Divné chovanie PC

Zpráva

7777 · #1 Příspěvek od **7777** » 13 zář 2013 18:10

Takže v poslednom čase sa počítač chová divne od minula bol preinštalovaný windows a nainštalované aj ovládača a všetko okolo toho... Po preskupovaní súborou mi jedna aplikácia za záhadných okolností vypísala že chýba súbor msvbvm60.dll
Čo je súbor knižnice ale fakt som nič nerobil z ničím,súbor zmizol len tak... Mám nainštalovaní antivirák panda free antivírus. No nenašial žiaden vírus. Pomôžete mi? log z RSIT:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Dobransky at 2013-09-13 19:34:23
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 8 GB (52%) free of 16 GB
Total RAM: 255 MB (37% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:34:45, on 13.9.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUAService.exe
C:\Program Files\Panda Security\Panda Cloud Antivirus\PSANHost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUAMain.exe
C:\Documents and Settings\All Users\Application Data\Panda Security URL Filtering\Panda_URL_Filtering.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Dobransky\Desktop\RSIT.exe
C:\Program Files\trend micro\Dobransky.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: Panda Security Toolbar - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files\pandasecuritytb\pandasecurityDx.dll
O2 - BHO: Panda Security Toolbar - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files\pandasecuritytb\pandasecurityDx.dll
O3 - Toolbar: Panda Security Toolbar - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files\pandasecuritytb\pandasecurityDx.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [PSUAMain] "C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUAMain.exe" /LaunchSysTray
O4 - HKLM\..\Run: [Panda Security URL Filtering] "C:\Documents and Settings\All Users\Application Data\Panda Security URL Filtering\Panda_URL_Filtering.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Panda Cloud Antivirus Service (NanoServiceMain) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Cloud Antivirus\PSANHost.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Panda Product Service (PSUAService) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUAService.exe

--
End of file - 3940 bytes

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Dobransky\Application Data\Mozilla\Firefox\Profiles\aygd8rqa.default

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.8]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
msservice.js

C:\Documents and Settings\Dobransky\Application Data\Mozilla\Firefox\Profiles\aygd8rqa.default\extensions\
{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}]
Panda Security Toolbar - C:\Program Files\pandasecuritytb\pandasecurityDx.dll [2013-01-08 87768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - Panda Security Toolbar - C:\Program Files\pandasecuritytb\pandasecurityDx.dll [2013-01-08 87768]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-10-22 7700480]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2006-10-22 86016]
"PSUAMain"=C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUAMain.exe [2013-07-08 32736]
"Panda Security URL Filtering"=C:\Documents and Settings\All Users\Application Data\Panda Security URL Filtering\Panda_URL_Filtering.exe [2013-04-11 235072]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 239496]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NanoServiceMain]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PSUAService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NanoServiceMain]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PSUAService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\AVG\AVG2012\avgmfapx.exe"="C:\Program Files\AVG\AVG2012\avgmfapx.exe:*:Enabled:Inštalátor produktu AVG"
"F:\Tento PC\Moje stranky\apache2\bin\httpd_usbwv8.exe"="F:\Tento PC\Moje stranky\apache2\bin\httpd_usbwv8.exe:*:Enabled:Apache HTTP Server"
"F:\Tento PC\Moje stranky\mysql\bin\mysqld_usbwv8.exe"="F:\Tento PC\Moje stranky\mysql\bin\mysqld_usbwv8.exe:*:Enabled:mysqld_usbwv8"
"C:\Program Files\pandasecuritytb\dtUser.exe"="C:\Program Files\pandasecuritytb\dtUser.exe:*:Enabled:Panda Security Toolbar DTX Broker"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm

