ako odstrániť virut

[motji]

Fajn, ozvi se potom, virut byl pouze v SVI.
Nereinstalovali jste pc právě kvůli virutu?
Není zač, dobrou noc

[milkasv]

Ahoj. Viem že píšem neskoro , ale celá rodina sme boli chorý tak mi ani nenapadlo isť na počítač. tak v mwawu bolo len toto
** Scanning may fail! File Locked [SUSPICIOUS]: C:\WINDOWS\system32\DRIVERS\atapi.sys (????)
a tu je log z rsitu
Logfile of random's system information tool 1.06 (written by random/random)
Run by Jožko at 2009-11-18 08:59:31
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 557 GB (78%) free of 715 GB
Total RAM: 3327 MB (78% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:59:43, on 18. 11. 2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\WINDOWS\system32\FsUsbExService.Exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Skype\Toolbars\Shared\SkypeNames.exe
C:\WINDOWS\system32\wuauclt.exe
E:\instal\RSIT.exe
C:\Program Files\trend micro\Jožko.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ToggleEN Toolbar - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - C:\Program Files\ToggleEN\tbTogg.dll
O2 - BHO: ToggleEN Toolbar - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - C:\Program Files\ToggleEN\tbTogg.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: ToggleEN Toolbar - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - C:\Program Files\ToggleEN\tbTogg.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{BE8D5548-E360-4227-8DC3-F70A3121639B}: NameServer = 217.119.117.28,217.119.113.244
O17 - HKLM\System\CCS\Services\Tcpip\..\{FAB40884-47D3-4360-ADC3-25649E47705B}: NameServer = 217.119.117.28,217.119.113.244
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe
O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe

--
End of file - 7205 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{038cb5c7-48ea-4af9-94e0-a1646542e62b}]
ToggleEN Toolbar - C:\Program Files\ToggleEN\tbTogg.dll [2009-07-02 2215960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-25 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-25 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{038cb5c7-48ea-4af9-94e0-a1646542e62b} - ToggleEN Toolbar - C:\Program Files\ToggleEN\tbTogg.dll [2009-07-02 2215960]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-01-29 16859648]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-03-08 13680640]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-03-08 86016]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-25 149280]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2007-05-14 644696]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2007-04-03 1603152]
"SSBkgdUpdate"=C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25 210472]
"OpwareSE4"=C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe [2007-02-04 79400]
"NeroFilterCheck"=C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2007-03-01 153136]
"NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2007-09-20 1836328]
"NPSStartup"= []
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]
"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2009-09-10 1312080]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2007-12-21 1443072]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe [2007-09-20 202024]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2004-08-17 1667584]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]
"AutoStartNPSAgent"=C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe [2009-04-02 102400]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=55924053

