Keylogger v PC, jak zjistit a odstranit?

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
kala
Návštěvník
Návštěvník
Příspěvky: 63
Registrován: 05 Dub 2013 10:00

Keylogger v PC, jak zjistit a odstranit?

#1 Příspěvek od kala »

Obracim se tu o radu.
Mam podezreni, ze do meho PC byl nainstalovan nejaky Keylogger. Nejspis se to stalo behem instalace systemu v nedavne dobe (Windows XP) nebo nekdy potom.
Kazdopadne se chci zeptat jakym zpusobem muzu zjistit jestli tam ten Keylogger je nebo neni a jak ho 100% odinstalovat? Kdyz chci stahnout Antikeylogger, tak mi vzdycky spadne kazdy prohlizec a kdyz jsem si jej nechal stahnout jinde, tak zase nejde spustit instalace toho programu, protoze instalacka okamzite spadne take. Je i tohle jasny dukaz o keyloggeru v PC? Je mozne aby mi nekdo vnucoval to, ze jsem si ho tam stahl sam nejakym programem ktery mel u sebe hack nebo crack? Jsou to programy 100x odzkousene z minulosti a tenhle problem nikdy nebyl. Nebo je jasne, ze ho tam musel dat nekdo kdo mel pristup k PC?
Ten clovek mi doporucuje at stahnu Commodo, ze pokud tam neco je ze to najde a odinstaluje. Je to mozne? Zkousel jsem scan Spybotem a nic jakoze zavadneho nenasel. Presto jsou ty problemy s Antiloggerem a u jedne osoby se v PC ojevily slozka na FTP prave s timto nazvem Keyloggeru.

Snad jsem to napsal srozumitelne. Budu vrlmi rad za kazdou odpoved a radu co s tim. Dekuji!

Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Keylogger v PC, jak zjistit a odstranit?

#2 Příspěvek od JaRon »

budem strucny - vloz log RSIT a pozrieme na to :James008:
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

kala
Návštěvník
Návštěvník
Příspěvky: 63
Registrován: 05 Dub 2013 10:00

Re: Keylogger v PC, jak zjistit a odstranit?

#3 Příspěvek od kala »

Díky, ale nejsem zbehly v PC zkratkach a programech. potrebuju to vice polopaticky. Jak mam to co potrebujete ziskat? Diky.

Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Keylogger v PC, jak zjistit a odstranit?

#4 Příspěvek od JaRon »

klikni na fialove RSIT v mojom podpise - tam je navod :)
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

kala
Návštěvník
Návštěvník
Příspěvky: 63
Registrován: 05 Dub 2013 10:00

Re: Keylogger v PC, jak zjistit a odstranit?

#5 Příspěvek od kala »

Bezva, diky. Provedu to a poslu to asi radeji do soukrome posty? Nebo je bezpecne ho zverejnit tady?

Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Keylogger v PC, jak zjistit a odstranit?

#6 Příspěvek od JaRon »

kludne ho vloz do fora ako tisice ludi pred Tebou :)
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

kala
Návštěvník
Návštěvník
Příspěvky: 63
Registrován: 05 Dub 2013 10:00

Re: Keylogger v PC, jak zjistit a odstranit?

#7 Příspěvek od kala »

Dobře.

Kód: Vybrat vše

Logfile of random's system information tool 1.09 (written by random/random)
Run by Lada at 2013-04-05 11:16:48
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 819 GB (86%) free of 954 GB
Total RAM: 3071 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:17:00, on 5.4.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Nitro\Reader 3\NitroPDFReaderDriverService3.exe
C:\Program Files\PANDORA.TV\PanService\PandoraService.exe
C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
C:\Program Files\PANDORA.TV\PanService\PanProcess.exe
C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Documents and Settings\Lada\Plocha\Download\RSIT.exe
C:\Program Files\trend micro\Lada.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://get.adobe.com/flashplayer/completion/aih/?exitcode=0&type=install
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [USBToolTip] C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NitroPDFReaderDriverCreatorReadSpool3 (NitroReaderDriverReadSpool3) - Nitro PDF Software - C:\Program Files\Nitro\Reader 3\NitroPDFReaderDriverService3.exe
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files\PANDORA.TV\PanService\PandoraService.exe
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--
End of file - 6737 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Check for updates (Spybot - Search & Destroy).job
C:\WINDOWS\tasks\Refresh immunization (Spybot - Search & Destroy).job
C:\WINDOWS\tasks\Scan the system (Spybot - Search & Destroy).job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Lada\Data aplikací\Mozilla\Firefox\Profiles\ah7fsb89.default

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.6.602.180 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.17.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\WINDOWS\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nitropdf.com/NitroPDF]
"Description"=NitroPDF Web Browser Plugin
"Path"=C:\Program Files\Nitro\Reader 3\npnitromozilla.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll [2012-11-13 3214392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-03-26 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-03-26 170912]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe [2009-08-25 33660928]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2013-03-28 345312]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-07-04 98304]
"USBToolTip"=C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe [2007-02-20 199752]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
"SDTray"=C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [2012-11-13 3825176]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2012-07-04 192512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SDWinLogon]
SDWinLogon.dll []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Pinnacle\Studio 14\Programs\RM.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 14\Programs\umi.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\umi.exe:*:Enabled:umi"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon"
"C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"
"C:\Program Files\PANDORA.TV\PanService\PanProcess.exe"="C:\Program Files\PANDORA.TV\PanService\PanProcess.exe:*:Enabled:PanProcess"
"C:\Program Files\PANDORA.TV\PanService\PandoraService.exe"="C:\Program Files\PANDORA.TV\PanService\PandoraService.exe:*:Enabled:PandoraService"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.FMVC"=fmcodec.dll

