przeglądanie zdjęć

[cysiowy]

Witam!

Mam taki nietypowy problem, ktory pojawil się niedawno po formacie. Zauwazylem ostatnio ze strasznie muli mi komp gdy odpalam folder z duza iloscia zdjęć(ok 100), oraz gdy chce przewijac liste(w folderze ze zdjeciami) w dol. Nigdy nie mialem takiego problemu. Komputer normalnie pracowal ze zdjeciami. Dodam ze mam ustawione wszedzie miniatury.

Gdy sprawdzam procesy, explorer ma ok 80-90 % zuzycia oczywiscie w momencie odpalania folderu. Dopiero po kilku minutach, gdy juz "przetrawi" zdjecia, moge spokojnie ogladac te ktore sie mieszcza(miniaturki) na ekranie.


Pozdrawiam

[Lukesh]

Wklej logi wg opisu http://forum.programosy.pl/hijackthis-amp-silent-runners-gtobsuga-i-umieszczanie-vt9452.html

[cysiowy]

Kod: Zaznacz wszystko

Logfile of HijackThis v1.99.1
Scan saved at 20:25:46, on 2007-06-27
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\DialNet\WrOS.EXE
C:\WINDOWS\system32\sstray.exe
C:\Program Files\DialNet\winpppoverethernet.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Inne\Gadu-Gadu\gg.exe
C:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Common Files\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
D:\Systemowe\Firefox\firefox.exe
C:\Documents and Settings\Krzysiek\Pulpit\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Home Edition\kav.exe" /minimize
O4 - HKLM\..\Run: [a-winpoet-service] "C:\Program Files\DialNet\winpppoverethernet.exe"
O4 - HKLM\..\Run: [z-wrdialer] "C:\Program Files\DialNet\wrdialer.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Adobe\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "D:\Inne\Gadu-Gadu\gg.exe" /tray
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Download all links using BitComet - res://D:\Inne\Bitcomet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download link using &BitComet - res://D:\Inne\Bitcomet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{70CD4BB4-5843-4229-A45F-8E8FC309D94C}: NameServer = 217.30.129.149 217.30.137.200
O17 - HKLM\System\CCS\Services\Tcpip\..\{E72C8852-C2E3-4D4E-9AB9-3A91FCDC7807}: NameServer = 217.30.129.149,217.30.137.200
O23 - Service: Crypkey License - CrypKey (Canada) Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Home Edition\kavsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: WinPPPoverEthernet - Fine Point Technologies, Inc. - C:\Program Files\DialNet\WrOS.EXE



Kod: Zaznacz wszystko

"Silent Runners.vbs", revision 49, http://www.silentrunners.org/
Operating System: Windows XP SP2
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"CTFMON.EXE" = "C:\WINDOWS\system32\ctfmon.exe" [MS]
"Gadu-Gadu" = ""D:\Inne\Gadu-Gadu\gg.exe" /tray" ["Gadu-Gadu S.A."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"NvCplDaemon" = "RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup" [MS]
"nwiz" = "nwiz.exe /install" ["NVIDIA Corporation"]
"nForce Tray Options" = "sstray.exe /r" ["NVIDIA Corporation"]
"KAVPersonal50" = ""C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Home Edition\kav.exe" /minimize" ["Kaspersky Lab"]
"a-winpoet-service" = ""C:\Program Files\DialNet\winpppoverethernet.exe"" ["Fine Point Technologies, Inc."]
"(Default)" = "(empty string)" [file not found]
"z-wrdialer" = ""C:\Program Files\DialNet\wrdialer.exe"" ["Fine Point Technologies, Inc."]
"NvMediaCenter" = "RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit" [MS]
"SunJavaUpdateSched" = ""C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"" ["Sun Microsystems, Inc."]
"Adobe Reader Speed Launcher" = ""D:\Adobe\Reader\Reader_sl.exe"" ["Adobe Systems Incorporated"]
"Sony Ericsson PC Suite" = ""C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions" ["Sony Ericsson Mobile Communications AB"]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided)
  -> {HKLM...CLSID} = "Adobe PDF Reader Link Helper"
                   \InProcServer32\(Default) = "C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided)
  -> {HKLM...CLSID} = "SSVHelper Class"
                   \InProcServer32\(Default) = "C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll" ["Sun Microsystems, Inc."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania"
  -> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania"
                   \InProcServer32\(Default) = "deskpan.dll" [file not found]
"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu"
  -> {HKLM...CLSID} = "HyperTerminal Icon Ext"
                   \InProcServer32\(Default) = "C:\WINDOWS\System32\hticons.dll" ["Hilgraeve, Inc."]
"{63da6ec0-2e98-11cf-8d82-444553540000}" = "FTP Folders Webview"
  -> {HKLM...CLSID} = "Microsoft FTP Folder"
                   \InProcServer32\(Default) = "C:\WINDOWS\System32\msieftp.dll" [null data]
"{A70C977A-BF00-412C-90B7-034C51DA2439}" = "NvCpl DesktopContext Class"
  -> {HKLM...CLSID} = "DesktopContext Class"
                   \InProcServer32\(Default) = "C:\WINDOWS\system32\nvcpl.dll" ["NVIDIA Corporation"]
"{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Desktop Explorer"
  -> {HKLM...CLSID} = "Desktop Explorer"
                   \InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"]
"{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu"
  -> {HKLM...CLSID} = (no title provided)
                   \InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"]
"{1E9B04FB-F9E5-4718-997B-B8DA88302A48}" = "nView Desktop Context Menu"
  -> {HKLM...CLSID} = "nView Desktop Context Menu"
                   \InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"]
"{0006F045-0000-0000-C000-000000000046}" = "Microsoft Outlook Custom Icon Handler"
  -> {HKLM...CLSID} = "Rozszerzenie ikon plików programu Outlook"
                   \InProcServer32\(Default) = "C:\Program Files\Microsoft Office\Office10\OLKFSTUB.DLL" [MS]
"{42042206-2D85-11D3-8CFF-005004838597}" = "Microsoft Office HTML Icon Handler"
  -> {HKLM...CLSID} = (no title provided)
                   \InProcServer32\(Default) = "C:\Program Files\Microsoft Office\Office10\msohev.dll" [MS]
"{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension"
  -> {HKLM...CLSID} = "WinRAR"
                   \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
"{FFB699E0-306A-11d3-8BD1-00104B6F7516}" = "Play on my TV helper"
  -> {HKLM...CLSID} = "NVIDIA CPL Extension"
                   \InProcServer32\(Default) = "C:\WINDOWS\system32\nvcpl.dll" ["NVIDIA Corporation"]
"{B95713CD-06FF-4D35-A9DA-4DBDFE5FD7F4}" = "Hex Editor Shell Extension"
  -> {HKLM...CLSID} = "ShellExt Class"
                   \InProcServer32\(Default) = "D:\Hex Editor 3.x\heshell.dll" ["HHD Software"]
"{A5110426-177D-4e08-AB3F-785F10B4439C}" = "Sony Ericsson File Manager"
  -> {HKLM...CLSID} = "Sony Ericsson File Manager"
                   \InProcServer32\(Default) = "C:\Program Files\Sony Ericsson\Mobile2\File Manager\fmgrgui.dll" ["Sony Ericsson Mobile Communications AB"]

