Trojan a rundll32.exe

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
Petura
Návštěvník
Návštěvník
Příspěvky: 201
Registrován: 16 Lis 2005 16:09

Trojan a rundll32.exe

#1 Příspěvek od Petura »

Dobrý večer, prosím o pomoc. Avast mi našel trojana a při vypínaní windousů vyskakuje hláška že nejde ukončit prgram rundll32.exe.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Naďa at 2012-07-16 21:53:37
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 72 GB (94%) free of 76 GB
Total RAM: 503 MB (24% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:53:48, on 16.7.2012
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\RunDll32.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe
C:\Program Files\Application Updater\ApplicationUpdater.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\IObit\IObit Malware Fighter\IMF.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\wincmd\WINCMD32.EXE
c:\StahovanĂ­\RSIT.exe
C:\Program Files\trend micro\Naďa.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files\IObit Toolbar\IE\6.0\iobitToolbarIE.dll
O2 - BHO: IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files\IObit Toolbar\IE\6.0\iobitToolbarIE.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O3 - Toolbar: IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files\IObit Toolbar\IE\6.0\iobitToolbarIE.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SearchSettings] "C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe"
O4 - HKLM\..\Run: [IObit Malware Fighter] "C:\Program Files\IObit\IObit Malware Fighter\IMF.exe" /autostart
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSIDLL] rundll32.exe msitav32.dll,RduGLSOed
O4 - HKCU\..\Run: [Advanced SystemCare 5] "C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe" /AutoStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 5 (AdvancedSystemCareService5) - IObit - C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

--
End of file - 5365 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Naďa\Data aplikací\Mozilla\Firefox\Profiles\bvtmvt57.default

prefs.js - "browser.startup.homepage" - "www.seznam.cz"
prefs.js - "keyword.URL" - "http://search.yahoo.com/search?fr=green ... =380920&p="

