Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

MBR sector of the 1. physical disk - Win32/Mebroot.K trojan

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
FunTomason
Návštěvník
Návštěvník
Příspěvky: 33
Registrován: 24 říj 2009 11:14

MBR sector of the 1. physical disk - Win32/Mebroot.K trojan

#1 Příspěvek od FunTomason »

Pomozte mi s tím prosím.
Zde je log z HiJackThis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:54:10, on 24.10.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\MEDIAK~1\MagicKey.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\PROGRA~1\MEDIAK~1\OSD.exe
C:\Program Files\dvd43\dvd43_tray.exe
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\ICQ6.5\ICQ.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\DVDREG~1\DVDRegionFree.exe
C:\Program Files\Internet Explorer\iexplore.exe
E:\Instal\Antivir\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [MagicKey] C:\PROGRA~1\MEDIAK~1\MagicKey.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [dvd43] C:\Program Files\dvd43\dvd43_tray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6.5\ICQ.exe" silent
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_03\bin\npjpi150_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_03\bin\npjpi150_03.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Eset HTTP Server (EhttpSrv) - Unknown owner - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

--
End of file - 5233 bytes


a ještě log pomocí RSIT:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrator at 2009-10-24 18:59:15
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 28 GB (79%) free of 35 GB
Total RAM: 1535 MB (68% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:59:19, on 24.10.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\MEDIAK~1\MagicKey.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\PROGRA~1\MEDIAK~1\OSD.exe
C:\Program Files\dvd43\dvd43_tray.exe
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\ICQ6.5\ICQ.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\DVDREG~1\DVDRegionFree.exe
C:\Program Files\Internet Explorer\iexplore.exe
E:\Instal\Antivir\RSIT\RSIT.exe
E:\Instal\Antivir\HijackThis\Administrator.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [MagicKey] C:\PROGRA~1\MEDIAK~1\MagicKey.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [dvd43] C:\Program Files\dvd43\dvd43_tray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6.5\ICQ.exe" silent
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_03\bin\npjpi150_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_03\bin\npjpi150_03.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Eset HTTP Server (EhttpSrv) - Unknown owner - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

--
End of file - 5269 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\User_Feed_Synchronization-{BE28AA0B-9EC9-446A-B2AD-AAA61E0F4FC8}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2005-09-24 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2007-06-08 976424]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2006-11-17 577536]
"NvCplDaemon"=C:\WINDOWS\System32\NvCpl.dll [2007-12-05 8523776]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\System32\NvMcTray.dll [2007-12-05 81920]
"MagicKey"=C:\PROGRA~1\MEDIAK~1\MagicKey.exe [2004-03-15 45056]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2007-10-25 1410304]
"dvd43"=C:\Program Files\dvd43\dvd43_tray.exe [2005-12-05 691200]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe [2005-04-13 36975]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2005-01-12 32768]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2007-06-08 23233576]
"ICQ"=C:\Program Files\ICQ6.5\ICQ.exe [2009-03-01 172792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{93994DE8-8239-4655-B1D1-5F4E91300429}"=C:\PROGRA~1\DVDREG~1\DVDShell.dll [2004-10-09 49152]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"E:\Instal\StrongDC\StrongDC.exe"="E:\Instal\StrongDC\StrongDC.exe:*:Enabled:StrongDC++"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2009-10-24 18:59:15 ----D---- C:\rsit
2009-10-24 11:24:15 ----D---- C:\Documents and Settings\Administrator\Data aplikací\CyberLink
2009-10-24 11:09:49 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-10-24 11:09:43 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-10-24 11:09:35 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2009-10-24 11:09:25 ----HDC---- C:\WINDOWS\$NtUninstallKB974455$
2009-10-24 11:08:01 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2009-10-24 11:07:53 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2009-10-24 11:07:47 ----HDC---- C:\WINDOWS\$NtUninstallKB968816_WM9$
2009-10-24 11:07:41 ----HDC---- C:\WINDOWS\$NtUninstallKB961371-v2$
2009-10-24 11:07:03 ----D---- C:\WINDOWS\ie8updates
2009-10-24 11:06:47 ----D---- C:\WINDOWS\WBEM
2009-10-24 11:05:39 ----HDC---- C:\WINDOWS\ie8
2009-10-24 11:04:23 ----A---- C:\WINDOWS\system32\MRT.exe
2009-10-24 10:59:10 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-10-24 10:59:04 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2009-10-24 10:58:58 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$
2009-10-24 10:58:57 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Macromedia