HKLM\Software\Classes\Folder\shellex\ColumnHandlers\
{F9DB5320-233E-11D1-9F84-707F02C10627}\(Default) = "PDF Column Info"
  -> {HKLM...CLSID} = "PDF Shell Extension"
                   \InProcServer32\(Default) = "C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll" ["Adobe Systems, Inc."]

HKLM\Software\Classes\*\shellex\ContextMenuHandlers\
Hex Editor 3\(Default) = "{B95713CD-06FF-4D35-A9DA-4DBDFE5FD7F4}"
  -> {HKLM...CLSID} = "ShellExt Class"
                   \InProcServer32\(Default) = "D:\Hex Editor 3.x\heshell.dll" ["HHD Software"]
Kaspersky Anti-Virus\(Default) = "{dd230880-495a-11d1-b064-008048ec2fc5}"
  -> {HKLM...CLSID} = (no title provided)
                   \InProcServer32\(Default) = "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Home Edition\shellex.dll" ["Kaspersky Lab"]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
  -> {HKLM...CLSID} = "WinRAR"
                   \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
  -> {HKLM...CLSID} = "WinRAR"
                   \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\
Kaspersky Anti-Virus\(Default) = "{dd230880-495a-11d1-b064-008048ec2fc5}"
  -> {HKLM...CLSID} = (no title provided)
                   \InProcServer32\(Default) = "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Home Edition\shellex.dll" ["Kaspersky Lab"]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
  -> {HKLM...CLSID} = "WinRAR"
                   \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]


Group Policies {GPedit.msc branch and setting}:
-----------------------------------------------

Note: detected settings may not have any effect.

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\

"shutdownwithoutlogon" = (REG_DWORD) hex:0x00000001
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
Shutdown: Allow system to be shut down without having to log on}

"undockwithoutlogon" = (REG_DWORD) hex:0x00000001
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
Devices: Allow undock without having to log on}


Active Desktop and Wallpaper:
-----------------------------

Active Desktop may be disabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

Displayed if Active Desktop enabled and wallpaper not set by Group Policy:
HKCU\Software\Microsoft\Internet Explorer\Desktop\General\
"Wallpaper" = "C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp"

Displayed if Active Desktop disabled and wallpaper not set by Group Policy:
HKCU\Control Panel\Desktop\
"Wallpaper" = "C:\Documents and Settings\Krzysiek\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp"


Enabled Screen Saver:
---------------------

HKCU\Control Panel\Desktop\
"SCRNSAVE.EXE" = "C:\WINDOWS\System32\logon.scr" [MS]


Startup items in "Krzysiek" & "All Users" startup folders:
----------------------------------------------------------

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart
"Adobe Gamma Loader" -> shortcut to: "C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe" ["Adobe Systems, Inc."]
"Microsoft Office" -> shortcut to: "C:\Program Files\Microsoft Office\Office10\OSA.EXE -b -l" [MS]


Winsock2 Service Provider DLLs:
-------------------------------

Namespace Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]
000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]

Transport Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
%SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 21
%SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05


Toolbars, Explorer Bars, Extensions:
------------------------------------

Extensions (Tools menu items, main toolbar menu buttons)

HKLM\Software\Microsoft\Internet Explorer\Extensions\
{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\
"MenuText" = "Sun Java Console"
"CLSIDExtension" = "{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}"
  -> {HKCU...CLSID} = "Java Plug-in 1.6.0_01"
                   \InProcServer32\(Default) = "C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll" ["Sun Microsystems, Inc."]
  -> {HKLM...CLSID} = "Java Plug-in 1.6.0_01"
                   \InProcServer32\(Default) = "C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll" ["Sun Microsystems, Inc."]

