chatzum tollbar - pomoc

[miki2177]

prosím o radu co s tím .. prostě jsem to všude smazala ale stále to mám jako jakési okýnko u fb chatu a kdo ví kde to ještě bude a co to dělá .. prosím o radu ... fakt nvm co s tím ((

a kdybyste věděli odkud si můžu nainstalovat MS word 2003 na xp ( klidně i jinou verzi ale at to jde)

kdybyste k tomu potřebovali ještě něco tak řekněte ... ale mě to asi zničí .. přeinstalovanej pc a zase to tak doseru

[vyosek]

Zdravim a pekny vecer preji

Dejte log z RSIT http://forum.viry.cz/viewtopic.php?f=24&t=81939

Co se tyce MS word, nejlepe kontaktovat nejakeho prodejce a zakoupit jej - nebo jej chcete jen stahnout a cracknout?

[miki2177]

taky a mám ho dát sem?! jinak tu je no:


Logfile of random's system information tool 1.09 (written by random/random)
Run by JA at 2012-09-04 22:21:41
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 67 GB (88%) free of 76 GB
Total RAM: 895 MB (37% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:21:44, on 4.9.2012
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Microsoft Security Client\msseces.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Documents and Settings\JA\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\JA\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\JA\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\JA\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\JA\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\JA\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\JA\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\JA\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\JA\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\JA\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\JA\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\JA\Dokumenty\Downloads\RSIT (1).exe
C:\Program Files\trend micro\JA.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.chatzum.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.chatzum.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo\YontooIEClient.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\JA\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

--
End of file - 4060 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-789336058-861567501-839522115-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-789336058-861567501-839522115-1003UA.job
C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job
C:\WINDOWS\tasks\MpIdleTask.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
Yontoo - C:\Program Files\Yontoo\YontooIEClient.dll [2012-08-11 194928]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\System32\NvCpl.dll [2007-11-08 8491008]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\System32\NvMcTray.dll [2007-11-08 81920]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-02-26 16125440]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2012-03-26 931200]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"Google Update"=C:\Documents and Settings\JA\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2012-08-29 116648]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2012-04-11 3672384]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.l3acm"=C:\WINDOWS\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======List of files/folders created in the last 1 month======