2009-10-24 10:58:51 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2009-10-24 10:58:46 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2009-10-24 10:58:39 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2009-10-24 10:57:52 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2009-10-24 09:36:41 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-10-24 09:36:35 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2009-10-24 09:36:29 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-10-24 09:36:24 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2009-10-24 09:36:18 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2009-10-24 09:36:12 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2009-10-24 09:36:01 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-10-24 09:35:54 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2009-10-24 09:35:40 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-10-24 09:35:32 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2009-10-24 09:35:26 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2009-10-24 09:35:16 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-10-24 09:35:10 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2009-10-24 09:35:04 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2009-10-24 09:34:59 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2009-10-24 09:34:33 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-10-24 09:34:26 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-10-24 09:34:19 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-10-24 09:34:14 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-10-24 09:34:07 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2009-10-24 09:33:59 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-10-24 09:33:51 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2009-10-24 09:33:45 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2009-10-24 09:33:11 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-10-24 09:33:04 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-10-24 09:32:55 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-10-24 09:32:49 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-10-24 09:32:42 ----HDC---- C:\WINDOWS\$NtUninstallKB971486$
2009-10-24 09:32:34 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-10-24 09:32:28 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2009-10-24 09:31:40 ----SHD---- C:\Config.Msi
2009-10-24 09:31:17 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2009-10-24 09:31:11 ----HDC---- C:\WINDOWS\$NtUninstallKB973525$
2009-10-24 09:31:05 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-10-24 09:30:59 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-10-24 09:30:53 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-10-24 09:30:48 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2009-10-24 09:30:35 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-10-24 09:30:20 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2009-10-24 09:30:11 ----HDC---- C:\WINDOWS\$NtUninstallKB970653-v3$
2009-10-24 09:30:06 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2009-10-24 09:29:59 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2009-10-24 08:56:50 ----D---- C:\Documents and Settings\Administrator\Data aplikací\ICQ
2009-10-24 08:55:52 ----D---- C:\Program Files\ICQ6.5
2009-10-24 08:54:32 ----D---- C:\WINDOWS\system32\PreInstall
2009-10-24 08:54:29 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-10-24 08:54:29 ----HD---- C:\WINDOWS\$hf_mig$
2009-10-24 08:46:27 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-10-23 22:30:02 ----A---- C:\WINDOWS\system32\h323log.txt
2009-10-23 22:24:00 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2009-10-23 22:23:56 ----RA---- C:\WINDOWS\SET32.tmp
2009-10-23 22:23:53 ----RA---- C:\WINDOWS\SET1D.tmp
2009-10-23 22:23:39 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2009-10-23 22:20:40 ----RA---- C:\WINDOWS\SET31.tmp
2009-10-23 22:20:38 ----RA---- C:\WINDOWS\SET1C.tmp
2009-10-23 22:16:12 ----A---- C:\WINDOWS\system32\usbui.dll
2009-10-23 22:15:17 ----A---- C:\WINDOWS\imsins.BAK
2009-10-23 22:15:13 ----D---- C:\Program Files\Common Files\ODBC
2009-10-23 22:15:13 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-10-23 22:15:13 ----A---- C:\WINDOWS\ODBCINST.INI
2009-10-23 22:15:09 ----RD---- C:\Program Files
2009-10-23 22:15:09 ----D---- C:\Program Files\Common Files\SpeechEngines
2009-10-23 22:15:09 ----D---- C:\Program Files\Common Files\Microsoft Shared
2009-10-23 22:15:09 ----D---- C:\Program Files\Common Files
2009-10-23 22:15:06 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-10-23 22:15:06 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-10-23 22:15:06 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-10-23 22:15:04 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-10-23 22:15:04 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-10-23 22:15:04 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-10-23 22:15:04 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-10-23 22:15:04 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-10-23 22:15:03 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-10-23 22:15:03 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-10-23 22:15:03 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-10-23 22:15:03 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-10-23 22:15:03 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-10-23 22:15:03 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-10-23 22:15:03 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-10-23 22:15:01 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-10-23 22:15:01 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-10-23 22:15:01 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-10-23 22:15:01 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-10-23 22:15:01 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-10-23 22:15:01 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-10-23 22:15:01 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-10-23 22:14:59 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-10-23 22:14:59 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-10-23 22:14:59 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-10-23 22:14:59 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-10-23 22:14:59 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-10-23 22:14:55 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2009-10-23 22:14:55 ----A---- C:\WINDOWS\system32\kbdsl.dll
2009-10-23 22:14:55 ----A---- C:\WINDOWS\system32\kbdro.dll
2009-10-23 22:14:55 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2009-10-23 22:14:55 ----A---- C:\WINDOWS\system32\kbdpl.dll
2009-10-23 22:14:55 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2009-10-23 22:14:55 ----A---- C:\WINDOWS\system32\kbdhu.dll
