:55 ----A---- C:\Windows\system32\KBDLT1.DLL 2011-02-27 18:45:55 ----A---- C:\Windows\system32\KBDGEO.DLL 2011-02-27 18:45:55 ----A---- C:\Windows\system32\KBDCZ1.DLL 2011-02-27 18:45:55 ----A---- C:\Windows\system32\drivers\vms3cap.sys 2011-02-27 18:45:54 ----A---- C:\Windows\SYSWOW64\tzres.dll 2011-02-27 18:45:54 ----A---- C:\Windows\SYSWOW64\spwizres.dll 2011-02-27 18:45:54 ----A---- C:\Windows\SYSWOW64\pifmgr.dll 2011-02-27 18:45:54 ----A---- C:\Windows\SYSWOW64\nlsbres.dll 2011-02-27 18:45:54 ----A---- C:\Windows\SYSWOW64\KBDSF.DLL 2011-02-27 18:45:54 ----A---- C:\Windows\SYSWOW64\KBDPO.DLL 2011-02-27 18:45:54 ----A---- C:\Windows\SYSWOW64\KBDNEPR.DLL 2011-02-27 18:45:54 ----A---- C:\Windows\SYSWOW64\KBDINTAM.DLL 2011-02-27 18:45:54 ----A---- C:\Windows\SYSWOW64\KBDINORI.DLL 2011-02-27 18:45:54 ----A---- C:\Windows\SYSWOW64\KBDINMAR.DLL 2011-02-27 18:45:54 ----A---- C:\Windows\SYSWOW64\KBDINKAN.DLL 2011-02-27 18:45:54 ----A---- C:\Windows\SYSWOW64\KBDINBEN.DLL 2011-02-27 18:45:54 ----A---- C:\Windows\SYSWOW64\KBDBULG.DLL 2011-02-27 18:45:54 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL 2011-02-27 18:45:54 ----A---- C:\Windows\SYSWOW64\dpnaddr.dll 2011-02-27 18:45:54 ----A---- C:\Windows\system32\tzres.dll 2011-02-27 18:45:54 ----A---- C:\Windows\system32\spwizres.dll 2011-02-27 18:45:54 ----A---- C:\Windows\system32\pifmgr.dll 2011-02-27 18:45:54 ----A---- C:\Windows\system32\nlsbres.dll 2011-02-27 18:45:54 ----A---- C:\Windows\system32\KBDTURME.DLL 2011-02-27 18:45:54 ----A---- C:\Windows\system32\KBDMAORI.DLL 2011-02-27 18:45:54 ----A---- C:\Windows\system32\KBDINTEL.DLL 2011-02-27 18:45:54 ----A---- C:\Windows\system32\KBDINORI.DLL 2011-02-27 18:45:54 ----A---- C:\Windows\system32\KBDINMAR.DLL 2011-02-27 18:45:54 ----A---- C:\Windows\system32\KBDINKAN.DLL 2011-02-27 18:45:54 ----A---- C:\Windows\system32\KBDINHIN.DLL 2011-02-27 18:45:54 ----A---- C:\Windows\system32\KBDBULG.DLL 2011-02-27 18:45:54 ----A---- C:\Windows\system32\KBDBLR.DLL 2011-02-27 18:45:54 ----A---- C:\Windows\system32\KBDBASH.DLL 2011-02-27 18:45:54 ----A---- C:\Windows\system32\drivers\VMBusHID.sys 2011-02-27 18:45:54 ----A---- C:\Windows\system32\dpnaddr.dll 2011-02-27 18:45:54 ----A---- C:\Windows\system32\BlbEvents.dll 2011-02-27 18:45:26 ----A---- C:\Windows\SYSWOW64\wdscore.dll 2011-02-27 18:45:26 ----A---- C:\Windows\SYSWOW64\PkgMgr.exe 2011-02-27 18:45:03 ----A---- C:\Windows\SYSWOW64\drvstore.dll 2011-02-27 18:45:03 ----A---- C:\Windows\SYSWOW64\dpx.dll 2011-02-27 18:44:53 ----A---- C:\Windows\SYSWOW64\wbemcomn.dll 2011-02-27 18:42:24 ----A---- C:\Windows\system32\wmicmiplugin.dll 2011-02-27 18:42:24 ----A---- C:\Windows\system32\wbemcomn.dll 2011-02-27 18:42:15 ----A---- C:\Windows\system32\SmiEngine.dll 2011-02-27 18:42:08 ----A---- C:\Windows\system32\PkgMgr.exe 2011-02-27 18:41:37 ----A---- C:\Windows\system32\drvstore.dll 2011-02-27 18:41:36 ----A---- C:\Windows\system32\dpx.dll 2011-02-27 17:37:35 ----D---- C:\9ccc7d7c9d617c98d249790866 2011-02-27 17:26:15 ----D---- C:\f881bed5537ec58525 2011-02-27 10:28:31 ----D---- C:\Program Files (x86)\EASEUS 2011-02-27 09:16:32 ----A---- C:\Windows\system32\browserchoice.exe 2011-02-27 09:11:36 