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server"
"C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Ubisoft\Related Designs\ANNO 1404\Anno4.exe"="C:\Program Files\Ubisoft\Related Designs\ANNO 1404\Anno4.exe:*:Enabled:ANNO 1404"
"C:\Program Files\Ubisoft\Related Designs\ANNO 1404\tools\Anno4Web.exe"="C:\Program Files\Ubisoft\Related Designs\ANNO 1404\tools\Anno4Web.exe:*:Enabled:Web ANNO 1404"
"C:\Program Files\Ubisoft\Related Designs\ANNO 1404\tools\Benchmark.exe"="C:\Program Files\Ubisoft\Related Designs\ANNO 1404\tools\Benchmark.exe:*:Enabled:Anno 1404 Setup Benchmark"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Ubisoft\THE SETTLERS - Vzestup říše\base\bin\Settlers6.exe"="C:\Program Files\Ubisoft\THE SETTLERS - Vzestup říše\base\bin\Settlers6.exe:*:Enabled:THE SETTLERS - Vzestup říše"
"C:\Program Files\Ubisoft\THE SETTLERS - Vzestup říše\extra1\bin\Settlers6.exe"="C:\Program Files\Ubisoft\THE SETTLERS - Vzestup říše\extra1\bin\Settlers6.exe:*:Enabled:THE SETTLERS - Vzestup říše - Východní království"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2009-11-18 08:50:39 ----SHD---- C:\Config.Msi
2009-11-18 08:48:09 ----D---- C:\rsit
2009-11-16 10:07:11 ----D---- C:\Documents and Settings\Jožko\Data aplikací\Tropico 3
2009-11-16 08:28:41 ----D---- C:\Documents and Settings\Jožko\Data aplikací\ProtectDisc
2009-11-16 08:28:17 ----D---- C:\Documents and Settings\All Users\Data aplikací\Synetic
2009-11-16 08:27:17 ----D---- C:\Program Files\ProtectDisc Driver Installer
2009-11-16 08:23:21 ----D---- C:\Program Files\Crash Time 2
2009-11-16 07:18:26 ----D---- C:\Documents and Settings\Jožko\Data aplikací\Grand Ages Rome
2009-11-16 06:59:04 ----D---- C:\Program Files\Kalypso
2009-11-14 21:10:24 ----D---- C:\Documents and Settings\Jožko\Data aplikací\fretsonfire
2009-11-14 21:10:07 ----D---- C:\Program Files\Frets on Fire
2009-11-14 10:13:21 ----A---- C:\WINDOWS\settings.ini
2009-11-13 22:33:14 ----AD---- C:\WINDOWS\VDLL.DLL
2009-11-13 22:33:14 ----AD---- C:\WINDOWS\system32\runouce.exe
2009-11-13 22:33:14 ----AD---- C:\WINDOWS\RUNDL132.EXE
2009-11-13 22:33:14 ----AD---- C:\WINDOWS\logo_1.exe
2009-11-13 22:28:18 ----A---- C:\WINDOWS\system32\msvcr80.dll
2009-11-13 22:28:17 ----A---- C:\WINDOWS\system32\msvcp80.dll
2009-11-13 22:28:16 ----A---- C:\WINDOWS\system32\eEmpty.exe
2009-11-13 22:28:15 ----A---- C:\WINDOWS\system32\TASKMGR.COM
2009-11-13 22:28:15 ----A---- C:\WINDOWS\system32\T.COM
2009-11-13 22:28:15 ----A---- C:\WINDOWS\REGEDIT.COM
2009-11-13 22:28:15 ----A---- C:\WINDOWS\R.COM
2009-11-13 22:28:11 ----D---- C:\Program Files\Common Files\MicroWorld
2009-11-13 22:28:05 ----D---- C:\Documents and Settings\All Users\Data aplikací\MicroWorld
2009-11-13 01:00:11 ----A---- C:\WINDOWS\usdthank.ini
2009-11-13 01:00:11 ----A---- C:\WINDOWS\idc.ini
2009-11-12 22:56:23 ----D---- C:\Documents and Settings\Jožko\Data aplikací\Red Alert 3
2009-11-11 22:19:48 ----A---- C:\WINDOWS\system32\systeminfo3.dll
2009-11-11 22:19:22 ----D---- C:\Program Files\CloneDVD
2009-11-11 22:19:22 ----D---- C:\Documents and Settings\All Users\Data aplikací\DVDXStudio
2009-11-11 17:24:26 ----D---- C:\Program Files\City Life Deluxe
2009-11-11 07:30:58 ----D---- C:\Documents and Settings\Jožko\Data aplikací\Medicopter4
2009-11-11 07:30:42 ----D---- C:\Program Files\Medicopter 4
2009-11-10 21:01:11 ----D---- C:\Documents and Settings\Jožko\Data aplikací\Disney Interactive Studios
2009-11-10 20:55:13 ----D---- C:\Program Files\Disney Interactive Studios
2009-11-10 20:54:18 ----A---- C:\WINDOWS\disney.ini
2009-11-10 17:05:26 ----D---- C:\Program Files\Microsoft Works
2009-11-10 17:05:17 ----D---- C:\Program Files\MSBuild
2009-11-10 17:05:05 ----D---- C:\Program Files\Microsoft Visual Studio
2009-11-10 17:05:05 ----D---- C:\Program Files\Common Files\DESIGNER
2009-11-10 17:04:23 ----D---- C:\Program Files\Microsoft.NET
2009-11-10 17:02:34 ----D---- C:\Program Files\Microsoft Visual Studio 8
2009-11-10 17:02:06 ----D---- C:\WINDOWS\SHELLNEW
2009-11-10 17:01:43 ----D---- C:\Program Files\Microsoft Office
2009-11-10 17:01:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2009-11-10 17:01:15 ----RHD---- C:\MSOCache
2009-11-09 22:21:28 ----D---- C:\Program Files\Adobe
2009-11-08 07:56:38 ----D---- C:\CSI
2009-11-07 13:02:15 ----D---- C:\Documents and Settings\Jožko\Data aplikací\InstallShield
2009-11-06 16:08:53 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2009-11-06 16:08:53 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2009-11-06 16:08:52 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2009-11-06 16:08:51 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2009-11-06 16:08:51 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2009-11-06 16:08:50 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2009-11-06 16:08:49 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2009-11-06 16:08:48 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2009-11-06 16:08:48 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2009-11-06 16:08:47 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2009-11-06 16:08:46 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2009-11-06 16:08:46 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2009-11-06 16:08:46 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2009-11-06 16:08:45 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2009-11-06 14:53:19 ----D---- C:\Documents and Settings\Jožko\Data aplikací\Ubisoft
2009-11-06 14:52:35 ----D---- C:\Program Files\Ubisoft
2009-11-06 14:32:31 ----D---- C:\Program Files\TopCD
2009-11-06 14:01:36 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2009-11-06 14:01:36 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2009-11-06 14:01:35 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2009-11-06 14:01:34 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2009-11-06 14:01:34 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2009-11-06 14:01:33 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2009-11-06 14:01:32 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2009-11-06 14:01:32 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2009-11-06 14:01:31 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2009-11-06 14:01:31 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2009-11-06 14:01:30 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2009-11-06 14:01:30 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2009-11-06 14:01:29 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2009-11-06 14:01:28 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2009-11-06 14:01:27 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2009-11-06 14:01:26 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2009-11-06 14:01:26 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2009-11-06 14:01:26 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2009-11-06 14:01:25 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2009-11-06 14:01:24 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2009-11-06 14:01:23 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2009-11-06 14:01:22 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2009-11-06 14:01:22 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2009-11-06 14:01:21 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2009-11-06 14:01:20 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2009-11-06 14:01:20 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2009-11-06 14:01:19 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2009-11-06 14:01:18 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2009-11-06 14:01:18 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2009-11-06 14:01:17 