2009-10-23 22:14:55 ----A---- C:\WINDOWS\system32\kbdcr.dll
2009-10-23 22:14:55 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2009-10-23 22:14:54 ----A---- C:\WINDOWS\system32\kbdycl.dll
2009-10-23 22:14:54 ----A---- C:\WINDOWS\system32\irclass.dll
2009-10-23 22:14:53 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-10-23 22:14:53 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-10-23 22:14:53 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-10-23 22:14:53 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-10-23 22:14:50 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2009-10-23 22:14:50 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-10-23 22:14:50 ----A---- C:\WINDOWS\system32\batt.dll
2009-10-23 22:14:50 ----A---- C:\WINDOWS\notepad.exe
2009-10-23 22:14:49 ----A---- C:\WINDOWS\system32\storprop.dll
2009-10-23 22:14:38 ----RA---- C:\WINDOWS\SETA.tmp
2009-10-23 22:14:35 ----RA---- C:\WINDOWS\SET3.tmp
2009-10-23 22:14:29 ----D---- C:\WINDOWS\system32\CatRoot2
2009-10-23 22:14:29 ----D---- C:\WINDOWS\system32\CatRoot
2009-10-23 22:14:09 ----A---- C:\WINDOWS\setuplog.txt
2009-10-23 22:14:04 ----D---- C:\Documents and Settings
2009-10-23 22:13:20 ----RASH---- C:\boot.ini
2009-10-23 22:09:24 ----D---- C:\Program Files\MP Software
2009-10-23 22:09:08 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-10-23 22:09:08 ----RSD---- C:\WINDOWS\Fonts
2009-10-23 22:09:08 ----RD---- C:\WINDOWS\Web
2009-10-23 22:09:08 ----HD---- C:\WINDOWS\inf
2009-10-23 22:09:08 ----D---- C:\WINDOWS\WinSxS
2009-10-23 22:09:08 ----D---- C:\WINDOWS\twain_32
2009-10-23 22:09:08 ----D---- C:\WINDOWS\Temp
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\wins
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\wbem
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\usmt
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\spool
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\ShellExt
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\Setup
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\ras
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\oobe
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\npp
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\mui
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\inetsrv
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\IME
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\icsxml
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\ias
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\export
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\drivers
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\dhcp
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\config
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\3com_dmi
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\3076
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\2052
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\1054
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\1042
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\1041
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\1037
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\1033
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\1031
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\1029
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\1028
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32\1025
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system32
2009-10-23 22:09:08 ----D---- C:\WINDOWS\system
2009-10-23 22:09:08 ----D---- C:\WINDOWS\security
2009-10-23 22:09:08 ----D---- C:\WINDOWS\Resources
2009-10-23 22:09:08 ----D---- C:\WINDOWS\repair
2009-10-23 22:09:08 ----D---- C:\WINDOWS\mui
2009-10-23 22:09:08 ----D---- C:\WINDOWS\msapps
2009-10-23 22:09:08 ----D---- C:\WINDOWS\msagent
2009-10-23 22:09:08 ----D---- C:\WINDOWS\Media
2009-10-23 22:09:08 ----D---- C:\WINDOWS\java
2009-10-23 22:09:08 ----D---- C:\WINDOWS\ime
2009-10-23 22:09:08 ----D---- C:\WINDOWS\Help
2009-10-23 22:09:08 ----D---- C:\WINDOWS\Driver Cache
2009-10-23 22:09:08 ----D---- C:\WINDOWS\Debug
2009-10-23 22:09:08 ----D---- C:\WINDOWS\Cursors
2009-10-23 22:09:08 ----D---- C:\WINDOWS\Connection Wizard
2009-10-23 22:09:08 ----D---- C:\WINDOWS\Config
2009-10-23 22:09:08 ----D---- C:\WINDOWS\AppPatch
2009-10-23 22:09:08 ----D---- C:\WINDOWS\addins
2009-10-23 22:09:08 ----D---- C:\WINDOWS
2009-10-23 22:06:16 ----D---- C:\Program Files\MIKSOFT
2009-10-23 22:03:11 ----D---- C:\Documents and Settings\Administrator\Data aplikací\ACD Systems
2009-10-23 22:02:30 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Adobe
2009-10-23 22:00:36 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Nvu
2009-10-23 22:00:36 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Mozilla
2009-10-23 21:57:44 ----HD---- C:\Program Files\Zero G Registry
2009-10-23 21:57:44 ----D---- C:\Program Files\JAlbum
2009-10-23 21:57:07 ----D---- C:\Program Files\Nvu
2009-10-23 21:55:46 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-10-23 21:55:41 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2009-10-23 21:55:26 ----D---- C:\Program Files\Windows Media Connect 2
2009-10-23 21:55:17 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2009-10-23 21:54:27 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2009-10-23 21:53:52 ----D---- C:\WINDOWS\system32\LogFiles
2009-10-23 21:53:45 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2009-10-23 21:50:11 ----A---- C:\WINDOWS\system32\wmpns.dll
2009-10-23 21:49:08 ----D---- C:\WINDOWS\SoftwareDistribution
2009-10-23 21:48:56 ----D---- C:\WINDOWS\Prefetch
2009-10-23 21:41:45 ----N---- C:\WINDOWS\system32\msxml6r.dll
2009-10-23 21:41:45 ----N---- C:\WINDOWS\system32\msxml6.dll
2009-10-23 21:41:38 ----N---- C:\WINDOWS\system32\wmvdmoe2.dll
2009-10-23 21:41:37 ----N---- C:\WINDOWS\system32\WMSPDMOE.dll
2009-10-23 21:41:37 ----N---- C:\WINDOWS\system32\wmspdmod.dll
2009-10-23 21:41:37 ----N---- C:\WINDOWS\system32\wmsdmoe2.dll
