VIR - Nemám dostatečné právo..

Zpráva

ondry · #1 Příspěvek od **ondry** » 23 Črc 2011 13:48

Zdravím.. Mám v PC nějakého hajzlíka, který mi blokuje spouštění některých aplikací a spuštění (někdy i instalace) antivirů.
Vždy mi to píše něco ohledně : "Nemáte dostatečné oprávnění na dokončení této akce" nějak takhle..
Už fakt nevím co a jak. Zde je log z rsit

Kód: Vybrat vše

Logfile of random's system information tool 1.09 (written by random/random)
Run by martin ondryas at 2011-07-23 14:42:09
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 31 GB (81%) free of 38 GB
Total RAM: 503 MB (39% free)


======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-606747145-1409082233-1644491937-1004Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-606747145-1409082233-1644491937-1004UA.job
C:\WINDOWS\tasks\MP Scheduled Scan.job
C:\WINDOWS\tasks\MpIdleTask.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10EDB994-47F8-43F7-AE96-F2EA63E9F90F}]
QuickStores-Toolbar - C:\WINDOWS\system32\mscoree.dll [2009-11-07 297808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - E:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - QuickStores-Toolbar - C:\WINDOWS\system32\mscoree.dll [2009-11-07 297808]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2005-06-21 155648]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2005-06-21 126976]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2007-04-16 577536]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"UnlockerAssistant"=E:\Program Files\Unlocker\UnlockerAssistant.exe [2010-07-04 17408]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2010-11-30 997408]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Steam"=E:\Program Files\Steam\Steam.exe [2011-07-14 1242448]
"SpybotSD TeaTimer"=E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-01-26 2144088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Documents and Settings\martin ondryas\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2011-06-30 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2011-06-15 15141768]

C:\Documents and Settings\martin ondryas\Nabídka Start\Programy\Po spuštění
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2005-06-21 348160]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\martin ondryas\Dokumenty\Downloads\HLBrute\distr\HLBrute.exe"="C:\Documents and Settings\martin ondryas\Dokumenty\Downloads\HLBrute\distr\HLBrute.exe:*:Enabled:Half-Life Server Bruteforce"
"E:\Program Files\Steam\steamapps\speedy18754\counter-strike\hl.exe"="E:\Program Files\Steam\steamapps\speedy18754\counter-strike\hl.exe:*:Enabled:Counter-Strike"
"C:\DOCUME~1\MARTIN~1\LOCALS~1\Temp\Rar$EX49.944\Dream.Video.Converter.Ultimate.serial.keys.gen.exe"="C:\DOCUME~1\MARTIN~1\LOCALS~1\Temp\Rar$EX49.944\Dream.Video.Converter.Ultimate.serial.keys.gen.exe:*:Enabled:Dream.Video.Converter.Ultimate.serial.keys.gen"
"c:\program files\relevantknowledge\rlvknlg.exe"="c:\program files\relevantknowledge\rlvknlg.exe:*:Enabled:rlvknlg.exe"
"E:\Program Files\Steam\Steam.exe"="E:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE"="C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE:*:Enabled:Microsoft Application Error Reporting"
"C:\Documents and Settings\martin ondryas\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe"="C:\Documents and Settings\martin ondryas\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"
"C:\Program Files\Internet Explorer\IEXPLORE.EXE"="C:\Program Files\Internet Explorer\IEXPLORE.EXE:*:Enabled:Internet Explorer"
"C:\Documents and Settings\martin ondryas\Local Settings\Temporary Internet Files\Content.IE5\6SM7CLJ2\SoftonicDownloader_for_spybot-search-destroy[1].exe"="C:\Documents and Settings\martin ondryas\Local Settings\Temporary Internet Files\Content.IE5\6SM7CLJ2\SoftonicDownloader_for_spybot-search-destroy[1].exe:*:Enabled:SoftonicDownloader_for_spybot-search-destroy[1]"
"C:\Documents and Settings\martin ondryas\Local Settings\Temp\is-Q8GFN.tmp\spybotsd162.tmp"="C:\Documents and Settings\martin ondryas\Local Settings\Temp\is-Q8GFN.tmp\spybotsd162.tmp:*:Enabled:Setup/Uninstall"
"E:\Program Files\Unlocker\Unlocker.exe"="E:\Program Files\Unlocker\Unlocker.exe:*:Enabled:Unlocker"
"C:\Documents and Settings\martin ondryas\Dokumenty\Downloads\RSIT.exe"="C:\Documents and Settings\martin ondryas\Dokumenty\Downloads\RSIT.exe:*:Enabled:RSIT"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"vidc.xvid"=xvidvfw.dll