{FB5F1910-F110-11D2-BB9E-00C04F795683}\
"ButtonText" = "Messenger"
"MenuText" = "Windows Messenger"
"Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS]


Running Services (Display Name, Service Name, Path {Service DLL}):
------------------------------------------------------------------

Crypkey License, Crypkey License, "crypserv.exe" ["CrypKey (Canada) Ltd."]
Cyberlink RichVideo Service(CRVS), RichVideo, ""C:\Program Files\CyberLink\Shared Files\RichVideo.exe"" [empty string]
kavsvc, kavsvc, ""C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Home Edition\kavsvc.exe"" ["Kaspersky Lab"]
Machine Debug Manager, MDM, ""C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe"" [MS]
NVIDIA Display Driver Service, NVSvc, "C:\WINDOWS\system32\nvsvc32.exe" ["NVIDIA Corporation"]
PnkBstrA, PnkBstrA, "C:\WINDOWS\system32\PnkBstrA.exe" [null data]
Windows User Mode Driver Framework, UMWdf, "C:\WINDOWS\system32\wdfmgr.exe" [MS]
WinPPPoverEthernet, WinPPPoverEthernet, "C:\Program Files\DialNet\WrOS.EXE" ["Fine Point Technologies, Inc."]


----------
+ This report excludes default entries except where indicated.
+ To see *everywhere* the script checks and *everything* it finds,
  launch it from a command prompt or a shortcut with the -all parameter.
+ To search all directories of local fixed drives for DESKTOP.INI
  DLL launch points, use the -supp parameter or answer "No" at the
  first message box and "Yes" at the second message box.
---------- (total run time: 58 seconds, including 5 seconds for message boxes)


Prosze

[wojtas]

daj loga z tego programu bo tu jest czysto:

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

[cysiowy]

[code]"Krzysiek" - 2007-06-27 22:25:54 - ComboFix 07-06-27.7 - Dodatek Service Pack 2 NTFS


((((((((((((((((((((((((( Files Created from 2007-05-27 to 2007-06-27 )))))))))))))))))))))))))))))))


2007-06-27 22:25 49,152 --a------ C:\WINDOWS\nircmd.exe
2007-06-26 19:03 <DIR> d-------- C:\DOCUME~1\Patorscy\DANEAP~1\Help
2007-06-26 18:52 <DIR> d-------- C:\DOCUME~1\Patorscy\DANEAP~1\Teleca
2007-06-26 14:42 <DIR> d-------- C:\DOCUME~1\Krzysiek\DANEAP~1\Teleca
2007-06-26 13:39 <DIR> d-------- C:\Program Files\Sony Ericsson
2007-06-26 13:39 <DIR> d-------- C:\Program Files\Common Files\Teleca Shared
2007-06-26 13:39 <DIR> d-------- C:\DOCUME~1\Iza\DANEAP~1\Teleca
2007-06-26 13:39 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Documents
2007-06-26 13:39 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\Teleca
2007-06-26 13:39 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\Sony Ericsson
2007-06-26 13:38 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
2007-06-26 13:37 6,144 --a------ C:\WINDOWS\system32\drivers\k750cm.sys
2007-06-26 13:37 5,744 --a------ C:\WINDOWS\system32\drivers\k750wh.sys
2007-06-23 12:38 98,304 --a------ C:\WINDOWS\system32\CmdLineExt.dll
2007-06-22 23:38 <DIR> d-------- C:\WINDOWS\SxsCaPendDel
2007-06-21 17:05 <DIR> d-------- C:\Program Files\3DO
2007-06-17 16:43 <DIR> d-------- C:\Program Files\Real Alternative
2007-06-17 16:43 <DIR> d-------- C:\Program Files\Media Player Classic
2007-06-17 16:43 <DIR> d-------- C:\DOCUME~1\Krzysiek\DANEAP~1\Real
2007-06-17 16:43 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\Real
2007-06-11 12:39 1,276,783 --a------ C:\WINDOWS\AVON Style Screensaver.scr
2007-06-09 19:07 21,840 --a----t- C:\WINDOWS\system32\SIntfNT.dll
2007-06-09 19:07 17,212 --a----t- C:\WINDOWS\system32\SIntf32.dll
2007-06-09 19:07 12,067 --a----t- C:\WINDOWS\system32\SIntf16.dll
2007-06-08 18:02 <DIR> d-------- C:\DOCUME~1\Patorscy\DANEAP~1\Gadu-Gadu
2007-06-07 12:10 <DIR> d-------- C:\DOCUME~1\Krzysiek\DANEAP~1\Leadertech
2007-06-06 05:32 <DIR> d-------- C:\WINDOWS\system32\??
2007-06-05 18:10 237,568 --a------ C:\WINDOWS\system32\whiptkw.dll
2007-06-05 18:10 210,944 --a------ C:\WINDOWS\system32\MSVCRT10.DLL
2007-06-05 18:09 78,336 --a------ C:\WINDOWS\system32\dbjavio6.dll
2007-06-05 18:09 77,312 --a------ C:\WINDOWS\system32\dbauth6.dll
2007-06-05 18:09 61,440 --a------ C:\WINDOWS\system32\Crypserv.exe
2007-06-05 18:09 499,712 --a------ C:\WINDOWS\system32\heidiw.dll
2007-06-05 18:09 446,976 --a------ C:\WINDOWS\system32\heidi3.dll
2007-06-05 18:09 28,672 --a------ C:\WINDOWS\system32\mtlw.dll
2007-06-05 18:09 28,518 --a------ C:\WINDOWS\system32\Ckldrv.sys
2007-06-05 18:09 27,648 -ra------ C:\WINDOWS\Setup_ck.exe
2007-06-05 18:09 24,576 --a------ C:\WINDOWS\system32\texturew.dll
2007-06-05 18:09 18,432 --a------ C:\WINDOWS\Setup_ck.dll
2007-06-05 18:09 165,888 --a------ C:\WINDOWS\Ckconfig.exe
2007-06-05 18:09 11,776 --a------ C:\WINDOWS\Ckrfresh.exe
2007-06-05 18:09 106,496 --a------ C:\WINDOWS\system32\dllongw.dll
2007-06-05 18:09 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\WorkshopCD
2007-06-05 18:02 16,384 --a------ C:\WINDOWS\system32\FileOps.exe
2007-06-02 22:18 <DIR> d-------- C:\DOCUME~1\Iza\Interia
2007-06-01 21:44 307,200 --a------ C:\WINDOWS\IsUn0415.exe
2007-06-01 20:12 99,904 --a------ C:\WINDOWS\system32\PnkBstrB.exe
2007-06-01 20:12 63,040 --a------ C:\WINDOWS\system32\PnkBstrA.exe
2007-06-01 20:12 22,584 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys
2007-06-01 20:12 <DIR> d-------- C:\WINDOWS\system32\LogFiles