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.3.300.265 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_265.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
yahoo.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0BDA0769-FD72-49F4-9266-E1FB004F4D8F}]
IObit Toolbar - C:\Program Files\IObit Toolbar\IE\6.0\iobitToolbarIE.dll [2012-06-27 1207176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - IObit Toolbar - C:\Program Files\IObit Toolbar\IE\6.0\iobitToolbarIE.dll [2012-06-27 1207176]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Cmaudio"=RunDll32 cmicnfg.cpl,CMICtrlWnd []
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-11-25 81000]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
""= []
"SearchSettings"=C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe [2012-06-27 1090440]
"IObit Malware Fighter"=C:\Program Files\IObit\IObit Malware Fighter\IMF.exe [2012-07-02 4473728]
"igfxtray"=C:\WINDOWS\system32\igfxtray.exe [2005-09-20 94208]
"igfxhkcmd"=C:\WINDOWS\system32\hkcmd.exe [2005-09-20 77824]
"igfxpers"=C:\WINDOWS\system32\igfxpers.exe [2005-09-20 114688]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"MSIDLL"=msitav32.dll,RduGLSOed []
"Advanced SystemCare 5"=C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe [2012-05-28 288128]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2005-09-20 135168]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"c:\Záloha\Autocad 2004\crack\AutoCad_keygen.exe"="c:\Záloha\Autocad 2004\crack\AutoCad_keygen.exe:*:Enabled:AutoCad_keygen"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.scr - open - "c:\WINDOWS\notepad.exe" "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2012-07-16 21:53:38 ----D---- C:\Program Files\trend micro
2012-07-16 21:53:37 ----D---- C:\rsit
2012-07-16 21:53:11 ----D---- C:\StahovanĂ­
2012-07-16 20:56:03 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2012-07-16 20:56:03 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2012-07-16 20:45:33 ----RA---- C:\WINDOWS\system32\igfxres.dll
2012-07-16 20:37:04 ----D---- C:\WINDOWS\Prefetch
2012-07-16 20:28:58 ----A---- C:\WINDOWS\system32\drivers\RTL8139.sys
2012-07-16 20:26:26 ----A---- C:\WINDOWS\system32\irclass.dll
2012-07-16 20:26:25 ----A---- C:\WINDOWS\system32\spxcoins.dll
2012-07-16 20:26:08 ----RA---- C:\WINDOWS\SET35.tmp
2012-07-16 20:26:06 ----RA---- C:\WINDOWS\SET29.tmp
2012-07-16 20:26:04 ----RA---- C:\WINDOWS\SET26.tmp
2012-07-16 20:17:32 ----A---- C:\WINDOWS\UPGRADE.TXT
2012-07-16 20:04:24 ----D---- C:\Documents and Settings\Naďa\Data aplikací\wtxpcom
2012-07-16 19:57:43 ----D---- C:\Documents and Settings\Naďa\Data aplikací\Malwarebytes
2012-07-16 19:56:16 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2012-07-16 19:56:15 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2012-07-16 19:56:15 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2012-07-16 19:46:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\IObit
2012-07-16 19:41:14 ----D---- C:\Documents and Settings\Naďa\Data aplikací\Search Settings
2012-07-16 19:41:05 ----D---- C:\Program Files\IObit Toolbar
2012-07-16 19:41:05 ----D---- C:\Program Files\Common Files\Spigot
2012-07-16 19:41:05 ----D---- C:\Program Files\Application Updater
2012-07-16 19:40:24 ----D---- C:\Documents and Settings\Naďa\Data aplikací\IObit
2012-07-16 19:40:22 ----D---- C:\Program Files\IObit
2012-07-16 19:25:55 ----D---- C:\Program Files\Common Files\Adobe
2012-07-16 19:25:55 ----D---- C:\Program Files\Adobe
2012-07-16 19:25:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2012-07-16 19:21:27 ----D---- C:\Program Files\CCleaner
2012-07-16 19:21:10 ----A---- C:\WINDOWS\system32\FlashPlayerInstaller.exe
2012-07-16 19:19:52 ----D---- C:\Documents and Settings\Naďa\Data aplikací\Macromedia
2012-07-16 19:19:52 ----D---- C:\Documents and Settings\Naďa\Data aplikací\Adobe
2012-07-16 19:19:33 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2012-07-16 19:17:27 ----D---- C:\Stahovaní
2012-07-16 19:17:07 ----D---- C:\Documents and Settings\Naďa\Data aplikací\Mozilla
2012-07-16 19:17:02 ----D---- C:\Program Files\Mozilla Maintenance Service
2012-07-16 19:17:02 ----D---- C:\Documents and Settings\All Users\Data aplikací\Mozilla
2012-07-16 19:16:59 ----D---- C:\Program Files\Mozilla Firefox
2012-07-16 19:03:05 ----D---- C:\Program Files\WinZip
2012-07-16 19:02:43 ----A---- C:\WINDOWS\iun6002.exe
2012-07-16 19:02:40 ----D---- C:\Program Files\Codec Pack - All In 1
2012-07-16 19:02:16 ----D---- C:\Program Files\WinRAR
2012-07-16 19:02:05 ----D---- C:\Documents and Settings\All Users\Data aplikací\CyberLink