======List of files/folders created in the last 1 month======

2011-07-23 14:42:11 ----D---- C:\Program Files\trend micro
2011-07-23 14:42:09 ----D---- C:\rsit
2011-07-23 14:32:48 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-07-23 14:24:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2011-07-23 14:23:30 ----D---- C:\Program Files\ESET
2011-07-23 14:21:05 ----D---- C:\Program Files\MSXML 4.0
2011-07-23 14:20:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2555917$
2011-07-23 14:20:36 ----D---- C:\WINDOWS\LastGood
2011-07-23 14:11:22 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2011-07-23 14:07:11 ----A---- C:\WINDOWS\system32\muweb.dll
2011-07-23 14:07:10 ----A---- C:\WINDOWS\system32\mucltui.dll
2011-07-23 14:04:58 ----D---- C:\Program Files\Microsoft Security Client
2011-07-23 14:03:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2011-07-23 13:42:22 ----HD---- C:\Documents and Settings\All Users\Data aplikací\Common Files
2011-07-23 13:10:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\MFAData
2011-07-23 11:48:05 ----D---- C:\Documents and Settings\martin ondryas\Data aplikací\QuickStoresToolbar
2011-07-23 11:41:19 ----D---- C:\WINDOWS\Minidump
2011-07-23 11:03:41 ----HD---- C:\WINDOWS\PIF
2011-07-23 10:10:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2011-07-23 10:02:44 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2011-07-23 01:04:02 ----A---- C:\WINDOWS\system32\WS_VideoConverterContextMenu.dll
2011-07-23 01:03:55 ----A---- C:\WINDOWS\system32\iconv.dll
2011-07-23 00:51:08 ----D---- C:\Documents and Settings\martin ondryas\Data aplikací\Toolbar4
2011-07-23 00:50:53 ----D---- C:\Documents and Settings\martin ondryas\Data aplikací\dream-video-converter
2011-07-22 23:42:28 ----D---- C:\Program Files\Sub2DivX
2011-07-22 20:53:22 ----D---- C:\Documents and Settings\martin ondryas\Data aplikací\AVI ReComp
2011-07-22 17:36:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe Systems
2011-07-22 17:36:21 ----D---- C:\Program Files\Common Files\Adobe Systems Shared
2011-07-22 16:55:58 ----D---- C:\Program Files\Common Files\Adobe
2011-07-15 15:28:37 ----D---- C:\Documents and Settings\martin ondryas\Data aplikací\Nero
2011-07-15 15:15:17 ----D---- C:\Documents and Settings\All Users\Data aplikací\Nero
2011-07-14 10:43:43 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys
2011-07-14 10:05:01 ----A---- C:\WINDOWS\system32\MRT.exe
2011-07-04 11:42:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2011-07-04 11:41:59 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2011-07-04 11:41:21 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2011-07-04 11:26:36 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2011-07-03 18:30:35 ----D---- C:\WINDOWS\system32\XPSViewer
2011-07-03 18:30:29 ----D---- C:\Program Files\MSBuild
2011-07-03 18:30:27 ----D---- C:\WINDOWS\system32\en-US
2011-07-03 18:30:19 ----D---- C:\Program Files\Reference Assemblies
2011-07-03 18:29:44 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2011-07-03 18:29:44 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2011-07-03 18:29:44 ----N---- C:\WINDOWS\system32\prntvpt.dll
2011-07-03 18:29:43 ----D---- C:\fb005656070cf6e029b275f1
2011-07-03 13:01:06 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2011-07-03 13:01:00 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2011-07-03 13:00:53 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2011-07-03 13:00:47 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2011-07-03 13:00:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2011-07-03 13:00:33 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2011-07-03 13:00:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2479943$
2011-07-03 13:00:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$
2011-07-03 13:00:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2011-07-03 13:00:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2011-07-03 13:00:00 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2011-07-03 12:59:54 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2011-07-03 12:59:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2011-07-03 12:59:40 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2011-07-03 12:59:33 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2011-07-03 12:59:25 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2011-07-03 12:59:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2011-07-03 12:59:12 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2011-07-03 12:59:06 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2011-07-03 12:58:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2481109$
2011-07-03 12:58:51 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2011-07-03 12:58:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2485663$
2011-07-03 12:58:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2011-07-03 12:58:33 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2011-07-03 12:58:27 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2011-07-03 12:58:20 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2011-07-03 12:58:14 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2011-07-03 12:58:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2530548$
2011-07-03 12:57:54 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2011-07-03 12:57:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2510581$
2011-07-03 12:57:40 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2011-07-03 12:57:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2476490$
2011-07-03 12:57:28 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2011-07-03 12:57:17 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2011-07-03 12:57:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2506223$
2011-07-03 12:56:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2503665$
2011-07-03 12:56:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2011-07-03 12:56:47 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2011-07-03 12:56:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$
2011-07-03 12:56:30 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2011-07-03 12:56:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2443685$
2011-07-03 12:56:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2011-07-03 12:56:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2524375$
2011-07-03 12:56:04 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2011-07-03 12:55:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2121546$
2011-07-03 12:55:51 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2011-07-03 12:55:45 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2011-07-03 12:55:38 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2011-07-03 12:55:30 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2011-07-03 12:55:24 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2011-07-03 12:55:13 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2011-07-03 12:55:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2535512$