======List of files/folders created in the last 1 month======

2013-04-05 11:16:48 ----D---- C:\rsit
2013-04-05 11:16:48 ----D---- C:\Program Files\trend micro
2013-04-04 18:21:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2013-04-04 18:21:26 ----A---- C:\WINDOWS\system32\sdnclean.exe
2013-04-04 18:21:20 ----D---- C:\Program Files\Spybot - Search & Destroy 2
2013-04-04 17:10:57 ----HD---- C:\WINDOWS\PIF
2013-04-04 17:10:25 ----A---- C:\WINDOWS\system32\zip32.dll
2013-04-04 17:10:24 ----A---- C:\WINDOWS\system32\asmwmenu.dll
2013-04-04 17:10:22 ----A---- C:\WINDOWS\system32\Zipit.dll
2013-04-04 17:10:22 ----A---- C:\WINDOWS\system32\Zipdll.dll
2013-04-04 17:10:17 ----D---- C:\Program Files\AsmwSoft
2013-04-04 13:38:27 ----D---- C:\Program Files\Mozilla Firefox
2013-03-28 11:12:19 ----A---- C:\WINDOWS\ntbtlog.txt
2013-03-26 16:41:29 ----D---- C:\Documents and Settings\Lada\Data aplikací\Nitro
2013-03-26 16:41:29 ----D---- C:\Documents and Settings\Lada\Data aplikací\FileOpen
2013-03-26 16:41:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\FileOpen
2013-03-26 14:35:14 ----D---- C:\WINDOWS\Sun
2013-03-26 14:32:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2013-03-26 14:32:26 ----D---- C:\Program Files\Common Files\Java
2013-03-26 14:32:07 ----A---- C:\WINDOWS\system32\npDeployJava1.dll
2013-03-26 14:32:07 ----A---- C:\WINDOWS\system32\javaws.exe
2013-03-26 14:32:07 ----A---- C:\WINDOWS\system32\deployJava1.dll
2013-03-26 14:32:02 ----A---- C:\WINDOWS\system32\WindowsAccessBridge.dll
2013-03-26 14:32:02 ----A---- C:\WINDOWS\system32\javaw.exe
2013-03-26 14:32:02 ----A---- C:\WINDOWS\system32\java.exe
2013-03-26 14:31:43 ----D---- C:\Program Files\Java
2013-03-26 14:30:52 ----D---- C:\Documents and Settings\Lada\Data aplikací\Sun
2013-03-25 23:27:03 ----RD---- C:\Dvd3
2013-03-25 23:26:59 ----RD---- C:\DVD4
2013-03-25 18:24:31 ----D---- C:\Program Files\GetFLV
2013-03-25 17:43:03 ----D---- C:\HD exporty video projektů a DVD
2013-03-21 13:10:06 ----A---- C:\WINDOWS\system32\d3d9caps.dat
2013-03-20 11:49:05 ----A---- C:\WINDOWS\system32\unrar.dll
2013-03-20 11:49:01 ----D---- C:\Program Files\K-Lite Codec Pack
2013-03-19 22:38:50 ----D---- C:\Documents and Settings\Lada\Data aplikací\Skype
2013-03-19 22:38:36 ----D---- C:\Program Files\Common Files\Skype
2013-03-19 22:38:35 ----RD---- C:\Program Files\Skype
2013-03-19 22:38:16 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2013-03-19 21:19:08 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2013-03-19 21:08:11 ----D---- C:\Program Files\MSXML 4.0
2013-03-19 16:12:41 ----D---- C:\Program Files\PANDORA.TV
2013-03-19 15:10:06 ----D---- C:\Program Files\DVDVideoSoft
2013-03-19 15:10:06 ----D---- C:\Program Files\Common Files\DVDVideoSoft
2013-03-19 15:10:06 ----D---- C:\Documents and Settings\Lada\Data aplikací\DVDVideoSoft
2013-03-19 15:08:05 ----D---- C:\Program Files\DsNET Corp
2013-03-19 13:24:58 ----A---- C:\WINDOWS\unvise32.exe
2013-03-19 13:24:55 ----D---- C:\Program Files\LooksBuilderSE
2013-03-19 12:36:57 ----A---- C:\WINDOWS\system32\drivers\MarvinBus.sys
2013-03-19 12:36:51 ----D---- C:\Program Files\Common Files\Pinnacle
2013-03-19 12:36:02 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle Studio Ultimate Collection
2013-03-19 12:31:30 ----D---- C:\Program Files\Common Files\Pegasus Imaging
2013-03-19 12:31:25 ----D---- C:\Program Files\Common Files\Yahoo!
2013-03-19 12:31:24 ----D---- C:\Program Files\Pinnacle
2013-03-19 12:31:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\Studio 14
2013-03-19 12:31:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle Studio Plus
2013-03-19 12:12:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle
2013-03-19 12:00:44 ----N---- C:\WINDOWS\system32\spmsg2.dll
2013-03-19 12:00:39 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2013-03-19 11:57:58 ----D---- C:\WINDOWS\system32\XPSViewer
2013-03-19 11:57:54 ----D---- C:\Program Files\MSBuild
2013-03-19 11:57:47 ----D---- C:\Program Files\Reference Assemblies
2013-03-19 11:56:59 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2013-03-19 11:56:59 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2013-03-19 11:56:59 ----N---- C:\WINDOWS\system32\prntvpt.dll
2013-03-19 11:56:58 ----D---- C:\0607433db81cfbbeb5f5b762edf26d
2013-03-19 11:50:25 ----HDC---- C:\WINDOWS\$NtUninstallKB942288-v3$
2013-03-19 11:29:41 ----D---- C:\Documents and Settings\Lada\Data aplikací\Nitro PDF
2013-03-19 11:29:10 ----D---- C:\Documents and Settings\Lada\Data aplikací\WinRAR
2013-03-19 11:29:04 ----D---- C:\Program Files\WinRAR
2013-03-19 11:12:54 ----D---- C:\Program Files\Common Files\Adobe
2013-03-19 11:12:54 ----D---- C:\Program Files\Adobe
2013-03-19 11:11:36 ----A---- C:\WINDOWS\IsUn0405.exe
2013-03-18 23:28:05 ----D---- C:\Documents and Settings\Lada\Data aplikací\vlc
2013-03-18 22:59:32 ----D---- C:\Documents and Settings\Lada\Data aplikací\Adobe
2013-03-18 22:59:03 ----D---- C:\Program Files\VideoLAN
2013-03-18 22:56:24 ----D---- C:\Documents and Settings\Lada\Data aplikací\Mozilla
2013-03-18 22:56:17 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-03-18 22:56:17 ----D---- C:\Documents and Settings\All Users\Data aplikací\Mozilla
2013-03-18 22:43:52 ----D---- C:\Documents and Settings\Lada\Data aplikací\ATI
2013-03-18 22:43:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\ATI
2013-03-18 22:38:10 ----A---- C:\WINDOWS\system32\drivers\AtihdXP3.sys
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\Oemdspif.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\drivers\ati2erec.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ativvaxx.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ativvamv.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ativva6x.dat
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ativva5x.dat
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ativcoxx.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\atitvo32.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\atipdlxx.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\atiok3x2.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\atioglxx.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ATIODE.exe
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ATIODCLI.exe
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\atimpc32.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\atikvmag.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\atiiiexx.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\atiicdxx.dat
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ATIDEMGX.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ATIDDC.DLL
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\atibtmon.exe
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\atiapfxx.exe