2012-07-16 19:02:01 ----D---- C:\Program Files\CyberLink
2012-07-16 19:00:27 ----HD---- C:\WINDOWS\ShellNew
2012-07-16 18:56:25 ----A---- C:\WINDOWS\ODBC.INI
2012-07-16 18:50:34 ----D---- C:\WINDOWS\RegisteredPackages
2012-07-16 18:50:07 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2012-07-16 18:50:07 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2012-07-16 18:50:07 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2012-07-16 18:50:06 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2012-07-16 18:50:06 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2012-07-16 18:50:03 ----A---- C:\WINDOWS\system32\MSVCR71.dll
2012-07-16 18:50:03 ----A---- C:\WINDOWS\system32\MSVCP71.dll
2012-07-16 18:50:03 ----A---- C:\WINDOWS\system32\MFC71.dll
2012-07-16 18:50:03 ----A---- C:\WINDOWS\system32\AVASTSS.scr
2012-07-16 18:50:03 ----A---- C:\WINDOWS\system32\aswBoot.exe
2012-07-16 18:50:01 ----D---- C:\Program Files\Alwil Software
2012-07-16 18:48:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\Macrovision
2012-07-16 18:39:00 ----D---- C:\Program Files\Autodesk
2012-07-16 18:38:59 ----D---- C:\Program Files\Common Files\Macrovision Shared
2012-07-16 18:38:59 ----A---- C:\WINDOWS\system32\drivers\CDAC15BA.SYS
2012-07-16 18:38:58 ----A---- C:\WINDOWS\system32\drivers\CDAC11BA.EXE
2012-07-16 18:38:23 ----D---- C:\Program Files\AnswerWorks 4.0
2012-07-16 18:38:22 ----D---- C:\Program Files\Microsoft Office
2012-07-16 18:38:21 ----D---- C:\Program Files\Common Files\Designer
2012-07-16 18:37:46 ----D---- C:\Program Files\Common Files\Autodesk Shared
2012-07-16 18:37:46 ----D---- C:\Program Files\AutoCAD 2004
2012-07-16 18:37:46 ----D---- C:\Documents and Settings\Naďa\Data aplikací\Autodesk
2012-07-16 18:37:46 ----D---- C:\Documents and Settings\All Users\Data aplikací\Autodesk
2012-07-16 18:34:30 ----A---- C:\WINDOWS\system32\msitav32.dll
2012-07-16 18:32:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\ACD Systems
2012-07-16 18:32:10 ----D---- C:\Program Files\Common Files\ACD Systems
2012-07-16 18:32:10 ----D---- C:\Program Files\ACD Systems
2012-07-16 18:32:09 ----A---- C:\WINDOWS\system32\drivers\pfc.sys
2012-07-16 18:31:16 ----D---- C:\WINDOWS\Downloaded Installations
2012-07-16 18:29:31 ----D---- C:\Záloha
2012-07-16 18:29:05 ----SHD---- C:\RECYCLER
2012-07-16 18:28:10 ----D---- C:\Program Files\wincmd
2012-07-16 18:28:10 ----A---- C:\WINDOWS\wincmd.ini
2012-07-16 18:28:10 ----A---- C:\WINDOWS\UC.PIF
2012-07-16 18:28:10 ----A---- C:\WINDOWS\RAR.PIF
2012-07-16 18:28:10 ----A---- C:\WINDOWS\PKZIP.PIF
2012-07-16 18:28:10 ----A---- C:\WINDOWS\PKUNZIP.PIF
2012-07-16 18:28:10 ----A---- C:\WINDOWS\NOCLOSE.PIF
2012-07-16 18:28:10 ----A---- C:\WINDOWS\LHA.PIF
2012-07-16 18:28:10 ----A---- C:\WINDOWS\ARJ.PIF
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuTRK.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuTHA.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuSVE.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuRUS.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuPTG.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuPTB.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuPLK.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuNOR.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuNLD.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuKOR.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuJPN.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuITA.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuCHT.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuCHS.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuHUN.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuHEB.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuFRC.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuFRA.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuFIN.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuESP.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuENG.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuELL.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmudlg.exe
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuDEU.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuDAN.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuCSY.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuARB.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuARA.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\iAlmCoIn_v4396.dll
2012-07-16 18:24:21 ----RA---- C:\WINDOWS\system32\igldev32.dll
