policie me stiha

[poko loko]

dobry den asi mam zavirovanej kompl nejakou policii nejde se mi dostat do windows a v nouzevem rezimu se mi to hned vypne...mam visty je to podobny jako vir policie cr asi muzete mi stim pomoct.dekuji

[poko loko]

tak toto nemuzu zvladnou uz mi nejde se dostat nikam ani v nouzovem rezimu a ni normalni vzdy naskoci policie.....to cos mi napsal nemuzu nikdy zvladnout je to pro me spanelska vesnice neslo by to podrobneji

[poko loko]

zadny dvd nemam.jeste jednou zapnu pc misto ikon na me vyskoci policie cr zkousim to v nouzovem rezimu ale jak mile naskoci ikony pc se samo vypne

[poko loko]

nemam to kde vypalit minule mi tady nekdo radil ze mam vypnout internet pak neco napsat do prikazovyho radku a dal nevim a za den pc slapalo jak nikdy

[vyosek]

Zdravim

Toto je tez vas ucet http://forum.viry.cz/memberlist.php?mod ... le&u=51011

Proc tu mate dva

[poko loko]

ahoj asi jo ......akorad vzdy na jinej mejl ...........je to problem?????muzu to udelat jako pred tim aby mi to chodilo nebo je postup jinej?proste pocitace a ja to nejde vubec dohromady

[poko loko]

ok tak ta veta v prikazovym radku mi nejde ......jen mi napis co mam stahnout na flash a ja to nejak poresim..dekuji

[vyosek]

Zdravim

Ten druhy ucet byl zablokovan - viz pravidla fora

10. Registrováni můžete být pouze jednou (pod jedním nickem). Duplicitní a vícenásobná registrace není přípustná a bude nekompromisně mazána.

Na zdravem PC stahnete Farbar Recovery Scan Tool http://www.bleepingcomputer.com/downloa ... scan-tool/

• Ulozte na nejaky flash disk, primo na jeho koren

Na poskozenem PC nabootujte Nouzovy rezim s prikazovym radkem MS-DOS

Nyni si zjisteme pismeno flash disku

• Zadejte prikaz notepad a odenterujte
• Otebre se poznamkovy blok (notepad)
• Dejte Soubor --> Otevrit --> najdete tento pocitac a otevrete USB klic je FRST ulozeny
• Podivejte se, jake pismeno ma USB klic (F:\, G:\ apod)
• Zavrete notepad krizkem

Ted si ziskame log

• Pokud mate stazeny FRST pro 64 bit OS, tak se jmenuje FRST64.exe a je nutne jej tak zadat
• Zadejte prikaz "pismeno disku":\FRST.exe a odenterujte (napr. F:\FRST.exe)
• Spusti se FRST
• Spuste prohledavani kliknutim na Scan
• Po chvili se vytvori na flash disku log FRST.exe
• Ten mi sem vlozte pres zdravy PC

[poko loko]

ok dekuji...

[vyosek]

Kdyby neco, tak napiste, ale srozumitelne a ucelene

[poko loko]

jeste hloupej dotaz jak mam zjiostit jestli mam 32 nebo 64_?

[poko loko]

jeste hloupej dotaz jak zjistim jestli mam 32 nebo 64bit?

[vyosek]

Pokud je to stejny PC jako jste tu resil minule, tak ten je 32bit...

Stahnete tedy FRST pro 32bit a uvidite ci bude fungovat

[poko loko]

zdarvim jak se dostanu prosim te do ms-dos

[poko loko]