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-06-27 20:16:57 -------- d-----w C:\Program Files\DialNet
2007-06-27 13:34:49 -------- d-----w C:\DOCUME~1\Krzysiek\DANEAP~1\teamspeak2
2007-06-26 12:56:14 -------- d-----w C:\DOCUME~1\Krzysiek\DANEAP~1\Hamachi
2007-06-23 09:59:16 -------- d--h--w C:\Program Files\InstallShield Installation Information
2007-05-20 14:31:14 -------- d-----w C:\Program Files\Common Files\DirectX
2007-05-18 18:20:36 658 ----a-w C:\WINDOWS\mozver.dat
2007-05-16 13:52:12 -------- d-----w C:\DOCUME~1\Krzysiek\DANEAP~1\DeepBurner
2007-05-13 17:43:23 26,056 ----a-w C:\WINDOWS\system32\drivers\hamachi.sys
2007-05-13 08:57:32 -------- d-----w C:\Program Files\DAEMON Tools
2007-05-13 08:45:44 682,232 ----a-w C:\WINDOWS\system32\drivers\sptd.sys
2007-05-07 09:25:04 -------- d-----w C:\Program Files\SmartSound Software
2007-05-07 09:24:58 -------- d-----w C:\Program Files\Common Files\InstallShield
2007-05-07 09:24:50 -------- d-----w C:\Program Files\DivX
2007-05-07 09:24:47 8 --sh--r C:\WINDOWS\system32\5ED8D9BA62.sys
2007-05-07 09:24:47 4,704 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
2007-05-07 09:24:29 -------- d-----w C:\Program Files\CyberLink
2007-05-07 09:23:22 -------- d-----w C:\Program Files\QuickTime
2007-05-06 21:31:27 -------- d-----w C:\DOCUME~1\Krzysiek\DANEAP~1\CyberLink
2007-05-06 15:08:10 -------- d-----w C:\Program Files\Winamp
2007-05-06 15:06:10 -------- d-----w C:\DOCUME~1\Krzysiek\DANEAP~1\MusicIP
2007-05-06 11:41:03 -------- d-----w C:\DOCUME~1\Krzysiek\DANEAP~1\InstallShield
2007-05-06 11:37:52 -------- d-----w C:\Program Files\Kaspersky Lab
2007-05-06 11:35:31 -------- d-----w C:\DOCUME~1\Krzysiek\DANEAP~1\Talkback
2007-05-06 11:33:42 -------- d-----w C:\DOCUME~1\Krzysiek\DANEAP~1\Gadu-Gadu
2007-05-06 11:30:12 0 ----a-w C:\WINDOWS\nsreg.dat
2007-05-06 11:17:03 -------- d-----w C:\DOCUME~1\Krzysiek\DANEAP~1\Skype
2007-05-06 11:10:48 -------- d-----w C:\Program Files\Common Files\ODBC
2007-05-06 11:10:46 -------- d-----w C:\Program Files\Common Files\SpeechEngines
2007-05-06 11:00:48 49,492 ----a-w C:\WINDOWS\system32\perfc015.dat
2007-05-06 11:00:48 355,486 ----a-w C:\WINDOWS\system32\perfh015.dat
2007-05-06 10:57:33 -------- d-----w C:\Program Files\Messenger
2007-05-06 10:51:45 -------- d-----w C:\Program Files\Movie Maker
2007-05-06 10:49:02 -------- d-----w C:\Program Files\Windows NT
2007-05-06 10:22:45 -------- d--h--w C:\Program Files\WindowsUpdate
2007-05-06 10:19:24 -------- d-----w C:\Program Files\microsoft frontpage
2007-05-06 10:19:08 0 --sha-r C:\MSDOS.SYS
2007-05-06 10:19:08 0 --sha-r C:\IO.SYS
2007-05-06 10:19:08 0 ----a-w C:\CONFIG.SYS
2007-05-06 10:19:08 0 ----a-w C:\AUTOEXEC.BAT
2007-05-06 10:18:05 -------- d-----w C:\Program Files\Usługi online
2007-05-06 10:17:01 -------- d-----w C:\Program Files\Common Files\MSSoap
2007-05-06 10:16:33 21,856 ----a-w C:\WINDOWS\system32\emptyregdb.dat
2007-05-06 10:16:05 -------- d-----w C:\Program Files\MSN Gaming Zone