2012-09-04 22:18:40 ----D---- C:\Program Files\trend micro
2012-09-04 22:18:39 ----D---- C:\rsit
2012-09-04 21:20:25 ----D---- C:\WINDOWS\system32\appmgmt
2012-09-04 19:55:41 ----D---- C:\Program Files\MSECache
2012-09-02 11:57:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\nView_Profiles
2012-09-02 11:36:00 ----A---- C:\WINDOWS\system32\drivers\sptd.sys
2012-09-01 18:53:17 ----A---- C:\WINDOWS\system32\drivers\dtsoftbus01.sys
2012-09-01 18:53:13 ----D---- C:\Documents and Settings\JA\Data aplikací\DAEMON Tools Lite
2012-09-01 18:53:09 ----D---- C:\Program Files\DAEMON Tools Lite
2012-09-01 18:48:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
2012-09-01 10:08:22 ----D---- C:\Documents and Settings\JA\Data aplikací\Mozilla
2012-09-01 10:06:01 ----D---- C:\Program Files\Yontoo
2012-09-01 10:05:58 ----D---- C:\Documents and Settings\All Users\Data aplikací\Tarma Installer
2012-08-31 18:19:20 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2012-08-30 12:30:31 ----D---- C:\Program Files\Valve
2012-08-29 15:09:39 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2012-08-29 15:03:44 ----D---- C:\Program Files\Microsoft Security Client
2012-08-29 15:03:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2012-08-29 15:03:12 ----D---- C:\10d617fb2a7ffd9b3d
2012-08-29 15:02:55 ----D---- C:\4962938dd5f5bfa853b2
2012-08-29 15:01:37 ----HDC---- C:\WINDOWS\$NtUninstallKB942288-v3$
2012-08-29 14:58:51 ----SHD---- C:\RECYCLER
2012-08-29 14:54:17 ----HDC---- C:\WINDOWS\$NtUninstallKB914882$
2012-08-29 14:54:14 ----HD---- C:\WINDOWS\$hf_mig$
2012-08-28 23:36:18 ----D---- C:\WINDOWS\SoftwareDistribution
2012-08-28 23:36:15 ----D---- C:\WINDOWS\Prefetch
2012-08-28 22:51:42 ----N---- C:\WINDOWS\system32\drivers\irbus.sys
2012-08-28 22:51:42 ----N---- C:\WINDOWS\system32\comsdupd.exe
2012-08-28 22:51:40 ----N---- C:\WINDOWS\system32\drivers\amdagp.sys
2012-08-28 22:51:40 ----N---- C:\WINDOWS\system32\drivers\alim1541.sys
2012-08-28 22:51:40 ----N---- C:\WINDOWS\system32\drivers\agpcpq.sys
2012-08-28 22:51:40 ----N---- C:\WINDOWS\system32\drivers\agp440.sys
2012-08-28 22:51:40 ----N---- C:\WINDOWS\system32\drivers\adv11nt5.dll
2012-08-28 22:51:40 ----N---- C:\WINDOWS\system32\drivers\adv09nt5.dll
2012-08-28 22:51:40 ----N---- C:\WINDOWS\system32\drivers\adv08nt5.dll
2012-08-28 22:51:40 ----N---- C:\WINDOWS\system32\drivers\adv07nt5.dll
2012-08-28 22:51:40 ----N---- C:\WINDOWS\system32\drivers\adv05nt5.dll
2012-08-28 22:51:40 ----N---- C:\WINDOWS\system32\drivers\adv02nt5.dll
2012-08-28 22:51:40 ----N---- C:\WINDOWS\system32\drivers\adv01nt5.dll
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\mutohpen.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\mtxparhm.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\mtlstrm.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\mssmbios.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\ip6fw.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\intelppm.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\http.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\hidir.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\hidbth.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\gagp30kx.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\fltmgr.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\bthusb.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\bthprint.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\bthport.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\bthpan.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\bthmodem.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\bthenum.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\atv10nt5.dll
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\atv06nt5.dll
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\atv04nt5.dll
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\atv02nt5.dll
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\atv01nt5.dll
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\atinxsxx.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\atinxbxx.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\atintuxx.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\atinttxx.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\atinsnxx.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\atinrvxx.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\atinraxx.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\atinpdxx.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\atinmdxx.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\atinbtxx.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\ati1snxx.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\ati1raxx.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2012-08-28 22:51:39 ----N---- C:\WINDOWS\system32\drivers\ati1btxx.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\watv10nt.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\watv06nt.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\wadv11nt.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\wadv09nt.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\wadv08nt.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\wadv07nt.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\wacompen.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\viaagp.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\vchnt5.dll
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\usbvideo.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\usb8023x.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\uagp35.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\smbali.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\slwdmsup.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\slnthal.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\slntamr.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\slnt7554.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\sisagp.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\siint5.dll
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\sffp_sd.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\sffdisk.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\sdbus.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\s3gnbm.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\rndismpx.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\rfcomm.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\drivers\recagent.sys
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\d3d9.dll
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\cmsetacl.dll
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\btpanui.dll
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\bthserv.dll
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\bthci.dll
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\blastcln.exe
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\bitsprx3.dll
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\bitsprx2.dll
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\auditusr.exe
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\ativvaxx.dll
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\ati3duag.dll
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\ati2dvag.dll
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2012-08-28 22:51:38 ----N---- C:\WINDOWS\system32\ati2cqag.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\mspmsnsv.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\msdadiag.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\mp4sdmod.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\mp43dmod.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\mdmxsdk.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\kbdukx.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\kbdsmsno.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\kbdsmsfi.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\kbdno1.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\kbdmlt48.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\kbdmlt47.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\kbdmaori.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\kbdinmal.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\kbdinben.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\kbdinbe1.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\kbdfi1.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\ir50_qcx.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\ir50_qc.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\ir50_32.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\ir41_qcx.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\ir41_qc.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\ieencode.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\httpapi.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\fwcfg.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\fsquirt.exe