======List of files/folders created in the last 1 month======

2013-09-13 19:34:23 ----D---- C:\rsit
2013-09-13 19:34:23 ----D---- C:\Program Files\trend micro
2013-09-13 19:23:26 ----D---- C:\FRST
2013-09-12 09:49:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2876315$
2013-09-12 09:49:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2876217$
2013-09-12 09:49:16 ----A---- C:\WINDOWS\imsins.BAK
2013-09-12 09:48:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2864063$
2013-09-05 21:00:47 ----D---- C:\Documents and Settings\Dobransky\Application Data\Panda Security
2013-09-05 20:59:30 ----D---- C:\Documents and Settings\All Users\Application Data\blekko toolbars
2013-09-05 20:59:29 ----A---- C:\WINDOWS\system32\drivers\PSKMAD.sys
2013-09-05 20:59:27 ----D---- C:\Documents and Settings\All Users\Application Data\Panda Security URL Filtering
2013-09-05 20:59:22 ----D---- C:\Program Files\Toolbar Cleaner
2013-09-05 20:58:49 ----D---- C:\Documents and Settings\Dobransky\Application Data\pandasecuritytb
2013-09-05 20:58:38 ----D---- C:\Program Files\pandasecuritytb
2013-09-05 20:57:21 ----D---- C:\Program Files\Panda Security
2013-09-05 20:57:21 ----D---- C:\Documents and Settings\All Users\Application Data\Panda Security
2013-09-05 19:11:19 ----SHD---- C:\Documents and Settings\All Users\Application Data\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2013-09-05 18:43:04 ----D---- C:\Documents and Settings\Dobransky\Application Data\AVG2012
2013-09-05 18:40:31 ----D---- C:\Documents and Settings\Dobransky\Application Data\TuneUp Software
2013-09-05 18:40:20 ----D---- C:\Documents and Settings\All Users\Application Data\AVG Secure Search
2013-09-05 18:36:26 ----HD---- C:\$AVG
2013-09-05 18:36:26 ----D---- C:\Documents and Settings\All Users\Application Data\AVG2012
2013-09-05 18:34:38 ----D---- C:\Program Files\AVG
2013-09-05 18:31:45 ----HD---- C:\Documents and Settings\All Users\Application Data\Common Files
2013-09-05 18:31:20 ----D---- C:\Documents and Settings\All Users\Application Data\MFAData
2013-09-05 18:19:36 ----A---- C:\WINDOWS\system32\msvbvm60.dll
2013-09-05 18:15:13 ----D---- C:\Documents and Settings\All Users\Application Data\Logs
2013-09-05 18:15:07 ----D---- C:\Documents and Settings\All Users\Application Data\TEMP
2013-09-05 18:15:02 ----A---- C:\WINDOWS\system32\roboot.exe
2013-09-05 10:54:25 ----D---- C:\Program Files\A4Desk
2013-09-04 11:51:01 ----D---- C:\Portable Files
2013-09-01 22:43:59 ----D---- C:\Program Files\OpenOffice.org 2.4
2013-09-01 22:29:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2013-09-01 22:28:56 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2013-09-01 12:33:11 ----D---- C:\Program Files\J. A. Associates
2013-08-31 20:17:35 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2013-08-31 20:14:01 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2013-08-31 20:13:52 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2013-08-31 20:13:41 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2013-08-31 20:10:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2467659$
2013-08-31 20:09:46 ----D---- C:\WINDOWS\ie8updates
2013-08-31 20:08:40 ----D---- C:\WINDOWS\WBEM
2013-08-31 20:07:40 ----HDC---- C:\WINDOWS\ie8
2013-08-31 20:00:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2013-08-31 20:00:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2712808$
2013-08-31 20:00:07 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2013-08-31 19:59:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2479943$
2013-08-31 19:59:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2659262$
2013-08-31 19:59:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$
2013-08-31 19:59:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$
2013-08-31 19:59:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2758857$
2013-08-31 19:59:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893-v2$
2013-08-31 19:58:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2834886$
2013-08-31 19:58:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2013-08-31 19:58:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2850851$
2013-08-31 19:57:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2585542$
2013-08-31 19:57:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2631813$
2013-08-31 19:56:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2013-08-31 19:52:05 ----D---- C:\WINDOWS\system32\MRT
2013-08-31 19:51:53 ----A---- C:\WINDOWS\system32\MRT.exe
2013-08-31 19:51:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2013-08-31 19:51:26 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2013-08-31 19:35:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2862772$
2013-08-31 19:34:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2013-08-31 19:34:38 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2013-08-31 19:34:27 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2013-08-31 19:34:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2013-08-31 19:34:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2802968$
2013-08-31 19:33:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2013-08-31 19:33:46 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2013-08-31 19:33:35 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2013-08-31 19:33:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2485663$
2013-08-31 19:33:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2598479$
2013-08-31 19:33:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2686509$
2013-08-31 19:32:54 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2013-08-31 19:32:45 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2013-08-31 19:32:35 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2013-08-31 19:32:26 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2013-08-31 19:32:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2013-08-31 19:32:10 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2013-08-31 19:32:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2845187$
2013-08-31 19:31:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2510581$
2013-08-31 19:31:34 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2013-08-31 19:31:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2013-08-31 19:31:10 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2013-08-31 19:30:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2624667$
2013-08-31 19:30:48 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2013-08-31 19:30:37 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2013-08-31 19:30:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2719985$
2013-08-31 19:30:15 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2013-08-31 19:30:05 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2013-08-31 19:29:55 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2013-08-31 19:29:42 ----HDC---- C:\WINDOWS\$NtUninstallKB2753842-v2$
2013-08-31 19:29:32 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2013-08-31 19:29:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2535512$
2013-08-31 19:29:12 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2013-08-31 19:29:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2850869$
2013-08-31 19:28:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2859537$
2013-08-31 19:28:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2807986$
2013-08-31 19:28:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2013-08-31 19:28:19 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2013-08-31 19:28:09 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2013-08-31 19:28:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2603381$
2013-08-31 19:27:51 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2013-08-31 19:27:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2757638$
2013-08-31 19:27:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2419632$
2013-08-31 19:27:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2013-08-31 19:27:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2653956$
2013-08-31 19:26:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2820197$
2013-08-31 19:26:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2749655$
2013-08-31 19:26:33 ----HDC---- C:\WINDOWS\$NtUninstallKB971029$
2013-08-31 19:26:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2506212$
2013-08-31 19:26:12 ----HDC---- C:\WINDOWS\$NtUninstallKB2803821-v2_WM9$
2013-08-31 19:26:05 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2013-08-31 19:25:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2698365$
2013-08-31 19:25:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2013-08-31 19:25:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2705219-v2$
2013-08-31 19:25:21 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2013-08-31 19:25:12 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2013-08-31 19:25:03 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2013-08-31 19:24:54 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2013-08-31 19:24:43 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2013-08-31 19:24:33 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2013-08-31 19:24:24 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2013-08-31 19:24:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2618451$
2013-08-31 19:24:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2813345$
2013-08-31 19:23:54 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2013-08-31 19:23:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2509553$
2013-08-31 19:23:28 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2013-08-31 19:23:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$
2013-08-31 19:23:08 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2013-08-31 19:22:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$
2013-08-31 19:22:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2013-08-31 19:22:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2584146$
2013-08-31 19:22:32 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2013-08-31 19:22:22 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2013-08-31 19:21:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2013-08-31 19:10:14 ----N---- C:\WINDOWS\system32\browserchoice.exe
2013-08-31 17:09:11 ----D---- C:\WINDOWS\system32\PreInstall
2013-08-31 17:09:04 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2013-08-30 23:27:34 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2013-08-30 23:25:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2691442$
2013-08-30 23:23:31 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2013-08-30 23:21:42 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2013-08-30 23:19:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2655992$
2013-08-30 23:18:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2481109$
2013-08-30 23:16:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2013-08-30 23:14:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2780091$
2013-08-30 23:12:48 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2013-08-30 23:10:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$
2013-08-30 23:09:01 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2013-08-30 23:07:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$
2013-08-30 23:05:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2770660$
2013-08-30 23:03:52 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2013-08-30 23:02:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2820917$
2013-08-30 23:01:46 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2013-08-30 23:01:35 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2013-08-30 23:01:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2863058$