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll [2007-03-14 03:43]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nwiz"="nwiz.exe" [2006-10-22 12:22 C:\WINDOWS\system32\nwiz.exe]
"nForce Tray Options"="sstray.exe" [2002-12-05 06:23 C:\WINDOWS\system32\sstray.exe]
"a-winpoet-service"="C:\Program Files\DialNet\winpppoverethernet.exe" [2007-01-18 10:26]
"@"="" []
"z-wrdialer"="C:\Program Files\DialNet\wrdialer.exe" [2007-01-18 13:18]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]
"Adobe Reader Speed Launcher"="D:\Adobe\Reader\Reader_sl.exe" [2007-05-11 03:06]
"Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2005-10-26 16:17]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:44]
"Gadu-Gadu"="D:\Inne\Gadu-Gadu\gg.exe" [2007-04-17 23:41]


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{71571ab8-fbc9-11db-807f-806d6172696f}]
AutoRun\command- G:\autostart.exe


**************************************************************************

catchme 0.3.721 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-06-27 22:27:20
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

C:\WINDOWS\001226_.tmp:KAVICHS 68 bytes hidden from API
C:\WINDOWS\003501_.tmp:KAVICHS 68 bytes hidden from API
C:\WINDOWS\AVON Style Screensaver.scr:KAVICHS 228 bytes hidden from API
C:\WINDOWS\bootstat.dat:KAVICHS 228 bytes hidden from API
C:\WINDOWS\Babelki.bmp:KAVICHS 100 bytes hidden from API
C:\WINDOWS\catchme.exe:KAVICHS 36 bytes hidden from API
C:\WINDOWS\msdfmap.ini:KAVICHS 68 bytes hidden from API
C:\WINDOWS\msgsocm.log:KAVICHS 132 bytes hidden from API
C:\WINDOWS\msmqinst.log:KAVICHS 164 bytes hidden from API
C:\WINDOWS\my.ini:KAVICHS 100 bytes hidden from API
C:\WINDOWS\Na rybkach.bmp:KAVICHS 100 bytes hidden from API
C:\WINDOWS\Nefryt.bmp:KAVICHS 100 bytes hidden from API
C:\WINDOWS\netfxocm.log:KAVICHS 164 bytes hidden from API
C:\WINDOWS\Niebieska koronka 16.bmp:KAVICHS 100 bytes hidden from API
C:\WINDOWS\nircmd.exe:KAVICHS 36 bytes hidden from API
C:\WINDOWS\notepad.exe:KAVICHS 196 bytes hidden from API
C:\WINDOWS\ntdtcsetup.log:KAVICHS 164 bytes hidden from API
C:\WINDOWS\ocgen.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\ocmsn.log:KAVICHS 132 bytes hidden from API
C:\WINDOWS\ODBC.INI:KAVICHS 68 bytes hidden from API
C:\WINDOWS\ODBCINST.INI:KAVICHS 68 bytes hidden from API
C:\WINDOWS\OEWABLog.txt:KAVICHS 100 bytes hidden from API
C:\WINDOWS\php.ini:KAVICHS 132 bytes hidden from API
C:\WINDOWS\Pod mikroskopem.bmp:KAVICHS 132 bytes hidden from API
C:\WINDOWS\Setup_ck.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\Setup_ck.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\slrundll.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\spupdsvc.log:KAVICHS 100 bytes hidden from API
C:\WINDOWS\Stiuk z Santa Fe.bmp:KAVICHS 100 bytes hidden from API
C:\WINDOWS\svcpack.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system.ini:KAVICHS 196 bytes hidden from API
C:\WINDOWS\tabletoc.log:KAVICHS 132 bytes hidden from API
C:\WINDOWS\TASKMAN.EXE:KAVICHS 68 bytes hidden from API
C:\WINDOWS\tsctv.ini:KAVICHS 100 bytes hidden from API
C:\WINDOWS\tsoc.log:KAVICHS 164 bytes hidden from API
C:\WINDOWS\twain.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\twain_32.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\twunk_16.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\twunk_32.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\uninst.exe:KAVICHS 100 bytes hidden from API
C:\WINDOWS\unvise32qt.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\vb.ini:KAVICHS 68 bytes hidden from API
C:\WINDOWS\QTFont.for:KAVICHS 68 bytes hidden from API
C:\WINDOWS\QTFont.qfn:KAVICHS 132 bytes hidden from API
C:\WINDOWS\regedit.exe:KAVICHS 132 bytes hidden from API
C:\WINDOWS\REGLOCS.OLD:KAVICHS 68 bytes hidden from API
C:\WINDOWS\regopt.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\Rododendron.bmp:KAVICHS 100 bytes hidden from API
C:\WINDOWS\SchedLgU.Txt:KAVICHS 228 bytes hidden from API
C:\WINDOWS\sessmgr.setup.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\setdebug.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\setupact.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\setupapi.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\setuperr.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\vminst.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\vmmreg32.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\Wachlarze.bmp:KAVICHS 100 bytes hidden from API
C:\WINDOWS\wiadebug.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\wiaservc.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\win.ini:KAVICHS 228 bytes hidden from API
C:\WINDOWS\Windows Update.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\WindowsUpdate.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\winhelp.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\winhlp32.exe:KAVICHS 132 bytes hidden from API
C:\WINDOWS\winnt.bmp:KAVICHS 100 bytes hidden from API
C:\WINDOWS\winnt256.bmp:KAVICHS 100 bytes hidden from API
C:\WINDOWS\winpoet_postinstallation.txt:KAVICHS 68 bytes hidden from API
C:\WINDOWS\winpoet_preinstallation.txt:KAVICHS 68 bytes hidden from API
C:\WINDOWS\WinPoET_Runtime.txt:KAVICHS 36 bytes hidden from API
C:\WINDOWS\wmprfPLK.prx:KAVICHS 68 bytes hidden from API
C:\WINDOWS\wmsetup.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\WMSysPr9.prx:KAVICHS 68 bytes hidden from API
C:\WINDOWS\WMSysPrx.prx:KAVICHS 68 bytes hidden from API
C:\WINDOWS\_default.pif:KAVICHS 132 bytes hidden from API
C:\WINDOWS\DtcInstall.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\eSellerateEngine.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\explorer.exe:KAVICHS 228 bytes hidden from API
C:\WINDOWS\explorer.scf:KAVICHS 100 bytes hidden from API
C:\WINDOWS\FaxSetup.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\hh.exe:KAVICHS 196 bytes hidden from API
C:\WINDOWS\iis6.log:KAVICHS 164 bytes hidden from API
C:\WINDOWS\imsins.BAK:KAVICHS 132 bytes hidden from API
C:\WINDOWS\imsins.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\Indianski pled.bmp:KAVICHS 100 bytes hidden from API
C:\WINDOWS\IsUn0415.exe:KAVICHS 228 bytes hidden from API
C:\WINDOWS\jautoexp.dat:KAVICHS 68 bytes hidden from API
C:\WINDOWS\Kawa.bmp:KAVICHS 100 bytes hidden from API
C:\WINDOWS\KB901214.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\medctroc.Log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\ModemLog_SoftV92 Data Fax Modem.txt:KAVICHS 36 bytes hidden from API
C:\WINDOWS\mozver.dat:KAVICHS 68 bytes hidden from API
C:\WINDOWS\Ckconfig.exe:KAVICHS 132 bytes hidden from API
C:\WINDOWS\Puch.bmp:KAVICHS 132 bytes hidden from API
C:\WINDOWS\setuplog.txt:KAVICHS 100 bytes hidden from API
C:\WINDOWS\vbaddin.ini:KAVICHS 68 bytes hidden from API
C:\WINDOWS\Ckrfresh.exe:KAVICHS 132 bytes hidden from API
C:\WINDOWS\clock.avi:KAVICHS 68 bytes hidden from API
C:\WINDOWS\cmsetacl.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\comsetup.log:KAVICHS 164 bytes hidden from API
C:\WINDOWS\Crypkey.ini:KAVICHS 164 bytes hidden from API
C:\WINDOWS\DirectX.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\dirsaver.ini:KAVICHS 228 bytes hidden from API
C:\WINDOWS\doom3.ini:KAVICHS 68 bytes hidden from API
C:\WINDOWS\DPINST.LOG:KAVICHS 36 bytes hidden from API
C:\WINDOWS\system32\fastopen.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\msoert2.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\serialui.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\$winnt$.inf:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\12520437.cpx:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\12520850.cpx:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\5ED8D9BA62.sys:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\6to4svc.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\aaaamon.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\access.cpl:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\acctres.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\accwiz.exe:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\acelpdec.ax:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\acledit.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\drmclien.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\drmstor.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\drmv2clt.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\drprov.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\drwatson.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\drwtsn32.exe:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\ds16gt.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\ds32gt.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\dsauth.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dsdmo.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\dsdmoprp.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dskquota.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\dskquoui.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\dsound.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\openfiles.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\opengl32.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\osk.exe:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\osuninst.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\osuninst.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\p2p.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\p2pgasvc.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\p2pgraph.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\p2pnetsh.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\p2psvc.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\packager.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\pagefileconfig.vbs:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\panmap.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\paqsp.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\pathping.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\pautoenr.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\PCDLIB32.DLL:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\pcl.sep:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\pdh.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\pentnt.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\perfc009.dat:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\perfc015.dat:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\perfci.h:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\perfci.ini:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\perfctrs.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\perfd009.dat:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\unicows.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\unimdm.tsp:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\unimdmat.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\uniplat.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\unlodctr.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\untfs.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\upnp.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\upnpcont.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\upnphost.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\upnpui.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\ups.exe:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\ureg.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\url.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\urlmon.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\usbmon.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\usbui.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\user.exe:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\user32.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\userenv.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\userinit.exe:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\msgina.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\msgsm32.acm:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\msgsvc.