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll 2011-02-27 09:11:36 ----A---- C:\Windows\system32\XpsPrint.dll 2011-02-27 09:11:36 ----A---- C:\Windows\system32\XpsGdiConverter.dll 2011-02-27 09:11:35 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll 2011-02-27 09:11:26 ----A---- C:\Windows\system32\mshtml.dll 2011-02-27 09:11:15 ----A---- C:\Windows\SYSWOW64\mshtml.dll 2011-02-27 09:10:55 ----A---- C:\Windows\SYSWOW64\fontsub.dll 2011-02-27 09:10:55 ----A---- C:\Windows\SYSWOW64\atmlib.dll 2011-02-27 09:10:55 ----A---- C:\Windows\SYSWOW64\atmfd.dll 2011-02-27 09:10:55 ----A---- C:\Windows\system32\fontsub.dll 2011-02-27 09:10:55 ----A---- C:\Windows\system32\atmlib.dll 2011-02-27 09:10:55 ----A---- C:\Windows\system32\atmfd.dll 2011-02-27 09:10:49 ----A---- C:\Windows\SYSWOW64\kerberos.dll 2011-02-27 09:10:49 ----A---- C:\Windows\system32\kerberos.dll 2011-02-27 09:10:14 ----A---- C:\Windows\system32\vbscript.dll 2011-02-27 09:10:14 ----A---- C:\Windows\system32\jscript.dll 2011-02-27 09:10:13 ----A---- C:\Windows\SYSWOW64\vbscript.dll 2011-02-27 09:10:13 ----A---- C:\Windows\SYSWOW64\jscript.dll 2011-02-27 09:10:06 ----A---- C:\Windows\system32\win32k.sys 2011-02-27 09:09:43 ----A---- C:\Windows\system32\winsrv.dll 2011-02-27 08:59:32 ----D---- C:\Windows\system32\EventProviders 2011-02-26 19:36:43 ----D---- C:\ProgramData\Windows Genuine Advantage 2011-02-25 18:05:35 ----A---- C:\Windows\SYSWOW64\javaws.exe 2011-02-25 18:05:35 ----A---- C:\Windows\SYSWOW64\javaw.exe 2011-02-25 18:05:35 ----A---- C:\Windows\SYSWOW64\java.exe 2011-02-25 18:05:35 ----A---- C:\Windows\SYSWOW64\deployJava1.dll 2011-02-25 11:18:15 ----SHD---- C:\$RECYCLE.BIN 2011-02-23 20:46:04 ----D---- C:\Windows\temp 2011-02-23 19:58:13 ----D---- C:\Users\User\AppData\Roaming\InstallShield 2011-02-21 17:44:29 ----D---- C:\Windows\ERDNT 2011-02-05 11:32:03 ----A---- C:\Windows\system32\drivers\ew_juwwanecm.sys 2011-02-05 11:32:03 ----A---- C:\Windows\system32\drivers\ew_juextctrl.sys 2011-02-05 11:32:03 ----A---- C:\Windows\system32\drivers\ew_jucdcecm.sys 2011-02-05 11:32:03 ----A---- C:\Windows\system32\drivers\ew_jucdcacm.sys 2011-02-05 11:32:03 ----A---- C:\Windows\system32\drivers\ew_jubusenum.sys 2011-02-05 11:32:03 ----A---- C:\Windows\system32\drivers\ew_hwupgrade.sys 2011-02-05 11:31:53 ----A---- C:\Windows\system32\drivers\mod7700.sys 2011-02-05 11:31:53 ----A---- C:\Windows\system32\drivers\ewusbnet.sys 2011-02-05 11:31:53 ----A---- C:\Windows\system32\drivers\ewusbmdm.sys 2011-02-05 11:31:53 ----A---- C:\Windows\system32\drivers\ewdcsc.sys 2011-02-05 11:31:53 ----A---- C:\Windows\system32\drivers\ew_usbenumfilter.sys 2011-02-05 11:31:43 ----A---- C:\Windows\system32\drivers\ew_hwusbdev.sys 2011-02-05 11:31:25 ----D---- C:\Program Files (x86)\Mobile Partner 2011-02-01 18:02:39 ----A---- C:\Windows\system32\WdfCoInstaller01009.dll 2011-02-01 18:02:39 ----A---- C:\Windows\system32\drivers\WdfCoInstaller01009.dll 2011-02-01 18:01:55 ----D---- C:\ProgramData\DatacardService 2011-01-26 20:57:48 ----D---- C:\Users\User\AppData\Roaming\Adobe 2011-01-26 20:57:48 ----D---- C:\ProgramData\Adobe ======List of files/folders modified in the last 3 months====== 2011-03-07 20:15:58 ----D---- C:\Windows\Prefetch 