Zavirování - proces: "cislo:cislo.exe"

Zpráva

honnza · #1 Příspěvek od **honnza** » 04 Led 2012 15:16

Dobrý den,
Chtěl bych někoho zkušenějšího poprosit o radu...

snažím se odvirovat kolegovi NB. Byl celý zpomalený a zasekaný.

Jakýkoliv antivir nebo RSIT i antirootkit se pri běhu sekl a vypl a pak uz nešel spustit ...(pracoval jsem v nouzovem rezimu)...

Trochu jsem googlil neznámý proces "čislo:čislo.exe" nasel jsem návod http://forums.majorgeeks.com/showthread.php?t=222773. Po tomto "removeru" se mi podařilo zpustit RSIT. Přiložím oba logy.

Děkuju.

14:01:54.0125 0948 TDSS rootkit removing tool 2.6.25.0 Dec 23 2011 14:51:16
14:01:54.0187 0948 ============================================================
14:01:54.0187 0948 Current date / time: 2012/01/04 14:01:54.0187
14:01:54.0187 0948 SystemInfo:
14:01:54.0187 0948
14:01:54.0187 0948 OS Version: 5.1.2600 ServicePack: 3.0
14:01:54.0187 0948 Product type: Workstation
14:01:54.0187 0948 ComputerName: NB-BOREK
14:01:54.0187 0948 UserName: autocont
14:01:54.0187 0948 Windows directory: C:\WINDOWS
14:01:54.0187 0948 System windows directory: C:\WINDOWS
14:01:54.0187 0948 Processor architecture: Intel x86
14:01:54.0187 0948 Number of processors: 1
14:01:54.0187 0948 Page size: 0x1000
14:01:54.0187 0948 Boot type: Safe boot with network
14:01:54.0187 0948 ============================================================
14:01:57.0546 0948 Initialize success
14:02:25.0656 1140 ============================================================
14:02:25.0656 1140 Scan started
14:02:25.0656 1140 Mode: Manual; SigCheck; TDLFS;
14:02:25.0656 1140 ============================================================
14:02:26.0578 1140 148cbe8e (8f2bb1827cac01aee6a16e30a1260199) C:\WINDOWS\2394852372:3950199153.exe
14:02:26.0578 1140 Suspicious file (Hidden): C:\WINDOWS\2394852372:3950199153.exe. md5: 8f2bb1827cac01aee6a16e30a1260199
14:02:26.0578 1140 148cbe8e ( Rootkit.Win32.PMax.gen ) - infected
14:02:26.0578 1140 148cbe8e - detected Rootkit.Win32.PMax.gen (0)
14:02:26.0671 1140 Abiosdsk - ok
14:02:26.0734 1140 abp480n5 - ok
14:02:26.0843 1140 ACPI (4fe34f1f3126b61fcc6b2043aa8112c9) C:\WINDOWS\system32\DRIVERS\ACPI.sys
14:02:29.0109 1140 ACPI - ok
14:02:29.0234 1140 ACPIEC (afdff022a01f0b11c776f0860c3b282f) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
14:02:29.0437 1140 ACPIEC - ok
14:02:29.0500 1140 adpu160m - ok
14:02:29.0593 1140 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
14:02:29.0734 1140 aec - ok
14:02:29.0828 1140 Afc (fe3ea6e9afc1a78e6edca121e006afb7) C:\WINDOWS\system32\drivers\Afc.sys
14:02:29.0937 1140 Afc - ok
14:02:30.0078 1140 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
14:02:30.0140 1140 AFD - ok
14:02:30.0203 1140 Aha154x - ok
14:02:30.0250 1140 aic78u2 - ok
14:02:30.0296 1140 aic78xx - ok
14:02:30.0406 1140 aksfridge (cb5a5079744a0535416d3a5e462c5efe) C:\WINDOWS\system32\DRIVERS\aksfridge.sys
14:02:30.0500 1140 aksfridge - ok
14:02:30.0609 1140 akshasp (1a27f5555448cc2d29d281b11f39177e) C:\WINDOWS\system32\DRIVERS\akshasp.sys
14:02:30.0671 1140 akshasp - ok
14:02:30.0750 1140 akshhl (147b61b81be1ffc38939ea47e5cfb51f) C:\WINDOWS\system32\DRIVERS\akshhl.sys
14:02:30.0796 1140 akshhl - ok
14:02:30.0859 1140 aksusb (b4ad9f5d78f27e0c6994e0cb05c60e21) C:\WINDOWS\system32\DRIVERS\aksusb.sys
14:02:30.0890 1140 aksusb - ok
14:02:30.0953 1140 AliIde - ok
14:02:31.0031 1140 amsint - ok
14:02:31.0109 1140 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
14:02:31.0234 1140 Arp1394 - ok
14:02:31.0312 1140 asc - ok
14:02:31.0375 1140 asc3350p - ok
14:02:31.0421 1140 asc3550 - ok
14:02:31.0562 1140 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
14:02:31.0687 1140 AsyncMac - ok
14:02:31.0781 1140 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
14:02:31.0906 1140 atapi - ok
14:02:31.0968 1140 Atdisk - ok
14:02:32.0062 1140 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
14:02:32.0187 1140 Atmarpc - ok
14:02:32.0343 1140 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
14:02:32.0468 1140 audstub - ok
14:02:32.0734 1140 AvgLdx86 (b8c187439d27aba430dd69fdcf1fa657) C:\WINDOWS\system32\Drivers\avgldx86.sys
14:02:32.0765 1140 AvgLdx86 - ok
14:02:32.0828 1140 AvgMfx86 (80ff2b1b7eeda966394f0baa895bbf4b) C:\WINDOWS\system32\Drivers\avgmfx86.sys
14:02:32.0843 1140 AvgMfx86 - ok
14:02:32.0984 1140 AvgRkx86 (5bbcd8646074a3af4ee9b321d12c2b64) C:\WINDOWS\system32\Drivers\avgrkx86.sys
14:02:33.0015 1140 AvgRkx86 - ok
14:02:33.0109 1140 AvgTdiX (9a7a93388f503a34e7339ae7f9997449) C:\WINDOWS\system32\Drivers\avgtdix.sys
14:02:33.0125 1140 AvgTdiX - ok
14:02:33.0203 1140 b57w2k (f96038aa1ec4013a93d2420fc689d1e9) C:\WINDOWS\system32\DRIVERS\b57xp32.sys
14:02:33.0281 1140 b57w2k - ok
14:02:33.0406 1140 BCM43XX (b89bcf0a25aeb3b47030ac83287f894a) C:\WINDOWS\system32\DRIVERS\bcmwl5.sys
14:02:33.0500 1140 BCM43XX - ok
14:02:33.0562 1140 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
14:02:33.0671 1140 Beep - ok
14:02:33.0796 1140 C-Dilla - ok
14:02:33.0906 1140 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
14:02:34.0062 1140 cbidf2k - ok
14:02:34.0156 1140 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
14:02:34.0312 1140 CCDECODE - ok
14:02:34.0375 1140 cd20xrnt - ok
14:02:34.0437 1140 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
14:02:34.0578 1140 Cdaudio - ok
14:02:34.0671 1140 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
14:02:34.0812 1140 Cdfs - ok
14:02:34.0906 1140 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
14:02:35.0031 1140 Cdrom - ok
14:02:35.0109 1140 Changer - ok
14:02:35.0234 1140 CmBatt (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys
14:02:35.0359 1140 CmBatt - ok
14:02:35.0437 1140 CmdIde - ok
14:02:35.0500 1140 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys
14:02:35.0625 1140 Compbatt - ok
14:02:35.0703 1140 Cpqarray - ok
14:02:35.0765 1140 dac2w2k - ok
14:02:35.0812 1140 dac960nt - ok
14:02:35.0921 1140 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
14:02:36.0046 1140 Disk - ok
14:02:36.0156 1140 dmboot (db5fd2bf5b07dc54bfcb3664ff05bd7c) C:\WINDOWS\system32\drivers\dmboot.sys
14:02:36.0328 1140 dmboot - ok
14:02:36.0421 1140 dmio (fff1720af51171f32f1ead5cf71f2810) C:\WINDOWS\system32\drivers\dmio.sys
14:02:36.0531 1140 dmio - ok
14:02:36.0656 1140 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
14:02:36.0781 1140 dmload - ok
14:02:36.0890 1140 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
14:02:37.0015 1140 DMusic - ok
14:02:37.0140 1140 dpti2o - ok
14:02:37.0218 1140 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
14:02:37.0328 1140 drmkaud - ok
14:02:37.0484 1140 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
14:02:37.0609 1140 Fastfat - ok
14:02:37.0718 1140 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
14:02:37.0828 1140 Fdc - ok
14:02:37.0890 1140 Fips (ac366695a0796560aa37215ad5762aaf) C:\WINDOWS\system32\drivers\Fips.sys
14:02:38.0015 1140 Fips - ok
14:02:38.0109 1140 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
14:02:38.0234 1140 Flpydisk - ok
14:02:38.0312 1140 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
14:02:38.0453 1140 FltMgr - ok
14:02:38.0578 1140 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
14:02:38.0703 1140 Fs_Rec - ok
14:02:38.0828 1140 FTDIBUS (a36e8beedb3aaca09bf55a1d17904bc8) C:\WINDOWS\system32\drivers\ftdibus.sys
14:02:38.0843 1140 FTDIBUS - ok
14:02:38.0906 1140 Ftdisk (4e664d8541db4a66b73a24257e322e1f) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
14:02:39.0046 1140 Ftdisk - ok
14:02:39.0125 1140 FTSER2K (a14a1f4bb391df9c233cb5dbd05feb70) C:\WINDOWS\system32\drivers\ftser2k.sys
14:02:39.0140 1140 FTSER2K - ok
14:02:39.0187 1140 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
14:02:39.0328 1140 Gpc - ok
14:02:39.0390 1140 grmnusb (6003bc70f1a8307262bd3c941bda0b7e) C:\WINDOWS\system32\drivers\grmnusb.sys
14:02:39.0453 1140 grmnusb - ok
14:02:39.0656 1140 hardlock (9de9a7a19195c57ef38b4ee25422f2d7) C:\WINDOWS\system32\drivers\hardlock.sys
14:02:39.0703 1140 hardlock - ok
14:02:39.0781 1140 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
14:02:39.0906 1140 HDAudBus - ok
14:02:40.0000 1140 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
14:02:40.0125 1140 HidUsb - ok
14:02:40.0187 1140 hpn - ok
14:02:40.0265 1140 HSFHWAZL (7d33d2b81bd8b4bc51b536b113295d51) C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys
14:02:40.0343 1140 HSFHWAZL - ok
14:02:40.0421 1140 HSF_DPV (fb6ad8a16e22c91d5978b26e0300a331) C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys
14:02:40.0515 1140 HSF_DPV - ok
14:02:40.0625 1140 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
14:02:40.0671 1140 HTTP - ok
14:02:40.0750 1140 i2omgmt - ok
14:02:40.0781 1140 i2omp - ok
14:02:40.0859 1140 i8042prt (c528e27945367191e7bae364930b6932) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
14:02:40.0968 1140 i8042prt - ok
14:02:41.0281 1140 ialm (28423512370705aeda6a652fedb25468) C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
14:02:41.0718 1140 ialm - ok
14:02:41.0812 1140 igfx - ok
14:02:41.0953 1140 imagedrv (0a7c49b48c772591a2d362daa00246c8) C:\WINDOWS\system32\Drivers\imagedrv.sys
14:02:41.0968 1140 imagedrv ( UnsignedFile.Multi.Generic ) - warning
14:02:41.0968 1140 imagedrv - detected UnsignedFile.Multi.Generic (1)
14:02:42.0031 1140 imagesrv (549ba4f539e7b8d8129500b96dd7b27a) C:\WINDOWS\system32\DRIVERS\imagesrv.sys
14:02:42.0046 1140 imagesrv ( UnsignedFile.Multi.Generic ) - warning
14:02:42.0046 1140 imagesrv - detected UnsignedFile.Multi.Generic (1)
14:02:42.0140 1140 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
14:02:42.0265 1140 Imapi - ok
14:02:42.0343 1140 ini910u - ok
14:02:42.0609 1140 IntcAzAudAddService (cbddab14249b2f05407fc09ab8fffb88) C:\WINDOWS\system32\drivers\RtkHDAud.sys
14:02:42.0984 1140 IntcAzAudAddService - ok
14:02:43.0062 1140 IntelIde - ok
14:02:43.0140 1140 intelppm (27b290d632af2cf3cf40bfddb7370985) C:\WINDOWS\system32\DRIVERS\intelppm.sys
14:02:43.0250 1140 intelppm - ok
14:02:43.0390 1140 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
14:02:43.0515 1140 Ip6Fw - ok
14:02:43.0593 1140 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
14:02:43.0734 1140 IpFilterDriver - ok
14:02:43.0812 1140 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
14:02:43.0937 1140 IpInIp - ok
14:02:43.0984 1140 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
14:02:44.0109 1140 IpNat - ok
14:02:44.0203 1140 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
14:02:44.0328 1140 IPSec - ok
14:02:44.0406 1140 irda (aca5e7b54409f9cb5eed97ed0c81120e) C:\WINDOWS\system32\DRIVERS\irda.sys
14:02:44.0531 1140 irda - ok
14:02:44.0609 1140 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
14:02:44.0734 1140 IRENUM - ok
14:02:44.0828 1140 isapnp (cc9f8a2d60aed1a51a3ac34c59b987ae) C:\WINDOWS\system32\DRIVERS\isapnp.sys
14:02:44.0968 1140 isapnp - ok
14:02:45.0093 1140 Kbdclass (1b6162fe7f66b1a71a4b70f941c4aa9b) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
14:02:45.0218 1140 Kbdclass - ok
14:02:45.0296 1140 kbdhid (86c8f23616c6c6e5b2776901c17b945b) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
14:02:45.0421 1140 kbdhid - ok
14:02:45.0515 1140 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
14:02:45.0640 1140 kmixer - ok
14:02:45.0765 1140 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
14:02:45.0859 1140 KSecDD - ok
14:02:45.0937 1140 lbrtfdc - ok
14:02:46.0078 1140 MBAMProtector (b7ca8cc3f978201856b6ab82f40953c3) C:\WINDOWS\system32\drivers\mbam.sys
14:02:46.0093 1140 MBAMProtector - ok
14:02:46.0171 1140 MBAMSwissArmy (0db7527db188c7d967a37bb51bbf3963) C:\WINDOWS\system32\drivers\mbamswissarmy.sys
14:02:46.0203 1140 MBAMSwissArmy - ok
14:02:46.0296 1140 mdmxsdk (0cea2d0d3fa284b85ed5b68365114f76) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
14:02:46.0328 1140 mdmxsdk - ok
14:02:46.0390 1140 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
14:02:46.0531 1140 mnmdd - ok
14:02:46.0609 1140 Modem (44032b0c6d9954d3fd26438330b99ee7) C:\WINDOWS\system32\drivers\Modem.sys
14:02:46.0718 1140 Modem - ok
14:02:46.0828 1140 Mouclass (4cb582831dbde63ce43b45d771218374) C:\WINDOWS\system32\DRIVERS\mouclass.sys
14:02:46.0953 1140 Mouclass - ok
14:02:46.0984 1140 mouhid (bb269eba740737ab749b214d568b6812) C:\WINDOWS\system32\DRIVERS\mouhid.sys
14:02:47.0109 1140 mouhid - ok
14:02:47.0218 1140 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
14:02:47.0343 1140 MountMgr - ok
14:02:47.0390 1140 MPE (c0f8e0c2c3c0437cf37c6781896dc3ec) C:\WINDOWS\system32\DRIVERS\MPE.sys
14:02:47.0500 1140 MPE - ok
14:02:47.0546 1140 mraid35x - ok
14:02:47.0609 1140 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
14:02:47.0734 1140 MRxDAV - ok
14:02:47.0875 1140 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
14:02:47.0937 1140 MRxSmb - ok
14:02:48.0015 1140 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
14:02:48.0140 1140 Msfs - ok
14:02:48.0203 1140 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
14:02:48.0328 1140 MSKSSRV - ok
14:02:48.0375 1140 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
14:02:48.0500 1140 MSPCLOCK - ok
14:02:48.0546 1140 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
14:02:48.0687 1140 MSPQM - ok
14:02:48.0765 1140 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
14:02:48.0875 1140 mssmbios - ok
14:02:48.0953 1140 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
14:02:49.0078 1140 MSTEE - ok
14:02:49.0171 1140 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
14:02:49.0203 1140 Mup - ok
14:02:49.0328 1140 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
14:02:49.0453 1140 NABTSFEC - ok
14:02:49.0562 1140 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
14:02:49.0703 1140 NDIS - ok
14:02:49.0828 1140 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
14:02:49.0968 1140 NdisIP - ok
14:02:50.0062 1140 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
14:02:50.0125 1140 NdisTapi - ok
14:02:50.0187 1140 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
14:02:50.0312 1140 Ndisuio - ok
14:02:50.0390 1140 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
14:02:50.0531 1140 NdisWan - ok
14:02:50.0656 1140 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
14:02:50.0734 1140 NDProxy - ok
14:02:50.0828 1140 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
14:02:50.0953 1140 NetBIOS - ok
14:02:51.0015 1140 NetBT (180bd024b6bbf9d36e918aa7d246cf96) C:\WINDOWS\system32\DRIVERS\netbt.sys
14:02:51.0015 1140 Suspicious file (Forged): C:\WINDOWS\system32\DRIVERS\netbt.sys. Real md5: 180bd024b6bbf9d36e918aa7d246cf96, Fake md5: 74b2b2f5bea5e9a3dc021d685551bd3d
14:02:51.0015 1140 NetBT ( Rootkit.Win32.ZAccess.e ) - infected
14:02:51.0015 1140 NetBT - detected Rootkit.Win32.ZAccess.e (0)
14:02:51.0156 1140 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
14:02:51.0281 1140 NIC1394 - ok
14:02:51.0359 1140 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
14:02:51.0500 1140 Npfs - ok
14:02:51.0562 1140 NSCIRDA (2adc0ca9945c65284b3d19bc18765974) C:\WINDOWS\system32\DRIVERS\nscirda.sys
14:02:51.0703 1140 NSCIRDA - ok
14:02:51.0812 1140 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
14:02:51.0968 1140 Ntfs - ok
14:02:52.0109 1140 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
14:02:52.0234 1140 Null - ok
14:02:52.0359 1140 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
14:02:52.0500 1140 NwlnkFlt - ok
14:02:52.0593 1140 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
14:02:52.0703 1140 NwlnkFwd - ok
14:02:52.0859 1140 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
14:02:52.0984 1140 ohci1394 - ok
14:02:53.0156 1140 Parport (46f8db73b4a53e543f8e371dc7c75bae) C:\WINDOWS\system32\drivers\Parport.sys
14:02:53.0281 1140 Parport - ok
14:02:53.0343 1140 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
14:02:53.0453 1140 PartMgr - ok
14:02:53.0546 1140 ParVdm (1fae19d0457176318bba4a8795656ebc) C:\WINDOWS\system32\drivers\ParVdm.sys
14:02:53.0656 1140 ParVdm - ok
14:02:53.0796 1140 PCI (6ce351d149cb4befc702951e471e1730) C:\WINDOWS\system32\DRIVERS\pci.sys
14:02:53.0921 1140 PCI - ok
14:02:53.0984 1140 PCIDump - ok
14:02:54.0078 1140 PCIIde (2da4ec85e0ea7a45c6b2a05820492d5a) C:\WINDOWS\system32\DRIVERS\pciide.sys
14:02:54.0234 1140 PCIIde - ok
14:02:54.0328 1140 Pcmcia (4fc31e6c19a5ce5198b1abff94cae758) C:\WINDOWS\system32\DRIVERS\pcmcia.sys
14:02:54.0468 1140 Pcmcia - ok
14:02:54.0531 1140 PDCOMP - ok
14:02:54.0578 1140 PDFRAME - ok
14:02:54.0625 1140 PDRELI - ok
14:02:54.0671 1140 PDRFRAME - ok
14:02:54.0718 1140 perc2 - ok
14:02:54.0765 1140 perc2hib - ok
14:02:54.0906 1140 pfc (957b82ec80ad7ead64e5e47df6b0dc40) C:\WINDOWS\system32\drivers\pfc.sys
14:02:54.0921 1140 pfc ( UnsignedFile.Multi.Generic ) - warning
14:02:54.0921 1140 pfc - detected UnsignedFile.Multi.Generic (1)
14:02:55.0031 1140 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
14:02:55.0140 1140 PptpMiniport - ok
14:02:55.0187 1140 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
14:02:55.0312 1140 PSched - ok
14:02:55.0390 1140 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
14:02:55.0515 1140 Ptilink - ok
14:02:55.0625 1140 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\WINDOWS\system32\Drivers\PxHelp20.sys
14:02:55.0640 1140 PxHelp20 - ok
14:02:55.0718 1140 ql1080 - ok
14:02:55.0750 1140 Ql10wnt - ok
14:02:55.0796 1140 ql12160 - ok
14:02:55.0828 1140 ql1240 - ok
14:02:55.0906 1140 ql1280 - ok
14:02:55.0937 1140 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
14:02:56.0078 1140 RasAcd - ok
14:02:56.0203 1140 Rasirda (0207d26ddf796a193ccd9f83047bb5fc) C:\WINDOWS\system32\DRIVERS\rasirda.sys
14:02:56.0281 1140 Rasirda - ok
14:02:56.0375 1140 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
14:02:56.0500 1140 Rasl2tp - ok
14:02:56.0609 1140 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
14:02:56.0718 1140 RasPppoe - ok
14:02:56.0812 1140 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
14:02:56.0937 1140 Raspti - ok
14:02:57.0031 1140 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
14:02:57.0156 1140 Rdbss - ok
14:02:57.0234 1140 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
14:02:57.0375 1140 RDPCDD - ok
14:02:57.0515 1140 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
14:02:57.0640 1140 rdpdr - ok
14:02:57.0750 1140 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys
14:02:57.0796 1140 RDPWD - ok
14:02:57.0875 1140 redbook (611bfd220305be3a85ae876ea47d4aa5) C:\WINDOWS\system32\DRIVERS\redbook.sys
14:02:58.0000 1140 redbook - ok
14:02:58.0140 1140 rootrepeal - ok
14:02:58.0296 1140 sdbus (8d04819a3ce51b9eb47e5689b44d43c4) C:\WINDOWS\system32\DRIVERS\sdbus.sys
14:02:58.0468 1140 sdbus - ok
14:02:58.0593 1140 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
14:02:58.0734 1140 Secdrv - ok
14:02:58.0875 1140 Serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
14:02:59.0000 1140 Serenum - ok
14:02:59.0093 1140 Serial (b842729337c9b921615c40d3c1a1af96) C:\WINDOWS\system32\drivers\Serial.sys
14:02:59.0218 1140 Serial - ok
14:02:59.0375 1140 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
14:02:59.0500 1140 Sfloppy - ok
14:02:59.0593 1140 Simbad - ok
14:02:59.0656 1140 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
14:02:59.0796 1140 SLIP - ok
14:02:59.0875 1140 Sparrow - ok
14:02:59.0953 1140 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
14:03:00.0093 1140 splitter - ok
14:03:00.0187 1140 sr (94610c8653635e4459316a0050d55ce7) C:\WINDOWS\system32\DRIVERS\sr.sys
14:03:00.0328 1140 sr - ok
14:03:00.0453 1140 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
14:03:00.0484 1140 Srv - ok
14:03:00.0593 1140 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
14:03:00.0703 1140 streamip - ok
14:03:00.0750 1140 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
14:03:00.0875 1140 swenum - ok
14:03:00.0968 1140 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
14:03:01.0125 1140 swmidi - ok
14:03:01.0203 1140 symc810 - ok
14:03:01.0265 1140 symc8xx - ok
14:03:01.0312 1140 sym_hi - ok
14:03:01.0343 1140 sym_u3 - ok
14:03:01.0453 1140 SynTP (cc5da243cfdac58fc0408f7ce24084c5) C:\WINDOWS\system32\DRIVERS\SynTP.sys
14:03:01.0500 1140 SynTP - ok
14:03:01.0562 1140 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
14:03:01.0687 1140 sysaudio - ok
14:03:01.0765 1140 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
14:03:01.0843 1140 Tcpip - ok
14:03:01.0921 1140 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
14:03:02.0046 1140 TDPIPE - ok
14:03:02.0125 1140 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
14:03:02.0234 1140 TDTCP - ok
14:03:02.0312 1140 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
14:03:02.0453 1140 TermDD - ok
14:03:02.0578 1140 tifm21 (e4c85c291ddb3dc5e4a2f227ca465ba6) C:\WINDOWS\system32\drivers\tifm21.sys
14:03:02.0640 1140 tifm21 - ok
14:03:02.0703 1140 TosIde - ok
14:03:02.0828 1140 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
14:03:02.0953 1140 Udfs - ok
14:03:03.0015 1140 ultra - ok
14:03:03.0109 1140 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
14:03:03.0250 1140 Update - ok
14:03:03.0390 1140 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
14:03:03.0515 1140 usbccgp - ok
14:03:03.0609 1140 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
14:03:03.0734 1140 usbehci - ok
14:03:03.0828 1140 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
14:03:03.0937 1140 usbhub - ok
14:03:04.0046 1140 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
14:03:04.0156 1140 usbscan - ok
14:03:04.0250 1140 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
14:03:04.0359 1140 USBSTOR - ok
14:03:04.0484 1140 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
14:03:04.0593 1140 usbuhci - ok
14:03:04.0718 1140 uxkx1 (c085eebdb5824f7ee08c2a57c809db72) C:\WINDOWS\system32\DRIVERS\uxkx1.sys
14:03:04.0796 1140 uxkx1 - ok
14:03:04.0875 1140 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
14:03:05.0015 1140 VgaSave - ok
14:03:05.0078 1140 ViaIde - ok
14:03:05.0156 1140 VolSnap (28a4b296b47782173c346e376cb374d1) C:\WINDOWS\system32\drivers\VolSnap.sys
14:03:05.0281 1140 VolSnap - ok
14:03:05.0421 1140 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
14:03:05.0546 1140 Wanarp - ok
14:03:05.0625 1140 WDICA - ok
14:03:05.0718 1140 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
14:03:05.0843 1140 wdmaud - ok
14:03:05.0968 1140 winachsf (9692ab8ba2dcd649a86b1b9b81154278) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
14:03:06.0062 1140 winachsf - ok
14:03:06.0281 1140 WmiAcpi (c42584fd66ce9e17403aebca199f7bdb) C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
14:03:06.0390 1140 WmiAcpi - ok
14:03:06.0578 1140 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
14:03:06.0703 1140 WSTCODEC - ok
14:03:06.0843 1140 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
14:03:06.0890 1140 WudfPf - ok
14:03:06.0953 1140 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
14:03:06.0984 1140 WudfRd - ok
14:03:07.0093 1140 MBR (0x1B8) (413fc2a0c716421b3158746d63736515) \Device\Harddisk0\DR0
14:03:07.0421 1140 \Device\Harddisk0\DR0 - ok
14:03:07.0453 1140 MBR (0x1B8) (0645814d4d8226505738304a7a3f3440) \Device\Harddisk1\DR2
14:03:07.0984 1140 \Device\Harddisk1\DR2 - ok
14:03:08.0031 1140 Boot (0x1200) (ad6e4e26669456032452fb55a5dbf45e) \Device\Harddisk0\DR0\Partition0
14:03:08.0031 1140 \Device\Harddisk0\DR0\Partition0 - ok
14:03:08.0062 1140 ============================================================
14:03:08.0062 1140 Scan finished
14:03:08.0062 1140 ============================================================
14:03:08.0203 1120 Detected object count: 5
14:03:08.0203 1120 Actual detected object count: 5
14:14:44.0312 1120 HKLM\SYSTEM\ControlSet001\services\148cbe8e - will be deleted on reboot
14:14:44.0390 1120 HKLM\SYSTEM\ControlSet003\services\148cbe8e - will be deleted on reboot
14:14:44.0421 1120 C:\WINDOWS\2394852372:3950199153.exe - will be deleted on reboot
14:14:44.0421 1120 148cbe8e ( Rootkit.Win32.PMax.gen ) - User select action: Delete
14:14:44.0421 1120 imagedrv ( UnsignedFile.Multi.Generic ) - skipped by user
14:14:44.0421 1120 imagedrv ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:14:44.0437 1120 imagesrv ( UnsignedFile.Multi.Generic ) - skipped by user
14:14:44.0437 1120 imagesrv ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:14:44.0828 1120 Backup copy found, using it..
14:14:44.0843 1120 C:\WINDOWS\system32\DRIVERS\netbt.sys - will be cured on reboot
14:14:45.0578 1120 C:\WINDOWS\system32\c_17755.nls - will be deleted on reboot
14:14:45.0593 1120 C:\WINDOWS\system32\c_17755.nl_ - will be deleted on reboot
14:14:47.0250 1120 NetBT ( Rootkit.Win32.ZAccess.e ) - User select action: Cure
14:14:47.0265 1120 pfc ( UnsignedFile.Multi.Generic ) - skipped by user
14:14:47.0265 1120 pfc ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:15:13.0484 0632 Deinitialize success

honnza · #2 Příspěvek od **honnza** » 04 Led 2012 15:19

Přikládám log RSIT:

Logfile of random's system information tool 1.09 (written by random/random)
Run by autocont at 2012-01-04 15:17:16
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 26 GB (23%) free of 114 GB
Total RAM: 1014 MB (73% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\MP Scheduled Scan.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-2119669116-2072395555-1277150550-1142.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-2119669116-2072395555-1277150550-1157.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-2119669116-2072395555-1277150550-1142.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-2119669116-2072395555-1277150550-1157.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\autocont.NB-BOREK\Data aplikací\Mozilla\Firefox\Profiles\aatamr35.default

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"=C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video
"{6904342A-8307-11DF-A508-4AE2DFD72085}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"{3f963a5b-e555-4543-90e2-c3908898db71}"=C:\Program Files\AVG\AVG9\Firefox

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe Flash Player 9.0
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX OVS Helper,version=1.0.0]
"Description"=DivX OVS Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.12.732]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=c:\program files\real\realplayer\Netscape6\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprjplug;version=1.0.3.732]
"Description"=RealJukebox Netscape Plugin
"Path"=c:\program files\real\realplayer\Netscape6\nprjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprphtml5videoshim;version=1.0.0.0]
"Description"=RealPlayer(tm) HTML5VideoShim Plug-In
"Path"=C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.732]
"Description"=6.0.12.732
"Path"=c:\program files\real\realplayer\Netscape6\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
xmlfiller@software602.cz
{800b5000-a755-47e1-992b-48a1c1357f07}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{B13721C7-F507-4982-B2E5-502A71474FED}
{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nppl3260.xpt
nsIFillerPlugin.xpt
nsJSRealPlayerPlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
flashplayer.xpt
npdeployJava1.dll
npEModelPlugin.dll
npfiller.dll
NPOFF12.DLL
NPOFFICE.DLL
nppdf32.dll
nppl3260.dll
nprjplug.dll
nprpjplug.dll
NPSWF32.dll
NPSWF32_FlashUtil.exe
nsEModelPlugin.xpt

C:\Program Files\Mozilla Firefox\searchplugins\
crawlersrch.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2011-09-05 64928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
Winamp Toolbar Loader - C:\Program Files\Winamp Toolbar\winamptb.dll [2010-07-28 1267024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-03-21 341600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\prxConduitEngine.dll [2011-01-17 175912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2010-12-08 3123072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG9\avgssie.dll [2012-01-02 1623392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2010-12-08 3123072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-12-04 342192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7018.1622\swg.dll [2011-11-22 1003576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}]
Inbox Toolbar - C:\PROGRA~1\INBOXT~1\Inbox.dll [2010-06-15 848376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-10-11 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-10-11 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D7E97865-918F-41E4-9CD0-25AB1C574CE8} - &Inbox Toolbar - C:\PROGRA~1\INBOXT~1\Inbox.dll [2010-06-15 848376]
{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - Winamp Toolbar - C:\Program Files\Winamp Toolbar\winamptb.dll [2010-07-28 1267024]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files\ConduitEngine\prxConduitEngine.dll [2011-01-17 175912]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-12-04 342192]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-03-21 16126464]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"SynTPStart"=C:\Program Files\Synaptics\SynTP\SynTPStart.exe [2007-09-07 102400]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2006-11-03 866584]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-04-21 142104]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-04-21 162584]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-04-21 138008]
"SSBkgdUpdate"=C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-09-28 185896]
"OpwareSE4"=C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe [2006-10-11 75304]
"ArcSoft Connection Service"=C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2010-10-27 207424]
"ISUSPM Startup"=C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe [2005-02-17 221184]
"POPUPTV"=C:\Program Files\ASUS\PopupTV\ExpressTV.exe [2009-02-20 708608]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2010-12-09 74752]
"DivX Download Manager"=C:\Program Files\DivX\DivX Plus Web Player\DDmService.exe [2010-12-08 63360]
"Google Quick Search Box"=C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe [2011-02-26 126976]
"USB Storage Toolbox"=C:\WINDOWS\UMStor\Res.EXE [2005-09-14 65536]
"AVG9_TRAY"=C:\PROGRA~1\AVG\AVG9\avgtray.exe [2012-01-02 2078048]
"ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2005-02-17 81920]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2010-03-21 202256]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-04-08 254696]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"mshtune"=C:\Documents and Settings\All Users\mshtune.exe []
"jusched"=C:\Documents and Settings\All Users\defragcs.exe []
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-12-09 1226608]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2011-12-24 460872]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Action Manager 32.lnk - C:\Program Files\ScannerU\AM32.exe
Akcelerátor spuštění AutoCADu.lnk - C:\Program Files\Common Files\Autodesk Shared\acstart17.exe
AutoCAD Startup Accelerator.lnk - C:\Program Files\Common Files\Autodesk Shared\acstart16.exe
Místní vyhledávání.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe
TMMonitor.lnk - C:\Program Files\ArcSoft\TotalMedia 3.5\TMMonitor.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
C:\WINDOWS\system32\avgrsstx.dll [2012-01-02 12536]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-04-17 204800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2007-02-05 294400]
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"=C:\PROGRA~1\WIFD1F~1\MpShHook.dll [2006-11-03 83224]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\46631845.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\46631845.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rootrepeal.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"RunStartupScriptSync"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Grisoft\AVG7\avginet.exe"="C:\Program Files\Grisoft\AVG7\avginet.exe:*:Enabled:avginet.exe"
"C:\Program Files\Grisoft\AVG7\avgamsvr.exe"="C:\Program Files\Grisoft\AVG7\avgamsvr.exe:*:Enabled:avgamsvr.exe"
"C:\Program Files\Grisoft\AVG7\avgcc.exe"="C:\Program Files\Grisoft\AVG7\avgcc.exe:*:Enabled:avgcc.exe"
"C:\Program Files\Grisoft\AVG7\avgemc.exe"="C:\Program Files\Grisoft\AVG7\avgemc.exe:*:Enabled:avgemc.exe"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQLite\ICQLite.exe"="C:\Program Files\ICQLite\ICQLite.exe:*:Enabled:ICQ Lite"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\ICQ6\ICQ.exe"="C:\Program Files\ICQ6\ICQ.exe:*:Enabled:ICQ Library"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\ArcSoft\TotalMedia 3.5\TotalMedia.exe"="C:\Program Files\ArcSoft\TotalMedia 3.5\TotalMedia.exe:LocalSubNet:Enabled:ArcSoft TotalMedia 3.5"
"C:\Program Files\Google\Google SketchUp 7\SketchUp.exe"="C:\Program Files\Google\Google SketchUp 7\SketchUp.exe:*:Enabled:SketchUp Application"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype. Take a deep breath "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQLite\ICQLite.exe"="C:\Program Files\ICQLite\ICQLite.exe:*:Enabled:ICQ Lite"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Miranda IM\miranda32.exe"="C:\Program Files\Miranda IM\miranda32.exe:*:Enabled:Miranda IM"
"C:\Program Files\Panasonic\Wireless Manager ME2\WM.exe"="C:\Program Files\Panasonic\Wireless Manager ME2\WM.exe:*:Enabled:Wireless Manager GUI"
"C:\Program Files\RealVNC\VNC4\winvnc4.exe"="C:\Program Files\RealVNC\VNC4\winvnc4.exe:*:Enabled:winvnc4"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype. Take a deep breath "
"C:\WINDOWS\explorer.exe"="C:\WINDOWS\explorer.exe:*:Enabled:Průzkumník Windows"
"C:\Program Files\Internet Explorer\iexplore.exe"="C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer"
"C:\Program Files\Wolfenstein - Enemy Territory\ET.exe"="C:\Program Files\Wolfenstein - Enemy Territory\ET.exe:*:Enabled:ET"
"C:\Program Files\AVG\AVG8\avgam.exe"="C:\Program Files\AVG\AVG8\avgam.exe:*:Enabled:avgam.exe"
"C:\Program Files\AVG\AVG8\avgdiag.exe"="C:\Program Files\AVG\AVG8\avgdiag.exe:*:Enabled:avgdiag.exe"
"C:\Program Files\AVG\AVG8\avgdiagex.exe"="C:\Program Files\AVG\AVG8\avgdiagex.exe:*:Enabled:avgdiagex.exe"
"C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG8\avgnsx.exe"="C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe"
"C:\Program Files\Mozilla Thunderbird\thunderbird.exe"="C:\Program Files\Mozilla Thunderbird\thunderbird.exe:*:Enabled:Mozilla Thunderbird"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\Real\RealPlayer\realplay.exe"="C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer"
"C:\Program Files\Winamp\winamp.exe"="C:\Program Files\Winamp\winamp.exe:*:Enabled:Winamp"
"C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Enabled:Google Earth"
"C:\Program Files\TeamViewer\Version6\TeamViewer.exe"="C:\Program Files\TeamViewer\Version6\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"
"C:\Program Files\Common Files\Java\Java Update\jucheck.exe"="C:\Program Files\Common Files\Java\Java Update\jucheck.exe:*:Enabled:Java(TM) Update Checker"
"C:\Program Files\Common Files\Java\Java Update\jusched.exe"="C:\Program Files\Common Files\Java\Java Update\jusched.exe:*:Enabled:Java(TM) Update Scheduler"
"C:\Program Files\Google\Update\GoogleUpdate.exe"="C:\Program Files\Google\Update\GoogleUpdate.exe:*:Enabled:Instalační program Google"
"C:\Program Files\AVG\AVG9\avgdiagex.exe"="C:\Program Files\AVG\AVG9\avgdiagex.exe:*:Enabled:avgdiagex.exe"
"C:\Program Files\AVG\AVG9\avgam.exe"="C:\Program Files\AVG\AVG9\avgam.exe:*:Enabled:avgam.exe"
"C:\Program Files\AVG\AVG9\avgemc.exe"="C:\Program Files\AVG\AVG9\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\AVG\AVG9\avgupd.exe"="C:\Program Files\AVG\AVG9\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG9\avgnsx.exe"="C:\Program Files\AVG\AVG9\avgnsx.exe:*:Enabled:avgnsx.exe"
"C:\Program Files\AVG\AVG9\avgcmgr.exe"="C:\Program Files\AVG\AVG9\avgcmgr.exe:*:Enabled:Prevalence reporter"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=L3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.ACDV"=ACDV.dll
"vidc.div4"=DivXc32f.dll
"vidc.div3"=DivXc32.dll
"vidc.xvid"=xvidvfw.dll
"vidc.mp43"=mpg4c32.dll
"msacm.l3radius"=l3codecp.acm
"msacm.divxa"=divxa32.acm
"msacm.vorbis"=Vorbis.acm
"msacm.a3d"=a3d.dll
"VIDC.YV12"=DivX.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll
"MSVideo8"=VfWWDM32.dll
"vidc.asv2"=asusasv2.dll
"vidc.DIVX"=DivX.dll

======File associations======

.js - open - %SystemRoot%\System32\CScript.exe "%1" %*
.scr - open -
.scr - install -
.scr - config -
.vbs - open - %SystemRoot%\System32\CScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-01-04 15:05:14 ----D---- C:\rsit
2012-01-04 15:05:14 ----D---- C:\Program Files\trend micro
2012-01-04 14:51:39 ----A---- C:\TDSSKiller.2.6.25.0_04.01.2012_14.51.39_log.txt
2012-01-04 14:46:30 ----D---- C:\Documents and Settings\autocont.NB-BOREK\Data aplikací\ArcSoft
2012-01-04 14:46:29 ----D---- C:\Documents and Settings\autocont.NB-BOREK\Data aplikací\Windows Desktop Search
2012-01-04 14:45:46 ----D---- C:\Documents and Settings\autocont.NB-BOREK\Data aplikací\Real
2012-01-04 14:45:32 ----A---- C:\TDSSKiller.2.6.25.0_04.01.2012_14.45.32_log.txt
2012-01-04 14:44:23 ----D---- C:\Documents and Settings\autocont.NB-BOREK\Data aplikací\Identities
2012-01-04 14:44:23 ----A---- C:\WINDOWS\OEWABLog.txt
2012-01-04 14:16:22 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-01-04 14:01:54 ----A---- C:\TDSSKiller.2.6.25.0_04.01.2012_14.01.54_log.txt
2012-01-04 14:01:46 ----D---- C:\Documents and Settings\autocont.NB-BOREK\Data aplikací\Zoner
2012-01-04 13:56:39 ----D---- C:\Documents and Settings\autocont.NB-BOREK\Data aplikací\Adobe
2012-01-04 10:47:28 ----A---- C:\WINDOWS\ntbtlog.txt
2012-01-04 10:47:08 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2012-01-04 10:47:07 ----D---- C:\Documents and Settings\autocont.NB-BOREK\Data aplikací\Malwarebytes
2012-01-04 10:46:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2012-01-04 10:46:51 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2012-01-04 10:46:51 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2012-01-04 10:44:52 ----D---- C:\Program Files\CCleaner
2012-01-04 10:33:30 ----D---- C:\Documents and Settings\autocont.NB-BOREK\Data aplikací\Mozilla
2012-01-04 10:32:02 ----ASH---- C:\Documents and Settings\autocont.NB-BOREK\Data aplikací\desktop.ini
2012-01-04 10:32:01 ----SD---- C:\Documents and Settings\autocont.NB-BOREK\Data aplikací\Microsoft
2012-01-04 10:32:01 ----D---- C:\Documents and Settings\autocont.NB-BOREK\Data aplikací\Macromedia
2012-01-03 11:56:25 ----A---- C:\WINDOWS\wininit.ini
2012-01-03 11:35:04 ----D---- C:\Program Files\ESET
2012-01-03 11:20:12 ----D---- C:\Program Files\Spybot - Search & Destroy
2012-01-03 11:20:12 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2012-01-02 19:05:33 ----HD---- C:\Documents and Settings\All Users\Data aplikací\Common Files
2012-01-02 15:39:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2012-01-02 15:38:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2618451$
2012-01-02 15:36:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$
2012-01-02 15:34:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2633171$
2012-01-02 14:48:33 ----HD---- C:\$AVG
2012-01-02 14:43:55 ----A---- C:\WINDOWS\system32\avgrsstx.dll
2012-01-02 14:27:56 ----A---- C:\WINDOWS\system32\drivers\avgtdix.sys
2012-01-02 14:27:56 ----A---- C:\WINDOWS\system32\drivers\avgrkx86.sys
2012-01-02 14:27:49 ----A---- C:\WINDOWS\system32\drivers\avgldx86.sys
2012-01-02 14:27:48 ----A---- C:\WINDOWS\system32\drivers\avgmfx86.sys
2012-01-02 14:27:10 ----D---- C:\WINDOWS\system32\drivers\Avg
2012-01-02 14:26:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\avg9
2012-01-02 14:04:01 ----D---- C:\WINDOWS\pss
2011-12-25 15:50:23 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2011-12-25 15:50:23 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2011-12-25 15:50:18 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2011-12-25 15:50:17 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2011-12-25 15:50:17 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2011-12-25 15:50:16 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2011-12-25 15:50:15 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2011-12-25 15:50:14 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2011-12-25 15:50:13 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2011-12-25 15:50:13 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2011-12-25 15:50:13 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2011-12-25 15:50:12 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2011-12-25 15:50:10 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2011-12-25 15:50:10 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2011-12-25 15:48:30 ----HD---- C:\WINDOWS\msdownld.tmp
2011-12-25 15:32:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\Solidshield
2011-12-25 15:24:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\Electronic Arts
2011-12-25 15:24:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\EA Core
2011-12-25 15:02:11 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2011-12-25 15:02:03 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2011-12-25 15:01:51 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2011-12-25 15:01:48 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2011-12-25 15:01:46 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2011-12-25 15:01:25 ----D---- C:\Program Files\Electronic Arts
2011-12-25 14:48:39 ----N---- C:\WINDOWS\system32\drivers\UMSTOR.sys
2011-12-25 14:48:39 ----D---- C:\WINDOWS\UMStor
2011-12-25 14:48:32 ----D---- C:\Program Files\USB Disk Win98 Driver
2011-12-25 14:44:55 ----D---- C:\MTV_OUTPUT

======List of files/folders modified in the last 1 month======

2012-01-04 15:05:14 ----D---- C:\Program Files
2012-01-04 14:51:50 ----D---- C:\WINDOWS\system32\CatRoot2
2012-01-04 14:51:41 ----D---- C:\WINDOWS\system32\drivers
2012-01-04 14:50:55 ----SHD---- C:\WINDOWS\CSC
2012-01-04 14:46:13 ----D---- C:\WINDOWS
2012-01-04 14:45:04 ----D---- C:\WINDOWS\Temp
2012-01-04 14:44:35 ----SHD---- C:\WINDOWS\Installer
2012-01-04 14:44:35 ----SHD---- C:\Config.Msi
2012-01-04 14:33:07 ----D---- C:\WINDOWS\Prefetch
2012-01-04 14:17:21 ----D---- C:\WINDOWS\SoftwareDistribution
2012-01-04 14:15:44 ----D---- C:\WINDOWS\system32
2012-01-04 10:45:44 ----D---- C:\WINDOWS\Logs
2012-01-04 10:45:44 ----D---- C:\WINDOWS\Debug
2012-01-04 10:45:41 ----SHD---- C:\RECYCLER
2012-01-04 10:45:41 ----D---- C:\WINDOWS\Minidump
2012-01-04 10:44:17 ----HD---- C:\WINDOWS\inf
2012-01-04 10:32:00 ----D---- C:\Documents and Settings
2012-01-03 11:58:12 ----D---- C:\Program Files\MyWebSearch
2012-01-03 11:54:43 ----SD---- C:\WINDOWS\Downloaded Program Files
2012-01-03 11:54:43 ----D---- C:\Program Files\Internet Explorer
2012-01-03 11:33:20 ----SD---- C:\WINDOWS\Tasks
2012-01-03 10:51:01 ----SH---- C:\boot.ini
2012-01-03 10:51:01 ----A---- C:\WINDOWS\win.ini
2012-01-03 10:51:01 ----A---- C:\WINDOWS\system.ini
2012-01-02 15:44:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2012-01-02 15:39:45 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-01-02 15:39:37 ----HD---- C:\WINDOWS\$hf_mig$
2012-01-02 15:23:10 ----A---- C:\WINDOWS\wincmd.ini
2012-01-02 14:26:33 ----D---- C:\Program Files\AVG
2012-01-02 14:25:58 ----D---- C:\WINDOWS\WinSxS
2012-01-02 14:07:10 ----D---- C:\WINDOWS\security
2011-12-25 15:59:39 ----D---- C:\Program Files\Microsoft Silverlight
2011-12-25 15:50:25 ----D---- C:\WINDOWS\system32\DirectX
2011-12-25 15:48:20 ----D---- C:\Temp
2011-12-25 15:23:51 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-12-25 14:48:39 ----SHDC---- C:\WINDOWS\$NtUninstallKB22013$
2011-12-25 14:48:39 ----D---- C:\WINDOWS\system
2011-12-25 14:48:34 ----HD---- C:\Program Files\InstallShield Installation Information
2011-12-25 14:47:53 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-12-25 14:47:28 ----A---- C:\WINDOWS\NeroDigital.ini
2011-12-16 09:16:45 ----D---- C:\WINDOWS\system32\drivers\etc
2011-12-05 09:36:56 ----D---- C:\Program Files\Mozilla Firefox

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AvgRkx86;avgrkx86.sys; C:\WINDOWS\System32\Drivers\avgrkx86.sys [2012-01-02 52872]
R0 imagedrv;imagedrv; C:\WINDOWS\System32\Drivers\imagedrv.sys [2004-03-02 5504]
R0 imagesrv;imagesrv; C:\WINDOWS\system32\DRIVERS\imagesrv.sys [2004-03-02 125184]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-07-12 45648]
R1 AvgTdiX;AVG Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2012-01-02 243152]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2006-11-10 18688]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2007-02-16 160256]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2007-10-29 10368]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2007-09-07 215904]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 AvgLdx86;AVG AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2012-01-02 216400]
S1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2012-01-02 29712]
S1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S2 aksfridge;HASP Fridge; C:\WINDOWS\system32\DRIVERS\aksfridge.sys [2008-03-18 350720]
S2 hardlock;hardlock; \??\C:\WINDOWS\system32\drivers\hardlock.sys []
S2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
S2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
S3 akshasp;Aladdin HASP Key; C:\WINDOWS\system32\DRIVERS\akshasp.sys [2007-09-11 238976]
S3 akshhl;Aladdin HASP HL Key; C:\WINDOWS\system32\DRIVERS\akshhl.sys [2007-09-11 46336]
S3 aksusb;Aladdin USB Key; C:\WINDOWS\system32\DRIVERS\aksusb.sys [2007-09-11 14976]
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2006-10-12 604928]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 C-Dilla;C-Dilla; \??\C:\WINDOWS\system32\drivers\CDANT.SYS []
S3 FTDIBUS;USB Serial Converter Driver; C:\WINDOWS\system32\drivers\ftdibus.sys [2007-06-27 53184]
S3 FTSER2K;USB Serial Port Driver; C:\WINDOWS\system32\drivers\ftser2k.sys [2007-06-27 71488]
S3 grmnusb;Garmin USB Driver; C:\WINDOWS\system32\drivers\grmnusb.sys [2009-04-17 9344]
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2007-03-01 988032]
S3 HSFHWAZL;HSFHWAZL; C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys [2007-03-01 210688]
S3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-04-17 5760096]
S3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd32.sys []
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-03-26 4395008]
S3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys []
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MPE;Filtr MPE BDA; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-13 15232]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 NSCIRDA;NSC Infrared Device Driver; C:\WINDOWS\system32\DRIVERS\nscirda.sys [2008-04-13 28672]
S3 rootrepeal;rootrepeal; \??\C:\WINDOWS\system32\drivers\rootrepeal.sys []
S3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 tifm21;tifm21; C:\WINDOWS\system32\drivers\tifm21.sys [2007-01-25 290304]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 uxkx1;ASUS MyCinema DiBcom based digital tuner device; C:\WINDOWS\system32\DRIVERS\uxkx1.sys [2008-10-28 609280]
S3 uxloqpoc;uxloqpoc; \??\C:\DOCUME~1\AUTOCO~1.NB-\LOCALS~1\Temp\uxloqpoc.sys []
S3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2007-03-01 731136]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2012-01-04 106496]
S2 avg9emc;AVG E-mail Scanner; C:\Program Files\AVG\AVG9\avgemc.exe [2012-01-02 916480]
S2 avg9wd;AVG WatchDog; C:\Program Files\AVG\AVG9\avgwdsvc.exe [2012-01-02 299520]
S2 avgagent;AVG7 Remote Support Service (AvgAgent); avgagent.exe /srvfsys []
S2 hasplms;HASP License Manager; C:\WINDOWS\system32\hasplms.exe -run []
S2 InterBaseGuardian;InterBase Guardian; C:\PROGRA~1\borland\INTERB~1\Bin\ibguard.exe -s []
S2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-10-11 147456]
S2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2011-12-24 652872]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S2 WinDefend;Windows Defender; C:\Program Files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
S2 WinVNC4;VNC Server Version 4; C:\Program Files\RealVNC\VNC4\WinVNC4.exe -service []
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2009-03-18 77944]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdate1c99da3dd552baa;Google Update Service (gupdate1c99da3dd552baa); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-03-05 133104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-03-05 133104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 InterBaseServer;InterBase Server; C:\PROGRA~1\borland\INTERB~1\Bin\ibserver.exe -s -g []
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2008-10-24 138240]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-10-16 182768]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

#3 Příspěvek od **motji** » 04 Led 2012 15:22

Zdravím

Spusťte combofix podle tohoto návodu
http://www.bleepingcomputer.com/combofi ... t-combofix

honnza · #4 Příspěvek od **honnza** » 04 Led 2012 16:00

Dobrý den, Děkuju Vám za rychlou odpověď !!!