2012-07-16 18:24:18 ----RA---- C:\WINDOWS\system32\iglicd32.dll
2012-07-16 18:24:18 ----RA---- C:\WINDOWS\system32\igfxext.exe
2012-07-16 18:24:18 ----RA---- C:\WINDOWS\system32\igfxexps.dll
2012-07-16 18:24:18 ----RA---- C:\WINDOWS\system32\ialmrem.dll
2012-07-16 18:24:16 ----RA---- C:\WINDOWS\system32\igfxpers.exe
2012-07-16 18:24:15 ----RA---- C:\WINDOWS\system32\igfxzoom.exe
2012-07-16 18:24:15 ----RA---- C:\WINDOWS\system32\igfxtray.exe
2012-07-16 18:24:15 ----RA---- C:\WINDOWS\system32\igfxress.dll
2012-07-16 18:24:15 ----RA---- C:\WINDOWS\system32\igfxdo.dll
2012-07-16 18:24:15 ----RA---- C:\WINDOWS\system32\igfxdev.dll
2012-07-16 18:24:15 ----RA---- C:\WINDOWS\system32\hkcmd.exe
2012-07-16 18:24:14 ----RA---- C:\WINDOWS\system32\igfxsrvc.exe
2012-07-16 18:24:14 ----RA---- C:\WINDOWS\system32\igfxsrvc.dll
2012-07-16 18:24:14 ----RA---- C:\WINDOWS\system32\igfxpph.dll
2012-07-16 18:24:14 ----RA---- C:\WINDOWS\system32\igfxcfg.exe
2012-07-16 18:24:14 ----RA---- C:\WINDOWS\system32\hccutils.dll
2012-07-16 18:24:13 ----RA---- C:\WINDOWS\system32\ialmrnt5.dll
2012-07-16 18:24:13 ----RA---- C:\WINDOWS\system32\ialmdnt5.dll
2012-07-16 18:24:13 ----RA---- C:\WINDOWS\system32\ialmdev5.dll
2012-07-16 18:24:13 ----RA---- C:\WINDOWS\system32\ialmdd5.dll
2012-07-16 18:24:13 ----RA---- C:\WINDOWS\system32\drivers\ialmnt5.sys
2012-07-16 18:23:28 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2012-07-16 18:23:25 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys
2012-07-16 18:23:10 ----RA---- C:\WINDOWS\system32\udaprop.dll
2012-07-16 18:23:10 ----RA---- C:\WINDOWS\system32\drivers\cmuda.sys
2012-07-16 18:23:10 ----RA---- C:\WINDOWS\system32\cmuda.dll
2012-07-16 18:23:10 ----RA---- C:\WINDOWS\system32\cmirmdrv.exe
2012-07-16 18:23:10 ----RA---- C:\WINDOWS\system32\cmirmdrv.dll
2012-07-16 18:23:10 ----RA---- C:\WINDOWS\system32\Audio3D.dll
2012-07-16 18:23:10 ----RA---- C:\WINDOWS\system32\a3d.dll
2012-07-16 18:23:09 ----A---- C:\WINDOWS\system32\ksuser.dll
2012-07-16 18:23:03 ----A---- C:\WINDOWS\CMISETUP.INI
2012-07-16 18:23:02 ----A---- C:\WINDOWS\CMCDPLAY.INI
2012-07-16 18:23:00 ----A---- C:\WINDOWS\Wininit.ini
2012-07-16 18:22:55 ----D---- C:\Program Files\C-Media 3D Audio
2012-07-16 18:22:55 ----A---- C:\WINDOWS\CMIUninstall.exe
2012-07-16 18:22:55 ----A---- C:\WINDOWS\CmiRmRedundDir.exe
2012-07-16 18:22:55 ----A---- C:\WINDOWS\CMIRmDriver.dll
2012-07-16 18:22:54 ----HD---- C:\Program Files\InstallShield Installation Information
2012-07-16 18:22:39 ----D---- C:\Program Files\Common Files\InstallShield
2012-07-16 18:22:09 ----A---- C:\WINDOWS\Ascd_tmp.ini
2012-07-16 18:22:08 ----A---- C:\WINDOWS\system32\drivers\ASUSHWIO.SYS
2012-07-16 18:19:35 ----D---- C:\Documents and Settings\Naďa\Data aplikací\Identities
2012-07-16 18:19:33 ----HD---- C:\Program Files\Uninstall Information
2012-07-16 18:19:25 ----SD---- C:\Documents and Settings\Naďa\Data aplikací\Microsoft
2012-07-16 18:19:25 ----ASH---- C:\Documents and Settings\Naďa\Data aplikací\desktop.ini
2012-07-16 18:18:40 ----D---- C:\WINDOWS\SoftwareDistribution
2012-07-16 18:18:38 ----SD---- C:\WINDOWS\system32\Microsoft
2012-07-16 18:18:38 ----N---- C:\WINDOWS\SchedLgU.Txt
2012-07-16 18:16:23 ----AS---- C:\WINDOWS\bootstat.dat
2012-07-16 18:13:59 ----D---- C:\WINDOWS\system32\xircom
2012-07-16 18:13:59 ----D---- C:\Program Files\xerox
2012-07-16 18:13:59 ----D---- C:\Program Files\microsoft frontpage
2012-07-16 18:13:42 ----RASH---- C:\MSDOS.SYS
2012-07-16 18:13:42 ----RASH---- C:\IO.SYS
2012-07-16 18:13:42 ----A---- C:\WINDOWS\control.ini
2012-07-16 18:13:42 ----A---- C:\CONFIG.SYS
2012-07-16 18:13:42 ----A---- C:\AUTOEXEC.BAT
2012-07-16 18:13:22 ----A---- C:\WINDOWS\system32\mapi32.dll
2012-07-16 18:12:27 ----SD---- C:\WINDOWS\Downloaded Program Files
2012-07-16 18:12:27 ----RD---- C:\WINDOWS\Offline Web Pages
2012-07-16 18:12:16 ----HD---- C:\Program Files\WindowsUpdate
2012-07-16 18:12:13 ----D---- C:\Program Files\Online Services
2012-07-16 18:11:57 ----D---- C:\WINDOWS\system32\DirectX
2012-07-16 18:11:38 ----A---- C:\WINDOWS\system32\atrace.dll
2012-07-16 18:11:36 ----A---- C:\WINDOWS\system32\desktop.ini
2012-07-16 18:11:36 ----A---- C:\WINDOWS\desktop.ini
2012-07-16 18:11:29 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2012-07-16 18:11:27 ----D---- C:\Program Files\Common Files\Services
2012-07-16 18:11:27 ----A---- C:\WINDOWS\system32\acctres.dll
2012-07-16 18:11:24 ----SD---- C:\WINDOWS\Tasks
2012-07-16 18:11:24 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2012-07-16 18:11:23 ----D---- C:\Program Files\Common Files\MSSoap