2011-07-03 12:55:01 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2011-07-03 12:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2011-07-03 12:54:48 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2011-07-03 12:54:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2412687$
2011-07-03 12:54:37 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2011-07-03 12:54:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2508272$
2011-07-03 12:54:26 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2011-07-03 12:54:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276$
2011-07-03 12:54:15 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2011-07-03 12:54:09 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2011-07-03 12:54:03 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2011-07-03 12:53:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2507618$
2011-07-03 12:53:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2476687$
2011-07-03 12:53:46 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2011-07-03 12:53:36 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2011-07-03 12:53:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2419632$
2011-07-03 12:53:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2011-07-03 12:53:14 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2011-07-03 12:53:02 ----HDC---- C:\WINDOWS\$NtUninstallKB971029$
2011-07-03 12:52:54 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2011-07-03 12:52:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2506212$
2011-07-03 12:52:40 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2011-07-03 12:52:34 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2011-07-03 12:52:21 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2011-07-03 12:52:15 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2011-07-03 12:52:09 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2011-07-03 12:52:04 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2011-07-03 12:51:56 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2011-07-03 12:51:50 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2011-07-03 12:51:43 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2011-07-03 12:51:37 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2011-07-03 12:51:31 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2011-07-03 12:51:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893$
2011-07-03 12:51:19 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2011-07-03 12:51:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2509553$
2011-07-03 12:50:57 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2011-07-03 12:50:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2541763$
2011-07-03 12:50:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2544521$
2011-07-03 12:50:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$
2011-07-03 12:50:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$
2011-07-03 12:50:22 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2011-07-03 12:50:15 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2011-07-03 12:50:08 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2011-07-03 12:49:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2011-07-03 12:49:42 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2011-07-03 10:33:02 ----N---- C:\WINDOWS\system32\drivers\bthport.sys
2011-07-03 10:29:10 ----N---- C:\WINDOWS\system32\browserchoice.exe
2011-07-02 22:15:12 ----D---- C:\WINDOWS\system32\PreInstall
2011-07-02 22:15:11 ----N---- C:\WINDOWS\system32\spmsg.dll
2011-07-02 22:15:07 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2011-07-02 22:15:06 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2011-07-02 22:15:06 ----HD---- C:\WINDOWS\$hf_mig$
2011-07-02 21:36:20 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2011-06-30 18:16:34 ----A---- C:\WINDOWS\system32\h323log.txt
2011-06-30 18:05:56 ----A---- C:\WINDOWS\system32\hidserv.dll
2011-06-30 18:05:43 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2011-06-30 18:05:07 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2011-06-30 18:04:49 ----A---- C:\WINDOWS\system32\drivers\an983.sys
2011-06-30 18:04:35 ----A---- C:\WINDOWS\system32\drivers\intelide.sys
2011-06-30 18:04:25 ----A---- C:\WINDOWS\system32\usbui.dll
2011-06-30 18:03:23 ----SHD---- C:\WINDOWS\Installer
2011-06-30 18:03:23 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-06-30 18:03:22 ----D---- C:\Program Files\Common Files\ODBC
2011-06-30 18:03:22 ----A---- C:\WINDOWS\ODBCINST.INI
2011-06-30 18:03:18 ----RD---- C:\Program Files
2011-06-30 18:03:18 ----D---- C:\Program Files\Common Files\SpeechEngines
2011-06-30 18:03:18 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-06-30 18:03:18 ----D---- C:\Program Files\Common Files
2011-06-30 18:03:14 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2011-06-30 18:03:14 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2011-06-30 18:03:14 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2011-06-30 18:03:12 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2011-06-30 18:03:11 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2011-06-30 18:03:11 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2011-06-30 18:03:11 ----RA---- C:\WINDOWS\system32\kbdur.dll
2011-06-30 18:03:11 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2011-06-30 18:03:11 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2011-06-30 18:03:11 ----RA---- C:\WINDOWS\system32\kbdru.dll
2011-06-30 18:03:11 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2011-06-30 18:03:11 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2011-06-30 18:03:11 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2011-06-30 18:03:11 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2011-06-30 18:03:11 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2011-06-30 18:03:09 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2011-06-30 18:03:09 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2011-06-30 18:03:09 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2011-06-30 18:03:08 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2011-06-30 18:03:08 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2011-06-30 18:03:08 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2011-06-30 18:03:08 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2011-06-30 18:03:07 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2011-06-30 18:03:07 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2011-06-30 18:03:06 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2011-06-30 18:03:06 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2011-06-30 18:03:06 ----RA---- C:\WINDOWS\system32\kbdest.dll