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\msh261.drv:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\msh263.drv:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\mshearts.exe:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\mshta.exe:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\mshtml.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\mshtml.tlb:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\mshtmled.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\mshtmler.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\msi.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\msident.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\msidle.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\msidntld.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\browselc.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\browser.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\browseui.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\browsewm.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\bthci.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\bthprops.cpl:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\bthserv.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\btpanui.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\cabinet.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\cabview.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\cacls.exe:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\calc.exe:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\camocx.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\capesnpn.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\cards.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\catsrv.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\catsrvps.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\catsrvut.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\aclui.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\apcups.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\attrib.exe:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\bopomofo.uce:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\ccfgnt.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\cic.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\cmmgr32.hlp:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\compobj.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\cryptnet.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\c_10017.nls:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\c_28591.nls:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\d3dim.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\dbcis6.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\ddeml.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\dfrgres.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\diskcopy.com:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dmscript.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dpnet.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\dsound.vxd:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\ega.cpi:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\servdeps.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\services.exe:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\services.msc:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\winhttp.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\wininet.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\winipsec.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\winlogon.exe:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\winmine.exe:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\winmm.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\winmsd.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\winnls.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\winntbbu.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\winoldap.mod:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\winrnr.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\winscard.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\winshfhc.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\winsock.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\winspool.drv:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\winspool.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\winsrv.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\winsta.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\winstrm.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\wintrust.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\winver.exe:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\netid.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\netlogon.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\netman.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\netmsg.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\netplwiz.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\netrap.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\netsetup.cpl:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\netsetup.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\netsh.exe:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\netshell.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\netstat.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\netui0.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\netui1.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\netui2.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\netware.drv:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\newdev.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\nlhtml.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\nlsfunc.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\nmevtmsg.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\nmmkcert.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\noise.chs:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\noise.cht:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\noise.dat:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\noise.deu:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\noise.eng:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\kbdusl.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\kbdusr.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\kbdusx.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\kbdycl.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\kd1394.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\kdcom.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\kerberos.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\kernel32.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\key01.sys:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\keyboard.drv:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\keyboard.sys:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\keymgr.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\keystone.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\KGyGaAvL.sys:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\kmddsp.tsp:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\korean.uce:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\rdpclip.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\rdpdd.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\rdpsnd.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\rdpwsx.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\rdsaddin.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\rdshost.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\recover.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\redir.exe:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\reg.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\regapi.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\regedt32.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\regini.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\regsvc.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\regsvr32.exe:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\regwiz.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\regwizc.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\relog.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\remotepg.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\remotesp.tsp:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\rend.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\replace.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\reset.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\resutils.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\rexec.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\riched20.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\riched32.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\rmoc3260.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\rnr20.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\ROBOEX32.DLL:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\activeds.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\activeds.tlb:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\actmovie.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\actxprxy.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\admparse.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\adptif.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\adsldp.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\adsldpc.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\adsmsext.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\adsnds.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\adsnt.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\adsnw.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\advapi32.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\advpack.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\ahui.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\alg.exe:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\alrsvc.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\amcompat.tlb:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\amstream.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\ansi.sys:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\append.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\apphelp.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\appmgmts.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\appmgr.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\appwiz.cpl:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\arp.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\asctrls.ocx:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\asferror.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\asr_fmt.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\asr_ldm.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\asr_pfu.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\asycfilt.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\at.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\ATHPRXY.DLL:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\ati2cqag.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\ati2dvaa.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\ati2dvag.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\ati3d1ag.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\ati3d2ag.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\ati3duag.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\ativdaxx.ax:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\ativmvxx.ax:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\ativtmxx.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\ativvaxx.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\atkctrs.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\atl.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\atmadm.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\atmfd.