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\atiadlxx.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ati3duag.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\Ati2mdxx.exe
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ati2evxx.exe
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ati2evxx.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ati2edxx.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ati2dvag.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ati2cqag.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\amdpcom32.dll
2013-03-18 22:29:26 ----D---- C:\Program Files\ATI
2013-03-18 22:28:27 ----D---- C:\AMD
2013-03-18 22:13:24 ----D---- C:\Program Files\DIFX
2013-03-18 21:57:15 ----D---- C:\Program Files\ATI Technologies
2013-03-18 21:56:33 ----D---- C:\ATI
2013-03-18 21:36:45 ----D---- C:\Documents and Settings\Lada\Data aplikací\Macromedia
2013-03-18 19:58:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2492386$
2013-03-18 17:38:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2807986$
2013-03-18 17:38:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2780091$
2013-03-18 17:38:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2802968$
2013-03-18 17:36:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2799494$
2013-03-18 17:36:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2778344$
2013-03-18 17:32:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2757638$
2013-03-18 17:32:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2753842-v2$
2013-03-18 17:32:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2779562$
2013-03-18 17:32:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2770660$
2013-03-18 17:32:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2758857$
2013-03-18 17:32:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2727528$
2013-03-18 17:32:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2013-03-18 17:31:57 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2013-03-18 17:31:41 ----D---- C:\Documents and Settings\Lada\Data aplikací\Avira
2013-03-18 17:20:56 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2013-03-18 17:20:47 ----A---- C:\WINDOWS\system32\MSSTDFMT.DLL
2013-03-18 17:20:46 ----A---- C:\WINDOWS\system32\IJL_11.DLL
2013-03-18 17:14:07 ----A---- C:\WINDOWS\system32\drivers\ssmdrv.sys
2013-03-18 17:14:05 ----A---- C:\WINDOWS\system32\drivers\avkmgr.sys
2013-03-18 17:14:05 ----A---- C:\WINDOWS\system32\drivers\avipbb.sys
2013-03-18 17:14:05 ----A---- C:\WINDOWS\system32\drivers\avgntflt.sys
2013-03-18 17:14:03 ----D---- C:\Program Files\Avira
2013-03-18 17:14:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\Avira
2013-03-18 17:05:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2705219-v2$
2013-03-18 17:05:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2723135-v2$
2013-03-18 17:05:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2661254-v2$
2013-03-18 17:05:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2749655$
2013-03-18 17:05:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2736233$
2013-03-18 17:05:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2712808$
2013-03-18 17:05:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2698365$
2013-03-18 17:05:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2719985$
2013-03-18 17:04:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2655992$
2013-03-18 17:04:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2691442$
2013-03-18 17:04:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2686509$
2013-03-18 17:04:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2659262$
2013-03-18 17:04:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2676562$
2013-03-18 17:01:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2653956$
2013-03-18 17:00:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2661637$
2013-03-18 16:59:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2467659$
2013-03-18 16:58:55 ----D---- C:\WINDOWS\ie8updates
2013-03-18 16:58:30 ----D---- C:\WINDOWS\WBEM
2013-03-18 16:56:25 ----HDC---- C:\WINDOWS\ie8
2013-03-18 16:54:04 ----A---- C:\WINDOWS\system32\MRT.exe
2013-03-18 16:50:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2646524$
2013-03-18 16:50:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2598479$
2013-03-18 16:50:44 ----HDC---- C:\WINDOWS\$NtUninstallKB2603381$
2013-03-18 16:50:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2585542$
2013-03-18 16:50:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2631813$
2013-03-18 16:50:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2584146$
2013-03-18 16:49:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$
2013-03-18 16:48:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2013-03-18 16:48:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2618451$
2013-03-18 16:48:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2624667$
2013-03-18 16:48:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893-v2$
2013-03-18 16:48:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$
2013-03-18 16:48:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$
2013-03-18 16:48:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2013-03-18 16:48:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2013-03-18 16:48:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2013-03-18 16:48:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2013-03-18 16:48:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2535512$
2013-03-18 16:48:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2509553$
2013-03-18 16:48:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2510581$
2013-03-18 16:48:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2506212$
2013-03-18 16:48:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2013-03-18 16:47:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2485663$
2013-03-18 16:47:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2481109$
2013-03-18 16:47:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2479943$
2013-03-18 16:47:45 ----HDC---- C:\WINDOWS\$NtUninstallKB971029$
2013-03-18 16:47:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$
2013-03-18 16:47:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$
2013-03-18 16:47:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$
2013-03-18 16:47:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$
2013-03-18 16:47:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2419632$