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2009-11-06 14:01:17 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2009-11-06 14:01:16 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2009-11-06 14:01:16 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2009-11-06 14:01:15 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2009-11-06 14:01:14 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2009-11-06 14:01:14 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2009-11-06 14:01:11 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2009-11-06 14:01:11 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2009-11-06 14:01:11 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2009-11-06 14:01:10 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2009-11-06 14:01:10 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2009-11-06 14:01:10 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2009-11-06 14:01:10 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2009-11-06 14:01:09 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2009-11-06 14:01:09 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2009-11-06 14:01:09 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2009-11-06 14:01:09 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2009-11-06 14:01:01 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2009-11-06 14:01:00 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2009-11-06 14:01:00 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2009-11-06 14:00:59 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2009-11-06 14:00:58 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2009-11-06 14:00:58 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2009-11-06 14:00:57 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2009-11-06 13:57:48 ----D---- C:\Program Files\Popeláři
2009-11-06 00:44:15 ----D---- C:\Documents and Settings\Jožko\Data aplikací\uTorrent
2009-11-06 00:44:08 ----D---- C:\Program Files\uTorrent
2009-11-04 15:17:57 ----D---- C:\Documents and Settings\Jožko\Data aplikací\Isotope 244
2009-11-04 15:17:26 ----D---- C:\Program Files\Isotope244 Graphics
2009-11-02 18:35:56 ----D---- C:\Program Files\MarkAny
2009-11-02 06:40:03 ----A---- C:\WINDOWS\BlendSettings.ini
2009-11-02 06:33:45 ----D---- C:\Program Files\Bethesda Softworks
2009-11-01 21:33:31 ----D---- C:\Program Files\CCleaner
2009-11-01 11:28:01 ----A---- C:\WINDOWS\system32\FsUsbExDevice.Dll
2009-11-01 11:28:00 ----A---- C:\WINDOWS\system32\FsUsbExService.Exe
2009-11-01 09:15:37 ----D---- C:\Program Files\Alcohol Soft
2009-10-31 23:40:04 ----D---- C:\Documents and Settings\Jožko\Data aplikací\Malwarebytes
2009-10-31 23:39:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2009-10-31 23:39:56 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-10-31 08:57:20 ----D---- C:\WINDOWS\Minidump
2009-10-31 08:52:55 ----A---- C:\WINDOWS\system32\wmpns.dll
2009-10-31 08:51:43 ----A---- C:\Boot.bak
2009-10-31 08:51:40 ----RASHD---- C:\cmdcons
2009-10-30 11:47:02 ----SHD---- C:\WINDOWS\ftpcache
2009-10-30 11:46:54 ----A---- C:\WINDOWS\game.ini
2009-10-30 11:40:21 ----D---- C:\Program Files\Activision
2009-10-30 11:02:41 ----A---- C:\WINDOWS\system32\PAStiSvc.exe
2009-10-30 11:02:29 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2009-10-30 11:00:42 ----D---- C:\Documents and Settings\Jožko\Data aplikací\ArcSoft
2009-10-30 11:00:23 ----D---- C:\Program Files\Common Files\ArcSoft
2009-10-30 11:00:07 ----A---- C:\WINDOWS\PCDLIB32.DLL
2009-10-30 11:00:04 ----D---- C:\Program Files\ArcSoft
2009-10-30 10:57:53 ----D---- C:\WINDOWS\PixArt
2009-10-30 10:57:52 ----D---- C:\Program Files\Trust
2009-10-30 10:57:52 ----D---- C:\Program Files\Common Files\PCCamera
2009-10-30 10:29:22 ----D---- C:\Documents and Settings\Jožko\Data aplikací\skypePM
2009-10-30 10:27:30 ----D---- C:\Documents and Settings\Jožko\Data aplikací\Skype
2009-10-30 10:26:33 ----D---- C:\Program Files\Common Files\Skype
2009-10-30 10:26:30 ----RD---- C:\Program Files\Skype
2009-10-30 10:26:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2009-10-29 09:34:20 ----A---- C:\WINDOWS\system32\DIFxAPI.dll
2009-10-29 09:17:08 ----A---- C:\WINDOWS\system32\framedyn.dll
2009-10-29 08:34:57 ----D---- C:\Program Files\trend micro
2009-10-28 10:45:35 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-10-28 10:45:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2009-10-28 10:01:44 ----D---- C:\Program Files\Panda Security
2009-10-28 09:31:01 ----D---- C:\WINDOWS\Sun
2009-10-27 21:59:32 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-10-27 10:14:01 ----D---- C:\Program Files\DVDFab 6
2009-10-27 09:22:13 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google
2009-10-27 09:04:04 ----D---- C:\Documents and Settings\All Users\Data aplikací\vsosdk
2009-10-27 05:13:26 ----D---- C:\Downloads
2009-10-27 00:42:02 ----A---- C:\WINDOWS\NeroDigital.ini
2009-10-27 00:31:01 ----A---- C:\Documents and Settings\Jožko\Data aplikací\inst.exe
2009-10-27 00:31:00 ----D---- C:\Documents and Settings\Jožko\Data aplikací\Vso
2009-10-27 00:30:44 ----A---- C:\WINDOWS\system32\wvc1dmod.dll
2009-10-27 00:30:44 ----A---- C:\WINDOWS\system32\vp7vfw.dll
2009-10-27 00:30:44 ----A---- C:\WINDOWS\system32\sipr3260.dll
2009-10-27 00:30:44 ----A---- C:\WINDOWS\system32\Pncrt.dll
2009-10-27 00:30:44 ----A---- C:\WINDOWS\system32\drv43260.dll
2009-10-27 00:30:44 ----A---- C:\WINDOWS\system32\drv33260.dll
2009-10-27 00:30:44 ----A---- C:\WINDOWS\system32\drv23260.dll
2009-10-27 00:30:44 ----A---- C:\WINDOWS\system32\cook3260.dll
2009-10-27 00:30:41 ----D---- C:\Program Files\VSO
2009-10-26 19:19:19 ----D---- C:\Documents and Settings\Jožko\Data aplikací\PC Suite
2009-10-26 19:19:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\PC Suite
2009-10-26 19:12:51 ----A---- C:\WINDOWS\system32\nmwcdcls.dll
2009-10-26 19:12:25 ----D---- C:\WINDOWS\system32\Samsung_USB_Drivers
2009-10-26 19:12:24 ----D---- C:\Program Files\DIFX
2009-10-26 19:12:14 ----D---- C:\Documents and Settings\Jožko\Data aplikací\Samsung
2009-10-26 19:12:02 ----D---- C:\Program Files\PC Connectivity Solution
2009-10-26 19:11:41 ----D---- C:\Program Files\Samsung
2009-10-26 18:34:45 ----D---- C:\Documents and Settings\Jožko\Data aplikací\Nero
2009-10-26 18:34:33 ----A---- C:\WINDOWS\system32\MsiExec.exe.log
2009-10-26 18:32:56 ----D---- C:\Program Files\Nero
2009-10-26 18:32:56 ----D---- C:\Program Files\Common Files\Nero
2009-10-26 18:32:56 ----D---- C:\Documents and Settings\All Users\Data aplikací\Nero
2009-10-26 18:31:57 ----D---- C:\WINDOWS\RegisteredPackages
2009-10-26 18:31:26 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2009-10-26 18:31:25 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2009-10-26 18:05:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\FLEXnet
2009-10-26 17:56:29 ----D---- C:\Program Files\Adobe Media Player
2009-10-26 17:54:49 ----D---- C:\Program Files\Common Files\Adobe AIR
2009-10-26 17:53:02 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2009-10-26 17:46:13 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-10-26 17:46:02 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2009-10-26 17:45:06 ----D---- C:\Program Files\Common Files\Adobe
2009-10-26 17:34:39 ----D---- C:\Documents and Settings\Jožko\Data aplikací\Canon
2009-10-26 17:32:25 ----A---- C:\WINDOWS\MAXLINK.INI
2009-10-26 17:32:24 ----D---- C:\Documents and Settings\Jožko\Data aplikací\ScanSoft
2009-10-26 17:32:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\InstallShield
2009-10-26 17:32:18 ----D---- C:\Program Files\Common Files\ScanSoft Shared
2009-10-26 17:32:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\ScanSoft
2009-10-26 17:31:57 ----D---- C:\Program Files\ScanSoft