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-05-2013
Ran by pc (administrator) on 29-05-2013 19:16:34
Running from G:\
Windows Vista (TM) Home Premium Service Pack 2 (X86) OS Language: Czech
Internet Explorer Version 9
Boot Mode: Safe Mode (minimal)
==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:\Windows\system32\cmd.exe
(Farbar) G:\FRST.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HControlUser] "C:\Program Files\ATK Hotkey\HcontrolUser.exe" [98304 2008-01-12] ()
HKLM\...\Run: [ATKOSD2] "C:\Program Files\ATKOSD2\ATKOSD2.exe" [7766016 2008-01-24] ()
HKLM\...\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup [13548064 2008-07-25] (NVIDIA Corporation)
HKLM\...\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit [92704 2008-07-25] (NVIDIA Corporation)
HKLM\...\Run: [RtHDVCpl] RtHDVCpl.exe [x]
HKLM\...\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe [102400 2007-08-17] (Synaptics, Inc.)
HKLM\...\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe [3054136 2008-10-11] (ASUS)
HKLM\...\Run: [ASUS Camera ScreenSaver] C:\Windows\AsScrProlog.exe [47672 2008-10-11] ()
HKLM\...\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui [4282728 2012-08-21] (AVAST Software)
HKLM\...\Winlogon: [System]
HKCU\...\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden [2363392 2008-06-09] (Hewlett-Packard Company)
HKCU\...\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun [687560 2008-12-29] (DT Soft Ltd)
HKCU\...\Run: [Google Update] "C:\Users\pc\AppData\Local\Google\Update\GoogleUpdate.exe" /c [116648 2012-09-19] (Google Inc.)
HKCU\...\Run: [ChromeFrameHelper] "C:\Users\pc\AppData\Local\Google\Chrome\Application\26.0.1410.64\chrome_frame_helper.exe" --startup [82896 2013-04-09] (Google Inc.)
HKCU\...\Winlogon: [Shell] explorer.exe,C:\Users\pc\AppData\Roaming\skype.dat <==== ATTENTION
Startup: C:\ProgramData\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Start Menu\Programs\Startup\Launcher.lnk
ShortcutTarget: Launcher.lnk -> C:\Program Files\InternetEverywhere\Launcher.exe (TODO: <Company name>)
Startup: C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hamachi.lnk
ShortcutTarget: hamachi.lnk -> C:\Program Files\Hamachi\hamachi.exe (LogMeIn Inc.)
Startup: C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk
ShortcutTarget: OpenOffice.org 3.0.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU SearchScopes: DefaultScope {0633ee93-d776-472f-a0ff-e1416b8b2e3a} URL =
BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU -Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU -No Name - {A057A204-BACC-4D26-9990-79A187E2698E} - No File
PDF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
PDF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Users\pc\AppData\Local\Google\Chrome\Application\26.0.1410.64\npchrome_frame.dll (Google Inc.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 02 %SystemRoot%\system32\napinsp.dll [50176] (Společnost Microsoft)

========================== Services (Whitelisted) =================

S2 ASLDRService; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [94208 2007-10-03] ()
S2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] ()
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [44808 2012-08-21] (AVAST Software)
S2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [136912 2013-03-07] (AVAST Software)
S2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [398184 2012-12-14] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [682344 2012-12-14] (Malwarebytes Corporation)
S2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [70968 2009-02-09] ()
S2 spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [125496 2007-08-03] ()
S2 WTGService; C:\Program Files\InternetEverywhere\WTGService.exe [312784 2010-04-07] ()
S3 avast! Web Scanner; "C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service [x]