2012-07-16 18:11:20 ----D---- C:\WINDOWS\srchasst
2012-07-16 18:11:19 ----D---- C:\WINDOWS\system32\Macromed
2012-07-16 18:11:16 ----A---- C:\WINDOWS\system32\wuweb.dll
2012-07-16 18:11:16 ----A---- C:\WINDOWS\system32\wucltui.dll
2012-07-16 18:11:16 ----A---- C:\WINDOWS\system32\wuauserv.dll
2012-07-16 18:11:16 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2012-07-16 18:11:16 ----A---- C:\WINDOWS\system32\wuaueng.dll
2012-07-16 18:11:15 ----A---- C:\WINDOWS\system32\wups.dll
2012-07-16 18:11:15 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2012-07-16 18:11:15 ----A---- C:\WINDOWS\system32\wuauclt.exe
2012-07-16 18:11:15 ----A---- C:\WINDOWS\system32\wuapi.dll
2012-07-16 18:11:15 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2012-07-16 18:11:15 ----A---- C:\WINDOWS\system32\qmgr.dll
2012-07-16 18:11:15 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2012-07-16 18:11:15 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2012-07-16 18:11:11 ----D---- C:\Program Files\Movie Maker
2012-07-16 18:11:07 ----A---- C:\WINDOWS\system32\safrslv.dll
2012-07-16 18:11:07 ----A---- C:\WINDOWS\system32\safrdm.dll
2012-07-16 18:11:07 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2012-07-16 18:11:07 ----A---- C:\WINDOWS\system32\racpldlg.dll
2012-07-16 18:11:04 ----A---- C:\WINDOWS\system32\fltMc.exe
2012-07-16 18:11:04 ----A---- C:\WINDOWS\system32\fltlib.dll
2012-07-16 18:11:04 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2012-07-16 18:11:03 ----D---- C:\WINDOWS\system32\Restore
2012-07-16 18:11:03 ----A---- C:\WINDOWS\system32\srsvc.dll
2012-07-16 18:11:03 ----A---- C:\WINDOWS\system32\srrstr.dll
2012-07-16 18:11:03 ----A---- C:\WINDOWS\system32\srclient.dll
2012-07-16 18:11:03 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2012-07-16 18:11:03 ----A---- C:\WINDOWS\system32\ils.dll
2012-07-16 18:11:03 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2012-07-16 18:11:02 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2012-07-16 18:11:02 ----A---- C:\WINDOWS\system32\msconf.dll
2012-07-16 18:11:02 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2012-07-16 18:11:02 ----A---- C:\WINDOWS\system32\mnmdd.dll
2012-07-16 18:10:59 ----D---- C:\Program Files\NetMeeting
2012-07-16 18:10:59 ----A---- C:\WINDOWS\system32\msoert2.dll
2012-07-16 18:10:59 ----A---- C:\WINDOWS\system32\msoeacct.dll
2012-07-16 18:10:58 ----A---- C:\WINDOWS\system32\inetres.dll
2012-07-16 18:10:58 ----A---- C:\WINDOWS\system32\inetcomm.dll
2012-07-16 18:10:57 ----D---- C:\Program Files\Outlook Express
2012-07-16 18:10:57 ----A---- C:\WINDOWS\system32\schedsvc.dll
2012-07-16 18:10:57 ----A---- C:\WINDOWS\system32\mstinit.exe
2012-07-16 18:10:57 ----A---- C:\WINDOWS\system32\mstask.dll
2012-07-16 18:10:56 ----A---- C:\WINDOWS\system32\isign32.dll
2012-07-16 18:10:56 ----A---- C:\WINDOWS\system32\inetcfg.dll
2012-07-16 18:10:56 ----A---- C:\WINDOWS\system32\icwphbk.dll
2012-07-16 18:10:56 ----A---- C:\WINDOWS\system32\icwdial.dll
2012-07-16 18:10:51 ----D---- C:\Program Files\Common Files\System
2012-07-16 18:10:46 ----D---- C:\Program Files\Internet Explorer
2012-07-16 18:10:19 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2012-07-16 18:10:12 ----D---- C:\Program Files\ComPlus Applications
2012-07-16 18:10:10 ----A---- C:\WINDOWS\vbaddin.ini
2012-07-16 18:10:10 ----A---- C:\WINDOWS\vb.ini
2012-07-16 18:10:06 ----D---- C:\WINDOWS\Registration
2012-07-16 18:10:01 ----D---- C:\Program Files\Windows Media Player
2012-07-16 18:09:56 ----D---- C:\Program Files\Messenger
2012-07-16 18:09:52 ----D---- C:\Program Files\MSN Gaming Zone
2012-07-16 18:09:52 ----A---- C:\WINDOWS\system32\write.exe
2012-07-16 18:09:43 ----A---- C:\WINDOWS\system32\sndvol32.exe
2012-07-16 18:09:43 ----A---- C:\WINDOWS\system32\hticons.dll
2012-07-16 18:09:42 ----A---- C:\WINDOWS\system32\winchat.exe
2012-07-16 18:09:42 ----A---- C:\WINDOWS\system32\avwav.dll
2012-07-16 18:09:42 ----A---- C:\WINDOWS\system32\avtapi.dll
2012-07-16 18:09:42 ----A---- C:\WINDOWS\system32\avmeter.dll
2012-07-16 18:09:35 ----A---- C:\WINDOWS\system32\sol.exe
2012-07-16 18:09:35 ----A---- C:\WINDOWS\system32\charmap.exe
2012-07-16 18:09:35 ----A---- C:\WINDOWS\system32\getuname.dll
2012-07-16 18:09:35 ----A---- C:\WINDOWS\system32\calc.exe
2012-07-16 18:09:34 ----A---- C:\WINDOWS\system32\winmine.exe
2012-07-16 18:09:34 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2012-07-16 18:09:34 ----A---- C:\WINDOWS\system32\reset.exe
2012-07-16 18:09:34 ----A---- C:\WINDOWS\system32\mshearts.exe
2012-07-16 18:09:34 ----A---- C:\WINDOWS\system32\freecell.exe