2009-10-23 21:41:37 ----N---- C:\WINDOWS\system32\wmpdxm.dll
2009-10-23 21:41:36 ----N---- C:\WINDOWS\system32\wmpasf.dll
2009-10-23 21:41:36 ----N---- C:\WINDOWS\system32\wmp.dll
2009-10-23 21:41:36 ----N---- C:\WINDOWS\system32\wmidx.dll
2009-10-23 21:41:36 ----N---- C:\WINDOWS\system32\wmerror.dll
2009-10-23 21:41:36 ----N---- C:\WINDOWS\system32\mspmsnsv.dll
2009-10-23 21:41:35 ----N---- C:\WINDOWS\system32\MP4SDMOD.dll
2009-10-23 21:41:35 ----N---- C:\WINDOWS\system32\MP43DMOD.dll
2009-10-23 21:41:33 ----N---- C:\WINDOWS\system32\comsdupd.exe
2009-10-23 21:41:30 ----N---- C:\WINDOWS\system32\credssp.dll
2009-10-23 21:41:30 ----N---- C:\WINDOWS\system32\cmsetacl.dll
2009-10-23 21:41:30 ----N---- C:\WINDOWS\system32\btpanui.dll
2009-10-23 21:41:30 ----N---- C:\WINDOWS\system32\bthserv.dll
2009-10-23 21:41:30 ----N---- C:\WINDOWS\system32\bthci.dll
2009-10-23 21:41:30 ----N---- C:\WINDOWS\system32\blastcln.exe
2009-10-23 21:41:30 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2009-10-23 21:41:30 ----N---- C:\WINDOWS\system32\bitsprx3.dll
2009-10-23 21:41:30 ----N---- C:\WINDOWS\system32\bitsprx2.dll
2009-10-23 21:41:30 ----N---- C:\WINDOWS\system32\azroles.dll
2009-10-23 21:41:30 ----N---- C:\WINDOWS\system32\auditusr.exe
2009-10-23 21:41:30 ----N---- C:\WINDOWS\system32\ativvaxx.dll
2009-10-23 21:41:30 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2009-10-23 21:41:30 ----N---- C:\WINDOWS\system32\ati3duag.dll
2009-10-23 21:41:30 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2009-10-23 21:41:30 ----N---- C:\WINDOWS\system32\ati2dvag.dll
2009-10-23 21:41:30 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2009-10-23 21:41:30 ----N---- C:\WINDOWS\system32\ati2cqag.dll
2009-10-23 21:41:30 ----N---- C:\WINDOWS\system32\aaclient.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\ir41_qcx.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\ir41_qc.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\httpapi.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\fwcfg.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\fsquirt.exe
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\fltmc.exe
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\fltlib.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\extmgr.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\eapsvc.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\eapqec.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\eappprxy.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\eapphost.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\eappgnui.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\eappcfg.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\eapolqec.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\dot3ui.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\dot3svc.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\dot3msm.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\dot3api.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\dimsroam.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2009-10-23 21:41:29 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2009-10-23 21:41:28 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2009-10-23 21:41:28 ----N---- C:\WINDOWS\system32\mmcex.dll
2009-10-23 21:41:28 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2009-10-23 21:41:28 ----N---- C:\WINDOWS\system32\mdmxsdk.dll
2009-10-23 21:41:28 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2009-10-23 21:41:28 ----N---- C:\WINDOWS\system32\kmsvc.dll
2009-10-23 21:41:28 ----N---- C:\WINDOWS\system32\kbdukx.dll
2009-10-23 21:41:28 ----N---- C:\WINDOWS\system32\kbdsmsno.dll
2009-10-23 21:41:28 ----N---- C:\WINDOWS\system32\kbdsmsfi.dll
2009-10-23 21:41:28 ----N---- C:\WINDOWS\system32\kbdpash.dll
2009-10-23 21:41:28 ----N---- C:\WINDOWS\system32\kbdno1.dll
2009-10-23 21:41:28 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2009-10-23 21:41:28 ----N---- C:\WINDOWS\system32\kbdmlt48.dll
2009-10-23 21:41:28 ----N---- C:\WINDOWS\system32\kbdmlt47.dll
2009-10-23 21:41:28 ----N---- C:\WINDOWS\system32\kbdmaori.dll
2009-10-23 21:41:28 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2009-10-23 21:41:28 ----N---- C:\WINDOWS\system32\kbdinmal.dll
2009-10-23 21:41:28 ----N---- C:\WINDOWS\system32\kbdinben.dll
2009-10-23 21:41:28 ----N---- C:\WINDOWS\system32\kbdinbe1.dll
2009-10-23 21:41:28 ----N---- C:\WINDOWS\system32\kbdfi1.dll
2009-10-23 21:41:28 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2009-10-23 21:41:28 ----N---- C:\WINDOWS\system32\ir50_qcx.dll
2009-10-23 21:41:28 ----N---- C:\WINDOWS\system32\ir50_qc.dll
2009-10-23 21:41:28 ----N---- C:\WINDOWS\system32\ir50_32.dll
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\xpob2res.dll
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\s3gnb.dll
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\rasqec.dll
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\qutil.dll
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\qcliprov.dll
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\qagentrt.dll
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\qagent.dll
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\powercfg.exe
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\pnrpnsp.dll
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\p2psvc.dll
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\p2pnetsh.dll
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\p2pgraph.dll
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\p2pgasvc.dll
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\p2p.dll
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\onex.dll
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\napstat.exe
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\napmontr.dll
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\napipsec.dll
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\mssha.dll
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\msdadiag.dll
2009-10-23 21:41:27 ----N---- C:\WINDOWS\system32\mmcperf.exe