2013-03-18 16:47:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2013-03-18 16:47:12 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2013-03-18 16:47:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2013-03-18 16:47:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2013-03-18 16:47:01 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2013-03-18 16:46:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2013-03-18 16:46:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2013-03-18 16:46:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2013-03-18 16:46:45 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2013-03-18 16:46:42 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2013-03-18 16:46:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2013-03-18 16:46:35 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2013-03-18 16:46:32 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2013-03-18 16:46:29 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2013-03-18 16:46:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2013-03-18 16:46:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2013-03-18 16:46:19 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2013-03-18 16:46:17 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2013-03-18 16:46:14 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2013-03-18 16:46:09 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2013-03-18 16:46:05 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2013-03-18 16:46:02 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2013-03-18 16:45:59 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2013-03-18 16:45:55 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2013-03-18 16:45:50 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2013-03-18 16:45:46 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2013-03-18 16:45:43 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2013-03-18 16:45:38 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2013-03-18 16:45:33 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2013-03-18 16:45:30 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2013-03-18 16:45:26 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2013-03-18 16:45:23 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2013-03-18 16:45:18 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2013-03-18 16:45:15 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2013-03-18 16:45:11 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2013-03-18 16:45:08 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2013-03-18 16:45:04 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2013-03-18 16:45:02 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2013-03-18 16:44:58 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2013-03-18 16:44:55 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2013-03-18 16:44:52 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2013-03-18 16:44:48 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2013-03-18 16:44:45 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2013-03-18 16:44:42 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2013-03-18 16:44:38 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2013-03-18 16:44:32 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2013-03-18 16:44:29 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2013-03-18 16:44:25 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2013-03-18 16:44:19 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2013-03-18 16:44:10 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2013-03-18 16:44:05 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2013-03-18 16:44:01 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2013-03-18 16:43:58 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2013-03-18 16:43:54 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2013-03-18 16:43:51 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2013-03-18 16:43:48 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2013-03-18 16:43:44 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2013-03-18 16:43:40 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2013-03-18 16:43:36 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2013-03-18 16:37:38 ----N---- C:\WINDOWS\system32\iacenc.dll
2013-03-18 16:29:47 ----N---- C:\WINDOWS\system32\browserchoice.exe
2013-03-18 16:23:52 ----N---- C:\WINDOWS\system32\drivers\bthport.sys
2013-03-18 16:22:54 ----A---- C:\WINDOWS\system32\h323log.txt
2013-03-18 16:21:36 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2013-03-18 16:20:21 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2013-03-18 16:19:04 ----A---- C:\WINDOWS\system32\drivers\enum1394.sys
2013-03-18 16:18:37 ----A---- C:\WINDOWS\system32\usbui.dll
2013-03-18 16:18:26 ----RSD---- C:\WINDOWS\assembly
2013-03-18 16:18:08 ----D---- C:\WINDOWS\system32\en-US
2013-03-18 16:18:06 ----D---- C:\Program Files\Microsoft.NET
2013-03-18 16:18:05 ----D---- C:\WINDOWS\Microsoft.NET
2013-03-18 16:16:57 ----A---- C:\WINDOWS\imsins.BAK
2013-03-18 16:16:55 ----SHD---- C:\WINDOWS\Installer
2013-03-18 16:16:55 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-03-18 16:16:53 ----D---- C:\Program Files\Common Files\ODBC
2013-03-18 16:16:53 ----A---- C:\WINDOWS\ODBCINST.INI
2013-03-18 16:16:50 ----D---- C:\Program Files\Common Files\SpeechEngines
2013-03-18 16:16:49 ----RD---- C:\Program Files
2013-03-18 16:16:49 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-03-18 16:16:49 ----D---- C:\Program Files\Common Files
2013-03-18 16:16:45 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2013-03-18 16:16:44 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2013-03-18 16:16:44 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2013-03-18 16:16:42 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2013-03-18 16:16:42 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2013-03-18 16:16:42 ----RA---- C:\WINDOWS\system32\kbdur.dll
2013-03-18 16:16:42 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2013-03-18 16:16:42 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2013-03-18 16:16:42 ----RA---- C:\WINDOWS\system32\kbdru.dll
2013-03-18 16:16:42 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2013-03-18 16:16:42 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2013-03-18 16:16:42 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2013-03-18 16:16:42 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2013-03-18 16:16:42 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2013-03-18 16:16:42 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2013-03-18 16:16:40 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2013-03-18 16:16:39 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2013-03-18 16:16:39 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2013-03-18 16:16:39 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2013-03-18 16:16:39 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2013-03-18 16:16:39 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2013-03-18 16:16:39 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2013-03-18 16:16:38 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2013-03-18 16:16:38 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2013-03-18 16:16:37 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2013-03-18 16:16:37 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2013-03-18 16:16:37 ----RA---- C:\WINDOWS\system32\kbdest.dll