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\fltmc.exe
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\fltlib.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\extmgr.dll
2012-08-28 22:51:37 ----N---- C:\WINDOWS\system32\dxdiagn.dll
2012-08-28 22:51:36 ----N---- C:\WINDOWS\system32\xpsp2res.dll
2012-08-28 22:51:36 ----N---- C:\WINDOWS\system32\xpob2res.dll
2012-08-28 22:51:36 ----N---- C:\WINDOWS\system32\w3ssl.dll
2012-08-28 22:51:36 ----N---- C:\WINDOWS\system32\twext.dll
2012-08-28 22:51:36 ----N---- C:\WINDOWS\system32\strmfilt.dll
2012-08-28 22:51:36 ----N---- C:\WINDOWS\system32\smbinst.exe
2012-08-28 22:51:36 ----N---- C:\WINDOWS\system32\slserv.exe
2012-08-28 22:51:36 ----N---- C:\WINDOWS\system32\slrundll.exe
2012-08-28 22:51:36 ----N---- C:\WINDOWS\system32\slgen.dll
2012-08-28 22:51:36 ----N---- C:\WINDOWS\system32\slextspk.dll
2012-08-28 22:51:36 ----N---- C:\WINDOWS\system32\slcoinst.dll
2012-08-28 22:51:36 ----N---- C:\WINDOWS\system32\sdhcinst.dll
2012-08-28 22:51:36 ----N---- C:\WINDOWS\system32\s3gnb.dll
2012-08-28 22:51:36 ----N---- C:\WINDOWS\system32\powercfg.exe
2012-08-28 22:51:36 ----N---- C:\WINDOWS\system32\pnrpnsp.dll
2012-08-28 22:51:36 ----N---- C:\WINDOWS\system32\p2psvc.dll
2012-08-28 22:51:36 ----N---- C:\WINDOWS\system32\p2pnetsh.dll
2012-08-28 22:51:36 ----N---- C:\WINDOWS\system32\p2pgraph.dll
2012-08-28 22:51:36 ----N---- C:\WINDOWS\system32\p2pgasvc.dll
2012-08-28 22:51:36 ----N---- C:\WINDOWS\system32\p2p.dll
2012-08-28 22:51:36 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2012-08-28 22:51:35 ----N---- C:\WINDOWS\system32\xmlprovi.dll
2012-08-28 22:51:35 ----N---- C:\WINDOWS\system32\xmlprov.dll
2012-08-28 22:51:35 ----N---- C:\WINDOWS\system32\wuweb.dll
2012-08-28 22:51:35 ----N---- C:\WINDOWS\system32\wups.dll
2012-08-28 22:51:35 ----N---- C:\WINDOWS\system32\wucltui.dll
2012-08-28 22:51:35 ----N---- C:\WINDOWS\system32\wuaueng1.dll
2012-08-28 22:51:35 ----N---- C:\WINDOWS\system32\wuauclt1.exe
2012-08-28 22:51:35 ----N---- C:\WINDOWS\system32\wuapi.dll
2012-08-28 22:51:35 ----N---- C:\WINDOWS\system32\wshbth.dll
2012-08-28 22:51:35 ----N---- C:\WINDOWS\system32\wscsvc.dll
2012-08-28 22:51:35 ----N---- C:\WINDOWS\system32\wscntfy.exe
2012-08-28 22:51:35 ----N---- C:\WINDOWS\system32\wmvdmoe2.dll
2012-08-28 22:51:35 ----N---- C:\WINDOWS\system32\wmspdmoe.dll
2012-08-28 22:51:35 ----N---- C:\WINDOWS\system32\wmspdmod.dll
2012-08-28 22:51:35 ----N---- C:\WINDOWS\system32\wmsdmoe2.dll
2012-08-28 22:51:35 ----N---- C:\WINDOWS\system32\wmpdxm.dll
2012-08-28 22:51:35 ----N---- C:\WINDOWS\system32\wmpasf.dll
2012-08-28 22:51:35 ----N---- C:\WINDOWS\system32\wmp.dll
2012-08-28 22:51:35 ----N---- C:\WINDOWS\system32\wmidx.dll
2012-08-28 22:51:35 ----N---- C:\WINDOWS\system32\wmerror.dll
2012-08-28 22:51:35 ----N---- C:\WINDOWS\system32\winshfhc.dll
2012-08-28 22:51:35 ----N---- C:\WINDOWS\slrundll.exe
2012-08-28 22:51:34 ----D---- C:\WINDOWS\provisioning
2012-08-28 22:51:34 ----D---- C:\WINDOWS\peernet
2012-08-28 22:50:25 ----D---- C:\WINDOWS\ServicePackFiles
2012-08-28 22:48:04 ----N---- C:\WINDOWS\system32\spmsg.dll
2012-08-28 22:48:03 ----A---- C:\WINDOWS\002175_.tmp
2012-08-28 22:46:28 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2012-08-28 22:46:26 ----D---- C:\WINDOWS\EHome
2012-08-28 20:48:15 ----A---- C:\WINDOWS\system32\h323log.txt
2012-08-28 20:43:26 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2012-08-28 20:43:13 ----A---- C:\WINDOWS\system32\hidserv.dll
2012-08-28 20:43:00 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2012-08-28 20:42:29 ----A---- C:\WINDOWS\system32\usbui.dll
2012-08-28 20:42:22 ----A---- C:\WINDOWS\system32\drivers\wmiacpi.sys
2012-08-28 20:41:40 ----A---- C:\WINDOWS\imsins.BAK
2012-08-28 20:41:37 ----D---- C:\Program Files\Common Files\ODBC
2012-08-28 20:41:37 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-08-28 20:41:37 ----A---- C:\WINDOWS\ODBCINST.INI
2012-08-28 20:41:34 ----D---- C:\Program Files\Common Files\SpeechEngines
2012-08-28 20:41:33 ----RD---- C:\Program Files
2012-08-28 20:41:33 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-08-28 20:41:33 ----D---- C:\Program Files\Common Files
2012-08-28 20:41:31 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2012-08-28 20:41:31 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2012-08-28 20:41:31 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2012-08-28 20:41:29 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2012-08-28 20:41:29 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2012-08-28 20:41:29 ----RA---- C:\WINDOWS\system32\kbdur.dll
2012-08-28 20:41:29 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2012-08-28 20:41:29 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2012-08-28 20:41:29 ----RA---- C:\WINDOWS\system32\kbdru.dll
2012-08-28 20:41:29 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2012-08-28 20:41:29 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2012-08-28 20:41:29 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2012-08-28 20:41:29 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2012-08-28 20:41:29 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2012-08-28 20:41:29 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2012-08-28 20:41:27 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2012-08-28 20:41:27 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2012-08-28 20:41:27 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2012-08-28 20:41:27 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2012-08-28 20:41:27 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2012-08-28 20:41:27 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2012-08-28 20:41:27 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2012-08-28 20:41:26 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2012-08-28 20:41:26 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2012-08-28 20:41:26 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2012-08-28 20:41:26 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2012-08-28 20:41:26 ----RA---- C:\WINDOWS\system32\kbdest.dll
2012-08-28 20:41:23 ----A---- C:\WINDOWS\system32\kbdycl.dll
2012-08-28 20:41:23 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2012-08-28 20:41:23 ----A---- C:\WINDOWS\system32\kbdsl.dll
2012-08-28 20:41:23 ----A---- C:\WINDOWS\system32\kbdro.dll
2012-08-28 20:41:23 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2012-08-28 20:41:23 ----A---- C:\WINDOWS\system32\kbdpl.dll
2012-08-28 20:41:23 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2012-08-28 20:41:23 ----A---- C:\WINDOWS\system32\kbdhu.dll
2012-08-28 20:41:23 ----A---- C:\WINDOWS\system32\kbdcr.dll
2012-08-28 20:41:23 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2012-08-28 20:41:22 ----A---- C:\WINDOWS\system32\irclass.dll
2012-08-28 20:41:22 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2012-08-28 20:41:22 ----A---- C:\WINDOWS\system32\dgsetup.dll
2012-08-28 20:41:22 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2012-08-28 20:41:21 ----A---- C:\WINDOWS\system32\spxcoins.dll
2012-08-28 20:41:21 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2012-08-28 20:41:19 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2012-08-28 20:41:19 ----A---- C:\WINDOWS\TASKMAN.EXE
2012-08-28 20:41:19 ----A---- C:\WINDOWS\system32\batt.dll
2012-08-28 20:41:19 ----A---- C:\WINDOWS\notepad.exe
2012-08-28 20:41:18 ----A---- C:\WINDOWS\system32\storprop.dll
2012-08-28 20:41:16 ----D---- C:\Program Files\DIFX
2012-08-28 20:41:15 ----D---- C:\WINDOWS\system32\ReinstallBackups
2012-08-28 20:41:12 ----DC---- C:\WINDOWS\system32\DRVSTORE
2012-08-28 20:41:12 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2012-08-28 20:41:12 ----A---- C:\WINDOWS\system32\drivers\AmdK8.sys
2012-08-28 20:41:09 ----RA---- C:\WINDOWS\SET7.tmp
2012-08-28 20:41:07 ----RA---- C:\WINDOWS\SET3.tmp
2012-08-28 20:41:02 ----D---- C:\WINDOWS\system32\CatRoot2
2012-08-28 20:41:02 ----D---- C:\WINDOWS\system32\CatRoot
2012-08-28 20:40:56 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2012-08-28 20:40:44 ----A---- C:\WINDOWS\setuplog.txt
2012-08-28 20:40:39 ----D---- C:\WINDOWS\system32\Lang
2012-08-28 20:40:39 ----D---- C:\Documents and Settings
2012-08-28 20:40:39 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2012-08-28 20:39:50 ----RASH---- C:\boot.ini