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\tslabels.ini
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\tskill.exe
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\tscon.exe
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\shadow.exe
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\rwinsta.exe
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\regini.exe
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\qwinsta.exe
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\qappsrv.exe
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\msg.exe
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\logoff.exe
2012-07-16 18:09:32 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2012-07-16 18:09:32 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2012-07-16 18:09:32 ----A---- C:\WINDOWS\system32\cdmodem.dll
2012-07-16 18:09:31 ----A---- C:\WINDOWS\system32\stclient.dll
2012-07-16 18:09:31 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2012-07-16 18:09:31 ----A---- C:\WINDOWS\system32\mtxex.dll
2012-07-16 18:09:31 ----A---- C:\WINDOWS\system32\mtxdm.dll
2012-07-16 18:09:31 ----A---- C:\WINDOWS\system32\comsnap.dll
2012-07-16 18:09:31 ----A---- C:\WINDOWS\system32\comrepl.dll
2012-07-16 18:09:31 ----A---- C:\WINDOWS\system32\comaddin.dll
2012-07-16 18:09:26 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2012-07-16 18:09:25 ----A---- C:\WINDOWS\system32\accwiz.exe
2012-07-16 18:09:24 ----D---- C:\Program Files\Windows NT
2012-07-16 18:09:24 ----A---- C:\WINDOWS\system32\sndrec32.exe
2012-07-16 18:09:24 ----A---- C:\WINDOWS\system32\mplay32.exe
2012-07-16 18:09:24 ----A---- C:\WINDOWS\system32\hypertrm.dll
2012-07-16 18:09:23 ----A---- C:\WINDOWS\system32\spider.exe
2012-07-16 18:09:23 ----A---- C:\WINDOWS\system32\mspaint.exe
2012-07-16 18:09:23 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2012-07-16 18:09:23 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2012-07-16 18:09:23 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2012-07-16 18:09:23 ----A---- C:\WINDOWS\system32\clipbrd.exe
2012-07-16 18:09:22 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2012-07-16 18:09:22 ----A---- C:\WINDOWS\system32\sessmgr.exe
2012-07-16 18:09:22 ----A---- C:\WINDOWS\system32\remotepg.dll
2012-07-16 18:09:22 ----A---- C:\WINDOWS\system32\rdshost.exe
2012-07-16 18:09:22 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2012-07-16 18:09:22 ----A---- C:\WINDOWS\system32\rdchost.dll
2012-07-16 18:09:22 ----A---- C:\WINDOWS\system32\mstscax.dll
2012-07-16 18:09:22 ----A---- C:\WINDOWS\system32\mstsc.exe
2012-07-16 18:09:21 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2012-07-16 18:09:21 ----A---- C:\WINDOWS\system32\termsrv.dll
2012-07-16 18:09:21 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2012-07-16 18:09:21 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2012-07-16 18:09:21 ----A---- C:\WINDOWS\system32\rdpclip.exe
2012-07-16 18:09:21 ----A---- C:\WINDOWS\system32\qprocess.exe
2012-07-16 18:09:21 ----A---- C:\WINDOWS\system32\icaapi.dll
2012-07-16 18:09:20 ----D---- C:\WINDOWS\system32\MsDtc
2012-07-16 18:09:20 ----A---- C:\WINDOWS\system32\xolehlp.dll
2012-07-16 18:09:20 ----A---- C:\WINDOWS\system32\mtxoci.dll
2012-07-16 18:09:20 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2012-07-16 18:09:20 ----A---- C:\WINDOWS\system32\msdtctm.dll
2012-07-16 18:09:20 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2012-07-16 18:09:20 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2012-07-16 18:09:19 ----D---- C:\WINDOWS\system32\Com
2012-07-16 18:09:19 ----A---- C:\WINDOWS\system32\msdtclog.dll
2012-07-16 18:09:19 ----A---- C:\WINDOWS\system32\msdtc.exe
2012-07-16 18:09:19 ----A---- C:\WINDOWS\system32\colbact.dll
2012-07-16 18:09:18 ----A---- C:\WINDOWS\system32\comuid.dll
2012-07-16 18:09:18 ----A---- C:\WINDOWS\system32\comsvcs.dll
2012-07-16 18:09:18 ----A---- C:\WINDOWS\system32\clbcatex.dll
2012-07-16 18:09:18 ----A---- C:\WINDOWS\system32\catsrvut.dll
2012-07-16 18:09:18 ----A---- C:\WINDOWS\system32\catsrvps.dll
2012-07-16 18:09:18 ----A---- C:\WINDOWS\system32\catsrv.dll
2012-07-16 18:09:17 ----A---- C:\WINDOWS\system32\clbcatq.dll
2012-07-16 18:09:11 ----A---- C:\WINDOWS\system32\servdeps.dll
2012-07-16 18:09:11 ----A---- C:\WINDOWS\system32\mmfutil.dll
2012-07-16 18:09:08 ----A---- C:\WINDOWS\system32\licwmi.dll
2012-07-16 18:09:08 ----A---- C:\WINDOWS\system32\cmprops.dll
2012-07-16 18:09:05 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
2012-07-16 18:09:04 ----A---- C:\WINDOWS\system32\drivers\termdd.sys