2013-03-18 16:16:34 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2013-03-18 16:16:34 ----A---- C:\WINDOWS\system32\kbdsl.dll
2013-03-18 16:16:34 ----A---- C:\WINDOWS\system32\kbdro.dll
2013-03-18 16:16:34 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2013-03-18 16:16:34 ----A---- C:\WINDOWS\system32\kbdpl.dll
2013-03-18 16:16:34 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2013-03-18 16:16:34 ----A---- C:\WINDOWS\system32\kbdhu.dll
2013-03-18 16:16:34 ----A---- C:\WINDOWS\system32\kbdcr.dll
2013-03-18 16:16:34 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2013-03-18 16:16:33 ----A---- C:\WINDOWS\system32\kbdycl.dll
2013-03-18 16:16:32 ----A---- C:\WINDOWS\system32\irclass.dll
2013-03-18 16:16:32 ----A---- C:\WINDOWS\system32\dgsetup.dll
2013-03-18 16:16:32 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2013-03-18 16:16:31 ----A---- C:\WINDOWS\system32\spxcoins.dll
2013-03-18 16:16:31 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2013-03-18 16:16:29 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2013-03-18 16:16:29 ----A---- C:\WINDOWS\TASKMAN.EXE
2013-03-18 16:16:28 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2013-03-18 16:16:28 ----A---- C:\WINDOWS\system32\batt.dll
2013-03-18 16:16:28 ----A---- C:\WINDOWS\NOTEPAD.EXE
2013-03-18 16:16:27 ----A---- C:\WINDOWS\system32\storprop.dll
2013-03-18 16:16:12 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2013-03-18 16:16:09 ----RA---- C:\WINDOWS\SET8.tmp
2013-03-18 16:16:05 ----RA---- C:\WINDOWS\SET4.tmp
2013-03-18 16:16:02 ----RA---- C:\WINDOWS\SET3.tmp
2013-03-18 16:15:58 ----D---- C:\WINDOWS\system32\CatRoot2
2013-03-18 16:15:58 ----D---- C:\WINDOWS\system32\CatRoot
2013-03-18 16:15:51 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2013-03-18 16:15:39 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2013-03-18 16:15:30 ----D---- C:\WINDOWS\system32\PreInstall
2013-03-18 16:15:29 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2013-03-18 16:15:28 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2013-03-18 16:15:28 ----HD---- C:\WINDOWS\$hf_mig$
2013-03-18 16:15:27 ----A---- C:\WINDOWS\setuplog.txt
2013-03-18 16:15:25 ----SHD---- C:\System Volume Information
2013-03-18 16:15:25 ----N---- C:\WINDOWS\system32\spmsg.dll
2013-03-18 16:15:25 ----D---- C:\Documents and Settings
2013-03-18 16:15:24 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2013-03-18 16:14:47 ----SH---- C:\boot.ini
2013-03-18 16:13:02 ----A---- C:\WINDOWS\system32\wups2.dll
2013-03-18 16:13:01 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2013-03-18 16:12:02 ----SHD---- C:\RECYCLER
2013-03-18 16:10:50 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2013-03-18 16:10:48 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2013-03-18 16:10:44 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys
2013-03-18 16:10:42 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2013-03-18 16:10:37 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2013-03-18 16:10:35 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2013-03-18 16:10:33 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2013-03-18 16:10:31 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2013-03-18 16:10:28 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys
2013-03-18 16:10:26 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys
2013-03-18 16:10:22 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2013-03-18 16:10:18 ----A---- C:\WINDOWS\system32\ksuser.dll
2013-03-18 16:10:18 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2013-03-18 16:10:17 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2013-03-18 16:10:02 ----N---- C:\WINDOWS\system32\difxapi.dll
2013-03-18 16:10:01 ----D---- C:\Program Files\VIA
2013-03-18 16:09:57 ----D---- C:\Program Files\Common Files\InstallShield
2013-03-18 16:09:29 ----A---- C:\WINDOWS\system32\nitrolocalui2.dll
2013-03-18 16:09:29 ----A---- C:\WINDOWS\system32\nitrolocalmon2.dll
2013-03-18 16:09:22 ----D---- C:\Program Files\Nitro
2013-03-18 16:09:22 ----D---- C:\Program Files\Common Files\Nitro
2013-03-18 16:09:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\Nitro
2013-03-18 16:09:01 ----D---- C:\Documents and Settings\Lada\Data aplikací\Downloaded Installations
2013-03-18 16:07:52 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-03-18 16:07:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2013-03-18 16:07:23 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-03-18 16:07:23 ----RSD---- C:\WINDOWS\Fonts
2013-03-18 16:07:23 ----RD---- C:\WINDOWS\Web
2013-03-18 16:07:23 ----HD---- C:\WINDOWS\inf
2013-03-18 16:07:23 ----D---- C:\WINDOWS\WinSxS
2013-03-18 16:07:23 ----D---- C:\WINDOWS\twain_32
2013-03-18 16:07:23 ----D---- C:\WINDOWS\Temp
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\wins
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\wbem
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\usmt
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\spool
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\ShellExt
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\Setup
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\ras
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\oobe
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\npp
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\mui
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\inetsrv
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\IME
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\icsxml
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\ias
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\export
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\drivers\etc
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\drivers\disdn
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\drivers
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\dhcp
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\cs-cz
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\cs
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\config
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\3com_dmi
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\3076
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\2052
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\1054
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\1042
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\1041
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\1037
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\1033
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\1031
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\1029
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\1028