Přikládam log CF:

ComboFix 12-01-03.08 - autocont 04.01.2012 15:39:25.1.1 - x86 NETWORK
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1014.800 [GMT 1:00]
Spuštěný z: c:\documents and settings\autocont.NB-BOREK\Plocha\ComboFix.exe
AV: AVG Anti-Virus Business Edition *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\borek.old\WINDOWS
c:\program files\MyWebSearch
c:\program files\MyWebSearch\bar\firefox\chrome\M3FFXTBR.JAR
c:\windows\$NtUninstallKB22013$
c:\windows\$NtUninstallKB22013$\344768142\{1B372133-BFFA-4dba-9CCF-5474BED6A9F6}
c:\windows\$NtUninstallKB22013$\344768142\L\aaaesuur
c:\windows\$NtUninstallKB22013$\344768142\loader.tlb
c:\windows\$NtUninstallKB22013$\344768142\U\@00000001
c:\windows\$NtUninstallKB22013$\344768142\U\@000000c0
c:\windows\$NtUninstallKB22013$\344768142\U\@000000cb
c:\windows\$NtUninstallKB22013$\344768142\U\@000000cf
c:\windows\$NtUninstallKB22013$\344768142\U\@80000000
c:\windows\$NtUninstallKB22013$\344768142\U\@800000c0
c:\windows\$NtUninstallKB22013$\344768142\U\@800000cb
c:\windows\$NtUninstallKB22013$\344768142\U\@800000cf
c:\windows\$NtUninstallKB22013$\4115336003
c:\windows\2394852372
.
Nakažená kopie c:\windows\system32\drivers\mqac.sys byla nalezena a vyléčena.
Obnovena kopie z - The cat found it

Nakažená kopie c:\windows\system32\wuauclt.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\windows\ServicePackFiles\i386\wuauclt.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-12-04 do 2012-01-04 )))))))))))))))))))))))))))))))
.
.
2012-01-04 14:05 . 2012-01-04 14:05 -------- d-----w- C:\rsit
2012-01-04 14:05 . 2012-01-04 14:05 -------- d-----w- c:\program files\trend micro
2012-01-04 09:47 . 2012-01-04 09:49 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2012-01-04 09:46 . 2012-01-04 09:46 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2012-01-04 09:44 . 2012-01-04 09:44 -------- d-----w- c:\program files\CCleaner
2012-01-04 09:32 . 2012-01-04 09:46 -------- d-----w- c:\documents and settings\autocont.NB-BOREK
2012-01-04 08:26 . 2012-01-04 08:26 -------- d-----r- c:\documents and settings\LocalService\Oblíbené položky
2012-01-03 10:35 . 2012-01-03 10:35 -------- d-----w- c:\program files\ESET
2012-01-03 10:30 . 2012-01-03 10:30 -------- d-----w- c:\documents and settings\autocont\Local Settings\Data aplikací\Mozilla
2012-01-03 10:20 . 2012-01-03 13:33 -------- d-----w- c:\program files\Spybot - Search & Destroy
2012-01-03 10:20 . 2012-01-03 11:17 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Spybot - Search & Destroy
2012-01-03 10:14 . 2012-01-03 10:17 -------- d-----w- c:\documents and settings\autocont\Data aplikací\Inbox Toolbar
2012-01-03 10:13 . 2012-01-03 10:14 -------- d-----w- c:\documents and settings\autocont\Local Settings\Data aplikací\ConduitEngine
2012-01-03 10:13 . 2012-01-03 10:13 -------- d-----w- c:\documents and settings\autocont\Local Settings\Data aplikací\Winamp Toolbar
2012-01-02 18:05 . 2012-01-02 18:05 -------- d--h--w- c:\documents and settings\All Users\Data aplikací\Common Files
2012-01-02 14:35 . 2012-01-02 14:35 -------- d-----w- c:\documents and settings\autocont\Local Settings\Data aplikací\PCHealth
2012-01-02 13:57 . 2012-01-02 13:57 -------- d-----w- c:\documents and settings\autocont\Local Settings\Data aplikací\GHISLER
2012-01-02 13:48 . 2012-01-02 13:48 -------- d-----w- C:\$AVG
2012-01-02 13:43 . 2012-01-02 13:43 12536 ----a-w- c:\windows\system32\avgrsstx.dll
2012-01-02 13:27 . 2012-01-02 13:44 243152 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2012-01-02 13:27 . 2012-01-02 13:27 52872 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
2012-01-02 13:27 . 2012-01-02 13:27 216400 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2012-01-02 13:27 . 2012-01-02 13:43 29712 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2012-01-02 13:27 . 2012-01-04 07:58 -------- d-----w- c:\windows\system32\drivers\Avg
2012-01-02 13:26 . 2012-01-04 09:29 -------- d-----w- c:\documents and settings\All Users\Data aplikací\avg9
2012-01-02 13:02 . 2012-01-02 13:02 -------- d-----w- c:\documents and settings\autocont\Local Settings\Data aplikací\Temp
2012-01-02 13:02 . 2012-01-02 13:02 -------- d-----w- c:\documents and settings\autocont\Local Settings\Data aplikací\Adobe
2011-12-30 18:06 . 2011-12-30 18:06 56200 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\Windows Defender\Definition Updates\{CAA4994E-3C65-4DFB-9D44-E7BD6431EA69}\offreg.dll
2011-12-25 14:48 . 2011-12-25 14:49 -------- d--h--w- c:\windows\msdownld.tmp
2011-12-25 14:32 . 2011-12-25 14:33 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Solidshield
2011-12-25 14:24 . 2011-12-25 14:24 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Electronic Arts
2011-12-25 14:24 . 2011-12-25 14:24 -------- d-----w- c:\documents and settings\All Users\Data aplikací\EA Core
2011-12-25 14:02 . 2009-09-04 16:29 1974616 ----a-w- c:\windows\system32\D3DCompiler_42.dll
2011-12-25 14:02 . 2009-09-04 16:29 5501792 ----a-w- c:\windows\system32\d3dcsx_42.dll
2011-12-25 14:01 . 2009-09-04 16:29 235344 ----a-w- c:\windows\system32\d3dx11_42.dll
2011-12-25 14:01 . 2009-09-04 16:29 453456 ----a-w- c:\windows\system32\d3dx10_42.dll
2011-12-25 14:01 . 2009-09-04 16:29 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
2011-12-25 14:01 . 2011-12-25 14:01 -------- d-----w- c:\program files\Electronic Arts
2011-12-25 13:48 . 2011-12-25 13:48 -------- d-----w- c:\windows\UMStor
2011-12-25 13:48 . 2011-12-25 13:48 -------- d-----w- c:\windows\system\iosubsys
2011-12-25 13:48 . 2003-11-21 17:09 201736 ------w- c:\windows\system32\drivers\UMSTOR.sys
2011-12-25 13:48 . 2011-12-25 13:48 -------- d-----w- c:\program files\USB Disk Win98 Driver
2011-12-25 13:44 . 2011-12-25 13:44 -------- d-----w- C:\MTV_OUTPUT
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-04 13:15 . 2007-08-02 12:00 162816 ----a-w- c:\windows\system32\drivers\netbt.sys
2011-12-01 18:52 . 2011-12-01 18:52 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-28 05:32 . 2007-08-02 12:00 33280 ----a-w- c:\windows\system32\csrsrv.dll
2011-10-26 10:50 . 2007-08-02 12:00 2194944 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-10-26 10:50 . 2004-08-17 15:45 2071552 ----a-w- c:\windows\system32\ntkrnlpa.exe
2011-10-18 11:13 . 2007-08-02 12:00 186880 ----a-w- c:\windows\system32\encdec.dll
2011-10-11 11:47 . 2007-10-29 17:09 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-10-11 11:47 . 2011-10-11 11:48 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-10-07 03:48 . 2011-11-29 23:33 6668624 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\Windows Defender\Definition Updates\{CAA4994E-3C65-4DFB-9D44-E7BD6431EA69}\mpengine.dll
2011-10-07 03:48 . 2007-10-29 16:56 6668624 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
2011-08-30 09:23 . 2011-08-10 23:08 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2011-01-17 14:54 175912 ----a-w- c:\program files\ConduitEngine\prxConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\prxConduitEngine.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2007-03-21 16126464]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2007-09-07 102400]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-04-21 142104]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-04-21 162584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-04-21 138008]
"SSBkgdUpdate"="c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-09-28 185896]
"OpwareSE4"="c:\program files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe" [2006-10-11 75304]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe" [2005-02-17 221184]
"POPUPTV"="c:\program files\ASUS\PopupTV\ExpressTV.exe" [2009-02-20 708608]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2010-12-09 74752]
"DivX Download Manager"="c:\program files\DivX\DivX Plus Web Player\DDmService.exe" [2010-12-08 63360]
"Google Quick Search Box"="c:\program files\Google\Quick Search Box\GoogleQuickSearchBox.exe" [2011-02-26 126976]
"USB Storage Toolbox"="c:\windows\UMStor\Res.EXE" [2005-09-14 65536]
"AVG9_TRAY"="c:\progra~1\AVG\AVG9\avgtray.exe" [2012-01-02 2078048]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2005-02-17 81920]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-03-21 202256]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-12-09 1226608]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2008-11-04 435096]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Action Manager 32.lnk - c:\program files\ScannerU\AM32.exe [2007-11-14 69632]
Akcelerátor spuštění AutoCADu.lnk - c:\program files\Common Files\Autodesk Shared\acstart17.exe [2006-3-5 11000]
AutoCAD Startup Accelerator.lnk - c:\program files\Common Files\Autodesk Shared\acstart16.exe [2006-9-23 10872]
Místní vyhledávání.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2007-2-5 118784]
TMMonitor.lnk - c:\program files\ArcSoft\TotalMedia 3.5\TMMonitor.exe [2009-12-23 258048]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2007-02-05 294400]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2012-01-02 13:43 12536 ----a-w- c:\windows\system32\avgrsstx.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Google\\Google SketchUp 7\\SketchUp.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [2.1.2012 14:27 52872]
R1 AvgTdiX;AVG Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2.1.2012 14:27 243152]
S1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2.1.2012 14:27 216400]
S2 avg9emc;AVG E-mail Scanner;c:\program files\AVG\AVG9\avgemc.exe [2.1.2012 14:26 916480]
S2 avg9wd;AVG WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [2.1.2012 14:43 299520]
S2 avgagent;AVG7 Remote Support Service (AvgAgent);avgagent.exe /srvfsys --> avgagent.exe [?]
S2 hasplms;HASP License Manager;c:\windows\system32\hasplms.exe -run --> c:\windows\system32\hasplms.exe -run [?]
S2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [3.11.2006 19:19 13592]
S3 gupdate1c99da3dd552baa;Google Update Service (gupdate1c99da3dd552baa);c:\program files\Google\Update\GoogleUpdate.exe [5.3.2009 16:05 133104]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [5.3.2009 16:05 133104]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [4.1.2012 10:47 40776]
S3 uxkx1;ASUS MyCinema DiBcom based digital tuner device;c:\windows\system32\drivers\uxkx1.sys [23.12.2009 20:07 609280]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
.
Obsah adresáře 'Naplánované úlohy'
.
2012-01-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-05 15:05]
.
2012-01-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-05 15:05]
.
2011-12-30 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Windows Defender\MpCmdRun.exe [2006-11-03 18:20]
.
2012-01-04 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-2119669116-2072395555-1277150550-1142.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 21:09]
.
2012-01-04 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-2119669116-2072395555-1277150550-1157.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 21:09]
.
2012-01-03 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2119669116-2072395555-1277150550-1142.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 21:09]
.
2012-01-02 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2119669116-2072395555-1277150550-1157.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 21:09]
.
.
------- Doplňkový sken -------
.
TCP: DhcpNameServer = 192.168.1.10
DPF: Garmin Communicator Plug-In - hxxps://my.garmin.com/mygarmin/m/GarminAxControl.CAB
DPF: {1F831FA2-42FC-11D4-95A6-0080AD30DCE1} - file:///C:/Program%20Files/AutoCAD%20LT%202000i%20Cz/InstFred.ocx
DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} - hxxp://85.207.254.4/activex/AMC.cab
FF - ProfilePath - c:\documents and settings\autocont.NB-BOREK\Data aplikací\Mozilla\Firefox\Profiles\aatamr35.default\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKLM-Run-mshtune - c:\documents and settings\All Users\mshtune.exe
SafeBoot-46631845.sys
AddRemove-Autodesk DWF Viewer - c:\progra~1\Autodesk\AUTODE~1\Setup.exe
AddRemove-Datalogger_is1 - c:\program files\Comet\Logger\unins000.exe
AddRemove-HDMI - c:\windows\system32\igxpun.exe
AddRemove-HijackThis - c:\documents and settings\borek\Plocha\HijackThis.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-01-04 15:52
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVG\AVG9\avgchsvx.exe
.
**************************************************************************
.
Celkový čas: 2012-01-04 15:57:53 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-01-04 14:57
.
Před spuštěním: Volných bajtů: 27 429 220 352
Po spuštění: Volných bajtů: 28 120 125 440
.
- - End Of File - - DC6897352F425C5C41A0862D6E8E355D

#5 Příspěvek od **motji** » 04 Led 2012 16:21

Máte tam nějakej mišmqš v antivirech, zítra bych vám napsala opravný skript.
Ted poprosím o nový log z TDSS killer.

honnza · #6 Příspěvek od **honnza** » 04 Led 2012 16:28

Diky, ty antivyry si pořeším sám, zůstane jen AVG, zbytek odinstaluju a povypinam rezidentni stity.