==================== Drivers (Whitelisted) ====================

S2 ASMMAP; C:\Program Files\ATKGFNEX\ASMMAP.sys [13880 2007-07-24] ()
S2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [20560 2009-11-25] (ALWIL Software)
S1 aswFW; C:\Windows\system32\drivers\aswFW.sys [101656 2013-03-07] (AVAST Software)
R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [21576 2013-03-07] (AVAST Software)
S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [58680 2012-08-21] (AVAST Software)
R0 aswNdis; C:\Windows\System32\DRIVERS\aswNdis.sys [12112 2013-03-07] (ALWIL Software)
R0 aswNdis2; C:\Windows\System32\drivers\aswNdis2.sys [199384 2013-03-07] (AVAST Software)
S1 aswRdr; C:\Windows\System32\Drivers\aswRdr.sys [23120 2009-11-25] (ALWIL Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49248 2013-03-07] ()
S1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [765736 2013-03-07] (AVAST Software)
S1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [114768 2009-11-25] (ALWIL Software)
S1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [48560 2009-11-25] (ALWIL Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [164736 2013-03-07] ()
S3 CRFILTER; C:\Windows\System32\DRIVERS\CRFILTER.sys [6656 2008-04-07] (Generic)
S3 DCamUSBET; C:\Windows\System32\DRIVERS\etDevice.sys [474624 2007-09-06] (eMPIA Technology, Inc.)
S3 ewsercd; C:\Windows\System32\DRIVERS\ewsercd.sys [100224 2011-02-01] (Huawei Technologies Co., Ltd.)
S3 FiltUSBET; C:\Windows\System32\DRIVERS\etFilter.sys [206464 2008-02-05] (eMPIA Technology Inc.)
R0 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [190424 2009-04-11] (Společnost Microsoft)
S2 ghaio; C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys [20936 2007-08-03] ()
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [25280 2009-02-07] (LogMeIn, Inc.)
S3 Huawei; C:\Windows\System32\DRIVERS\ewdcsc.sys [23424 2007-08-09] (Huawei Tech. Co., Ltd.)
S3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [101120 2009-10-12] (Huawei Technologies Co., Ltd.)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15928 2008-06-03] ( )
S3 massfilter_hs; C:\Windows\System32\drivers\massfilter_hs.sys [9728 2009-02-03] (ZTE Incorporated)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [21104 2012-12-14] (Malwarebytes Corporation)
S3 MREMP50; C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS [21248 2008-03-29] (Printing Communications Assoc., Inc. (PCAUSA))
S3 MRESP50; C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS [20096 2008-03-29] (Printing Communications Assoc., Inc. (PCAUSA))
R3 MTsensor; C:\Windows\System32\DRIVERS\ATKACPI.sys [7680 2006-12-14] (ATK0100)
R3 Ntfs; C:\Windows\System32\Drivers\Ntfs.sys [1082232 2013-03-03] (Společnost Microsoft)
S3 ScanUSBET; C:\Windows\System32\DRIVERS\etScan.sys [6528 2008-01-31] (eMPIA Technology, Inc.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [717296 2009-01-03] ()
S3 USBZTECCID; C:\Windows\System32\DRIVERS\ZTEusbccid.sys [14336 2010-02-22] (ZTE)
S3 ZTEusbMB; C:\Windows\System32\DRIVERS\ZTEusbnmeaext2.sys [105856 2010-02-22] (ZTE Incorporated)
S3 ZTEusbnet; C:\Windows\System32\DRIVERS\ZTEusbnet.sys [114688 2009-12-28] (ZTE Corporation)
S3 ZTEusbnmeaext; C:\Windows\System32\DRIVERS\ZTEusbnmeaext.sys [105088 2011-02-01] (ZTE Incorporated)
S3 ZTEWMSD_637; C:\Windows\System32\Drivers\ZTEWMSD_637.sys [15360 2011-02-01] (ZTE Corporation)
U3 a1baz1m0; C:\Windows\System32\Drivers\a1baz1m0.sys [0 ] (Microsoft Corporation)
S3 catchme; \??\C:\Users\pc\AppData\Local\Temp\catchme.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 MREMP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS [x]
S3 MREMPR5; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS [x]
S3 MRENDIS5; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [x]
S3 MRESP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-05-29 19:16 - 2013-05-29 19:16 - 00000000 ____D C:\FRST
2013-05-25 11:01 - 2013-05-29 19:10 - 00000004 ____A C:\Users\pc\AppData\Roaming\skype.ini
2013-05-15 19:19 - 2013-05-05 21:25 - 12324864 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-05-15 19:19 - 2013-05-05 21:12 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-05-15 19:06 - 2013-04-05 00:11 - 01800704 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-05-15 19:06 - 2013-04-05 00:09 - 09738752 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-05-15 19:06 - 2013-04-05 00:02 - 01427968 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-05-15 19:06 - 2013-04-05 00:02 - 01129472 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-05-15 19:06 - 2013-04-05 00:02 - 01104384 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-05-15 19:06 - 2013-04-05 00:01 - 00231936 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-05-15 19:06 - 2013-04-04 23:59 - 00065024 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-05-15 19:06 - 2013-04-04 23:58 - 00717824 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-05-15 19:06 - 2013-04-04 23:58 - 00142848 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-05-15 19:06 - 2013-04-04 23:57 - 00420864 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-05-15 19:06 - 2013-04-04 23:56 - 00607744 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-05-15 19:06 - 2013-04-04 23:55 - 01796096 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-05-15 19:06 - 2013-04-04 23:54 - 00073216 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-05-15 19:06 - 2013-04-04 23:50 - 00176640 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-05-14 23:24 - 2013-04-15 16:20 - 00638328 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-05-14 23:24 - 2013-04-13 12:56 - 00037376 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll
2013-05-14 23:23 - 2013-04-09 03:36 - 02049024 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys

==================== One Month Modified Files and Folders ========

2013-05-29 19:16 - 2013-05-29 19:16 - 00000000 ____D C:\FRST
2013-05-29 19:14 - 2006-11-02 12:33 - 01438206 ____A C:\Windows\System32\PerfStringBackup.INI
2013-05-29 19:10 - 2013-05-25 11:01 - 00000004 ____A C:\Users\pc\AppData\Roaming\skype.ini
2013-05-29 19:10 - 2008-11-25 16:07 - 00004096 ____A C:\ProgramData\nvModes.001
2013-05-28 21:05 - 2010-03-13 08:14 - 00000936 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-05-28 21:05 - 2006-11-02 15:01 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-05-28 21:05 - 2006-11-02 14:47 - 00004016 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-05-28 21:05 - 2006-11-02 14:47 - 00004016 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-05-28 20:44 - 2013-04-10 20:10 - 00000914 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-05-28 20:44 - 2013-01-29 21:08 - 00000950 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-655894505-1183247855-1173350362-1000UA.job
2013-05-28 20:44 - 2010-03-13 08:14 - 00000940 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-05-28 20:44 - 2008-10-11 00:11 - 01229777 ____A C:\Windows\WindowsUpdate.log
2013-05-26 09:59 - 2013-02-17 22:17 - 00000898 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-655894505-1183247855-1173350362-1000Core.job
2013-05-25 20:35 - 2008-10-11 02:17 - 00045056 ____A C:\Windows\System32\acovcnt.exe
2013-05-25 20:34 - 2008-10-11 00:12 - 00008524 ____A C:\Windows\bthservsdp.dat
2013-05-25 20:34 - 2006-11-02 15:01 - 00032536 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-05-25 10:59 - 2009-02-07 20:29 - 00000000 ____D C:\Users\pc\AppData\Roaming\Skype
2013-05-25 10:52 - 2008-11-25 16:02 - 00068674 ____A C:\ProgramData\nvModes.dat
2013-05-17 10:56 - 2008-11-25 15:34 - 00161280 ____A C:\Users\pc\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-05-17 08:24 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-05-17 07:29 - 2006-11-02 14:47 - 00388992 ____A C:\Windows\System32\FNTCACHE.DAT
2013-05-16 08:34 - 2012-03-05 10:18 - 00000000 ____D C:\Users\pc\Desktop\licence
2013-05-15 19:08 - 2006-11-02 12:24 - 72607752 ____A (Microsoft Corporation) C:\Windows\System32\mrt.exe
2013-05-14 23:28 - 2013-04-10 20:10 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe
2013-05-14 23:28 - 2013-04-10 20:10 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl
2013-05-07 17:46 - 2011-07-28 16:25 - 00000000 ____D C:\Users\pc\Desktop\kopana
2013-05-06 09:50 - 2009-02-09 18:20 - 330174784 ____A C:\Windows\MEMORY.DMP
2013-05-05 21:25 - 2013-05-15 19:19 - 12324864 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-05-05 21:12 - 2013-05-15 19:19 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb

Other Malware:
===========
C:\Users\pc\AppData\Roaming\skype.dat
C:\Users\pc\AppData\Roaming\skype.ini
C:\ProgramData\nvModes.dat

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


Last Boot: 2013-05-17 07:34

==================== End Of Log ============================