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\1025
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system
2013-03-18 16:07:23 ----D---- C:\WINDOWS\security
2013-03-18 16:07:23 ----D---- C:\WINDOWS\Resources
2013-03-18 16:07:23 ----D---- C:\WINDOWS\repair
2013-03-18 16:07:23 ----D---- C:\WINDOWS\Provisioning
2013-03-18 16:07:23 ----D---- C:\WINDOWS\pchealth
2013-03-18 16:07:23 ----D---- C:\WINDOWS\PeerNet
2013-03-18 16:07:23 ----D---- C:\WINDOWS\Network Diagnostic
2013-03-18 16:07:23 ----D---- C:\WINDOWS\mui
2013-03-18 16:07:23 ----D---- C:\WINDOWS\msapps
2013-03-18 16:07:23 ----D---- C:\WINDOWS\msagent
2013-03-18 16:07:23 ----D---- C:\WINDOWS\Media
2013-03-18 16:07:23 ----D---- C:\WINDOWS\L2Schemas
2013-03-18 16:07:23 ----D---- C:\WINDOWS\java
2013-03-18 16:07:23 ----D---- C:\WINDOWS\ime
2013-03-18 16:07:23 ----D---- C:\WINDOWS\Help
2013-03-18 16:07:23 ----D---- C:\WINDOWS\Driver Cache
2013-03-18 16:07:23 ----D---- C:\WINDOWS\Debug
2013-03-18 16:07:23 ----D---- C:\WINDOWS\Cursors
2013-03-18 16:07:23 ----D---- C:\WINDOWS\Connection Wizard
2013-03-18 16:07:23 ----D---- C:\WINDOWS\Config
2013-03-18 16:07:23 ----D---- C:\WINDOWS\AppPatch
2013-03-18 16:07:23 ----D---- C:\WINDOWS\addins
2013-03-18 16:07:23 ----D---- C:\WINDOWS
2013-03-18 16:07:23 ----ASH---- C:\pagefile.sys
2013-03-18 16:04:36 ----D---- C:\WINDOWS\system32\ReinstallBackups
2013-03-18 16:04:34 ----DC---- C:\WINDOWS\system32\DRVSTORE
2013-03-18 16:04:34 ----A---- C:\WINDOWS\system32\CSVer.dll
2013-03-18 16:04:33 ----D---- C:\Program Files\Intel
2013-03-18 16:04:23 ----D---- C:\Intel
2013-03-18 16:03:35 ----A---- C:\WINDOWS\system32\wpa.bak
2013-03-18 16:02:34 ----A---- C:\WINDOWS\system32\RtNicProp32.dll
2013-03-18 16:02:34 ----A---- C:\WINDOWS\system32\drivers\Rtenicxp.sys
2013-03-18 16:02:33 ----HD---- C:\Program Files\InstallShield Installation Information
2013-03-18 16:02:33 ----D---- C:\WINDOWS\OPTIONS
2013-03-18 16:02:33 ----D---- C:\Program Files\Realtek
2013-03-18 16:02:23 ----D---- C:\Documents and Settings\Lada\Data aplikací\InstallShield
2013-03-18 15:59:42 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2013-03-18 15:41:05 ----D---- C:\Documents and Settings\Lada\Data aplikací\Identities
2013-03-18 15:41:03 ----HD---- C:\Program Files\Uninstall Information
2013-03-18 15:40:57 ----SD---- C:\Documents and Settings\Lada\Data aplikací\Microsoft
2013-03-18 15:40:57 ----ASH---- C:\Documents and Settings\Lada\Data aplikací\desktop.ini
2013-03-18 15:39:55 ----D---- C:\WINDOWS\SoftwareDistribution
2013-03-18 15:39:54 ----D---- C:\WINDOWS\Prefetch
2013-03-18 15:39:53 ----SD---- C:\WINDOWS\system32\Microsoft
2013-03-18 15:39:53 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-03-18 15:35:58 ----AS---- C:\WINDOWS\bootstat.dat
2013-03-18 15:33:46 ----D---- C:\WINDOWS\system32\xircom
2013-03-18 15:33:46 ----D---- C:\Program Files\xerox
2013-03-18 15:33:46 ----D---- C:\Program Files\microsoft frontpage
2013-03-18 15:33:29 ----RASH---- C:\MSDOS.SYS
2013-03-18 15:33:29 ----RASH---- C:\IO.SYS
2013-03-18 15:33:29 ----A---- C:\WINDOWS\control.ini
2013-03-18 15:33:29 ----A---- C:\CONFIG.SYS
2013-03-18 15:33:29 ----A---- C:\AUTOEXEC.BAT
2013-03-18 15:33:16 ----A---- C:\WINDOWS\OEWABLog.txt
2013-03-18 15:33:10 ----A---- C:\WINDOWS\system32\mapi32.dll
2013-03-18 15:31:59 ----SD---- C:\WINDOWS\Downloaded Program Files
2013-03-18 15:31:59 ----RD---- C:\WINDOWS\Offline Web Pages
2013-03-18 15:31:43 ----HD---- C:\Program Files\WindowsUpdate
2013-03-18 15:31:36 ----D---- C:\Program Files\Online Services
2013-03-18 15:31:13 ----D---- C:\WINDOWS\system32\DirectX
2013-03-18 15:31:06 ----A---- C:\WINDOWS\system32\atrace.dll
2013-03-18 15:31:03 ----A---- C:\WINDOWS\system32\desktop.ini
2013-03-18 15:31:03 ----A---- C:\WINDOWS\desktop.ini
2013-03-18 15:30:55 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2013-03-18 15:30:54 ----A---- C:\WINDOWS\system32\acctres.dll
2013-03-18 15:30:53 ----D---- C:\Program Files\Common Files\Services
2013-03-18 15:30:50 ----SD---- C:\WINDOWS\Tasks
2013-03-18 15:30:50 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2013-03-18 15:30:49 ----D---- C:\Program Files\Common Files\MSSoap
2013-03-18 15:30:44 ----D---- C:\WINDOWS\srchasst
2013-03-18 15:30:43 ----D---- C:\WINDOWS\system32\Macromed
2013-03-18 15:30:40 ----A---- C:\WINDOWS\system32\wuweb.dll
2013-03-18 15:30:40 ----A---- C:\WINDOWS\system32\wucltui.dll
2013-03-18 15:30:39 ----A---- C:\WINDOWS\system32\wups.dll
2013-03-18 15:30:39 ----A---- C:\WINDOWS\system32\wuauserv.dll
2013-03-18 15:30:39 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2013-03-18 15:30:39 ----A---- C:\WINDOWS\system32\wuaueng.dll
2013-03-18 15:30:39 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2013-03-18 15:30:39 ----A---- C:\WINDOWS\system32\wuauclt.exe
2013-03-18 15:30:38 ----A---- C:\WINDOWS\system32\wuapi.dll
2013-03-18 15:30:38 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2013-03-18 15:30:38 ----A---- C:\WINDOWS\system32\qmgr.dll
2013-03-18 15:30:38 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2013-03-18 15:30:38 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2013-03-18 15:30:38 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2013-03-18 15:30:33 ----D---- C:\Program Files\Movie Maker
2013-03-18 15:30:12 ----A---- C:\WINDOWS\system32\safrslv.dll
2013-03-18 15:30:12 ----A---- C:\WINDOWS\system32\safrdm.dll
2013-03-18 15:30:12 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2013-03-18 15:30:11 ----A---- C:\WINDOWS\system32\racpldlg.dll
2013-03-18 15:30:07 ----D---- C:\WINDOWS\system32\Restore
2013-03-18 15:30:07 ----A---- C:\WINDOWS\system32\fltMc.exe
2013-03-18 15:30:07 ----A---- C:\WINDOWS\system32\fltlib.dll
2013-03-18 15:30:07 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2013-03-18 15:30:06 ----A---- C:\WINDOWS\system32\srsvc.dll
2013-03-18 15:30:06 ----A---- C:\WINDOWS\system32\srrstr.dll
2013-03-18 15:30:06 ----A---- C:\WINDOWS\system32\srclient.dll
2013-03-18 15:30:06 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2013-03-18 15:30:05 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2013-03-18 15:30:05 ----A---- C:\WINDOWS\system32\msconf.dll
2013-03-18 15:30:05 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2013-03-18 15:30:05 ----A---- C:\WINDOWS\system32\mnmdd.dll
2013-03-18 15:30:05 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2013-03-18 15:30:05 ----A---- C:\WINDOWS\system32\ils.dll
2013-03-18 15:30:02 ----D---- C:\Program Files\NetMeeting
2013-03-18 15:30:02 ----A---- C:\WINDOWS\system32\msoert2.dll
2013-03-18 15:30:01 ----A---- C:\WINDOWS\system32\msoeacct.dll
2013-03-18 15:30:00 ----A---- C:\WINDOWS\system32\inetres.dll
2013-03-18 15:30:00 ----A---- C:\WINDOWS\system32\inetcomm.dll
2013-03-18 15:29:58 ----D---- C:\Program Files\Outlook Express
2013-03-18 15:29:57 ----A---- C:\WINDOWS\system32\schedsvc.dll