16:23:30.0687 3760 TDSS rootkit removing tool 2.6.25.0 Dec 23 2011 14:51:16
16:23:30.0843 3760 ============================================================
16:23:30.0843 3760 Current date / time: 2012/01/04 16:23:30.0843
16:23:30.0843 3760 SystemInfo:
16:23:30.0843 3760
16:23:30.0843 3760 OS Version: 5.1.2600 ServicePack: 3.0
16:23:30.0843 3760 Product type: Workstation
16:23:30.0843 3760 ComputerName: NB-BOREK
16:23:30.0843 3760 UserName: autocont
16:23:30.0843 3760 Windows directory: C:\WINDOWS
16:23:30.0843 3760 System windows directory: C:\WINDOWS
16:23:30.0843 3760 Processor architecture: Intel x86
16:23:30.0843 3760 Number of processors: 1
16:23:30.0843 3760 Page size: 0x1000
16:23:30.0843 3760 Boot type: Normal boot
16:23:30.0843 3760 ============================================================
16:23:32.0125 3760 Initialize success
16:23:39.0828 3080 ============================================================
16:23:39.0828 3080 Scan started
16:23:39.0828 3080 Mode: Manual; SigCheck; TDLFS;
16:23:39.0828 3080 ============================================================
16:23:41.0046 3080 Abiosdsk - ok
16:23:41.0062 3080 abp480n5 - ok
16:23:41.0250 3080 ACPI (4fe34f1f3126b61fcc6b2043aa8112c9) C:\WINDOWS\system32\DRIVERS\ACPI.sys
16:23:44.0671 3080 ACPI ( UnsignedFile.Multi.Generic ) - warning
16:23:44.0671 3080 ACPI - detected UnsignedFile.Multi.Generic (1)
16:23:45.0515 3080 ACPIEC (afdff022a01f0b11c776f0860c3b282f) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
16:23:45.0593 3080 ACPIEC ( UnsignedFile.Multi.Generic ) - warning
16:23:45.0593 3080 ACPIEC - detected UnsignedFile.Multi.Generic (1)
16:23:46.0062 3080 adpu160m - ok
16:23:46.0812 3080 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
16:23:47.0015 3080 aec ( UnsignedFile.Multi.Generic ) - warning
16:23:47.0015 3080 aec - detected UnsignedFile.Multi.Generic (1)
16:23:47.0765 3080 Afc (fe3ea6e9afc1a78e6edca121e006afb7) C:\WINDOWS\system32\drivers\Afc.sys
16:23:48.0078 3080 Afc - ok
16:23:49.0156 3080 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
16:23:49.0468 3080 AFD ( UnsignedFile.Multi.Generic ) - warning
16:23:49.0468 3080 AFD - detected UnsignedFile.Multi.Generic (1)
16:23:50.0437 3080 Aha154x - ok
16:23:51.0109 3080 aic78u2 - ok
16:23:51.0281 3080 aic78xx - ok
16:23:51.0531 3080 aksfridge (cb5a5079744a0535416d3a5e462c5efe) C:\WINDOWS\system32\DRIVERS\aksfridge.sys
16:23:51.0578 3080 aksfridge ( UnsignedFile.Multi.Generic ) - warning
16:23:51.0578 3080 aksfridge - detected UnsignedFile.Multi.Generic (1)
16:23:51.0812 3080 akshasp (1a27f5555448cc2d29d281b11f39177e) C:\WINDOWS\system32\DRIVERS\akshasp.sys
16:23:51.0968 3080 akshasp ( UnsignedFile.Multi.Generic ) - warning
16:23:51.0968 3080 akshasp - detected UnsignedFile.Multi.Generic (1)
16:23:52.0515 3080 akshhl (147b61b81be1ffc38939ea47e5cfb51f) C:\WINDOWS\system32\DRIVERS\akshhl.sys
16:23:52.0625 3080 akshhl ( UnsignedFile.Multi.Generic ) - warning
16:23:52.0625 3080 akshhl - detected UnsignedFile.Multi.Generic (1)
16:23:52.0984 3080 aksusb (b4ad9f5d78f27e0c6994e0cb05c60e21) C:\WINDOWS\system32\DRIVERS\aksusb.sys
16:23:53.0015 3080 aksusb ( UnsignedFile.Multi.Generic ) - warning
16:23:53.0015 3080 aksusb - detected UnsignedFile.Multi.Generic (1)
16:23:53.0125 3080 AliIde - ok
16:23:53.0203 3080 amsint - ok
16:23:53.0453 3080 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
16:23:53.0500 3080 Arp1394 ( UnsignedFile.Multi.Generic ) - warning
16:23:53.0500 3080 Arp1394 - detected UnsignedFile.Multi.Generic (1)
16:23:53.0703 3080 asc - ok
16:23:53.0937 3080 asc3350p - ok
16:23:54.0156 3080 asc3550 - ok
16:23:54.0625 3080 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
16:23:54.0656 3080 AsyncMac ( UnsignedFile.Multi.Generic ) - warning
16:23:54.0656 3080 AsyncMac - detected UnsignedFile.Multi.Generic (1)
16:23:55.0250 3080 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
16:23:55.0250 3080 atapi ( UnsignedFile.Multi.Generic ) - warning
16:23:55.0250 3080 atapi - detected UnsignedFile.Multi.Generic (1)
16:23:55.0421 3080 Atdisk - ok
16:23:55.0484 3080 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
16:23:55.0500 3080 Atmarpc ( UnsignedFile.Multi.Generic ) - warning
16:23:55.0500 3080 Atmarpc - detected UnsignedFile.Multi.Generic (1)
16:23:55.0546 3080 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
16:23:55.0546 3080 audstub ( UnsignedFile.Multi.Generic ) - warning
16:23:55.0546 3080 audstub - detected UnsignedFile.Multi.Generic (1)
16:23:55.0625 3080 AvgLdx86 (b8c187439d27aba430dd69fdcf1fa657) C:\WINDOWS\system32\Drivers\avgldx86.sys
16:23:55.0687 3080 AvgLdx86 - ok
16:23:55.0734 3080 AvgMfx86 (80ff2b1b7eeda966394f0baa895bbf4b) C:\WINDOWS\system32\Drivers\avgmfx86.sys
16:23:55.0734 3080 AvgMfx86 - ok
16:23:55.0781 3080 AvgRkx86 (5bbcd8646074a3af4ee9b321d12c2b64) C:\WINDOWS\system32\Drivers\avgrkx86.sys
16:23:55.0796 3080 AvgRkx86 - ok
16:23:55.0843 3080 AvgTdiX (9a7a93388f503a34e7339ae7f9997449) C:\WINDOWS\system32\Drivers\avgtdix.sys
16:23:55.0890 3080 AvgTdiX - ok
16:23:55.0953 3080 b57w2k (f96038aa1ec4013a93d2420fc689d1e9) C:\WINDOWS\system32\DRIVERS\b57xp32.sys
16:23:55.0968 3080 b57w2k ( UnsignedFile.Multi.Generic ) - warning
16:23:55.0968 3080 b57w2k - detected UnsignedFile.Multi.Generic (1)
16:23:56.0031 3080 BCM43XX (b89bcf0a25aeb3b47030ac83287f894a) C:\WINDOWS\system32\DRIVERS\bcmwl5.sys
16:23:56.0140 3080 BCM43XX ( UnsignedFile.Multi.Generic ) - warning
16:23:56.0140 3080 BCM43XX - detected UnsignedFile.Multi.Generic (1)
16:23:56.0187 3080 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
16:23:56.0203 3080 Beep ( UnsignedFile.Multi.Generic ) - warning
16:23:56.0203 3080 Beep - detected UnsignedFile.Multi.Generic (1)
16:23:56.0265 3080 C-Dilla - ok
16:23:56.0265 3080 catchme - ok
16:23:56.0312 3080 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
16:23:56.0328 3080 cbidf2k ( UnsignedFile.Multi.Generic ) - warning
16:23:56.0328 3080 cbidf2k - detected UnsignedFile.Multi.Generic (1)
16:23:56.0421 3080 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
16:23:56.0453 3080 CCDECODE ( UnsignedFile.Multi.Generic ) - warning
16:23:56.0453 3080 CCDECODE - detected UnsignedFile.Multi.Generic (1)
16:23:56.0468 3080 cd20xrnt - ok
16:23:56.0500 3080 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
16:23:56.0515 3080 Cdaudio ( UnsignedFile.Multi.Generic ) - warning
16:23:56.0515 3080 Cdaudio - detected UnsignedFile.Multi.Generic (1)
16:23:56.0562 3080 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
16:23:56.0578 3080 Cdfs ( UnsignedFile.Multi.Generic ) - warning
16:23:56.0578 3080 Cdfs - detected UnsignedFile.Multi.Generic (1)
16:23:56.0609 3080 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
16:23:56.0625 3080 Cdrom ( UnsignedFile.Multi.Generic ) - warning
16:23:56.0625 3080 Cdrom - detected UnsignedFile.Multi.Generic (1)
16:23:56.0640 3080 Changer - ok
16:23:56.0671 3080 CmBatt (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys
16:23:56.0671 3080 CmBatt ( UnsignedFile.Multi.Generic ) - warning
16:23:56.0671 3080 CmBatt - detected UnsignedFile.Multi.Generic (1)
16:23:56.0687 3080 CmdIde - ok
16:23:56.0734 3080 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys
16:23:56.0734 3080 Compbatt ( UnsignedFile.Multi.Generic ) - warning
16:23:56.0734 3080 Compbatt - detected UnsignedFile.Multi.Generic (1)
16:23:56.0750 3080 Cpqarray - ok
16:23:56.0765 3080 dac2w2k - ok
16:23:56.0796 3080 dac960nt - ok
16:23:56.0828 3080 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
16:23:56.0828 3080 Disk ( UnsignedFile.Multi.Generic ) - warning
16:23:56.0828 3080 Disk - detected UnsignedFile.Multi.Generic (1)
16:23:56.0906 3080 dmboot (db5fd2bf5b07dc54bfcb3664ff05bd7c) C:\WINDOWS\system32\drivers\dmboot.sys
16:23:57.0015 3080 dmboot ( UnsignedFile.Multi.Generic ) - warning
16:23:57.0015 3080 dmboot - detected UnsignedFile.Multi.Generic (1)
16:23:57.0046 3080 dmio (fff1720af51171f32f1ead5cf71f2810) C:\WINDOWS\system32\drivers\dmio.sys
16:23:57.0062 3080 dmio ( UnsignedFile.Multi.Generic ) - warning
16:23:57.0062 3080 dmio - detected UnsignedFile.Multi.Generic (1)
16:23:57.0125 3080 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
16:23:57.0140 3080 dmload ( UnsignedFile.Multi.Generic ) - warning
16:23:57.0140 3080 dmload - detected UnsignedFile.Multi.Generic (1)
16:23:57.0187 3080 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
16:23:57.0203 3080 DMusic ( UnsignedFile.Multi.Generic ) - warning
16:23:57.0203 3080 DMusic - detected UnsignedFile.Multi.Generic (1)
16:23:57.0218 3080 dpti2o - ok
16:23:57.0250 3080 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
16:23:57.0250 3080 drmkaud ( UnsignedFile.Multi.Generic ) - warning
16:23:57.0250 3080 drmkaud - detected UnsignedFile.Multi.Generic (1)
16:23:57.0296 3080 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
16:23:57.0312 3080 Fastfat ( UnsignedFile.Multi.Generic ) - warning
16:23:57.0312 3080 Fastfat - detected UnsignedFile.Multi.Generic (1)
16:23:57.0343 3080 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
16:23:57.0359 3080 Fdc ( UnsignedFile.Multi.Generic ) - warning
16:23:57.0359 3080 Fdc - detected UnsignedFile.Multi.Generic (1)
16:23:57.0390 3080 Fips (ac366695a0796560aa37215ad5762aaf) C:\WINDOWS\system32\drivers\Fips.sys
16:23:57.0421 3080 Fips ( UnsignedFile.Multi.Generic ) - warning
16:23:57.0421 3080 Fips - detected UnsignedFile.Multi.Generic (1)
16:23:57.0515 3080 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
16:23:57.0531 3080 Flpydisk ( UnsignedFile.Multi.Generic ) - warning
16:23:57.0531 3080 Flpydisk - detected UnsignedFile.Multi.Generic (1)
16:23:57.0578 3080 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
16:23:57.0593 3080 FltMgr ( UnsignedFile.Multi.Generic ) - warning
16:23:57.0593 3080 FltMgr - detected UnsignedFile.Multi.Generic (1)
16:23:57.0640 3080 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
16:23:57.0671 3080 Fs_Rec ( UnsignedFile.Multi.Generic ) - warning
16:23:57.0671 3080 Fs_Rec - detected UnsignedFile.Multi.Generic (1)
16:23:57.0718 3080 FTDIBUS (a36e8beedb3aaca09bf55a1d17904bc8) C:\WINDOWS\system32\drivers\ftdibus.sys
16:23:57.0750 3080 FTDIBUS - ok
16:23:57.0796 3080 Ftdisk (4e664d8541db4a66b73a24257e322e1f) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
16:23:57.0812 3080 Ftdisk ( UnsignedFile.Multi.Generic ) - warning
16:23:57.0812 3080 Ftdisk - detected UnsignedFile.Multi.Generic (1)
16:23:57.0843 3080 FTSER2K (a14a1f4bb391df9c233cb5dbd05feb70) C:\WINDOWS\system32\drivers\ftser2k.sys
16:23:57.0859 3080 FTSER2K - ok
16:23:57.0921 3080 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
16:23:57.0937 3080 Gpc ( UnsignedFile.Multi.Generic ) - warning
16:23:57.0937 3080 Gpc - detected UnsignedFile.Multi.Generic (1)
16:23:57.0984 3080 grmnusb (6003bc70f1a8307262bd3c941bda0b7e) C:\WINDOWS\system32\drivers\grmnusb.sys
16:23:58.0000 3080 grmnusb ( UnsignedFile.Multi.Generic ) - warning
16:23:58.0000 3080 grmnusb - detected UnsignedFile.Multi.Generic (1)
16:23:58.0234 3080 hardlock (9de9a7a19195c57ef38b4ee25422f2d7) C:\WINDOWS\system32\drivers\hardlock.sys
16:23:58.0515 3080 hardlock ( UnsignedFile.Multi.Generic ) - warning
16:23:58.0515 3080 hardlock - detected UnsignedFile.Multi.Generic (1)
16:23:58.0906 3080 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
16:23:59.0000 3080 HDAudBus ( UnsignedFile.Multi.Generic ) - warning
16:23:59.0000 3080 HDAudBus - detected UnsignedFile.Multi.Generic (1)
16:23:59.0234 3080 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
16:23:59.0250 3080 HidUsb ( UnsignedFile.Multi.Generic ) - warning
16:23:59.0250 3080 HidUsb - detected UnsignedFile.Multi.Generic (1)
16:23:59.0296 3080 hpn - ok
16:23:59.0359 3080 HSFHWAZL (7d33d2b81bd8b4bc51b536b113295d51) C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys
16:23:59.0375 3080 HSFHWAZL ( UnsignedFile.Multi.Generic ) - warning
16:23:59.0375 3080 HSFHWAZL - detected UnsignedFile.Multi.Generic (1)
16:23:59.0468 3080 HSF_DPV (fb6ad8a16e22c91d5978b26e0300a331) C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys
16:23:59.0640 3080 HSF_DPV ( UnsignedFile.Multi.Generic ) - warning
16:23:59.0640 3080 HSF_DPV - detected UnsignedFile.Multi.Generic (1)
16:23:59.0718 3080 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
16:23:59.0734 3080 HTTP ( UnsignedFile.Multi.Generic ) - warning
16:23:59.0734 3080 HTTP - detected UnsignedFile.Multi.Generic (1)
16:23:59.0750 3080 i2omgmt - ok
16:23:59.0765 3080 i2omp - ok
16:23:59.0796 3080 i8042prt (c528e27945367191e7bae364930b6932) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
16:23:59.0812 3080 i8042prt ( UnsignedFile.Multi.Generic ) - warning
16:23:59.0812 3080 i8042prt - detected UnsignedFile.Multi.Generic (1)
16:24:00.0265 3080 ialm (28423512370705aeda6a652fedb25468) C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
16:24:01.0625 3080 ialm ( UnsignedFile.Multi.Generic ) - warning
16:24:01.0625 3080 ialm - detected UnsignedFile.Multi.Generic (1)
16:24:01.0906 3080 igfx - ok
16:24:02.0218 3080 imagedrv (0a7c49b48c772591a2d362daa00246c8) C:\WINDOWS\system32\Drivers\imagedrv.sys
16:24:02.0265 3080 imagedrv ( UnsignedFile.Multi.Generic ) - warning
16:24:02.0265 3080 imagedrv - detected UnsignedFile.Multi.Generic (1)
16:24:02.0375 3080 imagesrv (549ba4f539e7b8d8129500b96dd7b27a) C:\WINDOWS\system32\DRIVERS\imagesrv.sys
16:24:02.0500 3080 imagesrv ( UnsignedFile.Multi.Generic ) - warning
16:24:02.0500 3080 imagesrv - detected UnsignedFile.Multi.Generic (1)
16:24:02.0671 3080 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
16:24:02.0718 3080 Imapi ( UnsignedFile.Multi.Generic ) - warning
16:24:02.0718 3080 Imapi - detected UnsignedFile.Multi.Generic (1)
16:24:02.0828 3080 ini910u - ok
16:24:03.0562 3080 IntcAzAudAddService (cbddab14249b2f05407fc09ab8fffb88) C:\WINDOWS\system32\drivers\RtkHDAud.sys
16:24:04.0281 3080 IntcAzAudAddService ( UnsignedFile.Multi.Generic ) - warning
16:24:04.0281 3080 IntcAzAudAddService - detected UnsignedFile.Multi.Generic (1)
16:24:04.0500 3080 IntelIde - ok
16:24:04.0609 3080 intelppm (27b290d632af2cf3cf40bfddb7370985) C:\WINDOWS\system32\DRIVERS\intelppm.sys
16:24:04.0640 3080 intelppm ( UnsignedFile.Multi.Generic ) - warning
16:24:04.0640 3080 intelppm - detected UnsignedFile.Multi.Generic (1)
16:24:04.0812 3080 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
16:24:04.0843 3080 Ip6Fw ( UnsignedFile.Multi.Generic ) - warning
16:24:04.0843 3080 Ip6Fw - detected UnsignedFile.Multi.Generic (1)
16:24:04.0968 3080 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
16:24:05.0093 3080 IpFilterDriver ( UnsignedFile.Multi.Generic ) - warning
16:24:05.0093 3080 IpFilterDriver - detected UnsignedFile.Multi.Generic (1)
16:24:05.0187 3080 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
16:24:05.0218 3080 IpInIp ( UnsignedFile.Multi.Generic ) - warning
16:24:05.0218 3080 IpInIp - detected UnsignedFile.Multi.Generic (1)
16:24:05.0421 3080 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
16:24:05.0453 3080 IpNat ( UnsignedFile.Multi.Generic ) - warning
16:24:05.0453 3080 IpNat - detected UnsignedFile.Multi.Generic (1)
16:24:05.0671 3080 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
16:24:05.0734 3080 IPSec ( UnsignedFile.Multi.Generic ) - warning
16:24:05.0734 3080 IPSec - detected UnsignedFile.Multi.Generic (1)
16:24:05.0812 3080 irda (aca5e7b54409f9cb5eed97ed0c81120e) C:\WINDOWS\system32\DRIVERS\irda.sys
16:24:05.0875 3080 irda ( UnsignedFile.Multi.Generic ) - warning
16:24:05.0875 3080 irda - detected UnsignedFile.Multi.Generic (1)
16:24:06.0062 3080 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
16:24:06.0093 3080 IRENUM ( UnsignedFile.Multi.Generic ) - warning
16:24:06.0093 3080 IRENUM - detected UnsignedFile.Multi.Generic (1)
16:24:06.0250 3080 isapnp (cc9f8a2d60aed1a51a3ac34c59b987ae) C:\WINDOWS\system32\DRIVERS\isapnp.sys
16:24:06.0265 3080 isapnp ( UnsignedFile.Multi.Generic ) - warning
16:24:06.0265 3080 isapnp - detected UnsignedFile.Multi.Generic (1)
16:24:06.0359 3080 Kbdclass (1b6162fe7f66b1a71a4b70f941c4aa9b) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
16:24:06.0390 3080 Kbdclass ( UnsignedFile.Multi.Generic ) - warning
16:24:06.0390 3080 Kbdclass - detected UnsignedFile.Multi.Generic (1)
16:24:06.0578 3080 kbdhid (86c8f23616c6c6e5b2776901c17b945b) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
16:24:06.0593 3080 kbdhid ( UnsignedFile.Multi.Generic ) - warning
16:24:06.0593 3080 kbdhid - detected UnsignedFile.Multi.Generic (1)
16:24:06.0734 3080 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
16:24:06.0796 3080 kmixer ( UnsignedFile.Multi.Generic ) - warning
16:24:06.0796 3080 kmixer - detected UnsignedFile.Multi.Generic (1)
16:24:06.0890 3080 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
16:24:06.0921 3080 KSecDD ( UnsignedFile.Multi.Generic ) - warning
16:24:06.0921 3080 KSecDD - detected UnsignedFile.Multi.Generic (1)
16:24:06.0968 3080 lbrtfdc - ok
16:24:07.0093 3080 MBAMSwissArmy (0db7527db188c7d967a37bb51bbf3963) C:\WINDOWS\system32\drivers\mbamswissarmy.sys
16:24:07.0218 3080 MBAMSwissArmy - ok
16:24:07.0328 3080 mdmxsdk (0cea2d0d3fa284b85ed5b68365114f76) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
16:24:07.0375 3080 mdmxsdk ( UnsignedFile.Multi.Generic ) - warning
16:24:07.0375 3080 mdmxsdk - detected UnsignedFile.Multi.Generic (1)
16:24:07.0484 3080 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
16:24:07.0500 3080 mnmdd ( UnsignedFile.Multi.Generic ) - warning
16:24:07.0500 3080 mnmdd - detected UnsignedFile.Multi.Generic (1)
16:24:07.0687 3080 Modem (44032b0c6d9954d3fd26438330b99ee7) C:\WINDOWS\system32\drivers\Modem.sys
16:24:07.0703 3080 Modem ( UnsignedFile.Multi.Generic ) - warning
16:24:07.0703 3080 Modem - detected UnsignedFile.Multi.Generic (1)
16:24:07.0781 3080 Mouclass (4cb582831dbde63ce43b45d771218374) C:\WINDOWS\system32\DRIVERS\mouclass.sys
16:24:07.0796 3080 Mouclass ( UnsignedFile.Multi.Generic ) - warning
16:24:07.0796 3080 Mouclass - detected UnsignedFile.Multi.Generic (1)
16:24:08.0000 3080 mouhid (bb269eba740737ab749b214d568b6812) C:\WINDOWS\system32\DRIVERS\mouhid.sys
16:24:08.0015 3080 mouhid ( UnsignedFile.Multi.Generic ) - warning
16:24:08.0015 3080 mouhid - detected UnsignedFile.Multi.Generic (1)
16:24:08.0265 3080 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
16:24:08.0281 3080 MountMgr ( UnsignedFile.Multi.Generic ) - warning
16:24:08.0281 3080 MountMgr - detected UnsignedFile.Multi.Generic (1)
16:24:08.0531 3080 MPE (c0f8e0c2c3c0437cf37c6781896dc3ec) C:\WINDOWS\system32\DRIVERS\MPE.sys
16:24:08.0546 3080 MPE ( UnsignedFile.Multi.Generic ) - warning
16:24:08.0546 3080 MPE - detected UnsignedFile.Multi.Generic (1)
16:24:08.0703 3080 mraid35x - ok
16:24:08.0781 3080 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
16:24:08.0859 3080 MRxDAV ( UnsignedFile.Multi.Generic ) - warning
16:24:08.0859 3080 MRxDAV - detected UnsignedFile.Multi.Generic (1)
16:24:09.0078 3080 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
16:24:09.0218 3080 MRxSmb ( UnsignedFile.Multi.Generic ) - warning
16:24:09.0218 3080 MRxSmb - detected UnsignedFile.Multi.Generic (1)
16:24:09.0546 3080 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
16:24:09.0593 3080 Msfs ( UnsignedFile.Multi.Generic ) - warning
16:24:09.0593 3080 Msfs - detected UnsignedFile.Multi.Generic (1)
16:24:09.0734 3080 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
16:24:09.0734 3080 MSKSSRV ( UnsignedFile.Multi.Generic ) - warning
16:24:09.0734 3080 MSKSSRV - detected UnsignedFile.Multi.Generic (1)
16:24:09.0984 3080 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
16:24:10.0015 3080 MSPCLOCK ( UnsignedFile.Multi.Generic ) - warning
16:24:10.0015 3080 MSPCLOCK - detected UnsignedFile.Multi.Generic (1)
16:24:10.0843 3080 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
16:24:10.0875 3080 MSPQM ( UnsignedFile.Multi.Generic ) - warning
16:24:10.0875 3080 MSPQM - detected UnsignedFile.Multi.Generic (1)
16:24:11.0562 3080 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
16:24:11.0578 3080 mssmbios ( UnsignedFile.Multi.Generic ) - warning
16:24:11.0578 3080 mssmbios - detected UnsignedFile.Multi.Generic (1)
16:24:12.0078 3080 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
16:24:12.0140 3080 MSTEE ( UnsignedFile.Multi.Generic ) - warning
16:24:12.0140 3080 MSTEE - detected UnsignedFile.Multi.Generic (1)
16:24:12.0406 3080 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
16:24:12.0421 3080 Mup ( UnsignedFile.Multi.Generic ) - warning
16:24:12.0421 3080 Mup - detected UnsignedFile.Multi.Generic (1)
16:24:12.0531 3080 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
16:24:12.0562 3080 NABTSFEC ( UnsignedFile.Multi.Generic ) - warning
16:24:12.0562 3080 NABTSFEC - detected UnsignedFile.Multi.Generic (1)
16:24:12.0609 3080 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
16:24:12.0625 3080 NDIS ( UnsignedFile.Multi.Generic ) - warning
16:24:12.0625 3080 NDIS - detected UnsignedFile.Multi.Generic (1)
16:24:12.0765 3080 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
16:24:12.0781 3080 NdisIP ( UnsignedFile.Multi.Generic ) - warning
16:24:12.0781 3080 NdisIP - detected UnsignedFile.Multi.Generic (1)
16:24:12.0859 3080 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
16:24:12.0937 3080 NdisTapi ( UnsignedFile.Multi.Generic ) - warning
16:24:12.0937 3080 NdisTapi - detected UnsignedFile.Multi.Generic (1)
16:24:13.0062 3080 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
16:24:13.0109 3080 Ndisuio ( UnsignedFile.Multi.Generic ) - warning
16:24:13.0109 3080 Ndisuio - detected UnsignedFile.Multi.Generic (1)
16:24:13.0187 3080 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
16:24:13.0203 3080 NdisWan ( UnsignedFile.Multi.Generic ) - warning
16:24:13.0203 3080 NdisWan - detected UnsignedFile.Multi.Generic (1)
16:24:13.0312 3080 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
16:24:13.0375 3080 NDProxy ( UnsignedFile.Multi.Generic ) - warning
16:24:13.0375 3080 NDProxy - detected UnsignedFile.Multi.Generic (1)
16:24:13.0468 3080 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
16:24:13.0500 3080 NetBIOS ( UnsignedFile.Multi.Generic ) - warning
16:24:13.0500 3080 NetBIOS - detected UnsignedFile.Multi.Generic (1)
16:24:13.0578 3080 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
16:24:13.0687 3080 NetBT ( UnsignedFile.Multi.Generic ) - warning
16:24:13.0687 3080 NetBT - detected UnsignedFile.Multi.Generic (1)
16:24:13.0765 3080 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
16:24:13.0796 3080 NIC1394 ( UnsignedFile.Multi.Generic ) - warning
16:24:13.0796 3080 NIC1394 - detected UnsignedFile.Multi.Generic (1)
16:24:13.0843 3080 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
16:24:13.0859 3080 Npfs ( UnsignedFile.Multi.Generic ) - warning
16:24:13.0859 3080 Npfs - detected UnsignedFile.Multi.Generic (1)
16:24:14.0125 3080 NSCIRDA (2adc0ca9945c65284b3d19bc18765974) C:\WINDOWS\system32\DRIVERS\nscirda.sys
16:24:14.0140 3080 NSCIRDA ( UnsignedFile.Multi.Generic ) - warning
16:24:14.0140 3080 NSCIRDA - detected UnsignedFile.Multi.Generic (1)
16:24:14.0390 3080 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
16:24:14.0765 3080 Ntfs ( UnsignedFile.Multi.Generic ) - warning
16:24:14.0765 3080 Ntfs - detected UnsignedFile.Multi.Generic (1)
16:24:14.0875 3080 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
16:24:14.0890 3080 Null ( UnsignedFile.Multi.Generic ) - warning
16:24:14.0890 3080 Null - detected UnsignedFile.Multi.Generic (1)
16:24:15.0046 3080 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
16:24:15.0093 3080 NwlnkFlt ( UnsignedFile.Multi.Generic ) - warning
16:24:15.0093 3080 NwlnkFlt - detected UnsignedFile.Multi.Generic (1)
16:24:15.0109 3080 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
16:24:15.0187 3080 NwlnkFwd ( UnsignedFile.Multi.Generic ) - warning
16:24:15.0187 3080 NwlnkFwd - detected UnsignedFile.Multi.Generic (1)
16:24:15.0375 3080 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
16:24:15.0406 3080 ohci1394 ( UnsignedFile.Multi.Generic ) - warning
16:24:15.0406 3080 ohci1394 - detected UnsignedFile.Multi.Generic (1)
16:24:15.0484 3080 Parport (46f8db73b4a53e543f8e371dc7c75bae) C:\WINDOWS\system32\drivers\Parport.sys
16:24:15.0484 3080 Parport ( UnsignedFile.Multi.Generic ) - warning
16:24:15.0484 3080 Parport - detected UnsignedFile.Multi.Generic (1)
16:24:15.0578 3080 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
16:24:15.0593 3080 PartMgr ( UnsignedFile.Multi.Generic ) - warning
16:24:15.0593 3080 PartMgr - detected UnsignedFile.Multi.Generic (1)
16:24:15.0671 3080 ParVdm (1fae19d0457176318bba4a8795656ebc) C:\WINDOWS\system32\drivers\ParVdm.sys
16:24:15.0718 3080 ParVdm ( UnsignedFile.Multi.Generic ) - warning
16:24:15.0718 3080 ParVdm - detected UnsignedFile.Multi.Generic (1)
16:24:15.0921 3080 PCI (6ce351d149cb4befc702951e471e1730) C:\WINDOWS\system32\DRIVERS\pci.sys
16:24:15.0953 3080 PCI ( UnsignedFile.Multi.Generic ) - warning
16:24:15.0953 3080 PCI - detected UnsignedFile.Multi.Generic (1)
16:24:15.0984 3080 PCIDump - ok
16:24:16.0406 3080 PCIIde (2da4ec85e0ea7a45c6b2a05820492d5a) C:\WINDOWS\system32\DRIVERS\pciide.sys
16:24:16.0421 3080 PCIIde ( UnsignedFile.Multi.Generic ) - warning
16:24:16.0421 3080 PCIIde - detected UnsignedFile.Multi.Generic (1)
16:24:16.0562 3080 Pcmcia (4fc31e6c19a5ce5198b1abff94cae758) C:\WINDOWS\system32\DRIVERS\pcmcia.sys
16:24:16.0609 3080 Pcmcia ( UnsignedFile.Multi.Generic ) - warning
16:24:16.0609 3080 Pcmcia - detected UnsignedFile.Multi.Generic (1)
16:24:16.0640 3080 PDCOMP - ok
16:24:16.0671 3080 PDFRAME - ok
16:24:16.0718 3080 PDRELI - ok
16:24:16.0765 3080 PDRFRAME - ok
16:24:16.0843 3080 perc2 - ok
16:24:16.0953 3080 perc2hib - ok
16:24:17.0171 3080 pfc (957b82ec80ad7ead64e5e47df6b0dc40) C:\WINDOWS\system32\drivers\pfc.sys
16:24:17.0187 3080 pfc ( UnsignedFile.Multi.Generic ) - warning
16:24:17.0187 3080 pfc - detected UnsignedFile.Multi.Generic (1)
16:24:17.0406 3080 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
16:24:17.0500 3080 PptpMiniport ( UnsignedFile.Multi.Generic ) - warning
16:24:17.0500 3080 PptpMiniport - detected UnsignedFile.Multi.Generic (1)
16:24:17.0578 3080 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
16:24:17.0609 3080 PSched ( UnsignedFile.Multi.Generic ) - warning
16:24:17.0609 3080 PSched - detected UnsignedFile.Multi.Generic (1)
16:24:17.0640 3080 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
16:24:17.0671 3080 Ptilink ( UnsignedFile.Multi.Generic ) - warning
16:24:17.0671 3080 Ptilink - detected UnsignedFile.Multi.Generic (1)
16:24:17.0781 3080 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\WINDOWS\system32\Drivers\PxHelp20.sys
16:24:17.0812 3080 PxHelp20 - ok
16:24:17.0843 3080 ql1080 - ok
16:24:17.0875 3080 Ql10wnt - ok
16:24:17.0890 3080 ql12160 - ok
16:24:17.0921 3080 ql1240 - ok
16:24:17.0953 3080 ql1280 - ok
16:24:18.0093 3080 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
16:24:18.0156 3080 RasAcd ( UnsignedFile.Multi.Generic ) - warning
16:24:18.0156 3080 RasAcd - detected UnsignedFile.Multi.Generic (1)
16:24:18.0296 3080 Rasirda (0207d26ddf796a193ccd9f83047bb5fc) C:\WINDOWS\system32\DRIVERS\rasirda.sys
16:24:18.0312 3080 Rasirda ( UnsignedFile.Multi.Generic ) - warning
16:24:18.0312 3080 Rasirda - detected UnsignedFile.Multi.Generic (1)
16:24:18.0390 3080 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
16:24:18.0406 3080 Rasl2tp ( UnsignedFile.Multi.Generic ) - warning
16:24:18.0406 3080 Rasl2tp - detected UnsignedFile.Multi.Generic (1)
16:24:18.0468 3080 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
16:24:18.0500 3080 RasPppoe ( UnsignedFile.Multi.Generic ) - warning
16:24:18.0500 3080 RasPppoe - detected UnsignedFile.Multi.Generic (1)
16:24:18.0578 3080 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
16:24:18.0593 3080 Raspti ( UnsignedFile.Multi.Generic ) - warning
16:24:18.0593 3080 Raspti - detected UnsignedFile.Multi.Generic (1)
16:24:18.0750 3080 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
16:24:18.0781 3080 Rdbss ( UnsignedFile.Multi.Generic ) - warning
16:24:18.0781 3080 Rdbss - detected UnsignedFile.Multi.Generic (1)
16:24:18.0843 3080 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
16:24:18.0859 3080 RDPCDD ( UnsignedFile.Multi.Generic ) - warning
16:24:18.0859 3080 RDPCDD - detected UnsignedFile.Multi.Generic (1)
16:24:19.0046 3080 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
16:24:19.0109 3080 rdpdr ( UnsignedFile.Multi.Generic ) - warning
16:24:19.0109 3080 rdpdr - detected UnsignedFile.Multi.Generic (1)
16:24:19.0250 3080 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys
16:24:19.0312 3080 RDPWD ( UnsignedFile.Multi.Generic ) - warning
16:24:19.0312 3080 RDPWD - detected UnsignedFile.Multi.Generic (1)
16:24:19.0375 3080 redbook (611bfd220305be3a85ae876ea47d4aa5) C:\WINDOWS\system32\DRIVERS\redbook.sys
16:24:19.0375 3080 redbook ( UnsignedFile.Multi.Generic ) - warning
16:24:19.0375 3080 redbook - detected UnsignedFile.Multi.Generic (1)
16:24:19.0546 3080 sdbus (8d04819a3ce51b9eb47e5689b44d43c4) C:\WINDOWS\system32\DRIVERS\sdbus.sys
16:24:19.0562 3080 sdbus ( UnsignedFile.Multi.Generic ) - warning
16:24:19.0562 3080 sdbus - detected UnsignedFile.Multi.Generic (1)
16:24:19.0671 3080 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
16:24:19.0718 3080 Secdrv ( UnsignedFile.Multi.Generic ) - warning
16:24:19.0718 3080 Secdrv - detected UnsignedFile.Multi.Generic (1)
16:24:19.0953 3080 Serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
16:24:19.0968 3080 Serenum ( UnsignedFile.Multi.Generic ) - warning
16:24:19.0968 3080 Serenum - detected UnsignedFile.Multi.Generic (1)
16:24:20.0078 3080 Serial (b842729337c9b921615c40d3c1a1af96) C:\WINDOWS\system32\drivers\Serial.sys
16:24:20.0093 3080 Serial ( UnsignedFile.Multi.Generic ) - warning
16:24:20.0093 3080 Serial - detected UnsignedFile.Multi.Generic (1)
16:24:20.0125 3080 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
16:24:20.0171 3080 Sfloppy ( UnsignedFile.Multi.Generic ) - warning
16:24:20.0171 3080 Sfloppy - detected UnsignedFile.Multi.Generic (1)
16:24:20.0218 3080 Simbad - ok
16:24:20.0265 3080 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
16:24:20.0296 3080 SLIP ( UnsignedFile.Multi.Generic ) - warning
16:24:20.0296 3080 SLIP - detected UnsignedFile.Multi.Generic (1)
16:24:20.0531 3080 Sparrow - ok
16:24:20.0671 3080 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
16:24:20.0687 3080 splitter ( UnsignedFile.Multi.Generic ) - warning
16:24:20.0687 3080 splitter - detected UnsignedFile.Multi.Generic (1)
16:24:20.0734 3080 sr (94610c8653635e4459316a0050d55ce7) C:\WINDOWS\system32\DRIVERS\sr.sys
16:24:20.0781 3080 sr ( UnsignedFile.Multi.Generic ) - warning
16:24:20.0781 3080 sr - detected UnsignedFile.Multi.Generic (1)
16:24:20.0906 3080 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
16:24:20.0984 3080 Srv ( UnsignedFile.Multi.Generic ) - warning
16:24:20.0984 3080 Srv - detected UnsignedFile.Multi.Generic (1)
16:24:21.0031 3080 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
16:24:21.0093 3080 streamip ( UnsignedFile.Multi.Generic ) - warning
16:24:21.0093 3080 streamip - detected UnsignedFile.Multi.Generic (1)
16:24:21.0171 3080 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
16:24:21.0234 3080 swenum ( UnsignedFile.Multi.Generic ) - warning
16:24:21.0234 3080 swenum - detected UnsignedFile.Multi.Generic (1)
16:24:21.0546 3080 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
16:24:21.0578 3080 swmidi ( UnsignedFile.Multi.Generic ) - warning
16:24:21.0578 3080 swmidi - detected UnsignedFile.Multi.Generic (1)
16:24:21.0734 3080 symc810 - ok
16:24:22.0078 3080 symc8xx - ok
16:24:22.0406 3080 sym_hi - ok
16:24:22.0734 3080 sym_u3 - ok
16:24:23.0343 3080 SynTP (cc5da243cfdac58fc0408f7ce24084c5) C:\WINDOWS\system32\DRIVERS\SynTP.sys
16:24:23.0609 3080 SynTP ( UnsignedFile.Multi.Generic ) - warning
16:24:23.0609 3080 SynTP - detected UnsignedFile.Multi.Generic (1)
16:24:24.0109 3080 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
16:24:24.0234 3080 sysaudio ( UnsignedFile.Multi.Generic ) - warning
16:24:24.0234 3080 sysaudio - detected UnsignedFile.Multi.Generic (1)
16:24:24.0703 3080 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
16:24:25.0093 3080 Tcpip ( UnsignedFile.Multi.Generic ) - warning
16:24:25.0093 3080 Tcpip - detected UnsignedFile.Multi.Generic (1)
16:24:25.0843 3080 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
16:24:26.0000 3080 TDPIPE ( UnsignedFile.Multi.Generic ) - warning
16:24:26.0000 3080 TDPIPE - detected UnsignedFile.Multi.Generic (1)
16:24:26.0390 3080 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
16:24:26.0390 3080 TDTCP ( UnsignedFile.Multi.Generic ) - warning
16:24:26.0390 3080 TDTCP - detected UnsignedFile.Multi.Generic (1)
16:24:26.0531 3080 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
16:24:26.0578 3080 TermDD ( UnsignedFile.Multi.Generic ) - warning
16:24:26.0578 3080 TermDD - detected UnsignedFile.Multi.Generic (1)
16:24:26.0687 3080 tifm21 (e4c85c291ddb3dc5e4a2f227ca465ba6) C:\WINDOWS\system32\drivers\tifm21.sys
16:24:26.0765 3080 tifm21 ( UnsignedFile.Multi.Generic ) - warning
16:24:26.0765 3080 tifm21 - detected UnsignedFile.Multi.Generic (1)
16:24:26.0796 3080 TosIde - ok
16:24:26.0859 3080 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
16:24:26.0890 3080 Udfs ( UnsignedFile.Multi.Generic ) - warning
16:24:26.0890 3080 Udfs - detected UnsignedFile.Multi.Generic (1)
16:24:26.0984 3080 ultra - ok
16:24:27.0031 3080 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
16:24:27.0203 3080 Update ( UnsignedFile.Multi.Generic ) - warning
16:24:27.0203 3080 Update - detected UnsignedFile.Multi.Generic (1)
16:24:27.0328 3080 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
16:24:27.0343 3080 usbccgp ( UnsignedFile.Multi.Generic ) - warning
16:24:27.0343 3080 usbccgp - detected UnsignedFile.Multi.Generic (1)
16:24:27.0406 3080 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
16:24:27.0703 3080 usbehci ( UnsignedFile.Multi.Generic ) - warning
16:24:27.0703 3080 usbehci - detected UnsignedFile.Multi.Generic (1)
16:24:27.0765 3080 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
16:24:28.0046 3080 usbhub ( UnsignedFile.Multi.Generic ) - warning
16:24:28.0046 3080 usbhub - detected UnsignedFile.Multi.Generic (1)
16:24:28.0109 3080 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
16:24:28.0421 3080 usbscan ( UnsignedFile.Multi.Generic ) - warning
16:24:28.0421 3080 usbscan - detected UnsignedFile.Multi.Generic (1)
16:24:28.0484 3080 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
16:24:28.0765 3080 USBSTOR ( UnsignedFile.Multi.Generic ) - warning
16:24:28.0765 3080 USBSTOR - detected UnsignedFile.Multi.Generic (1)
16:24:28.0859 3080 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
16:24:29.0140 3080 usbuhci ( UnsignedFile.Multi.Generic ) - warning
16:24:29.0140 3080 usbuhci - detected UnsignedFile.Multi.Generic (1)
16:24:29.0265 3080 uxkx1 (c085eebdb5824f7ee08c2a57c809db72) C:\WINDOWS\system32\DRIVERS\uxkx1.sys
16:24:29.0703 3080 uxkx1 ( UnsignedFile.Multi.Generic ) - warning
16:24:29.0703 3080 uxkx1 - detected UnsignedFile.Multi.Generic (1)
16:24:29.0828 3080 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
16:24:30.0234 3080 VgaSave ( UnsignedFile.Multi.Generic ) - warning
16:24:30.0234 3080 VgaSave - detected UnsignedFile.Multi.Generic (1)
16:24:30.0312 3080 ViaIde - ok
16:24:30.0375 3080 VolSnap (28a4b296b47782173c346e376cb374d1) C:\WINDOWS\system32\drivers\VolSnap.sys
16:24:30.0687 3080 VolSnap ( UnsignedFile.Multi.Generic ) - warning
16:24:30.0687 3080 VolSnap - detected UnsignedFile.Multi.Generic (1)
16:24:30.0875 3080 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
16:24:31.0203 3080 Wanarp ( UnsignedFile.Multi.Generic ) - warning
16:24:31.0203 3080 Wanarp - detected UnsignedFile.Multi.Generic (1)
16:24:31.0265 3080 WDICA - ok
16:24:31.0328 3080 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
16:24:31.0625 3080 wdmaud ( UnsignedFile.Multi.Generic ) - warning
16:24:31.0625 3080 wdmaud - detected UnsignedFile.Multi.Generic (1)
16:24:31.0765 3080 winachsf (9692ab8ba2dcd649a86b1b9b81154278) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
16:24:32.0250 3080 winachsf ( UnsignedFile.Multi.Generic ) - warning
16:24:32.0250 3080 winachsf - detected UnsignedFile.Multi.Generic (1)
16:24:32.0421 3080 WmiAcpi (c42584fd66ce9e17403aebca199f7bdb) C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
16:24:32.0640 3080 WmiAcpi ( UnsignedFile.Multi.Generic ) - warning
16:24:32.0640 3080 WmiAcpi - detected UnsignedFile.Multi.Generic (1)
16:24:32.0796 3080 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
16:24:33.0187 3080 WSTCODEC ( UnsignedFile.Multi.Generic ) - warning
16:24:33.0187 3080 WSTCODEC - detected UnsignedFile.Multi.Generic (1)
16:24:33.0281 3080 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
16:24:33.0593 3080 WudfPf ( UnsignedFile.Multi.Generic ) - warning
16:24:33.0593 3080 WudfPf - detected UnsignedFile.Multi.Generic (1)
16:24:33.0781 3080 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
16:24:34.0109 3080 WudfRd ( UnsignedFile.Multi.Generic ) - warning
16:24:34.0109 3080 WudfRd - detected UnsignedFile.Multi.Generic (1)
16:24:34.0281 3080 MBR (0x1B8) (413fc2a0c716421b3158746d63736515) \Device\Harddisk0\DR0
16:24:35.0562 3080 \Device\Harddisk0\DR0 - ok
16:24:35.0625 3080 Boot (0x1200) (ad6e4e26669456032452fb55a5dbf45e) \Device\Harddisk0\DR0\Partition0
16:24:35.0640 3080 \Device\Harddisk0\DR0\Partition0 - ok
16:24:35.0640 3080 ============================================================
16:24:35.0640 3080 Scan finished
16:24:35.0640 3080 ============================================================
16:24:35.0828 3360 Detected object count: 153
16:24:35.0828 3360 Actual detected object count: 153
16:24:57.0656 3360 ACPI ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0687 3360 ACPI ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0687 3360 ACPIEC ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0687 3360 ACPIEC ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0687 3360 aec ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0687 3360 aec ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0687 3360 AFD ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0687 3360 AFD ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0703 3360 aksfridge ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0703 3360 aksfridge ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0703 3360 akshasp ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0703 3360 akshasp ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0703 3360 akshhl ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0734 3360 akshhl ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0734 3360 aksusb ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0734 3360 aksusb ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0734 3360 Arp1394 ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0734 3360 Arp1394 ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0734 3360 AsyncMac ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0734 3360 AsyncMac ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0734 3360 atapi ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0734 3360 atapi ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0750 3360 Atmarpc ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0750 3360 Atmarpc ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0750 3360 audstub ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0781 3360 audstub ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0781 3360 b57w2k ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0781 3360 b57w2k ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0781 3360 BCM43XX ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0781 3360 BCM43XX ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0781 3360 Beep ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0781 3360 Beep ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0781 3360 cbidf2k ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0781 3360 cbidf2k ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0796 3360 CCDECODE ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0796 3360 CCDECODE ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0796 3360 Cdaudio ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0828 3360 Cdaudio ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0828 3360 Cdfs ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0828 3360 Cdfs ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0828 3360 Cdrom ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0828 3360 Cdrom ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0828 3360 CmBatt ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0828 3360 CmBatt ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0828 3360 Compbatt ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0828 3360 Compbatt ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0843 3360 Disk ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0843 3360 Disk ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0843 3360 dmboot ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0875 3360 dmboot ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0875 3360 dmio ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0875 3360 dmio ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0875 3360 dmload ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0875 3360 dmload ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0875 3360 DMusic ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0875 3360 DMusic ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0875 3360 drmkaud ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0875 3360 drmkaud ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0890 3360 Fastfat ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0890 3360 Fastfat ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0890 3360 Fdc ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0921 3360 Fdc ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0921 3360 Fips ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0921 3360 Fips ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0921 3360 Flpydisk ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0921 3360 Flpydisk ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0921 3360 FltMgr ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0921 3360 FltMgr ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0921 3360 Fs_Rec ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0921 3360 Fs_Rec ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0937 3360 Ftdisk ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0937 3360 Ftdisk ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0937 3360 Gpc ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0968 3360 Gpc ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0968 3360 grmnusb ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0968 3360 grmnusb ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0968 3360 hardlock ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0968 3360 hardlock ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0968 3360 HDAudBus ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0968 3360 HDAudBus ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0968 3360 HidUsb ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0968 3360 HidUsb ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0984 3360 HSFHWAZL ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:57.0984 3360 HSFHWAZL ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:57.0984 3360 HSF_DPV ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0015 3360 HSF_DPV ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0015 3360 HTTP ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0015 3360 HTTP ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0015 3360 i8042prt ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0015 3360 i8042prt ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0015 3360 ialm ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0015 3360 ialm ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0015 3360 imagedrv ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0015 3360 imagedrv ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0031 3360 imagesrv ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0031 3360 imagesrv ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0031 3360 Imapi ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0062 3360 Imapi ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0062 3360 IntcAzAudAddService ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0062 3360 IntcAzAudAddService ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0062 3360 intelppm ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0062 3360 intelppm ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0062 3360 Ip6Fw ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0062 3360 Ip6Fw ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0062 3360 IpFilterDriver ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0062 3360 IpFilterDriver ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0078 3360 IpInIp ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0078 3360 IpInIp ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0078 3360 IpNat ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0109 3360 IpNat ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0109 3360 IPSec ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0109 3360 IPSec ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0109 3360 irda ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0109 3360 irda ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0109 3360 IRENUM ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0109 3360 IRENUM ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0109 3360 isapnp ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0109 3360 isapnp ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0125 3360 Kbdclass ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0125 3360 Kbdclass ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0125 3360 kbdhid ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0156 3360 kbdhid ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0156 3360 kmixer ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0156 3360 kmixer ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0156 3360 KSecDD ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0156 3360 KSecDD ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0156 3360 mdmxsdk ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0156 3360 mdmxsdk ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0156 3360 mnmdd ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0156 3360 mnmdd ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0171 3360 Modem ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0171 3360 Modem ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0171 3360 Mouclass ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0203 3360 Mouclass ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0203 3360 mouhid ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0203 3360 mouhid ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0203 3360 MountMgr ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0203 3360 MountMgr ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0203 3360 MPE ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0203 3360 MPE ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0203 3360 MRxDAV ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0203 3360 MRxDAV ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0218 3360 MRxSmb ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0218 3360 MRxSmb ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0218 3360 Msfs ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0250 3360 Msfs ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0250 3360 MSKSSRV ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0250 3360 MSKSSRV ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0250 3360 MSPCLOCK ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0250 3360 MSPCLOCK ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0250 3360 MSPQM ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0250 3360 MSPQM ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0250 3360 mssmbios ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0250 3360 mssmbios ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0265 3360 MSTEE ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0265 3360 MSTEE ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0265 3360 Mup ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0296 3360 Mup ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0296 3360 NABTSFEC ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0296 3360 NABTSFEC ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0296 3360 NDIS ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0296 3360 NDIS ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0296 3360 NdisIP ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0296 3360 NdisIP ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0296 3360 NdisTapi ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0296 3360 NdisTapi ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0312 3360 Ndisuio ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0312 3360 Ndisuio ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0312 3360 NdisWan ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0343 3360 NdisWan ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0343 3360 NDProxy ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0343 3360 NDProxy ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0343 3360 NetBIOS ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0343 3360 NetBIOS ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0343 3360 NetBT ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0343 3360 NetBT ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0343 3360 NIC1394 ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0343 3360 NIC1394 ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0359 3360 Npfs ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0359 3360 Npfs ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0359 3360 NSCIRDA ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0390 3360 NSCIRDA ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0390 3360 Ntfs ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0390 3360 Ntfs ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0390 3360 Null ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0390 3360 Null ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0390 3360 NwlnkFlt ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0390 3360 NwlnkFlt ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0390 3360 NwlnkFwd ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0390 3360 NwlnkFwd ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0406 3360 ohci1394 ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0406 3360 ohci1394 ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0406 3360 Parport ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0437 3360 Parport ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0437 3360 PartMgr ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0437 3360 PartMgr ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0437 3360 ParVdm ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0437 3360 ParVdm ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0437 3360 PCI ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0437 3360 PCI ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0453 3360 PCIIde ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0453 3360 PCIIde ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0453 3360 Pcmcia ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0453 3360 Pcmcia ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0453 3360 pfc ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0484 3360 pfc ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0484 3360 PptpMiniport ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0484 3360 PptpMiniport ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0484 3360 PSched ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0484 3360 PSched ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0484 3360 Ptilink ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0484 3360 Ptilink ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0484 3360 RasAcd ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0484 3360 RasAcd ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0500 3360 Rasirda ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0500 3360 Rasirda ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0500 3360 Rasl2tp ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0531 3360 Rasl2tp ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0531 3360 RasPppoe ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0531 3360 RasPppoe ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0531 3360 Raspti ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0531 3360 Raspti ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0531 3360 Rdbss ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0531 3360 Rdbss ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0531 3360 RDPCDD ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0531 3360 RDPCDD ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0546 3360 rdpdr ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0546 3360 rdpdr ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0546 3360 RDPWD ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0578 3360 RDPWD ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0578 3360 redbook ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0578 3360 redbook ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0578 3360 sdbus ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0578 3360 sdbus ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0578 3360 Secdrv ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0578 3360 Secdrv ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0578 3360 Serenum ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0578 3360 Serenum ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0593 3360 Serial ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0593 3360 Serial ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0593 3360 Sfloppy ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0625 3360 Sfloppy ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0625 3360 SLIP ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0625 3360 SLIP ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0625 3360 splitter ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0625 3360 splitter ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0625 3360 sr ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0625 3360 sr ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0625 3360 Srv ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0625 3360 Srv ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0640 3360 streamip ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0640 3360 streamip ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0640 3360 swenum ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0671 3360 swenum ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0671 3360 swmidi ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0671 3360 swmidi ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0671 3360 SynTP ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0671 3360 SynTP ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0671 3360 sysaudio ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0671 3360 sysaudio ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0671 3360 Tcpip ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0671 3360 Tcpip ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0687 3360 TDPIPE ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0687 3360 TDPIPE ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0687 3360 TDTCP ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0718 3360 TDTCP ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0718 3360 TermDD ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0718 3360 TermDD ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0718 3360 tifm21 ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0718 3360 tifm21 ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0718 3360 Udfs ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0718 3360 Udfs ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0718 3360 Update ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0718 3360 Update ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0734 3360 usbccgp ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0734 3360 usbccgp ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0765 3360 usbehci ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0765 3360 usbehci ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0765 3360 usbhub ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0765 3360 usbhub ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0765 3360 usbscan ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0765 3360 usbscan ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0765 3360 USBSTOR ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0765 3360 USBSTOR ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0765 3360 usbuhci ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0765 3360 usbuhci ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0781 3360 uxkx1 ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0781 3360 uxkx1 ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0812 3360 VgaSave ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0812 3360 VgaSave ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0812 3360 VolSnap ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0812 3360 VolSnap ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0812 3360 Wanarp ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0812 3360 Wanarp ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0812 3360 wdmaud ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0812 3360 wdmaud ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0812 3360 winachsf ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0812 3360 winachsf ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0828 3360 WmiAcpi ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0828 3360 WmiAcpi ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0859 3360 WSTCODEC ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0859 3360 WSTCODEC ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0859 3360 WudfPf ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0859 3360 WudfPf ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:24:58.0859 3360 WudfRd ( UnsignedFile.Multi.Generic ) - skipped by user
16:24:58.0859 3360 WudfRd ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:25:05.0421 3248 Deinitialize success