2011-03-07 20:15:22 ----RD---- C:\Program Files 2011-03-07 18:07:00 ----D---- C:\Windows 2011-03-07 17:02:43 ----D---- C:\Users\User\AppData\Roaming\Skype 2011-03-07 16:28:55 ----D---- C:\Windows\system32\config 2011-03-07 16:22:51 ----D---- C:\Windows\System32 2011-03-07 16:22:51 ----D---- C:\Windows\inf 2011-03-07 16:22:51 ----A---- C:\Windows\system32\PerfStringBackup.INI 2011-03-07 16:18:45 ----D---- C:\ProgramData\NVIDIA 2011-03-07 16:12:07 ----D---- C:\Users\User\AppData\Roaming\skypePM 2011-03-06 09:43:00 ----SHD---- C:\System Volume Information 2011-03-06 09:07:47 ----D---- C:\Windows\SysWOW64 2011-03-06 08:55:54 ----D---- C:\Users\User\AppData\Roaming\vlc 2011-03-06 08:19:18 ----D---- C:\Program Files (x86) 2011-03-05 10:47:55 ----D---- C:\Windows\system32\drivers 2011-03-05 10:02:52 ----D---- C:\Windows\system32\NDF 2011-03-04 19:06:45 ----D---- C:\Users\User\AppData\Roaming\dvdcss 2011-03-04 18:29:12 ----SHD---- C:\Windows\Installer 2011-03-04 10:48:20 ----D---- C:\Program Files (x86)\Mozilla Firefox 2011-03-01 20:35:35 ----D---- C:\Windows\system32\catroot2 2011-03-01 09:35:25 ----D---- C:\Windows\system32\LogFiles 2011-02-28 18:12:04 ----D---- C:\Windows\debug 2011-02-28 15:56:26 ----D---- C:\Windows\rescache 2011-02-27 20:08:24 ----D---- C:\Windows\Microsoft.NET 2011-02-27 20:08:09 ----RSD---- C:\Windows\assembly 2011-02-27 19:13:33 ----D---- C:\Windows\winsxs 2011-02-27 19:12:30 ----SHD---- C:\Boot 2011-02-27 19:10:52 ----D---- C:\Windows\system32\DriverStore 2011-02-27 19:06:46 ----D---- C:\Program Files (x86)\Windows Sidebar 2011-02-27 19:06:45 ----D---- C:\Program Files (x86)\Windows Portable Devices 2011-02-27 19:06:45 ----D---- C:\Program Files (x86)\Windows Media Player 2011-02-27 19:06:45 ----D---- C:\Program Files (x86)\Windows Mail 2011-02-27 19:06:45 ----D---- C:\Program Files (x86)\Internet Explorer 2011-02-27 19:06:44 ----D---- C:\Program Files (x86)\Windows Photo Viewer 2011-02-27 19:06:43 ----D---- C:\Program Files\Windows Sidebar 2011-02-27 19:06:42 ----D---- C:\Program Files\Windows Portable Devices 2011-02-27 19:06:42 ----D---- C:\Program Files\Windows Photo Viewer 2011-02-27 19:06:42 ----D---- C:\Program Files\Windows Media Player 2011-02-27 19:06:42 ----D---- C:\Program Files\Windows Mail 2011-02-27 19:06:42 ----D---- C:\Program Files\Windows Journal 2011-02-27 19:06:42 ----D---- C:\Program Files\Internet Explorer 2011-02-27 19:06:42 ----D---- C:\Program Files\DVD Maker 2011-02-27 19:06:40 ----D---- C:\Program Files\Windows Defender 2011-02-27 19:06:39 ----D---- C:\Windows\servicing 2011-02-27 19:06:39 ----D---- C:\Windows\ehome 2011-02-27 19:06:33 ----SHD---- C:\Windows\BitLockerDiscoveryVolumeContents 2011-02-27 19:06:33 ----D---- C:\Windows\SYSWOW64\en-US 2011-02-27 19:06:33 ----D---- C:\Windows\SYSWOW64\da-DK 2011-02-27 19:06:32 ----D---- C:\Windows\SYSWOW64\oobe 2011-02-27 19:06:32 ----D---- C:\Windows\SYSWOW64\migration 2011-02-27 19:06:31 ----D---- C:\Windows\SYSWOW64\sppui 2011-02-27 19:06:31 ----D---- C:\Windows\SYSWOW64\Setup 2011-02-27 19:06:31 ----D---- C:\Windows\SYSWOW64\manifeststore 2011-02-27 19:06:31 ----D---- C:\Windows\SYSWOW64\es-ES 2011-02-27 19:06:31 ----D---- C:\Windows\SYSWOW64\en 2011-02-27 19:06:31 ----D---- C:\Windows\SYSWOW64\cs-CZ 2011-02-27 19:06:31 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers 2011-02-27 19:06:29 ----D---- C:\Windows\SYSWOW64\bg-BG 2011-02-27 19:06:28 ----D---- C:\Windows\SYSWOW64\wbem 2011-02-27 19:06:27 ----D---- C:\Windows\SYSWOW64\migwiz 2011-02-27 19:06:27 ----D---- C:\Windows\SYSWOW64\Dism 2011-02-27 19:06:03 ----D---- C:\Windows\system32\da-DK 2011-02-27 19:06:03 ----D---- C:\Windows\PolicyDefinitions 2011-02-27 19:06:01 ----D---- C:\Windows\system32\en-US 2011-02-27 19:06:00 ----D---- C:\Windows\system32\oobe 2011-02-27 19:06:00 ----D---- C:\Windows\system32\migration 2011-02-27 19:06:00 ----D---- C:\Windows\system32\AdvancedInstallers 2011-02-27 19:05:59 ----D---- C:\Windows\system32\sppui 2011-02-27 19:05:59 ----D---- C:\Windows\system32\Setup 2011-02-27 19:05:59 ----D---- C:\Windows\system32\manifeststore 2011-02-27 19:05:59 ----D---- C:\Windows\system32\es-ES 2011-02-27 19:05:59 ----D---- C:\Windows\system32\cs-CZ 2011-02-27 19:05:58 ----D---- C:\Windows\system32\bg-BG 2011-02-27 19:05:56 ----D---- C:\Windows\system32\drivers\UMDF 2011-02-27 19:05:56 ----D---- C:\Windows\system32\drivers\en-US 2011-02-27 19:05:55 ----D---- C:\Windows\system32\wbem 2011-02-27 19:05:55 ----D---- C:\Windows\system32\migwiz 2011-02-27 19:05:55 ----D---- C:\Windows\system32\Dism 2011-02-27 19:05:29 ----RSD---- C:\Windows\Fonts 2011-02-27 19:05:29 ----D---- C:\Windows\AppPatch 2011-02-27 19:05:17 ----D---- C:\Windows\system32\Boot 2011-02-27 19:00:44 ----D---- C:\Windows\system32\catroot 2011-02-27 18:58:42 ----A---- C:\Windows\SYSWOW64\msclmd.dll 2011-02-27 18:58:42 ----A---- C:\Windows\system32\msclmd.dll 2011-02-26 19:36:43 ----D---- C:\ProgramData 2011-02-26 15:23:23 ----SD---- C:\Users\User\AppData\Roaming\Microsoft 2011-02-25 18:15:59 ----D---- C:\Program Files (x86)\Common Files 2011-02-25 18:05:30 ----D---- C:\Program Files (x86)\Java 2011-02-24 19:25:01 ----A---- C:\Windows\system.ini 2011-02-24 19:22:12 ----D---- C:\Windows\SYSWOW64\drivers 2011-02-24 19:22:11 ----D---- C:\Program Files\Common Files 2011-02-23 20:09:44 ----D---- C:\Program Files\Google 2011-02-23 20:08:40 ----D---- C:\Windows\system32\Tasks 2011-02-23 20:08:38 ----D---- C:\Windows\Tasks 2011-02-23 20:02:20 ----D---- C:\Program Files (x86)\Google 2011-02-23 19:58:56 ----HD---- C:\Program Files (x86)\InstallShield Installation Information 2011-02-21 18:49:07 ----RD---- C:\Program Files (x86)\Skype 2011-02-21 18:48:57 ----D---- C:\ProgramData\Skype 2011-02-20 13:19:13 ----D---- C:\Program Files (x86)\SUPERAntiSpyware 2011-02-20 12:59:09 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware 2011-02-19 14:53:08 ----HD---- C:\Windows\system32\GroupPolicy 2011-02-10 14:09:12 ----D---- C:\Windows\Minidump 2011-02-04 17:51:18 ----A---- C:\Windows\system32\MRT.exe 2011-02-03 18:26:54 ----D---- C:\Program Files (x86)\Opera 2011-02-02 17:11:20 ----N---- C:\Windows\system32\MpSigStub.exe 2011-01-30 19:53:43 ----D---- C:\Users\User\AppData\Roaming\BitTorrent 2011-01-22 16:23:26 ----A---- C:\Windows\NeroDigital.ini 2011-01-22 10:38:37 ----D---- C:\Program Files (x86)\opera11 2011-01-16 18:26:49 ----D---- C:\Windows\system32\FxsTmp ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 