2013-03-18 15:29:57 ----A---- C:\WINDOWS\system32\mstinit.exe
2013-03-18 15:29:57 ----A---- C:\WINDOWS\system32\mstask.dll
2013-03-18 15:29:57 ----A---- C:\WINDOWS\system32\icwphbk.dll
2013-03-18 15:29:56 ----A---- C:\WINDOWS\system32\isign32.dll
2013-03-18 15:29:56 ----A---- C:\WINDOWS\system32\inetcfg.dll
2013-03-18 15:29:56 ----A---- C:\WINDOWS\system32\icwdial.dll
2013-03-18 15:29:49 ----D---- C:\Program Files\Common Files\System
2013-03-18 15:29:48 ----D---- C:\Program Files\Internet Explorer
2013-03-18 15:29:45 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2013-03-18 15:29:25 ----D---- C:\Program Files\ComPlus Applications
2013-03-18 15:29:21 ----A---- C:\WINDOWS\vbaddin.ini
2013-03-18 15:29:21 ----A---- C:\WINDOWS\vb.ini
2013-03-18 15:29:13 ----D---- C:\WINDOWS\Registration
2013-03-18 15:28:28 ----D---- C:\Program Files\Windows Media Player
2013-03-18 15:28:18 ----D---- C:\Program Files\Messenger
2013-03-18 15:28:14 ----D---- C:\Program Files\MSN Gaming Zone
2013-03-18 15:28:14 ----A---- C:\WINDOWS\system32\write.exe
2013-03-18 15:28:03 ----A---- C:\WINDOWS\system32\sndvol32.exe
2013-03-18 15:28:03 ----A---- C:\WINDOWS\system32\hticons.dll
2013-03-18 15:28:02 ----A---- C:\WINDOWS\system32\avwav.dll
2013-03-18 15:28:02 ----A---- C:\WINDOWS\system32\avtapi.dll
2013-03-18 15:28:02 ----A---- C:\WINDOWS\system32\avmeter.dll
2013-03-18 15:28:01 ----A---- C:\WINDOWS\system32\winchat.exe
2013-03-18 15:27:54 ----A---- C:\WINDOWS\system32\getuname.dll
2013-03-18 15:27:53 ----A---- C:\WINDOWS\system32\charmap.exe
2013-03-18 15:27:53 ----A---- C:\WINDOWS\system32\calc.exe
2013-03-18 15:27:52 ----A---- C:\WINDOWS\system32\winmine.exe
2013-03-18 15:27:52 ----A---- C:\WINDOWS\system32\sol.exe
2013-03-18 15:27:52 ----A---- C:\WINDOWS\system32\mshearts.exe
2013-03-18 15:27:52 ----A---- C:\WINDOWS\system32\freecell.exe
2013-03-18 15:27:51 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2013-03-18 15:27:51 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2013-03-18 15:27:51 ----A---- C:\WINDOWS\system32\tslabels.ini
2013-03-18 15:27:51 ----A---- C:\WINDOWS\system32\tskill.exe
2013-03-18 15:27:51 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2013-03-18 15:27:51 ----A---- C:\WINDOWS\system32\tscon.exe
2013-03-18 15:27:51 ----A---- C:\WINDOWS\system32\shadow.exe
2013-03-18 15:27:51 ----A---- C:\WINDOWS\system32\rwinsta.exe
2013-03-18 15:27:51 ----A---- C:\WINDOWS\system32\reset.exe
2013-03-18 15:27:51 ----A---- C:\WINDOWS\system32\regini.exe
2013-03-18 15:27:51 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2013-03-18 15:27:50 ----A---- C:\WINDOWS\system32\qwinsta.exe
2013-03-18 15:27:50 ----A---- C:\WINDOWS\system32\qappsrv.exe
2013-03-18 15:27:50 ----A---- C:\WINDOWS\system32\msg.exe
2013-03-18 15:27:50 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2013-03-18 15:27:50 ----A---- C:\WINDOWS\system32\logoff.exe
2013-03-18 15:27:50 ----A---- C:\WINDOWS\system32\cdmodem.dll
2013-03-18 15:27:44 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2013-03-18 15:27:43 ----A---- C:\WINDOWS\system32\accwiz.exe
2013-03-18 15:27:42 ----A---- C:\WINDOWS\system32\sndrec32.exe
2013-03-18 15:27:42 ----A---- C:\WINDOWS\system32\mplay32.exe
2013-03-18 15:27:42 ----A---- C:\WINDOWS\system32\hypertrm.dll
2013-03-18 15:27:41 ----D---- C:\Program Files\Windows NT
2013-03-18 15:27:41 ----A---- C:\WINDOWS\system32\mspaint.exe
2013-03-18 15:27:41 ----A---- C:\WINDOWS\system32\clipbrd.exe
2013-03-18 15:27:40 ----A---- C:\WINDOWS\system32\spider.exe
2013-03-18 15:27:39 ----A---- C:\WINDOWS\system32\tsgqec.dll
2013-03-18 15:27:39 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2013-03-18 15:27:39 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2013-03-18 15:27:39 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2013-03-18 15:27:39 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2013-03-18 15:27:39 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2013-03-18 15:27:39 ----A---- C:\WINDOWS\system32\aaclient.dll
2013-03-18 15:27:38 ----A---- C:\WINDOWS\system32\mstscax.dll
2013-03-18 15:27:38 ----A---- C:\WINDOWS\system32\mstsc.exe
2013-03-18 15:27:37 ----A---- C:\WINDOWS\system32\termsrv.dll
2013-03-18 15:27:37 ----A---- C:\WINDOWS\system32\sessmgr.exe
2013-03-18 15:27:37 ----A---- C:\WINDOWS\system32\remotepg.dll
2013-03-18 15:27:37 ----A---- C:\WINDOWS\system32\rdshost.exe
2013-03-18 15:27:37 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2013-03-18 15:27:37 ----A---- C:\WINDOWS\system32\rdchost.dll
2013-03-18 15:27:36 ----D---- C:\WINDOWS\system32\MsDtc
2013-03-18 15:27:36 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2013-03-18 15:27:36 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2013-03-18 15:27:36 ----A---- C:\WINDOWS\system32\rdpclip.exe
2013-03-18 15:27:36 ----A---- C:\WINDOWS\system32\qprocess.exe
2013-03-18 15:27:36 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2013-03-18 15:27:36 ----A---- C:\WINDOWS\system32\icaapi.dll
2013-03-18 15:27:36 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2013-03-18 15:27:35 ----A---- C:\WINDOWS\system32\xolehlp.dll
2013-03-18 15:27:35 ----A---- C:\WINDOWS\system32\mtxoci.dll
2013-03-18 15:27:35 ----A---- C:\WINDOWS\system32\msdtctm.dll
2013-03-18 15:27:35 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2013-03-18 15:27:35 ----A---- C:\WINDOWS\system32\msdtclog.dll
2013-03-18 15:27:35 ----A---- C:\WINDOWS\system32\msdtc.exe
2013-03-18 15:27:34 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2013-03-18 15:27:33 ----D---- C:\WINDOWS\system32\Com
2013-03-18 15:27:33 ----A---- C:\WINDOWS\system32\stclient.dll
2013-03-18 15:27:33 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2013-03-18 15:27:33 ----A---- C:\WINDOWS\system32\mtxex.dll
2013-03-18 15:27:33 ----A---- C:\WINDOWS\system32\mtxdm.dll
2013-03-18 15:27:33 ----A---- C:\WINDOWS\system32\comrepl.dll
2013-03-18 15:27:33 ----A---- C:\WINDOWS\system32\comaddin.dll
2013-03-18 15:27:33 ----A---- C:\WINDOWS\system32\colbact.dll
2013-03-18 15:27:32 ----A---- C:\WINDOWS\system32\clbcatex.dll
2013-03-18 15:27:32 ----A---- C:\WINDOWS\system32\catsrvut.dll
2013-03-18 15:27:32 ----A---- C:\WINDOWS\system32\catsrvps.dll
2013-03-18 15:27:32 ----A---- C:\WINDOWS\system32\catsrv.dll
2013-03-18 15:27:31 ----A---- C:\WINDOWS\system32\comuid.dll
2013-03-18 15:27:31 ----A---- C:\WINDOWS\system32\comsvcs.dll
2013-03-18 15:27:31 ----A---- C:\WINDOWS\system32\comsnap.dll
2013-03-18 15:27:30 ----A---- C:\WINDOWS\system32\clbcatq.dll
2013-03-18 15:27:24 ----A---- C:\WINDOWS\system32\servdeps.dll
2013-03-18 15:27:24 ----A---- C:\WINDOWS\system32\mmfutil.dll
2013-03-18 15:27:23 ----A---- C:\WINDOWS\system32\licwmi.dll
2013-03-18 15:27:23 ----A---- C:\WINDOWS\system32\cmprops.dll
2013-03-18 15:27:19 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
2013-03-18 15:27:18 ----A---- C:\WINDOWS\system32\drivers\termdd.sys