honnza · #7 Příspěvek od **honnza** » 04 Led 2012 16:39

Ještě se zeptám,..

zapnul jsem si normální režim a neustále vyskakuje hláška "Omezení spouštění dat" u aplikace "windows update" ... nejprvew jsem zkoušel vypnout aktualizace, to se mi nepovedlo... mužu vypnout funkci obnoveni?

#8 Příspěvek od **motji** » 04 Led 2012 16:48

Prosím spustte znovu combofix.
Já tu už asi dnes nebudu, až zítra večer

honnza · #9 Příspěvek od **honnza** » 04 Led 2012 17:25

Nevadi, stejne děkuji. Přiložím LOG a ted pustím nějaký sken, přes noc. Děkuju, Mějte se.

ComboFix 12-01-04.02 - autocont 04.01.2012 17:12:52.2.1 - x86 NETWORK
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1014.770 [GMT 1:00]
Spuštěný z: c:\documents and settings\autocont.NB-BOREK\Plocha\ComboFix.exe
AV: AVG Anti-Virus Business Edition *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-12-04 do 2012-01-04 )))))))))))))))))))))))))))))))
.
.
2012-01-04 14:05 . 2012-01-04 14:05 -------- d-----w- C:\rsit
2012-01-04 14:05 . 2012-01-04 14:05 -------- d-----w- c:\program files\trend micro
2012-01-04 09:47 . 2012-01-04 09:49 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2012-01-04 09:46 . 2012-01-04 09:46 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2012-01-04 09:44 . 2012-01-04 09:44 -------- d-----w- c:\program files\CCleaner
2012-01-04 09:32 . 2012-01-04 15:30 -------- d-----w- c:\documents and settings\autocont.NB-BOREK
2012-01-04 08:26 . 2012-01-04 08:26 -------- d-----r- c:\documents and settings\LocalService\Oblíbené položky
2012-01-03 10:35 . 2012-01-03 10:35 -------- d-----w- c:\program files\ESET
2012-01-03 10:30 . 2012-01-03 10:30 -------- d-----w- c:\documents and settings\autocont\Local Settings\Data aplikací\Mozilla
2012-01-03 10:20 . 2012-01-03 13:33 -------- d-----w- c:\program files\Spybot - Search & Destroy
2012-01-03 10:20 . 2012-01-03 11:17 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Spybot - Search & Destroy
2012-01-03 10:14 . 2012-01-03 10:17 -------- d-----w- c:\documents and settings\autocont\Data aplikací\Inbox Toolbar
2012-01-03 10:13 . 2012-01-03 10:14 -------- d-----w- c:\documents and settings\autocont\Local Settings\Data aplikací\ConduitEngine
2012-01-03 10:13 . 2012-01-03 10:13 -------- d-----w- c:\documents and settings\autocont\Local Settings\Data aplikací\Winamp Toolbar
2012-01-02 18:05 . 2012-01-02 18:05 -------- d--h--w- c:\documents and settings\All Users\Data aplikací\Common Files
2012-01-02 14:35 . 2012-01-02 14:35 -------- d-----w- c:\documents and settings\autocont\Local Settings\Data aplikací\PCHealth
2012-01-02 13:57 . 2012-01-02 13:57 -------- d-----w- c:\documents and settings\autocont\Local Settings\Data aplikací\GHISLER
2012-01-02 13:48 . 2012-01-02 13:48 -------- d-----w- C:\$AVG
2012-01-02 13:43 . 2012-01-02 13:43 12536 ----a-w- c:\windows\system32\avgrsstx.dll
2012-01-02 13:27 . 2012-01-02 13:44 243152 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2012-01-02 13:27 . 2012-01-02 13:27 52872 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
2012-01-02 13:27 . 2012-01-02 13:27 216400 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2012-01-02 13:27 . 2012-01-02 13:43 29712 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2012-01-02 13:27 . 2012-01-04 15:25 -------- d-----w- c:\windows\system32\drivers\Avg
2012-01-02 13:26 . 2012-01-04 09:29 -------- d-----w- c:\documents and settings\All Users\Data aplikací\avg9
2012-01-02 13:02 . 2012-01-02 13:02 -------- d-----w- c:\documents and settings\autocont\Local Settings\Data aplikací\Temp
2012-01-02 13:02 . 2012-01-02 13:02 -------- d-----w- c:\documents and settings\autocont\Local Settings\Data aplikací\Adobe
2011-12-25 14:48 . 2011-12-25 14:49 -------- d--h--w- c:\windows\msdownld.tmp
2011-12-25 14:32 . 2011-12-25 14:33 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Solidshield
2011-12-25 14:24 . 2011-12-25 14:24 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Electronic Arts
2011-12-25 14:24 . 2011-12-25 14:24 -------- d-----w- c:\documents and settings\All Users\Data aplikací\EA Core
2011-12-25 14:02 . 2009-09-04 16:29 1974616 ----a-w- c:\windows\system32\D3DCompiler_42.dll
2011-12-25 14:02 . 2009-09-04 16:29 5501792 ----a-w- c:\windows\system32\d3dcsx_42.dll
2011-12-25 14:01 . 2009-09-04 16:29 235344 ----a-w- c:\windows\system32\d3dx11_42.dll
2011-12-25 14:01 . 2009-09-04 16:29 453456 ----a-w- c:\windows\system32\d3dx10_42.dll
2011-12-25 14:01 . 2009-09-04 16:29 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
2011-12-25 14:01 . 2011-12-25 14:01 -------- d-----w- c:\program files\Electronic Arts
2011-12-25 13:48 . 2011-12-25 13:48 -------- d-----w- c:\windows\UMStor
2011-12-25 13:48 . 2011-12-25 13:48 -------- d-----w- c:\windows\system\iosubsys
2011-12-25 13:48 . 2003-11-21 17:09 201736 ------w- c:\windows\system32\drivers\UMSTOR.sys
2011-12-25 13:48 . 2011-12-25 13:48 -------- d-----w- c:\program files\USB Disk Win98 Driver
2011-12-25 13:44 . 2011-12-25 13:44 -------- d-----w- C:\MTV_OUTPUT
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-04 13:15 . 2007-08-02 12:00 162816 ----a-w- c:\windows\system32\drivers\netbt.sys
2011-12-01 18:52 . 2011-12-01 18:52 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-28 05:32 . 2007-08-02 12:00 33280 ----a-w- c:\windows\system32\csrsrv.dll
2011-10-26 10:50 . 2007-08-02 12:00 2194944 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-10-26 10:50 . 2004-08-17 15:45 2071552 ----a-w- c:\windows\system32\ntkrnlpa.exe
2011-10-18 11:13 . 2007-08-02 12:00 186880 ----a-w- c:\windows\system32\encdec.dll
2011-10-11 11:47 . 2007-10-29 17:09 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-10-11 11:47 . 2011-10-11 11:48 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-08-30 09:23 . 2011-08-10 23:08 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2011-01-17 14:54 175912 ----a-w- c:\program files\ConduitEngine\prxConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\prxConduitEngine.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\prxConduitEngine.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2007-03-21 16126464]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2007-09-07 102400]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-04-21 142104]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-04-21 162584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-04-21 138008]
"SSBkgdUpdate"="c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-09-28 185896]
"OpwareSE4"="c:\program files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe" [2006-10-11 75304]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe" [2005-02-17 221184]
"POPUPTV"="c:\program files\ASUS\PopupTV\ExpressTV.exe" [2009-02-20 708608]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2010-12-09 74752]
"DivX Download Manager"="c:\program files\DivX\DivX Plus Web Player\DDmService.exe" [2010-12-08 63360]
"Google Quick Search Box"="c:\program files\Google\Quick Search Box\GoogleQuickSearchBox.exe" [2011-02-26 126976]
"USB Storage Toolbox"="c:\windows\UMStor\Res.EXE" [2005-09-14 65536]
"AVG9_TRAY"="c:\progra~1\AVG\AVG9\avgtray.exe" [2012-01-02 2078048]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2005-02-17 81920]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-03-21 202256]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-12-09 1226608]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2008-11-04 435096]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Action Manager 32.lnk - c:\program files\ScannerU\AM32.exe [2007-11-14 69632]
Akcelerátor spuštění AutoCADu.lnk - c:\program files\Common Files\Autodesk Shared\acstart17.exe [2006-3-5 11000]
AutoCAD Startup Accelerator.lnk - c:\program files\Common Files\Autodesk Shared\acstart16.exe [2006-9-23 10872]
Místní vyhledávání.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2007-2-5 118784]
TMMonitor.lnk - c:\program files\ArcSoft\TotalMedia 3.5\TMMonitor.exe [2009-12-23 258048]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2007-02-05 294400]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2012-01-02 13:43 12536 ----a-w- c:\windows\system32\avgrsstx.dll
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Google\\Google SketchUp 7\\SketchUp.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [2.1.2012 14:27 52872]
R1 AvgTdiX;AVG Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2.1.2012 14:27 243152]
S1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2.1.2012 14:27 216400]
S2 avg9emc;AVG E-mail Scanner;c:\program files\AVG\AVG9\avgemc.exe [2.1.2012 14:26 916480]
S2 avg9wd;AVG WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [2.1.2012 14:43 299520]
S2 avgagent;AVG7 Remote Support Service (AvgAgent);avgagent.exe /srvfsys --> avgagent.exe [?]
S2 hasplms;HASP License Manager;c:\windows\system32\hasplms.exe -run --> c:\windows\system32\hasplms.exe -run [?]
S3 gupdate1c99da3dd552baa;Google Update Service (gupdate1c99da3dd552baa);c:\program files\Google\Update\GoogleUpdate.exe [5.3.2009 16:05 133104]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [5.3.2009 16:05 133104]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [4.1.2012 10:47 40776]
S3 uxkx1;ASUS MyCinema DiBcom based digital tuner device;c:\windows\system32\drivers\uxkx1.sys [23.12.2009 20:07 609280]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - MDMXSDK
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
.
Obsah adresáře 'Naplánované úlohy'
.
2012-01-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-05 15:05]
.
2012-01-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-05 15:05]
.
2012-01-04 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-2119669116-2072395555-1277150550-1142.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 21:09]
.
2012-01-04 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-2119669116-2072395555-1277150550-1157.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 21:09]
.
2012-01-03 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2119669116-2072395555-1277150550-1142.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 21:09]
.
2012-01-02 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2119669116-2072395555-1277150550-1157.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 21:09]
.
.
------- Doplňkový sken -------
.
TCP: DhcpNameServer = 192.168.0.1
DPF: Garmin Communicator Plug-In - hxxps://my.garmin.com/mygarmin/m/GarminAxControl.CAB
DPF: {1F831FA2-42FC-11D4-95A6-0080AD30DCE1} - file:///C:/Program%20Files/AutoCAD%20LT%202000i%20Cz/InstFred.ocx
DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} - hxxp://85.207.254.4/activex/AMC.cab
FF - ProfilePath - c:\documents and settings\autocont.NB-BOREK\Data aplikací\Mozilla\Firefox\Profiles\aatamr35.default\
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-01-04 17:19
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(392)
c:\program files\Windows Desktop Search\deskbar.dll
c:\program files\Windows Desktop Search\cs-cz\dbres.dll.mui
c:\program files\Windows Desktop Search\dbres.dll
c:\program files\Windows Desktop Search\wordwheel.dll
c:\program files\Windows Desktop Search\cs-cz\msnlExtRes.dll.mui
c:\program files\Windows Desktop Search\msnlExtRes.dll
.
Celkový čas: 2012-01-04 17:22:19
ComboFix-quarantined-files.txt 2012-01-04 16:22
ComboFix2.txt 2012-01-04 14:57
.
Před spuštěním: Volných bajtů: 34 774 769 664
Po spuštění: Volných bajtů: 34 793 054 208
.
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - A7F7E21674AB87E7F8666DAFA7441066