nvstor64;nvstor64; C:\Windows\system32\DRIVERS\nvstor64.sys [2009-08-04 241696] R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888] R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552] R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560] R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2009-09-29 136584] R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2009-12-17 34472] R2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys [2008-06-27 88632] R2 eamon;eamon; C:\Windows\system32\DRIVERS\eamon.sys [2009-09-29 144824] R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2009-09-29 123200] R3 DKRtWrt;DKRtWrt; C:\Windows\system32\DRIVERS\DKRtWrt.sys [2009-12-10 51120] R3 huawei_cdcacm;huawei_cdcacm; C:\Windows\system32\DRIVERS\ew_jucdcacm.sys [2010-08-24 91648] R3 huawei_enumerator;huawei_enumerator; C:\Windows\system32\DRIVERS\ew_jubusenum.sys [2010-07-27 86016] R3 huawei_ext_ctrl;huawei_ext_ctrl; C:\Windows\system32\DRIVERS\ew_juextctrl.sys [2010-09-03 30208] R3 huawei_wwanecm;huawei_wwanecm; C:\Windows\system32\DRIVERS\ew_juwwanecm.sys [2010-10-29 198144] R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2005-03-29 8192] R3 NVNET;NVIDIA nForce 10/100/1000 Mbps Ethernet ; C:\Windows\system32\DRIVERS\nvmf6264.sys [2009-07-30 339744] R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2009-08-09 36352] S0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2009-12-22 860656] S1 SASDIFSV;SASDIFSV; \??\C:\Program Files (x86)\SUPERAntiSpyware\SASDIFSV.SYS [2010-11-12 12872] S1 SASKUTIL;SASKUTIL; \??\C:\Program Files (x86)\SUPERAntiSpyware\SASKUTIL.sys [2010-11-12 67656] S3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\ADIHdAud.sys [] S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device; C:\Windows\system32\DRIVERS\ew_hwusbdev.sys [2010-07-27 117248] S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2010-08-07 121600] S3 MCfilt;MCfilt; C:\Windows\system32\drivers\MCfilt64.sys [2009-09-17 25600] S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x64.sys [2009-06-10 408960] S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992] S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656] S3 SASENUM;SASENUM; \??\C:\Program Files (x86)\SUPERAntiSpyware\SASENUM.SYS [2010-11-12 12872] S3 SNPSTD3;USB PC Camera (SNPSTD3); C:\Windows\system32\DRIVERS\snpstd3.sys [2007-03-27 10550272] S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688] S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [] S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392] S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [] S3 usb_rndisx;USB RNDIS Adapter; C:\Windows\system32\DRIVERS\usb8023x.sys [2009-07-14 19968] S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984] S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys [] S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136] R2 DCService.exe;DCService.exe; C:\ProgramData\DatacardService\DCService.exe [2010-08-19 229376] R2 Diskeeper;Diskeeper; C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe [2009-12-24 2430304] R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2009-09-29 735960] R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-07-14 