2013-08-30 23:00:22 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2013-08-30 22:58:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2849470$
2013-08-30 22:56:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2727528$
2013-08-30 22:55:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2723135-v2$
2013-08-30 22:53:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2661254-v2$
2013-08-30 22:50:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2676562$
2013-08-30 22:04:22 ----N---- C:\WINDOWS\system32\xpsp4res.dll
2013-08-30 21:39:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$
2013-08-30 21:37:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2661637$
2013-08-30 15:30:19 ----N---- C:\WINDOWS\system32\iacenc.dll
2013-08-30 13:45:07 ----A---- C:\WINDOWS\system32\WMErrCSY.dll
2013-08-30 13:45:00 ----D---- C:\WINDOWS\system32\1029
2013-08-30 13:39:07 ----D---- C:\Documents and Settings\All Users\Application Data\nView_Profiles
2013-08-30 13:38:51 ----D---- C:\Documents and Settings\All Users\Application Data\NVIDIA
2013-08-30 13:30:58 ----D---- C:\totalcmd
2013-08-30 13:30:58 ----A---- C:\WINDOWS\wincmd.ini
2013-08-30 13:30:58 ----A---- C:\WINDOWS\UC.PIF
2013-08-30 13:30:58 ----A---- C:\WINDOWS\RAR.PIF
2013-08-30 13:30:58 ----A---- C:\WINDOWS\PKZIP.PIF
2013-08-30 13:30:58 ----A---- C:\WINDOWS\PKUNZIP.PIF
2013-08-30 13:30:58 ----A---- C:\WINDOWS\NOCLOSE.PIF
2013-08-30 13:30:58 ----A---- C:\WINDOWS\LHA.PIF
2013-08-30 13:30:58 ----A---- C:\WINDOWS\ARJ.PIF
2013-08-30 13:30:00 ----D---- C:\Documents and Settings\Dobransky\Application Data\vlc
2013-08-30 13:28:11 ----D---- C:\Program Files\VideoLAN
2013-08-30 13:10:11 ----D---- C:\Documents and Settings\Dobransky\Application Data\Mozilla
2013-08-30 13:09:36 ----D---- C:\Documents and Settings\All Users\Application Data\Mozilla
2013-08-30 13:09:35 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-08-30 13:09:29 ----D---- C:\Program Files\Mozilla Firefox
2013-08-30 13:08:10 ----D---- C:\Program Files\CCleaner
2013-08-30 13:00:45 ----A---- C:\WINDOWS\system32\drivers\VIAAGP1.SYS
2013-08-30 12:59:49 ----A---- C:\WINDOWS\IsUninst.exe
2013-08-30 12:55:16 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2013-08-30 12:53:41 ----D---- C:\WINDOWS\Minidump
2013-08-30 12:51:29 ----D---- C:\WINDOWS\Prefetch
2013-08-30 12:41:51 ----N---- C:\WINDOWS\system32\msxml6r.dll
2013-08-30 12:41:51 ----N---- C:\WINDOWS\system32\msxml6.dll
2013-08-30 12:41:25 ----N---- C:\WINDOWS\system32\rwnh.dll
2013-08-30 12:41:25 ----N---- C:\WINDOWS\system32\drivers\irbus.sys
2013-08-30 12:41:25 ----N---- C:\WINDOWS\system32\comsdupd.exe
2013-08-30 12:41:24 ----N---- C:\WINDOWS\system32\smtpapi.dll
2013-08-30 12:41:20 ----N---- C:\WINDOWS\system32\ati2cqag.dll
2013-08-30 12:41:20 ----N---- C:\WINDOWS\system32\aaclient.dll
2013-08-30 12:41:19 ----N---- C:\WINDOWS\system32\azroles.dll
2013-08-30 12:41:19 ----N---- C:\WINDOWS\system32\ativvaxx.dll
2013-08-30 12:41:19 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2013-08-30 12:41:19 ----N---- C:\WINDOWS\system32\ati3duag.dll
2013-08-30 12:41:19 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2013-08-30 12:41:19 ----N---- C:\WINDOWS\system32\ati2dvag.dll
2013-08-30 12:41:19 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2013-08-30 12:41:18 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2013-08-30 12:41:18 ----N---- C:\WINDOWS\system32\dot3api.dll
2013-08-30 12:41:18 ----N---- C:\WINDOWS\system32\dimsroam.dll
2013-08-30 12:41:18 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2013-08-30 12:41:18 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2013-08-30 12:41:18 ----N---- C:\WINDOWS\system32\credssp.dll
2013-08-30 12:41:18 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2013-08-30 12:41:17 ----N---- C:\WINDOWS\system32\eapphost.dll
2013-08-30 12:41:17 ----N---- C:\WINDOWS\system32\eappgnui.dll
2013-08-30 12:41:17 ----N---- C:\WINDOWS\system32\eappcfg.dll
2013-08-30 12:41:17 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2013-08-30 12:41:17 ----N---- C:\WINDOWS\system32\eapolqec.dll
2013-08-30 12:41:17 ----N---- C:\WINDOWS\system32\dot3ui.dll
2013-08-30 12:41:17 ----N---- C:\WINDOWS\system32\dot3svc.dll
2013-08-30 12:41:17 ----N---- C:\WINDOWS\system32\dot3msm.dll
2013-08-30 12:41:17 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2013-08-30 12:41:17 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2013-08-30 12:41:16 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2013-08-30 12:41:16 ----N---- C:\WINDOWS\system32\hccoin.dll
2013-08-30 12:41:16 ----N---- C:\WINDOWS\system32\eapsvc.dll
2013-08-30 12:41:16 ----N---- C:\WINDOWS\system32\eapqec.dll
2013-08-30 12:41:16 ----N---- C:\WINDOWS\system32\eappprxy.dll
2013-08-30 12:41:15 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2013-08-30 12:41:14 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2013-08-30 12:41:14 ----N---- C:\WINDOWS\system32\kmsvc.dll
2013-08-30 12:41:14 ----N---- C:\WINDOWS\system32\kbdpash.dll
2013-08-30 12:41:14 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2013-08-30 12:41:14 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2013-08-30 12:41:13 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2013-08-30 12:41:13 ----N---- C:\WINDOWS\system32\mssha.dll
2013-08-30 12:41:13 ----N---- C:\WINDOWS\system32\mmcperf.exe
2013-08-30 12:41:13 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2013-08-30 12:41:13 ----N---- C:\WINDOWS\system32\mmcex.dll
2013-08-30 12:41:13 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2013-08-30 12:41:13 ----N---- C:\WINDOWS\system32\mdmxsdk.dll
2013-08-30 12:41:12 ----N---- C:\WINDOWS\system32\qagent.dll
2013-08-30 12:41:12 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2013-08-30 12:41:12 ----N---- C:\WINDOWS\system32\onex.dll
2013-08-30 12:41:12 ----N---- C:\WINDOWS\system32\napstat.exe
2013-08-30 12:41:12 ----N---- C:\WINDOWS\system32\napmontr.dll
2013-08-30 12:41:12 ----N---- C:\WINDOWS\system32\napipsec.dll
2013-08-30 12:41:12 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2013-08-30 12:41:11 ----N---- C:\WINDOWS\system32\tspkg.dll
2013-08-30 12:41:11 ----N---- C:\WINDOWS\system32\tsgqec.dll
2013-08-30 12:41:11 ----N---- C:\WINDOWS\system32\slserv.exe
2013-08-30 12:41:11 ----N---- C:\WINDOWS\system32\slrundll.exe
2013-08-30 12:41:11 ----N---- C:\WINDOWS\system32\slgen.dll
2013-08-30 12:41:11 ----N---- C:\WINDOWS\system32\slextspk.dll
2013-08-30 12:41:11 ----N---- C:\WINDOWS\system32\slcoinst.dll
2013-08-30 12:41:11 ----N---- C:\WINDOWS\system32\setupn.exe
2013-08-30 12:41:11 ----N---- C:\WINDOWS\system32\s3gnb.dll
2013-08-30 12:41:11 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2013-08-30 12:41:11 ----N---- C:\WINDOWS\system32\rasqec.dll
2013-08-30 12:41:11 ----N---- C:\WINDOWS\system32\qutil.dll
2013-08-30 12:41:11 ----N---- C:\WINDOWS\system32\qcliprov.dll
2013-08-30 12:41:11 ----N---- C:\WINDOWS\system32\qagentrt.dll
2013-08-30 12:41:10 ----N---- C:\WINDOWS\system32\wlanapi.dll
2013-08-30 12:41:10 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
2013-08-30 12:41:10 ----N---- C:\WINDOWS\system32\windowscodecs.dll
2013-08-30 12:41:10 ----N---- C:\WINDOWS\system32\verclsid.exe
2013-08-30 12:41:10 ----N---- C:\WINDOWS\system32\tzchange.exe
2013-08-30 12:41:09 ----N---- C:\WINDOWS\system32\wmphoto.dll
2013-08-30 12:41:08 ----A---- C:\WINDOWS\system32\xmllite.dll
2013-08-30 12:41:07 ----N---- C:\WINDOWS\slrundll.exe
2013-08-30 12:41:07 ----D---- C:\WINDOWS\system32\en-us
2013-08-30 12:41:06 ----D---- C:\WINDOWS\system32\scripting
2013-08-30 12:41:06 ----D---- C:\WINDOWS\l2schemas
2013-08-30 12:41:05 ----D---- C:\WINDOWS\system32\en
2013-08-30 12:41:05 ----D---- C:\WINDOWS\system32\bits
2013-08-30 12:38:12 ----D---- C:\WINDOWS\ServicePackFiles
2013-08-30 12:35:38 ----N---- C:\WINDOWS\system32\drivers\agp440.sys
2013-08-30 12:35:38 ----N---- C:\WINDOWS\system32\drivers\adv11nt5.dll
2013-08-30 12:35:38 ----N---- C:\WINDOWS\system32\drivers\adv09nt5.dll
2013-08-30 12:35:38 ----N---- C:\WINDOWS\system32\drivers\adv08nt5.dll
2013-08-30 12:35:38 ----N---- C:\WINDOWS\system32\drivers\adv07nt5.dll
2013-08-30 12:35:38 ----N---- C:\WINDOWS\system32\drivers\adv05nt5.dll
2013-08-30 12:35:38 ----N---- C:\WINDOWS\system32\drivers\adv02nt5.dll
2013-08-30 12:35:38 ----N---- C:\WINDOWS\system32\drivers\adv01nt5.dll
2013-08-30 12:35:38 ----D---- C:\WINDOWS\network diagnostic
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\atinxsxx.sys
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\atinxbxx.sys
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\atintuxx.sys
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\atinttxx.sys
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\atinsnxx.sys
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\atinrvxx.sys
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\atinraxx.sys
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\atinpdxx.sys
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\atinmdxx.sys
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\atinbtxx.sys
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\ati1snxx.sys
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\ati1raxx.sys
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\ati1btxx.sys
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\amdagp.sys
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\alim1541.sys
2013-08-30 12:35:37 ----N---- C:\WINDOWS\system32\drivers\agpcpq.sys
2013-08-30 12:35:36 ----N---- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
2013-08-30 12:35:36 ----N---- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2013-08-30 12:35:36 ----N---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2013-08-30 12:35:36 ----N---- C:\WINDOWS\system32\drivers\hidir.sys
2013-08-30 12:35:36 ----N---- C:\WINDOWS\system32\drivers\hidbth.sys
2013-08-30 12:35:36 ----N---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2013-08-30 12:35:36 ----N---- C:\WINDOWS\system32\drivers\gagp30kx.sys
2013-08-30 12:35:36 ----N---- C:\WINDOWS\system32\drivers\bthusb.sys
2013-08-30 12:35:36 ----N---- C:\WINDOWS\system32\drivers\bthprint.sys
2013-08-30 12:35:36 ----N---- C:\WINDOWS\system32\drivers\bthport.sys
2013-08-30 12:35:36 ----N---- C:\WINDOWS\system32\drivers\bthpan.sys
2013-08-30 12:35:36 ----N---- C:\WINDOWS\system32\drivers\bthmodem.sys
2013-08-30 12:35:36 ----N---- C:\WINDOWS\system32\drivers\bthenum.sys
2013-08-30 12:35:36 ----N---- C:\WINDOWS\system32\drivers\atv10nt5.dll
2013-08-30 12:35:36 ----N---- C:\WINDOWS\system32\drivers\atv06nt5.dll
2013-08-30 12:35:36 ----N---- C:\WINDOWS\system32\drivers\atv04nt5.dll
2013-08-30 12:35:36 ----N---- C:\WINDOWS\system32\drivers\atv02nt5.dll
2013-08-30 12:35:36 ----N---- C:\WINDOWS\system32\drivers\atv01nt5.dll
2013-08-30 12:35:35 ----N---- C:\WINDOWS\system32\drivers\mutohpen.sys
2013-08-30 12:35:35 ----N---- C:\WINDOWS\system32\drivers\mtxparhm.sys
2013-08-30 12:35:35 ----N---- C:\WINDOWS\system32\drivers\mtlstrm.sys
2013-08-30 12:35:35 ----N---- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2013-08-30 12:35:35 ----N---- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2013-08-30 12:35:35 ----N---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2013-08-30 12:35:34 ----N---- C:\WINDOWS\system32\drivers\slntamr.sys
2013-08-30 12:35:34 ----N---- C:\WINDOWS\system32\drivers\slnt7554.sys
2013-08-30 12:35:34 ----N---- C:\WINDOWS\system32\drivers\sisagp.sys
2013-08-30 12:35:34 ----N---- C:\WINDOWS\system32\drivers\siint5.dll
2013-08-30 12:35:34 ----N---- C:\WINDOWS\system32\drivers\sffp_mmc.sys
2013-08-30 12:35:34 ----N---- C:\WINDOWS\system32\drivers\s3gnbm.sys
2013-08-30 12:35:34 ----N---- C:\WINDOWS\system32\drivers\rndismpx.sys
2013-08-30 12:35:34 ----N---- C:\WINDOWS\system32\drivers\rfcomm.sys