2009-10-23 21:41:26 ----N---- C:\WINDOWS\system32\xpsp3res.dll
2009-10-23 21:41:26 ----N---- C:\WINDOWS\system32\xpsp2res.dll
2009-10-23 21:41:26 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
2009-10-23 21:41:26 ----N---- C:\WINDOWS\system32\windowscodecs.dll
2009-10-23 21:41:26 ----N---- C:\WINDOWS\system32\w3ssl.dll
2009-10-23 21:41:26 ----N---- C:\WINDOWS\system32\verclsid.exe
2009-10-23 21:41:26 ----N---- C:\WINDOWS\system32\tzchange.exe
2009-10-23 21:41:26 ----N---- C:\WINDOWS\system32\twext.dll
2009-10-23 21:41:26 ----N---- C:\WINDOWS\system32\tspkg.dll
2009-10-23 21:41:26 ----N---- C:\WINDOWS\system32\tsgqec.dll
2009-10-23 21:41:26 ----N---- C:\WINDOWS\system32\strmfilt.dll
2009-10-23 21:41:26 ----N---- C:\WINDOWS\system32\smbinst.exe
2009-10-23 21:41:26 ----N---- C:\WINDOWS\system32\slserv.exe
2009-10-23 21:41:26 ----N---- C:\WINDOWS\system32\slrundll.exe
2009-10-23 21:41:26 ----N---- C:\WINDOWS\system32\slgen.dll
2009-10-23 21:41:26 ----N---- C:\WINDOWS\system32\slextspk.dll
2009-10-23 21:41:26 ----N---- C:\WINDOWS\system32\slcoinst.dll
2009-10-23 21:41:26 ----N---- C:\WINDOWS\system32\setupn.exe
2009-10-23 21:41:26 ----N---- C:\WINDOWS\system32\sdhcinst.dll
2009-10-23 21:41:25 ----N---- C:\WINDOWS\system32\wuaueng1.dll
2009-10-23 21:41:25 ----N---- C:\WINDOWS\system32\wuauclt1.exe
2009-10-23 21:41:25 ----N---- C:\WINDOWS\system32\wshbth.dll
2009-10-23 21:41:25 ----N---- C:\WINDOWS\system32\wscsvc.dll
2009-10-23 21:41:25 ----N---- C:\WINDOWS\system32\wscntfy.exe
2009-10-23 21:41:25 ----N---- C:\WINDOWS\system32\wmphoto.dll
2009-10-23 21:41:25 ----N---- C:\WINDOWS\system32\wlanapi.dll
2009-10-23 21:41:25 ----N---- C:\WINDOWS\system32\winshfhc.dll
2009-10-23 21:41:25 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-10-23 21:41:24 ----N---- C:\WINDOWS\system32\xmlprovi.dll
2009-10-23 21:41:24 ----N---- C:\WINDOWS\system32\xmlprov.dll
2009-10-23 21:41:24 ----N---- C:\WINDOWS\slrundll.exe
2009-10-23 21:41:24 ----D---- C:\WINDOWS\system32\cs-cz
2009-10-23 21:41:24 ----A---- C:\WINDOWS\system32\xmllite.dll
2009-10-23 21:41:24 ----A---- C:\WINDOWS\system32\wuweb.dll
2009-10-23 21:41:24 ----A---- C:\WINDOWS\system32\wups.dll
2009-10-23 21:41:24 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-10-23 21:41:23 ----D---- C:\WINDOWS\provisioning
2009-10-23 21:41:22 ----D---- C:\WINDOWS\system32\cs
2009-10-23 21:41:22 ----D---- C:\WINDOWS\system32\bits
2009-10-23 21:41:22 ----D---- C:\WINDOWS\peernet
2009-10-23 21:41:22 ----D---- C:\WINDOWS\l2schemas
2009-10-23 21:39:06 ----D---- C:\WINDOWS\ServicePackFiles
2009-10-23 21:36:44 ----D---- C:\WINDOWS\network diagnostic
2009-10-23 21:34:47 ----A---- C:\WINDOWS\002696_.tmp
2009-10-23 21:34:31 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-10-23 21:32:54 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2009-10-23 21:32:53 ----D---- C:\WINDOWS\EHome
2009-10-23 21:29:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2009-10-23 21:28:00 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Skype
2009-10-23 21:26:34 ----D---- C:\Program Files\totalcmd
2009-10-23 21:26:34 ----A---- C:\WINDOWS\wincmd.ini
2009-10-23 21:25:41 ----D---- C:\Program Files\Skype
2009-10-23 21:25:40 ----D---- C:\Program Files\Common Files\Skype
2009-10-23 21:25:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2009-10-23 21:24:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\CyberLink
2009-10-23 21:24:00 ----D---- C:\Program Files\CyberLink
2009-10-23 21:17:33 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2009-10-23 21:16:57 ----D---- C:\WINDOWS\RegisteredPackages
2009-10-23 21:16:22 ----A---- C:\WINDOWS\system32\wstdecod.dll
2009-10-23 21:16:22 ----A---- C:\WINDOWS\system32\psisdecd.dll
2009-10-23 21:16:22 ----A---- C:\WINDOWS\system32\msyuv.dll
2009-10-23 21:16:22 ----A---- C:\WINDOWS\system32\msvidctl.dll
2009-10-23 21:16:21 ----A---- C:\WINDOWS\system32\ksuser.dll
2009-10-23 21:16:20 ----A---- C:\WINDOWS\system32\quartz.dll
2009-10-23 21:16:20 ----A---- C:\WINDOWS\system32\qedwipes.dll
2009-10-23 21:16:20 ----A---- C:\WINDOWS\system32\qedit.dll
2009-10-23 21:16:20 ----A---- C:\WINDOWS\system32\qdvd.dll
2009-10-23 21:16:20 ----A---- C:\WINDOWS\system32\qdv.dll
2009-10-23 21:16:20 ----A---- C:\WINDOWS\system32\qcap.dll
2009-10-23 21:16:20 ----A---- C:\WINDOWS\system32\qasf.dll
2009-10-23 21:16:20 ----A---- C:\WINDOWS\system32\mswebdvd.dll
2009-10-23 21:16:20 ----A---- C:\WINDOWS\system32\msdmo.dll
2009-10-23 21:16:20 ----A---- C:\WINDOWS\system32\mciqtz32.dll
2009-10-23 21:16:20 ----A---- C:\WINDOWS\system32\encapi.dll
2009-10-23 21:16:20 ----A---- C:\WINDOWS\system32\dswave.dll
2009-10-23 21:16:20 ----A---- C:\WINDOWS\system32\dmusic.dll
2009-10-23 21:16:20 ----A---- C:\WINDOWS\system32\dmsynth.dll
2009-10-23 21:16:20 ----A---- C:\WINDOWS\system32\dmstyle.dll
2009-10-23 21:16:20 ----A---- C:\WINDOWS\system32\dmscript.dll
2009-10-23 21:16:20 ----A---- C:\WINDOWS\system32\dmloader.dll
2009-10-23 21:16:20 ----A---- C:\WINDOWS\system32\dmime.dll
2009-10-23 21:16:20 ----A---- C:\WINDOWS\system32\dmcompos.dll
2009-10-23 21:16:20 ----A---- C:\WINDOWS\system32\dmband.dll
2009-10-23 21:16:20 ----A---- C:\WINDOWS\system32\devenum.dll
2009-10-23 21:16:20 ----A---- C:\WINDOWS\system32\amstream.dll
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\dxdllreg.exe
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\dxdiagn.dll
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\dxdiag.exe
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\dx8vb.dll
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\dx7vb.dll
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\dsound3d.dll
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\dsound.dll
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\dsdmoprp.dll
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\dsdmo.dll
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\dpwsockx.dll
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\dpvvox.dll
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\dpvsetup.exe
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\dpvoice.dll