2011-06-30 18:03:03 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2011-06-30 18:03:03 ----A---- C:\WINDOWS\system32\kbdsl.dll
2011-06-30 18:03:03 ----A---- C:\WINDOWS\system32\kbdro.dll
2011-06-30 18:03:02 ----A---- C:\WINDOWS\system32\kbdycl.dll
2011-06-30 18:03:02 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2011-06-30 18:03:02 ----A---- C:\WINDOWS\system32\kbdpl.dll
2011-06-30 18:03:02 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2011-06-30 18:03:02 ----A---- C:\WINDOWS\system32\kbdhu.dll
2011-06-30 18:03:02 ----A---- C:\WINDOWS\system32\kbdcr.dll
2011-06-30 18:03:02 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2011-06-30 18:03:01 ----A---- C:\WINDOWS\system32\irclass.dll
2011-06-30 18:03:00 ----A---- C:\WINDOWS\system32\spxcoins.dll
2011-06-30 18:03:00 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2011-06-30 18:03:00 ----A---- C:\WINDOWS\system32\dgsetup.dll
2011-06-30 18:03:00 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2011-06-30 18:02:57 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2011-06-30 18:02:57 ----A---- C:\WINDOWS\TASKMAN.EXE
2011-06-30 18:02:57 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2011-06-30 18:02:57 ----A---- C:\WINDOWS\system32\batt.dll
2011-06-30 18:02:56 ----A---- C:\WINDOWS\NOTEPAD.EXE
2011-06-30 18:02:54 ----A---- C:\WINDOWS\system32\storprop.dll
2011-06-30 18:02:45 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2011-06-30 18:01:22 ----RA---- C:\WINDOWS\SET8.tmp
2011-06-30 18:01:19 ----RA---- C:\WINDOWS\SET4.tmp
2011-06-30 18:01:17 ----RA---- C:\WINDOWS\SET3.tmp
2011-06-30 18:01:11 ----D---- C:\WINDOWS\system32\CatRoot2
2011-06-30 18:01:11 ----D---- C:\WINDOWS\system32\CatRoot
2011-06-30 18:01:05 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-06-30 18:00:38 ----SHD---- C:\System Volume Information
2011-06-30 18:00:38 ----D---- C:\Documents and Settings
2011-06-30 18:00:37 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2011-06-30 17:59:35 ----SH---- C:\boot.ini
2011-06-30 17:52:27 ----SHDC---- C:\WINDOWS\$NtUninstallKB15279$
2011-06-30 17:52:27 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-06-30 17:52:27 ----RSD---- C:\WINDOWS\Fonts
2011-06-30 17:52:27 ----RD---- C:\WINDOWS\Web
2011-06-30 17:52:27 ----HD---- C:\WINDOWS\inf
2011-06-30 17:52:27 ----D---- C:\WINDOWS\WinSxS
2011-06-30 17:52:27 ----D---- C:\WINDOWS\twain_32
2011-06-30 17:52:27 ----D---- C:\WINDOWS\Temp
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\wins
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\wbem
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\usmt
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\spool
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\ShellExt
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\Setup
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\ras
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\oobe
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\npp
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\mui
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\inetsrv
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\IME
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\icsxml
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\ias
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\export
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\drivers\etc
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\drivers\disdn
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\drivers
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\dhcp
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\cs-cz
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\cs
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\config
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\3com_dmi
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\3076
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\2052
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\1054
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\1042
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\1041
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\1037
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\1033
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\1031
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\1029
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\1028
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32\1025
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system32
2011-06-30 17:52:27 ----D---- C:\WINDOWS\system
2011-06-30 17:52:27 ----D---- C:\WINDOWS\security
2011-06-30 17:52:27 ----D---- C:\WINDOWS\Resources
2011-06-30 17:52:27 ----D---- C:\WINDOWS\repair
2011-06-30 17:52:27 ----D---- C:\WINDOWS\Provisioning
2011-06-30 17:52:27 ----D---- C:\WINDOWS\pchealth
2011-06-30 17:52:27 ----D---- C:\WINDOWS\PeerNet
2011-06-30 17:52:27 ----D---- C:\WINDOWS\Network Diagnostic
2011-06-30 17:52:27 ----D---- C:\WINDOWS\mui
2011-06-30 17:52:27 ----D---- C:\WINDOWS\msapps
2011-06-30 17:52:27 ----D---- C:\WINDOWS\msagent
2011-06-30 17:52:27 ----D---- C:\WINDOWS\Media
2011-06-30 17:52:27 ----D---- C:\WINDOWS\L2Schemas
2011-06-30 17:52:27 ----D---- C:\WINDOWS\java
2011-06-30 17:52:27 ----D---- C:\WINDOWS\ime
2011-06-30 17:52:27 ----D---- C:\WINDOWS\Help
2011-06-30 17:52:27 ----D---- C:\WINDOWS\Driver Cache
2011-06-30 17:52:27 ----D---- C:\WINDOWS\Debug
2011-06-30 17:52:27 ----D---- C:\WINDOWS\Cursors
2011-06-30 17:52:27 ----D---- C:\WINDOWS\Connection Wizard
2011-06-30 17:52:27 ----D---- C:\WINDOWS\Config
2011-06-30 17:52:27 ----D---- C:\WINDOWS\AppPatch
2011-06-30 17:52:27 ----D---- C:\WINDOWS\addins
2011-06-30 17:52:27 ----D---- C:\WINDOWS
2011-06-30 17:52:27 ----ASH---- C:\pagefile.sys
2011-06-30 17:27:53 ----D---- C:\Documents and Settings\martin ondryas\Data aplikací\RegistryKeys
2011-06-30 17:26:26 ----SHD---- C:\WINDOWS\system32\AI_RecycleBin
2011-06-30 17:25:59 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-06-30 17:25:57 ----D---- C:\Program Files\Adobe
2011-06-30 17:25:48 ----D---- C:\Program Files\Common Files\Adobe AIR
2011-06-30 17:19:13 ----D---- C:\Documents and Settings\martin ondryas\Data aplikací\BSplayer Pro
2011-06-30 17:19:13 ----D---- C:\Documents and Settings\martin ondryas\Data aplikací\BSplayer
2011-06-30 17:19:12 ----D---- C:\Program Files\Webteh
2011-06-30 17:18:09 ----D---- C:\Documents and Settings\martin ondryas\Data aplikací\Skype
2011-06-30 17:17:41 ----RD---- C:\Program Files\Skype
2011-06-30 17:17:31 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2011-06-30 17:15:01 ----SHD---- C:\RECYCLER
2011-06-30 17:11:45 ----A---- C:\WINDOWS\system32\igfxres.dll