2013-08-30 12:35:34 ----N---- C:\WINDOWS\system32\drivers\recagent.sys
2013-08-30 12:35:34 ----N---- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2013-08-30 12:35:33 ----N---- C:\WINDOWS\system32\drivers\watv10nt.sys
2013-08-30 12:35:33 ----N---- C:\WINDOWS\system32\drivers\watv06nt.sys
2013-08-30 12:35:33 ----N---- C:\WINDOWS\system32\drivers\wadv11nt.sys
2013-08-30 12:35:33 ----N---- C:\WINDOWS\system32\drivers\wadv09nt.sys
2013-08-30 12:35:33 ----N---- C:\WINDOWS\system32\drivers\wadv08nt.sys
2013-08-30 12:35:33 ----N---- C:\WINDOWS\system32\drivers\wadv07nt.sys
2013-08-30 12:35:33 ----N---- C:\WINDOWS\system32\drivers\wacompen.sys
2013-08-30 12:35:33 ----N---- C:\WINDOWS\system32\drivers\vchnt5.dll
2013-08-30 12:35:33 ----N---- C:\WINDOWS\system32\drivers\usbvideo.sys
2013-08-30 12:35:33 ----N---- C:\WINDOWS\system32\drivers\usbehci.sys
2013-08-30 12:35:33 ----N---- C:\WINDOWS\system32\drivers\usb8023x.sys
2013-08-30 12:35:33 ----N---- C:\WINDOWS\system32\drivers\uagp35.sys
2013-08-30 12:35:33 ----N---- C:\WINDOWS\system32\drivers\smbali.sys
2013-08-30 12:35:33 ----N---- C:\WINDOWS\system32\drivers\slwdmsup.sys
2013-08-30 12:35:33 ----N---- C:\WINDOWS\system32\drivers\slnthal.sys
2013-08-30 12:33:08 ----A---- C:\WINDOWS\002879_.tmp
2013-08-30 12:32:22 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2013-08-30 12:28:53 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2013-08-30 12:17:25 ----D---- C:\Documents and Settings\Dobransky\Application Data\Help
2013-08-30 12:16:41 ----D---- C:\Program Files\Lavalys
2013-08-30 12:13:22 ----D---- C:\Intel
2013-08-30 12:08:03 ----D---- C:\WINDOWS\nview
2013-08-30 12:08:03 ----A---- C:\WINDOWS\system32\nvudisp.exe
2013-08-30 12:07:52 ----D---- C:\WINDOWS\system32\ReinstallBackups
2013-08-30 12:07:41 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2013-08-30 12:07:32 ----D---- C:\Program Files\Common Files\InstallShield
2013-08-30 12:07:21 ----D---- C:\NVIDIA
2013-08-30 11:58:34 ----A---- C:\WINDOWS\system32\drivers\usbstor.sys
2013-08-30 11:54:51 ----A---- C:\WINDOWS\system32\h323log.txt
2013-08-30 11:52:23 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2013-08-30 11:52:20 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2013-08-30 11:52:18 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2013-08-30 11:52:16 ----A---- C:\WINDOWS\system32\drivers\mspqm.sys
2013-08-30 11:52:13 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2013-08-30 11:52:02 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2013-08-30 11:51:59 ----A---- C:\WINDOWS\system32\drivers\dmusic.sys
2013-08-30 11:51:57 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2013-08-30 11:51:54 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2013-08-30 11:51:51 ----A---- C:\WINDOWS\system32\drivers\mskssrv.sys
2013-08-30 11:51:48 ----A---- C:\WINDOWS\system32\drivers\mspclock.sys
2013-08-30 11:51:42 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2013-08-30 11:51:03 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2013-08-30 11:50:38 ----A---- C:\WINDOWS\system32\drivers\nv4_mini.sys
2013-08-30 11:50:37 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2013-08-30 11:50:13 ----A---- C:\WINDOWS\system32\drivers\es198x.sys
2013-08-30 11:50:12 ----A---- C:\WINDOWS\system32\ksuser.dll
2013-08-30 11:50:12 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2013-08-30 11:50:11 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2013-08-30 11:50:05 ----A---- C:\WINDOWS\system32\drivers\RTL8139.sys
2013-08-30 11:49:58 ----A---- C:\WINDOWS\system32\usbui.dll
2013-08-30 11:49:55 ----A---- C:\WINDOWS\system32\drivers\viaagp.sys
2013-08-30 11:48:05 ----SHD---- C:\WINDOWS\Installer
2013-08-30 11:48:05 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-08-30 11:48:04 ----D---- C:\Program Files\Common Files\ODBC
2013-08-30 11:48:04 ----A---- C:\WINDOWS\ODBCINST.INI
2013-08-30 11:47:57 ----D---- C:\Program Files\Common Files\SpeechEngines
2013-08-30 11:47:56 ----RD---- C:\Program Files
2013-08-30 11:47:56 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-08-30 11:47:56 ----D---- C:\Program Files\Common Files
2013-08-30 11:47:47 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2013-08-30 11:47:47 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2013-08-30 11:47:47 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2013-08-30 11:47:34 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2013-08-30 11:47:34 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2013-08-30 11:47:34 ----RA---- C:\WINDOWS\system32\kbdur.dll
2013-08-30 11:47:34 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2013-08-30 11:47:34 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2013-08-30 11:47:34 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2013-08-30 11:47:34 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2013-08-30 11:47:34 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2013-08-30 11:47:33 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2013-08-30 11:47:33 ----RA---- C:\WINDOWS\system32\kbdru.dll
2013-08-30 11:47:33 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2013-08-30 11:47:33 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2013-08-30 11:47:26 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2013-08-30 11:47:26 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2013-08-30 11:47:26 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2013-08-30 11:47:26 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2013-08-30 11:47:26 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2013-08-30 11:47:26 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2013-08-30 11:47:26 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2013-08-30 11:47:20 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2013-08-30 11:47:20 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2013-08-30 11:47:20 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2013-08-30 11:47:19 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2013-08-30 11:47:19 ----RA---- C:\WINDOWS\system32\kbdest.dll
2013-08-30 11:47:10 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2013-08-30 11:47:10 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2013-08-30 11:47:10 ----RA---- C:\WINDOWS\system32\kbdro.dll
2013-08-30 11:47:10 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2013-08-30 11:47:10 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2013-08-30 11:47:10 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2013-08-30 11:47:10 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2013-08-30 11:47:10 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2013-08-30 11:47:10 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2013-08-30 11:47:10 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2013-08-30 11:47:10 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2013-08-30 11:47:10 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2013-08-30 11:47:09 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2013-08-30 11:47:00 ----A---- C:\WINDOWS\system32\irclass.dll
2013-08-30 11:46:59 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2013-08-30 11:46:58 ----A---- C:\WINDOWS\system32\dgsetup.dll
2013-08-30 11:46:57 ----A---- C:\WINDOWS\system32\spxcoins.dll
2013-08-30 11:46:57 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2013-08-30 11:46:49 ----A---- C:\WINDOWS\TASKMAN.EXE
2013-08-30 11:46:47 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2013-08-30 11:46:47 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2013-08-30 11:46:47 ----A---- C:\WINDOWS\system32\batt.dll
2013-08-30 11:46:46 ----A---- C:\WINDOWS\notepad.exe
2013-08-30 11:46:42 ----A---- C:\WINDOWS\system32\storprop.dll
2013-08-30 11:46:31 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2013-08-30 11:46:30 ----RA---- C:\WINDOWS\SET29.tmp
2013-08-30 11:46:19 ----RA---- C:\WINDOWS\SET8.tmp
2013-08-30 11:46:11 ----RA---- C:\WINDOWS\SET4.tmp
2013-08-30 11:46:09 ----RA---- C:\WINDOWS\SET3.tmp
2013-08-30 11:46:01 ----D---- C:\WINDOWS\system32\CatRoot2
2013-08-30 11:46:01 ----D---- C:\WINDOWS\system32\CatRoot
2013-08-30 11:45:55 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2013-08-30 11:45:15 ----D---- C:\Documents and Settings
2013-08-30 11:45:13 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2013-08-30 11:44:22 ----SH---- C:\boot.ini
2013-08-30 11:35:54 ----SHD---- C:\System Volume Information
2013-08-30 11:28:55 ----SHD---- C:\RECYCLER
2013-08-30 11:25:33 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-08-30 11:25:33 ----RSD---- C:\WINDOWS\Fonts
2013-08-30 11:25:33 ----RD---- C:\WINDOWS\Web
2013-08-30 11:25:33 ----HD---- C:\WINDOWS\inf
2013-08-30 11:25:33 ----D---- C:\WINDOWS\WinSxS
2013-08-30 11:25:33 ----D---- C:\WINDOWS\twain_32
2013-08-30 11:25:33 ----D---- C:\WINDOWS\Temp
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\wins
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\wbem
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\usmt
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\spool
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\ShellExt
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\Setup
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\ras
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\oobe
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\npp
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\mui
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\inetsrv
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\IME
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\icsxml
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\ias
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\export
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\drivers\etc
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\drivers\disdn
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\drivers
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\dhcp
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\config
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\3com_dmi
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\3076
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\2052
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\1054
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\1042
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\1041
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\1037
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\1033
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\1031
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\1028
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32\1025
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system32
2013-08-30 11:25:33 ----D---- C:\WINDOWS\system
2013-08-30 11:25:33 ----D---- C:\WINDOWS\security
2013-08-30 11:25:33 ----D---- C:\WINDOWS\Resources
2013-08-30 11:25:33 ----D---- C:\WINDOWS\repair
2013-08-30 11:25:33 ----D---- C:\WINDOWS\Provisioning
2013-08-30 11:25:33 ----D---- C:\WINDOWS\pchealth
2013-08-30 11:25:33 ----D---- C:\WINDOWS\PeerNet
2013-08-30 11:25:33 ----D---- C:\WINDOWS\mui
2013-08-30 11:25:33 ----D---- C:\WINDOWS\msapps
2013-08-30 11:25:33 ----D---- C:\WINDOWS\msagent
2013-08-30 11:25:33 ----D---- C:\WINDOWS\Media
2013-08-30 11:25:33 ----D---- C:\WINDOWS\java
2013-08-30 11:25:33 ----D---- C:\WINDOWS\ime
2013-08-30 11:25:33 ----D---- C:\WINDOWS\Help
2013-08-30 11:25:33 ----D---- C:\WINDOWS\ehome
2013-08-30 11:25:33 ----D---- C:\WINDOWS\Driver Cache
2013-08-30 11:25:33 ----D---- C:\WINDOWS\Debug
2013-08-30 11:25:33 ----D---- C:\WINDOWS\Cursors
2013-08-30 11:25:33 ----D---- C:\WINDOWS\Connection Wizard
2013-08-30 11:25:33 ----D---- C:\WINDOWS\Config
2013-08-30 11:25:33 ----D---- C:\WINDOWS\AppPatch