======List of files/folders modified in the last 1 month======

2012-07-16 22:24:24 ----D---- C:\WINDOWS\system
2012-07-16 22:24:23 ----D---- C:\WINDOWS\system32\Setup
2012-07-16 22:24:14 ----D---- C:\WINDOWS\system32\usmt
2012-07-16 22:24:03 ----D---- C:\WINDOWS\AppPatch
2012-07-16 22:24:02 ----D---- C:\WINDOWS\ehome
2012-07-16 22:24:01 ----D---- C:\WINDOWS\ime
2012-07-16 22:24:00 ----RSD---- C:\WINDOWS\Fonts
2012-07-16 22:23:59 ----D---- C:\WINDOWS\Media
2012-07-16 22:23:49 ----D---- C:\WINDOWS\PeerNet
2012-07-16 22:23:39 ----D---- C:\WINDOWS\system32\npp
2012-07-16 22:23:32 ----D---- C:\WINDOWS\msagent
2012-07-16 22:21:43 ----D---- C:\WINDOWS\system32\1029
2012-07-16 22:21:36 ----D---- C:\WINDOWS\twain_32
2012-07-16 22:21:24 ----D---- C:\WINDOWS\system32\icsxml
2012-07-16 22:20:57 ----D---- C:\WINDOWS\system32\1033
2012-07-16 22:19:57 ----D---- C:\WINDOWS\Driver Cache
2012-07-16 22:19:56 ----D---- C:\WINDOWS\WinSxS
2012-07-16 21:53:38 ----RD---- C:\Program Files
2012-07-16 21:51:35 ----D---- C:\WINDOWS
2012-07-16 21:51:33 ----D---- C:\WINDOWS\system32\CatRoot2
2012-07-16 21:08:54 ----D---- C:\WINDOWS\Debug
2012-07-16 20:58:20 ----D---- C:\WINDOWS\Temp
2012-07-16 20:56:03 ----D---- C:\WINDOWS\system32\drivers
2012-07-16 20:55:18 ----D---- C:\WINDOWS\system32
2012-07-16 20:49:17 ----D---- C:\WINDOWS\security
2012-07-16 20:46:07 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-07-16 20:45:50 ----HD---- C:\WINDOWS\inf
2012-07-16 20:37:10 ----SHD---- C:\System Volume Information
2012-07-16 20:36:42 ----D---- C:\WINDOWS\system32\config
2012-07-16 20:35:36 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-07-16 20:33:08 ----D---- C:\WINDOWS\Help
2012-07-16 20:32:36 ----A---- C:\WINDOWS\ODBCINST.INI
2012-07-16 20:32:21 ----ASH---- C:\WINDOWS\fonts\desktop.ini
2012-07-16 20:32:18 ----D---- C:\WINDOWS\system32\ias
2012-07-16 20:31:56 ----RD---- C:\WINDOWS\Web
2012-07-16 20:31:41 ----A---- C:\WINDOWS\win.ini
2012-07-16 20:31:38 ----D---- C:\WINDOWS\system32\oobe
2012-07-16 20:30:29 ----D---- C:\WINDOWS\system32\wbem
2012-07-16 20:29:57 ----SH---- C:\boot.ini
2012-07-16 20:26:30 ----A---- C:\WINDOWS\system.ini
2012-07-16 20:26:17 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2012-07-16 20:26:11 ----D---- C:\WINDOWS\system32\CatRoot
2012-07-16 19:41:13 ----SHD---- C:\WINDOWS\Installer
2012-07-16 19:41:05 ----D---- C:\Program Files\Common Files
2012-07-16 19:00:49 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-07-16 19:00:22 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2012-07-16 18:19:24 ----D---- C:\Documents and Settings
2012-07-16 18:13:59 ----D---- C:\WINDOWS\repair
2012-07-16 18:11:07 ----D---- C:\WINDOWS\pchealth
2012-07-16 18:09:49 ----D---- C:\WINDOWS\Cursors
2012-07-16 17:59:50 ----D---- C:\WINDOWS\system32\spool