2011-06-30 17:09:22 ----A---- C:\WINDOWS\system32\ChCfg.exe
2011-06-30 17:09:18 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2011-06-30 17:09:11 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2011-06-30 17:09:03 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys
2011-06-30 17:08:59 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2011-06-30 17:08:56 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2011-06-30 17:08:54 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2011-06-30 17:08:53 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2011-06-30 17:08:51 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2011-06-30 17:08:49 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys
2011-06-30 17:08:48 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys
2011-06-30 17:08:45 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2011-06-30 17:08:29 ----RA---- C:\WINDOWS\system32\drivers\alcxwdm.sys
2011-06-30 17:08:25 ----A---- C:\WINDOWS\system32\ksuser.dll
2011-06-30 17:08:25 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2011-06-30 17:08:24 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2011-06-30 17:08:07 ----D---- C:\Program Files\Realtek AC97
2011-06-30 17:08:06 ----A---- C:\WINDOWS\system32\RTLCPL.exe
2011-06-30 17:08:03 ----A---- C:\WINDOWS\system32\RtlCPAPI.dll
2011-06-30 17:08:03 ----A---- C:\WINDOWS\soundman.exe
2011-06-30 17:08:00 ----A---- C:\WINDOWS\alcupd.exe
2011-06-30 17:08:00 ----A---- C:\WINDOWS\Alcrmv.exe
2011-06-30 17:07:59 ----HD---- C:\Program Files\InstallShield Installation Information
2011-06-30 17:07:41 ----D---- C:\Program Files\Common Files\InstallShield
2011-06-30 17:03:35 ----D---- C:\Documents and Settings\martin ondryas\Data aplikací\Macromedia
2011-06-30 17:03:34 ----D---- C:\Documents and Settings\martin ondryas\Data aplikací\Adobe
2011-06-30 16:50:11 ----D---- C:\Documents and Settings\martin ondryas\Data aplikací\WinRAR
2011-06-30 16:50:07 ----D---- C:\Program Files\WinRAR
2011-06-30 16:44:29 ----RSD---- C:\WINDOWS\assembly
2011-06-30 16:43:41 ----D---- C:\WINDOWS\Microsoft.NET
2011-06-30 16:31:14 ----D---- C:\Documents and Settings\martin ondryas\Data aplikací\Identities
2011-06-30 16:31:12 ----HD---- C:\Program Files\Uninstall Information
2011-06-30 16:31:00 ----ASH---- C:\Documents and Settings\martin ondryas\Data aplikací\desktop.ini
2011-06-30 16:30:59 ----SD---- C:\Documents and Settings\martin ondryas\Data aplikací\Microsoft
2011-06-30 16:29:28 ----D---- C:\WINDOWS\SoftwareDistribution
2011-06-30 16:29:19 ----D---- C:\WINDOWS\Prefetch
2011-06-30 16:29:18 ----SD---- C:\WINDOWS\system32\Microsoft
2011-06-30 16:29:18 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-06-30 16:26:45 ----AS---- C:\WINDOWS\bootstat.dat
2011-06-30 16:23:57 ----D---- C:\WINDOWS\system32\xircom
2011-06-30 16:23:57 ----D---- C:\Program Files\xerox
2011-06-30 16:23:57 ----D---- C:\Program Files\microsoft frontpage
2011-06-30 16:23:40 ----RASH---- C:\MSDOS.SYS
2011-06-30 16:23:40 ----RASH---- C:\IO.SYS
2011-06-30 16:23:40 ----A---- C:\WINDOWS\control.ini
2011-06-30 16:23:40 ----A---- C:\CONFIG.SYS
2011-06-30 16:23:40 ----A---- C:\AUTOEXEC.BAT
2011-06-30 16:23:17 ----A---- C:\WINDOWS\system32\mapi32.dll
2011-06-30 16:22:00 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-06-30 16:22:00 ----RD---- C:\WINDOWS\Offline Web Pages
2011-06-30 16:21:47 ----HD---- C:\Program Files\WindowsUpdate
2011-06-30 16:21:42 ----D---- C:\Program Files\Online Services
2011-06-30 16:21:21 ----D---- C:\WINDOWS\system32\DirectX
2011-06-30 16:21:14 ----A---- C:\WINDOWS\system32\atrace.dll
2011-06-30 16:21:11 ----A---- C:\WINDOWS\system32\desktop.ini
2011-06-30 16:21:11 ----A---- C:\WINDOWS\desktop.ini
2011-06-30 16:21:03 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2011-06-30 16:21:02 ----A---- C:\WINDOWS\system32\acctres.dll
2011-06-30 16:21:01 ----D---- C:\Program Files\Common Files\Services
2011-06-30 16:20:58 ----SD---- C:\WINDOWS\Tasks
2011-06-30 16:20:58 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2011-06-30 16:20:57 ----D---- C:\Program Files\Common Files\MSSoap
2011-06-30 16:20:52 ----D---- C:\WINDOWS\srchasst
2011-06-30 16:20:51 ----D---- C:\WINDOWS\system32\Macromed
2011-06-30 16:20:48 ----A---- C:\WINDOWS\system32\wuweb.dll
2011-06-30 16:20:48 ----A---- C:\WINDOWS\system32\wucltui.dll
2011-06-30 16:20:48 ----A---- C:\WINDOWS\system32\wuauserv.dll
2011-06-30 16:20:48 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2011-06-30 16:20:47 ----A---- C:\WINDOWS\system32\wups.dll
2011-06-30 16:20:47 ----A---- C:\WINDOWS\system32\wuaueng.dll
2011-06-30 16:20:47 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2011-06-30 16:20:47 ----A---- C:\WINDOWS\system32\wuauclt.exe
2011-06-30 16:20:47 ----A---- C:\WINDOWS\system32\wuapi.dll
2011-06-30 16:20:46 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2011-06-30 16:20:46 ----A---- C:\WINDOWS\system32\qmgr.dll
2011-06-30 16:20:46 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2011-06-30 16:20:46 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2011-06-30 16:20:46 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2011-06-30 16:20:42 ----D---- C:\Program Files\Movie Maker
2011-06-30 16:20:21 ----A---- C:\WINDOWS\system32\safrslv.dll
2011-06-30 16:20:21 ----A---- C:\WINDOWS\system32\safrdm.dll
2011-06-30 16:20:21 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2011-06-30 16:20:21 ----A---- C:\WINDOWS\system32\racpldlg.dll
2011-06-30 16:20:17 ----A---- C:\WINDOWS\system32\fltMc.exe
2011-06-30 16:20:17 ----A---- C:\WINDOWS\system32\fltlib.dll
2011-06-30 16:20:17 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2011-06-30 16:20:16 ----D---- C:\WINDOWS\system32\Restore
2011-06-30 16:20:16 ----A---- C:\WINDOWS\system32\srsvc.dll
2011-06-30 16:20:16 ----A---- C:\WINDOWS\system32\srrstr.dll
2011-06-30 16:20:16 ----A---- C:\WINDOWS\system32\srclient.dll
2011-06-30 16:20:16 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2011-06-30 16:20:15 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2011-06-30 16:20:15 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2011-06-30 16:20:15 ----A---- C:\WINDOWS\system32\mnmdd.dll
2011-06-30 16:20:15 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2011-06-30 16:20:15 ----A---- C:\WINDOWS\system32\ils.dll
2011-06-30 16:20:14 ----A---- C:\WINDOWS\system32\msconf.dll
2011-06-30 16:20:11 ----D---- C:\Program Files\NetMeeting
2011-06-30 16:20:11 ----A---- C:\WINDOWS\system32\msoert2.dll
2011-06-30 16:20:11 ----A---- C:\WINDOWS\system32\msoeacct.dll
2011-06-30 16:20:10 ----A---- C:\WINDOWS\system32\inetres.dll
2011-06-30 16:20:10 ----A---- C:\WINDOWS\system32\inetcomm.dll
2011-06-30 16:20:07 ----D---- C:\Program Files\Outlook Express
2011-06-30 16:20:07 ----A---- C:\WINDOWS\system32\schedsvc.dll
2011-06-30 16:20:07 ----A---- C:\WINDOWS\system32\mstinit.exe