383008] R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2009-07-14 27136] R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2009-07-14 239648] R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2009-07-14 27136] S2 gupdate;Услуга Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-05-16 136176] S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136] S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-09-29 23296] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136] S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-02-27 1255736] -----------------EOF-----------------

http://www.blitz.bg/news/article/101493 Странджански варвари "бесиха" кучета Въпреки забраната ритуалът тричане пак се проведе на реката до Бродилово Кукеров ден в странджанското село Бродилово започна с Тричане на кучета, въпреки че мракобесният обичай е забранен със заповед на кмета Петко Арнаудов през 2005 г. Тогава за пръв път в пресата се появиха снимки на "обесени" четириноги, които се въртят на въжето и хвърлят екскременти от ужас и страх. Фотосите и кадрите бяха станали достояние на няколко правозащитни организации, които нададоха вой до небесата и заплашиха България, че няма да я приемат в ЕС, ако не забрани незабавно тази варварщина. Особено негативни бяха отзивите от Швеция, където кадрите на Ройтерс бяха отпечатани по първите страници на ежедневниците им. „Да си гледат работата, ние продължаваме тайно да си тричим нашите кучета, защото това е древен обичай и тая година пак ще го направим. Това което се пише - това е всичкото лъжа“, каза ни Димитър Георгиев, местен жител и участник в тричането. Екип на сайта Besove бе още в 8 часа сутринта край селската река заради информацията, че местните хора няма да изневерят на традицията и пак ще си тричат кучетата. Въпреки че заснетите кадри са страховити, всъщност на кучето не му се случва нещо кой знае колко страшно. На събитието край Бродилово се бяха събрали над 300 човека местни жители и гости на селото за да гледат тричането. Първо се опъва въже между два кола, застопорени от двете страни на реката. На специално изградено мостче над реката застава този, който ще трича. На снимката е Илия Илиев, дългогодишен изпълнител на древната традиция. Той подготвя примка от усукано въже, в която ще бъде поставено кучето. През примката първо се прокарват краката на кучето, докато стигне лопатките на предните крака. Така стягането се поема основно от гръдния кош и то се извършва внимателно за да не се стяга прекалено много. След това двата кола, на които е закачено въжето, се дърпат настрани. Така кучето се върти като пумпал под съпровода на радостни викове и подсвирквания, а имаше дори пиратки и изстрели във въздуха. В един момент въжето се размотава и то цопва в реката. Най-много змаяното куче да не може да доплува до брега, но за такива случаи е подготвена специална спасителна (рибарска) мрежа, опъната под въжето. Някои от песовете дори сами си излизаха от реката. Няма регистрирани случаи на смърт. "Тъй както обичаят е свързан с антихуманно отношение към животните и в изпълнение на подписани от държавата ни договорености в защита на бездомните кучета, аз го забраних", каза днес по обед Арнаудов, след като от нас разбра, че