2012-08-28 20:39:38 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2012-08-28 20:39:37 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2012-08-28 20:39:36 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2012-08-28 20:39:36 ----A---- C:\WINDOWS\system32\drivers\dmusic.sys
2012-08-28 20:39:35 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2012-08-28 20:39:34 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2012-08-28 20:39:34 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2012-08-28 20:39:33 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2012-08-28 20:39:32 ----A---- C:\WINDOWS\system32\drivers\mspqm.sys
2012-08-28 20:39:32 ----A---- C:\WINDOWS\system32\drivers\mskssrv.sys
2012-08-28 20:39:31 ----A---- C:\WINDOWS\system32\drivers\mspclock.sys
2012-08-28 20:37:05 ----RA---- C:\WINDOWS\RtlUpd.exe
2012-08-28 20:37:04 ----RA---- C:\WINDOWS\ALCMTR.EXE
2012-08-28 20:36:59 ----RA---- C:\WINDOWS\ALCWZRD.EXE
2012-08-28 20:36:43 ----RA---- C:\WINDOWS\SOUNDMAN.EXE
2012-08-28 20:36:43 ----RA---- C:\WINDOWS\RTLCPL.EXE
2012-08-28 20:36:37 ----RA---- C:\WINDOWS\SkyTel.exe
2012-08-28 20:36:33 ----RA---- C:\WINDOWS\MicCal.exe
2012-08-28 20:36:23 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-08-28 20:36:23 ----RSD---- C:\WINDOWS\Fonts
2012-08-28 20:36:23 ----RD---- C:\WINDOWS\Web
2012-08-28 20:36:23 ----HD---- C:\WINDOWS\inf
2012-08-28 20:36:23 ----D---- C:\WINDOWS\WinSxS
2012-08-28 20:36:23 ----D---- C:\WINDOWS\twain_32
2012-08-28 20:36:23 ----D---- C:\WINDOWS\Temp
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\wins
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\wbem
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\usmt
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\spool
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\ShellExt
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\Setup
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\ras
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\oobe
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\npp
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\mui
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\inetsrv
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\IME
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\icsxml
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\ias
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\export
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\drivers\etc
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\drivers\disdn
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\drivers
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\dhcp
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\config
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\3com_dmi
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\3076
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\2052
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\1054
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\1042
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\1041
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\1037
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\1033
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\1031
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\1029
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\1028
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32\1025
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system32
2012-08-28 20:36:23 ----D---- C:\WINDOWS\system
2012-08-28 20:36:23 ----D---- C:\WINDOWS\security
2012-08-28 20:36:23 ----D---- C:\WINDOWS\Resources
2012-08-28 20:36:23 ----D---- C:\WINDOWS\repair
2012-08-28 20:36:23 ----D---- C:\WINDOWS\mui
2012-08-28 20:36:23 ----D---- C:\WINDOWS\msapps
2012-08-28 20:36:23 ----D---- C:\WINDOWS\msagent
2012-08-28 20:36:23 ----D---- C:\WINDOWS\Media
2012-08-28 20:36:23 ----D---- C:\WINDOWS\java
2012-08-28 20:36:23 ----D---- C:\WINDOWS\ime
2012-08-28 20:36:23 ----D---- C:\WINDOWS\Help
2012-08-28 20:36:23 ----D---- C:\WINDOWS\Driver Cache
2012-08-28 20:36:23 ----D---- C:\WINDOWS\Debug
2012-08-28 20:36:23 ----D---- C:\WINDOWS\Cursors
2012-08-28 20:36:23 ----D---- C:\WINDOWS\Connection Wizard
2012-08-28 20:36:23 ----D---- C:\WINDOWS\Config
2012-08-28 20:36:23 ----D---- C:\WINDOWS\AppPatch
2012-08-28 20:36:23 ----D---- C:\WINDOWS\addins
2012-08-28 20:36:23 ----D---- C:\WINDOWS
2012-08-28 20:36:23 ----ASH---- C:\pagefile.sys
2012-08-28 20:36:08 ----RA---- C:\WINDOWS\RTHDCPL.EXE
2012-08-28 20:36:00 ----RA---- C:\WINDOWS\system32\drivers\RtkHDAud.sys
2012-08-28 20:35:58 ----A---- C:\WINDOWS\system32\ksuser.dll
2012-08-28 20:35:58 ----A---- C:\WINDOWS\system32\drivers\stream.sys
2012-08-28 20:35:58 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2012-08-28 20:35:58 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2012-08-28 20:35:40 ----A---- C:\WINDOWS\system32\ChCfg.exe
2012-08-28 20:35:20 ----D---- C:\WINDOWS\system32\RTCOM
2012-08-28 20:34:49 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2012-08-28 20:34:48 ----HDC---- C:\WINDOWS\$NtUninstallKB888111WXP$
2012-08-28 20:34:41 ----HD---- C:\Program Files\InstallShield Installation Information
2012-08-28 20:34:41 ----D---- C:\Program Files\Realtek
2012-08-28 20:34:35 ----A---- C:\WINDOWS\RtlExUpd.dll
2012-08-28 20:34:35 ----A---- C:\WINDOWS\HideWin.exe
2012-08-28 20:30:43 ----D---- C:\WINDOWS\nview
2012-08-28 20:30:42 ----A---- C:\WINDOWS\system32\nvudisp.exe
2012-08-28 20:10:41 ----A---- C:\WINDOWS\system32\wpa.bak
2012-08-28 19:46:52 ----SD---- C:\WINDOWS\system32\Microsoft
2012-08-28 19:46:25 ----D---- C:\Program Files\Common Files\InstallShield
2012-08-28 19:46:01 ----RA---- C:\WINDOWS\system32\fdco1ins.dll
2012-08-28 19:46:01 ----RA---- C:\WINDOWS\system32\fdco1.dll
2012-08-28 19:46:01 ----RA---- C:\WINDOWS\system32\drivers\NVENETFD.sys
2012-08-28 19:45:58 ----RA---- C:\WINDOWS\system32\nvconrm.dll
2012-08-28 19:45:58 ----RA---- C:\WINDOWS\system32\drivers\nvtcp.sys
2012-08-28 19:45:58 ----RA---- C:\WINDOWS\system32\bdco1ins.dll
2012-08-28 19:45:58 ----RA---- C:\WINDOWS\system32\bdco1.dll
2012-08-28 19:45:58 ----A---- C:\WINDOWS\system32\nvunrm.exe
2012-08-28 19:45:57 ----RA---- C:\WINDOWS\system32\drivers\nvsnpu.sys
2012-08-28 19:45:57 ----RA---- C:\WINDOWS\system32\drivers\nvnrm.sys
2012-08-28 19:45:57 ----RA---- C:\WINDOWS\system32\drivers\nvnetbus.sys
2012-08-28 19:45:55 ----RA---- C:\WINDOWS\system32\nvusmu.exe
2012-08-28 19:45:55 ----RA---- C:\WINDOWS\system32\drivers\nvsmu.sys
2012-08-28 19:45:54 ----RA---- C:\WINDOWS\system32\nvusmb.exe
2012-08-28 19:45:32 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2012-08-28 19:45:27 ----D---- C:\Documents and Settings\JA\Data aplikací\InstallShield
2012-08-28 19:44:59 ----A---- C:\WINDOWS\Ascd_tmp.ini
2012-08-28 19:44:58 ----A---- C:\WINDOWS\system32\drivers\ASUSHWIO.SYS
2012-08-28 19:43:34 ----SHD---- C:\WINDOWS\Installer
2012-08-28 19:43:32 ----D---- C:\Documents and Settings\JA\Data aplikací\Identities
2012-08-28 19:43:28 ----HD---- C:\Program Files\Uninstall Information
2012-08-28 19:43:24 ----SD---- C:\Documents and Settings\JA\Data aplikací\Microsoft
2012-08-28 19:43:24 ----ASH---- C:\Documents and Settings\JA\Data aplikací\desktop.ini
2012-08-28 19:31:49 ----SHD---- C:\System Volume Information
2012-08-28 19:31:48 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-08-28 18:54:31 ----AS---- C:\WINDOWS\bootstat.dat
2012-08-28 18:52:45 ----D---- C:\WINDOWS\system32\xircom
2012-08-28 18:52:45 ----D---- C:\Program Files\xerox
2012-08-28 18:52:45 ----D---- C:\Program Files\microsoft frontpage
2012-08-28 18:52:30 ----RASH---- C:\MSDOS.SYS
2012-08-28 18:52:30 ----RASH---- C:\IO.SYS
2012-08-28 18:52:30 ----A---- C:\WINDOWS\control.ini
2012-08-28 18:52:30 ----A---- C:\CONFIG.SYS
2012-08-28 18:52:30 ----A---- C:\AUTOEXEC.BAT
2012-08-28 18:52:25 ----A---- C:\WINDOWS\OEWABLog.txt
2012-08-28 18:52:22 ----A---- C:\WINDOWS\system32\mapi32.dll
2012-08-28 18:51:42 ----SD---- C:\WINDOWS\Downloaded Program Files
2012-08-28 18:51:42 ----RD---- C:\WINDOWS\Offline Web Pages
2012-08-28 18:51:18 ----D---- C:\WINDOWS\system32\DirectX
2012-08-28 18:50:54 ----A---- C:\WINDOWS\system32\safrslv.dll
2012-08-28 18:50:54 ----A---- C:\WINDOWS\system32\safrdm.dll
2012-08-28 18:50:54 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2012-08-28 18:50:54 ----A---- C:\WINDOWS\system32\racpldlg.dll
2012-08-28 18:50:54 ----A---- C:\WINDOWS\system32\atrace.dll
2012-08-28 18:50:52 ----A---- C:\WINDOWS\system32\desktop.ini
2012-08-28 18:50:52 ----A---- C:\WINDOWS\desktop.ini
2012-08-28 18:50:45 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2012-08-28 18:50:45 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2012-08-28 18:50:45 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2012-08-28 18:50:44 ----A---- C:\WINDOWS\system32\acctres.dll