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\dpvacm.dll
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\dpnsvr.exe
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\dpnlobby.dll
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\dpnhupnp.dll
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\dpnhpast.dll
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\dpnet.dll
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\dpnaddr.dll
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\dpmodemx.dll
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\dplayx.dll
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\dplaysvr.exe
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\ddrawex.dll
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\ddraw.dll
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\d3dim700.dll
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\d3d9.dll
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\d3d8thk.dll
2009-10-23 21:16:19 ----A---- C:\WINDOWS\system32\d3d8.dll
2009-10-23 21:14:52 ----RSD---- C:\WINDOWS\assembly
2009-10-23 21:14:52 ----D---- C:\WINDOWS\Microsoft.NET
2009-10-23 21:14:51 ----D---- C:\WINDOWS\system32\URTTemp
2009-10-23 21:12:54 ----A---- C:\WINDOWS\system32\TwnLib20.dll
2009-10-23 21:12:31 ----N---- C:\WINDOWS\system32\ImagXRA7.dll
2009-10-23 21:12:31 ----N---- C:\WINDOWS\system32\ImagXR7.dll
2009-10-23 21:12:31 ----N---- C:\WINDOWS\system32\ImagXpr7.dll
2009-10-23 21:12:31 ----N---- C:\WINDOWS\system32\ImagX7.dll
2009-10-23 21:12:27 ----D---- C:\Program Files\Common Files\Ahead
2009-10-23 21:12:27 ----A---- C:\WINDOWS\system32\NeroCheck.exe
2009-10-23 21:12:24 ----D---- C:\Program Files\Ahead
2009-10-23 21:11:26 ----D---- C:\Program Files\FreeRIP2
2009-10-23 21:10:53 ----A---- C:\WINDOWS\iun6002.exe
2009-10-23 21:10:51 ----D---- C:\Program Files\Codec Pack - All In 1
2009-10-23 21:10:23 ----A---- C:\WINDOWS\system32\javaws.exe
2009-10-23 21:10:23 ----A---- C:\WINDOWS\system32\javaw.exe
2009-10-23 21:10:23 ----A---- C:\WINDOWS\system32\java.exe
2009-10-23 21:10:10 ----A---- C:\WINDOWS\Codec Pack - All In 1 Setup Log.txt
2009-10-23 21:09:57 ----D---- C:\Program Files\Java
2009-10-23 21:09:55 ----D---- C:\Program Files\Common Files\Java
2009-10-23 21:09:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\DVD Shrink
2009-10-23 21:09:22 ----D---- C:\Program Files\DVD Shrink
2009-10-23 21:08:46 ----A---- C:\WINDOWS\DVDRegionFree.INI
2009-10-23 21:07:59 ----D---- C:\Program Files\DVD Region+CSS Free
2009-10-23 21:07:29 ----D---- C:\Program Files\dvd43
2009-10-23 21:07:05 ----D---- C:\Program Files\D-Tools
2009-10-23 21:06:04 ----D---- C:\Documents and Settings\Administrator\Data aplikací\ESET
2009-10-23 21:05:02 ----D---- C:\Program Files\ESET
2009-10-23 21:05:02 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2009-10-23 21:03:52 ----D---- C:\Program Files\WinRAR
2009-10-23 21:03:21 ----D---- C:\Program Files\Common Files\Adobe
2009-10-23 21:03:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2009-10-23 21:02:13 ----D---- C:\Program Files\Adobe
2009-10-23 21:02:06 ----D---- C:\Documents and Settings\All Users\Data aplikací\ACD Systems
2009-10-23 21:02:05 ----D---- C:\Program Files\Common Files\ACD Systems
2009-10-23 21:02:05 ----D---- C:\Program Files\ACD Systems
2009-10-23 21:01:22 ----D---- C:\WINDOWS\Downloaded Installations
2009-10-23 20:59:40 ----D---- C:\WINDOWS\Corel
2009-10-23 20:56:35 ----D---- C:\Program Files\Common Files\Corel
2009-10-23 20:56:34 ----D---- C:\Program Files\Corel
2009-10-23 20:53:12 ----A---- C:\WINDOWS\ODBC.INI
2009-10-23 20:53:10 ----A---- C:\WINDOWS\system32\mdimon.dll
2009-10-23 20:52:49 ----D---- C:\Program Files\Common Files\DESIGNER
2009-10-23 20:52:41 ----D---- C:\WINDOWS\SHELLNEW
2009-10-23 20:51:59 ----D---- C:\Program Files\Microsoft Office
2009-10-23 20:49:00 ----SHD---- C:\RECYCLER
2009-10-23 20:48:20 ----RA---- C:\WINDOWS\system32\vuins32.dll
2009-10-23 20:48:20 ----RA---- C:\WINDOWS\system32\difxapi.dll
2009-10-23 20:48:17 ----D---- C:\WINDOWS\vnDrvBas
2009-10-23 20:47:57 ----D---- C:\Program Files\Media Key
2009-10-23 20:47:18 ----D---- C:\WINDOWS\nview
2009-10-23 20:47:18 ----A---- C:\WINDOWS\system32\nvudisp.exe
2009-10-23 20:47:10 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2009-10-23 20:46:48 ----D---- C:\NVIDIA
2009-10-23 20:46:14 ----RA---- C:\WINDOWS\system32\ChCfg.exe
2009-10-23 20:45:53 ----RA---- C:\WINDOWS\system32\RTLCPL.exe
2009-10-23 20:45:53 ----RA---- C:\WINDOWS\system32\RtlCPAPI.dll
2009-10-23 20:45:53 ----RA---- C:\WINDOWS\Alcrmv.exe
2009-10-23 20:45:52 ----RA---- C:\WINDOWS\soundman.exe
2009-10-23 20:45:48 ----RA---- C:\WINDOWS\avrack.ini
2009-10-23 20:45:48 ----D---- C:\Program Files\Realtek Sound Manager
2009-10-23 20:45:48 ----D---- C:\Program Files\AvRack
2009-10-23 20:45:38 ----D---- C:\Program Files\Realtek AC97
2009-10-23 20:45:32 ----RA---- C:\WINDOWS\alcupd.exe
2009-10-23 20:43:52 ----D---- C:\Program Files\AMD
2009-10-23 20:41:59 ----SD---- C:\WINDOWS\system32\Microsoft
2009-10-23 20:41:58 ----HD---- C:\Program Files\InstallShield Installation Information
2009-10-23 20:41:06 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-10-23 20:40:37 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-10-23 20:40:22 ----D---- C:\Program Files\VIA
2009-10-23 20:40:16 ----D---- C:\Program Files\Common Files\InstallShield
2009-10-23 20:39:08 ----SHD---- C:\WINDOWS\Installer
2009-10-23 20:39:05 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Identities
2009-10-23 20:39:01 ----HD---- C:\Program Files\Uninstall Information
2009-10-23 20:38:57 ----ASH---- C:\Documents and Settings\Administrator\Data aplikací\desktop.ini
2009-10-23 20:38:56 ----SD---- C:\Documents and Settings\Administrator\Data aplikací\Microsoft
2009-10-23 20:38:51 ----SHD---- C:\System Volume Information
2009-10-23 20:38:50 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-10-23 20:35:58 ----D---- C:\WINDOWS\system32\xircom
2009-10-23 20:35:58 ----D---- C:\Program Files\xerox