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\atmlib.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\atmpvcno.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\atrace.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\audiosrv.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\auditusr.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\authz.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\autochk.exe:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\autoconv.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\autodisc.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\AUTOEXEC.NT:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\autofmt.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\autolfn.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\avicap.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\avicap32.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\avifil32.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\avifile.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\avmeter.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\avtapi.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\avwav.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\basesrv.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\batmeter.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\batt.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\bidispl.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\bios1.rom:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\bios4.rom:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\bitsprx2.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\bitsprx3.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\blackbox.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\blastcln.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\bootcfg.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\bootok.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\bootvid.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\bootvrfy.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\cryptsvc.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\cryptui.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\cscdll.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\cscript.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\cscui.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\csrsrv.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\csrss.exe:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\csseqchk.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\ctfmon.exe:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\ctl3d32.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\ctl3dv2.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\ctype.nls:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\c_037.nls:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\c_10000.nls:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\c_10006.nls:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\c_10007.nls:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\c_10010.nls:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\c_28592.nls:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\c_28593.nls:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\C_28594.NLS:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\C_28595.NLS:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\C_28597.NLS:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\c_28598.nls:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\c_28599.nls:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\c_28603.nls:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\c_28605.nls:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\c_437.nls:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\c_500.nls:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\c_737.nls:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\c_775.nls:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\c_850.nls:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\c_852.nls:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\c_855.nls:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\c_857.nls:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\c_860.nls:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\c_861.nls:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\c_863.nls:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\c_865.nls:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\c_866.nls:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\c_869.nls:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\c_874.nls:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\c_875.nls:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\c_932.nls:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\c_936.nls:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\c_949.nls:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\c_950.nls:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\D2htls32.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\d3d8.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\d3d8thk.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\d3d9.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\cidaemon.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\ciodm.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\cipher.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\cisvc.exe:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\ckcnv.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\Ckldrv.sys:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\clb.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\clbcatex.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\clbcatq.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\cleanmgr.exe:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\cliconf.chm:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\cliconfg.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\cliconfg.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\cliconfg.rll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\clipbrd.exe:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\clipsrv.exe:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\clspack.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\clusapi.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\cmcfg32.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\cmd.exe:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\cmdial32.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\cmdl32.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\cmdlib.wsc:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\CmdLineExt.dll:KAVICHS 36 bytes hidden from API
C:\WINDOWS\system32\cmmon32.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\cmos.ram:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\cmpbk32.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\cmprops.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\cmsetacl.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\cmstp.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\cmutil.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\cnbjmon.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\cnetcfg.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\cnvfat.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\colbact.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\comaddin.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\comcat.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\comct332.ocx:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\comctl32.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\comdlg32.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\comdlg32.ocx:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\comm.drv:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\command.com:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\commdlg.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\comp.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\compact.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\compatui.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\compmgmt.msc:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\compstui.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\comrepl.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\comres.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\comsdupd.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\comsnap.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\comsvcs.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\comuid.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\CONFIG.NT:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\CONFIG.TMP:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\confmsp.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\conime.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\console.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\control.exe:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\convert.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\corpol.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\country.sys:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\credui.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\crtdll.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\Crypserv.exe:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\crypt32.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\cryptdlg.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\cryptdll.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\cryptext.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\d3dim700.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\d3dpmesh.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\d3dramp.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\d3drm.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\d3dx9_24.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\d3dx9_25.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\d3dx9_26.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\d3dx9_27.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\d3dx9_28.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\d3dx9_29.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\d3dx9_30.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\d3dxof.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\danim.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dataclen.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\datime.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\davclnt.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\daxctle.ocx:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dbauth6.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\ddeshare.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\ddraw.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\ddrawex.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\debug.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\defrag.exe:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\desk.cpl:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\deskadp.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\deskmon.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\deskperf.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\devenum.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\devmgmt.msc:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\devmgr.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\dfrg.msc:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dfrgfat.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dfrgntfs.exe:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\dfrgsnap.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\dfrgui.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dfsshlex.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\dgnet.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\dgrpsetu.