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-11-25 27408]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-11-25 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-11-25 48560]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-17 39936]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-17 14848]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-11-25 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-11-25 94160]
R2 CdaC15BA;CdaC15BA; \??\C:\WINDOWS\system32\drivers\CDAC15BA.SYS []
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-11-25 23120]
R3 cmuda;C-Media WDM Audio Interface; C:\WINDOWS\system32\drivers\cmuda.sys [2005-05-12 1332544]
R3 FileMonitor;FileMonitor; \??\C:\Program Files\IObit\IObit Malware Fighter\Drivers\wxp_x86\FileMonitor.sys []
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-10-25 9600]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-09-20 1302332]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2012-07-16 9856]
R3 RegFilter;RegFilter; \??\C:\Program Files\IObit\IObit Malware Fighter\drivers\wxp_x86\regfilter.sys []
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 UrlFilter;UrlFilter; \??\C:\Program Files\IObit\IObit Malware Fighter\drivers\wxp_x86\UrlFilter.sys []
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdvancedSystemCareService5;Advanced SystemCare Service 5; C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe [2012-05-26 913792]
R2 Application Updater;Application Updater; C:\Program Files\Application Updater\ApplicationUpdater.exe [2012-06-27 791488]
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-25 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-25 138680]
R2 C-DillaCdaC11BA;C-DillaCdaC11BA; C:\WINDOWS\system32\drivers\CDAC11BA.EXE [2012-07-16 54784]
R2 IMFservice;IMF Service; C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe [2012-01-09 821592]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-25 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-25 352920]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-16 250056]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-06-15 113120]
S3 UMWdf;Sada ovladačů pro uživatelský režim systému Windows; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]

-----------------EOF-----------------

Avatar uživatele
cernohous13
VIP in memoriam
VIP in memoriam
Příspěvky: 8720
Registrován: 09 Pro 2006 06:19
Místo/Bydliště: Jablonec nad Nisou
Kontaktovat uživatele:

Re: Trojan a rundll32.exe

#2 Příspěvek od cernohous13 »

Zdravím,

po našich nedobrých zkušenostech doporučuji odinstalovat produkty od IObit - umí slušně nabourat systém.
:arrow: Použij REVO
Stáhni a nainstaluj
http://www.stahuj.centrum.cz/utility_a_ ... staller/?g
Odinstaluj programy:
C:\Program Files\IObit\IObit Malware Fighter
C:\Program Files\IObit\Advanced SystemCare 5
C:\Program Files\Application Updater
označ vše co najde a dej smazat (postupně přes "Další").
:arrow: Doinstaluj SP3 - http://www.update.microsoft.com/windows ... aspx?ln=cs (nebo máš snad problém s legálností systému?)

:arrow: Máš tam MBAM - aktualizace a úplná kontrola (bez mazání) - log mi dej

:arrow: až provedeš navrhované úpravy, tak nový RSIT
Doporučení:
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím Obrázek

-------------------------------------------------------------------------------------------------
> Podpora fóra <

Odpovědět