2009-10-23 20:35:58 ----D---- C:\Program Files\microsoft frontpage
2009-10-23 20:35:42 ----A---- C:\WINDOWS\control.ini
2009-10-23 20:35:42 ----A---- C:\AUTOEXEC.BAT
2009-10-23 20:35:36 ----A---- C:\WINDOWS\OEWABLog.txt
2009-10-23 20:35:31 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-10-23 20:34:47 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-10-23 20:34:47 ----RD---- C:\WINDOWS\Offline Web Pages
2009-10-23 20:34:47 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-10-23 20:34:42 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-10-23 20:34:19 ----D---- C:\WINDOWS\system32\DirectX
2009-10-23 20:33:49 ----A---- C:\WINDOWS\system32\safrslv.dll
2009-10-23 20:33:49 ----A---- C:\WINDOWS\system32\safrdm.dll
2009-10-23 20:33:49 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2009-10-23 20:33:49 ----A---- C:\WINDOWS\system32\racpldlg.dll
2009-10-23 20:33:49 ----A---- C:\WINDOWS\system32\atrace.dll
2009-10-23 20:33:46 ----A---- C:\WINDOWS\system32\desktop.ini
2009-10-23 20:33:46 ----A---- C:\WINDOWS\desktop.ini
2009-10-23 20:33:38 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2009-10-23 20:33:38 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2009-10-23 20:33:38 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2009-10-23 20:33:37 ----A---- C:\WINDOWS\system32\acctres.dll
2009-10-23 20:33:36 ----D---- C:\Program Files\Common Files\Services
2009-10-23 20:33:35 ----A---- C:\WINDOWS\system32\inetres.dll
2009-10-23 20:33:31 ----SD---- C:\WINDOWS\Tasks
2009-10-23 20:33:31 ----A---- C:\WINDOWS\system32\icwphbk.dll
2009-10-23 20:33:31 ----A---- C:\WINDOWS\system32\icwdial.dll
2009-10-23 20:33:30 ----A---- C:\WINDOWS\system32\isign32.dll
2009-10-23 20:33:30 ----A---- C:\WINDOWS\system32\inetcfg.dll
2009-10-23 20:33:30 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2009-10-23 20:33:28 ----D---- C:\Program Files\Common Files\MSSoap
2009-10-23 20:33:23 ----D---- C:\WINDOWS\srchasst
2009-10-23 20:33:22 ----D---- C:\WINDOWS\system32\Macromed
2009-10-23 20:33:21 ----D---- C:\Program Files\Movie Maker
2009-10-23 20:33:21 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2009-10-23 20:33:21 ----A---- C:\WINDOWS\system32\qmgr.dll
2009-10-23 20:33:16 ----D---- C:\WINDOWS\system32\Restore
2009-10-23 20:33:16 ----D---- C:\WINDOWS\PCHealth
2009-10-23 20:33:16 ----A---- C:\WINDOWS\system32\srsvc.dll
2009-10-23 20:33:16 ----A---- C:\WINDOWS\system32\srrstr.dll
2009-10-23 20:33:16 ----A---- C:\WINDOWS\system32\srclient.dll
2009-10-23 20:33:15 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2009-10-23 20:33:15 ----A---- C:\WINDOWS\system32\msconf.dll
2009-10-23 20:33:15 ----A---- C:\WINDOWS\system32\mnmdd.dll
2009-10-23 20:33:15 ----A---- C:\WINDOWS\system32\ils.dll
2009-10-23 20:33:12 ----D---- C:\Program Files\NetMeeting
2009-10-23 20:33:12 ----A---- C:\WINDOWS\system32\msoert2.dll
2009-10-23 20:33:12 ----A---- C:\WINDOWS\system32\msoeacct.dll
2009-10-23 20:33:11 ----D---- C:\Program Files\Outlook Express
2009-10-23 20:33:11 ----A---- C:\WINDOWS\system32\schedsvc.dll
2009-10-23 20:33:11 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-10-23 20:33:10 ----A---- C:\WINDOWS\system32\mstinit.exe
2009-10-23 20:33:10 ----A---- C:\WINDOWS\system32\mstask.dll
2009-10-23 20:33:04 ----D---- C:\Program Files\Internet Explorer
2009-10-23 20:33:04 ----D---- C:\Program Files\Common Files\System
2009-10-23 20:32:32 ----D---- C:\Program Files\ComPlus Applications
2009-10-23 20:32:31 ----A---- C:\WINDOWS\vbaddin.ini
2009-10-23 20:32:31 ----A---- C:\WINDOWS\vb.ini
2009-10-23 20:32:28 ----D---- C:\WINDOWS\Registration
2009-10-23 20:32:23 ----HD---- C:\Program Files\WindowsUpdate
2009-10-23 20:32:22 ----D---- C:\Program Files\Windows Media Player
2009-10-23 20:32:22 ----D---- C:\Program Files\Online Services
2009-10-23 20:32:17 ----D---- C:\Program Files\Messenger
2009-10-23 20:32:12 ----D---- C:\Program Files\MSN Gaming Zone
2009-10-23 20:32:12 ----A---- C:\WINDOWS\system32\write.exe
2009-10-23 20:32:01 ----A---- C:\WINDOWS\system32\accwiz.exe
2009-10-23 20:32:00 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-10-23 20:32:00 ----A---- C:\WINDOWS\system32\sndrec32.exe
2009-10-23 20:32:00 ----A---- C:\WINDOWS\system32\hypertrm.dll
2009-10-23 20:32:00 ----A---- C:\WINDOWS\system32\hticons.dll
2009-10-23 20:32:00 ----A---- C:\WINDOWS\system32\avwav.dll
2009-10-23 20:32:00 ----A---- C:\WINDOWS\system32\avmeter.dll
2009-10-23 20:31:59 ----A---- C:\WINDOWS\system32\winchat.exe
2009-10-23 20:31:59 ----A---- C:\WINDOWS\system32\avtapi.dll
2009-10-23 20:31:51 ----A---- C:\WINDOWS\system32\charmap.exe
2009-10-23 20:31:51 ----A---- C:\WINDOWS\system32\getuname.dll
2009-10-23 20:31:50 ----A---- C:\WINDOWS\system32\winmine.exe
2009-10-23 20:31:50 ----A---- C:\WINDOWS\system32\sol.exe
2009-10-23 20:31:50 ----A---- C:\WINDOWS\system32\calc.exe
2009-10-23 20:31:49 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2009-10-23 20:31:49 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2009-10-23 20:31:49 ----A---- C:\WINDOWS\system32\tslabels.ini
2009-10-23 20:31:49 ----A---- C:\WINDOWS\system32\tskill.exe
2009-10-23 20:31:49 ----A---- C:\WINDOWS\system32\reset.exe
2009-10-23 20:31:49 ----A---- C:\WINDOWS\system32\rdshost.exe
2009-10-23 20:31:49 ----A---- C:\WINDOWS\system32\mshearts.exe
2009-10-23 20:31:49 ----A---- C:\WINDOWS\system32\freecell.exe
2009-10-23 20:31:48 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2009-10-23 20:31:48 ----A---- C:\WINDOWS\system32\tscon.exe
2009-10-23 20:31:48 ----A---- C:\WINDOWS\system32\shadow.exe
2009-10-23 20:31:48 ----A---- C:\WINDOWS\system32\rwinsta.exe
2009-10-23 20:31:48 ----A---- C:\WINDOWS\system32\regini.exe
2009-10-23 20:31:48 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2009-10-23 20:31:48 ----A---- C:\WINDOWS\system32\qwinsta.exe
2009-10-23 20:31:48 ----A---- C:\WINDOWS\system32\qprocess.exe
2009-10-23 20:31:48 ----A---- C:\WINDOWS\system32\qappsrv.exe
2009-10-23 20:31:48 ----A---- C:\WINDOWS\system32\msg.exe
2009-10-23 20:31:48 ----A---- C:\WINDOWS\system32\logoff.exe
2009-10-23 20:31:48 ----A---- C:\WINDOWS\system32\cdmodem.dll