2013-08-30 11:25:33 ----D---- C:\WINDOWS\addins
2013-08-30 11:25:33 ----D---- C:\WINDOWS
2013-08-30 11:25:32 ----ASH---- C:\pagefile.sys
2013-08-30 11:24:17 ----D---- C:\Documents and Settings\Dobransky\Application Data\Identities
2013-08-30 11:24:14 ----HD---- C:\Program Files\Uninstall Information
2013-08-30 11:24:06 ----SD---- C:\Documents and Settings\Dobransky\Application Data\Microsoft
2013-08-30 11:24:06 ----ASH---- C:\Documents and Settings\Dobransky\Application Data\desktop.ini
2013-08-30 11:24:00 ----ASH---- C:\hiberfil.sys
2013-08-30 11:23:26 ----A---- C:\WINDOWS\system32\wpa.bak
2013-08-30 11:18:39 ----D---- C:\WINDOWS\SoftwareDistribution
2013-08-30 11:18:29 ----SD---- C:\WINDOWS\system32\Microsoft
2013-08-30 11:18:29 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-08-30 11:17:11 ----AS---- C:\WINDOWS\bootstat.dat
2013-08-30 11:11:04 ----D---- C:\WINDOWS\system32\xircom
2013-08-30 11:11:04 ----D---- C:\Program Files\xerox
2013-08-30 11:11:04 ----D---- C:\Program Files\microsoft frontpage
2013-08-30 11:10:22 ----N---- C:\WINDOWS\system32\spmsg.dll
2013-08-30 11:10:20 ----HD---- C:\WINDOWS\$hf_mig$
2013-08-30 11:10:16 ----N---- C:\WINDOWS\system32\xpsp3res.dll
2013-08-30 11:10:03 ----RASH---- C:\MSDOS.SYS
2013-08-30 11:10:03 ----RASH---- C:\IO.SYS
2013-08-30 11:10:03 ----A---- C:\WINDOWS\control.ini
2013-08-30 11:10:03 ----A---- C:\CONFIG.SYS
2013-08-30 11:10:03 ----A---- C:\AUTOEXEC.BAT
2013-08-30 11:09:38 ----A---- C:\WINDOWS\system32\mapi32.dll
2013-08-30 11:07:45 ----SD---- C:\WINDOWS\Downloaded Program Files
2013-08-30 11:07:45 ----RD---- C:\WINDOWS\Offline Web Pages
2013-08-30 11:07:22 ----HD---- C:\Program Files\WindowsUpdate
2013-08-30 11:06:32 ----D---- C:\WINDOWS\system32\DirectX
2013-08-30 11:05:18 ----A---- C:\WINDOWS\system32\atrace.dll
2013-08-30 11:05:07 ----A---- C:\WINDOWS\system32\desktop.ini
2013-08-30 11:05:07 ----A---- C:\WINDOWS\desktop.ini
2013-08-30 11:04:38 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2013-08-30 11:04:33 ----A---- C:\WINDOWS\system32\acctres.dll
2013-08-30 11:04:31 ----D---- C:\Program Files\Common Files\Services
2013-08-30 11:04:24 ----SD---- C:\WINDOWS\Tasks
2013-08-30 11:04:24 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2013-08-30 11:04:21 ----D---- C:\Program Files\Common Files\MSSoap
2013-08-30 11:04:06 ----D---- C:\WINDOWS\srchasst
2013-08-30 11:04:04 ----D---- C:\WINDOWS\system32\Macromed
2013-08-30 11:03:54 ----A---- C:\WINDOWS\system32\wuweb.dll
2013-08-30 11:03:54 ----A---- C:\WINDOWS\system32\wucltui.dll
2013-08-30 11:03:54 ----A---- C:\WINDOWS\system32\wuauserv.dll
2013-08-30 11:03:54 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2013-08-30 11:03:53 ----A---- C:\WINDOWS\system32\wups.dll
2013-08-30 11:03:53 ----A---- C:\WINDOWS\system32\wuaueng.dll
2013-08-30 11:03:53 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2013-08-30 11:03:53 ----A---- C:\WINDOWS\system32\wuauclt.exe
2013-08-30 11:03:52 ----A---- C:\WINDOWS\system32\wuapi.dll
2013-08-30 11:03:51 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2013-08-30 11:03:51 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2013-08-30 11:03:50 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2013-08-30 11:03:49 ----A---- C:\WINDOWS\system32\qmgr.dll
2013-08-30 11:03:33 ----D---- C:\Program Files\Movie Maker
2013-08-30 11:03:11 ----A---- C:\WINDOWS\system32\safrslv.dll
2013-08-30 11:03:11 ----A---- C:\WINDOWS\system32\safrdm.dll
2013-08-30 11:03:11 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2013-08-30 11:03:10 ----A---- C:\WINDOWS\system32\racpldlg.dll
2013-08-30 11:03:00 ----A---- C:\WINDOWS\system32\fltmc.exe
2013-08-30 11:03:00 ----A---- C:\WINDOWS\system32\fltlib.dll
2013-08-30 11:03:00 ----A---- C:\WINDOWS\system32\drivers\fltmgr.sys
2013-08-30 11:02:48 ----D---- C:\WINDOWS\system32\Restore
2013-08-30 11:02:48 ----A---- C:\WINDOWS\system32\srsvc.dll
2013-08-30 11:02:48 ----A---- C:\WINDOWS\system32\srrstr.dll
2013-08-30 11:02:47 ----A---- C:\WINDOWS\system32\srclient.dll
2013-08-30 11:02:47 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2013-08-30 11:02:43 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2013-08-30 11:02:43 ----A---- C:\WINDOWS\system32\ils.dll
2013-08-30 11:02:42 ----A---- C:\WINDOWS\system32\mnmdd.dll
2013-08-30 11:02:40 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2013-08-30 11:02:38 ----A---- C:\WINDOWS\system32\msconf.dll
2013-08-30 11:02:38 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2013-08-30 11:02:23 ----D---- C:\Program Files\NetMeeting
2013-08-30 11:02:23 ----A---- C:\WINDOWS\system32\msoert2.dll
2013-08-30 11:02:23 ----A---- C:\WINDOWS\system32\msoeacct.dll
2013-08-30 11:02:20 ----A---- C:\WINDOWS\system32\inetres.dll
2013-08-30 11:02:19 ----A---- C:\WINDOWS\system32\inetcomm.dll
2013-08-30 11:02:13 ----D---- C:\Program Files\Outlook Express
2013-08-30 11:02:13 ----A---- C:\WINDOWS\system32\schedsvc.dll
2013-08-30 11:02:13 ----A---- C:\WINDOWS\system32\mstinit.exe
2013-08-30 11:02:13 ----A---- C:\WINDOWS\system32\mstask.dll
2013-08-30 11:02:11 ----A---- C:\WINDOWS\system32\icwphbk.dll
2013-08-30 11:02:10 ----A---- C:\WINDOWS\system32\isign32.dll
2013-08-30 11:02:10 ----A---- C:\WINDOWS\system32\inetcfg.dll
2013-08-30 11:02:10 ----A---- C:\WINDOWS\system32\icwdial.dll
2013-08-30 11:01:50 ----D---- C:\Program Files\Common Files\System
2013-08-30 11:01:46 ----D---- C:\Program Files\Internet Explorer
2013-08-30 11:00:50 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2013-08-30 11:00:40 ----D---- C:\Program Files\ComPlus Applications
2013-08-30 11:00:38 ----A---- C:\WINDOWS\vbaddin.ini
2013-08-30 11:00:38 ----A---- C:\WINDOWS\vb.ini
2013-08-30 11:00:33 ----D---- C:\WINDOWS\Registration
2013-08-30 11:00:26 ----D---- C:\Program Files\Online Services
2013-08-30 11:00:25 ----D---- C:\Program Files\Windows Media Player
2013-08-30 11:00:12 ----D---- C:\Program Files\Messenger
2013-08-30 10:59:51 ----D---- C:\Program Files\MSN Gaming Zone
2013-08-30 10:59:51 ----A---- C:\WINDOWS\system32\write.exe
2013-08-30 10:59:23 ----A---- C:\WINDOWS\system32\sndvol32.exe
2013-08-30 10:59:22 ----A---- C:\WINDOWS\system32\hticons.dll
2013-08-30 10:59:22 ----A---- C:\WINDOWS\system32\avwav.dll
2013-08-30 10:59:22 ----A---- C:\WINDOWS\system32\avmeter.dll
2013-08-30 10:59:21 ----A---- C:\WINDOWS\system32\avtapi.dll
2013-08-30 10:59:18 ----A---- C:\WINDOWS\system32\winchat.exe
2013-08-30 10:58:44 ----A---- C:\WINDOWS\system32\getuname.dll
2013-08-30 10:58:43 ----A---- C:\WINDOWS\system32\charmap.exe
2013-08-30 10:58:42 ----A---- C:\WINDOWS\system32\calc.exe
2013-08-30 10:58:40 ----A---- C:\WINDOWS\system32\winmine.exe
2013-08-30 10:58:40 ----A---- C:\WINDOWS\system32\sol.exe
2013-08-30 10:58:38 ----A---- C:\WINDOWS\system32\mshearts.exe
2013-08-30 10:58:36 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2013-08-30 10:58:36 ----A---- C:\WINDOWS\system32\tskill.exe
2013-08-30 10:58:36 ----A---- C:\WINDOWS\system32\reset.exe
2013-08-30 10:58:36 ----A---- C:\WINDOWS\system32\freecell.exe
2013-08-30 10:58:35 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2013-08-30 10:58:35 ----A---- C:\WINDOWS\system32\tslabels.ini
2013-08-30 10:58:35 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2013-08-30 10:58:35 ----A---- C:\WINDOWS\system32\tscon.exe
2013-08-30 10:58:35 ----A---- C:\WINDOWS\system32\shadow.exe
2013-08-30 10:58:35 ----A---- C:\WINDOWS\system32\rwinsta.exe
2013-08-30 10:58:35 ----A---- C:\WINDOWS\system32\regini.exe
2013-08-30 10:58:34 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2013-08-30 10:58:34 ----A---- C:\WINDOWS\system32\qwinsta.exe
2013-08-30 10:58:34 ----A---- C:\WINDOWS\system32\qappsrv.exe
2013-08-30 10:58:34 ----A---- C:\WINDOWS\system32\msg.exe
2013-08-30 10:58:32 ----A---- C:\WINDOWS\system32\logoff.exe
2013-08-30 10:58:31 ----A---- C:\WINDOWS\system32\cdmodem.dll
2013-08-30 10:58:30 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2013-08-30 10:58:26 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2013-08-30 10:58:25 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2013-08-30 10:58:25 ----A---- C:\WINDOWS\system32\mtxex.dll
2013-08-30 10:58:25 ----A---- C:\WINDOWS\system32\mtxdm.dll
2013-08-30 10:58:24 ----A---- C:\WINDOWS\system32\comrepl.dll
2013-08-30 10:58:24 ----A---- C:\WINDOWS\system32\comaddin.dll
2013-08-30 10:58:22 ----A---- C:\WINDOWS\system32\stclient.dll
2013-08-30 10:58:21 ----A---- C:\WINDOWS\system32\comsnap.dll
2013-08-30 10:58:06 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2013-08-30 10:57:34 ----D---- C:\Program Files\MSN
2013-08-30 10:57:32 ----A---- C:\WINDOWS\system32\accwiz.exe
2013-08-30 10:57:31 ----A---- C:\WINDOWS\system32\sndrec32.exe
2013-08-30 10:57:31 ----A---- C:\WINDOWS\system32\mplay32.exe
2013-08-30 10:57:30 ----A---- C:\WINDOWS\system32\hypertrm.dll
2013-08-30 10:57:29 ----D---- C:\Program Files\Windows NT
2013-08-30 10:57:29 ----A---- C:\WINDOWS\system32\mspaint.exe
2013-08-30 10:57:28 ----A---- C:\WINDOWS\system32\clipbrd.exe
2013-08-30 10:57:27 ----A---- C:\WINDOWS\system32\spider.exe
2013-08-30 10:57:26 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2013-08-30 10:57:26 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2013-08-30 10:57:26 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2013-08-30 10:57:25 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2013-08-30 10:57:25 ----A---- C:\WINDOWS\system32\mstscax.dll
2013-08-30 10:57:25 ----A---- C:\WINDOWS\system32\mstsc.exe
2013-08-30 10:57:24 ----A---- C:\WINDOWS\system32\sessmgr.exe
2013-08-30 10:57:24 ----A---- C:\WINDOWS\system32\remotepg.dll
2013-08-30 10:57:24 ----A---- C:\WINDOWS\system32\rdshost.exe
2013-08-30 10:57:24 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2013-08-30 10:57:23 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2013-08-30 10:57:23 ----A---- C:\WINDOWS\system32\termsrv.dll
2013-08-30 10:57:23 ----A---- C:\WINDOWS\system32\rdchost.dll
2013-08-30 10:57:22 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2013-08-30 10:57:22 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2013-08-30 10:57:22 ----A---- C:\WINDOWS\system32\rdpclip.exe
2013-08-30 10:57:22 ----A---- C:\WINDOWS\system32\qprocess.exe
2013-08-30 10:57:22 ----A---- C:\WINDOWS\system32\icaapi.dll
2013-08-30 10:57:20 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2013-08-30 10:57:19 ----D---- C:\WINDOWS\system32\MsDtc
2013-08-30 10:57:19 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2013-08-30 10:57:17 ----A---- C:\WINDOWS\system32\mtxoci.dll
2013-08-30 10:57:15 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2013-08-30 10:57:14 ----A---- C:\WINDOWS\system32\xolehlp.dll
2013-08-30 10:57:14 ----A---- C:\WINDOWS\system32\msdtctm.dll
2013-08-30 10:57:14 ----A---- C:\WINDOWS\system32\msdtclog.dll
2013-08-30 10:57:14 ----A---- C:\WINDOWS\system32\msdtc.exe
2013-08-30 10:57:12 ----D---- C:\WINDOWS\system32\Com
2013-08-30 10:57:12 ----A---- C:\WINDOWS\system32\colbact.dll
2013-08-30 10:57:12 ----A---- C:\WINDOWS\system32\clbcatex.dll
2013-08-30 10:57:12 ----A---- C:\WINDOWS\system32\catsrvps.dll
2013-08-30 10:57:11 ----A---- C:\WINDOWS\system32\catsrvut.dll
2013-08-30 10:57:10 ----A---- C:\WINDOWS\system32\catsrv.dll
2013-08-30 10:57:09 ----A---- C:\WINDOWS\system32\comsvcs.dll
2013-08-30 10:57:08 ----A---- C:\WINDOWS\system32\comuid.dll
2013-08-30 10:57:08 ----A---- C:\WINDOWS\system32\clbcatq.dll
2013-08-30 10:56:46 ----A---- C:\WINDOWS\system32\servdeps.dll
2013-08-30 10:56:45 ----A---- C:\WINDOWS\system32\mmfutil.dll
2013-08-30 10:56:45 ----A---- C:\WINDOWS\system32\licwmi.dll
2013-08-30 10:56:44 ----A---- C:\WINDOWS\system32\cmprops.dll
2013-08-30 10:56:40 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
2013-08-30 10:56:39 ----A---- C:\WINDOWS\system32\drivers\termdd.sys