2011-06-30 16:20:07 ----A---- C:\WINDOWS\system32\mstask.dll
2011-06-30 16:20:06 ----A---- C:\WINDOWS\system32\isign32.dll
2011-06-30 16:20:06 ----A---- C:\WINDOWS\system32\inetcfg.dll
2011-06-30 16:20:06 ----A---- C:\WINDOWS\system32\icwphbk.dll
2011-06-30 16:20:06 ----A---- C:\WINDOWS\system32\icwdial.dll
2011-06-30 16:19:59 ----D---- C:\Program Files\Common Files\System
2011-06-30 16:19:57 ----D---- C:\Program Files\Internet Explorer
2011-06-30 16:19:53 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2011-06-30 16:19:44 ----D---- C:\Program Files\ComPlus Applications
2011-06-30 16:19:42 ----A---- C:\WINDOWS\vbaddin.ini
2011-06-30 16:19:42 ----A---- C:\WINDOWS\vb.ini
2011-06-30 16:19:36 ----D---- C:\WINDOWS\Registration
2011-06-30 16:18:54 ----D---- C:\Program Files\Windows Media Player
2011-06-30 16:18:48 ----D---- C:\Program Files\Messenger
2011-06-30 16:18:44 ----D---- C:\Program Files\MSN Gaming Zone
2011-06-30 16:18:44 ----A---- C:\WINDOWS\system32\write.exe
2011-06-30 16:18:33 ----A---- C:\WINDOWS\system32\sndvol32.exe
2011-06-30 16:18:32 ----A---- C:\WINDOWS\system32\hticons.dll
2011-06-30 16:18:32 ----A---- C:\WINDOWS\system32\avwav.dll
2011-06-30 16:18:32 ----A---- C:\WINDOWS\system32\avtapi.dll
2011-06-30 16:18:32 ----A---- C:\WINDOWS\system32\avmeter.dll
2011-06-30 16:18:31 ----A---- C:\WINDOWS\system32\winchat.exe
2011-06-30 16:18:23 ----A---- C:\WINDOWS\system32\charmap.exe
2011-06-30 16:18:23 ----A---- C:\WINDOWS\system32\getuname.dll
2011-06-30 16:18:22 ----A---- C:\WINDOWS\system32\winmine.exe
2011-06-30 16:18:22 ----A---- C:\WINDOWS\system32\sol.exe
2011-06-30 16:18:22 ----A---- C:\WINDOWS\system32\calc.exe
2011-06-30 16:18:21 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2011-06-30 16:18:21 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2011-06-30 16:18:21 ----A---- C:\WINDOWS\system32\tskill.exe
2011-06-30 16:18:21 ----A---- C:\WINDOWS\system32\reset.exe
2011-06-30 16:18:21 ----A---- C:\WINDOWS\system32\mshearts.exe
2011-06-30 16:18:21 ----A---- C:\WINDOWS\system32\freecell.exe
2011-06-30 16:18:20 ----A---- C:\WINDOWS\system32\tslabels.ini
2011-06-30 16:18:20 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2011-06-30 16:18:20 ----A---- C:\WINDOWS\system32\tscon.exe
2011-06-30 16:18:20 ----A---- C:\WINDOWS\system32\shadow.exe
2011-06-30 16:18:20 ----A---- C:\WINDOWS\system32\rwinsta.exe
2011-06-30 16:18:20 ----A---- C:\WINDOWS\system32\regini.exe
2011-06-30 16:18:20 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2011-06-30 16:18:20 ----A---- C:\WINDOWS\system32\qwinsta.exe
2011-06-30 16:18:20 ----A---- C:\WINDOWS\system32\qappsrv.exe
2011-06-30 16:18:20 ----A---- C:\WINDOWS\system32\msg.exe
2011-06-30 16:18:19 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2011-06-30 16:18:19 ----A---- C:\WINDOWS\system32\logoff.exe
2011-06-30 16:18:19 ----A---- C:\WINDOWS\system32\cdmodem.dll
2011-06-30 16:18:13 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2011-06-30 16:18:12 ----A---- C:\WINDOWS\system32\sndrec32.exe
2011-06-30 16:18:12 ----A---- C:\WINDOWS\system32\accwiz.exe
2011-06-30 16:18:11 ----D---- C:\Program Files\Windows NT
2011-06-30 16:18:11 ----A---- C:\WINDOWS\system32\mplay32.exe
2011-06-30 16:18:11 ----A---- C:\WINDOWS\system32\hypertrm.dll
2011-06-30 16:18:10 ----A---- C:\WINDOWS\system32\spider.exe
2011-06-30 16:18:10 ----A---- C:\WINDOWS\system32\mspaint.exe
2011-06-30 16:18:10 ----A---- C:\WINDOWS\system32\clipbrd.exe
2011-06-30 16:18:09 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2011-06-30 16:18:09 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2011-06-30 16:18:09 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2011-06-30 16:18:08 ----A---- C:\WINDOWS\system32\tsgqec.dll
2011-06-30 16:18:08 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2011-06-30 16:18:08 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2011-06-30 16:18:08 ----A---- C:\WINDOWS\system32\aaclient.dll
2011-06-30 16:18:07 ----A---- C:\WINDOWS\system32\remotepg.dll
2011-06-30 16:18:07 ----A---- C:\WINDOWS\system32\rdshost.exe
2011-06-30 16:18:07 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2011-06-30 16:18:07 ----A---- C:\WINDOWS\system32\mstscax.dll
2011-06-30 16:18:07 ----A---- C:\WINDOWS\system32\mstsc.exe
2011-06-30 16:18:06 ----A---- C:\WINDOWS\system32\termsrv.dll
2011-06-30 16:18:06 ----A---- C:\WINDOWS\system32\sessmgr.exe
2011-06-30 16:18:06 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2011-06-30 16:18:06 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2011-06-30 16:18:06 ----A---- C:\WINDOWS\system32\rdpclip.exe
2011-06-30 16:18:06 ----A---- C:\WINDOWS\system32\rdchost.dll
2011-06-30 16:18:06 ----A---- C:\WINDOWS\system32\qprocess.exe
2011-06-30 16:18:05 ----D---- C:\WINDOWS\system32\MsDtc
2011-06-30 16:18:05 ----A---- C:\WINDOWS\system32\mtxoci.dll
2011-06-30 16:18:05 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2011-06-30 16:18:05 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2011-06-30 16:18:05 ----A---- C:\WINDOWS\system32\icaapi.dll
2011-06-30 16:18:05 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2011-06-30 16:18:04 ----A---- C:\WINDOWS\system32\xolehlp.dll
2011-06-30 16:18:04 ----A---- C:\WINDOWS\system32\msdtctm.dll
2011-06-30 16:18:04 ----A---- C:\WINDOWS\system32\msdtclog.dll
2011-06-30 16:18:04 ----A---- C:\WINDOWS\system32\msdtc.exe
2011-06-30 16:18:03 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2011-06-30 16:18:03 ----A---- C:\WINDOWS\system32\mtxex.dll
2011-06-30 16:18:03 ----A---- C:\WINDOWS\system32\mtxdm.dll
2011-06-30 16:18:03 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2011-06-30 16:18:02 ----D---- C:\WINDOWS\system32\Com
2011-06-30 16:18:02 ----A---- C:\WINDOWS\system32\stclient.dll
2011-06-30 16:18:02 ----A---- C:\WINDOWS\system32\comrepl.dll
2011-06-30 16:18:02 ----A---- C:\WINDOWS\system32\comaddin.dll
2011-06-30 16:18:02 ----A---- C:\WINDOWS\system32\colbact.dll
2011-06-30 16:18:02 ----A---- C:\WINDOWS\system32\clbcatex.dll
2011-06-30 16:18:02 ----A---- C:\WINDOWS\system32\catsrvps.dll
2011-06-30 16:18:01 ----A---- C:\WINDOWS\system32\catsrvut.dll
2011-06-30 16:18:01 ----A---- C:\WINDOWS\system32\catsrv.dll
2011-06-30 16:18:00 ----A---- C:\WINDOWS\system32\comuid.dll
2011-06-30 16:18:00 ----A---- C:\WINDOWS\system32\comsvcs.dll
2011-06-30 16:18:00 ----A---- C:\WINDOWS\system32\comsnap.dll
2011-06-30 16:18:00 ----A---- C:\WINDOWS\system32\clbcatq.dll
2011-06-30 16:17:54 ----A---- C:\WINDOWS\system32\servdeps.dll
2011-06-30 16:17:54 ----A---- C:\WINDOWS\system32\mmfutil.dll
2011-06-30 16:17:54 ----A---- C:\WINDOWS\system32\licwmi.dll
2011-06-30 16:17:54 ----A---- C:\WINDOWS\system32\cmprops.dll
2011-06-30 16:17:50 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
2011-06-30 16:17:49 ----A---- C:\WINDOWS\system32\drivers\termdd.sys