2009-10-23 20:31:47 ----A---- C:\WINDOWS\system32\xolehlp.dll
2009-10-23 20:31:47 ----A---- C:\WINDOWS\system32\mtxoci.dll
2009-10-23 20:31:47 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2009-10-23 20:31:47 ----A---- C:\WINDOWS\system32\msdtctm.dll
2009-10-23 20:31:47 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2009-10-23 20:31:47 ----A---- C:\WINDOWS\system32\msdtclog.dll
2009-10-23 20:31:47 ----A---- C:\WINDOWS\system32\msdtc.exe
2009-10-23 20:31:45 ----A---- C:\WINDOWS\system32\stclient.dll
2009-10-23 20:31:45 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2009-10-23 20:31:45 ----A---- C:\WINDOWS\system32\mtxex.dll
2009-10-23 20:31:45 ----A---- C:\WINDOWS\system32\mtxdm.dll
2009-10-23 20:31:45 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2009-10-23 20:31:45 ----A---- C:\WINDOWS\system32\comrepl.dll
2009-10-23 20:31:45 ----A---- C:\WINDOWS\system32\comaddin.dll
2009-10-23 20:31:45 ----A---- C:\WINDOWS\system32\colbact.dll
2009-10-23 20:31:44 ----A---- C:\WINDOWS\system32\comuid.dll
2009-10-23 20:31:44 ----A---- C:\WINDOWS\system32\comsnap.dll
2009-10-23 20:31:44 ----A---- C:\WINDOWS\system32\clbcatq.dll
2009-10-23 20:31:44 ----A---- C:\WINDOWS\system32\clbcatex.dll
2009-10-23 20:31:44 ----A---- C:\WINDOWS\system32\catsrvps.dll
2009-10-23 20:31:44 ----A---- C:\WINDOWS\system32\catsrv.dll
2009-10-23 20:31:35 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2009-10-23 20:31:35 ----A---- C:\WINDOWS\system32\servdeps.dll
2009-10-23 20:31:35 ----A---- C:\WINDOWS\system32\mmfutil.dll
2009-10-23 20:31:34 ----A---- C:\WINDOWS\system32\cmprops.dll
2009-10-23 20:31:30 ----D---- C:\Program Files\Windows NT
2009-10-23 20:31:30 ----D---- C:\Program Files\MSN
2009-10-23 20:31:30 ----A---- C:\WINDOWS\system32\mplay32.exe
2009-10-23 20:31:29 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-10-23 20:31:29 ----A---- C:\WINDOWS\system32\wuauclt.exe
2009-10-23 20:31:29 ----A---- C:\WINDOWS\system32\spider.exe
2009-10-23 20:31:29 ----A---- C:\WINDOWS\system32\mspaint.exe
2009-10-23 20:31:29 ----A---- C:\WINDOWS\system32\clipbrd.exe
2009-10-23 20:31:28 ----A---- C:\WINDOWS\system32\wuauserv.dll
2009-10-23 20:31:28 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2009-10-23 20:31:28 ----A---- C:\WINDOWS\system32\mstscax.dll
2009-10-23 20:31:28 ----A---- C:\WINDOWS\system32\mstsc.exe
2009-10-23 20:31:27 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2009-10-23 20:31:27 ----A---- C:\WINDOWS\system32\termsrv.dll
2009-10-23 20:31:27 ----A---- C:\WINDOWS\system32\sessmgr.exe
2009-10-23 20:31:27 ----A---- C:\WINDOWS\system32\remotepg.dll
2009-10-23 20:31:27 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2009-10-23 20:31:27 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2009-10-23 20:31:27 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2009-10-23 20:31:27 ----A---- C:\WINDOWS\system32\rdpclip.exe
2009-10-23 20:31:27 ----A---- C:\WINDOWS\system32\rdchost.dll
2009-10-23 20:31:26 ----D---- C:\WINDOWS\system32\MsDtc
2009-10-23 20:31:26 ----D---- C:\WINDOWS\system32\Com
2009-10-23 20:31:26 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2009-10-23 20:31:26 ----A---- C:\WINDOWS\system32\icaapi.dll
2009-10-23 20:31:26 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2009-10-23 20:31:26 ----A---- C:\WINDOWS\system32\catsrvut.dll
2009-10-23 20:31:25 ----A---- C:\WINDOWS\system32\comsvcs.dll
2009-10-23 20:31:22 ----A---- C:\WINDOWS\system32\licwmi.dll
2009-09-25 07:37:30 ----N---- C:\WINDOWS\system32\ieencode.dll

======List of files/folders modified in the last 1 months======

2009-10-23 22:24:07 ----A---- C:\WINDOWS\system.ini
2009-10-23 21:55:31 ----A---- C:\WINDOWS\win.ini
2009-10-23 21:36:12 ----RASH---- C:\NTDETECT.COM
2009-09-25 07:37:33 ----A---- C:\WINDOWS\system32\shdocvw.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\System32\DRIVERS\AmdK8.sys [2005-03-09 42496]
R1 easdrv;easdrv; C:\WINDOWS\System32\DRIVERS\easdrv.sys [2007-10-25 27144]
R1 epfwtdi;epfwtdi; C:\WINDOWS\System32\DRIVERS\epfwtdi.sys [2007-10-25 53768]
R2 eamon;EAMON; C:\WINDOWS\System32\DRIVERS\eamon.sys [2007-10-25 33800]
R2 epfw;epfw; C:\WINDOWS\System32\DRIVERS\epfw.sys [2007-10-25 50696]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2007-03-08 4027840]
R3 dvd43llh;dvd43llh; C:\WINDOWS\System32\DRIVERS\dvd43llh.sys [2009-10-23 18816]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\System32\DRIVERS\Epfwndis.sys [2007-10-25 30728]
R3 FET5X86V;VIA Rhine-Family Fast-Ethernet Adapter Driver Service; C:\WINDOWS\System32\DRIVERS\fetnd5bv.sys [2007-04-17 42496]
R3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2007-12-05 7435392]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2009-10-23 9856]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\System32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 pxtdrpog;pxtdrpog; \??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\pxtdrpog.sys []
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;Eset Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2007-10-25 455936]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\System32\nvsvc32.exe [2007-12-05 155716]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 EhttpSrv;Eset HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2007-10-25 18176]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------
Nahoru
FunTomason
Návštěvník
Návštěvník
Příspěvky: 33
Registrován: 24 říj 2009 11:14

Re: MBR sector of the 1. physical disk - Win32/Mebroot.K trojan

#2 Příspěvek od FunTomason »

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe catchme.sys CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x89410918]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\atapi -> 0x89410918
Warning: possible MBR rootkit infection !
user & kernel MBR OK
malicious code @ sector 0x950a600 size 0x1a8 !
copy of MBR has been found in sector 62 !
PE file found in sector at 0x0950A600 !
Use "Recovery Console" command "fixmbr" to clear infection !
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“