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dgsetup.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dhcpcsvc.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\dhcpmon.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dhcpsapi.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\diactfrm.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\diantz.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\digest.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\dimap.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\dinput.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\dinput8.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\diskcomp.com:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dllhost.exe:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\dllhst3g.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dllongw.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\dmadmin.exe:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\dmband.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dmcompos.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dmconfig.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dmdlgs.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dmdskmgr.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dmdskres.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dmime.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dmintf.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dmloader.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\dmocx.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\dmremote.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dmserver.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\dmstyle.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dmsynth.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dmusic.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dmutil.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dmview.ocx:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dnsapi.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\dnsrslvr.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\docprop.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\docprop2.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\doskey.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dosx.exe:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\dpcdll.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\dplay.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dplaysvr.exe:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\dplayx.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\dpmodemx.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\dpnaddr.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\faultrep.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\faxpatch.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\fc.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\fde.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\fdeploy.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\feclient.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\filemgmt.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\FileOps.exe:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\find.exe:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\findstr.exe:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\finger.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\firewall.cpl:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\fixmapi.exe:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\fldrclnr.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\fltlib.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\fltmc.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\FM20.DLL:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\FM20ENU.DLL:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\fmifs.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\FNTCACHE.DAT:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\fontext.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\fontsub.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\fontview.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\forcedos.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\format.com:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\framebuf.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\frapsvid.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\freecell.exe:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\fsmgmt.msc:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\fsquirt.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dsound3d.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dsprop.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dsprpres.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\dsquery.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\dssec.dat:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dssec.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\dssenh.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\dsuiext.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\dswave.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\dumprep.exe:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\duser.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\dvdplay.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dvdupgrd.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dwwin.exe:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\dx3j.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\dx7vb.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dx8vb.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dxdiag.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\dxdiagn.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\dxmasf.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\dxtmsft.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\dxtrans.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\edit.com:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\edit.hlp:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\edlin.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\efsadu.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\els.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\emptyregdb.dat:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\encapi.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\encdec.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\EqnClass.Dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\ersvc.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\es.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\esent.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\esent97.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\esentprf.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\esentprf.hxx:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\esentprf.ini:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\esentutl.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\esnecil.ind:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\esnecil.nlp:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\eudcedit.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\eula.txt:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\eventcls.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\eventcreate.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\eventlog.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\eventquery.vbs:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\eventtriggers.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\eventvwr.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\eventvwr.msc:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\exe2bin.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\expand.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\expsrv.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\extmgr.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\extrac32.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\exts.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\fsutil.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\ftp.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\ftsrch.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\fwcfg.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\g711codc.ax:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\gb2312.uce:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\gcdef.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\gdi.exe:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\gdi32.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\system32\gdifontw.hdi:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\gdiw.hdi:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\geo.nls:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\getmac.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\getuname.dll:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\glmf32.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\glu32.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\gpedit.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\gpedit.msc:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\gpkcsp.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\gpkrsrc.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\gpresult.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\gptext.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\gpupdate.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\graftabl.com:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\graphics.com:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\grpconv.exe:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\h323.tsp:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\h323msp.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\HAL.DLL:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\hccoin.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\hdwwiz.cpl:KAVICHS 132 bytes hidden from API
C:\WINDOWS\system32\heidi3.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\heidiw.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\help.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\hhctrl.ocx:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\hhsetup.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\hid.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\hidphone.tsp:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\himem.sys:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\hlink.dll:KAVICHS 164 bytes hidden from API
C:\WINDOWS\system32\hnetcfg.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\hnetmon.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\hnetwiz.dll:KAVICHS 196 bytes hidden from API
C:\WINDOWS\system32\homepage.inf:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\hostname.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\hotplug.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\hsfcisp2.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\HSF_INST.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\hticons.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\html.iec:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\httpapi.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\htui.dll:KAVICHS 100 bytes hidden from API
C:\WINDO

[wojtas]

wrzuc loga na www.rapidshare.com bo sie nie miesci albo na inny serwer

[cysiowy]

Chcialem rozbic na dwa posty ale mi sie glupi net z dialogu zwiesil

http://rapidshare.com/files/39715432/log.txt.html

[wojtas]

zrob defragmentacje dysku bo system masz czysty

[cysiowy]

Ok zrobie potem


Mam jeszcze jedna uwage. Czy ten Combo przypadkiem nie otwiera portow? Po sciagnieciu i skanowaniu zaczely pojawiac mi sie problemy z Generic host Process for Win32 Services. Sprawdzilem WWDC i rzeczywiscie mialem otworzone 3 pierwsze porty.

[wojtas]

. Czy ten Combo przypadkiem nie otwiera portow?

raczej nie

otworzone 3 pierwsze porty

to zamknij i nie bedzie problemu