2012-08-28 18:50:43 ----D---- C:\Program Files\Common Files\Services
2012-08-28 18:50:43 ----A---- C:\WINDOWS\system32\inetres.dll
2012-08-28 18:50:40 ----SD---- C:\WINDOWS\Tasks
2012-08-28 18:50:39 ----A---- C:\WINDOWS\system32\isign32.dll
2012-08-28 18:50:39 ----A---- C:\WINDOWS\system32\inetcfg.dll
2012-08-28 18:50:39 ----A---- C:\WINDOWS\system32\icwphbk.dll
2012-08-28 18:50:39 ----A---- C:\WINDOWS\system32\icwdial.dll
2012-08-28 18:50:39 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2012-08-28 18:50:37 ----D---- C:\Program Files\Common Files\MSSoap
2012-08-28 18:50:33 ----D---- C:\WINDOWS\srchasst
2012-08-28 18:50:32 ----D---- C:\WINDOWS\system32\Macromed
2012-08-28 18:50:32 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2012-08-28 18:50:31 ----D---- C:\Program Files\Movie Maker
2012-08-28 18:50:31 ----A---- C:\WINDOWS\system32\qmgr.dll
2012-08-28 18:50:27 ----D---- C:\WINDOWS\system32\Restore
2012-08-28 18:50:27 ----D---- C:\WINDOWS\PCHealth
2012-08-28 18:50:27 ----A---- C:\WINDOWS\system32\srsvc.dll
2012-08-28 18:50:27 ----A---- C:\WINDOWS\system32\srrstr.dll
2012-08-28 18:50:26 ----A---- C:\WINDOWS\system32\srclient.dll
2012-08-28 18:50:26 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2012-08-28 18:50:26 ----A---- C:\WINDOWS\system32\mnmdd.dll
2012-08-28 18:50:26 ----A---- C:\WINDOWS\system32\ils.dll
2012-08-28 18:50:26 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2012-08-28 18:50:25 ----A---- C:\WINDOWS\system32\msconf.dll
2012-08-28 18:50:23 ----D---- C:\Program Files\NetMeeting
2012-08-28 18:50:23 ----A---- C:\WINDOWS\system32\msoert2.dll
2012-08-28 18:50:23 ----A---- C:\WINDOWS\system32\msoeacct.dll
2012-08-28 18:50:23 ----A---- C:\WINDOWS\system32\inetcomm.dll
2012-08-28 18:50:22 ----D---- C:\Program Files\Outlook Express
2012-08-28 18:50:22 ----A---- C:\WINDOWS\system32\schedsvc.dll
2012-08-28 18:50:22 ----A---- C:\WINDOWS\system32\mstinit.exe
2012-08-28 18:50:22 ----A---- C:\WINDOWS\system32\mstask.dll
2012-08-28 18:50:19 ----D---- C:\Program Files\Common Files\System
2012-08-28 18:50:18 ----D---- C:\Program Files\Internet Explorer
2012-08-28 18:49:57 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2012-08-28 18:49:51 ----D---- C:\Program Files\ComPlus Applications
2012-08-28 18:49:50 ----A---- C:\WINDOWS\vbaddin.ini
2012-08-28 18:49:50 ----A---- C:\WINDOWS\vb.ini
2012-08-28 18:49:47 ----D---- C:\WINDOWS\Registration
2012-08-28 18:49:43 ----HD---- C:\Program Files\WindowsUpdate
2012-08-28 18:49:43 ----D---- C:\Program Files\Online Services
2012-08-28 18:49:42 ----D---- C:\Program Files\Windows Media Player
2012-08-28 18:49:38 ----D---- C:\Program Files\Messenger
2012-08-28 18:49:34 ----D---- C:\Program Files\MSN Gaming Zone
2012-08-28 18:49:34 ----A---- C:\WINDOWS\system32\write.exe
2012-08-28 18:49:26 ----A---- C:\WINDOWS\system32\sndvol32.exe
2012-08-28 18:49:26 ----A---- C:\WINDOWS\system32\sndrec32.exe
2012-08-28 18:49:26 ----A---- C:\WINDOWS\system32\accwiz.exe
2012-08-28 18:49:25 ----A---- C:\WINDOWS\system32\hypertrm.dll
2012-08-28 18:49:25 ----A---- C:\WINDOWS\system32\hticons.dll
2012-08-28 18:49:25 ----A---- C:\WINDOWS\system32\avwav.dll
2012-08-28 18:49:25 ----A---- C:\WINDOWS\system32\avtapi.dll
2012-08-28 18:49:25 ----A---- C:\WINDOWS\system32\avmeter.dll
2012-08-28 18:49:24 ----A---- C:\WINDOWS\system32\winchat.exe
2012-08-28 18:49:18 ----A---- C:\WINDOWS\system32\sol.exe
2012-08-28 18:49:18 ----A---- C:\WINDOWS\system32\charmap.exe
2012-08-28 18:49:18 ----A---- C:\WINDOWS\system32\getuname.dll
2012-08-28 18:49:18 ----A---- C:\WINDOWS\system32\calc.exe
2012-08-28 18:49:17 ----A---- C:\WINDOWS\system32\winmine.exe
2012-08-28 18:49:17 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2012-08-28 18:49:17 ----A---- C:\WINDOWS\system32\reset.exe
2012-08-28 18:49:17 ----A---- C:\WINDOWS\system32\rdshost.exe
2012-08-28 18:49:17 ----A---- C:\WINDOWS\system32\mshearts.exe
2012-08-28 18:49:17 ----A---- C:\WINDOWS\system32\freecell.exe
2012-08-28 18:49:17 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2012-08-28 18:49:17 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2012-08-28 18:49:16 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2012-08-28 18:49:16 ----A---- C:\WINDOWS\system32\tslabels.ini
2012-08-28 18:49:16 ----A---- C:\WINDOWS\system32\tskill.exe
2012-08-28 18:49:16 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2012-08-28 18:49:16 ----A---- C:\WINDOWS\system32\tscon.exe
2012-08-28 18:49:16 ----A---- C:\WINDOWS\system32\shadow.exe
2012-08-28 18:49:16 ----A---- C:\WINDOWS\system32\rwinsta.exe
2012-08-28 18:49:16 ----A---- C:\WINDOWS\system32\regini.exe
2012-08-28 18:49:16 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2012-08-28 18:49:16 ----A---- C:\WINDOWS\system32\qwinsta.exe
2012-08-28 18:49:16 ----A---- C:\WINDOWS\system32\qprocess.exe
2012-08-28 18:49:16 ----A---- C:\WINDOWS\system32\qappsrv.exe
2012-08-28 18:49:16 ----A---- C:\WINDOWS\system32\msg.exe
2012-08-28 18:49:16 ----A---- C:\WINDOWS\system32\logoff.exe
2012-08-28 18:49:15 ----A---- C:\WINDOWS\system32\xolehlp.dll
2012-08-28 18:49:15 ----A---- C:\WINDOWS\system32\mtxoci.dll
2012-08-28 18:49:15 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2012-08-28 18:49:15 ----A---- C:\WINDOWS\system32\msdtctm.dll
2012-08-28 18:49:15 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2012-08-28 18:49:15 ----A---- C:\WINDOWS\system32\msdtclog.dll
2012-08-28 18:49:15 ----A---- C:\WINDOWS\system32\msdtc.exe
2012-08-28 18:49:15 ----A---- C:\WINDOWS\system32\cdmodem.dll
2012-08-28 18:49:14 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2012-08-28 18:49:13 ----A---- C:\WINDOWS\system32\stclient.dll
2012-08-28 18:49:13 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2012-08-28 18:49:13 ----A---- C:\WINDOWS\system32\mtxex.dll
2012-08-28 18:49:13 ----A---- C:\WINDOWS\system32\mtxdm.dll
2012-08-28 18:49:13 ----A---- C:\WINDOWS\system32\comrepl.dll
2012-08-28 18:49:13 ----A---- C:\WINDOWS\system32\comaddin.dll
2012-08-28 18:49:13 ----A---- C:\WINDOWS\system32\colbact.dll
2012-08-28 18:49:13 ----A---- C:\WINDOWS\system32\clbcatex.dll
2012-08-28 18:49:13 ----A---- C:\WINDOWS\system32\catsrvps.dll
2012-08-28 18:49:13 ----A---- C:\WINDOWS\system32\catsrv.dll
2012-08-28 18:49:12 ----A---- C:\WINDOWS\system32\comuid.dll
2012-08-28 18:49:12 ----A---- C:\WINDOWS\system32\comsnap.dll
2012-08-28 18:49:12 ----A---- C:\WINDOWS\system32\clbcatq.dll
2012-08-28 18:49:05 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2012-08-28 18:49:05 ----A---- C:\WINDOWS\system32\servdeps.dll
2012-08-28 18:49:05 ----A---- C:\WINDOWS\system32\mmfutil.dll
2012-08-28 18:49:05 ----A---- C:\WINDOWS\system32\cmprops.dll
2012-08-28 18:49:01 ----D---- C:\Program Files\MSN
2012-08-28 18:49:00 ----D---- C:\Program Files\Windows NT
2012-08-28 18:49:00 ----A---- C:\WINDOWS\system32\wuaueng.dll
2012-08-28 18:49:00 ----A---- C:\WINDOWS\system32\wuauclt.exe
2012-08-28 18:49:00 ----A---- C:\WINDOWS\system32\spider.exe
2012-08-28 18:49:00 ----A---- C:\WINDOWS\system32\mspaint.exe
2012-08-28 18:49:00 ----A---- C:\WINDOWS\system32\mplay32.exe
2012-08-28 18:49:00 ----A---- C:\WINDOWS\system32\clipbrd.exe
2012-08-28 18:48:59 ----A---- C:\WINDOWS\system32\wuauserv.dll
2012-08-28 18:48:59 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2012-08-28 18:48:59 ----A---- C:\WINDOWS\system32\remotepg.dll
2012-08-28 18:48:59 ----A---- C:\WINDOWS\system32\mstscax.dll
2012-08-28 18:48:59 ----A---- C:\WINDOWS\system32\mstsc.exe
2012-08-28 18:48:59 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2012-08-28 18:48:58 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2012-08-28 18:48:58 ----A---- C:\WINDOWS\system32\termsrv.dll
2012-08-28 18:48:58 ----A---- C:\WINDOWS\system32\sessmgr.exe
2012-08-28 18:48:58 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2012-08-28 18:48:58 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2012-08-28 18:48:58 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2012-08-28 18:48:58 ----A---- C:\WINDOWS\system32\rdpclip.exe
2012-08-28 18:48:58 ----A---- C:\WINDOWS\system32\rdchost.dll
2012-08-28 18:48:58 ----A---- C:\WINDOWS\system32\icaapi.dll
2012-08-28 18:48:57 ----D---- C:\WINDOWS\system32\MsDtc
2012-08-28 18:48:57 ----D---- C:\WINDOWS\system32\Com
2012-08-28 18:48:57 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2012-08-28 18:48:57 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2012-08-28 18:48:57 ----A---- C:\WINDOWS\system32\catsrvut.dll
2012-08-28 18:48:56 ----A---- C:\WINDOWS\system32\comsvcs.dll
2012-08-28 18:48:54 ----A---- C:\WINDOWS\system32\licwmi.dll
2012-08-28 18:48:42 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2012-08-28 18:48:42 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys

======List of files/folders modified in the last 1 month======

2012-09-01 13:41:06 ----A---- C:\WINDOWS\win.ini
2012-08-28 22:48:31 ----RASH---- C:\NTDETECT.COM
2012-08-28 20:41:33 ----A---- C:\WINDOWS\system.ini
2012-08-28 18:52:13 ----ASH---- C:\WINDOWS\fonts\desktop.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\WINDOWS\system32\DRIVERS\MpFilter.sys [2012-03-20 171064]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2012-09-02 477240]
R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\System32\DRIVERS\AmdK8.sys [2006-07-01 43008]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2012-09-01 242240]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2004-08-17 14848]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\System32\DRIVERS\wmiacpi.sys [2004-08-03 8832]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\System32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2003-04-16 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-03-01 4484608]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2003-04-16 12160]
R3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2007-11-08 6866368]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\System32\DRIVERS\NVENETFD.sys [2007-03-06 58752]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\System32\DRIVERS\nvnetbus.sys [2007-03-06 19968]
R3 nvsmu;nvsmu; C:\WINDOWS\System32\DRIVERS\nvsmu.sys [2007-02-16 12032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 ax26hmh2;ax26hmh2; C:\WINDOWS\system32\drivers\ax26hmh2.sys []
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-03-26 11552]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\System32\nvsvc32.exe [2007-11-08 155716]

-----------------EOF-----------------

[vyosek]

Ano, logy a vse davejte do sveho tematu sem

Doinstalujte ServicePack3 - resi mnoho chyb a bezpecnostnich der - vice info mate zde http://www.viry.cz/forum/viewtopic.php?f=46&t=86100
Deejte prosim screen toho "jakesiho okenka" u FB - navod na screen http://forum.viry.cz/viewtopic.php?f=11&t=14114

Ohledne MS Office (word, excel atd.) je jasno

[miki2177]

servis pack nešel doinstalovat a ten ve vašem odkazu je jen nějaký soubor bitové kopie ... s tím wordem to bude asi na dýl a obrázek :

[vyosek]

Ani tento SP3 http://www.viry.cz/forum/viewtopic.php?f=46&t=86100 ani pres windows update? Proc nesel nainstalovat? skoncil s nejakou chybou?