======List of files/folders modified in the last 1 month======

2013-08-30 14:18:43 ----A---- C:\WINDOWS\system.ini
2013-08-30 11:10:03 ----A---- C:\WINDOWS\win.ini
2013-08-30 11:09:16 ----ASH---- C:\WINDOWS\fonts\desktop.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 viaagp;VIA AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-14 42240]
R0 viaagp1;VIA AGP Filter; C:\WINDOWS\system32\DRIVERS\viaagp1.sys [2002-07-24 32128]
R1 NNSALPC;NNSAlpc; C:\WINDOWS\system32\DRIVERS\NNSAlpc.sys [2013-05-29 84200]
R1 NNSHTTP;NNSHttp; C:\WINDOWS\system32\DRIVERS\NNSHttp.sys [2013-05-29 126184]
R1 NNSHTTPS;NNSHttps; C:\WINDOWS\system32\DRIVERS\NNSHttps.sys [2013-05-29 107752]
R1 NNSIDS;NNSids; C:\WINDOWS\system32\DRIVERS\NNSIds.sys [2013-05-29 124648]
R1 NNSPICC;NNSPicc; C:\WINDOWS\system32\DRIVERS\NNSPicc.sys [2013-05-29 95464]
R1 NNSPIHS;NNSPihs; C:\WINDOWS\system32\DRIVERS\NNSPihs.sys [2013-05-29 52328]
R1 NNSPOP3;NNSPop3; C:\WINDOWS\system32\DRIVERS\NNSPop3.sys [2013-05-29 106344]
R1 NNSPROT;NNSProt; C:\WINDOWS\system32\DRIVERS\NNSProt.sys [2013-05-29 287336]
R1 NNSPRV;NNSPrv; C:\WINDOWS\system32\DRIVERS\NNSPrv.sys [2013-05-29 161384]
R1 NNSSMTP;NNSSmtp; C:\WINDOWS\system32\DRIVERS\NNSSmtp.sys [2013-05-29 108904]
R1 NNSSTRM;NNSStrm; C:\WINDOWS\system32\DRIVERS\NNSStrm.sys [2013-05-29 230376]
R1 NNSTLSC;NNSTlsc; C:\WINDOWS\system32\DRIVERS\NNSTlsc.sys [2013-05-29 93928]
R1 P3;Intel PentiumIII Processor Driver; C:\WINDOWS\system32\DRIVERS\p3.sys [2008-04-14 42752]
R1 PSINKNC;PSINKnc; C:\WINDOWS\system32\DRIVERS\psinknc.sys [2013-05-28 179688]
R2 PSINAflt;PSINAflt; C:\WINDOWS\system32\DRIVERS\PSINAflt.sys [2013-05-28 145128]
R2 PSINFile;PSINFile; C:\WINDOWS\system32\DRIVERS\PSINFile.sys [2013-07-17 103528]
R2 PSINProc;PSINProc; C:\WINDOWS\system32\DRIVERS\PSINProc.sys [2013-05-28 114920]
R2 PSINProt;PSINProt; C:\WINDOWS\system32\DRIVERS\PSINProt.sys [2013-05-29 128104]
R3 allegro;ESS Allegro Audio Driver (WDM); C:\WINDOWS\system32\drivers\es198x.sys [2001-08-17 174464]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-02-28 12160]
R3 NNSNAHS;Network Activity Hook Server Service; C:\WINDOWS\system32\DRIVERS\NNSNAHS.sys [2013-03-26 39520]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-10-22 3994624]
R3 PSKMAD;PSKMAD; C:\WINDOWS\System32\DRIVERS\PSKMAD.sys [2013-04-29 47632]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
R3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S3 PSINReg;PSINReg; C:\WINDOWS\system32\DRIVERS\PSINReg.sys [2013-05-28 97768]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 NanoServiceMain;Panda Cloud Antivirus Service; C:\Program Files\Panda Security\Panda Cloud Antivirus\PSANHost.exe [2013-07-17 140768]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-10-22 159810]
R2 PSUAService;Panda Product Service; C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUAService.exe [2013-07-08 37344]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-09-04 117656]

-----------------EOF-----------------

7777 · #2 Příspěvek od **7777** » 13 zář 2013 19:26

Log z DDS:

DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 8.0.6001.18702
Run by Dobransky at 20:08:13 on 2013-09-13
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1033.18.255.124 [GMT 2:00]
.
AV: AVG Internet Security 2012 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Panda Cloud Antivirus *Enabled/Updated* {5AD27692-540A-464E-B625-78275FA38393}
FW: AVG Internet Security 2012 *Enabled*
FW: Cloud Antivirus Firewall *Disabled*
.
============== Running Processes ================
.
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUAService.exe
C:\Program Files\Panda Security\Panda Cloud Antivirus\PSANHost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUAMain.exe
C:\Documents and Settings\All Users\Application Data\Panda Security URL Filtering\Panda_URL_Filtering.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalService
.
============== Pseudo HJT Report ===============
.
uURLSearchHooks: Panda Security Toolbar: {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - c:\program files\pandasecuritytb\pandasecurityDx.dll
BHO: Panda Security Toolbar: {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - c:\program files\pandasecuritytb\pandasecurityDx.dll
TB: Panda Security Toolbar: {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - c:\program files\pandasecuritytb\pandasecurityDx.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /install
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [PSUAMain] "c:\program files\panda security\panda cloud antivirus\PSUAMain.exe" /LaunchSysTray
mRun: [Panda Security URL Filtering] "c:\documents and settings\all users\application data\panda security url filtering\Panda_URL_Filtering.exe"
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Windows\System: Allow-LogonScript-NetbiosDisabled = dword:1
mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
TCP: NameServer = 192.168.1.1
TCP: Interfaces\{CCC48A2B-53D6-408D-925E-A59806E11835} : DHCPNameServer = 192.168.1.1
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\dobransky\application data\mozilla\firefox\profiles\aygd8rqa.default\
FF - prefs.js: browser.search.selectedEngine - AVG Secure Search
FF - ExtSQL: 2013-09-05 20:59; {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}; c:\documents and settings\dobransky\application data\mozilla\firefox\profiles\aygd8rqa.default\extensions\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}
.
============= SERVICES / DRIVERS ===============
.
R1 NNSALPC;NNSAlpc;c:\windows\system32\drivers\NNSAlpc.sys [2013-5-29 84200]
R1 NNSHTTP;NNSHttp;c:\windows\system32\drivers\NNSHttp.sys [2013-5-29 126184]
R1 NNSHTTPS;NNSHttps;c:\windows\system32\drivers\NNSHttps.sys [2013-5-29 107752]
R1 NNSIDS;NNSids;c:\windows\system32\drivers\NNSIds.sys [2013-5-29 124648]
R1 NNSPICC;NNSPicc;c:\windows\system32\drivers\NNSpicc.sys [2013-5-29 95464]
R1 NNSPIHS;NNSPihs;c:\windows\system32\drivers\NNSpihs.sys [2013-5-29 52328]
R1 NNSPOP3;NNSPop3;c:\windows\system32\drivers\NNSPop3.sys [2013-5-29 106344]
R1 NNSPROT;NNSProt;c:\windows\system32\drivers\NNSProt.sys [2013-5-29 287336]
R1 NNSPRV;NNSPrv;c:\windows\system32\drivers\NNSPrv.sys [2013-5-29 161384]
R1 NNSSMTP;NNSSmtp;c:\windows\system32\drivers\NNSSmtp.sys [2013-5-29 108904]
R1 NNSSTRM;NNSStrm;c:\windows\system32\drivers\NNSStrm.sys [2013-5-29 230376]
R1 NNSTLSC;NNSTlsc;c:\windows\system32\drivers\NNStlsc.sys [2013-5-29 93928]
R1 PSINKNC;PSINKnc;c:\windows\system32\drivers\PSINKNC.sys [2013-5-28 179688]
R2 NanoServiceMain;Panda Cloud Antivirus Service;c:\program files\panda security\panda cloud antivirus\PSANHost.exe [2013-7-17 140768]
R2 PSINAflt;PSINAflt;c:\windows\system32\drivers\PSINAflt.sys [2013-5-28 145128]
R2 PSINFile;PSINFile;c:\windows\system32\drivers\PSINFile.sys [2013-7-17 103528]
R2 PSINProc;PSINProc;c:\windows\system32\drivers\PSINProc.sys [2013-5-28 114920]
R2 PSINProt;PSINProt;c:\windows\system32\drivers\PSINProt.sys [2013-5-29 128104]
R2 PSUAService;Panda Product Service;c:\program files\panda security\panda cloud antivirus\PSUAService.exe [2013-7-8 37344]
R3 NNSNAHS;Network Activity Hook Server Service;c:\windows\system32\drivers\NNSNAHS.sys [2013-3-26 39520]
R3 PSched;QoS Packet Scheduler;c:\windows\system32\drivers\psched.sys [2006-2-28 69120]
R3 PSKMAD;PSKMAD;c:\windows\system32\drivers\PSKMAD.sys [2013-9-5 47632]
S3 PSINReg;PSINReg;c:\windows\system32\drivers\PSINReg.sys [2013-5-28 97768]
.
=============== Created Last 30 ================
.
2013-09-13 17:34:23 -------- d-----w- c:\program files\trend micro
2013-09-13 17:23:26 -------- d-----w- C:\FRST
2013-09-13 17:23:03 -------- d-----w- c:\documents and settings\dobransky\local settings\application data\qb343238.D9
2013-09-05 19:00:47 -------- d-----w- c:\documents and settings\dobransky\application data\Panda Security
2013-09-05 18:59:31 -------- d-----w- c:\documents and settings\dobransky\local settings\application data\panda4_0dn
2013-09-05 18:59:30 -------- d-----w- c:\documents and settings\all users\application data\blekko toolbars
2013-09-05 18:59:29 47632 ----a-w- c:\windows\system32\drivers\PSKMAD.sys
2013-09-05 18:59:27 -------- d-----w- c:\documents and settings\all users\application data\Panda Security URL Filtering
2013-09-05 18:59:22 -------- d-----w- c:\program files\Toolbar Cleaner
2013-09-05 18:58:49 -------- d-----w- c:\documents and settings\dobransky\application data\pandasecuritytb
2013-09-05 18:58:38 -------- d-----w- c:\program files\pandasecuritytb
2013-09-05 18:57:21 -------- d-----w- c:\program files\Panda Security
2013-09-05 18:57:21 -------- d-----w- c:\documents and settings\all users\application data\Panda Security
2013-09-05 17:11:19 -------- d-sh--w- c:\documents and settings\all users\application data\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2013-09-05 16:43:04 -------- d-----w- c:\documents and settings\dobransky\application data\AVG2012
2013-09-05 16:40:31 -------- d-----w- c:\documents and settings\dobransky\application data\TuneUp Software
2013-09-05 16:40:20 -------- d-----w- c:\documents and settings\all users\application data\AVG Secure Search
2013-09-05 16:36:26 -------- d--h--w- C:\$AVG
2013-09-05 16:36:26 -------- d-----w- c:\documents and settings\all users\application data\AVG2012
2013-09-05 16:34:38 -------- d-----w- c:\program files\AVG
2013-09-05 16:31:45 -------- d--h--w- c:\documents and settings\all users\application data\Common Files
2013-09-05 16:31:20 -------- d-----w- c:\documents and settings\all users\application data\MFAData
2013-09-05 16:19:36 1386496 ----a-w- c:\windows\system32\msvbvm60.dll
2013-09-05 16:15:13 -------- d-----w- c:\documents and settings\all users\application data\Logs
2013-09-05 16:15:02 17344 ----a-w- c:\windows\system32\roboot.exe
2013-09-05 08:54:25 -------- d-----w- c:\program files\A4Desk
2013-09-04 09:51:01 -------- d-----w- C:\Portable Files
2013-09-01 20:43:59 -------- d-----w- c:\program files\OpenOffice.org 2.4
2013-09-01 10:33:11 -------- d-----w- c:\program files\J. A. Associates
2013-08-31 18:16:12 -------- d-sh--w- c:\documents and settings\dobransky\IETldCache
2013-08-31 18:11:43 522240 -c----w- c:\windows\system32\dllcache\jsdbgui.dll
2013-08-31 18:10:24 6144 -c----w- c:\windows\system32\dllcache\iecompat.dll
2013-08-31 18:09:46 -------- d-----w- c:\windows\ie8updates
2013-08-31 18:09:25 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2013-08-31 18:09:23 630272 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2013-08-31 18:09:23 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2013-08-31 18:09:21 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2013-08-31 18:09:21 2006016 -c----w- c:\windows\system32\dllcache\iertutil.dll
2013-08-31 18:09:20 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2013-08-31 18:09:20 11113472 -c----w- c:\windows\system32\dllcache\ieframe.dll
2013-08-31 18:07:40 -------- dc-h--w- c:\windows\ie8
2013-08-31 17:52:05 -------- d-----w- c:\windows\system32\MRT
2013-08-31 17:15:55 953856 -c----w- c:\windows\system32\dllcache\mfc40u.dll
2013-08-31 17:15:34 270848 -c----w- c:\windows\system32\dllcache\sbe.dll
2013-08-31 17:14:24 81920 -c----w- c:\windows\system32\dllcache\fontsub.dll
2013-08-31 17:14:24 119808 -c----w- c:\windows\system32\dllcache\t2embed.dll
2013-08-31 17:14:05 990208 -c----w- c:\windows\system32\dllcache\kernel32.dll
2013-08-31 17:13:56 456320 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2013-08-31 17:13:42 617472 -c----w- c:\windows\system32\dllcache\comctl32.dll
2013-08-31 17:13:34 153088 -c----w- c:\windows\system32\dllcache\triedit.dll
2013-08-31 17:12:50 284160 -c----w- c:\windows\system32\dllcache\pdh.dll
2013-08-31 17:12:49 401408 -c----w- c:\windows\system32\dllcache\rpcss.dll
2013-08-31 17:12:49 110592 -c----w- c:\windows\system32\dllcache\services.exe
2013-08-31 17:12:48 473600 -c----w- c:\windows\system32\dllcache\fastprox.dll
2013-08-31 17:12:48 453120 -c----w- c:\windows\system32\dllcache\wmiprvsd.dll
2013-08-31 17:12:48 227840 -c----w- c:\windows\system32\dllcache\wmiprvse.exe
2013-08-31 17:12:46 617472 -c----w- c:\windows\system32\dllcache\advapi32.dll
2013-08-31 17:12:34 105472 -c----w- c:\windows\system32\dllcache\mup.sys
2013-08-31 17:11:03 744448 -c----w- c:\windows\system32\dllcache\helpsvc.exe
2013-08-31 17:10:43 91648 -c----w- c:\windows\system32\dllcache\mtxoci.dll
2013-08-31 17:10:42 956928 -c----w- c:\windows\system32\dllcache\msdtctm.dll
2013-08-31 17:10:42 66560 -c----w- c:\windows\system32\dllcache\mtxclu.dll
2013-08-31 17:10:42 58880 -c----w- c:\windows\system32\dllcache\msdtclog.dll
2013-08-31 17:10:42 161792 -c----w- c:\windows\system32\dllcache\msdtcuiu.dll
2013-08-31 17:10:39 290560 -c----w- c:\windows\system32\dllcache\atmfd.dll
2013-08-31 17:10:35 12928 -c----w- c:\windows\system32\dllcache\usb8023x.sys
2013-08-31 17:10:35 12928 -c----w- c:\windows\system32\dllcache\usb8023.sys
2013-08-31 17:10:26 331776 -c----w- c:\windows\system32\dllcache\msadce.dll
2013-08-31 17:10:14 293376 ------w- c:\windows\system32\browserchoice.exe
2013-08-31 17:08:42 536576 -c----w- c:\windows\system32\dllcache\msado15.dll
2013-08-31 17:08:01 3558912 -c----w- c:\windows\system32\dllcache\moviemk.exe
2013-08-31 17:07:02 218112 -c----w- c:\windows\system32\dllcache\wordpad.exe
2013-08-31 17:06:53 10496 -c----w- c:\windows\system32\dllcache\ndistapi.sys
2013-08-31 17:04:38 56832 -c----w- c:\windows\system32\dllcache\secur32.dll
2013-08-31 17:04:37 92928 -c----w- c:\windows\system32\dllcache\ksecdd.sys
2013-08-31 17:04:37 54272 -c----w- c:\windows\system32\dllcache\wdigest.dll
2013-08-31 17:04:37 136192 -c----w- c:\windows\system32\dllcache\msv1_0.dll
2013-08-31 17:04:36 301568 -c----w- c:\windows\system32\dllcache\kerberos.dll
2013-08-31 17:04:35 730112 -c----w- c:\windows\system32\dllcache\lsasrv.dll
2013-08-31 17:04:29 45568 -c----w- c:\windows\system32\dllcache\wab.exe
2013-08-31 16:32:33 -------- d-----w- c:\documents and settings\dobransky\local settings\application data\GHISLER
2013-08-31 15:09:11 -------- d-----w- c:\windows\system32\PreInstall
2013-08-30 21:01:40 204800 -c----w- c:\windows\system32\dllcache\mswebdvd.dll
2013-08-30 20:06:05 79872 -c----w- c:\windows\system32\dllcache\raschap.dll
2013-08-30 20:06:05 149504 -c----w- c:\windows\system32\dllcache\rastls.dll
2013-08-30 20:05:58 152576 -c----w- c:\windows\system32\dllcache\schannel.dll
2013-08-30 20:05:48 677888 -c----w- c:\windows\system32\dllcache\lhmstsc.exe
2013-08-30 20:05:44 2067456 -c----w- c:\windows\system32\dllcache\lhmstscx.dll
2013-08-30 20:05:36 1292288 -c----w- c:\windows\system32\dllcache\quartz.dll
2013-08-30 20:05:18 439296 -c----w- c:\windows\system32\dllcache\shimgvw.dll
2013-08-30 20:05:11 8462848 -c----w- c:\windows\system32\dllcache\shell32.dll
2013-08-30 20:04:51 375296 -c----w- c:\windows\system32\dllcache\dpnet.dll
2013-08-30 20:04:42 270336 -c----w- c:\windows\system32\dllcache\oakley.dll
2013-08-30 20:04:22 6144 ------w- c:\windows\system32\xpsp4res.dll
2013-08-30 20:04:22 590848 -c----w- c:\windows\system32\dllcache\rpcrt4.dll
2013-08-30 20:04:14 58368 -c----w- c:\windows\system32\dllcache\synceng.dll
2013-08-30 20:02:53 293376 -c----w- c:\windows\system32\dllcache\winsrv.dll
2013-08-30 20:01:54 601088 -c----w- c:\windows\system32\dllcache\crypt32.dll
2013-08-30 14:16:49 272128 -c----w- c:\windows\system32\dllcache\bthport.sys
2013-08-30 13:50:52 1877760 -c----w- c:\windows\system32\dllcache\win32k.sys
2013-08-30 13:50:29 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
2013-08-30 13:50:04 40960 -c----w- c:\windows\system32\dllcache\ndproxy.sys
2013-08-30 13:49:27 138496 -c----w- c:\windows\system32\dllcache\afd.sys
2013-08-30 13:49:14 203136 -c----w- c:\windows\system32\dllcache\rmcast.sys
2013-08-30 13:48:08 139784 -c----w- c:\windows\system32\dllcache\rdpwd.sys
2013-08-30 13:30:28 718336 -c----w- c:\windows\system32\dllcache\ntdll.dll
2013-08-30 13:30:26 2149888 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2013-08-30 13:30:25 2193536 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2013-08-30 13:30:23 2070144 -c----w- c:\windows\system32\dllcache\ntkrnlpa.exe
2013-08-30 13:30:23 2028544 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2013-08-30 13:30:19 3072 -c----w- c:\windows\system32\dllcache\iacenc.dll
2013-08-30 13:30:19 3072 ------w- c:\windows\system32\iacenc.dll
2013-08-30 11:48:46 -------- d-----w- c:\windows\system32\wbem\mui\0405
2013-08-30 11:48:46 -------- d-----w- c:\windows\system32\wbem\MUI
2013-08-30 11:45:07 61440 ----a-w- c:\windows\system32\WMErrCSY.dll
2013-08-30 11:45:00 -------- d-----w- c:\windows\system32\1029
2013-08-30 11:44:23 249344 ----a-w- c:\program files\common files\system\mui\0405\WAB32RES.DLL
2013-08-30 11:44:22 65536 ----a-w- c:\program files\internet explorer\mui\0405\MSHTMLER.DLL
2013-08-30 11:44:21 12800 ----a-w- c:\program files\internet explorer\mui\0405\MSIDNTLD.DLL
2013-08-30 11:44:20 65536 ----a-w- c:\program files\internet explorer\mui\0405\ACCTRES.DLL
2013-08-30 11:44:19 26624 ----a-w- c:\program files\internet explorer\mui\0405\INETRES.DLL
2013-08-30 11:44:19 2481664 ----a-w- c:\program files\internet explorer\mui\0405\MSOERES.DLL
2013-08-30 11:44:18 249344 ----a-w- c:\program files\internet explorer\mui\0405\WAB32RES.DLL
2013-08-30 11:44:16 65536 ----a-w- c:\program files\internet explorer\mui\0405\BROWSELC.DLL
2013-08-30 11:44:16 556544 ----a-w- c:\program files\internet explorer\mui\0405\SHDOCLC.DLL
2013-08-30 11:44:16 116224 ----a-w- c:\program files\internet explorer\mui\0405\INETCPLC.DLL
2013-08-30 11:30:58 545 ----a-w- c:\windows\UC.PIF
2013-08-30 11:30:58 545 ----a-w- c:\windows\RAR.PIF
2013-08-30 11:30:58 545 ----a-w- c:\windows\PKZIP.PIF
2013-08-30 11:30:58 545 ----a-w- c:\windows\PKUNZIP.PIF
2013-08-30 11:30:58 545 ----a-w- c:\windows\NOCLOSE.PIF
2013-08-30 11:30:58 545 ----a-w- c:\windows\LHA.PIF
2013-08-30 11:30:58 545 ----a-w- c:\windows\ARJ.PIF
2013-08-30 11:30:58 -------- d-----w- C:\totalcmd
2013-08-30 11:28:11 -------- d-----w- c:\program files\VideoLAN
2013-08-30 11:10:12 -------- d-----w- c:\documents and settings\dobransky\local settings\application data\Mozilla
2013-08-30 11:09:35 -------- d-----w- c:\program files\Mozilla Maintenance Service
2013-08-30 11:09:32 871064 ----a-w- c:\program files\mozilla firefox\uninstall\helper.exe
2013-08-30 11:09:30 272792 ----a-w- c:\program files\mozilla firefox\updater.exe
2013-08-30 11:09:30 20616088 ----a-w- c:\program files\mozilla firefox\xul.dll
2013-08-30 11:09:30 17304 ----a-w- c:\program files\mozilla firefox\plugin-container.exe
2013-08-30 11:09:30 152984 ----a-w- c:\program files\mozilla firefox\softokn3.dll
2013-08-30 11:08:10 -------- d-----w- c:\program files\CCleaner
2013-08-30 11:00:45 32128 ----a-w- c:\windows\system32\drivers\VIAAGP1.SYS
2013-08-30 10:59:49 306688 ----a-w- c:\windows\IsUninst.exe
2013-08-30 10:59:23 -------- d-----w- c:\documents and settings\dobransky\WINDOWS
2013-08-30 10:55:16 -------- d-----w- c:\windows\system32\SoftwareDistribution
2013-08-30 10:38:12 -------- d-----w- c:\windows\ServicePackFiles
2013-08-30 10:37:53 294912 ------w- c:\program files\windows media player\dlimport.exe
2013-08-30 10:37:46 294912 -c----w- c:\windows\system32\dllcache\dlimport.exe
2013-08-30 10:33:08 19569 ----a-w- c:\windows\002879_.tmp
2013-08-30 10:32:22 26144 ----a-w- c:\windows\system32\spupdsvc.exe
2013-08-30 10:17:25 -------- d-----w- c:\documents and settings\dobransky\local settings\application data\Help
2013-08-30 10:16:41 -------- d-----w- c:\program files\Lavalys
2013-08-30 10:13:22 -------- d-----w- C:\Intel
2013-08-30 10:08:03 208896 ----a-w- c:\windows\system32\nvudisp.exe
2013-08-30 10:08:03 -------- d-----w- c:\windows\nview
2013-08-30 10:07:52 -------- d-----w- c:\windows\system32\ReinstallBackups
2013-08-30 10:07:41 208896 ----a-w- c:\windows\system32\NVUNINST.EXE
2013-08-30 10:07:39 69715 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\ctor.dll
2013-08-30 10:07:39 5632 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\DotNetInstaller.exe
2013-08-30 10:07:39 32768 ----a-w- c:\program files\common files\installshield\professional\runtime\Objectps.dll
2013-08-30 10:07:39 266240 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iscript.dll
2013-08-30 10:07:39 192512 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iuser.dll
2013-08-30 10:07:38 729088 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iKernel.dll
2013-08-30 10:07:33 188548 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iGdi.dll
2013-08-30 10:07:32 311428 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\setup.dll
2013-08-30 10:07:21 -------- d-----w- C:\NVIDIA
.
==================== Find3M ====================
.
2013-08-09 01:56:45 386560 ----a-w- c:\windows\system32\themeui.dll
2013-08-08 06:05:59 920064 ----a-w- c:\windows\system32\wininet.dll
2013-08-08 06:05:59 43520 ------w- c:\windows\system32\licmgr10.dll
2013-08-08 06:05:59 1469440 ------w- c:\windows\system32\inetcpl.cpl
2013-08-08 06:05:58 18944 ----a-w- c:\windows\system32\corpol.dll
2013-08-08 01:27:48 1877760 ----a-w- c:\windows\system32\win32k.sys
2013-08-08 00:02:34 385024 ------w- c:\windows\system32\html.iec
2013-08-05 13:30:32 1289728 ----a-w- c:\windows\system32\ole32.dll
2013-07-31 13:11:22 810496 ----a-w- c:\windows\system32\wmvdmod.dll
2013-07-17 10:39:21 103528 ----a-w- c:\windows\system32\drivers\PSINFile.sys
2013-07-10 10:37:53 406016 ----a-w- c:\windows\system32\usp10.dll
2013-07-04 02:59:11 2193536 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-07-04 02:08:30 2070144 ----a-w- c:\windows\system32\ntkrnlpa.exe
.
============= FINISH: 20:10:28,05 ===============