2009-10-26 17:29:46 ----D---- C:\Documents and Settings\All Users\Data aplikací\CanonIJPLM
2009-10-26 17:27:00 ----D---- C:\Program Files\Common Files\CANON
2009-10-26 17:23:40 ----HD---- C:\Documents and Settings\All Users\Data aplikací\CanonBJ
2009-10-26 17:23:33 ----A---- C:\WINDOWS\system32\CNMLM93.DLL
2009-10-26 17:23:29 ----HD---- C:\WINDOWS\system32\CanonIJ Uninstaller Information
2009-10-26 17:23:21 ----A---- C:\WINDOWS\system32\CNC610O.DLL
2009-10-26 17:23:21 ----A---- C:\WINDOWS\system32\CNC610L.DLL
2009-10-26 17:23:20 ----A---- C:\WINDOWS\system32\CNC610I.DLL
2009-10-26 17:23:20 ----A---- C:\WINDOWS\system32\CNC610C.DLL
2009-10-26 17:23:07 ----HD---- C:\Program Files\CanonBJ
2009-10-26 17:22:11 ----D---- C:\Program Files\Canon
2009-10-26 14:59:49 ----D---- C:\Documents and Settings\Jožko\Data aplikací\SPORE
2009-10-26 14:59:01 ----RHD---- C:\Documents and Settings\Jožko\Data aplikací\SecuROM
2009-10-26 14:59:01 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2009-10-26 14:58:43 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2009-10-26 14:18:54 ----D---- C:\Documents and Settings\Jožko\Data aplikací\Macromedia
2009-10-26 14:18:54 ----D---- C:\Documents and Settings\Jožko\Data aplikací\Adobe
2009-10-26 12:59:07 ----D---- C:\Documents and Settings\Jožko\Data aplikací\WinRAR
2009-10-25 16:09:05 ----D---- C:\Documents and Settings\Jožko\Data aplikací\LimeWire
2009-10-25 16:08:39 ----A---- C:\WINDOWS\system32\javaws.exe
2009-10-25 16:08:39 ----A---- C:\WINDOWS\system32\javaw.exe
2009-10-25 16:08:39 ----A---- C:\WINDOWS\system32\java.exe
2009-10-25 16:08:39 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-10-25 16:08:30 ----D---- C:\Program Files\Java
2009-10-25 15:53:09 ----D---- C:\Documents and Settings\Jožko\Data aplikací\Sun
2009-10-25 14:21:57 ----D---- C:\WINDOWS\system32\AGEIA
2009-10-25 14:21:57 ----D---- C:\Program Files\AGEIA Technologies
2009-10-25 14:21:36 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2009-10-25 14:19:09 ----A---- C:\WINDOWS\CD-Start.INI
2009-10-25 14:01:09 ----RA---- C:\WINDOWS\system32\vp6vfw.dll
2009-10-25 14:01:08 ----D---- C:\Program Files\Microsoft WSE
2009-10-25 13:59:03 ----RSD---- C:\WINDOWS\assembly
2009-10-25 13:58:43 ----D---- C:\WINDOWS\Microsoft.NET
2009-10-25 13:58:26 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2009-10-25 13:58:24 ----D---- C:\WINDOWS\Logs
2009-10-25 13:55:45 ----D---- C:\Program Files\Electronic Arts
2009-10-25 13:53:42 ----D---- C:\Program Files\D-Tools
2009-10-25 13:53:33 ----D---- C:\WINDOWS\Downloaded Installations
2009-10-25 13:48:16 ----D---- C:\Program Files\Conduit
2009-10-25 13:48:15 ----D---- C:\Program Files\ToggleEN
2009-10-25 13:47:24 ----D---- C:\Program Files\WinRAR
2009-10-25 13:37:10 ----D---- C:\Documents and Settings\Jožko\Data aplikací\Mozilla
2009-10-25 13:36:55 ----D---- C:\Program Files\Mozilla Firefox
2009-10-25 12:58:44 ----A---- C:\WINDOWS\system32\h323log.txt
2009-10-25 12:53:24 ----A---- C:\WINDOWS\system32\hidserv.dll
2009-10-25 12:52:11 ----A---- C:\WINDOWS\system32\usbui.dll
2009-10-25 12:51:01 ----SHD---- C:\WINDOWS\Installer
2009-10-25 12:51:01 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-10-25 12:51:00 ----D---- C:\Program Files\Common Files\ODBC
2009-10-25 12:51:00 ----A---- C:\WINDOWS\ODBCINST.INI
2009-10-25 12:50:57 ----D---- C:\Program Files\Common Files\SpeechEngines
2009-10-25 12:50:56 ----RD---- C:\Program Files
2009-10-25 12:50:56 ----D---- C:\Program Files\Common Files\Microsoft Shared
2009-10-25 12:50:56 ----D---- C:\Program Files\Common Files
2009-10-25 12:50:52 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-10-25 12:50:52 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-10-25 12:50:52 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-10-25 12:50:50 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-10-25 12:50:50 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-10-25 12:50:50 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-10-25 12:50:50 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-10-25 12:50:50 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-10-25 12:50:49 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-10-25 12:50:49 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-10-25 12:50:49 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-10-25 12:50:49 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-10-25 12:50:49 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-10-25 12:50:49 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-10-25 12:50:49 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-10-25 12:50:47 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-10-25 12:50:47 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-10-25 12:50:47 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-10-25 12:50:47 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-10-25 12:50:47 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-10-25 12:50:47 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-10-25 12:50:46 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-10-25 12:50:45 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-10-25 12:50:45 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-10-25 12:50:44 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-10-25 12:50:44 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-10-25 12:50:44 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-10-25 12:50:40 ----A---- C:\WINDOWS\system32\kbdycl.dll
2009-10-25 12:50:40 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2009-10-25 12:50:40 ----A---- C:\WINDOWS\system32\kbdsl.dll
2009-10-25 12:50:40 ----A---- C:\WINDOWS\system32\kbdro.dll
2009-10-25 12:50:40 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2009-10-25 12:50:40 ----A---- C:\WINDOWS\system32\kbdpl.dll
2009-10-25 12:50:40 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2009-10-25 12:50:40 ----A---- C:\WINDOWS\system32\kbdhu.dll
2009-10-25 12:50:40 ----A---- C:\WINDOWS\system32\kbdcr.dll
2009-10-25 12:50:40 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2009-10-25 12:50:39 ----A---- C:\WINDOWS\system32\irclass.dll
2009-10-25 12:50:39 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-10-25 12:50:38 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-10-25 12:50:38 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-10-25 12:50:38 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-10-25 12:50:36 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-10-25 12:50:35 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2009-10-25 12:50:35 ----A---- C:\WINDOWS\system32\batt.dll
2009-10-25 12:50:34 ----A---- C:\WINDOWS\NOTEPAD.EXE
2009-10-25 12:50:33 ----A---- C:\WINDOWS\system32\storprop.dll
2009-10-25 12:50:26 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2009-10-25 12:50:21 ----RA---- C:\WINDOWS\SET8.tmp
2009-10-25 12:50:18 ----RA---- C:\WINDOWS\SET4.tmp
2009-10-25 12:50:17 ----RA---- C:\WINDOWS\SET3.tmp
2009-10-25 12:50:13 ----D---- C:\WINDOWS\system32\CatRoot2
2009-10-25 12:50:13 ----D---- C:\WINDOWS\system32\CatRoot
2009-10-25 12:50:07 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2009-10-25 12:49:07 ----SHD---- C:\System Volume Information
2009-10-25 12:49:07 ----D---- C:\Documents and Settings
2009-10-25 12:48:06 ----RASH---- C:\boot.ini
2009-10-25 12:42:40 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-10-25 12:42:40 ----RSD---- C:\WINDOWS\Fonts
2009-10-25 12:42:40 ----RD---- C:\WINDOWS\Web
2009-10-25 12:42:40 ----HD---- C:\WINDOWS\inf
2009-10-25 12:42:40 ----D---- C:\WINDOWS\WinSxS
2009-10-25 12:42:40 ----D---- C:\WINDOWS\twain_32
2009-10-25 12:42:40 ----D---- C:\WINDOWS\Temp
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\wins