тричане все пак е имало. Кукерските игри продължиха с традиционната обиколка по домовете в селото. Сред атракциите на обичая са кукерските дрехи, изработени от кожа със закачени на кръста звънци и хлопки. Според странджанската традиция кукерите не носят маски, а лицата им са намазани със сажди. Те се предвождат от цар, който е главна фигура в обичая. Обиколката по домовете цели да се изгонят злите духове и да се пречисти селото. Кукеров ден ще завърши с уникалния обряд "Пали кош". В центъра на Бродилово ще се натрупа кош от слама,който ще бъде запален привечер. Местните хора се събират около огъня и се хващат на дълго право хоро. Кошът от слама всъщност е символ на полога, в който снасят кокошките яйца. Според традицията ако поставиш там пепел от огъня, кокошките ще носят повече яйца през годината. "В Испания, след ловния сезон, кучетата биват обесвани от техните собственици на дърво. Тяхната смърт е бавна и болезнена. През това време собствениците им седят под дървото и се наслаждават на вино и бира с приятели. Тъй като това е “местна традиция” и “стар обичай” европейската общност го позволява, затова нека бъде така добра да не се бърка в нашите обреди. Същото се отнася и за коридата, на която се избиват стотици бикове“, казва Стоян Карамитев от Бродилово. А неговия съселянин Илиян Илиев допълва „Така се обезселяват селата от Странджа – като се губят традициите, запомнени от нашите деди.” Традициите трябва да се уважават!

Не ползвам блокировачи, но това може и да ти помогне: http://my.opera.com/bulgarian/forums/topic.dml?id=900651

Здравеите, Имам настолен компютър и лаптоп и двата с Win 7 Ultimate. Интернета пристига през USB и бях направил мрежа през лан картата на настолния да си деля нета с лаптопа. Първо ги връзвах с кабел, а после през рутер - всичко си вървеше както трябва докато не ми спря тока. Сега не мога да се свържа двата компютъра по никакъв начин. В Net and sharing center мрежата ми е Unidentified, access type - No network access.Пробвах да обновя драиверите на лан картата - нищо. Търсих някакво решение в нета - пак нищо - не мога да подкарам мрежата. Помагаите, колеги - приемам всякакви съвети.

Можеш да си поделиш нета като вържеш двата компютъра през ЛАН. При мен беше така, после сложих рутер и имах нет из цялата къща без да влача кабели.

Моята навигация е MOOV S505 - има слот за външна карта и на нея е всичко - iGo, програмки и т.н. Потърси ли помощ при колегите от Покетбългария? Ако разбираш руски 4пда е с много добър форум - аз горе-долу от там си правя нещата. Тук http://www.navitotal.com/forums/showthread.php?1227-Visual-Mio-unlock-shell също има интересни неща и мислех да ги пробвам но с МиоПокет се оправих и не съм си играл повече.

Папките са посочените C:\Windows +17G и C:\9ccc7d7c9d617c98d249790866 над 6G. TrueCript не присъства нито в таск мениджъра, нито като услуга. С CCleaner чистя редовно.

Говоря за папката на Уиндоуса в диск С - вече е почти 17Г + още една папка 9ccc7d7c....... в която намирам и spinstall.exe + още една папка със странно име като 4ecf2...., и е около 6Г. В неделя си играх да преразделям дисковете защото нямах място да сложа SP1 и след като го инсталирах ми изяде допълнителните десетина ГБ които бях добавил.