#3 Příspěvek od **vyosek** » 13 zář 2013 21:47

Zdravim

Mate tam Pandu a AVG, ja bych teda osobne oba vyhodil, jsou to spise parodie na antivir.

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

7777 · #4 Příspěvek od **7777** » 14 zář 2013 08:54

Nie mám tam len pandu,AVG Portable som odinštaloval. A i to iba kôli výkonu.

7777 · #5 Příspěvek od **7777** » 14 zář 2013 10:52

# AdwCleaner v3.003 - Report created 14/09/2013 at 11:44:27
# Updated 07/09/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Dobransky - DOBRANSK-C48971
# Running from : C:\Documents and Settings\Dobransky\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\All Users\Application Data\AVG Secure Search
Folder Deleted : C:\Documents and Settings\All Users\Application Data\blekko toolbars
File Deleted : C:\WINDOWS\system32\roboot.exe
File Deleted : C:\DOCUME~1\DOBRAN~1\LOCALS~1\Temp\Uninstall.exe

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

-\\ Mozilla Firefox v23.0.1 (sk)

[ File : C:\Documents and Settings\Dobransky\Application Data\Mozilla\Firefox\Profiles\aygd8rqa.default\prefs.js ]

Line Deleted : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Line Deleted : user_pref("browser.search.selectedEngine", "AVG Secure Search");

[ File : C:\Documents and Settings\Animatrix_2\Application Data\Mozilla\Firefox\Profiles\pvyb0c7n.default\prefs.js ]

*************************

AdwCleaner[R0].txt - [2008 octets] - [14/09/2013 10:46:55]
AdwCleaner[R1].txt - [2068 octets] - [14/09/2013 10:58:35]
AdwCleaner[S0].txt - [1826 octets] - [14/09/2013 11:44:27]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1886 octets] ##########

#6 Příspěvek od **vyosek** » 14 zář 2013 10:53

Trvate na te Pande, nebo tam dame nejaky poradny a funkcni antivir?

7777 · #7 Příspěvek od **7777** » 14 zář 2013 11:34

Viete mi nejaký poradiť? Ak avast nepriapadá v úvahu kvôli jeho enormných požiadavkoch na systém? Nod je zasa pridarahý a po rokoch je to len žrút výkonu. Avira je údajne najparanoidnejší antivirák vôbec. Viete mi nejaký poradiť?

#8 Příspěvek od **vyosek** » 14 zář 2013 12:58

Avas a enormni pozadavky, Avast ve sve verzi 8 je velmi malo narocny na system, rekl bych ze mene jak Panda...

Muzete zkusit BitDefender Free pripadne

7777 · #9 Příspěvek od **7777** » 14 zář 2013 13:07

BitDefender som minule stiahol a nebol som spokojný. A pokiaľ ide o pandu tiež si ňou nie som istý ale počítač na viac nemá...
Čo sa týka avastu 8 mám ho na notebooku a dosť podstatne zaťažuje systém. Ja potrebujem niečo účinné a malo naročné na systémové požiadavky...

Inač potreboval by som poradiť zo súbormy,ktoré sú asi nakazené. Testoval som ich AVAST,NOD32,AVG antivirus,Panda antivírus plus RSIT,COMBOFIX a ďalšie vecičky od vás no nič nenašli. A ani USBFIX (Mimochodom bol stiahnutý z vašej stránky a panda v ňom detekovala spyware). Pretože nikto nemá z vírmy väčší problém ako ja a vždy sa za záhadných okolností dostanú do počítača. A keď som si to tak zvážil tak jediné súbory,ktoré prešli všetkými padnutými systémami boli súbory Moja tvorba. Moja tvorba obsahuje najdôležitejšie súbory,ktoré mám na disku a ja by som chcel vedieť či by sa dali vyliečiť? Oni sú vo formáte .odt teda openoffice. A dokument .odt sa dá otvoriť aj ako zip pokiaľ zmeníte koncovku. Tak teda či tam niečo v nich nieje lebo ako jediné ich kopírujem na disk.

#10 Příspěvek od **vyosek** » 14 zář 2013 18:49

Vy umite s ComboFixem a lustit logy z RSIT?

Jak vite, ze jsou ty soubory .odt napadene??

Detekce malware Pandou v USBFixu je chyba Pandy, USBFix malware neobsahuje

Ono na tech 256MB RAM nepobezi nic svizne, ani holy system bez antiviru a dalsi veci...Dneska je potreba aspon tak 1GB RAM, vizte citaci kolegy

james008 píše:Na dane mnozstvi ram se nehodi zadny (ani uplne holy bez antibiru a programu) ze soucasnymch
funkcnich a podporovanych os vyjma minimalizovanych verzi linuxu, jako jsou ZenWalk ci ArchLinux..
popr DSL..Damn small linux
Pokud chcete provozovat win system s av tak jedine a nejblize system XP sp3 a i presto budete muset
doplnit ram alespon na hodnotu 1Gb.

7777 · #11 Příspěvek od **7777** » 14 zář 2013 20:54

Combofix iba spustím a počkám či niečo nájde. Systém funguje bezproblémovo dokým neskopírujem súbory zo zložky moja tvorba. Asi za tri dni nato sa vždy systém začne správať divne.

#12 Příspěvek od **vyosek** » 14 zář 2013 20:59

Jenze CF neni jen na takove obycejne spousteni, je to mocny nastroj, se kterym se musi umet zachazet - spusteni, rozlusteni logu a napsani skriptu

licencni podminky hovori jasne "Nikdy by nemel byt pouzit v prostredi bez dozoru zkusene osoby"
Obrázek

Nebezpeci CFka

Je urcen primarne pro radce - jeho svevolnym pouzitim ztracite narok na podporu
Maze stopy po haveti, takze v logu z RSIT neni nic videt
Jeho log je treba dolustit, jelikoz neumi smazat vse - to ovsem tezko zvladnete pokud k tomu nejste vyskolen
CF muze mit bug = sunda Vam system, pokud nevite kam co uklada, jak co obnovit, mate system v kytkam a ceka Vas reinstal
CF taky bohuzel prozatim nekontroluje nektere dulezite knihovny (napr. hal.dll) - ty treba mazou nektere typy haveti (napr. angela) - smaze Vam po restartu hal.dll = nenajede Vam system a jste o radek vyse = reinstal

7777 · #13 Příspěvek od **7777** » 15 zář 2013 09:25

Aha. Pomôžete mi teda skontrolovať .odt súbory?

#14 Příspěvek od **vyosek** » 15 zář 2013 09:53

Zabalte mi jich par do raru a nekam uploadnete, ale dle meho budou ciste, neznam maware, ktery by napadal soubory OpenOffice...

Dle meho tam bude chyba jinde, ale nedokazu takto rici kde...

7777 · #15 Příspěvek od **7777** » 17 zář 2013 18:16

Ok len ich roztriedim aby každý súbor bol aktuálny.

VIRY.CZ

Divné chovanie PC

Divné chovanie PC

Re: Divné chovanie PC

Re: Divné chovanie PC

Re: Divné chovanie PC

Re: Divné chovanie PC

Re: Divné chovanie PC

Re: Divné chovanie PC

Re: Divné chovanie PC

Re: Divné chovanie PC

Re: Divné chovanie PC

Re: Divné chovanie PC

Re: Divné chovanie PC

Re: Divné chovanie PC

Re: Divné chovanie PC

Re: Divné chovanie PC