#10 Příspěvek od **Mc_Murphy** » 05 Led 2012 07:13

Zdravím.

Na žádost kolegyňky sem na chvilku zaskočím. Ona si to pak zase převezme.

Doporučuji odinstalovat Spybot - Search & Destroy. Program má svá nejlepší léta již dávno za sebou a není schopen čelit aktuálním hrozbám.

Pokud jsi tak ještě neučinil, přesuň ComboFix na Plochu.

Otevři si Poznámkový blok (Start >> Spustit... (nebo Win+R) >> do okénka napiš notepad >> [Enter]).
Zkopíruj do něj tento script:

Kód: Vybrat vše

KillAll::

Driver::
gupdate1c99da3dd552baa
gupdatem

File::
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Action Manager 32.lnk
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-2119669116-2072395555-1277150550-1142.job
c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-2119669116-2072395555-1277150550-1157.job
c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2119669116-2072395555-1277150550-1142.job
c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2119669116-2072395555-1277150550-1157.job

Folder::
c:\program files\ESET
c:\documents and settings\autocont\Local Settings\Data aplikací\ConduitEngine
c:\documents and settings\autocont\Local Settings\Data aplikací\Winamp Toolbar
c:\program files\ConduitEngine

Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"=-
[-HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"=-
[-HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=-
"Persistence"=-
"SSBkgdUpdate"=-
"ISUSPM Startup"=-
"WinampAgent"=-
"DivX Download Manager"=-
"Google Quick Search Box"=-
"ISUSScheduler"=-
"TkBellExe"=-
"SunJavaUpdateSched"=-
"NeroFilterCheck"=-
"DivXUpdate"="-
"Adobe ARM"=-

Reboot::

Ulož vytvořený TXT jako CFScript.txt
Přetáhni vytvořený CFScript.txt nad ComboFix a pusť (viz obrázek).
Po aplikaci scriptu (a případném restartu PC) na Tebe vyskočí log. Jeho obsah mi sem vlož.

Může se stát, že po aplikaci scriptu nenaběhnou Windows. V tom případě restartuj PC, hned při náběhu mačkej klávesu F8 a zvol Poslední známou konfiguraci.

honnza · #11 Příspěvek od **honnza** » 05 Led 2012 09:15

Dobré ráno, děkuju...
spybot odinstalovaný...
ze včerejška Kaspersky Virus Rem. Tool log:

Status: Disinfected (events: 2)
4.1.2012 19:35:08 Disinfected Trojan program Trojan.Win32.Patched.mf C:\Qoobox\Quarantine\C\WINDOWS\system32\wuauclt.exe.vir High
4.1.2012 19:57:07 Disinfected Trojan program Trojan.Win32.Patched.mf C:\WINDOWS\system32\searchprotocolhost.exe High
Status: Deleted (events: 1)
4.1.2012 19:38:45 Deleted Trojan program Backdoor.Win32.ZAccess.avy C:\Qoobox\Quarantine\C\WINDOWS\assembly\GAC_MSIL\desktop.ini.vir High