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\wbem
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\usmt
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\spool
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\ShellExt
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\Setup
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\ras
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\oobe
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\npp
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\mui
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\inetsrv
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\IME
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\icsxml
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\ias
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\export
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\drivers
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\dhcp
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\config
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\3com_dmi
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\3076
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\2052
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\1054
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\1042
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\1041
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\1037
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\1033
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\1031
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\1029
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\1028
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32\1025
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system32
2009-10-25 12:42:40 ----D---- C:\WINDOWS\system
2009-10-25 12:42:40 ----D---- C:\WINDOWS\security
2009-10-25 12:42:40 ----D---- C:\WINDOWS\Resources
2009-10-25 12:42:40 ----D---- C:\WINDOWS\repair
2009-10-25 12:42:40 ----D---- C:\WINDOWS\Provisioning
2009-10-25 12:42:40 ----D---- C:\WINDOWS\pchealth
2009-10-25 12:42:40 ----D---- C:\WINDOWS\PeerNet
2009-10-25 12:42:40 ----D---- C:\WINDOWS\mui
2009-10-25 12:42:40 ----D---- C:\WINDOWS\msapps
2009-10-25 12:42:40 ----D---- C:\WINDOWS\msagent
2009-10-25 12:42:40 ----D---- C:\WINDOWS\Media
2009-10-25 12:42:40 ----D---- C:\WINDOWS\java
2009-10-25 12:42:40 ----D---- C:\WINDOWS\ime
2009-10-25 12:42:40 ----D---- C:\WINDOWS\Help
2009-10-25 12:42:40 ----D---- C:\WINDOWS\ehome
2009-10-25 12:42:40 ----D---- C:\WINDOWS\Driver Cache
2009-10-25 12:42:40 ----D---- C:\WINDOWS\Debug
2009-10-25 12:42:40 ----D---- C:\WINDOWS\Cursors
2009-10-25 12:42:40 ----D---- C:\WINDOWS\Connection Wizard
2009-10-25 12:42:40 ----D---- C:\WINDOWS\Config
2009-10-25 12:42:40 ----D---- C:\WINDOWS\AppPatch
2009-10-25 12:42:40 ----D---- C:\WINDOWS\addins
2009-10-25 12:42:40 ----D---- C:\WINDOWS
2009-10-25 12:40:28 ----D---- C:\Documents and Settings\Jožko\Data aplikací\ESET
2009-10-25 12:39:46 ----D---- C:\Program Files\ESET
2009-10-25 12:39:46 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2009-10-25 12:30:24 ----D---- C:\WINDOWS\nview
2009-10-25 12:30:24 ----A---- C:\WINDOWS\system32\nvudisp.exe
2009-10-25 12:29:51 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2009-10-25 12:28:34 ----D---- C:\WINDOWS\system32\Lang
2009-10-25 12:26:35 ----R---- C:\WINDOWS\system32\ChCfg.exe
2009-10-25 12:26:21 ----D---- C:\WINDOWS\system32\RTCOM
2009-10-25 12:26:19 ----A---- C:\WINDOWS\system32\ksuser.dll
2009-10-25 12:25:50 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-10-25 12:25:49 ----HDC---- C:\WINDOWS\$NtUninstallKB888111WXPSP2$
2009-10-25 12:25:46 ----R---- C:\WINDOWS\SoundMan.exe
2009-10-25 12:25:46 ----R---- C:\WINDOWS\SkyTel.exe
2009-10-25 12:25:45 ----R---- C:\WINDOWS\RtlUpd.exe
2009-10-25 12:25:43 ----R---- C:\WINDOWS\RTLCPL.exe
2009-10-25 12:25:38 ----R---- C:\WINDOWS\RTHDCPL.exe
2009-10-25 12:25:37 ----R---- C:\WINDOWS\MicCal.exe
2009-10-25 12:25:34 ----R---- C:\WINDOWS\alcwzrd.exe
2009-10-25 12:25:34 ----R---- C:\WINDOWS\Alcmtr.exe
2009-10-25 12:25:33 ----D---- C:\Program Files\Realtek
2009-10-25 12:25:32 ----HD---- C:\Program Files\InstallShield Installation Information
2009-10-25 12:25:25 ----R---- C:\WINDOWS\RtlExUpd.dll
2009-10-25 12:25:25 ----A---- C:\WINDOWS\HideWin.exe
2009-10-25 12:25:21 ----D---- C:\Program Files\Common Files\InstallShield
2009-10-25 12:18:49 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-10-25 12:18:47 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-10-25 12:18:47 ----D---- C:\Program Files\Intel
2009-10-25 12:18:47 ----A---- C:\WINDOWS\system32\CSVer.dll
2009-10-25 12:18:15 ----D---- C:\Intel
2009-10-25 12:13:10 ----SHD---- C:\RECYCLER
2009-10-25 12:12:20 ----D---- C:\Documents and Settings\Jožko\Data aplikací\Identities
2009-10-25 12:12:19 ----HD---- C:\Program Files\Uninstall Information
2009-10-25 12:12:13 ----ASH---- C:\Documents and Settings\Jožko\Data aplikací\desktop.ini
2009-10-25 12:12:12 ----SD---- C:\Documents and Settings\Jožko\Data aplikací\Microsoft
2009-10-25 12:11:16 ----D---- C:\WINDOWS\SoftwareDistribution
2009-10-25 12:11:15 ----SD---- C:\WINDOWS\system32\Microsoft
2009-10-25 12:11:15 ----D---- C:\WINDOWS\Prefetch
2009-10-25 12:11:15 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-10-25 12:08:20 ----D---- C:\WINDOWS\system32\xircom
2009-10-25 12:08:20 ----D---- C:\Program Files\xerox
2009-10-25 12:08:20 ----D---- C:\Program Files\microsoft frontpage
2009-10-25 12:08:04 ----A---- C:\WINDOWS\control.ini
2009-10-25 12:07:51 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-10-25 12:07:06 ----RD---- C:\WINDOWS\Offline Web Pages
2009-10-25 12:07:05 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-10-25 12:07:05 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-10-25 12:07:00 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-10-25 12:06:56 ----HD---- C:\Program Files\WindowsUpdate
2009-10-25 12:06:52 ----D---- C:\Program Files\Online Services
2009-10-25 12:06:33 ----D---- C:\WINDOWS\system32\DirectX
2009-10-25 12:06:07 ----A---- C:\WINDOWS\system32\atrace.dll
2009-10-25 12:06:04 ----A---- C:\WINDOWS\system32\desktop.ini
2009-10-25 12:06:04 ----A---- C:\WINDOWS\desktop.ini
2009-10-25 12:05:56 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2009-10-25 12:05:55 ----A---- C:\WINDOWS\system32\acctres.dll
2009-10-25 12:05:54 ----D---- C:\Program Files\Common Files\Services
2009-10-25 12:05:50 ----SD---- C:\WINDOWS\Tasks
2009-10-25 12:05:50 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2009-10-25 12:05:49 ----D---- C:\Program Files\Common Files\MSSoap
2009-10-25 12:05:44 ----D---- C:\WINDOWS\srchasst
2009-10-25 12:05:43 ----D---- C:\WINDOWS\system32\Macromed
2009-10-25 12:05:40 ----A---- C:\WINDOWS\system32\wuweb.dll
2009-10-25 12:05:40 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-10-25 12:05:39 ----A---- C:\WINDOWS\system32\wups.dll
2009-10-25 12:05:39 ----A---- C:\WINDOWS\system32\wuauserv.dll
2009-10-25 12:05:39 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2009-10-25 12:05:39 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-10-25 12:05:39 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2009-10-25 12:05:39 ----A---- C:\WINDOWS\system32\wuauclt.exe
2009-10-25 12:05:38 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-10-25 12:05:38 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2009-10-25 12:05:38 ----A---- C:\WINDOWS\system32\qmgr.dll
2009-10-25 12:05:38 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2009-10-25 12:05:38 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2009-10-25 12:05:33 ----D---- C:\Program Files\Movie Maker
2009-10-25 12:05:28 ----A---- C:\WINDOWS\system32\safrslv.dll