======List of files/folders modified in the last 1 month======

2013-03-18 16:16:47 ----A---- C:\WINDOWS\system.ini
2013-03-18 15:33:29 ----A---- C:\WINDOWS\win.ini
2013-03-18 15:32:55 ----ASH---- C:\WINDOWS\fonts\desktop.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2013-03-28 135136]
R1 avkmgr;avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [2013-03-28 37352]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2013-03-18 28520]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2013-03-28 84744]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2012-07-04 7874560]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdXP3.sys [2012-05-14 103040]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 KMWDFILTER;HIDUASDesc; C:\WINDOWS\system32\DRIVERS\KMWDFILTER.sys [2008-10-09 17408]
R3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-04-14 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-10-30 117888]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\WINDOWS\system32\drivers\viahduaa.sys [2009-07-10 1381632]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira Real-Time Protection; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2013-03-28 110816]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2013-03-28 86752]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2012-07-04 643072]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-03-26 170912]
R2 NitroReaderDriverReadSpool3;NitroPDFReaderDriverCreatorReadSpool3; C:\Program Files\Nitro\Reader 3\NitroPDFReaderDriverService3.exe [2013-03-05 196624]
R2 PanService;PandoraService; C:\Program Files\PANDORA.TV\PanService\PandoraService.exe [2012-09-28 625304]
R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [2012-11-13 1103392]
R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2012-11-13 1369624]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [2012-11-13 168384]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-02-28 161384]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-04-04 115608]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Keylogger v PC, jak zjistit a odstranit?

#8 Příspěvek od JaRon »

- odinstaluj SpyBot - je zbytocny
- mas to ciste - preventivne mozes prescanovat s TDSSKiller - pokial nic nenajde, nemusis log vkladat
+ citat:
TFC http://oldtimer.geekstogo.com/TFC.exe
• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

kala
Návštěvník
Návštěvník
Příspěvky: 63
Registrován: 05 Dub 2013 10:00

Re: Keylogger v PC, jak zjistit a odstranit?

#9 Příspěvek od kala »

Diky moc! Takze muzu byt na 100% v klidu ze tam VUBEC nic neni? Nemuze tam byt nejaky figl na pozadi?

Ten program jsem spustil, projel a nez jsem prisel k PC tak se restartoval a nevidim nejake vysledky nikde. Znamena to ze to bylo ok?

Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Keylogger v PC, jak zjistit a odstranit?

#10 Příspěvek od JaRon »

TDSSKiller - vypise vysledok po ukonceni
TFC - maze docasne subory - tiez oznami, kolko MB je k zmazaniu
resume: myslim, ze to mas ciste - ale kludne mozes akciu zopakovat (ale neodchadzaj od PC aby si videl vysledky) :)
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

kala
Návštěvník
Návštěvník
Příspěvky: 63
Registrován: 05 Dub 2013 10:00

Re: Keylogger v PC, jak zjistit a odstranit?

#11 Příspěvek od kala »

TDDSKiller byl dost rychly a nic nenasel (snad koukal dobre :) )

Tak snad to bude ok. I kdyz uplne jisty si tim nejsem. Dekuji za pomoc!

Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Keylogger v PC, jak zjistit a odstranit?

#12 Příspěvek od JaRon »

za malo
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

Zamčeno