======List of files/folders modified in the last 1 month======

2011-07-23 11:04:10 ----A---- C:\WINDOWS\system.ini
2011-06-30 16:23:40 ----A---- C:\WINDOWS\win.ini
2011-06-30 16:23:02 ----ASH---- C:\WINDOWS\fonts\desktop.ini

Diky moc vsem za rady

chodnik74 · #2 Příspěvek od **chodnik74** » 23 Črc 2011 14:55

Dobrý den

log není kompletní..

ale nevadí.. Jste přihlášený pod účtem se správcem?
Vidím nainstalovaný MSE,ten funguje?

Pohledáme havěť

Malwarebytes' Anti-Malware Obrázek

Stáhneme,nainstalujeme a spustíme(pokud si nevíte rady jak,klikněte ZDE)
Vybereme Úplná kontrola a klikneme na tlačítko Prohledat
Program provede kontrolu počítače a na konci se vám objeví hláska,že bylo skenování dokončeno,tak potvrdíme tlačítkem OK
Objeví se vám log,který mi sem vložte
NIC NEMAZAT!!Program mívá občas falešné detekce,takže mazat budeme až po konzultaci

ondry · #3 Příspěvek od **ondry** » 23 Črc 2011 15:13

Nainstaloval jsem program, a když jsem dal spustit úplnou kontrolu, tak se mi celý pc sekl a musel jsem ho násilně restartovat

nevím už co dál.
A reinstall nechci

chodnik74 · #4 Příspěvek od **chodnik74** » 23 Črc 2011 15:24

Mrkněte do složky C:\windows\minidump jsou zde nějaké soubory? pokud ano,tak nahrajte na http://www.leteckaposta.cz a pokud ne tak spuste pc v nouzovém režimu ( při startu pc mačkejte F8) a znovu zkuste MBAM

ondry · #5 Příspěvek od **ondry** » 23 Črc 2011 15:33

Jsou tam 2 soubory - viz. níže
http://leteckaposta.cz/830023561

ondry · #6 Příspěvek od **ondry** » 23 Črc 2011 16:27

Prosím poradí mi někdo?

nebo budu muset dát reinstall

chodnik74 · #7 Příspěvek od **chodnik74** » 23 Črc 2011 18:01

Nebojte se..soubory pošlu kolegovi na posudek,ale bývá tu v noci většinou

Jinak MBAM nejde v nouzovém režimu?Pokud ne,tak pokračujte..

Program nepoužívejte bez doporučení Rádce a pozorně se řiďte následujících pokynu,protože program netoleruje chyby a může dojít k úplnému poškození systému!!

Stáhneme si Combofix
Program uložíme nejlépe na Plochu
Vypneme všechny rezidentní štíty.Jak antiviru,tak antispywaru a firewallu
Vypneme všechny běžící aplikace (ICQ,prohlížeč,programy) a necháme pouze Combofix
Spustíme Combofix.exe s administrátorským oprávněním
U Windows XP se přihlásíme pod účtem správce
Ve Windows 7 a Vista klikněte pravým tlačítkem myši na Combofix.exe a dejte ,,Spustit jako správce,,)
Hned po startu programu na vás vyskočí licenční podmínky,tak potvrdíme tlačítkemANO
Pokud vám Combofix nabídne instalaci Konzoly pro zotavení,tak souhlaste a nechte nainstalovat(zde je potřeba aktivní připojení na internet)
Pokračujte dle pokynů programu a během skenování na nic neklikejte,na pc nepracujte(ICQ,jiné aplikace,internet..).Nechte počítač v klidu.
Celý sken tvá mezi 5-15 min,ale pokud je v PC hodně havěti,tak se čas může lišit.
Po skončení skenování(případném restartu počítače) se vám zobrazí log z Combofixu,který mi vložte sem(Kdyby se log nezobrazil,tak jej najdete zde: C:\ComboFix.txt
(Pokud si nevíte rady s kterýmkoliv z výše uvedených kroků,tak se ptejte nebo mrkněte na detailnější návod včetně obrázků http://www.bleepingcomputer.com/combofi ... t-combofix )

ondry · #8 Příspěvek od **ondry** » 23 Črc 2011 18:26

Nejde to spustit ani v nouzovém režimu.. Vždy mi to napíše že nemám oprávnění Správce.. přitom jsem přihlášený jako správce.. nicméně,zde je log :