Combofix log:
ComboFix 12-01-04.02 - autocont 05.01.2012 8:50.3.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1014.452 [GMT 1:00]
Spuštěný z: c:\documents and settings\autocont.NB-BOREK\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\autocont.NB-BOREK\Plocha\CFScript.txt.txt
AV: AVG Anti-Virus Business Edition *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
FILE ::
"c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Action Manager 32.lnk"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-2119669116-2072395555-1277150550-1142.job"
"c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-2119669116-2072395555-1277150550-1157.job"
"c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2119669116-2072395555-1277150550-1142.job"
"c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2119669116-2072395555-1277150550-1157.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\ConduitEngine
c:\program files\ConduitEngine\appContextMenu.xml
c:\program files\ConduitEngine\ConduitEngin0.dll
c:\program files\ConduitEngine\ConduitEngine.dll
c:\program files\ConduitEngine\ConduitEngineHelper.exe
c:\program files\ConduitEngine\ConduitEngineUninstall.exe
c:\program files\ConduitEngine\engineContextMenu.xml
c:\program files\ConduitEngine\EngineSettings.json
c:\program files\ConduitEngine\INSTALL.LOG
c:\program files\ConduitEngine\prxConduitEngine.dll
c:\program files\ConduitEngine\toolbar.cfg
c:\program files\ESET
c:\program files\ESET\ESET Online Scanner\esets_apiA.dll
c:\program files\ESET\ESET Online Scanner\esets_apiW.dll
c:\program files\ESET\ESET Online Scanner\esets_apiW_a.dll
c:\program files\ESET\ESET Online Scanner\ESETSmartInstaller.exe
c:\program files\ESET\ESET Online Scanner\log.txt
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\http_update.eset.com\update.ver
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\lastupd.ver
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\nod01E3.nup
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\nod0C2F.nup
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\nod1B8E.nup
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\nod2BC0.nup
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\nod3400.nup
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\nod3797.nup
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\nod3889.nup
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\nod470B.nup
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\nod60AB.nup
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\nod6447.nup
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\nod6498.nup
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\nod6532.nup
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\nod6622.nup
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\nod6EBC.nup
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\nod70CB.nup
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\nod7B22.nup
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\temp\em000_32.dat
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\temp\em001_32.dat
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\temp\em002_32.dat
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\temp\em003_32.dat
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\temp\em004_32.dat
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\temp\em005_32.dat
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\temp\em006_32.dat
c:\program files\ESET\ESET Online Scanner\Modules\data\updfiles\upd.ver
c:\program files\ESET\ESET Online Scanner\Modules\em000_32.dat
c:\program files\ESET\ESET Online Scanner\Modules\em001_32.dat
c:\program files\ESET\ESET Online Scanner\Modules\em002_32.dat
c:\program files\ESET\ESET Online Scanner\Modules\em003_32.dat
c:\program files\ESET\ESET Online Scanner\Modules\em004_32.dat
c:\program files\ESET\ESET Online Scanner\Modules\em005_32.dat
c:\program files\ESET\ESET Online Scanner\Modules\em006_32.dat
c:\program files\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
c:\program files\ESET\ESET Online Scanner\OnlineCmdLineScannerA.exe
c:\program files\ESET\ESET Online Scanner\OnlineScanner.cab
c:\program files\ESET\ESET Online Scanner\OnlineScanner.inf
c:\program files\ESET\ESET Online Scanner\OnlineScanner.ocx
c:\program files\ESET\ESET Online Scanner\OnlineScanner64.ocx
c:\program files\ESET\ESET Online Scanner\OnlineScannerApp.exe
c:\program files\ESET\ESET Online Scanner\OnlineScannerLang.dll
c:\program files\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe
c:\program files\ESET\ESET Online Scanner\unicows.dll
c:\windows\iun6002.exe
c:\windows\msmqinst.log
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_GUPDATE1C99DA3DD552BAA
-------\Legacy_GUPDATEM
-------\Service_gupdate1c99da3dd552baa
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-12-05 do 2012-01-05 )))))))))))))))))))))))))))))))
.
.
2012-01-04 14:05 . 2012-01-04 14:05 -------- d-----w- C:\rsit
2012-01-04 14:05 . 2012-01-04 14:05 -------- d-----w- c:\program files\trend micro
2012-01-04 09:47 . 2012-01-04 09:49 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2012-01-04 09:46 . 2012-01-04 09:46 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2012-01-04 09:44 . 2012-01-04 09:44 -------- d-----w- c:\program files\CCleaner
2012-01-04 09:32 . 2012-01-04 15:30 -------- d-----w- c:\documents and settings\autocont.NB-BOREK
2012-01-04 08:26 . 2012-01-04 08:26 -------- d-----r- c:\documents and settings\LocalService\Oblíbené položky
2012-01-03 10:30 . 2012-01-03 10:30 -------- d-----w- c:\documents and settings\autocont\Local Settings\Data aplikací\Mozilla
2012-01-03 10:20 . 2012-01-05 08:06 -------- d-----w- c:\program files\Spybot - Search & Destroy
2012-01-03 10:20 . 2012-01-05 07:41 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Spybot - Search & Destroy
2012-01-03 10:14 . 2012-01-03 10:17 -------- d-----w- c:\documents and settings\autocont\Data aplikací\Inbox Toolbar
2012-01-03 10:13 . 2012-01-03 10:14 -------- d-----w- c:\documents and settings\autocont\Local Settings\Data aplikací\ConduitEngine
2012-01-03 10:13 . 2012-01-03 10:13 -------- d-----w- c:\documents and settings\autocont\Local Settings\Data aplikací\Winamp Toolbar
2012-01-02 18:05 . 2012-01-02 18:05 -------- d--h--w- c:\documents and settings\All Users\Data aplikací\Common Files
2012-01-02 14:35 . 2012-01-02 14:35 -------- d-----w- c:\documents and settings\autocont\Local Settings\Data aplikací\PCHealth
2012-01-02 13:57 . 2012-01-02 13:57 -------- d-----w- c:\documents and settings\autocont\Local Settings\Data aplikací\GHISLER
2012-01-02 13:48 . 2012-01-02 13:48 -------- d-----w- C:\$AVG
2012-01-02 13:43 . 2012-01-02 13:43 12536 ----a-w- c:\windows\system32\avgrsstx.dll
2012-01-02 13:27 . 2012-01-02 13:44 243152 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2012-01-02 13:27 . 2012-01-02 13:27 52872 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
2012-01-02 13:27 . 2012-01-02 13:27 216400 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2012-01-02 13:27 . 2012-01-02 13:43 29712 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2012-01-02 13:27 . 2012-01-04 15:25 -------- d-----w- c:\windows\system32\drivers\Avg
2012-01-02 13:26 . 2012-01-04 09:29 -------- d-----w- c:\documents and settings\All Users\Data aplikací\avg9
2012-01-02 13:02 . 2012-01-02 13:02 -------- d-----w- c:\documents and settings\autocont\Local Settings\Data aplikací\Temp
2012-01-02 13:02 . 2012-01-02 13:02 -------- d-----w- c:\documents and settings\autocont\Local Settings\Data aplikací\Adobe
2011-12-25 14:48 . 2011-12-25 14:49 -------- d--h--w- c:\windows\msdownld.tmp
2011-12-25 14:32 . 2011-12-25 14:33 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Solidshield
2011-12-25 14:24 . 2011-12-25 14:24 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Electronic Arts
2011-12-25 14:24 . 2011-12-25 14:24 -------- d-----w- c:\documents and settings\All Users\Data aplikací\EA Core
2011-12-25 14:02 . 2009-09-04 16:29 1974616 ----a-w- c:\windows\system32\D3DCompiler_42.dll
2011-12-25 14:02 . 2009-09-04 16:29 5501792 ----a-w- c:\windows\system32\d3dcsx_42.dll
2011-12-25 14:01 . 2009-09-04 16:29 235344 ----a-w- c:\windows\system32\d3dx11_42.dll
2011-12-25 14:01 . 2009-09-04 16:29 453456 ----a-w- c:\windows\system32\d3dx10_42.dll
2011-12-25 14:01 . 2009-09-04 16:29 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
2011-12-25 14:01 . 2011-12-25 14:01 -------- d-----w- c:\program files\Electronic Arts
2011-12-25 13:48 . 2011-12-25 13:48 -------- d-----w- c:\windows\UMStor
2011-12-25 13:48 . 2011-12-25 13:48 -------- d-----w- c:\windows\system\iosubsys
2011-12-25 13:48 . 2003-11-21 17:09 201736 ------w- c:\windows\system32\drivers\UMSTOR.sys
2011-12-25 13:48 . 2011-12-25 13:48 -------- d-----w- c:\program files\USB Disk Win98 Driver
2011-12-25 13:44 . 2011-12-25 13:44 -------- d-----w- C:\MTV_OUTPUT
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-04 18:57 . 2007-02-05 13:32 182784 ----a-w- c:\windows\system32\searchprotocolhost.exe
2012-01-04 13:15 . 2007-08-02 12:00 162816 ----a-w- c:\windows\system32\drivers\netbt.sys
2011-12-01 18:52 . 2011-12-01 18:52 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-11-23 14:40 . 2007-08-02 12:00 1859584 ----a-w- c:\windows\system32\win32k.sys
2011-11-04 19:13 . 2007-08-02 12:00 916992 ----a-w- c:\windows\system32\wininet.dll
2011-11-04 19:13 . 2007-08-02 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2011-11-04 19:13 . 2007-08-02 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2011-11-04 11:23 . 2007-08-02 12:00 385024 ----a-w- c:\windows\system32\html.iec
2011-11-01 16:07 . 2007-08-02 12:00 1288192 ----a-w- c:\windows\system32\ole32.dll
2011-10-28 05:32 . 2007-08-02 12:00 33280 ----a-w- c:\windows\system32\csrsrv.dll
2011-10-26 10:50 . 2007-08-02 12:00 2194944 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-10-26 10:50 . 2004-08-17 15:45 2071552 ----a-w- c:\windows\system32\ntkrnlpa.exe
2011-10-18 11:13 . 2007-08-02 12:00 186880 ----a-w- c:\windows\system32\encdec.dll
2011-10-11 11:47 . 2007-10-29 17:09 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-10-11 11:47 . 2011-10-11 11:48 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-10-10 14:22 . 2007-10-24 22:35 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-08-30 09:23 . 2011-08-10 23:08 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2012-01-04_14.52.27 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-01-05 08:06 . 2012-01-05 08:06 16384 c:\windows\temp\Perflib_Perfdata_574.dat
- 2007-08-02 12:00 . 2011-08-22 23:41 66560 c:\windows\system32\mshtmled.dll
+ 2007-08-02 12:00 . 2011-11-04 19:13 66560 c:\windows\system32\mshtmled.dll
+ 2007-08-13 17:54 . 2011-11-04 19:13 55296 c:\windows\system32\msfeedsbs.dll
- 2007-08-13 17:54 . 2011-08-22 23:41 55296 c:\windows\system32\msfeedsbs.dll
+ 2007-08-02 12:00 . 2011-11-04 19:13 25600 c:\windows\system32\jsproxy.dll
- 2007-08-02 12:00 . 2011-08-22 23:41 25600 c:\windows\system32\jsproxy.dll
+ 2009-07-02 12:58 . 2011-11-04 19:13 12800 c:\windows\system32\dllcache\xpshims.dll
- 2009-07-02 12:58 . 2011-08-22 23:41 12800 c:\windows\system32\dllcache\xpshims.dll
- 2007-08-02 12:00 . 2011-08-22 23:41 66560 c:\windows\system32\dllcache\mshtmled.dll
+ 2007-08-02 12:00 . 2011-11-04 19:13 66560 c:\windows\system32\dllcache\mshtmled.dll
+ 2007-10-29 16:31 . 2011-11-04 19:13 55296 c:\windows\system32\dllcache\msfeedsbs.dll
- 2007-10-29 16:31 . 2011-08-22 23:41 55296 c:\windows\system32\dllcache\msfeedsbs.dll
- 2007-08-02 12:00 . 2011-08-22 23:41 43520 c:\windows\system32\dllcache\licmgr10.dll
+ 2007-08-02 12:00 . 2011-11-04 19:13 43520 c:\windows\system32\dllcache\licmgr10.dll
- 2007-08-02 12:00 . 2011-08-22 23:41 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2007-08-02 12:00 . 2011-11-04 19:13 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2011-12-25 02:49 . 2011-12-25 02:49 31504 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2011-12-25 10:07 . 2011-12-25 10:07 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
- 2011-07-08 12:00 . 2011-07-08 12:00 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
+ 2011-12-24 21:55 . 2011-12-24 21:55 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
- 2011-07-07 10:04 . 2011-07-07 10:04 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
- 2011-07-07 10:04 . 2011-07-07 10:04 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2011-12-24 21:55 . 2011-12-24 21:55 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2011-12-24 21:55 . 2011-12-24 21:55 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
- 2011-07-07 10:03 . 2011-07-07 10:03 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
+ 2011-12-24 22:49 . 2011-12-24 22:49 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
- 2011-07-07 11:09 . 2011-07-07 11:09 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
- 2011-07-07 11:09 . 2011-07-07 11:09 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
+ 2011-12-24 22:49 . 2011-12-24 22:49 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
- 2007-12-14 06:55 . 2012-01-02 14:44 35088 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\oisicon.exe
+ 2007-12-14 06:55 . 2012-01-04 16:48 35088 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\oisicon.exe
- 2007-12-14 06:55 . 2012-01-02 14:44 18704 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\mspicons.exe
+ 2007-12-14 06:55 . 2012-01-04 16:48 18704 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\mspicons.exe
+ 2007-12-14 06:55 . 2012-01-04 16:48 20240 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\cagicon.exe
- 2007-12-14 06:55 . 2012-01-02 14:44 20240 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\cagicon.exe
+ 2007-10-29 16:40 . 2012-01-04 16:35 23040 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\unbndico.exe
- 2007-10-29 16:40 . 2012-01-02 14:46 23040 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\unbndico.exe
+ 2007-10-29 16:40 . 2012-01-04 16:35 61440 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\pubs.exe
- 2007-10-29 16:40 . 2012-01-02 14:46 61440 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\pubs.exe
- 2007-10-29 16:40 . 2012-01-02 14:46 27136 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2007-10-29 16:40 . 2012-01-04 16:35 27136 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2007-10-29 16:40 . 2012-01-04 16:35 11264 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\mspicons.exe
- 2007-10-29 16:40 . 2012-01-02 14:46 11264 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2007-10-29 16:40 . 2012-01-04 16:35 86016 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\inficon.exe
- 2007-10-29 16:40 . 2012-01-02 14:46 86016 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\inficon.exe
- 2007-10-29 16:40 . 2012-01-02 14:46 12288 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2007-10-29 16:40 . 2012-01-04 16:35 12288 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2012-01-04 16:43 . 2011-08-22 23:41 12800 c:\windows\ie8updates\KB2618444-IE8\xpshims.dll
+ 2012-01-04 16:43 . 2011-08-22 23:41 66560 c:\windows\ie8updates\KB2618444-IE8\mshtmled.dll
+ 2012-01-04 16:43 . 2011-08-22 23:41 55296 c:\windows\ie8updates\KB2618444-IE8\msfeedsbs.dll
+ 2012-01-04 16:43 . 2011-08-22 23:41 43520 c:\windows\ie8updates\KB2618444-IE8\licmgr10.dll
+ 2012-01-04 16:43 . 2011-08-22 23:41 25600 c:\windows\ie8updates\KB2618444-IE8\jsproxy.dll
+ 2012-01-04 16:45 . 2012-01-04 16:45 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_c34113ff\System.Drawing.Design.dll
+ 2012-01-04 16:44 . 2012-01-04 16:44 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_fc426584\CustomMarshalers.dll
+ 2012-01-04 16:47 . 2012-01-04 16:47 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\750de53f30e516eb2c62de9bab7954e9\System.Web.DynamicData.Design.ni.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2011-10-12 12:58 . 2011-10-12 12:58 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-01-04 16:44 . 2012-01-04 16:44 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2012-01-04 16:45 . 2012-01-04 16:49 4610 c:\windows\SoftwareDistribution\EventCache\{7118B9C0-F0CD-48C2-BC79-4F00527C764D}.bin
+ 2012-01-04 16:35 . 2012-01-04 16:44 4172 c:\windows\SoftwareDistribution\EventCache\{20AF7142-032F-46D6-9E9E-36C86363C805}.bin
+ 2007-10-29 16:40 . 2012-01-04 16:35 4096 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2007-10-29 16:40 . 2012-01-02 14:46 4096 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2012-01-04 16:39 . 2012-01-04 16:39 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2011-10-12 13:33 . 2011-10-12 13:33 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2011-10-12 13:33 . 2011-10-12 13:33 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2007-08-02 12:00 . 2011-08-22 23:41 105984 c:\windows\system32\url.dll
+ 2007-08-02 12:00 . 2011-11-04 19:13 105984 c:\windows\system32\url.dll
+ 2007-08-02 12:00 . 2012-01-04 16:40 922410 c:\windows\system32\perfh009.dat
+ 2007-08-02 12:00 . 2012-01-04 16:40 965342 c:\windows\system32\perfh005.dat
+ 2007-08-02 12:00 . 2012-01-04 16:40 329508 c:\windows\system32\perfc009.dat
+ 2007-08-02 12:00 . 2012-01-04 16:40 366580 c:\windows\system32\perfc005.dat
+ 2007-08-02 12:00 . 2011-11-04 19:13 206848 c:\windows\system32\occache.dll
- 2007-08-02 12:00 . 2011-08-22 23:41 206848 c:\windows\system32\occache.dll
+ 2007-08-02 12:00 . 2011-11-04 19:13 611840 c:\windows\system32\mstime.dll
- 2007-08-02 12:00 . 2011-08-22 23:41 611840 c:\windows\system32\mstime.dll
- 2007-08-13 17:54 . 2011-08-22 23:41 602112 c:\windows\system32\msfeeds.dll
+ 2007-08-13 17:54 . 2011-11-04 19:13 602112 c:\windows\system32\msfeeds.dll
- 2007-08-02 12:00 . 2011-08-22 23:41 184320 c:\windows\system32\iepeers.dll
+ 2007-08-02 12:00 . 2011-11-04 19:13 184320 c:\windows\system32\iepeers.dll
+ 2007-08-02 12:00 . 2011-11-04 19:13 387584 c:\windows\system32\iedkcs32.dll
- 2007-08-02 12:00 . 2011-08-22 23:41 387584 c:\windows\system32\iedkcs32.dll
+ 2007-08-02 12:00 . 2011-11-04 11:24 174080 c:\windows\system32\ie4uinit.exe
- 2007-08-02 12:00 . 2011-08-22 11:56 174080 c:\windows\system32\ie4uinit.exe
- 2007-10-24 23:46 . 2011-11-21 18:27 353768 c:\windows\system32\FNTCACHE.DAT
+ 2007-10-24 23:46 . 2012-01-04 16:51 353768 c:\windows\system32\FNTCACHE.DAT
+ 2007-08-02 12:00 . 2011-11-04 19:13 916992 c:\windows\system32\dllcache\wininet.dll
+ 2007-08-02 12:00 . 2011-11-04 19:13 105984 c:\windows\system32\dllcache\url.dll
- 2007-08-02 12:00 . 2011-08-22 23:41 105984 c:\windows\system32\dllcache\url.dll
- 2007-08-02 12:00 . 2011-08-22 23:41 206848 c:\windows\system32\dllcache\occache.dll
+ 2007-08-02 12:00 . 2011-11-04 19:13 206848 c:\windows\system32\dllcache\occache.dll
+ 2007-08-02 12:00 . 2011-11-04 19:13 611840 c:\windows\system32\dllcache\mstime.dll
- 2007-08-02 12:00 . 2011-08-22 23:41 611840 c:\windows\system32\dllcache\mstime.dll
- 2007-10-29 16:31 . 2011-08-22 23:41 602112 c:\windows\system32\dllcache\msfeeds.dll
+ 2007-10-29 16:31 . 2011-11-04 19:13 602112 c:\windows\system32\dllcache\msfeeds.dll
+ 2008-08-14 07:28 . 2011-10-10 14:22 692736 c:\windows\system32\dllcache\inetcomm.dll
- 2008-08-14 07:28 . 2011-05-02 15:32 692736 c:\windows\system32\dllcache\inetcomm.dll
+ 2009-07-02 12:58 . 2011-11-04 19:13 247808 c:\windows\system32\dllcache\ieproxy.dll
- 2009-07-02 12:58 . 2011-08-22 23:41 247808 c:\windows\system32\dllcache\ieproxy.dll
+ 2007-08-02 12:00 . 2011-11-04 19:13 184320 c:\windows\system32\dllcache\iepeers.dll
- 2007-08-02 12:00 . 2011-08-22 23:41 184320 c:\windows\system32\dllcache\iepeers.dll
+ 2010-12-02 13:54 . 2011-11-04 19:13 743424 c:\windows\system32\dllcache\iedvtool.dll
- 2010-12-02 13:54 . 2011-08-22 23:41 743424 c:\windows\system32\dllcache\iedvtool.dll
+ 2007-08-02 12:00 . 2011-11-04 19:13 387584 c:\windows\system32\dllcache\iedkcs32.dll
- 2007-08-02 12:00 . 2011-08-22 23:41 387584 c:\windows\system32\dllcache\iedkcs32.dll
- 2007-08-02 12:00 . 2011-08-22 11:56 174080 c:\windows\system32\dllcache\ie4uinit.exe
+ 2007-08-02 12:00 . 2011-11-04 11:24 174080 c:\windows\system32\dllcache\ie4uinit.exe
+ 2011-10-12 12:50 . 2011-09-28 07:06 602112 c:\windows\system32\dllcache\crypt32.dll
- 2011-10-12 12:50 . 2011-09-09 09:12 602112 c:\windows\system32\dllcache\crypt32.dll
+ 2007-08-02 12:00 . 2011-09-28 07:06 602112 c:\windows\system32\crypt32.dll
- 2007-08-02 12:00 . 2011-09-09 09:12 602112 c:\windows\system32\crypt32.dll
+ 2011-12-25 02:49 . 2011-12-25 02:49 436496 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
- 2011-07-07 10:04 . 2011-07-07 10:04 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2011-12-24 21:55 . 2011-12-24 21:55 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2011-12-24 21:53 . 2011-12-24 21:53 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
- 2011-07-07 10:01 . 2011-07-07 10:01 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
+ 2011-12-24 22:49 . 2011-12-24 22:49 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
- 2011-07-07 11:09 . 2011-07-07 11:09 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2011-12-25 04:40 . 2011-12-25 04:40 819200 c:\windows\Installer\6f34b.msp
+ 2007-12-14 06:55 . 2012-01-04 16:48 888080 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\wordicon.exe
- 2007-12-14 06:55 . 2012-01-02 14:44 888080 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\wordicon.exe
+ 2007-12-14 06:55 . 2012-01-04 16:48 272648 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pubs.exe
- 2007-12-14 06:55 . 2012-01-02 14:44 272648 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pubs.exe
+ 2007-12-14 06:55 . 2012-01-04 16:48 922384 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pptico.exe
- 2007-12-14 06:55 . 2012-01-02 14:44 922384 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pptico.exe
+ 2007-12-14 06:55 . 2012-01-04 16:48 845584 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\outicon.exe
- 2007-12-14 06:55 . 2012-01-02 14:44 845584 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\outicon.exe
+ 2007-12-14 06:55 . 2012-01-04 16:48 217864 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\misc.exe
- 2007-12-14 06:55 . 2012-01-02 14:44 217864 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\misc.exe
- 2007-10-29 16:40 . 2012-01-02 14:46 409600 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2007-10-29 16:40 . 2012-01-04 16:35 409600 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2007-10-29 16:40 . 2012-01-04 16:35 286720 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\wordicon.exe
- 2007-10-29 16:40 . 2012-01-02 14:46 286720 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\wordicon.exe
- 2007-10-29 16:40 . 2012-01-02 14:46 249856 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\pptico.exe
+ 2007-10-29 16:40 . 2012-01-04 16:35 249856 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\pptico.exe
+ 2007-10-29 16:40 . 2012-01-04 16:35 794624 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\outicon.exe
- 2007-10-29 16:40 . 2012-01-02 14:46 794624 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\outicon.exe
- 2007-10-29 16:40 . 2012-01-02 14:46 135168 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2007-10-29 16:40 . 2012-01-04 16:35 135168 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2007-10-29 16:40 . 2012-01-04 16:35 593920 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\accicons.exe
- 2007-10-29 16:40 . 2012-01-02 14:46 593920 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\accicons.exe
- 2011-10-12 13:09 . 2011-10-12 13:09 217864 c:\windows\Installer\{50120000-1105-0000-0000-0000000FF1CE}\misc.exe
+ 2012-01-04 16:48 . 2012-01-04 16:48 217864 c:\windows\Installer\{50120000-1105-0000-0000-0000000FF1CE}\misc.exe
+ 2012-01-04 16:43 . 2011-08-22 23:41 916480 c:\windows\ie8updates\KB2618444-IE8\wininet.dll
+ 2012-01-04 16:43 . 2011-08-22 23:41 105984 c:\windows\ie8updates\KB2618444-IE8\url.dll
+ 2012-01-04 16:43 . 2010-07-05 13:13 391032 c:\windows\ie8updates\KB2618444-IE8\spuninst\updspapi.dll
+ 2012-01-04 16:43 . 2010-07-05 13:13 233848 c:\windows\ie8updates\KB2618444-IE8\spuninst\spuninst.exe
+ 2012-01-04 16:43 . 2011-08-22 23:41 206848 c:\windows\ie8updates\KB2618444-IE8\occache.dll
+ 2012-01-04 16:43 . 2011-08-22 23:41 611840 c:\windows\ie8updates\KB2618444-IE8\mstime.dll
+ 2012-01-04 16:43 . 2011-08-22 23:41 602112 c:\windows\ie8updates\KB2618444-IE8\msfeeds.dll
+ 2012-01-04 16:43 . 2011-08-22 23:41 247808 c:\windows\ie8updates\KB2618444-IE8\ieproxy.dll
+ 2012-01-04 16:43 . 2011-08-22 23:41 184320 c:\windows\ie8updates\KB2618444-IE8\iepeers.dll
+ 2012-01-04 16:43 . 2011-08-22 23:41 743424 c:\windows\ie8updates\KB2618444-IE8\iedvtool.dll
+ 2012-01-04 16:43 . 2011-08-22 23:41 387584 c:\windows\ie8updates\KB2618444-IE8\iedkcs32.dll
+ 2012-01-04 16:43 . 2011-08-22 11:56 174080 c:\windows\ie8updates\KB2618444-IE8\ie4uinit.exe
+ 2012-01-04 16:45 . 2012-01-04 16:45 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_5b221387\System.Drawing.dll
+ 2012-01-04 16:45 . 2012-01-04 16:45 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_7305fdf7\System.Drawing.Design.dll
+ 2012-01-04 16:45 . 2012-01-04 16:45 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_b6f893c6\CustomMarshalers.dll
+ 2012-01-04 16:47 . 2012-01-04 16:47 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\0bda7bdfaf440d5dd4bc6a1dea7ffa39\System.Web.Routing.ni.dll
+ 2012-01-05 07:56 . 2012-01-05 07:56 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\6e29f9faa74a48b83a13a3413b826295\System.Web.Extensions.Design.ni.dll
+ 2012-01-05 07:56 . 2012-01-05 07:56 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\be8965fe859bc53dff61579bf626858b\System.Web.Entity.ni.dll
+ 2012-01-04 16:47 . 2012-01-04 16:47 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\316c8b32ae76922e08278fc5675c7f67\System.Web.Entity.ni.dll
+ 2012-01-04 16:47 . 2012-01-04 16:47 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\90dc9d07db731898037e249b5d8af0ca\System.Web.Entity.Design.ni.dll
+ 2012-01-05 07:56 . 2012-01-05 07:56 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\8441b3eb247e0344fede848337ee911c\System.Web.Entity.Design.ni.dll
+ 2012-01-04 16:47 . 2012-01-04 16:47 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\506619be1ab8976c034ec8b0c3a7c5df\System.Web.DynamicData.ni.dll
+ 2012-01-05 07:56 . 2012-01-05 07:56 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\09c6a41f187ba483486cdb92dad714a1\System.Web.DynamicData.ni.dll
+ 2012-01-04 16:47 . 2012-01-04 16:47 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\5efb726d424b9712632eff749411fa89\System.Web.Abstractions.ni.dll
+ 2012-01-04 16:41 . 2012-01-04 16:41 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\3c272cad7afb127e2a2bdb8a5a808512\System.Runtime.Remoting.ni.dll
+ 2012-01-04 16:47 . 2012-01-04 16:47 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\f374e8e7849a72d1470b4a6a0771a137\System.Data.Entity.Design.ni.dll
+ 2012-01-04 16:46 . 2012-01-04 16:46 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\439732479756e0f6df88d29e50a402bf\ServiceModelReg.ni.exe
+ 2012-01-04 16:46 . 2012-01-04 16:46 302592 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\ac2082a41a02e779067ba468d84ee773\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.ni.dll
+ 2012-01-04 16:44 . 2012-01-04 16:44 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\bfcea15c95909860c4f4ac19bd7a2d6c\AspNetMMCExt.ni.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2012-01-04 16:48 . 2012-01-04 16:48 350080 c:\windows\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
+ 2007-08-02 12:00 . 2011-11-04 19:13 1212416 c:\windows\system32\urlmon.dll
- 2007-08-02 12:00 . 2011-08-22 23:41 1212416 c:\windows\system32\urlmon.dll
+ 2007-08-02 12:00 . 2011-11-04 19:13 5978112 c:\windows\system32\mshtml.dll
+ 2007-08-13 17:34 . 2011-11-04 19:13 2000384 c:\windows\system32\iertutil.dll
- 2007-08-13 17:34 . 2011-08-22 23:41 2000384 c:\windows\system32\iertutil.dll
+ 2008-10-15 10:21 . 2011-11-23 14:40 1859584 c:\windows\system32\dllcache\win32k.sys
- 2007-08-02 12:00 . 2011-08-22 23:41 1212416 c:\windows\system32\dllcache\urlmon.dll
+ 2007-08-02 12:00 . 2011-11-04 19:13 1212416 c:\windows\system32\dllcache\urlmon.dll
+ 2010-12-02 13:55 . 2011-11-01 16:07 1288192 c:\windows\system32\dllcache\ole32.dll
+ 2007-08-02 12:00 . 2011-11-04 19:13 5978112 c:\windows\system32\dllcache\mshtml.dll
+ 2007-10-29 16:31 . 2011-11-04 19:13 2000384 c:\windows\system32\dllcache\iertutil.dll
- 2007-10-29 16:31 . 2011-08-22 23:41 2000384 c:\windows\system32\dllcache\iertutil.dll
+ 2011-12-25 02:50 . 2011-12-25 02:50 5246976 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2011-12-25 10:07 . 2011-12-25 10:07 2064384 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Windows.Forms.dll
+ 2011-12-25 10:06 . 2011-12-25 10:06 1269760 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
+ 2011-12-25 10:06 . 2011-12-25 10:06 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
- 2011-07-08 11:59 . 2011-07-08 11:59 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
+ 2011-12-24 21:54 . 2011-12-24 21:54 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
- 2011-07-07 10:02 . 2011-07-07 10:02 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
- 2011-07-07 10:02 . 2011-07-07 10:02 2527232 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
+ 2011-12-24 21:53 . 2011-12-24 21:53 2527232 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
- 2011-07-08 11:59 . 2011-07-08 11:59 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2011-12-25 10:06 . 2011-12-25 10:06 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2011-11-01 12:34 . 2011-11-01 12:34 4250112 c:\windows\Installer\6f352.msp
+ 2011-12-26 08:59 . 2011-12-26 08:59 4368896 c:\windows\Installer\6f32c.msp
+ 2011-11-01 12:34 . 2011-11-01 12:34 2247168 c:\windows\Installer\6f322.msp
+ 2011-10-29 22:10 . 2011-10-29 22:10 6824960 c:\windows\Installer\6f30f.msp
- 2007-12-14 06:55 . 2012-01-02 14:44 1172240 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\xlicons.exe
+ 2007-12-14 06:55 . 2012-01-04 16:48 1172240 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\xlicons.exe
+ 2007-12-14 06:55 . 2012-01-04 16:48 1165584 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\accicons.exe
- 2007-12-14 06:55 . 2012-01-02 14:44 1165584 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\accicons.exe
+ 2012-01-04 16:43 . 2011-08-22 23:41 1212416 c:\windows\ie8updates\KB2618444-IE8\urlmon.dll
+ 2012-01-04 16:43 . 2011-10-03 08:31 5971456 c:\windows\ie8updates\KB2618444-IE8\mshtml.dll
+ 2012-01-04 16:43 . 2011-08-22 23:41 2000384 c:\windows\ie8updates\KB2618444-IE8\iertutil.dll
+ 2012-01-04 16:44 . 2012-01-04 16:44 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_4deff74c\System.dll
+ 2012-01-04 16:45 . 2012-01-04 16:45 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_328c759c\System.dll
+ 2012-01-04 16:45 . 2012-01-04 16:45 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_ef22a711\System.Xml.dll
+ 2012-01-04 16:45 . 2012-01-04 16:45 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_a02f5d44\System.Xml.dll
+ 2012-01-04 16:45 . 2012-01-04 16:45 3035136 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_d3821ed3\System.Windows.Forms.dll
+ 2012-01-04 16:45 . 2012-01-04 16:45 7917568 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_0f90e57a\System.Windows.Forms.dll
+ 2012-01-04 16:45 . 2012-01-04 16:45 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_7b85628a\System.Drawing.dll
+ 2012-01-04 16:45 . 2012-01-04 16:45 1466368 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_88076238\System.Design.dll
+ 2012-01-04 16:45 . 2012-01-04 16:45 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_2cc918a8\System.Design.dll
+ 2012-01-04 16:45 . 2012-01-04 16:45 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_f3609f6e\mscorlib.dll
+ 2012-01-04 16:45 . 2012-01-04 16:45 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_66453d64\mscorlib.dll
+ 2012-01-05 07:57 . 2012-01-05 07:57 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\05c29118462056cf810df0b6aa660d05\System.WorkflowServices.ni.dll
+ 2012-01-05 07:57 . 2012-01-05 07:57 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\26b3258c559dc0ab6bdce481ffd458b3\System.Workflow.Runtime.ni.dll
+ 2012-01-05 07:57 . 2012-01-05 07:57 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\1642d1b72cd84caf24cbe7c5e8fd8368\System.Workflow.ComponentModel.ni.dll
+ 2012-01-05 07:57 . 2012-01-05 07:57 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\32ce12c3c2049f2df94c44c94b052e16\System.Workflow.Activities.ni.dll
+ 2012-01-04 16:42 . 2012-01-04 16:42 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\f63ae1310e004777e880f28377bcddd2\System.Web.Services.ni.dll
+ 2012-01-05 07:56 . 2012-01-05 07:56 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\c99b02434e71ca9898bebbc08d63e885\System.Web.Mobile.ni.dll
+ 2012-01-05 07:56 . 2012-01-05 07:56 2405888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\c8f78b9e94857fdf6c2a378dd1629ee0\System.Web.Extensions.ni.dll
+ 2012-01-04 16:47 . 2012-01-04 16:47 2405376 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\8f99ddc1af0e50ac410158b243ce253d\System.Web.Extensions.ni.dll
+ 2012-01-05 07:56 . 2012-01-05 07:56 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\ae749b024162e9ac79110c633b5ce6be\System.ServiceModel.Web.ni.dll
+ 2012-01-04 16:47 . 2012-01-04 16:47 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\2fd3f0c5a40653917000e251cd3fc7bb\System.ServiceModel.Web.ni.dll
+ 2012-01-04 16:44 . 2012-01-04 16:44 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\23eb4618c9d171be9fb551a13a475a32\System.IdentityModel.ni.dll
+ 2012-01-04 16:47 . 2012-01-04 16:47 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\f35064c125799df650c1a959d8fa450b\System.Data.Services.ni.dll
+ 2012-01-04 16:46 . 2012-01-04 16:46 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\a86c12788293105a0d9fda1bc90c90bc\Microsoft.VisualBasic.ni.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2011-10-12 13:33 . 2012-01-04 16:39 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-01-04 16:39 . 2012-01-04 16:39 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2010-12-04 03:52 . 2010-12-04 03:52 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2010-12-04 03:52 . 2012-01-04 16:47 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2011-10-12 13:33 . 2012-01-04 16:39 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2011-10-12 13:33 . 2012-01-04 16:39 5246976 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2011-10-12 13:33 . 2012-01-04 16:39 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2011-10-12 13:33 . 2012-01-04 16:39 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2011-10-12 13:33 . 2011-10-12 13:33 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-01-04 16:44 . 2012-01-04 16:44 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
- 2011-10-12 12:58 . 2011-10-12 12:58 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2012-01-04 16:44 . 2012-01-04 16:44 2064384 c:\windows\assembly\GAC\System.Windows.Forms\1.0.5000.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-01-04 16:44 . 2012-01-04 16:44 1269760 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2007-08-13 17:54 . 2011-11-05 13:13 11081728 c:\windows\system32\ieframe.dll
- 2007-08-13 17:54 . 2011-08-23 15:41 11081728 c:\windows\system32\ieframe.dll
- 2007-10-29 16:31 . 2011-08-23 15:41 11081728 c:\windows\system32\dllcache\ieframe.dll
+ 2007-10-29 16:31 . 2011-11-05 13:13 11081728 c:\windows\system32\dllcache\ieframe.dll
+ 2011-12-26 16:02 . 2011-12-26 16:02 12482048 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2656353\M2656353Uninstall.msp
+ 2011-12-26 08:02 . 2011-12-26 08:02 19677184 c:\windows\Installer\6f345.msp
+ 2012-01-04 16:43 . 2011-08-23 15:41 11081728 c:\windows\ie8updates\KB2618444-IE8\ieframe.dll
+ 2012-01-04 16:42 . 2012-01-04 16:42 11817472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\62e34cfb5a8b233667c7c5a47a32ad93\System.Web.ni.dll
+ 2012-01-04 16:46 . 2012-01-04 16:46 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\2dac4fc006596760cd4988d0bfd52ff0\System.ServiceModel.ni.dll
+ 2012-01-04 16:42 . 2012-01-04 16:42 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\9e15d80ffb037e9171fa4bd2e0233497\System.Design.ni.dll
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2007-03-21 16126464]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2007-09-07 102400]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-04-21 162584]
"OpwareSE4"="c:\program files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe" [2006-10-11 75304]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424]
"POPUPTV"="c:\program files\ASUS\PopupTV\ExpressTV.exe" [2009-02-20 708608]
"USB Storage Toolbox"="c:\windows\UMStor\Res.EXE" [2005-09-14 65536]
"AVG9_TRAY"="c:\progra~1\AVG\AVG9\avgtray.exe" [2012-01-02 2078048]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-12-09 1226608]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2008-11-04 435096]
.
c:\documents and settings\autocont.NB-BOREK\Nabídka Start\Programy\Po spuštění\
_uninst_.lnk - c:\documents and settings\autocont.NB-BOREK\Local Settings\temp\_uninst_.bat [N/A]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Action Manager 32.lnk - c:\program files\ScannerU\AM32.exe [2007-11-14 69632]
Akcelerátor spuštění AutoCADu.lnk - c:\program files\Common Files\Autodesk Shared\acstart17.exe [2006-3-5 11000]
AutoCAD Startup Accelerator.lnk - c:\program files\Common Files\Autodesk Shared\acstart16.exe [2006-9-23 10872]
Místní vyhledávání.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2007-2-5 118784]
TMMonitor.lnk - c:\program files\ArcSoft\TotalMedia 3.5\TMMonitor.exe [2009-12-23 258048]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2007-02-05 294400]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2012-01-02 13:43 12536 ----a-w- c:\windows\system32\avgrsstx.dll
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Google\\Google SketchUp 7\\SketchUp.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [2.1.2012 14:27 52872]
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2.1.2012 14:27 216400]
R1 AvgTdiX;AVG Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2.1.2012 14:27 243152]
R2 avg9emc;AVG E-mail Scanner;c:\program files\AVG\AVG9\avgemc.exe [2.1.2012 14:26 916480]
R2 avg9wd;AVG WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [2.1.2012 14:43 299520]
S2 avgagent;AVG7 Remote Support Service (AvgAgent);avgagent.exe /srvfsys --> avgagent.exe [?]
S2 hasplms;HASP License Manager;c:\windows\system32\hasplms.exe -run --> c:\windows\system32\hasplms.exe -run [?]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [4.1.2012 10:47 40776]
S3 uxkx1;ASUS MyCinema DiBcom based digital tuner device;c:\windows\system32\drivers\uxkx1.sys [23.12.2009 20:07 609280]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
.
Obsah adresáře 'Naplánované úlohy'
.
2012-01-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-05 15:05]
.
2012-01-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-05 15:05]
.
2012-01-05 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-2119669116-2072395555-1277150550-1142.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 21:09]
.
2012-01-05 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-2119669116-2072395555-1277150550-1157.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 21:09]
.
2012-01-03 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2119669116-2072395555-1277150550-1142.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 21:09]
.
2012-01-02 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2119669116-2072395555-1277150550-1157.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 21:09]
.
.
------- Doplňkový sken -------
.
TCP: DhcpNameServer = 192.168.0.1
DPF: Garmin Communicator Plug-In - hxxps://my.garmin.com/mygarmin/m/GarminAxControl.CAB
DPF: {1F831FA2-42FC-11D4-95A6-0080AD30DCE1} - file:///C:/Program%20Files/AutoCAD%20LT%202000i%20Cz/InstFred.ocx
DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} - hxxp://85.207.254.4/activex/AMC.cab
FF - ProfilePath - c:\documents and settings\autocont.NB-BOREK\Data aplikací\Mozilla\Firefox\Profiles\aatamr35.default\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-conduitEngine - c:\program files\ConduitEngine\ConduitEngineUninstall.exe
AddRemove-ESET Online Scanner - c:\program files\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-01-05 09:07
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(1888)
c:\program files\ScanSoft\OmniPageSE4.0\OpHookSE4.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVG\AVG9\avgchsvx.exe
c:\program files\AVG\AVG9\avgrsx.exe
c:\program files\AVG\AVG9\avgcsrvx.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\AVG\AVG9\avgam.exe
c:\program files\AVG\AVG9\avgnsx.exe
c:\program files\AVG\AVG9\avgcsrvx.exe
c:\windows\system32\wscntfy.exe
c:\program files\AVG\AVG9\avgcsrvx.exe
c:\windows\RTHDCPL.EXE
c:\program files\Synaptics\SynTP\SynTPEnh.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\docume~1\AUTOCO~1.NB-\LOCALS~1\Temp\RtkBtMnt.exe
.
**************************************************************************
.
Celkový čas: 2012-01-05 09:13:31 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-01-05 08:13
ComboFix2.txt 2012-01-04 16:22
ComboFix3.txt 2012-01-04 14:57
.
Před spuštěním: Volných bajtů: 34 239 803 392
Po spuštění: Volných bajtů: 34 525 696 000
.
- - End Of File - - 6DD7095F3C05703383ED0D36A7ACDD89

#12 Příspěvek od **motji** » 05 Led 2012 09:23

Já tu budu večer asi od 20.hodin

. Pořád se mi tam něco nezdá, můžu znovu poprosit o log z TDSS killeru?

honnza · #13 Příspěvek od **honnza** » 05 Led 2012 09:29

Dobrý ráno, přikládám log:

09:24:57.0937 0876 TDSS rootkit removing tool 2.6.25.0 Dec 23 2011 14:51:16
09:24:57.0953 0876 ============================================================
09:24:57.0953 0876 Current date / time: 2012/01/05 09:24:57.0953
09:24:57.0953 0876 SystemInfo:
09:24:57.0953 0876
09:24:57.0953 0876 OS Version: 5.1.2600 ServicePack: 3.0
09:24:57.0953 0876 Product type: Workstation
09:24:57.0953 0876 ComputerName: NB-BOREK
09:24:57.0953 0876 UserName: autocont
09:24:57.0953 0876 Windows directory: C:\WINDOWS
09:24:57.0953 0876 System windows directory: C:\WINDOWS
09:24:57.0953 0876 Processor architecture: Intel x86
09:24:57.0953 0876 Number of processors: 1
09:24:57.0953 0876 Page size: 0x1000
09:24:57.0953 0876 Boot type: Normal boot
09:24:57.0953 0876 ============================================================
09:24:58.0765 0876 Initialize success
09:25:15.0906 1476 ============================================================
09:25:15.0906 1476 Scan started
09:25:15.0906 1476 Mode: Manual; SigCheck; TDLFS;
09:25:15.0906 1476 ============================================================
09:25:17.0234 1476 Abiosdsk - ok
09:25:17.0265 1476 abp480n5 - ok
09:25:17.0343 1476 ACPI (4fe34f1f3126b61fcc6b2043aa8112c9) C:\WINDOWS\system32\DRIVERS\ACPI.sys
09:25:18.0250 1476 ACPI - ok
09:25:18.0343 1476 ACPIEC (afdff022a01f0b11c776f0860c3b282f) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
09:25:18.0531 1476 ACPIEC - ok
09:25:18.0609 1476 adpu160m - ok
09:25:18.0656 1476 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
09:25:18.0781 1476 aec - ok
09:25:18.0843 1476 Afc (fe3ea6e9afc1a78e6edca121e006afb7) C:\WINDOWS\system32\drivers\Afc.sys
09:25:18.0875 1476 Afc - ok
09:25:18.0921 1476 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
09:25:18.0968 1476 AFD - ok
09:25:19.0015 1476 Aha154x - ok
09:25:19.0046 1476 aic78u2 - ok
09:25:19.0062 1476 aic78xx - ok
09:25:19.0140 1476 aksfridge (cb5a5079744a0535416d3a5e462c5efe) C:\WINDOWS\system32\DRIVERS\aksfridge.sys
09:25:19.0234 1476 aksfridge - ok
09:25:19.0343 1476 akshasp (1a27f5555448cc2d29d281b11f39177e) C:\WINDOWS\system32\DRIVERS\akshasp.sys
09:25:19.0390 1476 akshasp - ok
09:25:19.0421 1476 akshhl (147b61b81be1ffc38939ea47e5cfb51f) C:\WINDOWS\system32\DRIVERS\akshhl.sys
09:25:19.0453 1476 akshhl - ok
09:25:19.0484 1476 aksusb (b4ad9f5d78f27e0c6994e0cb05c60e21) C:\WINDOWS\system32\DRIVERS\aksusb.sys
09:25:19.0515 1476 aksusb - ok
09:25:19.0531 1476 AliIde - ok
09:25:19.0546 1476 amsint - ok
09:25:19.0609 1476 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
09:25:19.0734 1476 Arp1394 - ok
09:25:19.0750 1476 asc - ok
09:25:19.0765 1476 asc3350p - ok
09:25:19.0781 1476 asc3550 - ok
09:25:19.0859 1476 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
09:25:20.0000 1476 AsyncMac - ok
09:25:20.0046 1476 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
09:25:20.0171 1476 atapi - ok
09:25:20.0234 1476 Atdisk - ok
09:25:20.0296 1476 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
09:25:20.0437 1476 Atmarpc - ok
09:25:20.0500 1476 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
09:25:20.0640 1476 audstub - ok
09:25:20.0718 1476 AvgLdx86 (b8c187439d27aba430dd69fdcf1fa657) C:\WINDOWS\system32\Drivers\avgldx86.sys
09:25:20.0734 1476 AvgLdx86 - ok
09:25:20.0765 1476 AvgMfx86 (80ff2b1b7eeda966394f0baa895bbf4b) C:\WINDOWS\system32\Drivers\avgmfx86.sys
09:25:20.0781 1476 AvgMfx86 - ok
09:25:20.0812 1476 AvgRkx86 (5bbcd8646074a3af4ee9b321d12c2b64) C:\WINDOWS\system32\Drivers\avgrkx86.sys
09:25:20.0828 1476 AvgRkx86 - ok
09:25:20.0890 1476 AvgTdiX (9a7a93388f503a34e7339ae7f9997449) C:\WINDOWS\system32\Drivers\avgtdix.sys
09:25:20.0906 1476 AvgTdiX - ok
09:25:20.0984 1476 b57w2k (f96038aa1ec4013a93d2420fc689d1e9) C:\WINDOWS\system32\DRIVERS\b57xp32.sys
09:25:21.0031 1476 b57w2k - ok
09:25:21.0109 1476 BCM43XX (b89bcf0a25aeb3b47030ac83287f894a) C:\WINDOWS\system32\DRIVERS\bcmwl5.sys
09:25:21.0171 1476 BCM43XX - ok
09:25:21.0203 1476 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
09:25:21.0343 1476 Beep - ok
09:25:21.0375 1476 C-Dilla - ok
09:25:21.0375 1476 catchme - ok
09:25:21.0406 1476 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
09:25:21.0562 1476 cbidf2k - ok
09:25:21.0656 1476 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
09:25:21.0796 1476 CCDECODE - ok
09:25:21.0843 1476 cd20xrnt - ok
09:25:21.0921 1476 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
09:25:22.0062 1476 Cdaudio - ok
09:25:22.0140 1476 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
09:25:22.0281 1476 Cdfs - ok
09:25:22.0359 1476 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
09:25:22.0515 1476 Cdrom - ok
09:25:22.0546 1476 Changer - ok
09:25:22.0609 1476 CmBatt (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys
09:25:22.0734 1476 CmBatt - ok
09:25:22.0781 1476 CmdIde - ok
09:25:22.0828 1476 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys
09:25:22.0953 1476 Compbatt - ok
09:25:23.0000 1476 Cpqarray - ok
09:25:23.0031 1476 dac2w2k - ok
09:25:23.0078 1476 dac960nt - ok
09:25:23.0125 1476 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
09:25:23.0265 1476 Disk - ok
09:25:23.0375 1476 dmboot (db5fd2bf5b07dc54bfcb3664ff05bd7c) C:\WINDOWS\system32\drivers\dmboot.sys
09:25:23.0546 1476 dmboot - ok
09:25:23.0656 1476 dmio (fff1720af51171f32f1ead5cf71f2810) C:\WINDOWS\system32\drivers\dmio.sys
09:25:23.0765 1476 dmio - ok
09:25:23.0875 1476 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
09:25:24.0015 1476 dmload - ok
09:25:24.0093 1476 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
09:25:24.0218 1476 DMusic - ok
09:25:24.0296 1476 dpti2o - ok
09:25:24.0328 1476 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
09:25:24.0453 1476 drmkaud - ok
09:25:24.0500 1476 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
09:25:24.0625 1476 Fastfat - ok
09:25:24.0718 1476 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
09:25:24.0843 1476 Fdc - ok
09:25:24.0921 1476 Fips (ac366695a0796560aa37215ad5762aaf) C:\WINDOWS\system32\drivers\Fips.sys
09:25:25.0046 1476 Fips - ok
09:25:25.0125 1476 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
09:25:25.0250 1476 Flpydisk - ok
09:25:25.0328 1476 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
09:25:25.0468 1476 FltMgr - ok
09:25:25.0515 1476 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
09:25:25.0640 1476 Fs_Rec - ok
09:25:25.0750 1476 FTDIBUS (a36e8beedb3aaca09bf55a1d17904bc8) C:\WINDOWS\system32\drivers\ftdibus.sys
09:25:25.0750 1476 FTDIBUS - ok
09:25:25.0796 1476 Ftdisk (4e664d8541db4a66b73a24257e322e1f) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
09:25:25.0937 1476 Ftdisk - ok
09:25:26.0046 1476 FTSER2K (a14a1f4bb391df9c233cb5dbd05feb70) C:\WINDOWS\system32\drivers\ftser2k.sys
09:25:26.0062 1476 FTSER2K - ok
09:25:26.0093 1476 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
09:25:26.0234 1476 Gpc - ok
09:25:26.0281 1476 grmnusb (6003bc70f1a8307262bd3c941bda0b7e) C:\WINDOWS\system32\drivers\grmnusb.sys
09:25:26.0328 1476 grmnusb - ok
09:25:26.0437 1476 hardlock (9de9a7a19195c57ef38b4ee25422f2d7) C:\WINDOWS\system32\drivers\hardlock.sys
09:25:26.0500 1476 hardlock - ok
09:25:26.0562 1476 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
09:25:26.0687 1476 HDAudBus - ok
09:25:26.0718 1476 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
09:25:26.0843 1476 HidUsb - ok
09:25:26.0890 1476 hpn - ok
09:25:26.0968 1476 HSFHWAZL (7d33d2b81bd8b4bc51b536b113295d51) C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys
09:25:27.0015 1476 HSFHWAZL - ok
09:25:27.0093 1476 HSF_DPV (fb6ad8a16e22c91d5978b26e0300a331) C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys
09:25:27.0187 1476 HSF_DPV - ok
09:25:27.0250 1476 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
09:25:27.0296 1476 HTTP - ok
09:25:27.0375 1476 i2omgmt - ok
09:25:27.0390 1476 i2omp - ok
09:25:27.0421 1476 i8042prt (c528e27945367191e7bae364930b6932) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
09:25:27.0562 1476 i8042prt - ok
09:25:27.0828 1476 ialm (28423512370705aeda6a652fedb25468) C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
09:25:28.0250 1476 ialm - ok
09:25:28.0328 1476 igfx - ok
09:25:28.0390 1476 imagedrv (0a7c49b48c772591a2d362daa00246c8) C:\WINDOWS\system32\Drivers\imagedrv.sys
09:25:28.0406 1476 imagedrv ( UnsignedFile.Multi.Generic ) - warning
09:25:28.0406 1476 imagedrv - detected UnsignedFile.Multi.Generic (1)
09:25:28.0437 1476 imagesrv (549ba4f539e7b8d8129500b96dd7b27a) C:\WINDOWS\system32\DRIVERS\imagesrv.sys
09:25:28.0453 1476 imagesrv ( UnsignedFile.Multi.Generic ) - warning
09:25:28.0453 1476 imagesrv - detected UnsignedFile.Multi.Generic (1)
09:25:28.0500 1476 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
09:25:28.0625 1476 Imapi - ok
09:25:28.0687 1476 ini910u - ok
09:25:28.0890 1476 IntcAzAudAddService (cbddab14249b2f05407fc09ab8fffb88) C:\WINDOWS\system32\drivers\RtkHDAud.sys
09:25:29.0250 1476 IntcAzAudAddService - ok
09:25:29.0281 1476 IntelIde - ok
09:25:29.0328 1476 intelppm (27b290d632af2cf3cf40bfddb7370985) C:\WINDOWS\system32\DRIVERS\intelppm.sys
09:25:29.0453 1476 intelppm - ok
09:25:29.0531 1476 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
09:25:29.0656 1476 Ip6Fw - ok
09:25:29.0734 1476 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
09:25:29.0875 1476 IpFilterDriver - ok
09:25:29.0937 1476 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
09:25:30.0062 1476 IpInIp - ok
09:25:30.0125 1476 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
09:25:30.0265 1476 IpNat - ok
09:25:30.0343 1476 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
09:25:30.0468 1476 IPSec - ok
09:25:30.0484 1476 irda (aca5e7b54409f9cb5eed97ed0c81120e) C:\WINDOWS\system32\DRIVERS\irda.sys
09:25:30.0625 1476 irda - ok
09:25:30.0687 1476 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
09:25:30.0796 1476 IRENUM - ok
09:25:30.0875 1476 isapnp (cc9f8a2d60aed1a51a3ac34c59b987ae) C:\WINDOWS\system32\DRIVERS\isapnp.sys
09:25:30.0984 1476 isapnp - ok
09:25:31.0046 1476 Kbdclass (1b6162fe7f66b1a71a4b70f941c4aa9b) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
09:25:31.0171 1476 Kbdclass - ok
09:25:31.0250 1476 kbdhid (86c8f23616c6c6e5b2776901c17b945b) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
09:25:31.0375 1476 kbdhid - ok
09:25:31.0421 1476 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
09:25:31.0562 1476 kmixer - ok
09:25:31.0640 1476 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
09:25:31.0687 1476 KSecDD - ok
09:25:31.0734 1476 lbrtfdc - ok
09:25:31.0796 1476 MBAMSwissArmy (0db7527db188c7d967a37bb51bbf3963) C:\WINDOWS\system32\drivers\mbamswissarmy.sys
09:25:31.0812 1476 MBAMSwissArmy - ok
09:25:31.0890 1476 mdmxsdk (0cea2d0d3fa284b85ed5b68365114f76) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
09:25:31.0921 1476 mdmxsdk - ok
09:25:31.0968 1476 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
09:25:32.0109 1476 mnmdd - ok
09:25:32.0140 1476 Modem (44032b0c6d9954d3fd26438330b99ee7) C:\WINDOWS\system32\drivers\Modem.sys
09:25:32.0265 1476 Modem - ok
09:25:32.0359 1476 Mouclass (4cb582831dbde63ce43b45d771218374) C:\WINDOWS\system32\DRIVERS\mouclass.sys
09:25:32.0484 1476 Mouclass - ok
09:25:32.0562 1476 mouhid (bb269eba740737ab749b214d568b6812) C:\WINDOWS\system32\DRIVERS\mouhid.sys
09:25:32.0671 1476 mouhid - ok
09:25:32.0765 1476 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
09:25:32.0890 1476 MountMgr - ok
09:25:32.0968 1476 MPE (c0f8e0c2c3c0437cf37c6781896dc3ec) C:\WINDOWS\system32\DRIVERS\MPE.sys
09:25:33.0093 1476 MPE - ok
09:25:33.0140 1476 mraid35x - ok
09:25:33.0187 1476 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
09:25:33.0312 1476 MRxDAV - ok
09:25:33.0406 1476 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
09:25:33.0484 1476 MRxSmb - ok
09:25:33.0593 1476 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
09:25:33.0703 1476 Msfs - ok
09:25:33.0781 1476 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
09:25:33.0906 1476 MSKSSRV - ok
09:25:34.0000 1476 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
09:25:34.0140 1476 MSPCLOCK - ok
09:25:34.0203 1476 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
09:25:34.0359 1476 MSPQM - ok
09:25:34.0453 1476 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
09:25:34.0578 1476 mssmbios - ok
09:25:34.0734 1476 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
09:25:34.0906 1476 MSTEE - ok
09:25:35.0000 1476 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
09:25:35.0031 1476 Mup - ok
09:25:35.0093 1476 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
09:25:35.0234 1476 NABTSFEC - ok
09:25:35.0328 1476 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
09:25:35.0468 1476 NDIS - ok
09:25:35.0515 1476 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
09:25:35.0656 1476 NdisIP - ok
09:25:35.0718 1476 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
09:25:35.0765 1476 NdisTapi - ok
09:25:35.0812 1476 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
09:25:35.0937 1476 Ndisuio - ok
09:25:35.0953 1476 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
09:25:36.0093 1476 NdisWan - ok
09:25:36.0156 1476 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
09:25:36.0187 1476 NDProxy - ok
09:25:36.0218 1476 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
09:25:36.0343 1476 NetBIOS - ok
09:25:36.0390 1476 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
09:25:36.0546 1476 NetBT - ok
09:25:36.0625 1476 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
09:25:36.0734 1476 NIC1394 - ok
09:25:36.0843 1476 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
09:25:36.0968 1476 Npfs - ok
09:25:37.0031 1476 NSCIRDA (2adc0ca9945c65284b3d19bc18765974) C:\WINDOWS\system32\DRIVERS\nscirda.sys
09:25:37.0156 1476 NSCIRDA - ok
09:25:37.0265 1476 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
09:25:37.0390 1476 Ntfs - ok
09:25:37.0453 1476 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
09:25:37.0593 1476 Null - ok
09:25:37.0671 1476 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
09:25:37.0812 1476 NwlnkFlt - ok
09:25:37.0906 1476 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
09:25:38.0031 1476 NwlnkFwd - ok
09:25:38.0109 1476 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
09:25:38.0234 1476 ohci1394 - ok
09:25:38.0312 1476 Parport (46f8db73b4a53e543f8e371dc7c75bae) C:\WINDOWS\system32\drivers\Parport.sys
09:25:38.0437 1476 Parport - ok
09:25:38.0515 1476 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
09:25:38.0640 1476 PartMgr - ok
09:25:38.0718 1476 ParVdm (1fae19d0457176318bba4a8795656ebc) C:\WINDOWS\system32\drivers\ParVdm.sys
09:25:38.0859 1476 ParVdm - ok
09:25:38.0953 1476 PCI (6ce351d149cb4befc702951e471e1730) C:\WINDOWS\system32\DRIVERS\pci.sys
09:25:39.0078 1476 PCI - ok
09:25:39.0156 1476 PCIDump - ok
09:25:39.0218 1476 PCIIde (2da4ec85e0ea7a45c6b2a05820492d5a) C:\WINDOWS\system32\DRIVERS\pciide.sys
09:25:39.0343 1476 PCIIde - ok
09:25:39.0406 1476 Pcmcia (4fc31e6c19a5ce5198b1abff94cae758) C:\WINDOWS\system32\DRIVERS\pcmcia.sys
09:25:39.0531 1476 Pcmcia - ok
09:25:39.0578 1476 PDCOMP - ok
09:25:39.0593 1476 PDFRAME - ok
09:25:39.0609 1476 PDRELI - ok
09:25:39.0625 1476 PDRFRAME - ok
09:25:39.0640 1476 perc2 - ok
09:25:39.0671 1476 perc2hib - ok
09:25:39.0937 1476 pfc (957b82ec80ad7ead64e5e47df6b0dc40) C:\WINDOWS\system32\drivers\pfc.sys
09:25:39.0968 1476 pfc ( UnsignedFile.Multi.Generic ) - warning
09:25:39.0968 1476 pfc - detected UnsignedFile.Multi.Generic (1)
09:25:40.0046 1476 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
09:25:40.0187 1476 PptpMiniport - ok
09:25:40.0265 1476 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
09:25:40.0390 1476 PSched - ok
09:25:40.0453 1476 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
09:25:40.0578 1476 Ptilink - ok
09:25:40.0671 1476 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\WINDOWS\system32\Drivers\PxHelp20.sys
09:25:40.0687 1476 PxHelp20 - ok
09:25:40.0703 1476 ql1080 - ok
09:25:40.0734 1476 Ql10wnt - ok
09:25:40.0765 1476 ql12160 - ok
09:25:40.0796 1476 ql1240 - ok
09:25:40.0828 1476 ql1280 - ok
09:25:40.0859 1476 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
09:25:41.0000 1476 RasAcd - ok
09:25:41.0109 1476 Rasirda (0207d26ddf796a193ccd9f83047bb5fc) C:\WINDOWS\system32\DRIVERS\rasirda.sys
09:25:41.0171 1476 Rasirda - ok
09:25:41.0265 1476 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
09:25:41.0390 1476 Rasl2tp - ok
09:25:41.0468 1476 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
09:25:41.0593 1476 RasPppoe - ok
09:25:41.0656 1476 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
09:25:41.0781 1476 Raspti - ok
09:25:41.0859 1476 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
09:25:41.0984 1476 Rdbss - ok
09:25:42.0062 1476 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
09:25:42.0187 1476 RDPCDD - ok
09:25:42.0265 1476 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
09:25:42.0406 1476 rdpdr - ok
09:25:42.0484 1476 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys
09:25:42.0531 1476 RDPWD - ok
09:25:42.0578 1476 redbook (611bfd220305be3a85ae876ea47d4aa5) C:\WINDOWS\system32\DRIVERS\redbook.sys
09:25:42.0703 1476 redbook - ok
09:25:42.0812 1476 sdbus (8d04819a3ce51b9eb47e5689b44d43c4) C:\WINDOWS\system32\DRIVERS\sdbus.sys
09:25:42.0937 1476 sdbus - ok
09:25:43.0031 1476 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
09:25:43.0156 1476 Secdrv - ok
09:25:43.0250 1476 Serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
09:25:43.0375 1476 Serenum - ok
09:25:43.0437 1476 Serial (b842729337c9b921615c40d3c1a1af96) C:\WINDOWS\system32\drivers\Serial.sys
09:25:43.0562 1476 Serial - ok
09:25:43.0609 1476 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
09:25:43.0734 1476 Sfloppy - ok
09:25:43.0750 1476 Simbad - ok
09:25:43.0796 1476 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
09:25:43.0937 1476 SLIP - ok
09:25:44.0000 1476 Sparrow - ok
09:25:44.0046 1476 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
09:25:44.0187 1476 splitter - ok
09:25:44.0250 1476 sr (94610c8653635e4459316a0050d55ce7) C:\WINDOWS\system32\DRIVERS\sr.sys
09:25:44.0375 1476 sr - ok
09:25:44.0437 1476 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
09:25:44.0468 1476 Srv - ok
09:25:44.0531 1476 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
09:25:44.0656 1476 streamip - ok
09:25:44.0718 1476 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
09:25:44.0828 1476 swenum - ok
09:25:44.0906 1476 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
09:25:45.0015 1476 swmidi - ok
09:25:45.0093 1476 symc810 - ok
09:25:45.0140 1476 symc8xx - ok
09:25:45.0171 1476 sym_hi - ok
09:25:45.0203 1476 sym_u3 - ok
09:25:45.0265 1476 SynTP (cc5da243cfdac58fc0408f7ce24084c5) C:\WINDOWS\system32\DRIVERS\SynTP.sys
09:25:45.0312 1476 SynTP - ok
09:25:45.0359 1476 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
09:25:45.0484 1476 sysaudio - ok
09:25:45.0562 1476 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
09:25:45.0593 1476 Tcpip - ok
09:25:45.0625 1476 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
09:25:45.0750 1476 TDPIPE - ok
09:25:45.0828 1476 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
09:25:45.0937 1476 TDTCP - ok
09:25:46.0015 1476 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
09:25:46.0140 1476 TermDD - ok
09:25:46.0265 1476 tifm21 (e4c85c291ddb3dc5e4a2f227ca465ba6) C:\WINDOWS\system32\drivers\tifm21.sys
09:25:46.0296 1476 tifm21 - ok
09:25:46.0328 1476 TosIde - ok
09:25:46.0390 1476 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
09:25:46.0515 1476 Udfs - ok
09:25:46.0578 1476 ultra - ok
09:25:46.0656 1476 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
09:25:46.0796 1476 Update - ok
09:25:46.0875 1476 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
09:25:47.0000 1476 usbccgp - ok
09:25:47.0078 1476 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
09:25:47.0203 1476 usbehci - ok
09:25:47.0296 1476 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
09:25:47.0406 1476 usbhub - ok
09:25:47.0515 1476 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
09:25:47.0625 1476 usbscan - ok
09:25:47.0687 1476 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
09:25:47.0812 1476 USBSTOR - ok
09:25:47.0875 1476 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
09:25:48.0015 1476 usbuhci - ok
09:25:48.0109 1476 uxkx1 (c085eebdb5824f7ee08c2a57c809db72) C:\WINDOWS\system32\DRIVERS\uxkx1.sys
09:25:48.0171 1476 uxkx1 - ok
09:25:48.0250 1476 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
09:25:48.0375 1476 VgaSave - ok
09:25:48.0421 1476 ViaIde - ok
09:25:48.0484 1476 VolSnap (28a4b296b47782173c346e376cb374d1) C:\WINDOWS\system32\drivers\VolSnap.sys
09:25:48.0609 1476 VolSnap - ok
09:25:48.0718 1476 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
09:25:48.0828 1476 Wanarp - ok
09:25:48.0890 1476 WDICA - ok
09:25:48.0953 1476 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
09:25:49.0078 1476 wdmaud - ok
09:25:49.0203 1476 winachsf (9692ab8ba2dcd649a86b1b9b81154278) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
09:25:49.0250 1476 winachsf - ok
09:25:49.0328 1476 WmiAcpi (c42584fd66ce9e17403aebca199f7bdb) C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
09:25:49.0453 1476 WmiAcpi - ok
09:25:49.0531 1476 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
09:25:49.0640 1476 WS2IFSL - ok
09:25:49.0734 1476 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
09:25:49.0859 1476 WSTCODEC - ok
09:25:49.0953 1476 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
09:25:49.0984 1476 WudfPf - ok
09:25:50.0015 1476 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
09:25:50.0046 1476 WudfRd - ok
09:25:50.0109 1476 MBR (0x1B8) (413fc2a0c716421b3158746d63736515) \Device\Harddisk0\DR0
09:25:50.0312 1476 \Device\Harddisk0\DR0 - ok
09:25:50.0328 1476 Boot (0x1200) (ad6e4e26669456032452fb55a5dbf45e) \Device\Harddisk0\DR0\Partition0
09:25:50.0328 1476 \Device\Harddisk0\DR0\Partition0 - ok
09:25:50.0328 1476 ============================================================
09:25:50.0328 1476 Scan finished
09:25:50.0328 1476 ============================================================
09:25:50.0468 3540 Detected object count: 3
09:25:50.0468 3540 Actual detected object count: 3
09:25:57.0546 3540 imagedrv ( UnsignedFile.Multi.Generic ) - skipped by user
09:25:57.0546 3540 imagedrv ( UnsignedFile.Multi.Generic ) - User select action: Skip
09:25:57.0546 3540 imagesrv ( UnsignedFile.Multi.Generic ) - skipped by user
09:25:57.0546 3540 imagesrv ( UnsignedFile.Multi.Generic ) - User select action: Skip
09:25:57.0546 3540 pfc ( UnsignedFile.Multi.Generic ) - skipped by user
09:25:57.0546 3540 pfc ( UnsignedFile.Multi.Generic ) - User select action: Skip
09:26:01.0828 2884 Deinitialize success

#14 Příspěvek od **cernohous13** » 05 Led 2012 14:26

Než se dostaví motji proveď

Klikni na https://www.virustotal.com/cs/
klik "Procházet" > do zadávacího pole "Název souboru" jen zkopíruj:

C:\WINDOWS\system32\drivers\pfc.sys

"Send file" (pokud byl již testován, nech testovat znovu - Reanalyse)
Trpělivě vyčkej dokončení scanu dokud se neobjeví konečný výsledek např.0/41
Do fóra zkopíruj výsledný log. nebo odkaz z adresního řádku na stránku.
Pokud nebude nález stačí jen oznámit

totéž se soubory:
C:\WINDOWS\system32\Drivers\imagedrv.sys
C:\WINDOWS\system32\DRIVERS\imagesrv.sys

VIRY.CZ

Zavirování - proces: "cislo:cislo.exe"

Zavirování - proces: "cislo:cislo.exe"

Re: Zavirování - proces: "cislo:cislo.exe"

Re: Zavirování - proces: "cislo:cislo.exe"

Re: Zavirování - proces: "cislo:cislo.exe"

Re: Zavirování - proces: "cislo:cislo.exe"

Re: Zavirování - proces: "cislo:cislo.exe"

Re: Zavirování - proces: "cislo:cislo.exe"

Re: Zavirování - proces: "cislo:cislo.exe"

Re: Zavirování - proces: "cislo:cislo.exe"

Re: Zavirování - proces: "cislo:cislo.exe"

Re: Zavirování - proces: "cislo:cislo.exe"

Re: Zavirování - proces: "cislo:cislo.exe"

Re: Zavirování - proces: "cislo:cislo.exe"

Re: Zavirování - proces: "cislo:cislo.exe"