Poprosim jeste o druhy log z RSIT s nazvem info.txt, je ulozen v c:\rsit

[miki2177]

no naistalovala jsem to dala jsem pak dokončit a restarotvat a vbc nikde to není tak jako nvm co to bylo a na fb mi ten chatzum začal asi rozposílat takové to zprávy (viz. obr. žlutě zakroužkované) (


a log:


info.txt logfile of random's system information tool 1.09 2012-09-04 22:21:15

======Uninstall list======

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Aktualizace systému Windows XP (KB914882)-->"C:\WINDOWS\$NtUninstallKB914882$\spuninst\spuninst.exe"
Balíček ovladače systému Windows - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)-->C:\PROGRA~1\DIFX\7B44739871F4D539FA473F57A832EA4B6A59EF06\DPInst.exe /d /u C:\WINDOWS\System32\DRVSTORE\amdk8_272AB57A055A98BD494E3A7FDA0E8216ECE25347\amdk8.inf
DAEMON Tools Lite-->C:\Program Files\DAEMON Tools Lite\uninst.exe
High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXP$\spuninst\spuninst.exe"
Microsoft Security Client-->MsiExec.exe /X{0F842B77-56EA-4AAF-8295-81A022350B5E}
Microsoft Security Essentials-->C:\Program Files\Microsoft Security Client\Setup.exe /x
NVIDIA Drivers-->C:\WINDOWS\System32\nvudisp.exe UninstallGUI
Oprava Hotfix systému Windows XP (KB942288-v3)-->"C:\WINDOWS\$NtUninstallKB942288-v3$\spuninst\spuninst.exe"
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
Windows XP Service Pack 2-->C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe
Yontoo 1.10.02-->C:\DOCUME~1\ALLUSE~1\DATAAP~1\TARMAI~1\{889DF~1\Setup.exe /remove /q0

======Security center information======

AV: Microsoft Security Essentials

======System event log======

Computer Name: DOMA-RKIVGY9AL5
Event Code: 60054
Message: Instalační program úspěšně nainstaloval sestavení 2600 systému Windows.
Record Number: 5
Source Name: Setup
Time Written: 20120828185436.000000+120
Event Type: Informace
User:

Computer Name: DOMA-RKIVGY9AL5
Event Code: 6011
Message: Název tohoto počítače v systémech DNS a NetBIOS byl změněn z MACHINENAME na DOMA-RKIVGY9AL5.

Record Number: 4
Source Name: EventLog
Time Written: 20120828184820.000000+120
Event Type: Informace
User:

Computer Name: MACHINENAME
Event Code: 6005
Message: Služba Event Log byla spuštěna.

Record Number: 3
Source Name: EventLog
Time Written: 20120828204044.000000+120
Event Type: Informace
User:

Computer Name: MACHINENAME
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 1 Uniprocessor Free.

Record Number: 2
Source Name: EventLog
Time Written: 20120828204044.000000+120
Event Type: Informace
User:

Computer Name: MACHINENAME
Event Code: 2
Message: Během prověřování, zda \Device\Serial0 je skutečně sériový port, byl zjištěn zásobník typu FIFO. Bude použit tento zásobník.

Record Number: 1
Source Name: Serial
Time Written: 20120828204103.000000+120
Event Type: Informace
User:

=====Application event log=====

Computer Name: DOMA-RKIVGY9AL5
Event Code: 1040
Message: Zahajuji transakci Instalační služby systému Windows: {90120000-0020-0409-0000-0000000FF1CE}. ID procesu klienta: 2556.

Record Number: 390
Source Name: MsiInstaller
Time Written: 20120904212018.000000+120
Event Type: Informace
User: DOMA-RKIVGY9AL5\JA

Computer Name: DOMA-RKIVGY9AL5
Event Code: 1033
Message: Instalační služba systému Windows provedla instalaci produktu. Název produktu: Compatibility Pack für 2007 Office System (Beta). Verze produktu: 12.0.4407.1005. Jazyk produktu: 1031. Stav instalace (úspěch nebo chyba): 1602.

Record Number: 389
Source Name: MsiInstaller
Time Written: 20120904211608.000000+120
Event Type: Informace
User: DOMA-RKIVGY9AL5\JA

Computer Name: DOMA-RKIVGY9AL5
Event Code: 11708
Message: Produkt: Compatibility Pack für 2007 Office System (Beta) -- Installation fehlgeschlagen.

Record Number: 388
Source Name: MsiInstaller
Time Written: 20120904211608.000000+120
Event Type: Informace
User: DOMA-RKIVGY9AL5\JA

Computer Name: DOMA-RKIVGY9AL5
Event Code: 1042
Message: Ukončuji transakci Instalační služby systému Windows: C:\Program Files\MSECache\O2007Cnv\1031\o12conv.msi. ID procesu klienta: 216.

Record Number: 387
Source Name: MsiInstaller
Time Written: 20120904211608.000000+120
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: DOMA-RKIVGY9AL5
Event Code: 1040
Message: Zahajuji transakci Instalační služby systému Windows: C:\Program Files\MSECache\O2007Cnv\1031\o12conv.msi. ID procesu klienta: 216.

Record Number: 386
Source Name: MsiInstaller
Time Written: 20120904211606.000000+120
Event Type: Informace
User: DOMA-RKIVGY9AL5\JA

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
"windir"=%SystemRoot%
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 44 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=2c02
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"FP_NO_HOST_CHECK"=NO

-----------------EOF-----------------

[miki2177]

jinak ten word už nějak přežiju že není a nebude ..ale ten toolbar potřebuji zrušit

[vyosek]

Misto Microsoft Office doporucuji Open Office http://www.openoffice.cz/stahnout ktery je zdarma

Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com

• Pokud ho havet blokuje, pouzijte jeden z nasledujicich - i ty prejmenovane

  Rkill EXE:
  http://download.bleepingcomputer.com/grinler/rkill.exe
  
  Rkill iExplore.exe:
  http://download.bleepingcomputer.com/dl ... xplore.exe
  
  Rkill uSeRiNiT.exe:
  http://download.bleepingcomputer.com/dl ... eRiNiT.exe
  
  Rkill WiNlOgOn.exe:
  http://download.bleepingcomputer.com/dl ... NlOgOn.exe

• Ulozte nejlepena plochu a ukoncete vsechny aplikace (jinak to udela RKill za Vas)
• Spustte tradicne dvojklikem - program probehne do par sekund a ukonci i svou cinnost
• RKill ukonci vsechny ne-systemove procesy - tedy i procesy, pod kterymi bezi havet
• Na plose vznikne log Rkill.txt ten mi sem vlozte
• Ted nerestartujte PC - prisli byste o ucinek RKillu

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

• Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
• Pokud mate Win XP spustte pod uctem Spravce\Administratora
• Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
• Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
• Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
• Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
• Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
• Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
• Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

[miki2177]

jo už mám open office a ted jdu na toho zabijáka...

[vyosek]

OK, pockam si na logy (RKill + ComboFix)

[miki2177]

rkill nešel ani jeden a combofix:


ComboFix 12-09-05.02 - JA 05.09.2012 21:40:07.1.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.895.616 [GMT 2:00]
Spuštěný z: c:\documents and settings\JA\Dokumenty\Downloads\ComboFix.exe
AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\msmqinst.log
c:\windows\regopt.log
c:\windows\SET451.tmp
c:\windows\system32\_005433_.tmp.dll
c:\windows\system32\_005434_.tmp.dll
c:\windows\system32\_005435_.tmp.dll
c:\windows\system32\_005436_.tmp.dll
c:\windows\system32\_005443_.tmp.dll
c:\windows\system32\_005444_.tmp.dll
c:\windows\system32\_005445_.tmp.dll
c:\windows\system32\_005446_.tmp.dll
c:\windows\system32\_005448_.tmp.dll
c:\windows\system32\_005449_.tmp.dll
c:\windows\system32\_005452_.tmp.dll
c:\windows\system32\_005453_.tmp.dll
c:\windows\system32\_005456_.tmp.dll
c:\windows\system32\_005457_.tmp.dll
c:\windows\system32\_005459_.tmp.dll
c:\windows\system32\_005462_.tmp.dll
c:\windows\system32\_005463_.tmp.dll
c:\windows\system32\_005468_.tmp.dll
c:\windows\system32\_005470_.tmp.dll
c:\windows\system32\_005473_.tmp.dll
c:\windows\system32\_005475_.tmp.dll
c:\windows\system32\_005476_.tmp.dll
c:\windows\system32\_005477_.tmp.dll
c:\windows\system32\_005478_.tmp.dll
c:\windows\system32\_005479_.tmp.dll
c:\windows\system32\_005482_.tmp.dll
c:\windows\system32\_005483_.tmp.dll
c:\windows\system32\_005484_.tmp.dll
c:\windows\system32\_005485_.tmp.dll
c:\windows\system32\_005486_.tmp.dll
c:\windows\system32\_005491_.tmp.dll
c:\windows\system32\dllcache\dlimport.exe
c:\windows\system32\dllcache\wmpvis.dll
c:\windows\system32\SET11D.tmp
c:\windows\system32\SET11E.tmp
c:\windows\system32\SET120.tmp
c:\windows\system32\SET122.tmp
c:\windows\system32\SET124.tmp
c:\windows\system32\SET12B.tmp
c:\windows\system32\SET12C.tmp
c:\windows\system32\SET12F.tmp
c:\windows\system32\SET13E.tmp
c:\windows\system32\SET144.tmp
c:\windows\system32\SET145.tmp
c:\windows\system32\SET147.tmp
c:\windows\system32\SET148.tmp
c:\windows\system32\SET149.tmp
c:\windows\system32\SET14A.tmp
c:\windows\system32\SET14B.tmp
c:\windows\system32\SET14D.tmp
c:\windows\system32\SET14E.tmp
c:\windows\system32\SET14F.tmp
c:\windows\system32\SET150.tmp
c:\windows\system32\SET153.tmp
c:\windows\system32\SET15A.tmp
c:\windows\system32\SET15B.tmp
c:\windows\system32\SET15C.tmp
c:\windows\system32\SET15D.tmp
c:\windows\system32\SET160.tmp
c:\windows\system32\SET162.tmp
c:\windows\system32\SET163.tmp
c:\windows\system32\SET16A.tmp
c:\windows\system32\SET16C.tmp
c:\windows\system32\SET16D.tmp
c:\windows\system32\SET16E.tmp
c:\windows\system32\SET170.tmp
c:\windows\system32\SET171.tmp
c:\windows\system32\SET172.tmp
c:\windows\system32\SET177.tmp
c:\windows\system32\SET178.tmp
c:\windows\system32\SET179.tmp
c:\windows\system32\SET17A.tmp
c:\windows\system32\SET17B.tmp
c:\windows\system32\SET181.tmp
c:\windows\system32\SET186.tmp
c:\windows\system32\SET187.tmp
c:\windows\system32\SET18B.tmp
c:\windows\system32\SET18F.tmp
c:\windows\system32\SET196.tmp
c:\windows\system32\SET197.tmp
c:\windows\system32\SET19A.tmp
c:\windows\system32\SET1A7.tmp
c:\windows\system32\SET1A8.tmp
c:\windows\system32\SET1AB.tmp
c:\windows\system32\SET1AE.tmp
c:\windows\system32\SET1AF.tmp
c:\windows\system32\SET1B0.tmp
c:\windows\system32\SET1B1.tmp
c:\windows\system32\SET1C1.tmp
c:\windows\system32\SET1C6.tmp
c:\windows\system32\SET1C8.tmp
c:\windows\system32\SET1CA.tmp
c:\windows\system32\SET1CB.tmp
c:\windows\system32\SET1CC.tmp
c:\windows\system32\SET1CF.tmp
c:\windows\system32\SET1D0.tmp
c:\windows\system32\SET1D4.tmp
c:\windows\system32\SET1D5.tmp
c:\windows\system32\SET1D8.tmp
c:\windows\system32\SET1D9.tmp
c:\windows\system32\SET1DA.tmp
c:\windows\system32\SET1E0.tmp
c:\windows\system32\SET1E1.tmp
c:\windows\system32\SET1E2.tmp
c:\windows\system32\SET1E9.tmp
c:\windows\system32\SET1EA.tmp
c:\windows\system32\SET1F0.tmp
c:\windows\system32\SET1F1.tmp
c:\windows\system32\SET1F2.tmp
c:\windows\system32\SET1F5.tmp
c:\windows\system32\SET1FA.tmp
c:\windows\system32\SET1FB.tmp
c:\windows\system32\SET207.tmp
c:\windows\system32\SET20C.tmp
c:\windows\system32\SET20D.tmp
c:\windows\system32\SET219.tmp
c:\windows\system32\SET21B.tmp
c:\windows\system32\SET21C.tmp
c:\windows\system32\SET21F.tmp
c:\windows\system32\SET221.tmp
c:\windows\system32\SET225.tmp
c:\windows\system32\SET237.tmp
c:\windows\system32\SET238.tmp
c:\windows\system32\SET23F.tmp
c:\windows\system32\SET240.tmp
c:\windows\system32\SET243.tmp
c:\windows\system32\SET244.tmp
c:\windows\system32\SET245.tmp
c:\windows\system32\SET246.tmp
c:\windows\system32\SET247.tmp
c:\windows\system32\SET249.tmp
c:\windows\system32\SET24A.tmp
c:\windows\system32\SET24B.tmp
c:\windows\system32\SET24D.tmp
c:\windows\system32\SET24E.tmp
c:\windows\system32\SET24F.tmp
c:\windows\system32\SET252.tmp
c:\windows\system32\SET255.tmp
c:\windows\system32\SET25A.tmp
c:\windows\system32\SET25B.tmp
c:\windows\system32\SET25C.tmp
c:\windows\system32\SET261.tmp
c:\windows\system32\SET262.tmp
c:\windows\system32\SET263.tmp
c:\windows\system32\SET265.tmp
c:\windows\system32\SET268.tmp
c:\windows\system32\SET26A.tmp
c:\windows\system32\SET26B.tmp
c:\windows\system32\SET26F.tmp
c:\windows\system32\SET275.tmp
c:\windows\system32\SET276.tmp
c:\windows\system32\SET27D.tmp
c:\windows\system32\SET27F.tmp
c:\windows\system32\SET284.tmp
c:\windows\system32\SET28C.tmp
c:\windows\system32\SET28D.tmp
c:\windows\system32\SET290.tmp
c:\windows\system32\SET291.tmp
c:\windows\system32\SET29E.tmp
c:\windows\system32\SET2A1.tmp
c:\windows\system32\SET2A3.tmp
c:\windows\system32\SET2A4.tmp
c:\windows\system32\SET2B1.tmp
c:\windows\system32\SET2B3.tmp
c:\windows\system32\SET2B8.tmp
c:\windows\system32\SET2BC.tmp
c:\windows\system32\SET2C8.tmp
c:\windows\system32\SET2CA.tmp
c:\windows\system32\SET2CB.tmp
c:\windows\system32\SET2CC.tmp
c:\windows\system32\SET2CE.tmp
c:\windows\system32\SET2D0.tmp
c:\windows\system32\SET2D5.tmp
c:\windows\system32\SET2D7.tmp
c:\windows\system32\SET2D8.tmp
c:\windows\system32\SET2DF.tmp
c:\windows\system32\SET2EA.tmp
c:\windows\system32\SET2ED.tmp
c:\windows\system32\SET2EE.tmp
c:\windows\system32\SET2EF.tmp
c:\windows\system32\SET2F3.tmp
c:\windows\system32\SET2FB.tmp
c:\windows\system32\SET303.tmp
c:\windows\system32\SET305.tmp
c:\windows\system32\SET30B.tmp
c:\windows\system32\SET30F.tmp
c:\windows\system32\SET322.tmp
c:\windows\system32\SET326.tmp
c:\windows\system32\SET328.tmp
c:\windows\system32\SET331.tmp
c:\windows\system32\SET336.tmp
c:\windows\system32\SET34C.tmp
c:\windows\system32\SET352.tmp
c:\windows\system32\SET354.tmp
c:\windows\system32\SET356.tmp
c:\windows\system32\SET358.tmp
c:\windows\system32\SET360.tmp
c:\windows\system32\SET369.tmp
c:\windows\system32\SET36E.tmp
c:\windows\system32\SET370.tmp
c:\windows\system32\SET371.tmp
c:\windows\system32\SET372.tmp
c:\windows\system32\SET37C.tmp
c:\windows\system32\SET380.tmp
c:\windows\system32\SET385.tmp
c:\windows\system32\SET38B.tmp
c:\windows\system32\SET39E.tmp
c:\windows\system32\SET39F.tmp
c:\windows\system32\SET3A4.tmp
c:\windows\system32\SET3CB.tmp
c:\windows\system32\SET3D2.tmp
c:\windows\system32\SET3D3.tmp
c:\windows\system32\SET3D4.tmp
c:\windows\system32\SET3D6.tmp
c:\windows\system32\SET3D7.tmp
c:\windows\system32\SET3D8.tmp
c:\windows\system32\SET3D9.tmp
c:\windows\system32\SET3DB.tmp
c:\windows\system32\SET3DD.tmp
c:\windows\system32\SET3DE.tmp
c:\windows\system32\SET3E0.tmp
c:\windows\system32\SET3E3.tmp
c:\windows\system32\SET3E5.tmp
c:\windows\system32\SET3EA.tmp
c:\windows\system32\SET3EB.tmp
c:\windows\system32\SET3F3.tmp
c:\windows\system32\SET3F9.tmp
c:\windows\system32\SET3FE.tmp
c:\windows\system32\SET402.tmp
c:\windows\system32\SET405.tmp
c:\windows\system32\SET407.tmp
c:\windows\system32\SET40B.tmp
c:\windows\system32\SET40D.tmp
c:\windows\system32\SET40E.tmp
c:\windows\system32\SET40F.tmp
c:\windows\system32\SET413.tmp
c:\windows\system32\SET414.tmp
c:\windows\system32\SET418.tmp
c:\windows\system32\SET419.tmp
c:\windows\system32\SET41E.tmp
c:\windows\system32\SET424.tmp
c:\windows\system32\SET427.tmp
c:\windows\system32\SET429.tmp
c:\windows\system32\SET42C.tmp
c:\windows\system32\SET42F.tmp
c:\windows\system32\SET431.tmp
c:\windows\system32\SET5CC.tmp
c:\windows\system32\SET5D2.tmp
c:\windows\system32\SETF49.tmp
c:\windows\system32\SETF4B.tmp
c:\windows\system32\SETF4D.tmp
c:\windows\system32\SETF54.tmp
c:\windows\system32\SETF59.tmp
c:\windows\system32\SETF67.tmp
c:\windows\system32\SETF8D.tmp
c:\windows\system32\SETFBC.tmp
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-08-05 do 2012-09-05 )))))))))))))))))))))))))))))))
.
.
2012-09-04 20:18 . 2012-09-04 20:21 -------- d-----w- C:\rsit
2012-08-29 13:03 . 2012-08-29 13:03 -------- d-----w- C:\10d617fb2a7ffd9b3d
2012-08-29 13:02 . 2012-08-29 13:02 -------- d-----w- C:\4962938dd5f5bfa853b2
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2012-04-11 3672384]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\System32\NvCpl.dll" [2007-11-08 8491008]
"nwiz"="nwiz.exe" [2007-11-08 1626112]
"NvMediaCenter"="c:\windows\System32\NvMcTray.dll" [2007-11-08 81920]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"RTHDCPL"="RTHDCPL.EXE" [2007-02-26 16125440]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-03-26 931200]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2008-03-10 689488]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2008-03-17 1848648]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"OE_WMPWMFSDK_Install_2"="c:\windows\System32\wmnetmgr.dll" [2008-04-14 1053184]
"OE_WMPWMFSDK_Install_3"="c:\windows\System32\wmv8dmod.dll" [2003-04-16 311327]
"OE_WMPWMFSDK_Install_4"="c:\windows\System32\wmvdmod.dll" [2008-04-14 809984]
"OE_WMPWMFSDK_Install_5"="c:\windows\System32\wmvdmoe2.dll" [2008-04-14 1001472]
"OE_WMPWMFSDK_Install_6"="c:\windows\System32\wmadmoe.dll" [2008-04-14 670720]
"OE_WMPWMFSDK_Install_7"="c:\windows\System32\wmspdmod.dll" [2008-04-14 485376]
"OE_WMPWMFSDK_Install_8"="c:\windows\System32\wmspdmoe.dll" [2008-04-14 897024]
"OE_WMPWMFSDK_Install_9"="c:\windows\System32\wmsdmoe.dll" [2008-04-14 115200]
"OE_WMPWMFSDK_Install_10"="c:\windows\System32\wmsdmoe2.dll" [2008-04-14 1119744]
"OE_WMPWMFSDK_Install_20"="c:\windows\System32\wmadmod.dll" [2008-04-14 408064]
"OE_WMPWMFSDK_Install_21"="c:\windows\System32\mpg4dmod.dll" [2008-04-14 240640]
"OE_WMPWMFSDK_Install_22"="c:\windows\System32\mp43dmod.dll" [2008-04-14 310272]
"OE_WMPWMFSDK_Install_23"="c:\windows\System32\mp4sdmod.dll" [2008-04-14 384512]
"OE_WMPWMFSDK_Install_24"="c:\windows\System32\wmsdmod.dll" [2008-04-14 759296]
"OE_WMPWMFSDK_Install_30"="c:\windows\System32\laprxy.dll" [2008-04-14 6656]
"OE_WMPWMFSDK_Install_31"="c:\windows\System32\logagent.exe" [2008-04-14 103936]
"OE_WMPWMFSDK_Install_32"="c:\windows\System32\wmvcore.dll" [2008-04-14 2109440]
"OE_WMPDRM_Install_1"="c:\windows\system32\drmstor.dll" [2008-04-14 87040]
"OE_WMPDRM_Install_2"="c:\windows\system32\drmclien.dll" [2008-04-14 299520]
"OE_WMPDRM_Install_4"="c:\windows\system32\drmv2clt.dll" [2008-04-14 695808]
"OE_WMPDRM_Install_5"="c:\windows\system32\blackbox.dll" [2008-04-14 286720]
"OE_WMPDRM_Install_6"="c:\windows\system32\msnetobj.dll" [2008-04-14 259072]
"OE_WMPWMP7_Install_0"="c:\windows\INF\unregmp2.exe" [2008-04-14 208896]
"OE_WMPWMP7_Install_1"="c:\program files\Windows Media Player\migrate.exe" [2008-04-14 786432]
"OE_WMPWMP7_Install_2"="c:\windows\system32\wmp.dll" [2008-04-14 4874240]
"OE_WMPWMP7_Install_8"="c:\windows\system32\wmpshell.dll" [2008-04-14 102400]
"OE_WMPWMP7_Install_9"="c:\windows\system32\wmpasf.dll" [2008-04-14 114688]
"OE_WMPWMP7_Install_10"="c:\windows\system32\wmpdxm.dll" [2008-04-14 233472]
"OE_WMPWMP7_Install_11"="c:\program files\Windows Media Player\mpvis.dll" [2008-04-14 368640]
"OE_WMPWMDM_Install_7"="c:\windows\system32\mspmsnsv.dll" [2008-04-14 52224]
"OE_WMPWMP7_Install_20"="c:\windows\INF\unregmp2.exe" [2008-04-14 208896]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2004-08-17 15360]
.
c:\documents and settings\JA\Nabídka Start\Programy\Po spuštění\
OpenOffice.org 3.3.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
.
R0 sptd;sptd;\SystemRoot\\SystemRoot\System32\Drivers\sptd.sys --> \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [?]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [1.9.2012 18:53 242240]
R1 MpKsle8b3ba24;MpKsle8b3ba24;c:\documents and settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{DC2BBDA1-6B88-4C5B-984D-DDACF51EA95C}\MpKsle8b3ba24.sys [5.9.2012 21:35 29904]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - MPKSLE8B3BA24
.
Obsah adresáře 'Naplánované úlohy'
.
2012-09-05 c:\windows\Tasks\Microsoft Antimalware Scheduled Scan.job
- c:\program files\Microsoft Security Client\MpCmdRun.exe [2012-03-26 15:03]
.
2012-09-05 c:\windows\Tasks\MpIdleTask.job
- c:\program files\Microsoft Security Client\MpCmdRun.exe [2012-03-26 15:03]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://search.chatzum.com/
mStart Page = hxxp://search.chatzum.com/
uInternet Connection Wizard,ShellNext = iexplore
TCP: DhcpNameServer = 109.164.64.64 8.8.8.8
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-09-05 21:45
Windows 5.1.2600 Service Pack 2 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
Celkový čas: 2012-09-05 21:47:25
ComboFix-quarantined-files.txt 2012-09-05 19:47
.
Před spuštěním: Volných bajtů: 67 366 961 152
Po spuštění: Volných bajtů: 67 449 884 672
.
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /usepmtimer /NoExecute=OptIn
.
- - End Of File - - 24E79B2F7FDA259D6A352CE91736E31F

[vyosek]

Pokud nemate, tak presunte Combofix na plochu

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  KillAll::
  
  DDS::
  uStart Page = hxxp://search.chatzum.com/
  mStart Page = hxxp://search.chatzum.com/
  
  Registry::
  [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "DAEMON Tools Lite"=-
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  "CTFMON.EXE"=-
  "Google Update"=-
  [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
  
  File::
  C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-789336058-861567501-839522115-1003Core.job
  C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-789336058-861567501-839522115-1003UA.job
  
  ClearJavaCache::
  
  Reboot::

• Ulozte vytvoreny TXT jako CFScript.txt
• Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
  
• Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Pokud vyskoci hlaska "Pokus pouzit neplatnou operaci na klic registru, ktery je oznacen pro odstraneni", tak jen restartujte PC - registr se da do kupy - jedna se o vnitrni chybu, kterou zpusobuje CF a autor ji zatim neumi bohuzel opravit

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

[miki2177]

tak jsem vše udělala... potom se to nectělo načíst → restart a po naběhnutí žádnej log .. je někde kde ho můžu najít?

[vyosek]

Log se zrejme nevytvoril

Spise se zeptam ja, ten kram zmizel?