2009-10-25 12:05:28 ----A---- C:\WINDOWS\system32\safrdm.dll
2009-10-25 12:05:28 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2009-10-25 12:05:28 ----A---- C:\WINDOWS\system32\racpldlg.dll
2009-10-25 12:05:24 ----A---- C:\WINDOWS\system32\fltMc.exe
2009-10-25 12:05:24 ----A---- C:\WINDOWS\system32\fltlib.dll
2009-10-25 12:05:23 ----D---- C:\WINDOWS\system32\Restore
2009-10-25 12:05:23 ----A---- C:\WINDOWS\system32\srsvc.dll
2009-10-25 12:05:23 ----A---- C:\WINDOWS\system32\srrstr.dll
2009-10-25 12:05:23 ----A---- C:\WINDOWS\system32\srclient.dll
2009-10-25 12:05:22 ----A---- C:\WINDOWS\system32\mnmdd.dll
2009-10-25 12:05:22 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2009-10-25 12:05:22 ----A---- C:\WINDOWS\system32\ils.dll
2009-10-25 12:05:21 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2009-10-25 12:05:21 ----A---- C:\WINDOWS\system32\msconf.dll
2009-10-25 12:05:21 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2009-10-25 12:05:18 ----D---- C:\Program Files\NetMeeting
2009-10-25 12:05:18 ----A---- C:\WINDOWS\system32\msoert2.dll
2009-10-25 12:05:17 ----A---- C:\WINDOWS\system32\msoeacct.dll
2009-10-25 12:05:16 ----A---- C:\WINDOWS\system32\inetres.dll
2009-10-25 12:05:16 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-10-25 12:05:13 ----D---- C:\Program Files\Outlook Express
2009-10-25 12:05:13 ----A---- C:\WINDOWS\system32\schedsvc.dll
2009-10-25 12:05:13 ----A---- C:\WINDOWS\system32\mstinit.exe
2009-10-25 12:05:13 ----A---- C:\WINDOWS\system32\mstask.dll
2009-10-25 12:05:13 ----A---- C:\WINDOWS\system32\icwphbk.dll
2009-10-25 12:05:12 ----A---- C:\WINDOWS\system32\isign32.dll
2009-10-25 12:05:12 ----A---- C:\WINDOWS\system32\inetcfg.dll
2009-10-25 12:05:12 ----A---- C:\WINDOWS\system32\icwdial.dll
2009-10-25 12:05:05 ----D---- C:\Program Files\Common Files\System
2009-10-25 12:05:04 ----D---- C:\Program Files\Internet Explorer
2009-10-25 12:04:31 ----D---- C:\Program Files\ComPlus Applications
2009-10-25 12:04:29 ----A---- C:\WINDOWS\vbaddin.ini
2009-10-25 12:04:29 ----A---- C:\WINDOWS\vb.ini
2009-10-25 12:04:25 ----D---- C:\WINDOWS\Registration
2009-10-25 12:04:18 ----D---- C:\Program Files\Windows Media Player
2009-10-25 12:04:11 ----D---- C:\Program Files\Messenger
2009-10-25 12:04:06 ----D---- C:\Program Files\MSN Gaming Zone
2009-10-25 12:04:06 ----A---- C:\WINDOWS\system32\write.exe
2009-10-25 12:03:54 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-10-25 12:03:54 ----A---- C:\WINDOWS\system32\hticons.dll
2009-10-25 12:03:54 ----A---- C:\WINDOWS\system32\avwav.dll
2009-10-25 12:03:54 ----A---- C:\WINDOWS\system32\avtapi.dll
2009-10-25 12:03:54 ----A---- C:\WINDOWS\system32\avmeter.dll
2009-10-25 12:03:53 ----A---- C:\WINDOWS\system32\winchat.exe
2009-10-25 12:03:44 ----A---- C:\WINDOWS\system32\charmap.exe
2009-10-25 12:03:44 ----A---- C:\WINDOWS\system32\getuname.dll
2009-10-25 12:03:44 ----A---- C:\WINDOWS\system32\calc.exe
2009-10-25 12:03:43 ----A---- C:\WINDOWS\system32\winmine.exe
2009-10-25 12:03:43 ----A---- C:\WINDOWS\system32\sol.exe
2009-10-25 12:03:43 ----A---- C:\WINDOWS\system32\mshearts.exe
2009-10-25 12:03:42 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2009-10-25 12:03:42 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2009-10-25 12:03:42 ----A---- C:\WINDOWS\system32\tslabels.ini
2009-10-25 12:03:42 ----A---- C:\WINDOWS\system32\tskill.exe
2009-10-25 12:03:42 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2009-10-25 12:03:42 ----A---- C:\WINDOWS\system32\tscon.exe
2009-10-25 12:03:42 ----A---- C:\WINDOWS\system32\reset.exe
2009-10-25 12:03:42 ----A---- C:\WINDOWS\system32\freecell.exe
2009-10-25 12:03:41 ----A---- C:\WINDOWS\system32\shadow.exe
2009-10-25 12:03:41 ----A---- C:\WINDOWS\system32\rwinsta.exe
2009-10-25 12:03:41 ----A---- C:\WINDOWS\system32\regini.exe
2009-10-25 12:03:41 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2009-10-25 12:03:41 ----A---- C:\WINDOWS\system32\qwinsta.exe
2009-10-25 12:03:41 ----A---- C:\WINDOWS\system32\qappsrv.exe
2009-10-25 12:03:41 ----A---- C:\WINDOWS\system32\msg.exe
2009-10-25 12:03:41 ----A---- C:\WINDOWS\system32\logoff.exe
2009-10-25 12:03:41 ----A---- C:\WINDOWS\system32\cdmodem.dll
2009-10-25 12:03:40 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2009-10-25 12:03:39 ----A---- C:\WINDOWS\system32\stclient.dll
2009-10-25 12:03:39 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2009-10-25 12:03:39 ----A---- C:\WINDOWS\system32\mtxex.dll
2009-10-25 12:03:39 ----A---- C:\WINDOWS\system32\mtxdm.dll
2009-10-25 12:03:39 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2009-10-25 12:03:39 ----A---- C:\WINDOWS\system32\comrepl.dll
2009-10-25 12:03:39 ----A---- C:\WINDOWS\system32\comaddin.dll
2009-10-25 12:03:38 ----A---- C:\WINDOWS\system32\comsnap.dll
2009-10-25 12:03:32 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2009-10-25 12:03:31 ----A---- C:\WINDOWS\system32\sndrec32.exe
2009-10-25 12:03:31 ----A---- C:\WINDOWS\system32\accwiz.exe
2009-10-25 12:03:30 ----D---- C:\Program Files\Windows NT
2009-10-25 12:03:30 ----A---- C:\WINDOWS\system32\mplay32.exe
2009-10-25 12:03:30 ----A---- C:\WINDOWS\system32\hypertrm.dll
2009-10-25 12:03:29 ----A---- C:\WINDOWS\system32\spider.exe
2009-10-25 12:03:29 ----A---- C:\WINDOWS\system32\mspaint.exe
2009-10-25 12:03:29 ----A---- C:\WINDOWS\system32\clipbrd.exe
2009-10-25 12:03:28 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2009-10-25 12:03:28 ----A---- C:\WINDOWS\system32\mstscax.dll
2009-10-25 12:03:28 ----A---- C:\WINDOWS\system32\mstsc.exe
2009-10-25 12:03:27 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2009-10-25 12:03:27 ----A---- C:\WINDOWS\system32\sessmgr.exe
2009-10-25 12:03:27 ----A---- C:\WINDOWS\system32\remotepg.dll
2009-10-25 12:03:27 ----A---- C:\WINDOWS\system32\rdshost.exe
2009-10-25 12:03:27 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2009-10-25 12:03:27 ----A---- C:\WINDOWS\system32\rdchost.dll
2009-10-25 12:03:26 ----D---- C:\WINDOWS\system32\MsDtc
2009-10-25 12:03:26 ----A---- C:\WINDOWS\system32\termsrv.dll
2009-10-25 12:03:26 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2009-10-25 12:03:26 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2009-10-25 12:03:26 ----A---- C:\WINDOWS\system32\rdpclip.exe
2009-10-25 12:03:26 ----A---- C:\WINDOWS\system32\qprocess.exe
2009-10-25 12:03:26 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2009-10-25 12:03:26 ----A---- C:\WINDOWS\system32\icaapi.dll
2009-10-25 12:03:26 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2009-10-25 12:03:25 ----A---- C:\WINDOWS\system32\xolehlp.dll
2009-10-25 12:03:25 ----A---- C:\WINDOWS\system32\mtxoci.dll
2009-10-25 12:03:25 ----A---- C:\WINDOWS\system32\msdtctm.dll
2009-10-25 12:03:25 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2009-10-25 12:03:24 ----A---- C:\WINDOWS\system32\msdtclog.dll
2009-10-25 12:03:24 ----A---- C:\WINDOWS\system32\msdtc.exe
2009-10-25 12:03:23 ----D---- C:\WINDOWS\system32\Com
2009-10-25 12:03:23 ----A---- C:\WINDOWS\system32\colbact.dll
2009-10-25 12:03:23 ----A---- C:\WINDOWS\system32\clbcatex.dll
2009-10-25 12:03:23 ----A---- C:\WINDOWS\system32\catsrvut.dll
2009-10-25 12:03:23 ----A---- C:\WINDOWS\system32\catsrvps.dll
2009-10-25 12:03:23 ----A---- C:\WINDOWS\system32\catsrv.dll
2009-10-25 12:03:22 ----A---- C:\WINDOWS\system32\comuid.dll
2009-10-25 12:03:22 ----A---- C:\WINDOWS\system32\comsvcs.dll
2009-10-25 12:03:21 ----A---- C:\WINDOWS\system32\clbcatq.dll
2009-10-25 12:03:13 ----A---- C:\WINDOWS\system32\servdeps.dll
2009-10-25 12:03:13 ----A---- C:\WINDOWS\system32\mmfutil.dll
2009-10-25 12:03:13 ----A---- C:\WINDOWS\system32\licwmi.dll
2009-10-25 12:03:13 ----A---- C:\WINDOWS\system32\cmprops.dll