Kód: Vybrat vše

ComboFix 11-07-23.03 - martin ondryas 23.07.2011  19:16:56.1.1 - x86
Microsoft Windows XP Home Edition  5.1.2600.3.1250.420.1029.18.503.148 [GMT 2:00]
Spuštěný z: c:\documents and settings\martin ondryas\Plocha\ComboFix.exe
.
.
(((((((((((((((((((((((((((((((((((((((   Ostatní výmazy   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\assembly\GAC_MSIL\desktop.ini
.
.
(((((((((((((((((((((((((   Soubory vytvořené od 2011-06-23 do 2011-07-23  )))))))))))))))))))))))))))))))
.
.
2011-07-23 12:42 . 2011-07-23 12:42	--------	d-----w-	C:\rsit
2011-07-03 16:29 . 2011-07-03 16:30	--------	d-----w-	C:\fb005656070cf6e029b275f1
2011-06-30 16:03 . 2011-07-23 13:05	--------	d-----r-	C:\Program Files
2011-06-30 16:00 . 2011-07-23 16:44	--------	d-----w-	C:\Documents and Settings
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M výpis   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-06-06 11:35 . 2008-04-14 12:00	1858944	----a-w-	c:\windows\system32\win32k.sys
2011-04-29 17:25 . 2008-04-14 12:00	151552	----a-w-	c:\windows\system32\schannel.dll
2011-04-29 16:19 . 2008-04-14 12:00	456320	----a-w-	c:\windows\system32\drivers\mrxsmb.sys
2011-04-26 11:07 . 2008-04-14 12:00	33280	----a-w-	c:\windows\system32\csrsrv.dll
2011-04-26 11:07 . 2008-04-14 12:00	293376	----a-w-	c:\windows\system32\winsrv.dll
2011-04-25 14:47 . 2008-04-14 12:00	668160	----a-w-	c:\windows\system32\wininet.dll
2011-04-25 14:47 . 2008-04-14 12:00	61952	----a-w-	c:\windows\system32\tdc.ocx
2011-04-25 14:47 . 2008-04-14 12:00	1510912	----a-w-	c:\windows\system32\shdocvw.dll
2011-04-25 14:47 . 2008-04-14 12:00	81920	----a-w-	c:\windows\system32\ieencode.dll
2011-04-25 14:43 . 2008-04-14 12:00	370176	----a-w-	c:\windows\system32\html.iec
.
.
((((((((((((((((((((((((((((((((((   Spouštěcí body v registru   )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-06-15 15141768]
"SUPERAntiSpyware"="e:\program files\sdadsa\SUPERAntiSpyware.exe" [2011-06-30 2424192]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2005-06-21 155648]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2005-06-21 126976]
"SoundMan"="SOUNDMAN.EXE" [2007-04-16 577536]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\martin ondryas\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "e:\program files\sdadsa\SASSEH.DLL" [2008-05-13 77824]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 22:21	548352	----a-w-	e:\program files\sdadsa\SASWINLO.DLL
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Documents and Settings\\martin ondryas\\Local Settings\\Data aplikací\\Google\\Update\\GoogleUpdate.exe"=
"c:\\Documents and Settings\\martin ondryas\\Local Settings\\Data aplikací\\Google\\Chrome\\Application\\chrome.exe"=
"e:\\Program Files\\Malwarebytes' Anti-Malware\\mbam.exe"=
"c:\\WINDOWS\\system32\\msiexec.exe"=
.
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [21.12.2010 15:04 115008]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [21.12.2010 13:47 94872]
R1 SASDIFSV;SASDIFSV;e:\program files\sdadsa\sasdifsv.sys [12.7.2011 23:55 12880]
R1 SASKUTIL;SASKUTIL;e:\program files\sdadsa\SASKUTIL.SYS [12.7.2011 23:55 67664]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - PWEYYPOB
*NewlyCreated* - SASDIFSV
*NewlyCreated* - SASKUTIL
*Deregistered* - pweyypob
.
.
------- Doplňkový sken -------
.
TCP: DhcpNameServer = 88.146.135.10 213.29.58.9
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-CCleaner - c:\program files\CCleaner\uninst.exe
AddRemove-FinalMediaPlayer_is1 - c:\program files\FinalMediaPlayer\unins000.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-07-23 19:20
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...  
.
skenování skrytých položek 'Po spuštění' ... 
.
skenování skrytých souborů ...  
.
.
c:\windows\$NtUninstallKB15279$:SummaryInformation 0 bytes hidden from API
.
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\WPAEvents]
@Denied: (Full) (LocalSystem)
"OOBETimer"=hex:ff,d5,71,d6,8b,6a,8d,6f,d5,33,93,fd
.
Celkový čas: 2011-07-23  19:22:41
ComboFix-quarantined-files.txt  2011-07-23 17:22
ComboFix2.txt  2011-07-23 13:20
.
Před spuštěním: Volných bajtů: 32 228 040 704
Po spuštění: Volných bajtů: 32 221 601 792
.
- - End Of File - - 0F411EFCD1C41401AE54206BFC26E178

chodnik74 · #9 Příspěvek od **chodnik74** » 25 Črc 2011 15:23

Stáhněte SPTD

Vyberte si verzi svého operačního systému,jestli máte 32 bitů nebo 64 bitů
Stáhněte si program na plochu a spuste
Zvolte možnost Uninstall,poté restartujte PC (Kdyby nešlo na tlačítko Uninstall kliknou a bylo šedé,tak tento krok přeskočte

Stáhněte Defogger

Stáhněte si program a uložte na plochu
Spuste program
Kliknete na tlačítko Disable,poté restartujte PC(Kdyby nešlo na tlačítko Disable kliknou a bylo šedé,tak tento krok přeskočte

Poté použijeme GMER a vložíme sem logy dle návodu : http://www.viry.cz/forum/viewtopic.php?f=29&t=62878

VIRY.CZ

VIR - Nemám dostatečné právo..

VIR - Nemám dostatečné právo..

Re: VIR - Nemám dostatečné právo..

Re: VIR - Nemám dostatečné právo..

Re: VIR - Nemám dostatečné právo..

Re: VIR - Nemám dostatečné právo..

Re: VIR - Nemám dostatečné právo..

Re: VIR - Nemám dostatečné právo..

Re: VIR - Nemám dostatečné právo..

Re: VIR - Nemám dostatečné právo..