======List of files/folders modified in the last 1 months======

2009-11-10 17:02:18 ----A---- C:\WINDOWS\win.ini
2009-10-25 12:50:55 ----A---- C:\WINDOWS\system.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 easdrv;easdrv; C:\WINDOWS\system32\DRIVERS\easdrv.sys [2007-12-21 30216]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2007-12-21 33800]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-17 39936]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-17 14848]
R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2009-10-29 5632]
R2 acedrv11;acedrv11; \??\C:\WINDOWS\system32\drivers\acedrv11.sys []
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-11-06 281760]
R2 eamon;EAMON; C:\WINDOWS\system32\DRIVERS\eamon.sys [2007-12-21 39944]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-11-06 25888]
R3 FsUsbExDisk;FsUsbExDisk; \??\C:\WINDOWS\system32\FsUsbExDisk.SYS []
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-10-25 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-01-30 4725760]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-03-08 6288672]
R3 PAC207;Trust WB-1400T Webcam; C:\WINDOWS\system32\DRIVERS\pfc027.sys [2005-02-24 162176]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2009-10-27 47360]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-09-19 21248]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-01-03 105856]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys []
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-17 60800]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-17 61824]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2007-09-17 21632]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\WINDOWS\system32\DRIVERS\ss_bbus.sys [2009-03-20 90112]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\WINDOWS\system32\DRIVERS\ss_bmdfl.sys [2009-03-20 14976]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\WINDOWS\system32\DRIVERS\ss_bmdm.sys [2009-03-20 121856]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 sr;Ovladač filtru Obnovy systému; C:\WINDOWS\system32\DRIVERS\sr.sys [2004-08-17 73344]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;Eset Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2007-12-21 468224]
R2 FsUsbExService;FsUsbExService; C:\WINDOWS\system32\FsUsbExService.Exe [2009-03-31 233472]
R2 IJPLMSVC;PIXMA Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2007-04-13 101528]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-25 153376]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-09-20 853288]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-03-08 163908]
R2 STI Simulator;STI Simulator; C:\WINDOWS\System32\PAStiSvc.exe [2005-01-14 53248]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-11 38912]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2007-09-20 382248]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 EhttpSrv;Eset HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2007-12-21 19200]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-04-07 430592]

-----------------EOF-----------------
tak zatiaľ diky.

[motji]

Hm, ta hláška o atapi.sys se mi nelíbí

Stáhněte na plochu, ukončete všechna aktivní okna a spusťte ComboFix - http://download.bleepingcomputer.com/sUBs/ComboFix.exe

-souhlaste s instalací konzole pro zotavení

- ComboFix je třeba spustit pod účtem s právy administrátora

- Před použitím vypněte všechny rezidentní bezpečnostní programy - antiviry, firewally, antispywary

- Po spuštění se zobrazí podmínky užití, potvrďte je stiskem tlačítka Ano

- Dále postupujte dle pokynů, během aplikování ComboFixu neklikejte do zobrazujícího se okna

- Po dokončení skenování, trvajícího maximálně 10 minut, by měl program vytvořit log - C:\ComboFix.txt, skopírujte celý jeho obsah sem

[milkasv]

urobila som to. combofix sa riadne spustil, napísal, že našiel rootkit a musí reštartovať. potom normálne skenoval potom zase reštartova a teraz mám na c combofix zase s ikonou tento počítač

obrazovka.JPG

(105.34 KiB) Staženo 36 x

a súbor combofix.txt nejde nájsť ani cez spustiť. tak neviem čo robiť

[motji]

A psal combofix, že vytváří log?

Start -> Spustit -> napsat

notepad "C:\ComboFix.txt"

Enter.

[milkasv]

po prvom reštarte skenovalo a došlo po 50 a zase reštartovalo a nič už o vytváraní logu a mala so všetko vypnuté ako si povedala. a combofix.txt cez Start -> Spustit -> nelze najít, takže asi ho niet.

[motji]

To se mi teda moc nelíbí

Odinstaluj combofix přes
Start >> Spustit zkopíruj do okénka:


ComboFix /Uninstall

stiskni Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.

Stáhni T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe

-Spusť,pro potvrzení volby mačkej klávesu A, Enter
-po použití prográmek vymaž.Pozor,antiviry ho mohou falešně označit za vir

Stáhni Ccleaner,viz můj podpis
-nainstaluj a vyčišti dočasné soubory, i registry

Najdi soubor C:\WINDOWS\system32\DRIVERS\atapi.sys, dej kopii do raru nebo zipu a vlož sem jako přílohu

Stáhni
http://rootrepeal.googlepages.com/RootRepeal.zip
-Stáhni, rozbal a spusť
-vyber záložku Files, klikni na Scan,
-proběhne sken, po něm klikni na Save Report , tím se uloží log, který zkopíruješ sem
-postupně proved všechny záložky

[milkasv]

urobila som všetko, teraz skenuje rootrepeal, potom dam log. ale ten súbor C:\WINDOWS\system32\DRIVERS\atapi.sys sa nedá urobiť kopia. vypíše

chyba.JPG

(24.69 KiB) Staženo 33 x

tak neviem čo s tým.
keď dorobí ten scan tak dám log.

[motji]

Zkus atapi sys otestovat na virustotal, ale asi to nepůjde
www.virustotal.com

[motji]

Ještě udělej tohle

stáhni MBR
http://www2.gmer.net/mbr/mbr.exe
-ulož ho na plochu

start - spustit

"%userprofile%\plocha\mbr" -t

enter

-vytvoří se log s názvem mbr.log, vlož ho zde

[milkasv]

začalo odosielať a vypísalo toto 0 bytes size received / Se ha recibido un archivo vacio

[milkasv]

tu je ten log
Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x89E4D250]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\atapi -> 0x89e4d250
Warning: possible MBR rootkit infection !
user & kernel MBR OK
Use "Recovery Console" command "fixmbr" to clear infection !

[milkasv]

už spravilo aj ten rootrepeal tu je
ROOTREPEAL (c) AD, 2007-2009
==================================================
Scan Start Time: 2009/11/18 11:00
Program Version: Version 1.3.5.0
Windows Version: Windows XP SP2
==================================================

Hidden/Locked Files
-------------------
Path: c:\documents and settings\jožko\local settings\temporary internet files\content.ie5\index.dat
Status: Size mismatch (API: 98304, Raw: 81920)

[motji]

Prosím tě udělej všechny záložky v rootrepealu.
Vypadá to že máš rootkita v syst. souboru, pro jistotu si zazálohuj důležité soubory.
Když Ti nejde combofix, budeme to muset udělat trošku jinak.


StáhniSystemLook
http://jpshortstuff.247fixes.com/SystemLook.exe

-ulož ho na plochu a spust
-do okénka zkopíruj

Kód: Vybrat vše

:filefind
atapi.sys

-klikni na Look, proběhne sken, na konci se zobrazí log, jehož obsah zkopíruj sem

Z odkazu stahni http://z-oleg.com/avz4.zip na plochu
- rozbal tak aby byla jen jedna slozka avz4
- spust avz.exe


*****sken****
- v menu File -> vyber Standard script, zvol moznost (kliknes do ctverecku): "1" a "3"
- prikaz se provede kliknutim na Execute selected scripts, potvrdi se "Yes"
- dojde k anylyze PC, po dokonceni se vytvori s miste spusteni programu slozka LOG
- v ni najdes soubor virusinfo_syscure.zip , ktery uploudnes do sveho prispevku jako prilohu!

Budu tu tak po 1 hodině

[milkasv]

SystemLook v1.0 by jpshortstuff (29.08.09)
Log created at 11:20 on 18/11/2009 by Jožko (Administrator - Elevation successful)

========== filefind ==========

Searching for "atapi.sys"
C:\WINDOWS\system32\dllcache\atapi.sys --a--c 95360 bytes [20:59 03/08/2004] [21:59 03/08/2004] CDFE4411A69C224BD1D11B2DA92DAC51
C:\WINDOWS\system32\drivers\atapi.sys --a--- 95360 bytes [20:59 03/08/2004] [21:59 03/08/2004] (Unable to calculate MD5)
C:\WINDOWS\system32\ReinstallBackups\0010\DriverFiles\i386\atapi.sys --a--- 95360 bytes [11:19 25/10/2009] [20:59 03/08/2004] CDFE4411A69C224BD1D11B2DA92DAC51
C:\WINDOWS\system32\ReinstallBackups\0011\DriverFiles\i386\atapi.sys --a--- 95360 bytes [11:19 25/10/2009] [21:59 03/08/2004] CDFE4411A69C224BD1D11B2DA92DAC51

-=End Of File=-